last executing test programs: 4m41.345558708s ago: executing program 4 (id=92): r0 = syz_usb_connect$lan78xx(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000040)={0x20, 0x9, 0x6d, {0x6d, 0x23, "9d713ff4858796401e6a8d90c90b98897fab9946ffaa0409ba4c41b9f918e44e9252f9329b4bef6e144d24827fbd858ee4bfd75d0068707d15772b566ceb02272f707449c62e04a52d53667013913089eabd6b5f32accde33b79b5e7b68855ebe96611b11520e37c411d74"}}, &(0x7f00000000c0)={0x0, 0x3, 0xdb, @string={0xdb, 0x3, "8969f2ea12295370630ce247addcc2a5083922d455daf1687d33e9a666450fd2dd4f27fc73e4041d6f7dec76ea8ad8ef9268fd0ebce2a4cec08392deb9972c81a4efa001fdd83316861809c9c2f1c13cc9be59ada9e1bb7f6f26ff067b966f0b0bd5a13a33a2b6a426f8d9a5cc4266466b6395f479ba0dc5c7cacc108974d8e4382bd616d0a91da79c5ad39cbe842c01c9ce981402b0b3a4772b5bb252df8bd733596f02d91cf5c56b51c646758d915af12caf13608e53e436ad050cbc769a21032e89753155a61dfbf1790572fdb4603155c1d57fcdb080a9"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000200)={0x40, 0x0, 0xf7, "4513efcc4c86f678bede424c124275ec23580f39c1c89dbbd57168428bd551b60be0f869c1d8640d3919077c9ba12902832dc18a8d970be0cf9d1f7a399dcaaf68c4ba9ce6c4fa938d40a7bafb3b447db17dd41bb4f3e67b59deabfcc39d7348c319e1a55eff6d2ab9601d5135f435b8759bcbfd3713bebe84913fe559e46f050f482b1872404c99b22800bff69b9ce97f7b576ce0b32bf631b14e6d486497f7c4f04374ecd4a31dea61ddce44e5ae3c5e10cdfaa355970e39933ea678da6a6a2bba6694eec4d06823e838c6b1320479582ace61bf29824be08787eacb54da9ccdd9cc4e74fe0cbb0ca96a6ba882bf0d7954fcc2b7831e"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x82}, &(0x7f0000000380)={0xc0, 0xa1, 0x4, 0x200}, &(0x7f00000003c0)={0x40, 0xa0, 0x4, 0x6}, &(0x7f0000000400)={0xc0, 0xa2, 0x2f, "da16bf835667c2f7ab8974972862c986028197d4b9c0fb948408ec01fb4f0cb7e55ae4cbbea8eb3b72ff2a6af3aad6"}}) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f0000000480)={0x60, 0x24, 0x8b, {0x8b, 0x9, "2a7e600f946adb9d03aeca9462d54e8868a69622c3d2dd18e585cea6bb28df48e2c80c2f09195a6b9a4737471e7bb9c5df01b0a94b5ce7b3dec2fbdd0e1e980fce8398c7eacd2916800aa0e0d6457353d968be04f77eb25cb416e381bde4e6ab1491265413ad1e5a00fad00765d287134ce739d6bbedcb4bfe93f4449b526c381c0fcff45998cf4f8d"}}, &(0x7f0000000540)={0x0, 0x3, 0x4d, @string={0x4d, 0x3, "485456db9e9319400e962fe48ea3977f988fb696fc981c8a20dd1bf8d9a41a2b4b39163c3ac31450a6c3a78a41b9731b12a04aefa1c05ffe208b4d14b058eea6bfea03ea0d99778c0e3d0e"}}, &(0x7f00000005c0)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x3, 0x5, 0x7}, @wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0x2, 0x7, 0xa, 0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x2, 0x8, 0x6, 0xa}, @ptm_cap={0x3}, @generic={0xd, 0x10, 0x2, "15fa2909bac171e5e92a"}]}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x0, 0x2, 0x8, "2b06647d", "6dbb0e1d"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x1, 0x5, 0x1, 0x1, 0xa54, 0x2}}}, &(0x7f0000000b00)={0x84, &(0x7f00000006c0)={0x40, 0xd, 0x6f, "737cb0a7858e0000dbb41557e6580c449a4f8b68bc5ef8f80db2d28945bbf79f84919feeb49859715a9f527e849676f47dd12987e4b8c9abe050f2eb77946acb185160e9e2490113d4ff7badc9428cc3d039829783471be779da8346e92b748e3f6ad0cf1dc7b6a5bbccb30f7862d1"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000007c0)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x100, 0xa0}}, &(0x7f0000000840)={0x40, 0x7, 0x2, 0x8000}, &(0x7f0000000880)={0x40, 0x9, 0x1, 0x9}, &(0x7f00000008c0)={0x40, 0xb, 0x2, '=U'}, &(0x7f0000000900)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000940)={0x40, 0x13, 0x6, @random="7a5553b58ec6"}, &(0x7f0000000980)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f00000009c0)={0x40, 0x19, 0x2, "818f"}, &(0x7f0000000a00)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000a40)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000a80)={0x40, 0x1e, 0x1, 0x3b}, &(0x7f0000000ac0)={0x40, 0x21, 0x1, 0x8}}) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000bc0)=[{}, {}], 0x2, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000c00), 0x20900, 0x0) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000001040)={0x1, 0x1, 0x1b, 0x12, 0x49, &(0x7f0000000c40)}) ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f0000001080)) ioctl$TCSBRK(r2, 0x5409, 0x401) syz_usb_control_io$lan78xx(r0, &(0x7f00000012c0)={0x14, &(0x7f00000010c0)={0x0, 0x23, 0xf4, {0xf4, 0x22, "4edcf51d9968616452c3a51a77ff751c7203df79e20b8ad8875aeffbe2ae7e60e7df5ab2790d4f0717b8ed4a60861927d5d2b98a0c0ba9b93a6fb210f35cfaac18a7464866d6f4cb7aca3397d769449392a3d4ace3366e046cf72822ed2df5b3193a24c508afca7490455022770e06642b4040f81fd6c7acef76a795417c3c98ece2b2739a007f0f8966dd477eb923152a1dc6273b56ed5cd9f9d1f8af7bf3f4c0076ab9b02478edd5ae72eb47c0ad956de8d0c7235138a38d92f973aeebbc67f5b5a5c1d5ad0f99f538c755903a110639d4e700a7ed8221a1acb387d5e476f4056255cc38af18254076b9b1fad9346c4ed9"}}, &(0x7f00000011c0)={0x0, 0x3, 0xc9, @string={0xc9, 0x3, "db6a949dd1a5b6af8b042581446324f54cb53088ba32b2fcf51d3434026133b8edcc0f219d1285b248a6b8bed618679c2ac63bf3496d3d4ed1de6c75d1a6f7df788ffc71b7f640d70c134d672455245c09a31db8b423c85c7659e1ead30b360f7662fe124e7e5144c8da7ccf493a22a03ed38abfdec7a9f9a8c2929df6d94cb232bb17fe4cf9e670bd0b15025c0018b1383e731deede94a53d1f4a459e5bcc04bd34e330d8b04d22a9ef9dbd547df4c4b4992f057dce895431d00717ff0fd19ecd418a3c38e616"}}}, &(0x7f0000001480)={0x34, &(0x7f0000001300)={0xccf1c2390b5203d2, 0x17, 0xc, "e70ea66b03b1c6a97f6c89c3"}, &(0x7f0000001340)={0x0, 0xa, 0x1, 0x13}, &(0x7f0000001380)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000013c0)={0xc0, 0xa1, 0x4, 0x8}, &(0x7f0000001400)={0x40, 0xa0, 0x4}, &(0x7f0000001440)={0xc0, 0xa2, 0x2f, "d6f28cbeb19d02b4c09c1d613311f473b437007aaae4694f0211159211947c6d8bb4b05e5cca86cc97c5d46d8750e8"}}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000014c0)='veth1_to_batadv\x00', 0x10) pipe(&(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000001540)=0xffffffff) r5 = syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000001580)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r5, &(0x7f0000001740)={0x14, &(0x7f00000015c0)={0x40, 0x21, 0x6b, {0x6b, 0x21, "b6cbb9f5b154c4fb2899c286a28d4609e1871d4417042953caeba9615ed2120e4690c49f0f67a9d2eca7f183104bd940bee46592ab744f977f88687a0842f5e1b54cc449a18aecf831acc251f3aac43c6d6cf5cd1faeda452f1391adb346ed7bf59af53182ae1ec4c1"}}, &(0x7f0000001640)={0x0, 0x3, 0xd3, @string={0xd3, 0x3, "e203ef94791d196d08d3e8aa2fd226ceab652597072de134cb07a54de37ad9bd6d551da19f154efa6a79945f0fedfc8049b3ce1be1bc96056fa4083cdddcfdedce7d87c73a3e4338c349549592dc5dd1d6dba75b38e81654fa8673abab70fd1922e21a8355e3e23e780480b831854366d11bed2cf283f8b18eb0b5ff2bb4d1dec4216ae8d2af613c933de7378b168241f8f9acdf875160b6f35a67715ba52b0f003c146f89900e18f0efc1648d0bf3dfdc17e84dfdefeb0ee3a1e2c65c61579fa91e2193f7e8f534c4b3760960a5a7d8a8"}}}, &(0x7f0000001940)={0x2c, &(0x7f0000001780)={0x20, 0x11, 0x7b, "f95987bdbb311c0d84c32b2bcbbc6ba1199ca46cffff0aeba66c600d014612dea69ab7aa860a9d51319b605602355a1ca4bd301f233ad91778e672c607ccda088373f05455c2555baad6f880a1d452604963119f2525b99e251f9938ba1e9c47d4124aa367077eba12aed8362b3824eb8268f07f433146a6c70698"}, &(0x7f0000001840)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000001880)={0x0, 0x8, 0x1, 0xff}, &(0x7f00000018c0)={0xc0, 0x5, 0x4, "4e98f6d6"}, &(0x7f0000001900)}) sendmsg$AUDIT_GET_FEATURE(r4, &(0x7f0000001a40)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x10, 0x3fb, 0x200, 0x70bd2b, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4080}, 0x84) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000001b80)={0x14, &(0x7f0000001a80)={0x0, 0x23, 0x7f, {0x7f, 0x9, "c5f28475ed056d708c910f86e666cbb6d259efa1ab6752a1e99d51740c7ce60001972405edc73e887527cd6248be53c48e420e2f60a686f41c4421efd0bf2af8aba771b1b9a8fe3a4aa9acb8da6d4cfef3b96b687dfdee0488cd858cc87df14e6f47e24a7955a6a11a0bf6e596ce2a2c6326460b0d9f7f0b1bf2d84d00"}}, &(0x7f0000001b40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41d}}}, &(0x7f0000001e80)={0x34, &(0x7f0000001bc0)={0x60, 0x16, 0x89, "bd4f6014d0d981b1cbb263751013f1e823dae34a92cac69b7b70b0ab57b3945db68c6f2640e89088b17169726c1495200e9f37ad2a9d347572fb4c1c9364f99cf1259997275bf0869a4a61f4b23256da827d6442c34cfc9ffdbf96a874fb3da6920efb5669f2daea981cf1807abe6c5c00514a06ad700e4e5c79c463390f6f56433cf34c1a234d0341"}, &(0x7f0000001c80)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000001cc0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000001d00)={0x20, 0x0, 0xee, {0xec, "a6c233062adcad120536e6523780b7529a35ed0b788fd3f10c2f30d371a2f1540cff105bd8c99232329ee07c8de3555e98604410cd988ed3c16b68108f7770e826403cd13611d7bd2790ba10c199e6980540e2b0799f7f16069944ad0d660f5d2a72ea466c1349dbae699cc98775cfcf76a30aa6858f1aedd5c8468696e14d8cd336d7656569b33e7e84b943126b9aeedcb913bcf6d8b91655b18ebf78a3af25f8457bbd107c9c9ec9b1e58560c96c9a5d7eb40d13a82be398eca02f2ff7d0c341af0fc0034e03dc9844276211e5f375eaa9f41f3112b4c7bee46a5292945d568a3f53477feb4efca70c4333"}}, &(0x7f0000001e00)={0x20, 0x1, 0x1, 0x3}, &(0x7f0000001e40)={0x20, 0x0, 0x1, 0xf}}) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_xfrm(r4, &(0x7f0000002080)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002040)={&(0x7f0000001f00)=@getsadinfo={0x12c, 0x23, 0x100, 0x70bd25, 0x25dfdbfe, 0x0, [@algo_comp={0x110, 0x3, {{'lzs\x00'}, 0x640, "48552341b884474844b6af4e390bac636f822c243577e5f78f78070c2c2e030fbe86ff8b89d87964862829a634a089376ebbc338f66904d80512b6cfdc2c9244a75ef38867440a158668893ade2108958918e7736190c478e451946e1eaf2c0b0783bf34641b876d3fcfc134e8c7b33c02f4acefa2b1f388c4ef7b75870608fc4ed9d59f32e25820d5226be7d3e321ed26667a44acbc7ab0e0c28326b6bf23b1eb71debfe2d7f128ad6064259600a7b38ec84036e42452e31b45cebffdab68dc9ffaed335536e167"}}, @proto={0x5}]}, 0x12c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f00000020c0)=0x2) r7 = accept4$unix(r4, &(0x7f0000002100)=@abs, &(0x7f0000002180)=0x6e, 0x0) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r7) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f00000021c0)={{0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, {0xa, 0x4e20, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0xffffffffffffffff, {[0x1, 0x3a, 0x1, 0x9, 0x8, 0x8, 0x3d21, 0x83c]}}, 0x5c) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002280), r3) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000022c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000002380)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x3c, r8, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x6, 0x77}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x8, 0x17]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x4000814) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000002400)={0x1, &(0x7f00000023c0)=[{0x5, 0xf, 0x4, 0x3}]}) mkdirat(r4, &(0x7f0000002440)='./file0\x00', 0x48) 4m39.361712408s ago: executing program 4 (id=100): socket$inet(0xa, 0x1, 0x0) r0 = openat$sysfs(0xffffff9c, 0x0, 0x0, 0x10) finit_module(r0, 0x0, 0x0) (async) finit_module(r0, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_setup(0x3d48, &(0x7f0000000340)={0x0, 0xb140, 0x7128, 0x6, 0x196}) (async) io_uring_setup(0x3d48, &(0x7f0000000340)={0x0, 0xb140, 0x7128, 0x6, 0x196}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) (async) sendmsg$nl_route(r1, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) (async) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) syz_open_dev$vim2m(0x0, 0x8001, 0x2) (async) syz_open_dev$vim2m(0x0, 0x8001, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) socket$l2tp(0x2, 0x2, 0x73) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xff}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000540)={0xf0f024, 0xfffffffd}) r6 = syz_open_dev$video(&(0x7f0000000440), 0x9, 0x244603) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x3, 0x1000, 0xfc, 0x86c}}) (async) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x3, 0x1000, 0xfc, 0x86c}}) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000100)={0x2, @pix_mp={0x3, 0x0, 0x3231564e, 0x9, 0x3, [{0x20101, 0x9fb}, {0xb, 0x4}, {0x6, 0x1}, {0x0, 0x7fffffff}, {0x1, 0x8}, {0x3, 0x2007}, {0x7, 0x8}, {0x6, 0x2d19}], 0x1, 0x0, 0x4, 0x2, 0x1}}) (async) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000100)={0x2, @pix_mp={0x3, 0x0, 0x3231564e, 0x9, 0x3, [{0x20101, 0x9fb}, {0xb, 0x4}, {0x6, 0x1}, {0x0, 0x7fffffff}, {0x1, 0x8}, {0x3, 0x2007}, {0x7, 0x8}, {0x6, 0x2d19}], 0x1, 0x0, 0x4, 0x2, 0x1}}) socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) listen(r2, 0x4) recvmmsg(r2, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}], 0x1, 0x40000100, 0x0) r7 = userfaultfd(0x80001) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000498000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe3000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x5e}, 0x68) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x8b}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) socket$packet(0x11, 0x2, 0x300) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000240), 0x10, &(0x7f0000000300)={&(0x7f00000003c0)={0x6, 0x14, 0x5, {0x0, 0xea60}, {0x0, 0xea60}, {0x4, 0x0, 0x1, 0x1}, 0x1, @can={{0x1, 0x0, 0x1}, 0x3, 0x1, 0x0, 0x0, "788a6792756a4f63"}}, 0x48}}, 0x0) (async) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000240), 0x10, &(0x7f0000000300)={&(0x7f00000003c0)={0x6, 0x14, 0x5, {0x0, 0xea60}, {0x0, 0xea60}, {0x4, 0x0, 0x1, 0x1}, 0x1, @can={{0x1, 0x0, 0x1}, 0x3, 0x1, 0x0, 0x0, "788a6792756a4f63"}}, 0x48}}, 0x0) 4m38.258069008s ago: executing program 4 (id=102): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="280000001e00431b0000000000000000070000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n', @ANYRES32=0x0], 0x28}}, 0x0) r6 = open$dir(&(0x7f0000000180)='./file1\x00', 0x1, 0x100) r7 = openat(r6, &(0x7f0000000240)='./file1\x00', 0x48240, 0x1) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40094}, 0x20000804) write$binfmt_elf64(r7, &(0x7f0000000380)=ANY=[@ANYBLOB="7f454c4600040000ff7f08000000000003003e00ecffffff98030000000000004000000000000000560000000000000000000000050038000100000002000000030000000500000000000000010000000d2000000040000000000000ffffffffe20000000000000004000000000000000200000000000000d31f9e1e2be7da77d7e9d9c36d71a24483dc097006d40d4f488859cb559787d0364ecdf18aaa829efd6fd4ce7843bba3a0f976041d407e45d72a6c6461100cbd637587f9c51a88e626be1adf21885134bd45eee978f9fa8569a831893ede0d4618219a"], 0x78) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@ipv4_delrule={0x1c, 0x21, 0x105, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}}, 0x1c}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000080)=0x61f, 0x4) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) creat(&(0x7f0000000240)='./file0\x00', 0x0) chmod(&(0x7f0000000140)='./file0\x00', 0xfeff) creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x401) 4m37.194681308s ago: executing program 4 (id=107): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}]}, 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r0, @ANYRES16=r6, @ANYBLOB="01070000000008f900006700000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x2c}}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}]}, 0x5c}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) getpid() (async) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r0, @ANYRES16=r6, @ANYBLOB="01070000000008f900006700000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x2c}}, 0x40) (async) 4m34.921668498s ago: executing program 4 (id=114): r0 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100100000040700cbdf0000000000001090224fc000000000009040000010300000009210000000122050009058103"], 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/sys/net/ipv4/tcp_recovery\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000540)='3\x00', 0x2) syz_usb_control_io(r0, 0x0, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x1, 0xe) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGABS20(r3, 0x80184560, &(0x7f0000000100)=""/232) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0xffffffffffffff43, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYRES64=r2, @ANYRESOCT, @ANYRES16=r2, @ANYRES64=r1, @ANYRESDEC=r0, @ANYRES16=0x0, @ANYRES64=r0, @ANYRES32=r0], 0x0}, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000580)={0x3, 0x77, 0x3, 0x80000, 0xffffffffffffffff}) lseek(r4, 0xfffffffffffff800, 0x2) syz_usb_connect(0x2, 0xcf8, &(0x7f0000000bc0)={{0x12, 0x1, 0x300, 0xdf, 0x99, 0xd5, 0xff, 0x56c, 0x8100, 0x6fa8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xce6, 0x4, 0x82, 0x0, 0x0, 0x62, [{{0x9, 0x4, 0x73, 0x4, 0xe, 0xaf, 0xd8, 0x5, 0xff, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "2ecaba"}, {0x5, 0x24, 0x0, 0xe}, {0xd, 0x24, 0xf, 0x1, 0xa0, 0x14, 0x3, 0x8f}, {0x6, 0x24, 0x1a, 0x0, 0x4}, [@country_functional={0x8, 0x24, 0x7, 0xfb, 0xc37, [0x1ff]}, @country_functional={0x12, 0x24, 0x7, 0x7, 0x5, [0x2, 0xa, 0x6, 0x401, 0x8e94, 0x9]}, @mdlm={0x15, 0x24, 0x12, 0xfff}, @mbim={0xc, 0x24, 0x1b, 0x19, 0x2, 0x37, 0x81, 0x10, 0x3}]}], [{{0x9, 0x5, 0xb, 0x10, 0x3ff, 0x6, 0x8, 0x1, [@generic={0xe2, 0x30, "0d0b9be8e7131b888a35220f0ba889ee347eb542a52c428a21ebbdb2d652244540dc9c34f1237f7dc682a3a042b7b605c57dc009462711d719010b6f52ca94674c3e94e306cf3f257f9aa9fc5fc4307574f491e1d587a460dad3645e6448c2097b7e03135d2f83bec80ea61493de290375ffb766e4244696ea3c5224cdac55864587f4907dee5cf54f82d46f7fe704207b07fcc6064fdbc916f695c564e6dd08d9e4a57b69df9af6dd09f3ba5b2ead9ddf19c685586399fbe6c31943f5c1915d639a74b47a9e4c4a5dfacb34d10a9ba3566dca4e085bb4b36770e9f211739b12"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0xeb1}]}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0xe, 0x10, 0x4}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x0, 0xb, 0xe0}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0xfa, 0x24, 0x8}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x0, 0x2, 0xf6, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0x6}, @generic={0x3a, 0x7, "779e663311a8ce90722744b40a7e47dbd861adb1a27bededa039fb60cb234e6b759e4a020c13fcad5c07cb924d71f241a805995f6cda40aa"}]}}, {{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x1, 0x3f, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x55, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5d, 0x7f}]}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x54, 0x6, 0x40}}, {{0x9, 0x5, 0x1, 0x2, 0x20, 0x7, 0x7, 0x5, [@generic={0xf6, 0x11, "6495cba7e1d2c44cec57e10a984eb9aaad6f3cd232edc2c4b613a0516f6fd39a92abe4cd610d3ddd5c595fbbb32dec21add2883383414ec92cfeb02fdbdc913b34adc76aafc1309c0d4d260a93ec7b33eed76f07be86fd4bee3691306f6a8a930234172564412205d15ac29198f7504ed22ab4201892f9e7d225f4f654bc5c141a51fe375fd3468d9e53326e14092948f9b7641c78835b3a5c11ad2698aed0931361ce71864d12d7a1564e4fb92c851c52bfc57bceb162ba70b6f1cf055cac4c47ad3458a4cce2b43023dbf9a0ab47904dcd2a46d781a6b366d363513be660f15cdb086973ba875ba198e04cb013566120fd96f7"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x8, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x100, 0xf2}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x9c, 0x0, 0x5}}, {{0x9, 0x5, 0xe, 0x10, 0x20, 0x9, 0x4, 0x1, [@generic={0xee, 0xa, "f2c018905fe58094353d7c35d77bae35d00c7145a9304edbf1c8c1db52ece6f4ab17548b4b736affbe2c04874416e3999c6f3e6c6f9bc05f349c09c24fa1859b71cd0fc19a95d5b88876ec595b62b6dae1241d5112ecc1f30bc009155da946077e6379ec8c9735a33097c36ece2c54e0990e8c3dd4be6c624d81f2743418db40669120c5766384d685475757260db3221f65096fe3bf6c01b0e6d04eae908f833aa9accda836510941fe09a95d0b6e7da56eb773fe48c82a64c95e43fc8d6de3dfbdca5068bad81ab7948bde9553bc42bdbc45126b9dee86def8a23034e3a18146e2424d3bd837d3e2636679"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x7, 0x8, 0x10}}, {{0x9, 0x5, 0xb, 0x2, 0x40, 0x40, 0xf, 0xb}}, {{0x9, 0x5, 0xa, 0xc, 0x20, 0x7f, 0x8, 0xf}}]}}, {{0x9, 0x4, 0xa3, 0x5, 0x4, 0x23, 0x69, 0x52, 0x5, [@uac_as], [{{0x9, 0x5, 0xc, 0xc, 0x40, 0x5, 0xad, 0x9}}, {{0x9, 0x5, 0xe, 0x12, 0x0, 0x5, 0x2, 0x8, [@generic={0xf4, 0xb, "0a3cdccae8dd04717419053965da024a0952feca7298fe4a80ee7b91372caf7fe3ed5e40bac634c4234233bc5075d78fa9a91d62bb523d39b01181d370a8803ea5422071121504b563feb5989f7d9a41e669281c452c3abf4625b1bb16736583a6666131e6af508bde34002671fb0c46cfb34668d1b51a46e597153beec2fa8d77cd5a47c476bf54278864264d8c4da61b61977e7cfa437081778658e266a6e89a17a7342437fc3311feb7d30e9269bb98161edab6364419a670ed17071810f8a08884111d51826eb981d672870c06eb4f0eb172765bac24b65e9bf0450b0e496770f10d18bee14576b74e42c7207eba927e"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x5, 0x8, 0x88, [@generic={0x93, 0x9, "a717499dfcd3a82f9ee9ec0d57b06dbdb6e23bfd83ac61c85b2354ef61803d9748fac87a14a79be542cbc9836b2a36fca5b1c268a3be5610ce297dca1edfbd3a066c40b3a149dba5b0630e97d4b82b828771897b19596ff2f08a451ffc36180b63f8eb95b150915f03117103aee420b8356c750edd1ff7de2ef9133c8911b2978bfb6bc88cc74fcd182af747a6787d7ae6"}, @generic={0xc1, 0xd, "c4ac2b8e932e06e2bcbee93b212913109a04bc7f9c27b03c04617db440021460706a27a7c21b6eedd189c6eb78c3366970370a503595b8c9bd6ba74355253edc7ef865ed5fe9d7de8105b870015238e6ab1c002197afd6dffb07e00ae22744bdcbd97fcecf9ce256a84d5e9d7ae54f4ef5338aa1f620c9796b59cd662f567f853cc43d7f0166c5d75da1992c9bb944b1ca771c4ff4cc010da472a410bbb8ed77123fa8adf068cb1ecd23283f4213614daaf465a7225132540ca5a58ea494e5"}]}}, {{0x9, 0x5, 0xc, 0x2, 0x400, 0xb5, 0x70}}]}}, {{0x9, 0x4, 0xdc, 0x2, 0x7, 0x42, 0xa7, 0xa, 0xf, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "40930b4526"}, {0x5, 0x24, 0x0, 0xffa0}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x800, 0x0, 0x5}, {0x6, 0x24, 0x1a, 0x0, 0x8}, [@country_functional={0xc, 0x24, 0x7, 0x1, 0xa2, [0x7, 0x6, 0xdf3]}]}, @uac_as={[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x7ff, 0x3ff, 0x3, "9de992fa"}]}], [{{0x9, 0x5, 0xc, 0x8, 0x400, 0x1, 0x96, 0x9b, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xa, 0xe}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x800}]}}, {{0x9, 0x5, 0x2, 0x4, 0x8, 0xc, 0x73, 0x3e, [@generic={0xa9, 0x21, "d433cee3bb85319c90ba8facff856c09913476353f2c8023c844361512c8e3a56d2205d2a4e0568ce8c3818b1fe3a40c6f2cc59e1989050fc8cc81d7f4355421cbb99945d81bf59f63be352813e93ea3e3368af4fcf2caf4ea82052777948076a76b0a395ab1ba91521979bc5f1e6e378dfc73f5f6414050ffa13e621a839fa20637098e48962d820e8c2bfe10a1116731b88403af40b0cbf074b79480903574edcc8654c1056f"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x5, 0x80, 0x3, [@generic={0x4f, 0x24, "9393bc9ef4feb3543be8dc363be538245e82dd106a0de33cf7e00d29725620fbe986eb80b90247834bf46bd6a076ccb710a1aa52198ac4d9a2a6928b2f5ada3764a36c10d1cfb6596f93213b86"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x3, 0x40, 0x6}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x83, 0xd, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xc, 0x9}, @generic={0xfc, 0x10, "c530381ab963811c60b1b08d7f65b09dd8611cd0b8a2157cccd3ae4bde1b48ce076695e2d16d60aaa8d83d7850cbbd776447ae24fbe344925768e0967b968b1fced82b569ac565d89e6cb424892a32a0536b5e3f9bf78a771d7411f6f16607eccf2fb67d1ec4453f6c0d71d095490e4c85923733a9e1ca8832bf0ad8ee057920cedf0ebbb49628ea26f832417cb3448f24ac66c8fd96e39a94cb13c429eb3d27decc2fe52b7515f67fc021d80a5078da4a30034cc0434585498da6cfb86f1d9ccc75df8cb79901d67771115006c8f8d83b3aa2e15e7f9426491baed13d16543b3127ab53464359d4b065e1c4c1f33ed26a4f8bbc83c9f6b9ae1c"}]}}, {{0x9, 0x5, 0x8, 0x6ca58ba48b76370c, 0x40, 0x6, 0x2, 0x80, [@generic={0x14, 0x11, "994c6568215796d4e76dd607c18176617182"}]}}, {{0x9, 0x5, 0x0, 0x4, 0x10, 0x4, 0x9, 0x10}}]}}, {{0x9, 0x4, 0x2, 0xd, 0xd, 0x9, 0xd0, 0xaf, 0xc9, [], [{{0x9, 0x5, 0xe, 0x2, 0x420, 0x5e, 0x3, 0xe}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x79, 0x91, 0xae, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x62, 0xf66}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0xb, 0x2, 0x9, [@generic={0x33, 0xc, "e9374cfe995ce4988a0888564d2298ada2b32e28939bc66f078b68c95fd39106e6ca0bc8edde7c12874b5b4a53a1c32ac2"}, @generic={0x54, 0xa, "b7fcfc832f7b958d2b885d50c2ff90a7d0535126147798b3ad0fea59e1ab8739c93849585bb9a8afe5b4c0f3993ade391348ca759126b0426b97b5504ba68d3097f6532fd8bd250f3c9ebeb4363395b365c6"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x5, 0x2, 0xb}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x6, 0xa, 0x2}}, {{0x9, 0x5, 0xb, 0x3, 0x400, 0x8c, 0xff, 0xc3, [@generic={0xea, 0x5, "e5a5a2bf5ffb5f0021bfb079cd628191908e7b3a969738cf63c21490dba4ba6312d9ce276cc9b1ee74716e19e55416d644d8e6fb9f06e67381a5c9c355ee24d75224422cddfdcda3518e9d764efe6942f41251bf61a240e172cbb6247365726b92478ff97fc7236f30d8e1128fc75ce1ed8542fcda6c8431a67216b8dd874c32d8ca407b7d3016909819fc77d62844b2c956106c5f5808b82d3a05d7222c2fffcb2f438c9782a6ee2a46477ac36d31066dd38b337eff54e06e9f3d7154d78d70142d059358d6fb8e675fae7d9e75807a964296f715e2f41ff05e6d60411e3ae1b2275a8e85e5c6b4"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0x6, 0x0, 0x5, [@generic={0xd9, 0x9, "cdc42e891d8574f768c8466572036d13e6a58e439e66ccbf3e32a420a08a55a8958558612b0b7145d409c2099a8e48f8d3a9b352831da6823383e9cf91db47dd49a9d77e08571535825f91241422f66f2fc834e41b650b8007ca1cc74bda8de00b279bbdfd6dfbc2e06927a7217b5298c474a7829652c5aa4c58d303c13790f9935093cb65d3a87d2b6c04a53f222599e91fde3246e040af4c868b02ec8491157dfc0568c9fd8350f143bb244a30b5d98327f201fc366950c52e45dc2ee409a1613977508debd63b89bf2b449a419344b7ab540bce0d77"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0xa, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xd0, 0x4}]}}, {{0x9, 0x5, 0xc, 0xc, 0x400, 0x8, 0x6, 0x2}}, {{0x9, 0x5, 0xc, 0x1, 0x10, 0x2, 0x10, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x6ed}]}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0x7, 0x2, 0x4, [@generic={0x11, 0xa, "5810efc307dd59fb986d969d9147f8"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0xfa, 0x1, 0xb}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x62, 0x1, 0x5, [@generic={0xd5, 0xd, "605f8b7bb81a16ff9cc0c3a07c053d5b5a2adaac402e817d4f80d6cede327aac25de4dcde37cb6cd25f44f304874bf8bf2f5634b8193c5bef8425da298434a52ac546c9ea6a1eb8d2dadea34fba78ca683ebbc0a9d0689a4b88fcacfbc23a0214a89b305e11265c81b001783d9835e8dc47148527bcebf8812e68431e9b64d858d71a3b62cd05c68fee8fbbb871263ba45382531039d85f162dff4a4831fa63190f2282a5baeec34fd326b35cca063003f55c2d4d64dfd2e4be9a653dd5311717fa008c26dba30dd193ff0ca217a1789b53112"}]}}]}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x10, 0xce, 0x0, 0x8}, 0x115, &(0x7f00000000c0)={0x5, 0xf, 0x115, 0x6, [@ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x7ffff7f, 0xf00, 0xff, [0x0]}, @generic={0xb5, 0x10, 0x2, "0abca8cee7737395c2f5629322d1de1f7937b5f6ced71ef1797803e873f326eb26e8163073b5f11158b1305d90eb0f40c641dd67589a8208594c1c05ffabe2cf65c6caab6154cc95fc78e2f395fd3c0fc1838cdbd34ee270983e05de0ff0589ac00ff027ae1c32d59a25ef05202fc27410f53866da4d058f0a9859b2610e749e2029dc8b89db8bf8a17a545adc379c9c336e7b61d47d8071c6d8ee7b980d1e46cac7187081feb37741ac14c04ce9ebde0173"}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x7fff801, 0x7800, 0x7fff, [0xff0f, 0x1fec030, 0x30, 0xc0]}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x2, 0x1, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x10, "ee1e8e3a3ca3647830824651c3c371a2"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "66bc66a48eaa4bd550502d4d9c4d4d73"}]}, 0x7, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x44f}}, {0x5b, &(0x7f0000000240)=@string={0x5b, 0x3, "d5848cd8488fbc16ef2b81743a6f9d45283ad9b67cff1dabcbfac4b4a6d78d2aefbfc143d0e4bf99a93e48ecb2cdab0bafdd8be46d016392712e07579b130b87ff85439384222aa512328da5d9e870aed3aa03aa71d98c03ed"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x44d}}, {0x8, &(0x7f0000000300)=@string={0x8, 0x3, "8f1d6ef39b91"}}, {0xa3, &(0x7f0000000340)=ANY=[@ANYBLOB="a303dca16d0ea6827f11290e1cf6f29cc7f4c173aa88dc8a7c788bfeafcc15323878f1aa6de294d0c9f4e112a406b54c20a4da2da13d4fc3b4a687b296b26768c23ea55b0e014e036da248e52a9828cda52a94aecca82dbf1c847c184239ec967639182888998baba6797132e1fcfacd6af1d2782bafe523ae00c715868f9004ffccf1090180a5f7cdec1d98597334b9d11bd693ddc1510c742a6b291089a08bdb80f1"]}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x416}}, {0x3a, &(0x7f0000000440)=@string={0x3a, 0x3, "a066b4e8a02e9c2effa2a3e734dc3fb0b5c5ff89bd8880aad18496259c0101d8caf40c1ac810ae886db4d2c72d3dd382d4ed978ced7a9483"}}]}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 4m31.587065544s ago: executing program 4 (id=126): r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x27, 0x0, 0x4e22}, 0x6e) ptrace(0x10, r1) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000000380)=""/38, 0x26) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001480)={&(0x7f00000014c0)='rpcgss_context\x00', r4}, 0x18) ioctl$SNAPSHOT_FREE(r3, 0x3305) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x101, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000001500), 0xc0080, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f00000013c0)={{0x9, 0xca}, {0x5, 0x6}, 0x4, 0x6, 0x6}) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000940)=[{{&(0x7f0000000180)=@rc, 0x80, &(0x7f0000000300)=[{&(0x7f0000000240)=""/75, 0x4b}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000000040)=""/28, 0x1c}], 0x3}, 0x80000001}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000002540)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/105, 0x69}, {&(0x7f0000000440)=""/91, 0x5b}, {&(0x7f0000000500)=""/89, 0x59}, {&(0x7f0000000580)=""/131, 0x83}, {&(0x7f0000000640)=""/108, 0x6c}, {&(0x7f00000006c0)=""/102, 0x66}, {&(0x7f0000000340)=""/35, 0x23}, {&(0x7f0000000740)=""/6, 0x6}, {&(0x7f0000000780)=""/212, 0xd4}], 0xa}, 0x3}], 0x2, 0x100, 0x0) rseq(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 4m17.962697442s ago: executing program 0 (id=174): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x1cc6, &(0x7f0000000240)={0x0, 0x136f, 0x1, 0x3, 0x1be}, &(0x7f0000000440), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, 0x0, 0x7ffffffe) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='projid_map\x00') ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x7f) read$dsp(r3, &(0x7f0000000300)=""/79, 0x4f) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@updpolicy={0xfc, 0x19, 0x1, 0x1ff, 0x0, {{@in=@multicast2, @in=@dev={0xac, 0x14, 0x14, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2, 0x0, 0x300000000000000}, {0x9, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x3c}, 0xa, @in6=@private1, 0x0, 0x4, 0x2, 0x0, 0x0, 0x9, 0x4000}]}]}, 0xfc}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r6, 0x3b87, &(0x7f0000000240)={0x18, 0x0, 0xdd703f61efd88e4, 0x0, 0x0, 0x8}) connect$inet(r5, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='veth0_to_team\x00', 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x810) 4m17.692105356s ago: executing program 0 (id=175): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), 0x16, 0x0, 0xc}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x1) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) (async) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) (async) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000300)=0x7) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) (async) r4 = getpid() socket$inet_udp(0x2, 0x2, 0x0) (async) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r5, 0x0, 0x20, &(0x7f00000001c0), 0x4) setrlimit(0x5, &(0x7f0000000080)={0x1}) sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) (async) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) (async) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/cgroup.procs\x00', 0x0, 0x82) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) process_vm_writev(r8, &(0x7f0000000400)=[{&(0x7f0000000200)=""/25, 0x19}, {0x0}, {&(0x7f0000000340)=""/127, 0x7f}], 0x3, &(0x7f0000000640)=[{&(0x7f0000000440)=""/135, 0x87}, {&(0x7f0000000540)=""/197, 0xc5}], 0x2, 0x0) (async) open_by_handle_at(r7, &(0x7f00000000c0)=ANY=[@ANYRESHEX=0x0], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) 4m17.210640782s ago: executing program 0 (id=176): r0 = socket$nl_route(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x20000040) socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_tos_int={{0x14, 0x29, 0x3e, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9713}}, @ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}], 0x60}, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0xba8, 0x0, 0x168, 0x10, 0x908, 0xb, 0xad8, 0x250, 0x250, 0xad8, 0x250, 0x3, 0x0, {[{{@uncond, 0x6000000, 0x8e0, 0x908, 0x0, {0x0, 0x28e}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x200}, {0x7}, {0xf41, 0x2}, {0x80000000}, {0xa0000}, {0x2}, {0xb0, 0x2}, {0xfffffff3, 0x3}, {0x6, 0x1}, {0x9, 0x3}, {0x9, 0x3}], [{0x2, 0x3}, {0x7fff, 0x4}, {0xfff, 0x8}, {0x4, 0x2}, {0x1, 0xb3}, {0x3, 0x10001}, {0x747, 0x8001}, {0x4, 0xd}, {0x48f5, 0xfffffffa}, {0x0, 0x7ff}, {0xfff}], 0x2, 0x1}, {[{0x81}, {0x80000000, 0x1}, {0x6, 0x3}, {0x8, 0x2}, {0xfffffffa, 0x1}, {0x401}, {0x7, 0x2}, {0x7}, {0x3df2, 0x99ffdcbf898bd3b2}, {0x8000}, {0xa, 0x2}], [{0x4, 0x8000}, {0xfffffff8, 0xfff}, {0x20, 0x200}, {0x5, 0x6}, {0x5000, 0x5}, {0x3, 0x3}, {0x2000000, 0x5e}, {0x7, 0x7}, {0x3, 0xdc}, {0x9, 0x3}, {0x5, 0x7fffffff}], 0x8, 0xb}, {[{0x6, 0xc44cb69118c6bc3}, {0x4, 0x3}, {0xfffffff9, 0x3}, {0x1000}, {0x9, 0x3}, {0xff, 0x3}, {0x6, 0x2}, {0x1}, {}, {0x4, 0x1}, {0x5, 0x1}], [{0x80000001}, {0x8, 0xf30}, {0x9, 0x577}, {0xd, 0xa18}, {0x3, 0x2}, {0x0, 0xd4}, {0x4, 0x10000}, {0x6, 0x7e}, {0xf, 0x6}, {0x1, 0x2}, {0x8, 0x5}], 0x5, 0x7}, {[{0x6, 0x3}, {0x6b43, 0x1}, {0xffffff5f}, {}, {0x4c, 0x1}, {0x7, 0x3}, {0x8, 0x2}, {0xc3}, {0x1, 0x1}, {0x6, 0x3}, {0x2, 0x1}], [{0x1, 0x9}, {0x2, 0xff}, {0x0, 0x40}, {}, {0x80000001, 0x5}, {0x3, 0x3}, {0xffffff60, 0x5}, {0x10, 0x7f}, {0x5, 0xfff}, {0x9, 0x7ff}, {0xec7f, 0x8}], 0x0, 0x8}, {[{0x8, 0x3}, {0x4, 0x3}, {0x0, 0x21e5da8cfd88894d}, {0x7f, 0x1}, {0x4, 0x2}, {0x28bb, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x7f, 0x2}, {0xfff, 0x3}, {0xffff5887, 0x1}], [{0x2}, {0xc768, 0xb0e}, {0x3, 0x8}, {0x8, 0x2}, {0x9, 0x8a0}, {0x5, 0xd0e}, {0x2, 0xfffffff9}, {0x9, 0x59}, {0xc000, 0x2f9}, {0x800, 0x3dcf}, {0xfffffffb, 0xe}], 0x9, 0x4}, {[{0x5, 0x3}, {0x6, 0x3}, {0x117452e, 0x1}, {0x0, 0x2}, {0xf7, 0x3}, {0xaa5a}, {0x8000, 0x2}, {0x0, 0x2}, {0x6, 0x1}, {0x80, 0x3}, {0x5}], [{0x7, 0x1}, {0x8000, 0x8}, {0x4, 0x5}, {0x7, 0x6}, {0x0, 0x7a3}, {0x5, 0x4}, {0x8, 0x2}, {0x6c0, 0x7fffffff}, {0x0, 0x5}, {0x81, 0x3}, {0xa, 0x1}], 0x6, 0xb}, {[{0x4, 0x1}, {0x5, 0x1}, {0x1ff, 0x1}, {0x2, 0x2}, {0xb, 0x3}, {0xfffffff8, 0x2}, {0x7, 0x2}, {0x0, 0x2}, {0xff, 0x1}, {0x6, 0x1}, {0x9, 0x3}], [{0xc6a7, 0x7}, {0x4, 0x9}, {0x5, 0x10000}, {0x2, 0xeb}, {0x3, 0x5}, {0x5, 0x8}, {0x5, 0x1}, {0x400, 0x4}, {0x400, 0x2}, {0x6, 0x40}, {0x10, 0xeb}], 0x1, 0x5}, {[{0x1, 0x2}, {0x1, 0x1}, {0xab6, 0x1}, {}, {0x7}, {0x101, 0x1}, {0xc, 0x30cfb1736fa8c266}, {0xfd, 0x2}, {0x3, 0x3}, {0x1, 0x2}, {0x3, 0x1}], [{0x41b, 0x70}, {0x7f, 0xaf}, {0x0, 0x8}, {0xc62, 0xfffffffd}, {0x4, 0x5}, {0x6, 0x8}, {0x6, 0x4}, {0x3, 0x4}, {0x10, 0x6}, {0x0, 0x9}, {0x40, 0x1}], 0x5, 0x5}, {[{0xc07}, {0x5}, {0x6, 0x2}, {0x800, 0x3}, {0x61}, {0x3, 0x2}, {0x94, 0x3}, {0x80, 0x3}, {0x8, 0x1}, {0xada, 0x1}, {0xd, 0x1}], [{0x1, 0x400}, {0x7, 0x57}, {0x9, 0xab}, {0x5, 0x8}, {0xffffffff, 0x200}, {0x9a2a, 0xdd}, {0x4ee, 0x100}, {0x8003, 0x6}, {0x5, 0xb0d9}, {0x1, 0x17000000}, {0x8000, 0xd}], 0x8, 0xb}, {[{0xad40, 0x2}, {0x91}, {0xfff}, {}, {0x2}, {0x3, 0x3}, {0x3, 0x2}, {0x8, 0x3}, {0x4}, {0x2}, {0x4}], [{0x1ff, 0x8}, {0x0, 0xfb6b}, {0xfff, 0xfffffbff}, {0x5, 0x4}, {0x1, 0x800}, {0x10001, 0x3}, {0x2, 0x6}, {0x4, 0x5}, {0x0, 0x4c55}, {0x8, 0x100}, {0x2, 0x9}], 0x3, 0x3}, {[{0x4, 0x1}, {0x1, 0x1}, {0x3, 0x3}, {0x401, 0x2}, {0x9}, {0x8, 0x1}, {0x6, 0x1}, {0x3, 0x1}, {0x40, 0x2}, {0xffffffff, 0x2}, {0x18000000, 0x3}], [{0x4a, 0xfffffffa}, {0x9, 0x81}, {0x800, 0x3ff}, {0x3ff, 0x8}, {0x65, 0x5}, {0x0, 0x3}, {0x2, 0x7ff}, {0x2, 0x82}, {0x6, 0x5}, {0x1}, {0x9, 0x10001}], 0x2}]}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x9, 0x1, 0xfffffffd, 0x10000, 0x80000001, 0x82}}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x8, 0x3cd}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xc08) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000300)={0x2c, &(0x7f00000000c0)={0x0, 0x11, 0x5, {0x5, 0xe, "2ff465"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0x0, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000140)={{@host, 0x6}, @host, 0x5, 0x56d7, 0x1, 0x5, 0x7, 0x8, 0x8}) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000380)={'vxcan1\x00', 0x0}) r10 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r10, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0xf0}}, 0x18, &(0x7f0000000200)={&(0x7f00000000c0)="92", 0x1}}, 0xee) bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r9, 0x0, {0x2, 0xf0, 0x2}, 0x2}, 0x18) sendmsg$can_j1939(r7, 0x0, 0xee) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {0x3, 0xfff9}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004044}, 0x0) 4m15.1086838s ago: executing program 0 (id=184): memfd_create(&(0x7f0000000040)='dev [\x1dx#l', 0x8) (async, rerun: 32) r0 = socket$inet6(0xa, 0x2, 0x0) (rerun: 32) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000100)=0xfffffff7, 0x4) (async) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) (async) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000680)={0x1, 0x0, 0x202, 0xce, 0xffffffffffffffff, 0x200000000000008, 0x1000000000000008, 0x2, 0x8, 0x40000000000002a, 0x80000009, 0x2}) (async) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r3, 0xc06c4124, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x420000, 0x0) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r4, &(0x7f0000000480)={&(0x7f0000000240), 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="08002abd7000fddbdf250300000006000a004e240000140007defb020000000000000000000000000000050004000100000014000900fc01000000000000000000000000000004000500060001004e20000008000800ac141418050002000a00000014000900fc010000000000000000000000000001"], 0x7c}, 0x1, 0x0, 0x0, 0x48000}, 0x8d0) sendmmsg$inet6(r0, &(0x7f0000001700)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast2, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1={0xff, 0x11}}}}], 0x28, 0x7ffffff7}}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) (async) mount_setattr(r6, &(0x7f0000000040)='./file0\x00', 0x1100, &(0x7f0000000300)={0x80, 0x2, 0x80000, {r6}}, 0x20) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000880)={0x14, 0x12, 0x1, 0x70bd2a, 0x0, {0x28}}, 0x14}}, 0x0) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r8, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x3, 0x0, @random="a1fb75d10a28"}, 0x10) (async) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) 4m15.083444491s ago: executing program 32 (id=126): r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x27, 0x0, 0x4e22}, 0x6e) ptrace(0x10, r1) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000000380)=""/38, 0x26) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001480)={&(0x7f00000014c0)='rpcgss_context\x00', r4}, 0x18) ioctl$SNAPSHOT_FREE(r3, 0x3305) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x101, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000001500), 0xc0080, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f00000013c0)={{0x9, 0xca}, {0x5, 0x6}, 0x4, 0x6, 0x6}) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000940)=[{{&(0x7f0000000180)=@rc, 0x80, &(0x7f0000000300)=[{&(0x7f0000000240)=""/75, 0x4b}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000000040)=""/28, 0x1c}], 0x3}, 0x80000001}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000002540)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/105, 0x69}, {&(0x7f0000000440)=""/91, 0x5b}, {&(0x7f0000000500)=""/89, 0x59}, {&(0x7f0000000580)=""/131, 0x83}, {&(0x7f0000000640)=""/108, 0x6c}, {&(0x7f00000006c0)=""/102, 0x66}, {&(0x7f0000000340)=""/35, 0x23}, {&(0x7f0000000740)=""/6, 0x6}, {&(0x7f0000000780)=""/212, 0xd4}], 0xa}, 0x3}], 0x2, 0x100, 0x0) rseq(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 4m9.571814602s ago: executing program 0 (id=203): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) (async) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x4c69, 0x300, 0x14, 0x2ac}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) (async) io_uring_enter(r2, 0x3516, 0x2, 0x0, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async, rerun: 64) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000068000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x6d8ce000) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) fsopen(&(0x7f0000000180)='proc\x00', 0x1) r8 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (async) r9 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r9, 0xffff) r10 = ioctl$UDMABUF_CREATE(r8, 0x40187542, &(0x7f0000000000)={r9, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r10, 0x40086200, &(0x7f00000001c0)=0x1) ioctl$DMA_BUF_IOCTL_SYNC(r10, 0x40086200, &(0x7f00000000c0)=0x7) (async) r11 = syz_open_dev$usbmon(&(0x7f0000002d80), 0x9929, 0x2200) ioctl$MON_IOCQ_RING_SIZE(r11, 0x9205) 4m9.170734562s ago: executing program 0 (id=206): openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/diskstats\x00', 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000600)={0x0, 0x0, 0x54}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000290000002400001173988d5399ede141bc3400000000000000000000000000000b258e10d318589d221387229e20b7ebc577dadee20e46ed696b2ce809c3b5229d55be"], 0x30}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000280)="650f340f3566b842000f00d8b805000000b9a0a800000f01c13e0f07d01f0f0120670f01c2f2360f217a0f07", 0x2c}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4m8.895859343s ago: executing program 33 (id=206): openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/diskstats\x00', 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000600)={0x0, 0x0, 0x54}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000290000002400001173988d5399ede141bc3400000000000000000000000000000b258e10d318589d221387229e20b7ebc577dadee20e46ed696b2ce809c3b5229d55be"], 0x30}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000280)="650f340f3566b842000f00d8b805000000b9a0a800000f01c13e0f07d01f0f0120670f01c2f2360f217a0f07", 0x2c}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m23.532264301s ago: executing program 2 (id=562): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r0 = getpid() ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000180)={0x0, 0xf416}) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) (async) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x88) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 2m23.230206436s ago: executing program 2 (id=564): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, 0x0, 0x1}, 0x14}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="a443fcd7", 0x4}], 0x1}, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r6, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) memfd_secret(0x0) syz_open_dev$MSR(&(0x7f0000000000), 0x7fffffff, 0x0) 2m23.014493461s ago: executing program 2 (id=566): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x10, 0x0) bind$phonet(r1, &(0x7f0000000100)={0x23, 0x8e, 0x3, 0x9}, 0x10) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r2, 0x4188aec6, &(0x7f0000001a40)={0x1, [{0x1, 0x0, 0x1fe, 0x0}, {0x2, 0x0, 0xca6, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x2, 0x0, 0x131, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x3, 0x0, 0x80000001, 0x0}, {0x1, 0x0, 0x10, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x2, 0x0, 0xffe, 0x0}, {0x1, 0x0, 0x6a097c35, 0x0}, {0x3, 0x0, 0x5f, 0x0}, {0x3, 0x0, 0x4, 0x0}, {0x3, 0x0, 0x2, 0x0}, {0x14b70a489dceba58, 0x0, 0x200, 0x0}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_usb_connect(0x2, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12015c005ffc702011071002d6fd0102030109022b00010000000009048b0002be448fff09058002324d090f050705bdf74e378109058b0340000e4b02"], 0x0) 2m18.807120586s ago: executing program 2 (id=579): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) ioctl$VHOST_NET_SET_BACKEND(r0, 0x8008af83, &(0x7f0000000000)={0x1}) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) (async) syz_usb_connect(0x2, 0x2ab, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x48, 0x66, 0x39, 0x8, 0x50d, 0x1102, 0x37c7, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x299, 0x1, 0xd, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x6b, 0x0, 0x2, 0xd7, 0xce, 0x7, 0x0, [], [{{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x10, 0x7, 0x28, [@generic={0x84, 0xc, "65d9bd98ea9fa323aa94c64b54cafe4a8a8f9751b97a42dcd54f2c6111cf3346cf36387a24172677636b79d75832a304dffddab2b260a6445a05e0d753a9a857a0af080cf3b29389023fb88c8a0212e1f8bdc1ee5faffb037f0701c4bba6a28cf0d0b766f4dd285a1fe3c2ecbe55189bf9fb997bd6e484bb35311ac3e05593e24f9b"}, @generic={0xbc, 0xe, "50a910e2f516b6316d1565eb8d27694988d7d35aef0a4afacc7d6299d60810adb4e797382e65cabd73e78e05eb458ce7e7b3c4837b3ca1137038f44a145abc520df2e1fb0b5c28702ead32f53ddd3041484053a57c386def9895cabe6deecde95553e16cb42486c2cc1babab60070f5f7812de5868aa6995dd75d85b27d86b53a6ef82faf9ead9aa8b071090903215fcd2ddad70ad836b9bff2a16af86b4c7554dcc508a3fd56f77c9164e41e24e3082e294556f9fd91fdfd0c2"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x10, 0xe5, 0x4, 0xb, [@generic={0x4d, 0x52, "c3341c4f22e21b455cde74b441b068692dea19cb580984e25bcea4018ea94024c06fbcc01e7001e4c07173c071551354f9f5037f5431ed47d4bce6dd2b74d287d2e3aed755a72fb910d6cc"}, @generic={0xe8, 0xd, "a914b21dbac6015c19b85caf139cf82ed6bd893ad588301afb3a9969920383a4b4a4e6f24f5f1cb1e348988410985976b2a7324e31705f6b658b3847b21c99a2eaa050966518944ff9a887b0a609a398c68124989e22d5c16c5a4d4f1166d4c6a3686094cc4710c657014ce32743ab7253dca9adbcac8642fcd09e61a0d3083e99f06f02627a4e807e345b621c70b7999e29942d85797282aee3c0ef11b23f4e80136c0299a5f61bd8287a6a9aa452e984af6bf9d56f13354cc978b7e78175e5e116514a00a1d8d776f30682b1e4ed4d911c2f8b6c70582203da06478c7325577f3be05f6a03"}]}}]}}]}}]}}, 0x0) 2m15.570383604s ago: executing program 2 (id=589): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@dellinkprop={0x34, 0x6d, 0x1, 0x70bd2d, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0xa, 0x2800}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macvtap0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000005}, 0x40000) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="020000000400000001000000090000000013"], 0x50) 2m14.568627269s ago: executing program 2 (id=591): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sync() sendmsg$NFC_CMD_DISABLE_SE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x86}, 0x4004800) bpf$ENABLE_STATS(0x20, &(0x7f0000000180), 0x4) sendmsg$NFC_CMD_DEV_DOWN(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r2, 0xe2dd266ab2404e65, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x7, &(0x7f0000006680)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) sync() (async) sendmsg$NFC_CMD_DISABLE_SE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x86}, 0x4004800) (async) bpf$ENABLE_STATS(0x20, &(0x7f0000000180), 0x4) (async) sendmsg$NFC_CMD_DEV_DOWN(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r2, 0xe2dd266ab2404e65, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x800) (async) 1m58.485247189s ago: executing program 34 (id=591): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sync() sendmsg$NFC_CMD_DISABLE_SE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x86}, 0x4004800) bpf$ENABLE_STATS(0x20, &(0x7f0000000180), 0x4) sendmsg$NFC_CMD_DEV_DOWN(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r2, 0xe2dd266ab2404e65, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x7, &(0x7f0000006680)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) sync() (async) sendmsg$NFC_CMD_DISABLE_SE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x86}, 0x4004800) (async) bpf$ENABLE_STATS(0x20, &(0x7f0000000180), 0x4) (async) sendmsg$NFC_CMD_DEV_DOWN(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r2, 0xe2dd266ab2404e65, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x800) (async) 1m0.363145696s ago: executing program 6 (id=848): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000600)=@framed={{}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @alu={0x4, 0x0, 0x3, 0x6, 0xcb752417c1a6ad23, 0xfffffffffffffff4, 0x4}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x68}, 0x94) 1m0.31789985s ago: executing program 6 (id=849): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) (async) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c800}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c800}, 0x0) r2 = openat$cuse(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000c40)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000c40)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000000180)={0x10, 0x0, r3}, 0x10) (async) write$FUSE_INTERRUPT(r2, &(0x7f0000000180)={0x10, 0x0, r3}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) lseek(0xffffffffffffffff, 0x1, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCADDDLCI(r4, 0x5452, &(0x7f0000000100)={'veth1\x00'}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0x7) (async) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb3eb30000000000000000b4000000b40000000a0000000a00000007000093010000000a00000001800000ffffffff0100000081000000090000000b000000b00000000400000004000000ffffff7f050000000100000006000000000001000e000000efff0000040000000400000002000000e0e70000050000000000000c040000000f0000000000001204000000020000000000001000000000000000000000000300000000010000000500000000000000070000000100001301000000080000004000000009000000002e305f6f6130002e00"], &(0x7f0000002c80)=""/4096, 0xd6, 0x1000, 0x0, 0x1ff, 0x10000}, 0x28) mount$9p_virtio(&(0x7f00000002c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) (async) mount$9p_virtio(&(0x7f00000002c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$binfmt_script(r5, 0x0, 0x0) ftruncate(r5, 0x5) openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 59.273135293s ago: executing program 6 (id=850): unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) syz_usb_connect(0x0, 0x24, &(0x7f0000001140)=ANY=[@ANYBLOB="12010000c5aa6d08cd0c380003990102030109021200010000c7000904"], 0x0) 56.980549289s ago: executing program 6 (id=857): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x2254, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffeb0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005ae4c41096050100f5050102030109021b0001000000000904d60001b5e14500090583"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 53.675966233s ago: executing program 6 (id=870): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0xa, 0xd}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0xffffff77) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='ext4_begin_ordered_truncate\x00', r0, 0x0, 0xe}, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x803400, 0x0) setpgid(0x0, r2) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x3000) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) 51.819256562s ago: executing program 6 (id=881): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x80109, "fa02946a000000001dda524f03000000000000000000003673000000002000"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) read$FUSE(r1, &(0x7f0000000a00)={0x2020}, 0x2020) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010008200000200640000", @ANYRES32=0x0, @ANYBLOB="00000000003f00001400128009000100766574680000000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 35.663063988s ago: executing program 35 (id=881): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x80109, "fa02946a000000001dda524f03000000000000000000003673000000002000"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) read$FUSE(r1, &(0x7f0000000a00)={0x2020}, 0x2020) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010008200000200640000", @ANYRES32=0x0, @ANYBLOB="00000000003f00001400128009000100766574680000000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 34.121881245s ago: executing program 1 (id=953): close(0x3) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x0, 0x1170, 0x1398, 0x238, 0x1170, 0x238, 0x1398, 0x1398, 0x238, 0x1398, 0x3, 0x0, {[{{@uncond, 0x0, 0x108, 0x128, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x1, 0x0, 0xd, 0x5}}, @common=@unspec=@devgroup={{0x38}, {0x1d, 0x0, 0x0, 0x0, 0x3ff}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'veth1_vlan\x00', {}, {}, 0x84}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0xad84, 0x4, 0x2, 'snmp_trap\x00', 'syz0\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, 0x0, 0x0) io_setup(0x400e, &(0x7f0000000600)) (async) io_setup(0x400e, &(0x7f0000000600)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x1) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x1) syz_clone3(&(0x7f0000000080)={0xa1820000, 0x0, 0x0, 0x0, {0x8003f}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r2, 0x0, 0x0) (async) io_submit(r2, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000001000), 0x20702, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x32, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="13d9887cfd24", @val={@val={0x88a8, 0x5, 0x1, 0x3}, {0x8100, 0x5}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0xe, @remote, @multicast2, @broadcast, @multicast2}}}}, 0x0) r7 = syz_clone(0x0, &(0x7f0000000240)="136e4c98cf237e815e67a562a8f933b399146cec27b8861e2261541350a05940b225a1bf5d2b135014b62ecdb94d0b8d4d816080326946eaa4f50c5ed70ecda2657962dc7c07f28f45a1f21d07cba6ea", 0x50, &(0x7f00000001c0), &(0x7f00000002c0), &(0x7f0000000300)="5f44d4246622e6f1689188b68ee193eb30b8ca5738d860d69cfbbf786ed32db3fb8a2426fba73743f1d104c00df1e2c945bfa6c2ece673083358fe9fedb97cd8a931727e479a7947d82580f0ccee1f9755a6") sched_setaffinity(r7, 0x8, &(0x7f0000000380)=0x1000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000040)=0x2c1, 0x4) (async) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000040)=0x2c1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000800)="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", 0x575, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000800)="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", 0x575, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x1c}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) 31.915201419s ago: executing program 1 (id=959): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000900)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc, &(0x7f0000000980)={[{0x8, 0x4e00, "998bf0225442c2ea"}]}) syz_usb_control_io(r2, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000100)={0x0, 0x31, 0x42, "2bcbe0348b987855622416e9ec843a224f580d4c415cc75b4d5956f27ec7fb2e7fa1405c7589db46ac7b567db5cb1c438ab6088d62b33c62c350ba97670c6f800321"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 28.504284267s ago: executing program 1 (id=968): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xa) (async) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000040)=0xa) (async) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r0, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x5}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x2}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x1) (async) io_setup(0x7, &(0x7f0000000200)) (async) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000280)=0x1c, 0x800) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x4, @private2, 0xe}, 0x1c) (async) r2 = socket$kcm(0x29, 0x0, 0x0) (async) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000300)={@mcast2, 0x0}, &(0x7f0000000340)=0x14) sendmsg$kcm(r2, &(0x7f0000001a40)={&(0x7f0000000380)=@ll={0x11, 0x11, r3, 0x1, 0x1, 0x6, @broadcast}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000400)="ba26888d6d679d460b0ad367edeca7b490b22e460d66808824c269a511cd6da3f54ba7e7fd70fbd606e15891fc9f2bd2fee8f92610d04b0978beeacb7b1552add0d202c9d9eda1fc794956d3165b0042f34c0014dd3a69d0dc06f3d88653c90265f1047f2977f91b3fe4ae188df2dbfae25ba560c7e82a55be84d709bff6749927891ba95a9b528513ec31fc60c18451a2b594182f06b326e211a8d2540f95047b559bee9e0ffa1c8bdc252bec80a8e0dfc7058d175ab8", 0xb7}], 0x1, &(0x7f0000000500)=[{0x48, 0x117, 0x2, "66fc55b1219ef7e37bdff5a27b9dd0ab84a70a458b8148888b5e36574e5cdc9c282e5624f0309e05e7eb38b13558ec2ec0d9f76f"}, {0x18, 0x109, 0x3, "416a0b8d4cc0"}, {0x28, 0xff, 0x7, "8835f23cf27d534c4120808077e18c4c6ff585c8503c2bbe"}, {0x48, 0x119, 0x3, "3082f7a1ccc2b6b622f93e330e27d13a55ff6c0b2a9d6af8baef11e99cca5cb4a60acd8d9e7fb5874c95a4ec16169b7769dedb5cb3"}, {0xd0, 0x111, 0x9, "0c8e11793d871c21d24eb3aae4e8a3456d2e8d44f4558b6e9816aecb9d1ea869e4c6d7b4c811b66b0ca2f17150b6c951c3f36799511b99fe19c8959966f7726f6b614b8ca3ff12d377139d5ff48bb8068cbe045f9530efb65d2e32617f6791efca648a5e4e61b73fbb74a9621e8b8fd1b3bf22dd72d70cafab3cf03f9834b6f4d98a18e6953c5708c812787f66a5b5fe80b9be435a9c0523cad6ebf9fdd346af9e4a62d2fc7670cd6077d5bd2a9aeba9427da746ed2fdd8fb02745d4b821"}, {0x1010, 0x104, 0x9866, "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"}, {0xf0, 0x10a, 0x4, "d65d8a0870e1652de0e4396a2490f7957c857c7faa7891c0a7643eab75adb4dc3eefb0457d3c5e44e382dc6f5e0cb4e1769d65e67180291df0e5e9ba52d2f9fc8241c533683acaf4dacef8c1aaa1232ffe39d8c3807e1f19bd76ff958cc266bdea27c4f2702408cffc4ad7b7a7073a6b200860d927696fec7ef8aade7d4d49a4a807d49a727a0f8dbd58dfe934c970f8f269f66c8766abeaff3f96db1c925602513382f7c963d985d79ff748564fd2711dbc19e9d418fa364f46ecc9517ca107503f8ea1d277439e9cda960b91b50d2218878f93a769e1b41fd37b662ab1"}, {0x98, 0x10e, 0x6, "6978b83728f3c2f2aec8dc6edcb3e61bdabb9732683a733859289f1cee0527fb90b47365bc42e148c8027961ce11707a7d469051e80fde58ab1f8778bd80147c27ffdf83f78a4468aff7ecbd22e362b834cfd9b2bcf63f4076cc0825eb9c9ddcf672dde8eb78c0c4cfc1b5c0a42d33849f21bf6a0c49e4094ea7f45db63d4cb145"}, {0xe8, 0x115, 0x1, "d2a5517334e8ea4263f4f9da924f5716d8e0e27f931842ad222335a240da38cc08b954d11ac2eb155652d9c42d11ed5dc69ef11318eba0960a7a63658d5166dae5a2fff6a504db6f64f7488d8038398572eac2baf90493e10d71a9c9a408fd7c2187f230a2c9415c6776842d333383f2da9201398e00e60a30ae09277f6180ac25d12017743d6eae20eaa7011466a28f0045b58000b1e0c538694a12ec40640a1e9452b8d8ca5697674d764cd2fe4ea73b21610267e151a6406b57cc5625695414fc48a9e6e5c774b24d5af9cf39e15abece95c6d05fd5"}, {0x100, 0x10f, 0x9, "a051de6f0a977546b22357972159ca25a1095a1369d88be4fb04df618fcb269fd547fef315834041ac3219c43c0523550f039556b6c459a16fa8da5030b53d88590900707802fd00f51d3124829f6c34438449ace9baacc0f77508c366e9b0dd44bd0bd08eea3523cce02050b515594a09abcef2efdc93176c32b3ad899912acdc59af39f1af725f5bbb4d71acdc98ee9b967fedfba92a9030e77c1f9c29f07a413deb39ce97c127c3040c79b3e3777589aaa5ef1335b6046fbd191ed07f8c64193fecd0469eaa16b40b52632ccf06dc95d7f054b26162291c5a99655a8de14ea50215213b5cb8d0f2"}], 0x1520}, 0x20000044) (async) fchdir(r2) (async) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSACCEPT(r4, 0x89e3) (async) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) recvfrom$inet6(r5, &(0x7f0000001a80)=""/137, 0x89, 0x3, &(0x7f0000001b40)={0xa, 0x4e24, 0x401, @private1, 0x78}, 0x1c) (async) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001b80), 0x200, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001c00)={'sit0\x00', &(0x7f0000001bc0)={'erspan0\x00', r3, 0x700, 0x1, 0x4, 0x1, {{0x8, 0x4, 0x2, 0xa, 0x20, 0x68, 0x0, 0x9, 0x29, 0x0, @multicast1, @multicast2, {[@rr={0x7, 0x7, 0x5d, [@local]}, @ra={0x94, 0x4}, @noop]}}}}}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x110, r2, 0x1112000) (async) r8 = syz_usb_connect$cdc_ncm(0x6, 0x88, &(0x7f0000001c40)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76, 0x2, 0x1, 0x7f, 0x40, 0x81, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "2a3ea7a017c4"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x3, 0xf, 0x7}, {0x6, 0x24, 0x1a, 0x7, 0x9}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x8}, @dmm={0x7, 0x24, 0x14, 0x6, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x8000, 0x80, 0xe3}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x10, 0x7, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x1, 0x3, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x608, 0xf, 0x4, 0x59}}}}}}}]}}, &(0x7f0000001ec0)={0xa, &(0x7f0000001d00)={0xa, 0x6, 0x201, 0x1, 0x8, 0x81, 0x10, 0x3}, 0x98, &(0x7f0000001d40)={0x5, 0xf, 0x98, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0x7, 0x0, 0x401}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4ea566d22f44fcb0, 0x15, 0xa8, 0x3}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xe, 0x1, 0xfff, 0x0, 0x1, [0x0]}, @generic={0x6c, 0x10, 0xb, "0f5bb6c3e2d02c802e9b040dc356cfa1f6db2e48ec044c63df6e58ebfa4e5a468ba1ce13a713c0ca4572df8160060f44c6708b6e8b89262f78f0e79d154894159f95e36bebcd81fa1973bf2466751a067340777adbdd69878140d4933d961b6abffbfa25f34c6b5f19"}]}, 0x2, [{0x4, &(0x7f0000001e00)=@lang_id={0x4, 0x3, 0x2401}}, {0x75, &(0x7f0000001e40)=@string={0x75, 0x3, "bbb562187d94c606b528270f9fdf75e743223edbd472ca23d6be24f3c4bcc88a3fabc3e7c34a21a7d45b387550a4fb4f71c7e6ab4da404b0665d5e912abca08ac8716c1b04d2359ad31d4bd9fad6918c87623d08efd4b77624e66933fe0713f2c55005f87afe4572ad71eb6ab99cf1766cd6e5"}}]}) syz_usb_control_io$cdc_ncm(r8, &(0x7f0000002040)={0x14, &(0x7f0000001f00)={0x40, 0xa, 0xda, {0xda, 0xb, "2663fc5149ab46ebf3f583bd64f78b77fe5d3b06d549f38792b97f018f3b4cfbed241f431809899aba7216bb8a45b6e5dd354753d532fc95e35e2974f142ce9005bfe3a68198422a9c67954fa6a1e3d51e2edf212e6f2f4856eaeb7bcf721aacdc9a6231d95e44137f07ce4f0fe54e2ad3140658516ee9cb9720b6122b42cc2a523640d043fbc41280edb4d1dad30e49419c2fdb42aa60dbb49bf8b6533aa72439778645771696e499bdf38d295a21f6216a0468381fe12551feb08046226613708f11585a307ba84f2e34fd1ab6ab23ecd5014ec022a4f3"}}, &(0x7f0000002000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002340)={0x44, &(0x7f0000002080)={0x20, 0xb, 0xbb, "61d5aa9c884df31e8b123569fdaab31f355287dc863bc2b83149f24d53003bbfbbb45d05ffd30a741d74d1d42c6aa2b593d80a9bc779f7b13d37603b944e347ba7b97cc5910b32631410f7ee5186279552b597fe77298a8c75b238565c2b557a733955dbaeb9f0d1522946c9a1b4d202c7dd2ea92beb1f4897bf04661ae46e924f9ea041e439d516fdbc7aef4176f1a4a4b7f30067d55f53acbfb5429f907f81e6dab33535ffa741e1620dbd220e523d1538d2a55429ece1474fc1"}, &(0x7f0000002180)={0x0, 0xa, 0x1, 0x81}, &(0x7f00000021c0)={0x0, 0x8, 0x1, 0x1d}, &(0x7f0000002200)={0x20, 0x80, 0x1c, {0xabf, 0x1, 0x119, 0x1, 0x9, 0x9, 0xffff, 0x6c88, 0x1af2, 0x2, 0xfff8, 0xffff}}, &(0x7f0000002240)={0x20, 0x85, 0x4, 0xe08}, &(0x7f0000002280)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000022c0)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000002300)={0x20, 0x89, 0x2}}) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002400), r6) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000002500)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000024c0)={&(0x7f0000002440)={0x54, r9, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x18, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x852) (async) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000002540), 0x500, 0x0) (async) ioctl$SNDCTL_DSP_NONBLOCK(r6, 0x500e, 0x0) recvfrom$packet(r6, &(0x7f0000002580)=""/94, 0x5e, 0x1, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000002600)=@bloom_filter={0x1e, 0xd, 0x0, 0x4, 0x40084, r6, 0x0, '\x00', r7, r6, 0x5, 0x3, 0x4, 0x6}, 0x50) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000002680)=@req3={0x3, 0x9b8b, 0x80, 0x4, 0x8, 0xb, 0x40}, 0x1c) (async) sendmsg$nl_generic(r6, &(0x7f0000002780)={&(0x7f00000026c0), 0xc, &(0x7f0000002740)={&(0x7f0000002700)={0x20, 0x1d, 0x10, 0x70bd29, 0x25dfdbfe, {0xd}, [@typed={0xc, 0x66, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) 28.322349033s ago: executing program 1 (id=971): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1e3) (async) r0 = inotify_init1(0x80800) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x610003d5) r1 = inotify_init1(0x800) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x40000000) inotify_add_watch(r1, &(0x7f0000001080)='./file0\x00', 0xc30002c5) 28.135801817s ago: executing program 1 (id=973): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0xa, 0xd}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0xffffff77) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='ext4_begin_ordered_truncate\x00', r0, 0x0, 0xe}, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x803400, 0x0) setpgid(0x0, r2) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x3000) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) 27.182215552s ago: executing program 1 (id=974): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f00000000c0)=0x9, 0x4) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xcc) ioctl$sock_ax25_SIOCDELRT(r1, 0x890c, &(0x7f0000000000)={@default, @default, 0x8, [@bcast, @default, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@newtaction={0x94, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x80, 0x1, [@m_bpf={0x7c, 0x1, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x1, 0x5, 0x3, 0xfffff4a3}, {0x7, 0x4, 0x8, 0x4}, {0x6, 0x7f, 0x5, 0x5}, {0x8000, 0xf, 0x5, 0x7}, {0x7, 0x1, 0x2, 0x5}]}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) 10.977391823s ago: executing program 36 (id=974): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f00000000c0)=0x9, 0x4) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xcc) ioctl$sock_ax25_SIOCDELRT(r1, 0x890c, &(0x7f0000000000)={@default, @default, 0x8, [@bcast, @default, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@newtaction={0x94, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x80, 0x1, [@m_bpf={0x7c, 0x1, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x1, 0x5, 0x3, 0xfffff4a3}, {0x7, 0x4, 0x8, 0x4}, {0x6, 0x7f, 0x5, 0x5}, {0x8000, 0xf, 0x5, 0x7}, {0x7, 0x1, 0x2, 0x5}]}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) 9.84430232s ago: executing program 7 (id=1059): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0) epoll_create(0x3ff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="0b036c11e0ff64000200475400f6a13bb1000000080088484803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r7 = socket(0x2b, 0x1, 0x0) r8 = syz_io_uring_setup(0x110, &(0x7f0000000480)={0x0, 0xfad6, 0x400, 0x2}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7}) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r11 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r11, &(0x7f0000004340)=""/102376, 0x18fe8) io_uring_enter(r8, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r8, 0x18, &(0x7f0000000000)={0xfeffffff, r7, 0x23, {0x3b4, 0x6d3}, 0x6}, 0x1) 9.278634225s ago: executing program 7 (id=1061): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0200000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x6, r2}, 0x38) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 7.739520295s ago: executing program 3 (id=1065): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x1, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xbe}], &(0x7f0000000240)='syzkaller\x00', 0x34ea, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000300)=[{0x1, 0x1, 0xd, 0x3}], 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000001c0)='ext4_journal_start\x00', r1, 0x0, 0xb}, 0x18) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000080)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000180)={r2, 0x1, &(0x7f00000000c0)=[0xd], &(0x7f0000000100)=[0xb0, 0x4, 0x10, 0xad10, 0x6, 0x4, 0xc000, 0x101, 0xb795, 0xfffd], &(0x7f0000000140)=[0xb30, 0x5, 0x9, 0x1, 0x0, 0x7, 0x2, 0x9, 0x2]}) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x13, 0x3c, 0x3b, 0x10, 0x497, 0xc001, 0xd516, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7d, 0x0, 0xf0, 0x0, [{{0x9, 0x4, 0xa5, 0x81, 0x0, 0x88, 0xc8, 0x76, 0x61}}]}}]}}, 0x0) 5.996258288s ago: executing program 3 (id=1068): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1}, [@FRA_DST={0x8, 0x1, @loopback}]}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket(0x2b, 0x1, 0x1) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000002c0)={0x3, 0x6576, 0x7f}) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x41}}}, 0x0, 0x0, 0x3e, 0x0, "bb02a3c364ca41d6357e544508474004000b42a20000000000000010208a0e2f964e0000c534a632cd6193fcf19b2df3eea18afaa4ff1f56c54dc46d8b6d2ccd00a0cf0a007bbe00"}, 0xd8) r5 = socket$kcm(0x23, 0x5, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) setsockopt$inet_mtu(r7, 0x0, 0xa, &(0x7f0000000080)=0x5, 0x4) socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r8, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}}) sendto$inet(r7, 0x0, 0x0, 0x4000000, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000240)=0x6, 0x4) listen(r5, 0x800) accept4(r5, 0x0, 0x0, 0x80000) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000) 5.878801895s ago: executing program 8 (id=1069): openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x2040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xfffefffe}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0xcd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) lseek(r0, 0x0, 0x0) 5.873802762s ago: executing program 5 (id=1070): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080)={0xb}, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r1}, 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r7, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x24, r3, 0x1, 0x123, 0x238, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xda}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendto$inet6(r0, &(0x7f0000000040)='l', 0xffe0, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r9 = dup(r8) r10 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io$hid(r10, 0x0, &(0x7f0000000440)={0x18, &(0x7f00000002c0)={0x0, 0xb, 0x1, 'b'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r10, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0xb, 0x4, 0x11, 0x5392, 0xfb9d, 0x9, {0x0, @in={{0x2, 0x4e22, @multicast1}}, 0x81, 0x0, 0xc, 0x4b, 0x9}}, 0x0) r11 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000c80)={0x84, &(0x7f00000007c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r9, 0x2c93a000) ioctl$PTP_PIN_GETFUNC(r9, 0xc0603d06, &(0x7f0000000140)={'\x00', 0xf981, 0x0, 0x5}) 5.61898125s ago: executing program 8 (id=1071): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000000000000002020207b1af8ff000000001f1200000000000007010000f8ffffff"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0xa}, 0x94) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x7427, 0x0, 0x0, 0x20, 0x3, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x80000004000080, 0x400000000, 0x8, 0x0, 0x6, 0x5, 0x8001], 0x8000000, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = signalfd(r1, &(0x7f0000000140)={[0x3]}, 0x8) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x2, 0xe, 0x7fffffff, 0xffffffff, 0x0, 0x0}) sendmsg$nl_netfilter(r3, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)={0x2c0, 0xb, 0x2, 0x101, 0x70bd2d, 0x25dfdbfc, {0x7, 0x0, 0x3}, [@typed={0x8, 0x10, 0x0, 0x0, @ipv4=@remote}, @typed={0xcf, 0x95, 0x0, 0x0, @binary="39961b95314264c9956a59edb882a46d4f758d07824dbab09829665528f8b81726a218c2a9b4c2073b9a78264d3ba2ff2e6ae35824fcb15530060534a0acbeb94074b6f64fb3d42ba0a62678c66bbc72b0866a33a73cbf74733ecfbb690c0701e784e6bc5656a9dc1e9329f7bb31b802ee7fc24218afee4159d97a737aafccbbaed81b40a6ad02b37e1d1759dae5817103476536ce0506af9981e974ae8d7ba7ef3deb4e38b167003661c57821bc545655a5a89a03e8d58986402c844498a0265bacc84862ad1a406cbb12"}, @generic="b0dede410d86a92babe9248426193729cca8cc2b55eae85d941b0342abb4b105ee993b3839a0460e20a2bc8b66e0b8f28097", @typed={0x8, 0xbb, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @typed={0x8, 0x2a, 0x0, 0x0, @pid=r4}, @typed={0x9, 0x2b, 0x0, 0x0, @str=',%/.\x00'}, @generic="6ead5de23262ddfe2d4b320acc0344e4af36b5f724893423a07855b75fa24fae706e2e9e04474413d773afdc687004c7b7ac9901e8619ad0b3ce7f74f37525ec0bb04977b8981a878bdcfa2fedbaf6f1eb3c83644c39", @typed={0xb9, 0x39, 0x0, 0x0, @binary="fb2efcdee6873b1e049fde38d7282467df92dff9e56777fd7c7d416a38f10ed21eb2e4ae57172e63cc2f4f45afc38711fb023fb76daf9df325fd25f06b67ec4f009b357afe82a8e967115f646478d620e10f619e6aac441eba363128db4e6f0038ac99126d05ea844d46f654217bcdb0b12caee316fbc55851f848890f6f430c6fe1a92bdf5e3e9386e255973ebdac1ab45d81a871cebb077535d35204fe5c8bd81124c556cd22b74b3309bc561d15ad0b30b4997c"}, @typed={0x14, 0x12b, 0x0, 0x0, @ipv6=@mcast2}, @generic="31962b15989e624499cf452ac00b7f93e55f62d3a3ac0377210d40b71c04ddbbd067f9da317c42b48d670be18fd6b844dee8aeb0fc0fa1da7edc3dc7ac125aa7268f5fd8f60062fde17bfcfde116038511e2803c5ef26de641797acedc258b"]}, 0x2c0}, 0x1, 0x0, 0x0, 0x2000c4c5}, 0x4000) 5.349682476s ago: executing program 7 (id=1072): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010104, @local}, {0x11, 0x1, 0x0, @empty}}}}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) (async) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) prlimit64(0x0, 0xe, 0x0, 0x0) (async) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() (async) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) connect$pppl2tp(r0, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x3, 0x4, 0x2, {0xa, 0x4e22, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}}}, 0x32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0xffc3, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x4f, @mcast2, 0x3}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x4f, @mcast2, 0x3}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r5, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 5.286376084s ago: executing program 8 (id=1073): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 32) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async, rerun: 32) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000040)={0x8, 0x9, 0x4, {0x2, @vbi={0x9, 0x1, 0x7, 0x34565559, [0x34565348, 0xb22], [0x7], 0x1}}, 0x8}) socket(0x1d, 0x2, 0x6) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000380)=""/196) (async, rerun: 64) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000000b00)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0xa, "e03495ef565fba"}) (rerun: 64) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000500)={{r5, 0x4, 0xb0, 0x8, 0x3, 0x5, 0xffffffff, 0x2, 0x2, 0x9, 0x6, 0xecb2, 0x101, 0x998e, 0x10000}, 0x10, [0x0, 0x0]}) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0x2, &(0x7f0000000040)=0x12, 0x4) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x1, 0x50) (async, rerun: 64) io_setup(0x4fe, &(0x7f00000009c0)=0x0) (rerun: 64) io_submit(r8, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x40, r7, &(0x7f0000000200)='8', 0x1, 0x10000000005971}]) (async) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0xce9dc54468bb77b8}, 0x40) 4.927073211s ago: executing program 7 (id=1074): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ed43000000000952518245f7b8ca9b7c9ed3c6843ad1400010902240001000904000001030000000921000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000000)=0xffffc017, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf200000000000000700000008ffffffbd0301000000000095000000000000006916000000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d4301000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9755ba08554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a6538b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c51231422bb8fab4d4d897db2c544c0ec50b8eac8c63d2b1cd06a39702bd547f5ebaa6954f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564b8f8a621483fb2a5ff221e0d831d64759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d8b570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91f0eb18e21dfdab3c84ec11377fbbfd1e000000000000"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0xfffffed4}, 0x48) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f00000000c0)={0x0, 0x3, 0xa7, {0xa7, 0xe, "d3e4b757c8d12222578f8e370ac5bf81eb828fbbe7511d2d32a953bbf7f516ad63d8bcd766daf2a08885574a49bbd63ce39383a7f8a0e1322a0bf9f1760ae45254aeb68166b7f36800ead50ad012e69fd157d53bc263cc903976a511c885845d210d50dde2f12f174a84f8927cddbff04542ecc0b81219fe585eb87bf77286de715f8ed0334337c0f5a090e13b4c89e1b5286a4d664be341604e88b0bd004ac1350c66a289"}}, &(0x7f0000000180)={0x0, 0x3, 0x6f, @string={0x6f, 0x3, "31f25a9af834169a016e78bb872bad4203954fb305d4d8b0b006593e27cbf590ff6c5324d68e4743175eb96ff666e55cd16abf934b3083fa7190a083a11a1aab9e7b587537b73d0fe630c89080dad9eece8f8e41c98c279732c05b62e8694288eded998f7931407c5ac6c23edf"}}, &(0x7f0000000200)={0x0, 0xf, 0x5f, {0x5, 0xf, 0x5f, 0x6, [@ssp_cap={0x14, 0x10, 0xa, 0x2, 0x2, 0x3, 0x0, 0x9, [0xc0c0, 0xff4100]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x2, 0xf5, 0x7fff}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0xe, 0x6, 0x6}, @ssp_cap={0x24, 0x10, 0xa, 0xed, 0x6, 0x0, 0xff00, 0xfff, [0xff3f, 0x1fe3fc0, 0xc0, 0x3f00, 0xc000, 0x3fff]}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0xab, 0x7f, 0x3, 0xfffe, 0x6}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x8, 0x4, 0x74, "b72b48bd", "bb195af5"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xa8, 0x10, 0x1a, 0x2, 0x1, 0x9}}}, &(0x7f0000000740)={0x84, &(0x7f0000000340)={0x20, 0x17, 0x29, "8199f8508860341cdde8da921a28e6a019c04535bb3930c9d28b2507503a6df2d898ce511c834cdfee"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xb1}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000000440)={0x20, 0x0, 0x8, {0x120, 0x20, [0xf0f0]}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x8}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000500)={0x40, 0xb, 0x2, "919f"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0xd}, &(0x7f0000000580)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, &(0x7f0000000600)={0x40, 0x19, 0x2, "de99"}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x5}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0xac}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x2b}}) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x8, "051000"}, @main=@item_4={0x3, 0x0, 0x9, "fd8ccb8b"}]}}, 0x0}, 0x0) 4.908477283s ago: executing program 3 (id=1075): r0 = syz_clone3(&(0x7f0000001140)={0x20c840000, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x0, {0x24}, &(0x7f00000000c0)=""/4096, 0x1000, &(0x7f00000010c0)=""/64, &(0x7f0000001100)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0xa}, 0x58) sched_setaffinity(r2, 0x8, &(0x7f00000011c0)=0x1) (async) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000001240)) (async) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1a) ioctl$KVM_SET_BOOT_CPU_ID(r4, 0xae78, &(0x7f0000001280)) (async) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f00000012c0)={0xf28, 0x10001, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000017ec0)='/proc/crypto\x00', 0x0, 0x0) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000017f00)={0x1, [0x0]}, &(0x7f0000017f40)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000017f80)={r6, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x12}}}, 0xfbff, 0x5}, 0x90) (async) getsockopt$netlink(r5, 0x10e, 0x7, &(0x7f0000018040)=""/145, &(0x7f0000018100)=0x91) (async) connect$pppoe(r5, &(0x7f0000018140)={0x18, 0x0, {0x1, @local, 'pimreg0\x00'}}, 0x1e) (async) sched_getattr(r0, &(0x7f0000018180)={0x38}, 0x38, 0x0) (async) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000181c0)) (async) getpeername$l2tp(r5, &(0x7f0000018200), &(0x7f0000018240)=0x10) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000018280)={{0xdddd0000, 0xffff1000, 0xc, 0xa5, 0x62, 0x2, 0xb5, 0x76, 0x0, 0x5, 0x4, 0xf7}, {0x5000, 0x41000, 0x3, 0x4, 0x8, 0x3, 0x5, 0x6, 0xc, 0x2, 0x4}, {0xeeee8000, 0x25000, 0x11, 0x0, 0x6, 0x4, 0x9, 0x7, 0x9, 0x3, 0x5, 0x9}, {0x2000, 0x5c000, 0xe, 0x2, 0x0, 0x5, 0x3, 0x0, 0x0, 0xd6, 0x7, 0x8}, {0x70000, 0x2000, 0xb, 0x4, 0x5, 0x7, 0xfa, 0x2, 0x3, 0x9, 0x6, 0x1}, {0x80a0000, 0x2000, 0xe, 0x0, 0x2, 0x5, 0x2, 0x57, 0x4, 0x0, 0x3, 0x6}, {0x1000, 0x6000, 0x0, 0xb9, 0x8, 0x5, 0x1, 0x4e, 0x7, 0x8, 0xff, 0x79}, {0x1, 0x60000, 0xd, 0xf, 0x7f, 0x5, 0x2, 0x13, 0x40, 0x9, 0x6, 0xe1}, {0x2, 0x7e7}, {0x41000, 0x3ff}, 0x40000031, 0x0, 0x2000, 0x30000, 0xe, 0xcc00, 0x6000, [0x12, 0x8, 0x5, 0x9]}) (async) getresuid(&(0x7f0000018440), &(0x7f0000018480)=0x0, &(0x7f00000184c0)) mount$tmpfs(0x0, &(0x7f00000183c0)='./file0\x00', &(0x7f0000018400), 0x800, &(0x7f0000018500)={[{@huge_advise}, {@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x32, 0x78, 0x6d]}}, {@mode={'mode', 0x3d, 0x734}}], [{@smackfsdef}, {@fowner_lt={'fowner<', r7}}, {@context={'context', 0x3d, 'system_u'}}, {@smackfsdef={'smackfsdef', 0x3d, '\x00'}}]}) (async) getsockopt$inet_int(r5, 0x0, 0xc, &(0x7f00000185c0), &(0x7f0000018600)=0x4) (async) r8 = add_key$fscrypt_provisioning(&(0x7f0000018640), &(0x7f0000018680)={'syz', 0x1}, &(0x7f00000186c0)={0x3, 0x0, @c}, 0x29, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r5, 0x13) setsockopt$bt_BT_SNDMTU(r5, 0x112, 0xc, &(0x7f0000018700)=0x7, 0x2) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000018740)=0xffffffffffffffff, 0x4) setsockopt$MRT_DONE(r5, 0x0, 0xc9, 0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r5, 0x101, 0x19, &(0x7f0000018780)=@bpq0, 0x10) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000018b00)={&(0x7f00000187c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000018ac0)={&(0x7f0000018800)={0x2ac, 0x0, 0x8, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xf}]}, @TIPC_NLA_LINK={0xc8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xba}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x73}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x63}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x80, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff74}]}]}, @TIPC_NLA_NODE={0x74, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x50000}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x46, 0x3, "e604804f4574afa2c0597ac0a6f54d9f55a072cc785e7f5370243f7813d5323c653b8cb5fef0de63538547d4b5de89c237c684e4d72ea6867df09b677dfee40d952e"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xa173}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x894}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc0f}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xc}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x38}}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}]}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x20040800}, 0x10) (async) r9 = syz_open_dev$cec(&(0x7f0000018b40), 0x0, 0x8880) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f0000018b80)={{r9}, "ee2d8f16bab7f8c35c90c551b1af4f3dcf8731e99c2303cfb1492faa683bdb9c1d404279fefb3067ce351542645ef056a22e6f218fcbf6a7bb6bb00c46f859a52d09ba63c0b79846acf8f50eb36800f8173e559c7e7ffe06ead1e4e6275e989a8b074d0cdc32dea3b5e74e1980e2ccef72ec436af790dc521819de2c4563cfd2ab912306929df24b25e7d990551ed4e90953e5a83e75d95677df78d5bc5801ce8998629284ae2f22008d2a25a03610d4879b99ade3c7a24cfd47561f0745d8cee16c9608a38ad38e94d13c248973445f882c197adc11832e8d1c07eba1a0f248e46ba0c9e8bd36898d18f2753cb2a9344328b0eff53c8f67469a109e13c1fd78a59396585601da9b5bbd4dd322590d0d2cafd38564590d9936290823d10420747c489b071bd9893e5c67482088cb8f61e4f1f52102c032f7ecb20d44e9eadbe1f109ab6e059c60245b4ba421e212b17b024ac3ebfa84ac132d71da2be6dce43ba68c0f4a63f1f101fd0751c5d62e6d4470ff8dffd2010a6a0fbdb8e379c8bcebaeec0dd4007545b88537fb8376d1b45a01605701abd37b80dc9a8039b5dfdbea82d21c1cf055cfe58ca01d4e777fe077ad3dbde1830898c97774d258c40cd4cea15a087fdfeddd22aa1c016b3242f3fa25b73bc775ee43a89b622ad6f4a1dadc7211562727620808796845385f7686874c32bc8e537dae9a934ce0fc654222cc83fcf0e0fd47c08151a03794861bbecaee05e9e0a8c89f27cfff1c34540763dddf782105db197df9953c7f48aaf2a32293098e96aa1216819ac6d68698830b6e26a25cc4bb9f17e71ded0ca3bcd3fc3ea223076b639c77ce2cbabe5a6e96c59fa891617da2f24809a4f2c28bdb3619b4c2d775ac6e67c0a34b2db1ba01b2ca8b84b3788bfa0269d9a024ff1c416a1e5e1a1e0d9c9ff61d00233644427bcf76e263bbc318b8431a2878d2a833a1b6d7f228d76e9a9cee5bbab7708645ac101a6c7efb4a9a1461ac4db1c68e533b90fb47bbe4c4ff0fbc40f53b894846ce02149f8b49bece646739688f74f37ff4c98be42f57ba949c00b880e8f13e019061450f1fafc4403c83a0ae28bd7281337517aa681daad4a89f93bec8a8c03fda5fe99f36840e8c6a7c5734f80b24a6a89866ec0af8f3fe175e480b169c2721e89d3a878e33d27653e19ba4998c3c123841b84e97d79252014a075d812d8b2065b94ca1d1387c5d6d3e38d28c798de0b47ca3f14e7b16c5d7af8c7e32ac16948ffbaa96fc5dde9186f7a61c0a934d3a869114ae7c7ad47b4c2dfa558cae69e9061d4b0f67c68d1238ff1a784cc75727542d4a782c27a7be9d6556489952fd8f0f86f27d7f3822d28b8df059c108365d731a558a6b0cfb1c9c1fccbb0b69a9071bf77caa33c8b8c5755574c52d370cbe17825c15ffe34b69a2e0e716030faea85fcfb30db64b74aaea6be64520063fb58071d8f34ddd904749d44c1723fb16368e0743b804709c8ac285c13edaca13f281ce590f57724b837bad24f29623e118478375d8fe601f1a601f67c1735bd587976f2487b94ac226f4027b2ef07a89a1555b0e3b4b88b88f99c1cc58feb9c2123b24843aa7bb1825260d6507d1a8aee1e7175a826a7081f2df55a921bbb1f5c087321e3e9f8bf489a39c7940e3e019e6bd91ff3b51d93f901b63151743985225bc035ced336f31f0afafcd47320a22c6bd1acdf20a8da54ab0e66efa3a5cded9c6293bb455f4e490394c303b8773c2380f3da5da3de497f61f05f86de00b85eb71395696c8406558bb925697fb7279888e8e65c0d1c3fc03adbc0860e8ac43505f36c2dce525e6109945259eb6a64becc69add57ee9777a4a8f522fdddb14e52c68a4ffe9dc970ac46027bfdc82310e1f4966de5581540b0ebb416b36789a3d6e2d267a430b8f4bb1b189f50b3b15c65e8dd7e44367d8bffa994b0a4ec62fbbc166d057658f65d602f2d7f9400bef89c7125c3babfb64883a17d415e13f54e567a4d04647b5d6e98502760c0bee3d2de5dc2b9ac727101486b3f4012cd1ff3522875e09612e32b40da22c19644cfb9b8df08a42e26b0cd9f2ee8825ac0bfebd643600b1c6e21537cfa3d65a1a751f06dd570bf381234866a88df683bced5ad48c923ec2254125fe323195b841c49f48c08bd49be5c55539e57d60ba25f5399ceb6d80792e779819a690305a2b3e63c52d751b4411407f7729d899fe7a6ed03bf061b254963eab313c375b12e6786b96a49433482c7568ee602bbc8a934d5e1286451ac6dc8a37fe290d3cb1ac3153202a696e01df0a463df27025ec056f267ddd6c0d0cb21c6c5d4d4f5acd39f03998ac45a250ae7f5801fe6f16c5a5f13b1796bcb341a2d0b3ac331c570d881f50e96d9ef2602c49a78ceb8b8e9d41b936a6a4d824973f63497f64ae66e318c56c148ae37b12c1fca73c502a77bc04f06e1f5dc63434ce93fd5f3ac93ef54026ea1d2ee9de3768cef1332d2a35e20539c1177a0f3af5fc307be290701204c1ce8bb6bdac95f3dfb94a27b4738309e1d6e6fb08f64ab7c2d8e46034e251d3eac821956e883cb111f8dc33280d8fe40fe91bf027c12060936f99831becec5265a692513fdacf5622dfbe0d219bce3923aec722ba39fdafdc32cae4a795853c31bad5e6fb7ca117e30c5a72c9f9933b3c6066691396872c543d6b5fd244ca01466a2df2d78b418bf63996b6ecaf7f38985ee5560141459c3d358a2c72261ee347d70f5a610d9b08c306dbb25784879d86125cbf068409456bbb95693e758089c8578f95248ccc67ff18233418bfb8b5b948813d8b5b3ad0a227c2aa2f3813c7b7e48a3531aa01e030332c27671eef2034951c41c20f2025ed4fb88645a32631c03267b6f395a9f21d1c55029694714ee6c0f3be4e1ba60712127d57d9d08cf756dd6274fb93392d12cfa2e74ebd07fdefe97595db7f4a03a337209bd6fe579a691efff94723c4b193ebc632111270993fb08b2ee37e9ce4a748dde04ec7440ffdb2e787ae8ec5e375316cb062185fab216b57c1448be5cf9f7b25f1030a43be79902593de3eda987cd3a495386c43447016a61e6499dfd7ba916ac2ee37b255a103f589fa34996211a613ea482ea0b220a5e995af7bc46792faf504bf943623cee94287187485e85fb1f987d9545185f8fed56cf131997e846b656083737ce2a5e2d13d833dbbd9500a39c109360db9b8f30c20f1e4eba4b0e3df6f33ce2c673f858e79e0c46f5c6f94cc9411c43067fb06d91c8f283cd965569bb9b10d779a0452d57e91b93e67f3b94edd72418c91f7b4fcb04b3fd807c1001eedb08db24824ca06a48fa9b6a2d2a46a5dc60ce06cd43a2669f87229b0e20fce66a223173257cb6738db89627c9de1708263d1d135d6e4bdf07df93698bc6991a192c3ec3a735300c649814d07b86bae4e0e92fe539795805d54fe9f7df80656b07214bea8eb1267d5e923e002a768ae9c6eac60d5f47836afb3f7e475a4dc8abb8fcd5ae27d068ce5024083a773ed7dbf0e52df72943542661daf90ea25cb01cbdca365a7f016e1bce832bd9fa81b12420ff2ac15419b48d28ec8c9f91eda26abe728194580b85d6d2e8cfdaebb9c9626e3cb5ba2899c44950dea09db1804fe0b09a25df8cf7a9c0d994b902bf1889aa46969b320d2958060d9cc99d09fb6637e059609447671fa2e6a4d10083aed37860c9fadf6ed411bc8a3afcfa3f28b3aaff0ec4eb09f4be12a0f927436dd371264fb2371fe034b79a5547180748f1b494a52f0c928134959a993b71659685f40e06e9ac1dc23f8e8dc358384e03ee907754c563d5762878ed78129a02369be4867d2e2adfe5976315b448618875b7558ed63a2bc5e98ebffd53e89db59b7118cfcd3df788c5dc4c7c170f800231299ee80c952014902c9c91094f8381dbdca504a381fe7d5be96255646c81a783112ee0089c2585d2937153317283adb9f22c47eda97da49fb7a4dfcd8f2f480a9a0a155cb29ef2a8bcc136d0993d2599d019cd76f6b3846e7a4d79d3f32ca149756f91e17e65c6913b3c3039e85a5e9dac9777cb4034fb23782a2ec1345e1d0fc0a4c7b442906ed7c7bcafc8d130c3f38bf1f4c74215439b7785870423c7be98d68f0c37262cd8650d8ca0b6e82e9743ddde8bb8bef82b0dd1ff994d96bbee759774cf17e10e2f6962a9d6885ec366784a936cd822cb3019198f18759aada92333814fa9aea2505b9c0bf0ce4a6f2b678dc07bcbf34e8834346dc6dce652287b348b31fb0c019fbdf5e8b1152bdffc88eb0e7ed13b7a5a8ee93172e1f34762014048ac25ef6b8d2e8267c1e8a26dab1e0dfbf4cbcea985cc55fe6d92afb9ddfb819ee444c358a5750786f503d6c9a687e276fbfa89a9c836fce32210caa7df814aecd697ac503285dd951cfdffcc2723fa9a90910c3fb9df45c8651dc687eb4c401756e94dd58d06a84ffc16900f49d7d92313036afcb8079c100c8e696fe144436ba28eec21a23b44385f1bbe2686d62281d6a2d2593901bd14993d7f863793a915bfe4185240932c73e53d1f973f9c4810d49912c07d037b1f34118558028e2bf4937b9c0dd524d82b30129cdd1b7d9559d002e0ce828513376038e652b81c1c2165abd885cfbdc9cf07024e4ce8ae6f43911ba829c3de4b83ac094e7ae3ea186362443411f08306d6a9847cf67dfee6c7c5db50cf512492981c09492be363739bd12ff69492138c5251553064544f14516b223b4b1d81c1849d0483d8fbd025ca82901b9d3af5d28eed72934b82bc274e9058962aac1ce832f9897ea64f3952dba22cb692114d5199fad7a07340de7988050067f17444ab881c8b46d91ae4e2ee7fc6a25ca575c8d2e1a5cc8f08b25d10e2994170901c89bd0b52485f70fc46b363540799ea743eee4d8298dd24e42b21e000191476b8bd5a351a9c3da700410fc41629809844bf2ae80641484c8e8020bcd590e0a94daa5f3054d95a76f20ca190f72eb8339011b3ed49667e9596fba7da24a30493a0bd631d9ebe3cc17f233f5a732ad7932688220b0acdb4f22d7e853b8510652a09121f4b4332261ab1803570747da02aed2f8366677874927023ef67c57d7fc8c781532f38a758e089da464d7724db09136a7299c9e48061e7dfa49bbd0b752b23264570e0b9f64dc205d3737fc423582e84a91a9bf72ac45c3446a671d53b5f664cbe2ca9907e6fc27d5eccc8580c677ccba08bf355ed60fc5adde9096f6a93a258ebe2ab4dac11539e33a88eea74f66db1a5bb0b1f6f836a96d6456f93c179303da40c130a842a64fb820a2dd6a61b1e07ba71c529e615802355132e13e1883454ccb95176238d8ffa23afa9f7331bed85097bee7b60319873e344635167baf1a4abf06ccf9e123fabba8cf376e397bf14a3a13c35fdd90a90f7d86c34a7da0e46bc339163d0431e221200d893e58a03354331e8214da3af0b5037514300253e2490bb4cb93091ae92899a3f4a4d3c929688557e848f074fcc6c61f5a1e7b95597167ce843c86a7a4a41e8d0cffcf832fad0c9ecd737f4338acbaec44e1548ebc7a0b263c6da8d38f806769c06674eebb99d135c0ee5cd8314e9800814768e280069a50fcc50bd86c6dd6e04a7aa5f6530455d76f6cf6838a12f8c3eb89691de9fab2f39b16ea8d5453902fb01a50fcaca387bac874b62a3ec0182721f4aebc6a62445b79e44caf76ea31bb58bb8565107357185e17fd5eaa0dcbcf1198750a4ab915cc34eeb5c774cd6374cfd3cdcf9"}) (async) prctl$PR_SCHED_CORE(0x3e, 0x4, r2, 0x2, &(0x7f0000019b80)) (async) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000019bc0)={{0x7000, 0x40000, 0x10, 0x4, 0x5, 0xff, 0x7, 0x1, 0x3, 0x7a, 0xb2, 0xc}, {0x0, 0x26000, 0xe, 0x0, 0x1f, 0x2d, 0xfa, 0x0, 0x2, 0xc1, 0x2, 0x2}, {0x6000, 0x77752000, 0x4, 0x3, 0xd, 0xdd, 0x10, 0x2, 0x3, 0x7, 0x3, 0x6}, {0x0, 0x10000, 0xb, 0x0, 0xcc, 0x8, 0x80, 0x4, 0x2, 0xb, 0x5, 0x1}, {0xdddd0000, 0x54000, 0x4, 0x3, 0x0, 0x9, 0x0, 0xc3, 0x8, 0x6, 0x7, 0xd}, {0x7000, 0x4000, 0xb986569726e5c87c, 0x3, 0x9, 0x8, 0x4, 0x81, 0x5, 0x8, 0xa0, 0x8}, {0x1000, 0x10000, 0x3, 0x1, 0x40, 0x6, 0xc, 0x54, 0x8, 0x7f, 0xb, 0x1}, {0xffffffff, 0x2000, 0xc, 0x6, 0x6, 0x5, 0x0, 0xd, 0x6, 0xb, 0x2}, {0xeeef0000, 0x2}, {0x10000, 0x9}, 0x40040001, 0x0, 0x50000, 0x400000, 0x8, 0x8100, 0x200000, [0x5, 0x4, 0x3, 0x6]}) 4.766069968s ago: executing program 3 (id=1076): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r3 = memfd_create(&(0x7f0000000280)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\x86\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, &(0x7f0000000140)=0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB='6'], 0x118) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r8 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r8, 0x3518, 0xaddf, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2120, 0x1}) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000180)=[r4], 0x1) io_uring_enter(r4, 0x2d3e, 0xea37, 0x0, 0x0, 0x0) lchown(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) 4.310938699s ago: executing program 3 (id=1077): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x1cc6, &(0x7f0000000240)={0x0, 0x136f, 0x1, 0x3, 0x1be}, &(0x7f0000000440), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, 0x0, 0x7ffffffe) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x7f) read$dsp(r3, &(0x7f0000000300)=""/79, 0x4f) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@updpolicy={0xfc, 0x19, 0x1, 0x1ff, 0x0, {{@in=@multicast2, @in=@dev={0xac, 0x14, 0x14, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2, 0x0, 0x300000000000000}, {0x9, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x3c}, 0xa, @in6=@private1, 0x0, 0x4, 0x2, 0x0, 0x0, 0x9, 0x4000}]}]}, 0xfc}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r6, 0x3b87, &(0x7f0000000240)={0x18, 0x0, 0xdd703f61efd88e4, 0x0, 0x0, 0x8}) connect$inet(r5, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='veth0_to_team\x00', 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x810) 3.170835007s ago: executing program 8 (id=1078): r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x8, 0xfffffffe}, 0x3c) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r6, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x1000000000000000, 0x7, 0x109e93, 0xffffffffffffffff, 0x400000, 0xd, 0x0, 0x2, 0xfffffffffffffffd, 0x48d6, 0x200000010000, 0x6, 0x6, 0x20000001], 0xd5d5c004, 0x8340}) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f00000001c0)=@x86={0x9, 0x0, 0xb, 0x0, 0x5, 0x8, 0xe, 0x4, 0x9, 0x3c, 0x2, 0x2, 0x0, 0x6, 0x9, 0xd, 0x4, 0xc2, 0x98, '\x00', 0xbc, 0x901c835}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000200)={@empty, @multicast1, 0x0, "606b177019716ea6ff1f2c7ed79c77e2e0f19a230000002007007c3d935f00", 0x3e1f}, 0x3c) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffdfffff000000001164d6436c557f0008004500003000000000000190780000e0fffeffffff2a009078000000004500056a204fc521042ebd8164bd8ab9d888c2fdc2255ae829c49581e38533209210bd0c4caf3e710f849dbf8d7a4e0c5af06d85b897c2dfd4fe8bb233a9a829114f23081a05fc0e2527d7a997cb9c80936963b9a9f7279a107a5c985cd5d7e5a8bac94c57f8e2979d8e5cf7c1a9de9ef8735cbeff006b179a5b3cd502061c"], 0x0) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0x32}], 0x2) 2.971647966s ago: executing program 3 (id=1079): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xf6d0e000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) fcntl$lock(r2, 0x5, &(0x7f0000000040)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000031c0)={0x1}) syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000070961c40e90f55dbfb690102c9030902120001000000000904"], 0x0) 2.838874354s ago: executing program 5 (id=1080): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x200000d, 0x11, r0, 0x100000000) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xb, 0x0, 0x0) syz_open_dev$cec(0x0, 0x0, 0x40080) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x37517475adff6b55, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r5, 0x80045006, &(0x7f0000000040)) r6 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r7, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/216, 0xd8}], 0x1, 0xa3, 0xd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f00000000c0)=ANY=[], 0x6a) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x17) r10 = socket$kcm(0x10, 0x2, 0x0) r11 = dup(r10) ioctl$VHOST_SET_VRING_BASE(r11, 0x4008af12, 0x0) 1.687491872s ago: executing program 8 (id=1081): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x6a0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) 1.684068606s ago: executing program 5 (id=1082): r0 = socket(0x23, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) setresuid(0xee01, 0xee00, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$setperm(0x5, r1, 0xd26237a4a3dc3f10) request_key(&(0x7f00000001c0)='id_legacy\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='\x00', r1) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200), &(0x7f0000000240)=@v1={0x1000000, [{0x3447}]}, 0xc, 0x3) 1.631377592s ago: executing program 7 (id=1083): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x305a01, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setgroups(0x0, 0x0) setregid(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000140), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) llistxattr(0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r7, 0x7, 0x0, 0x242800, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 659.67699ms ago: executing program 8 (id=1084): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001ec0), 0x800, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fadvise64(r0, 0x2, 0x100000000, 0x5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYRES8=r1], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0xe21, 0x0, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x40}, 0x35b}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400add427ab62201745b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003fffffffffffffffff7ffffe7ee000000deff0000000200000000", 0x58}], 0x1) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) 397.547112ms ago: executing program 7 (id=1085): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x64480000, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) syz_fuse_handle_req(r0, &(0x7f000000a200)="c1fd43b601662701272af37a7deda072caa09faa11b0a4ef2825e87f09fb6bc3dfd84ddd853b18203bbf08b1af6066c78b4714a789a8f3605f5920e7afc5b0a04271cebce72a797abd5b9e4a44fdcc150e6ef0e8c3d4360e74275818df26243f28cac3d84e264fd0c77d4bccbc466e7244b247d9dcee026df89aefc958d84a55d4d6922d96ce0349fe28efd6b83d15b7b08143a721c4a677b72362a49eeb15ec5b5f8569bad585e30a62ab149e7e4c7f49af9560fd52ea5730135dc3ea3f6a9a3ae6286e99e1520a43b8813ca6aad1adbb30b2459f90699e2ba3a6335ddcace3737ed8f5f21e027ac2b224389bf0c8c005ac8d8c3ae188679d34da0a2c20a910487d3c91b18770fa5ee483a3f09b882960f12e7d2eb9015895ce80b37f74a305a50deb146b1c3430f31d28e6f827b9c7070bc880d251ddb09e0e70a0512ed2600256332c43a5deaecb01f089333fc3b6721f6ed5b41f9971b7c63f57b5afa8042f5beb1ac1274676dc5406b5828247123bb7be795baee59d779bbde227c90d0a5d863936d434f2ce7a45f9b650600f32827b92e2d828915f0411f765ed82dd012561ed29b09950b96f8e490f1448dbd5e45bdc92a2a36aa67e5e9396b6376f82aa6915eac4144a102de786563e4482f0917698bc70776f8c7aad3346e18ee295af54f3c1658f9b124116a2fdac79353b095cf667dd941c3cba141b3ac8982eed42e7db649c9d49a59378216bf4323ff4c2f2992994d4144b74866a2426e19a2dc8dbf4643f97a214fc9c448512316d76c4116c3ae600dfb98cf85472da661745b638438dbf15d8dd87a8ba35205a000000009cf941454f8c788dc2eeccea412add734798c82e9c86122a91dff778edcd309c05fdca66176e9bc4d410b0ee4627eb889443b574ce205c7f4d6d428e909952712ec3dfc89552279b2da87b010051a451377a0c51a34ebba25c3b62ba98eb6f1549b0fee6a7c5e0c7a72835388803a0a8342bb9f2733224c92a50dd25a9b335f243f2d8c68142aa1db1de2f899a56c623a32f8a74c16db56983eb83f6469316f2fc14860c075236a3ba40e8c265909b8fc6b03c6378269f6629bab81418789cd748d8b786f47ab8f13b0caa5ecd79dbea61330be6de5804f5c211cef78f555e7b2093f4a836cdb8a2cfa261be14e0f59d075f58a16cb130f062a2261df244c57d6f477d761262b2e755c96bad3898894e80b23fae71fc31b2895513a11b0cf07551ca87325592dd10549b7d92da1cb07119fe970b8cc3aacc386ab64d32b308679593256d2fcd1f9e9b15ee93ef859e7268be776053182460e83fb873711226ec9aa5c35b15fbfa12ea0abfc7465b300bd8445c831ae77d2aab7d4bc3ba5f218fda9e90eacde1ac5119eb30073a6f291727cb94fc87a3d3013f3ebb1cd259067c571bd3c57eacce716e61f86bf4041bacadd6c676e17fb3cf89c4984aec78216854a60af68533fcdff12897c3e1b2c10cec019722623f477a512c4e5eef74a6d1ab7a735905373ca3a0b18c3eaa523c86238fba77e45aa07c1b96fa1e3ceb04e5f4742536b687ebf989918f6805cda9611ab9ed10ee33cda71a95be2da0d2c21d2295fdb334dc2057942382dc7d0f70300df3df84cf9a18f042c11243a347569771f9b82404e13684324fb06d867641c87d6d70ad15e90240f901d04a8b8c7fdfb8b84aefee1606f14a2a6995e6b8aaee1b372cd586a6daf28ad7d8ef644c58fa72f0b2f847eef72e18f1a4374c4fa3d604a9bfec6a1a4fefdfaa848279693208dfbc1dbb97b44c4f034090606e0ad312cdfb6a8f68dae7312b064c68813eb41992559ca63d88a8e90711c838f220a4da5bc7d82ec0af83da059bdccdb524a59ad26e43413f131e7703eb82158293a331456ce728c28923bf9ae644a331a667c2932ae1f11a9f9b893f802796ad029c40496c9bc49cdf41a40da1092b404da660e80f33a6012a407805e70f9a180105cd0401ed01a9f6edef4e2479e1579ea365d843c197279e3c79ae56a107dfaba6af80ed9a24d535d19827596ca2b14bf4b110fae4820fc8d0570a64ae08e315da0091f766bceb1fc990465ecb84a2d72efcb9a269816863b72f8d0869b20c14bd72f909fc3ebbf2ba2f98ce3fd7eb54b738692916eeb98ab9ea04ce3e740817dc9ac6561c71d3bc15358ebbb3027294f66eb890577f8a63ecd23beacd93c3b1498d5eefd8b68ebab3536653d5839713b07f79ebb2a6106c009cc535a2173cde3ccc65676bcae513145db5bf08546e8810fb4d193266d491fb9121935138a74c52149959a0c270cd6e244dd7cb140fcf6bf0e7536220f798bf32cda564ebde025a92617f3195e549a491a45446ff0ebfd3b047775af339e59a8da0db6223339325c6f493baa5f2c71b5710a975def3e3919a24a52351acc12e5a2ab6c171705bad0e6afd0ad2b6dd6feaedc9924fdba533fc958fab9a980b775eb4c93a499413073cf09826381b8054f9f09f4a0dfa63ac2f6cb22d001ff277ec7f493bc54d2d1d34a6dad62cd7bccab2ecd419c90087f6945311460b87daad605ff8519aba1d8311a5e565dd26655577aa13da31e01cacbb7e10e720a486e9cc450b8a21d23aeab42838d81dc05f5be0474ab81b806fe71b888323037f3262179e451f765e419bddf7b7a99b40bcc226986efbd3765b66e56a3500de4b18b676361510bd35b3a9c6b8c08222cf7a73c4cda972190f839c2d01a4c171a803c0a77d2769c892b2f0191d2fa01d7d5ca53573e47e93ca9b56b8f0d684d5458d505ad8383f22e19024da06bf6abf30ed663cfb33e202be17bb951e9ea30cfcf65675d2fc64aa51e07237fe8391549185fac5822daa92e73778e080b1304dd757f9035092a729b9a0122d1c07d60336f18a9e46ebeced1041de2e2e8a5de6f4a814d5179bddfcdeda88888cb9ce322a516af3be2b7cf371e9193cb40e66cd41dd94e37f14c6e6469e8fa6c57a4fa3125fb6819b84e276768a7354dd3e2692a77a4a60af85bec0325d0aae72a5f4f7bf9468f1d35147910a55af546e4e3634fe2d8efe116606bf84c0e9c4d442ec8f99fe6c1cc90b99a8d1e53322b26b66928fd01738fa70c0aff84b4f02946c6fa684bd617667857cd751a3ad3d324f9574af78eec6c8c51c25e01cb0ef129199f5a3b3b29e32a34c4ef14c810c2e69e06158f02033e15f1ec00419a91c1450338956a188fac918fb73692491baaf5976ca392c139ba0e551de260dfd6c733b572215f2af0aacc5709b0d4a3b36d23f5882c5644bb455075c5c48bd50492b395d14c36393019fa9eab8a211d71d173754663ea2af1ebdf9751006792609d4db47824d95d68583c922c04af3cdfb58f37b6f958a4b35cbd74a30a393be192fb46bfe4e722c3634c94fbf4829f25dc0b8b07cd16cf4c7e924eb02ae8d675539d32b5d9a54a43811eb98e2db317c67d5bc62901582cbb128542d6be3bc9a5b5b8a8827f2eab15e82b28b411edf67d786b76feed9e7d5ffbc86fbdb19ed80a4f5dcebd631719f8734c398938047011a251370e40d5929e9b4426081029b1339ccb08bb0dbcbb4eedd53792e43a046abc1d5c1dc8c1749052233e18e25593daee94f77f327de61867f1e791b797cc5ee43f8109cb0654d8742ece8512c322442f63dff88702ba047e8370a1b7304536ee7cf465a0a19d965fd03543b991449d6a1a98be5ec3867314c688c5c487e59a6bb05291fda479827172bf3db615c20ea022ff7b16020299220b7c45a7181c1eda48c9a5fa7624843d112c52d99d0b27e168eeadbcd3c60b3f366175decc8c91c64a0a16d3a2e38244dd8d2de806ad741e2256075efcb0466360acaa3f65611789a821c30a13d4b60e44173be9e288dda7d7aae2f8341d9a85104170631c942eef22c10e903bf70b0ed36831d536a0cd65c11a209e37a76f3f54deb326735bec5a532431a81f303af5e9d03717a93a3da18317c459aee8db08b9f0b3331d29770fe7fc4266c15a4294c9c435a38296cd880dcedb34f63037f2a8e3ada9ead3e52abd69e5779905f82a607f70e351d2167bf1b599cfb9314a37df876bd5f2acff82f1773c512ffd308179e47b26946ebcce112273e12895145ec88c701269c93f32a5ab2bc16acd57e997d140d18c2cbed2601a05ec33a63e7edbcca673f71eecab66af5287d7d5a1dad68771ed612d29ef8ab23ef0211b4bbed6f981cd24d652f355d94f6003b01cf3d803a6e36b470402c05816aa2cd747f293300bbe891854d932df7809c7809c2cc3d06c693981e7bc21e89aa3ea8f8829c85185e4ecfd2e293bfa2b88cae2c9e4722b9cfee01911a502d59360532528661eadf2150e26a2992871f562d6fed4a36867b2521b1778c4ce955f5980b9dd9ede42fc4a1394491ebf1c1fb0d794cb8c28b103d76b2e70b0337877a222d7f3cd61f353baf7bc9e23d80f8e5b4459937d75f869c179dd9b948a70b9ba37386532790bac12f2f342fc4f2afd8a45f109331d5daf3344ade893029e322e8b7f3bdb5a49987116b31b2bd6d5bab789ca061ea42f7647c88488f734150e161e5aea78639c5bf9c2fb88da321cbfd379b38cbe6e14af979f238685e2c0ff51629cd228602dbaceff8a214cdc66528cdea114691ef619a8c9a0f9cdb7e08c5bcfc2bfd29e39af38f5db4821c648cc3d976cc455a6e6498c92511b407f3349284901562a912c5af25ff792b9c6c5dfb73519336c7d4a87e49debce7a441b7a29706173e4e4e8dacee63a06ab85dd359b508bc8a0f7002832fae10a0a38efaa475846c4205aebe777334788c3e4652086e26dcdddad991b0ce5256e113bac692d442f524d7e292b86eaf0dd8380ccd78b1489dd2ef6beaf2eb9b08b50bb2a5ff3ba8df3b226baf79a0739d8a60cf815cb347399ac4adb2cea533d3f0ce160a563f8d401e5a6100578e4c8178a7e70663e135edc645cdec2f0588fc99a0cb60dd8788e02554ade370960ce562c210e826a1eba767a09b10f46ebbe6c9166e24286331d2ff025c57a10c7b64c506d0a68642171ad965a001700561fcac2e3f548fd58d32bab5f38b36e62f5546129cea35ce856052e3e480fc639640a5301dd700c8e8d0bd6ac790910fcf2b4f159cc1531aa1c9e37b541520450dde638942081201ae8a580f28cf50530190a45f45468753a122b364be7dad79044ec8b9977d583bc0ac3ec7b9fae192397ce8693310f301c18c2cab5208b369e63c5ac18d0266834e218b0400308c2c2f2df4a6ccadb3788860a2c733a9252b877ea1c1e849a38a328310bafae9614a6e161170c6fcbe9bd8c4177de1fd18f56805c91fb382aad767891556ff8e1b5f3ab8c18b4fa3053c981c12fa2ea017bb7596158ca533d0dd95a95d0b392222609f6ea336711a9dc50393bc41fac0d429540ad70757f2086bf1bea0132a609ea0bdeea0cef93d8b2a0d59189bffec05281e97b4722291005e9ca7e755be9070f405ab0d6c9546a5ebda2e62adcc621c2b1f6b07cd1e617d50469ef2c71647a47ef98ffbc71505e188cef3e5c774c0987664b6989794d7ca186804ccc6296da3adf22feb351792f1a9cff77413703744bf4f21212920d6a8fa1800da7a38fef7160a50f5b895e7b76f3fd830fcb9a25f3b3ccfd082a1712237e4ca665085aa1c5aa413bce813f1b7ca66105de94babb7b4a05029cc3759d00191fd9bfa0f996cc703403dd6ed2b33f2743a788041f279b767efc373314edfae1bd33f7eaaa7418a59fff7e40d02e618172f6e0abe08c855348f3cba40c8592a0521ed1e41524f20abccb2bf0ebb933e59b7036eff5a66279d578e6b2fd6c4140b33adc67f7083110d815ac55b4833ec0504488265b3ff2bdacec17c91bea9d6bdd931bf056d6e9790e472d874a5a3946b200493c9874d057aa6be3a1ca4da6fbb88a9d853aaa7c8ccabc83582caa65078bbe7b04625d139ed9860080d185bd9798d613ca3014713eb9e36bdeb73f14ac3fc7b2f8f594404f56dd937c0a7e865fa98e858cb0af661cbe12f15c928c4c45a982e24db18e7fc413591c8656b2c7876a5d717e42d3df13189b95ddc2b5a928dbda9ee02c30352045d02cbd854af821300f198b1ce1ea8e45c969020e5c7670fbd9b7227cfd3c809fac1df2eb18c199b27e969f32052376b450003b7ff6332ee1d9fce1b5947b72575ec6541b992fbc76f0e03fc1bb9a0df5ee3de0f34125c311d2ddb67962cf9a8230efff82c25c896621082a587139e997e0532962e84ad697a1a2b80d997c2a268ecca8b7d1095530b332ef368270bf31a75b777a7cfe8c8d324a8c558d3c65f801deac6822842f85f10a641b71ad7e5fb05f64eb3033507dc3a2e9ec02d667ef36c551f69c438e8b6c3927733d83e94f035ef3da230b759df5f5d1964815b176478c4ed94402dc8265e589171df165094a2e4e75614fc6febb8484f28ec8c1252b2d933852573926837e1edf9da0da3f91697b290c3ee5a44fcab3b10095b78b5df3701431cab31750e211d442a77dbc5e2d4d0e67bf329f9103414abd4f3879511375c8800f52f8a17ae6887214bf8634bd99075ab073540f04ff675d32190a3d1152ceee32e30719cd883a82185f89f071c02df443cf7046dce8a6ddc472ed63945faef588acf57985c7ecffa438f5427fb851ebc6a4c577a33895a8fc4628286a48d3bbcda1b769aa3194869e148ba457932fa6f2e4640e2755940e2f5a6a67796b5f88ac10f389b409c0c57bd4bf0cbe0fac2fd2f58ec498d19c43952e4522b51931712eb4002b7b208c02c4e06df99fa8e93e4b9e8b0d7a57e63aacdafb19db0fd422f8e89d1275b49963bd82b490f9e4d24cfe9700e98c73b31fdcf7b7d30d73e9bf6bd86439dc8b63171d53ca7caa860c60777436099db544164d4e4a81a483ffd5ef2980110f461529c057c40f2ee63b71a8eb2d87919726bda25a8fa2f242d3ff7bf0726d8a11d141eb87d2733f1faf456f2eccbe4c3a856702a80ba7e36cd8ef8e064e16e61eedda4478d2edaf0445e2247a76e25b4b5c68720b87bba69b4171983d95a5a764f42fa6f23466096d9a097edf84952023a4541110456b93ea558c2059156c287fc6cde7c74abd90ec539a5f43c2a641b1a34cffa2538ba565d0b57513b8c1b3df541d02d6d5a0aa2f96200dbbf64ab7c0adb868cce23ca607db6d6dd18f956185c983a90c8b4a7ec630178376ac400c61c77fcbacb979e2e07115db8a034a00ffb136f91c0b16c6d796f524f9ce6a0b72c378c8939b56bb83ca0f3d09da2b82b4d3457b568878d019f54f9cddd514a601d4edfae582f1a2674892bacf6eaba66124c797e1ebf91e1b5f12e520404d213b12770966d5c5f3435169f8867faed0107d2cd4cf0638e4f1c488122da7516820cc3d12cdc9f663778455352d2be1d8d3cd611808304554bde601e4ec4c9aa50ec22648b12f45c8d84bdcfc85f95ba0afe254df5d8b40d53adf1d4fe1dc3744bd486e3eb14775f4f4c333f751975a4a8b5bfa497850633aff3ff98deb53d1b515a08c4c474bcce46149dfd5bece51d1dfb6eaf593f8ee037404a5ce5edc2887006059cd3743448ab977899f10540b5a5eac1b9d4346654e4eb0200858b5b92525399a87859859269d3b0fa4c2159dc807548368ff701076606378b44cee2839f05ad94f659270af868cd674b44729bbb8eb2f697101bf4fb4f96d07dabaeb5b6a1cc884423fcac3d3805bffb3c8de3e801d641436ca6b1f50aabce4c7b3b1a24eb6977d5a8c84d6cce8ec9ee93d3062a4bd78ff916fbba7ab228838bd61f25759c6ac8650adbe2b346e65681dbafbb934358ca2b1b854bf42f42404a15caf99b785f132b9a20413b2d9d353220656ae271883ca9733430db09b5e8578e9d4fff032b0ee792f429791089d93876a30100a35c420a0686c125005242551df27673e0826a1c38bc028c104e0f958ae1ffb2d5221fd1a36e598065eed6a449567b41c027b6faa461d3aeee8dfb6285661af7fdcfa484fee654b633342eb122fe72d5d68ea4cfc988cabb0df39b8cbd064d489fcbc90bf313f3a29797d479a8fc12cf5b9ead0907a2dca568bc0f40d0fa4a9c3758f9bfd1ac3662a9f04260ef0d2b86a02d23759b210f38830c4a224649186b6e4b87c6b457217c86f502521940caf1e5b2eadb72951a790c94dd74b929232947b01cefd5a1483e127b1b6d216317b581455f9cf96876af837e5f88cc38a46eb2fb6cd7fcc6fce1a264167b86723829ffffc413bb0000000000000032dd6219a95418314b1e071dd59d0e96083e02cb8778069ed54137ce98bd702dead8fc74992d7743d1450faf7de44c2d59ff2dd339b80d3449e9bda5b3a564f01aeefe300165bf3b00d811c7ae866cb1a0a1b87400c2941841cd2d6953308f1a963f1c6d4486e7e45daabf0b066ad8884f4577534d3c9f3d3f3bbe8a1a3088d9b95da1fc901573e26f5b86c7a868429b9b634c9e35dfd0534563160912a43c64bacc8ea1ced7bc1b77a28716700e501905c9e81e190241e0edbf4f894aee4047c5b5fb58a3db4afaf76790690fdc1289236fbfc5f6cff540eb82de8044d17658fb054b198cc288cc43aa5d805a51cadac3e75c8fd82ad015a04932cb6f6b53aa4e8d9d84018ff8db0f756d6b5db4e06a689b52fe8471b9230c2dd14d042c1fea45c3d2452351a4222421366610d80785f7e47474d4ad58116313813d4db3176d93c4e29e5c7562806879ddc75b9cfcf38d6aed015c0f4d52302a51215187bfe254d6065bd142cc9b9e03f32ebc9686ad0d0cb3fcf0afa320a15f37cf591600636a4ef84c756c0d42ab98bc2479f0d5d230359f622447101844430a7555a4cbc702b55a4a6ed964cf399a1a493e40555f622da1643073a786a3425d95090b9b0e20521187e9e20d35f4e061e6201e67e844d88457f751e5519dd30df9251f1ce2836e0bf61eef8fc6ed22e4887186316566278bec46af3823ed53e3e18ca5741124dc53cadb5ff0846cc1c6b9c072be6dea187e8336eb6b6b7029ef79ff3b2999938cc59aafa1618fc4556ce3c81f99414d5d79538a83ee9d8a9ad0b9e57060d4be9c53266f418455d760f423a1642e9edfccede29d21891d7421ad0f1cefe472d0ef84965575419871374727bf5f1dc72057a18ed4d7e0a2ddd6d105eb2cc3718609814c2968f27465b00fb4b4a64359629722320583a05644693e6fcadde0efc12e66a0c8e48311f0550ab8fbc1556b69bb2a5a0c03f1a59d67046d7acd5beb9f7f9ae6eb18580431624d63ffe294ea5497a65ec3891f4c70b26b7b17a9f82145e5d5156d6b3355ad249bb66168bbb745d00c40d6ef42d52a032cf62caeeaec31f4c85ac403cbb0c6756953f0ddbf79da0cfa6ccc1c40de43bc4a10a700b98322e671225e80e663d30192ff5611c44c095351bb69a4e14c11a3d5b0b53e78954699760516134f3148e71a2b0bb04b24bb1a2c2b503f56249e0a2c638ff40e7c2c7d50ef7196fc9893e18c0ac3fc5a4c0d23ee08080f984dc643854b54df4a638af29dc5df79f905c4133ce263f3b2bb55fa7d56fa82795687e6ee5c68cc13d71e44367ea8670409cf2231990cc6d06e5aae2fc340bba3aa417016fb9dd89f90a89196c104017a68f7527b8b958e38f9646832a7790045fe394ce41bcbd1cbcbe52cd7e56cec7b2856e448fa5d7e837798b899f05a2c2fbe6d9f1a7b193bbf7c70444d6a37810d4d19d359f9cd6b8a6ef2230b735f8bebe0ccec94e44ed95234bfa4a36a2f0ee9fd5ca73d697344d28436e0fab81e73f447bb144a70aaf96acf6ff52c4737e7a4debcd285bdb54e363d842bc9a7d180c16f010fe4078b41c4c3e565c3edd64e61f995ab0086dbdc026dc1825b8c45ed96edd8d2bd9daa699e5da333274d6bee2097c004462848cd16849f95cd2252c4c87058a821ed977ed751b77b0a8fc0966bf3a30c26d49f3185782a7d314e89f039a15ede458538f1ada8eb836a36bb5d82c402e3feebd37e7b7c667a1c82edc8720072789fa5f388039daa731ce74dbd5aa8965b7ee99f6c271035239ca1c34cdc3c57bd8510dee08f74cda37095b1b098997998fa267e0be15de474b2c737936cacccb4ba44112570bbd13f870b55f3763f77724b586d6e26c3e72b20bb13272f2ee331bcabd4a79980a8d2965c20da2a3918c855215fecce95d29bec58f522d3d6d2852c4ac080fffcb3ee7fb98591f99b7cfb7bb124cc20078030756aee8fd284df06cd5f07c13fd56e5381b19e0a3a9f412a8d27428cb6af0078e4dc8ce4836630360a5c3b98ff5e6cbac1d9d29de9838a84d4722ceea3765be3df9984cf139770f3fb986b9cc9185ab787f54be33d46c54de74d94d13f74ec70cfbe1605c00db79fa8de64cd834090a35c80759f83c8fbefcf9a276dde8a8498d084b4619578eccdda2651a475f73367bda96894bb36eb868035251694cbb745feb150555ada09909497ff1d9c8aee7a35b7c8b2fc64ff483f4fd3491ed52304e6010b9bf2af8c5b8e162a383a0bf0bf108ca78f5086132b2b1a29581f323841c2f189509898d932436e5c1e693ed91f0524da026fecaa2b7efab54aeef120be61de457171c58811e0ca8a7600e0ac249aa579d78d2e2b1d6f41a3da4676b6690ca0249251f5b48b9a3820ac5b25a52cc01bc331c24039b6f4bfab72d5838a35629259930dea936f8c60b4f1b189db1fd1b5e7e6c8a842707ad6756d098a9ab543cde3e1d1161983ea91b7322ee2a713be3bad369d8112fdc7f1ac7b5122d55dc5ae443e10db711ddd6619ffbf96068e28911b1f54388413a17958d61ca07465b54699a1351915300cb826d3bf7f4f217bba0ed3195cbd077b67167b9a03040afc237f3bb36edd9fed33d7d6e7c9493fec34be6543880b0b442d8351496f2e8d60d4d984cca743983c0afab9cdedd5a9d774a121e91230d359c27a3d7b4db38ce73db747af3ca06470901f2605c031a7c9b7d1bbb1e838d36a4d39b039e80bcddfaecca906705fe8c844e93d5aee494dc62c7b4fcb6abe09acf925ef422dc09185b53e960795c56500b43faa6e89720aeee724532f89e60e20b12cd4f832b95189bf45b96aa7af10cf8298b44278de1c67e2d71d811240a7aa2d1d6de22e5b8cef4a1f309de3b81c5a028aabdabddc9637974c2dc19b60458f0954bc751b7ae628ac602eb7c52c7fac0c1621ee7757fc5b002ad7e8fb66fc7da0896547abf01ee091c0cfe1d0fc66e6e03599bb2aa7608a72c30203af5eac3915a0b6616b6119c4a09654de2f56e53296d1f8487cd7ec36c86894bab72ec3ce61208f848432d45a27cafcfbf2a2c56b58e017c76ac7e943aff0b4acaf84dfb343d93efb29c518a9d552c36a3e44c6ea948673bc2aa71c5a873d1d301a9c8b02f19c086f922f0b3e4f7d14e8a59c017809188e2e1b4dc6b55fb8ad82b1c04460b5ff2e9b8f47d3e833599519b79ac6d9ab282db4a55654f60396d2e72bf8e2ebbc8c742913359edadfcbda00", 0x2000, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x90, 0x0, 0xffffffff00000000, {0x3, 0x20000000000000, 0x1000004, 0x9, 0x80203fe, 0x6, {0x2, 0xfffffffffffffffd, 0xa, 0xffff, 0x7fffffffffc, 0x1000006a, 0x4001, 0x800, 0x3, 0x4000, 0x7, r2, 0x0, 0x8, 0xe0000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000180100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000008740000000c0a95c900000000000000000100000008000440000000000900010073797a300000000038000380340000800400018004000680140007800c000100636f756e7465720004000280140001800c0001"], 0xe4}}, 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0x5b03, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) 231.355327ms ago: executing program 5 (id=1086): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x28d00, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f00000003c0)) syz_emit_ethernet(0x4a, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x14, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) mount(&(0x7f0000000000)=@filename='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ocfs2\x00', 0x10010, &(0x7f00000000c0)='\',[:T-}*%^&(#\x00') 68.356926ms ago: executing program 5 (id=1087): r0 = socket(0x10, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000380)=0xc, 0x4) recvmsg$unix(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}], 0x20}, 0x40000142) 0s ago: executing program 5 (id=1088): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1800000018"], 0x18}], 0x1}, 0x0) close(0x3) kernel console output (not intermixed with test programs): : avc: denied { mounton } for pid=8522 comm="syz.6.567" path="/59/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 235.111075][ T5919] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 235.143173][ T976] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 235.143709][ T5919] usb 3-1: device descriptor read/8, error -71 [ 235.190069][ T8547] netlink: 8 bytes leftover after parsing attributes in process `syz.5.574'. [ 235.213062][ T30] audit: type=1400 audit(1766259761.112:588): avc: denied { bind } for pid=8546 comm="syz.5.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 235.285378][ T5919] usb usb3-port1: unable to enumerate USB device [ 235.315624][ T976] usb 4-1: device descriptor read/64, error -71 [ 235.351027][ T30] audit: type=1400 audit(1766259761.243:589): avc: denied { mounton } for pid=8546 comm="syz.5.574" path="/86/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 235.378551][ T5854] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 235.549351][ T5854] usb 2-1: Using ep0 maxpacket: 32 [ 235.558143][ T8545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.567887][ T8545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.576055][ T976] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 235.621322][ T8213] usb 7-1: USB disconnect, device number 12 [ 235.720626][ T976] usb 4-1: device descriptor read/64, error -71 [ 235.838407][ T976] usb usb4-port1: attempt power cycle [ 236.133391][ T30] audit: type=1400 audit(1766259761.972:590): avc: denied { unmount } for pid=6667 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 236.185706][ T30] audit: type=1400 audit(1766259762.019:591): avc: denied { unmount } for pid=6819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 237.207479][ T976] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 237.249608][ T976] usb 4-1: device descriptor read/8, error -71 [ 237.306622][ T30] audit: type=1400 audit(1766259763.067:592): avc: denied { write } for pid=8561 comm="syz.6.578" path="socket:[22851]" dev="sockfs" ino=22851 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 237.527378][ T976] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 237.549774][ T976] usb 4-1: device descriptor read/8, error -71 [ 237.666614][ T976] usb usb4-port1: unable to enumerate USB device [ 237.676846][ T8213] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 237.829690][ T8213] usb 3-1: device descriptor read/64, error -71 [ 237.864816][ T8572] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 237.871472][ T8572] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 237.883833][ T8572] vhci_hcd vhci_hcd.0: Device attached [ 237.893044][ T8573] vhci_hcd: connection closed [ 237.896359][ T1109] vhci_hcd vhci_hcd.5: stop threads [ 237.907964][ T1109] vhci_hcd vhci_hcd.5: release socket [ 237.941947][ T1109] vhci_hcd vhci_hcd.5: disconnect device [ 238.157495][ T8213] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 238.310627][ T8213] usb 3-1: device descriptor read/64, error -71 [ 238.710363][ T8213] usb usb3-port1: attempt power cycle [ 239.131384][ T8213] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 239.165358][ T8213] usb 3-1: device descriptor read/8, error -71 [ 239.435047][ T8213] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 240.146747][ T8213] usb 3-1: device descriptor read/8, error -71 [ 240.195744][ T8600] tmpfs: Bad value for 'size' [ 240.462131][ T8213] usb usb3-port1: unable to enumerate USB device [ 240.549214][ T5854] usb 2-1: unable to get BOS descriptor or descriptor too short [ 240.559337][ T5854] usb 2-1: too many configurations: 13, using maximum allowed: 8 [ 240.575056][ T5854] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 240.590485][ T5854] usb 2-1: can't read configurations, error -71 [ 241.569298][ T5878] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 241.593367][ T30] audit: type=1400 audit(1766259767.079:593): avc: denied { ioctl } for pid=8614 comm="syz.1.587" path="socket:[23188]" dev="sockfs" ino=23188 ioctlcmd=0x7c01 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 241.709319][ T30] audit: type=1400 audit(1766259767.079:594): avc: denied { setopt } for pid=8614 comm="syz.1.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 241.760845][ T5878] usb 7-1: device descriptor read/64, error -71 [ 242.017416][ T5878] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 242.037544][ T8618] netlink: 12 bytes leftover after parsing attributes in process `syz.1.592'. [ 242.069549][ T8618] netlink: 'syz.1.592': attribute type 29 has an invalid length. [ 242.081931][ T8623] kvm: requested 186895 ns i8254 timer period limited to 200000 ns [ 242.093243][ T8623] kvm: requested 35200 ns i8254 timer period limited to 200000 ns [ 242.105659][ T8623] kvm: requested 99733 ns i8254 timer period limited to 200000 ns [ 242.113791][ T8618] netlink: 32 bytes leftover after parsing attributes in process `syz.1.592'. [ 242.128429][ T8618] netlink: 32 bytes leftover after parsing attributes in process `syz.1.592'. [ 242.139590][ T8623] kvm: requested 170971 ns i8254 timer period limited to 200000 ns [ 242.149945][ T8623] kvm: requested 186895 ns i8254 timer period limited to 200000 ns [ 242.158752][ T8623] kvm: requested 135771 ns i8254 timer period limited to 200000 ns [ 242.169891][ T8623] kvm: requested 186895 ns i8254 timer period limited to 200000 ns [ 242.178047][ T8623] kvm: requested 90514 ns i8254 timer period limited to 200000 ns [ 242.186072][ T8623] kvm: requested 150019 ns i8254 timer period limited to 200000 ns [ 242.194043][ T5878] usb 7-1: device descriptor read/64, error -71 [ 242.222799][ T8623] kvm: requested 188571 ns i8254 timer period limited to 200000 ns [ 242.270740][ T8630] netlink: 12 bytes leftover after parsing attributes in process `syz.1.593'. [ 242.323026][ T5878] usb usb7-port1: attempt power cycle [ 242.564688][ T30] audit: type=1400 audit(1766259767.940:595): avc: denied { getopt } for pid=8634 comm="syz.1.594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 243.599114][ T8656] netlink: 8 bytes leftover after parsing attributes in process `syz.6.597'. [ 243.967259][ T30] audit: type=1400 audit(1766259769.287:596): avc: denied { link } for pid=8649 comm="syz.5.598" name="#9" dev="tmpfs" ino=554 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 244.032406][ T30] audit: type=1400 audit(1766259769.287:597): avc: denied { rename } for pid=8649 comm="syz.5.598" name="#a" dev="tmpfs" ino=554 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 244.206787][ T30] audit: type=1400 audit(1766259769.334:598): avc: denied { read } for pid=5481 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 244.698951][ T30] audit: type=1400 audit(1766259769.979:599): avc: denied { bind } for pid=8666 comm="syz.6.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 244.732412][ T8666] delete_channel: no stack [ 245.801784][ T30] audit: type=1804 audit(1766259770.746:600): pid=8671 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.602" name="bus" dev="ramfs" ino=23356 res=1 errno=0 [ 245.965623][ T30] audit: type=1400 audit(1766259771.167:601): avc: denied { audit_write } for pid=8677 comm="syz.3.604" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 246.083720][ T8685] wg2 speed is unknown, defaulting to 1000 [ 246.768493][ T8682] wg2 speed is unknown, defaulting to 1000 [ 247.292738][ T8720] overlayfs: overlapping lowerdir path [ 247.302767][ T8721] input: syz1 as /devices/virtual/input/input17 [ 247.393971][ T30] audit: type=1804 audit(1766259772.477:602): pid=8716 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.610" name="/newroot/99/file0" dev="tmpfs" ino=571 res=1 errno=0 [ 247.505694][ T30] audit: type=1400 audit(1766259772.486:603): avc: denied { map } for pid=8715 comm="syz.5.610" path="socket:[23426]" dev="sockfs" ino=23426 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 247.726343][ T5919] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 247.908259][ T5919] usb 2-1: Using ep0 maxpacket: 32 [ 247.983980][ T5919] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 248.011411][ T5919] usb 2-1: config 0 has no interface number 0 [ 248.026785][ T5919] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 249.023743][ T5919] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 249.027616][ T8738] wg2 speed is unknown, defaulting to 1000 [ 249.032945][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.047569][ T5919] usb 2-1: Product: syz [ 249.051743][ T5919] usb 2-1: Manufacturer: syz [ 249.056321][ T5919] usb 2-1: SerialNumber: syz [ 249.243194][ T5919] usb 2-1: config 0 descriptor?? [ 249.253868][ T8721] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 249.491019][ T8721] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 249.820514][ T5919] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 249.843638][ T5919] asix 2-1:0.188: probe with driver asix failed with error -61 [ 249.954386][ T8752] netlink: 212336 bytes leftover after parsing attributes in process `syz.5.615'. [ 251.181046][ T5919] usb 2-1: USB disconnect, device number 25 [ 251.591655][ T8775] hfsplus: unable to find HFS+ superblock [ 253.627186][ T1207] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 253.658357][ T30] audit: type=1400 audit(1766259778.360:604): avc: denied { getopt } for pid=8793 comm="syz.3.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 253.690847][ T30] audit: type=1400 audit(1766259778.360:605): avc: denied { ioctl } for pid=8793 comm="syz.3.626" path="socket:[23645]" dev="sockfs" ino=23645 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 253.782473][ T30] audit: type=1400 audit(1766259778.360:606): avc: denied { bind } for pid=8793 comm="syz.3.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 253.831324][ T1207] usb 7-1: Using ep0 maxpacket: 32 [ 253.843146][ T1207] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 253.857187][ T1207] usb 7-1: config 0 has no interface number 0 [ 254.742857][ T1207] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 254.747005][ T5816] Bluetooth: hci5: command 0x0406 tx timeout [ 254.752345][ T1207] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.767553][ T1207] usb 7-1: Product: syz [ 254.787084][ T1207] usb 7-1: Manufacturer: syz [ 254.791757][ T1207] usb 7-1: SerialNumber: syz [ 254.808507][ T1207] usb 7-1: config 0 descriptor?? [ 254.819760][ T1207] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 255.045750][ T1207] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 255.068328][ T1207] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 255.268974][ C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 255.288879][ T1207] usb 7-1: USB disconnect, device number 16 [ 255.304920][ T1207] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 255.335827][ T1207] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 255.353206][ T1207] quatech2 7-1:0.51: device disconnected [ 257.668422][ T5918] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 257.883267][ T5918] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 257.899659][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.916034][ T5918] usb 2-1: config 0 descriptor?? [ 257.957483][ T1207] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 258.423759][ T30] audit: type=1400 audit(1766259782.420:607): avc: denied { connect } for pid=8833 comm="syz.3.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 258.443889][ T30] audit: type=1400 audit(1766259782.429:608): avc: denied { write } for pid=8833 comm="syz.3.637" path="socket:[24600]" dev="sockfs" ino=24600 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 258.516268][ T1207] usb 6-1: Using ep0 maxpacket: 16 [ 258.522959][ T5816] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 258.528009][ T1207] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 258.541225][ T1207] usb 6-1: config 1 has no interface number 0 [ 258.543294][ T5816] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 258.547642][ T1207] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 258.564623][ T5816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 258.611962][ T5816] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 258.620995][ T5816] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 258.878046][ T8838] wg2 speed is unknown, defaulting to 1000 [ 259.967148][ T1207] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 259.993040][ T1207] usb 6-1: config 1 interface 105 has no altsetting 0 [ 260.023596][ T1207] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 260.033236][ T1207] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.041296][ T1207] usb 6-1: Product: syz [ 260.045876][ T1207] usb 6-1: Manufacturer: syz [ 260.050522][ T1207] usb 6-1: SerialNumber: syz [ 260.071898][ T8831] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 260.095169][ T8831] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 260.800747][ T5816] Bluetooth: hci2: command tx timeout [ 260.976293][ T8831] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 260.983591][ T8831] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 261.130980][ T8838] chnl_net:caif_netlink_parms(): no params data found [ 261.168904][ T5918] usb 2-1: Cannot read MAC address [ 261.174420][ T5918] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 261.238428][ T5918] usb 2-1: USB disconnect, device number 26 [ 261.268644][ T1207] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -32 [ 261.324333][ T1207] aqc111 6-1:1.105: probe with driver aqc111 failed with error -32 [ 261.367575][ T5854] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 261.397350][ T30] audit: type=1400 audit(1766259785.600:609): avc: denied { name_bind } for pid=8873 comm="syz.1.644" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 261.420474][ T30] audit: type=1400 audit(1766259785.600:610): avc: denied { write } for pid=8873 comm="syz.1.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 261.451214][ T8838] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.458801][ T8838] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.466480][ T8838] bridge_slave_0: entered allmulticast mode [ 261.475539][ T8838] bridge_slave_0: entered promiscuous mode [ 261.487038][ T8838] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.521817][ T8838] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.531389][ T5854] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 261.541463][ T8838] bridge_slave_1: entered allmulticast mode [ 261.548792][ T8838] bridge_slave_1: entered promiscuous mode [ 261.550195][ T5854] usb 7-1: config 0 interface 0 has no altsetting 0 [ 261.567772][ T5854] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 261.579142][ T5854] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 261.588404][ T5854] usb 7-1: Product: syz [ 261.593243][ T5854] usb 7-1: Manufacturer: syz [ 261.598077][ T5854] usb 7-1: SerialNumber: syz [ 261.607142][ T5854] usb 7-1: config 0 descriptor?? [ 261.614262][ T8838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.618598][ T5854] usb 7-1: selecting invalid altsetting 0 [ 261.639757][ T8838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.808839][ T8838] team0: Port device team_slave_0 added [ 261.818024][ T8838] team0: Port device team_slave_1 added [ 261.855196][ T8838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.870168][ T30] audit: type=1400 audit(1766259785.974:611): avc: denied { mount } for pid=8879 comm="syz.1.647" name="/" dev="rpc_pipefs" ino=24778 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 261.901803][ T8838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 261.928144][ T8838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.971852][ T8838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.979225][ T8838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.010313][ T8838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.049439][ T8867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.058626][ T8867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.083019][ T8838] hsr_slave_0: entered promiscuous mode [ 262.093761][ T8838] hsr_slave_1: entered promiscuous mode [ 262.100880][ T8838] debugfs: 'hsr0' already exists in 'hsr' [ 262.115522][ T8838] Cannot create hsr debugfs directory [ 262.270060][ T8838] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 262.909635][ T8838] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 263.024400][ T5816] Bluetooth: hci2: command tx timeout [ 263.045845][ T30] audit: type=1400 audit(1766259787.134:612): avc: denied { ioctl } for pid=8891 comm="syz.3.649" path="socket:[25015]" dev="sockfs" ino=25015 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 263.245435][ T48] usb 6-1: USB disconnect, device number 12 [ 263.278393][ T8838] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 263.299530][ T8838] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 263.468217][ T8915] xt_cgroup: path and classid specified [ 263.575617][ T8838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.638201][ T8838] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.670989][ T30] audit: type=1400 audit(1766259787.724:613): avc: denied { create } for pid=8914 comm="syz.5.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 263.713307][ T30] audit: type=1400 audit(1766259787.752:614): avc: denied { getopt } for pid=8914 comm="syz.5.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 263.738331][ T8920] tmpfs: Invalid uid '0x00000000ffffffff' [ 263.771234][ T6392] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.778365][ T6392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.818217][ T30] audit: type=1400 audit(1766259787.789:615): avc: denied { getopt } for pid=8918 comm="syz.3.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 263.839532][ T6392] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.846605][ T6392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.342110][ T48] usb 7-1: USB disconnect, device number 17 [ 264.835246][ T8838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.163895][ T8951] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48912 sclass=netlink_route_socket pid=8951 comm=syz.6.657 [ 265.249070][ T5816] Bluetooth: hci2: command tx timeout [ 265.464668][ T30] audit: type=1400 audit(1766259789.407:616): avc: denied { ioctl } for pid=8956 comm="syz.1.658" path="socket:[24043]" dev="sockfs" ino=24043 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 265.628653][ T30] audit: type=1400 audit(1766259789.557:617): avc: denied { associate } for pid=8971 comm="syz.1.660" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 265.661589][ T8838] veth0_vlan: entered promiscuous mode [ 265.671129][ T8838] veth1_vlan: entered promiscuous mode [ 265.786024][ T8838] veth0_macvtap: entered promiscuous mode [ 265.859668][ T8975] gfs2: path_lookup on ÿ returned error -2 [ 265.903650][ T30] audit: type=1400 audit(1766259789.716:618): avc: denied { map } for pid=8973 comm="syz.6.663" path="/77/file0" dev="tmpfs" ino=421 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 266.480699][ T8838] veth1_macvtap: entered promiscuous mode [ 266.497462][ T1207] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 266.544511][ T8838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.564945][ T8838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.654093][ T4107] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.726413][ T4107] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.740301][ T1207] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 266.762049][ T4107] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.772605][ T1207] usb 6-1: New USB device found, idVendor=046d, idProduct=0049, bcdDevice= 0.00 [ 266.784108][ T4107] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.796070][ T1207] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.854686][ T1207] usb 6-1: config 0 descriptor?? [ 267.007571][ T3929] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.018488][ T3929] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.084003][ T3929] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.094528][ T3929] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.157330][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 267.157344][ T30] audit: type=1400 audit(1766259790.988:620): avc: denied { mounton } for pid=8838 comm="syz-executor" path="/root/syzkaller.wpZAgb/syz-tmp" dev="sda1" ino=2051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 267.261427][ T8985] loop9: detected capacity change from 0 to 7 [ 267.329650][ T1207] hid-generic 0003:046D:0049.0006: item fetching failed at offset 4/5 [ 267.340419][ T30] audit: type=1400 audit(1766259791.119:621): avc: denied { mounton } for pid=8838 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 267.390126][ T1207] hid-generic 0003:046D:0049.0006: probe with driver hid-generic failed with error -22 [ 267.473428][ T5816] Bluetooth: hci2: command tx timeout [ 267.495380][ T25] block nbd0: Possible stuck request ffff8880270a0000: control (read@0,1024B). Runtime 30 seconds [ 267.507618][ T25] block nbd0: Possible stuck request ffff8880270a0200: control (read@1024,1024B). Runtime 30 seconds [ 267.518543][ T25] block nbd0: Possible stuck request ffff8880270a0400: control (read@2048,1024B). Runtime 30 seconds [ 267.540348][ T25] block nbd0: Possible stuck request ffff8880270a0600: control (read@3072,1024B). Runtime 30 seconds [ 267.553961][ T8213] usb 6-1: USB disconnect, device number 13 [ 267.625571][ T8977] netlink: 28 bytes leftover after parsing attributes in process `syz.1.662'. [ 267.862895][ T8985] Dev loop9: unable to read RDB block 7 [ 267.968818][ T8985] loop9: unable to read partition table [ 268.017071][ T8985] loop9: partition table beyond EOD, truncated [ 268.183236][ T8985] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 268.211363][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 268.219297][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 268.599354][ T9004] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 269.011023][ T30] audit: type=1400 audit(1766259792.719:622): avc: denied { setopt } for pid=9006 comm="syz.1.669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 269.118553][ T30] audit: type=1400 audit(1766259792.822:623): avc: denied { mount } for pid=9006 comm="syz.1.669" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 269.309659][ T9021] netlink: 84 bytes leftover after parsing attributes in process `syz.5.672'. [ 269.382491][ T9022] netlink: 'syz.5.672': attribute type 1 has an invalid length. [ 269.390669][ T9022] netlink: 'syz.5.672': attribute type 2 has an invalid length. [ 269.398605][ T9022] netlink: 'syz.5.672': attribute type 2 has an invalid length. [ 269.409903][ T9022] netlink: 'syz.5.672': attribute type 1 has an invalid length. [ 269.419345][ T9022] netlink: 'syz.5.672': attribute type 1 has an invalid length. [ 269.505901][ T5919] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 269.524634][ T24] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 269.705856][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 269.716451][ T24] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 269.726624][ T24] usb 4-1: config 0 has no interface number 0 [ 269.738592][ T24] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 269.750356][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.758567][ T24] usb 4-1: Product: syz [ 269.764678][ T24] usb 4-1: Manufacturer: syz [ 269.769476][ T24] usb 4-1: SerialNumber: syz [ 269.786856][ T24] usb 4-1: config 0 descriptor?? [ 269.795426][ T24] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 269.822230][ T9028] usb usb1: usbfs: interface 0 claimed by hub while 'syz.6.673' sets config #1 [ 269.859454][ T5919] usb 2-1: unable to get BOS descriptor set [ 269.867574][ T5919] usb 2-1: config 1 has an invalid interface descriptor of length 3, skipping [ 269.876665][ T5919] usb 2-1: config 1 has an invalid descriptor of length 128, skipping remainder of the config [ 269.887157][ T5919] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 269.896412][ T5919] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 269.947304][ T5919] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 269.959098][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.967688][ T5919] usb 2-1: Product: ᠧè»Ë€î«­ï‘„宂鈔㠦䔥菱铎酹눆甘㭣æŽî•냣僢껢乱ࣚ㱑㵖⸌੭涪æ²Ü¨â‡»ç‡Œá¥¥ä–“䙛倈ᵷ价è¿ïº”䮬㙢Ⲵ鮠᯼間忞ꙡä”漜í†ìŸˆë™¥íŒ—岠ċ넩ꦘ췑ⲷ솉豇沗䕵烼ã¶à·Ÿã½¤êŠœæ®ˆå¯ê”ˆï½˜ãŠŒã°”ê‚»ç¡¯è‹§ï°•æ‡‘ê¥Œä¨’å¢†Ø½à¤¿ä†·ãª‚è¯»ë¡Ý¹êƒ¿ãŠ®êº… [ 270.007087][ T5919] usb 2-1: Manufacturer: Ñ [ 270.011799][ T5918] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 270.013083][ T5919] usb 2-1: SerialNumber: ≠[ 270.065892][ T24] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 270.093483][ T24] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 270.188917][ T5918] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 270.202380][ T5918] usb 6-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 270.212636][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.221201][ T5918] usb 6-1: Product: syz [ 270.229268][ T5918] usb 6-1: Manufacturer: syz [ 270.238112][ T5918] usb 6-1: SerialNumber: syz [ 270.419801][ T5919] cdc_ncm 2-1:1.0: skipping garbage [ 270.431098][ T5919] cdc_ncm 2-1:1.0: invalid descriptor buffer length [ 270.460639][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 270.468302][ T6050] usb 4-1: USB disconnect, device number 25 [ 270.481017][ T6050] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 270.517962][ T6050] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 270.529506][ T5919] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 270.542585][ T5816] Bluetooth: hci5: Unknown advertising packet type: 0x1e [ 270.542637][ T5816] Bluetooth: hci5: adv larger than maximum supported [ 270.551441][ T5816] Bluetooth: hci5: Malformed LE Event: 0x0d [ 270.564435][ T5919] cdc_ncm 2-1:1.0: bind() failure [ 270.572529][ T6050] quatech2 4-1:0.51: device disconnected [ 272.160634][ T5919] usb 2-1: USB disconnect, device number 27 [ 272.337635][ T5922] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 274.139697][ T5918] as10x_usb: device has been detected [ 274.154931][ T5918] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 274.169628][ T5918] usb 6-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 274.181122][ T5922] usb 4-1: device descriptor read/64, error -71 [ 274.215534][ T30] audit: type=1400 audit(1766259797.592:624): avc: denied { firmware_load } for pid=5918 comm="kworker/1:4" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=297 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 274.216227][ T5918] as10x_usb: error during firmware upload part1 [ 274.332424][ T5918] Registered device Elgato EyeTV DTT Deluxe [ 274.335797][ T5918] usb 6-1: USB disconnect, device number 14 [ 274.534577][ T30] audit: type=1400 audit(1766259797.891:625): avc: denied { mount } for pid=9059 comm="syz.3.682" name="/" dev="configfs" ino=1157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 274.538399][ T5918] Unregistered device Elgato EyeTV DTT Deluxe [ 274.599009][ T9061] Bluetooth: MGMT ver 1.23 [ 274.620869][ T9063] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 274.683618][ T9058] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 274.924697][ T5918] as10x_usb: device has been disconnected [ 274.931529][ T9061] overlayfs: failed to resolve '/ccess': -2 [ 274.952897][ T30] audit: type=1400 audit(1766259797.920:626): avc: denied { search } for pid=9059 comm="syz.3.682" name="/" dev="configfs" ino=1157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 274.999558][ T30] audit: type=1400 audit(1766259797.920:627): avc: denied { mounton } for pid=9059 comm="syz.3.682" path="/136/file0" dev="configfs" ino=1157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 275.051249][ T30] audit: type=1326 audit(1766259798.060:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9059 comm="syz.3.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50da98f749 code=0x7ffc0000 [ 275.101321][ T30] audit: type=1326 audit(1766259798.060:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9059 comm="syz.3.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50da98f749 code=0x7ffc0000 [ 275.218189][ T30] audit: type=1326 audit(1766259798.256:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9059 comm="syz.3.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f50da98f749 code=0x7ffc0000 [ 275.249927][ T30] audit: type=1326 audit(1766259798.256:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9059 comm="syz.3.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50da98f749 code=0x7ffc0000 [ 275.283596][ T30] audit: type=1326 audit(1766259798.256:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9059 comm="syz.3.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50da98f749 code=0x7ffc0000 [ 275.334465][ T30] audit: type=1400 audit(1766259798.312:633): avc: denied { read } for pid=9059 comm="syz.3.682" name="/" dev="configfs" ino=1157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 275.799593][ T5878] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 275.987695][ T5878] usb 7-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 275.999246][ T5878] usb 7-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 276.021360][ T5878] usb 7-1: config 0 interface 0 has no altsetting 0 [ 276.041000][ T5878] usb 7-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 276.050381][ T5878] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.062373][ T5878] usb 7-1: Product: syz [ 276.093910][ T5878] usb 7-1: Manufacturer: syz [ 276.107994][ T5878] usb 7-1: SerialNumber: syz [ 276.128176][ T5878] usb 7-1: config 0 descriptor?? [ 276.168864][ T5816] Bluetooth: hci6: urb ffff888143fe5100 submission failed (2) [ 276.355533][ T5878] usb 7-1: USB disconnect, device number 18 [ 277.331763][ T9112] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 277.656994][ T9119] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 277.661228][ T24] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 278.575665][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 278.784569][ T24] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.795993][ T24] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.806312][ T24] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 278.820746][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 278.827612][ T24] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 278.836901][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.846598][ T5816] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 278.846972][ T24] usb 7-1: config 0 descriptor?? [ 279.054720][ T9141] binder: 9128:9141 ioctl 4018620d 0 returned -22 [ 279.302755][ T24] hid (null): report_id 0 is invalid [ 279.310067][ T24] hid (null): unknown global tag 0xc [ 280.683732][ T9156] No source specified [ 281.121974][ T24] usb 7-1: USB disconnect, device number 19 [ 281.347179][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 281.347193][ T30] audit: type=1400 audit(1766259804.262:648): avc: denied { setopt } for pid=9160 comm="syz.7.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 281.374374][ T9166] 8021q: VLANs not supported on vxcan1 [ 283.154702][ T8213] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 283.336553][ T8213] usb 6-1: Using ep0 maxpacket: 32 [ 283.798861][ T8213] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 283.826235][ T30] audit: type=1400 audit(1766259806.581:649): avc: denied { accept } for pid=9190 comm="syz.3.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 283.852448][ T8213] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 283.864727][ T8213] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 283.903195][ T8213] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 283.927420][ T8213] usb 6-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 284.256268][ T8213] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.266931][ T8213] usb 6-1: Product: syz [ 284.274194][ T8213] usb 6-1: Manufacturer: syz [ 284.364804][ T9205] raw_sendmsg: syz.1.720 forgot to set AF_INET. Fix it! [ 284.457323][ T8213] usb 6-1: SerialNumber: syz [ 284.464140][ T8213] usb 6-1: config 0 descriptor?? [ 284.475297][ T8213] usb 6-1: can't set config #0, error -71 [ 284.556526][ T8213] usb 6-1: USB disconnect, device number 15 [ 284.758292][ T6050] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 284.908022][ T6050] usb 2-1: device descriptor read/64, error -71 [ 285.004867][ T5878] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 285.175288][ T5878] usb 4-1: Using ep0 maxpacket: 8 [ 285.180655][ T6050] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 285.239817][ T5878] usb 4-1: config 1 has an invalid interface number: 133 but max is 0 [ 285.262608][ T5878] usb 4-1: config 1 has no interface number 0 [ 285.295969][ T5878] usb 4-1: config 1 interface 133 altsetting 4 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 285.341711][ T5878] usb 4-1: config 1 interface 133 has no altsetting 0 [ 285.360528][ T5878] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=40.f3 [ 285.382197][ T6050] usb 2-1: device descriptor read/64, error -71 [ 285.403345][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.529939][ T6050] usb usb2-port1: attempt power cycle [ 285.699115][ T5878] usb 4-1: string descriptor 0 read error: -71 [ 286.325803][ T5878] usb 4-1: USB disconnect, device number 28 [ 286.464640][ T9224] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 286.473479][ T9224] SELinux: failed to load policy [ 286.902723][ T6050] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 287.220025][ T6050] usb 2-1: device descriptor read/8, error -71 [ 287.531627][ T9237] netlink: 4 bytes leftover after parsing attributes in process `syz.5.727'. [ 287.570105][ T6050] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 287.597628][ T6050] usb 2-1: device descriptor read/8, error -71 [ 287.597659][ T30] audit: type=1400 audit(1766259810.108:650): avc: denied { block_suspend } for pid=9231 comm="syz.5.727" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 287.744757][ T6050] usb usb2-port1: unable to enumerate USB device [ 287.794542][ T5878] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 287.915286][ T9250] ufs: You didn't specify the type of your ufs filesystem [ 287.915286][ T9250] [ 287.915286][ T9250] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 287.915286][ T9250] [ 287.915286][ T9250] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 288.040695][ T9250] ufs: ufstype=old is supported read-only [ 288.048054][ T9250] ufs: ufs_fill_super(): bad magic number [ 288.057716][ T5878] usb 8-1: Using ep0 maxpacket: 16 [ 288.075070][ T5878] usb 8-1: config 222 has no interfaces? [ 288.111060][ T5878] usb 8-1: New USB device found, idVendor=07aa, idProduct=7613, bcdDevice=25.c0 [ 288.133625][ T5878] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.142598][ T5878] usb 8-1: Product: syz [ 288.146785][ T5878] usb 8-1: Manufacturer: syz [ 288.151489][ T5878] usb 8-1: SerialNumber: syz [ 288.161856][ T9257] netlink: 'syz.5.734': attribute type 10 has an invalid length. [ 288.174186][ T9257] macvlan0: entered promiscuous mode [ 288.184083][ T9257] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 288.198899][ T9258] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 288.232745][ T6050] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 288.244381][ T8213] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 288.403762][ T5919] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 288.424105][ T6050] usb 2-1: unable to get BOS descriptor or descriptor too short [ 288.434409][ T8213] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.454991][ T8213] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.456978][ T6050] usb 2-1: not running at top speed; connect to a high speed hub [ 288.486113][ T6050] usb 2-1: config 129 has an invalid interface number: 28 but max is 0 [ 288.493647][ T8213] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 288.496897][ T5878] usb 8-1: USB disconnect, device number 2 [ 288.509412][ T8213] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.520967][ T6050] usb 2-1: config 129 has no interface number 0 [ 288.529632][ T6050] usb 2-1: config 129 interface 28 has no altsetting 0 [ 288.540023][ T6050] usb 2-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=db.57 [ 288.550361][ T8213] usb 4-1: config 0 descriptor?? [ 288.550368][ T6050] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.550387][ T6050] usb 2-1: Product: syz [ 288.570305][ T6050] usb 2-1: Manufacturer: syz [ 288.575075][ T6050] usb 2-1: SerialNumber: syz [ 288.597950][ T5919] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 288.606068][ T5919] usb 7-1: config 1 has no interface number 0 [ 288.613375][ T5919] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 288.625492][ T5919] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 288.636124][ T5919] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.650347][ T5919] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 288.659687][ T5919] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.667975][ T5919] usb 7-1: Product: syz [ 288.673626][ T5919] usb 7-1: Manufacturer: syz [ 288.678274][ T5919] usb 7-1: SerialNumber: syz [ 288.716204][ T9256] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 288.800125][ T9244] netlink: 28 bytes leftover after parsing attributes in process `syz.1.731'. [ 288.814815][ T9244] netlink: 'syz.1.731': attribute type 7 has an invalid length. [ 288.823931][ T9244] netlink: 'syz.1.731': attribute type 8 has an invalid length. [ 288.832004][ T9244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.731'. [ 288.998373][ T9256] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 289.067126][ T5919] sierra_net 7-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.6-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 289.217090][ T6050] etas_es58x 2-1:129.28: Starting syz syz (Serial Number syz) [ 289.261591][ T6050] usb 2-1: USB disconnect, device number 32 [ 289.434555][ T5919] sierra_net 7-1:1.7 wwan0: Submit SYNC failed -71 [ 289.462924][ T5919] sierra_net 7-1:1.7 wwan0: Send SYNC failed, status -71 [ 289.479087][ T5919] sierra_net 7-1:1.7 wwan0: Submit SYNC failed -71 [ 289.536383][ T9273] netlink: 'syz.5.738': attribute type 3 has an invalid length. [ 289.548992][ T9273] netlink: 'syz.5.738': attribute type 3 has an invalid length. [ 289.968120][ T5919] sierra_net 7-1:1.7 wwan0: Send SYNC failed, status -71 [ 289.978176][ T5919] usb 7-1: USB disconnect, device number 20 [ 289.987158][ T5919] sierra_net 7-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.6-1, Sierra Wireless USB-to-WWAN Modem [ 290.054633][ T5919] sierra_net 7-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 290.085635][ T9275] sp0: Synchronizing with TNC [ 290.587692][ T9283] netlink: 'syz.5.741': attribute type 32 has an invalid length. [ 290.794784][ T9283] netlink: 12 bytes leftover after parsing attributes in process `syz.5.741'. [ 290.889235][ T30] audit: type=1400 audit(1766259813.185:651): avc: denied { ioctl } for pid=9288 comm="syz.1.744" path="socket:[26744]" dev="sockfs" ino=26744 ioctlcmd=0x8921 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 290.928596][ T9293] wg2 speed is unknown, defaulting to 1000 [ 291.247556][ T5918] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 291.325939][ T9252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.356971][ T9252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.417776][ T6291] kernel read not supported for file /dsp (pid: 6291 comm: kworker/1:8) [ 291.429665][ T5918] usb 6-1: config 0 has no interfaces? [ 291.435173][ T5918] usb 6-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 291.465936][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.506937][ T5918] usb 6-1: config 0 descriptor?? [ 291.516028][ T30] audit: type=1400 audit(1766259813.775:652): avc: denied { read } for pid=9251 comm="syz.3.733" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 291.541357][ T8213] usbhid 4-1:0.0: can't add hid device: -32 [ 291.542638][ T9252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.556117][ T9252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.557679][ T8213] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 291.600635][ T30] audit: type=1400 audit(1766259813.775:653): avc: denied { open } for pid=9251 comm="syz.3.733" path="/143/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 291.671433][ T30] audit: type=1400 audit(1766259813.887:654): avc: denied { unmount } for pid=8838 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 291.701584][ T8213] usb 4-1: USB disconnect, device number 29 [ 291.712402][ T30] audit: type=1400 audit(1766259813.943:655): avc: denied { execute } for pid=9315 comm="syz.7.748" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 291.796164][ T5919] usb 6-1: USB disconnect, device number 16 [ 291.837546][ T30] audit: type=1400 audit(1766259814.074:656): avc: denied { mount } for pid=9320 comm="syz.7.750" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 292.006481][ T5922] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 292.166921][ T5922] usb 2-1: Using ep0 maxpacket: 16 [ 292.180893][ T5922] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.195781][ T5922] usb 2-1: config 0 interface 0 has no altsetting 0 [ 292.203139][ T5922] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 292.214728][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.231499][ T5922] usb 2-1: config 0 descriptor?? [ 292.255540][ T30] audit: type=1400 audit(1766259814.467:657): avc: denied { name_bind } for pid=9320 comm="syz.7.750" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 292.654014][ T9339] nfs: Unknown parameter '' [ 292.893114][ T30] audit: type=1400 audit(1766259814.991:658): avc: denied { write } for pid=9331 comm="syz.5.753" path="socket:[26835]" dev="sockfs" ino=26835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 293.131616][ T30] audit: type=1400 audit(1766259815.000:659): avc: denied { setopt } for pid=9331 comm="syz.5.753" lport=44133 faddr=::ffff:100.1.1.0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 293.316800][ T5922] nzxt-smart2 0003:1E71:2009.0008: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 293.377966][ T9347] netlink: 12 bytes leftover after parsing attributes in process `syz.1.754'. [ 293.783924][ T5186] udevd[5186]: worker [5823] terminated by signal 33 (Unknown signal 33) [ 293.858084][ T9366] netlink: 40 bytes leftover after parsing attributes in process `syz.5.758'. [ 293.858106][ T5922] usb 2-1: USB disconnect, device number 33 [ 293.877551][ T5186] udevd[5186]: worker [5823] failed while handling '/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:1E71:2009.0008/hidraw/hidraw0' [ 294.251802][ T30] audit: type=1400 audit(1766259816.338:660): avc: denied { append } for pid=9391 comm="syz.1.764" name="sg0" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 294.715092][ T9398] netlink: 16 bytes leftover after parsing attributes in process `syz.7.766'. [ 294.803506][ T5922] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 294.887079][ T5922] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 295.406789][ T9428] tipc: Failed to remove unknown binding: 66,1,1/0:3836602987/3836602989 [ 295.415667][ T9428] tipc: Failed to remove unknown binding: 66,1,1/0:3836602987/3836602989 [ 295.541797][ T9401] netlink: 'syz.7.766': attribute type 2 has an invalid length. [ 295.584429][ T30] audit: type=1800 audit(1766259817.582:661): pid=9422 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.5.771" name="/newroot/138/file0" dev="tmpfs" ino=777 res=0 errno=0 [ 295.758662][ T30] audit: type=1400 audit(1766259817.741:662): avc: denied { append } for pid=9429 comm="syz.3.772" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 296.742519][ T6050] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 296.798537][ T5918] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 296.956392][ T6050] usb 8-1: Using ep0 maxpacket: 16 [ 296.963135][ T6050] usb 8-1: no configurations [ 296.967821][ T6050] usb 8-1: can't read configurations, error -22 [ 297.069255][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.080622][ T5918] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 297.106180][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.135967][ T5918] usb 2-1: config 0 descriptor?? [ 297.186727][ T30] audit: type=1400 audit(1766259819.078:663): avc: denied { map } for pid=9447 comm="syz.5.777" path="socket:[27725]" dev="sockfs" ino=27725 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 297.255725][ T6050] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 297.457438][ T9452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.466234][ T9452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.571706][ T30] audit: type=1400 audit(1766259819.434:664): avc: denied { accept } for pid=9447 comm="syz.5.777" path="socket:[27725]" dev="sockfs" ino=27725 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 297.715336][ T6050] usb 8-1: Using ep0 maxpacket: 16 [ 297.819185][ T6050] usb 8-1: no configurations [ 297.823934][ T5816] Bluetooth: hci0: command 0x0406 tx timeout [ 297.836444][ T6050] usb 8-1: can't read configurations, error -22 [ 297.973104][ T30] audit: type=1400 audit(1766259819.686:665): avc: denied { write } for pid=9454 comm="syz.6.779" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 297.983946][ T5918] steelseries 0003:1038:1410.000A: unknown main item tag 0x0 [ 298.014623][ T5918] steelseries 0003:1038:1410.000A: unknown main item tag 0x0 [ 298.020947][ T6050] usb usb8-port1: attempt power cycle [ 298.028537][ T5918] steelseries 0003:1038:1410.000A: unknown main item tag 0x0 [ 298.041035][ T9460] vxfs: WRONG superblock magic 00000000 at 1 [ 298.047470][ T9460] vxfs: WRONG superblock magic 00000000 at 8 [ 298.053440][ T9460] vxfs: can't find superblock. [ 298.059537][ T8213] libceph: connect (1)[c::]:6789 error -101 [ 298.065568][ T8213] libceph: mon0 (1)[c::]:6789 connect error [ 298.072617][ T5918] steelseries 0003:1038:1410.000A: unknown main item tag 0x0 [ 298.080300][ T5918] steelseries 0003:1038:1410.000A: unknown main item tag 0x0 [ 298.113495][ T5918] steelseries 0003:1038:1410.000A: unknown main item tag 0x0 [ 298.121415][ T5918] steelseries 0003:1038:1410.000A: unknown main item tag 0x0 [ 298.129401][ T5918] steelseries 0003:1038:1410.000A: unknown main item tag 0x0 [ 298.142007][ T5918] steelseries 0003:1038:1410.000A: unknown main item tag 0x0 [ 298.151155][ T5918] steelseries 0003:1038:1410.000A: collection stack underflow [ 298.158875][ T5918] steelseries 0003:1038:1410.000A: item 0 0 0 12 parsing failed [ 298.173741][ T5918] steelseries 0003:1038:1410.000A: parse failed [ 298.183448][ T5918] steelseries 0003:1038:1410.000A: probe with driver steelseries failed with error -22 [ 298.218309][ T5919] usb 2-1: USB disconnect, device number 34 [ 298.358745][ T5918] libceph: connect (1)[c::]:6789 error -101 [ 298.364866][ T5918] libceph: mon0 (1)[c::]:6789 connect error [ 298.562614][ T9457] ceph: No mds server is up or the cluster is laggy [ 298.694210][ T5878] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 298.805800][ T6050] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 298.827616][ T6050] usb 8-1: Using ep0 maxpacket: 16 [ 298.833298][ T6050] usb 8-1: no configurations [ 298.838084][ T6050] usb 8-1: can't read configurations, error -22 [ 298.903478][ T5878] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 298.912107][ T5878] usb 6-1: config 0 has no interface number 0 [ 298.919136][ T5878] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.980092][ T9472] faux_driver vgem: [drm] Unknown color mode 2054; guessing buffer size. [ 299.069417][ T5878] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.080046][ T5878] usb 6-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 299.092961][ T5878] usb 6-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 299.104493][ T5878] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.163481][ T6050] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 299.177272][ T5878] usb 6-1: config 0 descriptor?? [ 299.191587][ T6050] usb 8-1: Using ep0 maxpacket: 16 [ 299.197889][ T6050] usb 8-1: no configurations [ 299.205355][ T6050] usb 8-1: can't read configurations, error -22 [ 299.212234][ T6050] usb usb8-port1: unable to enumerate USB device [ 299.229920][ T9477] xt_NFQUEUE: number of queues (63489) out of range (got 96768) [ 299.615394][ T30] audit: type=1326 audit(1766259821.258:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9481 comm="syz.1.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2878f749 code=0x7ffc0000 [ 299.660396][ T25] block nbd0: Possible stuck request ffff8880270a0000: control (read@0,1024B). Runtime 60 seconds [ 299.671741][ T25] block nbd0: Possible stuck request ffff8880270a0200: control (read@1024,1024B). Runtime 60 seconds [ 299.683087][ T25] block nbd0: Possible stuck request ffff8880270a0400: control (read@2048,1024B). Runtime 60 seconds [ 299.694245][ T25] block nbd0: Possible stuck request ffff8880270a0600: control (read@3072,1024B). Runtime 60 seconds [ 299.711510][ T30] audit: type=1326 audit(1766259821.258:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9481 comm="syz.1.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fae2878f749 code=0x7ffc0000 [ 299.746578][ T30] audit: type=1326 audit(1766259821.258:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9481 comm="syz.1.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2878f749 code=0x7ffc0000 [ 299.770479][ T30] audit: type=1326 audit(1766259821.258:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9481 comm="syz.1.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fae2878f749 code=0x7ffc0000 [ 299.807988][ T30] audit: type=1326 audit(1766259821.258:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9481 comm="syz.1.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2878f749 code=0x7ffc0000 [ 299.833738][ T30] audit: type=1326 audit(1766259821.258:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9481 comm="syz.1.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fae2878f749 code=0x7ffc0000 [ 299.839307][ T9462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.867342][ T5878] input: HID 28bd:0042 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:28BD:0042.000B/input/input19 [ 299.891281][ T9462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.958321][ T30] audit: type=1326 audit(1766259821.258:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9481 comm="syz.1.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2878f749 code=0x7ffc0000 [ 300.115092][ T30] audit: type=1326 audit(1766259821.258:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9481 comm="syz.1.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fae2878f749 code=0x7ffc0000 [ 300.116807][ T5878] uclogic 0003:28BD:0042.000B: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.5-1/input1 [ 300.141237][ T30] audit: type=1326 audit(1766259821.258:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9481 comm="syz.1.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2878f749 code=0x7ffc0000 [ 300.627928][ T5878] usb 6-1: USB disconnect, device number 17 [ 300.696296][ T9499] fido_id[9499]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 300.718037][ T30] audit: type=1326 audit(1766259821.258:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9481 comm="syz.1.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fae2878f749 code=0x7ffc0000 [ 301.081091][ T9505] mkiss: ax0: crc mode is auto. [ 301.443525][ T9510] fuse: Unknown parameter 'xd+ò à|r½öæŽkFD¾|Úå [ 301.443525][ T9510] hÚ¦†¦_6@hC߆õáíûª"™[tÌwŸÙ 9”C¢Š+>ÚÎʨlRzoº©#z¿x?ˆkÀ¨YØÆ£jþ0x0000000000000005' [ 301.670831][ T5878] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 301.734977][ T9526] dummy0: entered allmulticast mode [ 301.749367][ T9526] dummy0: left allmulticast mode [ 301.840672][ T5878] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 301.844957][ T9532] fuse: Bad value for 'fd' [ 301.872286][ T5878] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 301.901226][ T5878] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 301.932787][ T5878] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 302.966342][ T5878] usb 6-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 302.985755][ T5878] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.994881][ T5878] usb 6-1: Product: syz [ 302.995709][ T9528] xt_time: unknown flags 0xc [ 302.999159][ T5878] usb 6-1: Manufacturer: syz [ 302.999177][ T5878] usb 6-1: SerialNumber: syz [ 303.028516][ T5919] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 303.037028][ T5878] usb 6-1: config 0 descriptor?? [ 303.045348][ T5878] ums-isd200 6-1:0.0: USB Mass Storage device detected [ 303.199896][ T5919] usb 8-1: Using ep0 maxpacket: 32 [ 303.212573][ T5919] usb 8-1: config 0 has an invalid interface number: 247 but max is 0 [ 303.221964][ T5919] usb 8-1: config 0 has no interface number 0 [ 303.229809][ T5919] usb 8-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 303.258024][ T5919] usb 8-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 303.277837][ T5878] scsi host1: usb-storage 6-1:0.0 [ 303.286917][ T5919] usb 8-1: Product: syz [ 303.296234][ T5919] usb 8-1: Manufacturer: syz [ 303.318747][ T5878] usb 6-1: USB disconnect, device number 18 [ 303.333663][ T5919] usb 8-1: config 0 descriptor?? [ 303.371059][ T5919] usb 8-1: can't set config #0, error -71 [ 303.384421][ T5919] usb 8-1: USB disconnect, device number 7 [ 303.769649][ T9562] netlink: 4 bytes leftover after parsing attributes in process `syz.7.808'. [ 303.789615][ T9562] siw: device registration error -23 [ 304.250760][ T5137] Bluetooth: hci5: unexpected event for opcode 0x1003 [ 304.567946][ T5918] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 304.568910][ T9575] netdevsim netdevsim1 ªªªªª»: renamed from netdevsim0 (while UP) [ 304.728964][ T9578] openvswitch: netlink: IP tunnel dst address not specified [ 304.749716][ T5918] usb 6-1: Using ep0 maxpacket: 16 [ 304.861157][ T5918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.880711][ T5918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.895736][ T5918] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 305.534731][ T5918] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 306.560754][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.583133][ T5918] usb 6-1: config 0 descriptor?? [ 306.730490][ T9594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.814'. [ 307.083750][ T5918] input: HID 0955:7214 Haptics as /devices/virtual/input/input20 [ 307.301235][ T5918] shield 0003:0955:7214.000C: Registered Thunderstrike controller [ 307.339394][ T5918] shield 0003:0955:7214.000C: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 307.433348][ T90] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 307.451859][ T5918] usb 6-1: USB disconnect, device number 19 [ 307.471320][ T90] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 307.528999][ T90] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 307.556523][ T90] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 308.042545][ T5864] IPVS: starting estimator thread 0... [ 308.085768][ T5878] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 308.170704][ T9617] IPVS: using max 50 ests per chain, 120000 per kthread [ 308.237771][ T5878] usb 2-1: device descriptor read/64, error -71 [ 308.610600][ T5137] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 308.620063][ T5137] Bluetooth: hci5: Injecting HCI hardware error event [ 308.633056][ T5816] Bluetooth: hci5: hardware error 0x00 [ 308.728974][ T5878] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 309.820939][ T5878] usb 2-1: device descriptor read/64, error -71 [ 309.977880][ T5878] usb usb2-port1: attempt power cycle [ 310.747292][ T5878] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 310.792515][ T5878] usb 2-1: device descriptor read/8, error -71 [ 310.843474][ T5816] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 310.919982][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 310.919998][ T30] audit: type=1400 audit(1766259831.931:709): avc: denied { map } for pid=9644 comm="syz.3.827" path="socket:[28213]" dev="sockfs" ino=28213 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 310.961784][ T30] audit: type=1400 audit(1766259831.949:710): avc: denied { read } for pid=9644 comm="syz.3.827" path="socket:[28213]" dev="sockfs" ino=28213 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 311.098436][ T30] audit: type=1400 audit(1766259832.090:711): avc: denied { write } for pid=9653 comm="syz.1.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 311.414865][ T9663] fuse: Unknown parameter 'roo¼4}$®ƒätmode' [ 312.616780][ T9681] loop2: detected capacity change from 0 to 7 [ 312.632238][ T9681] loop2: p4 [ 312.635478][ T9681] loop2: partition table partially beyond EOD, truncated [ 312.642764][ T5864] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 312.650323][ T5922] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 312.674767][ T9681] loop2: p4 size 4294967295 extends beyond EOD, truncated [ 312.781000][ T5960] udevd[5960]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 312.810440][ T30] audit: type=1400 audit(1766259833.680:712): avc: denied { getopt } for pid=9683 comm="syz.5.838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 312.874556][ T5864] usb 7-1: Using ep0 maxpacket: 32 [ 312.889844][ T5960] udevd[5960]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 312.919652][ T5864] usb 7-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=d7.23 [ 312.931368][ T5922] usb 8-1: Using ep0 maxpacket: 16 [ 312.939459][ T5922] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.944172][ T5864] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.959292][ T5922] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.969086][ T5922] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 312.992135][ T5922] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 313.001252][ T5922] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.011364][ T5922] usb 8-1: config 0 descriptor?? [ 313.042049][ T5864] usb 7-1: Product: syz [ 313.071300][ T5864] usb 7-1: Manufacturer: syz [ 313.147839][ T5864] usb 7-1: SerialNumber: syz [ 313.269227][ T5864] usb 7-1: config 0 descriptor?? [ 313.596498][ T9668] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=9668 comm=syz.6.833 [ 313.680048][ T9692] fuse: Bad value for 'rootmode' [ 313.772582][ T5864] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 313.965748][ T5864] usb 2-1: Using ep0 maxpacket: 16 [ 314.022635][ T5864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.047147][ T5864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.057666][ T5864] usb 2-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 314.067061][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.078995][ T5864] usb 2-1: config 0 descriptor?? [ 314.093274][ T5922] usbhid 8-1:0.0: can't add hid device: -71 [ 314.099519][ T5922] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 314.110856][ T5922] usb 8-1: USB disconnect, device number 8 [ 314.111635][ T9705] 9p: Bad value for 'rfdno' [ 314.155127][ T30] audit: type=1400 audit(1766259834.952:713): avc: denied { write } for pid=9704 comm="syz.5.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 314.313506][ T5864] ntrig 0003:1B96:0008.000D: item fetching failed at offset 5/7 [ 314.337001][ T5864] ntrig 0003:1B96:0008.000D: parse failed [ 314.349939][ T5864] ntrig 0003:1B96:0008.000D: probe with driver ntrig failed with error -22 [ 314.404103][ T5864] usb 2-1: USB disconnect, device number 39 [ 315.790275][ T5922] usb 7-1: USB disconnect, device number 21 [ 317.289806][ T5864] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 317.564596][ T5864] usb 7-1: Using ep0 maxpacket: 8 [ 317.780581][ T5864] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03 [ 317.789969][ T5864] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.799633][ T5864] usb 7-1: Product: syz [ 317.804276][ T5864] usb 7-1: Manufacturer: syz [ 317.813089][ T5864] usb 7-1: SerialNumber: syz [ 317.832393][ T5864] usb 7-1: config 0 descriptor?? [ 317.846741][ T5864] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 317.915769][ T5864] dvb-usb: bulk message failed: -22 (2/0) [ 317.932747][ T5864] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 317.963623][ T5864] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 317.974561][ T5864] usb 7-1: media controller created [ 318.019666][ T9751] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 318.477438][ T5864] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 318.908762][ T5864] dvb-usb: bulk message failed: -22 (1/0) [ 318.921429][ T5864] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 318.937141][ T5864] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input21 [ 318.950702][ T5864] dvb-usb: schedule remote query interval to 50 msecs. [ 319.019885][ T5864] dvb-usb: bulk message failed: -22 (2/0) [ 319.102481][ T5864] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 319.132079][ T5919] dvb-usb: bulk message failed: -22 (1/0) [ 319.161987][ T5919] dvb-usb: error while querying for an remote control event. [ 319.172906][ T5864] usb 7-1: USB disconnect, device number 22 [ 319.249593][ T5864] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 320.539965][ T5864] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 320.721459][ T5864] usb 7-1: Using ep0 maxpacket: 16 [ 320.728897][ T5864] usb 7-1: config 0 has an invalid interface number: 214 but max is 0 [ 320.742922][ T5864] usb 7-1: config 0 has no interface number 0 [ 320.752937][ T5864] usb 7-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 320.784496][ T5864] usb 7-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 320.800797][ T5864] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.821515][ T5864] usb 7-1: Product: syz [ 320.833922][ T5864] usb 7-1: Manufacturer: syz [ 320.849773][ T5864] usb 7-1: SerialNumber: syz [ 320.888303][ T5864] usb 7-1: config 0 descriptor?? [ 321.121680][ T5864] usbtouchscreen 7-1:0.214: Failed to read FW rev: 0 [ 321.131267][ T5864] usbtouchscreen 7-1:0.214: probe with driver usbtouchscreen failed with error -5 [ 321.336338][ T5864] usb 7-1: USB disconnect, device number 23 [ 321.361894][ T30] audit: type=1400 audit(1766259841.687:714): avc: denied { open } for pid=9793 comm="syz.1.865" path="/dev/ptyq7" dev="devtmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 322.623928][ T9815] netlink: 88 bytes leftover after parsing attributes in process `syz.5.871'. [ 323.493742][ T5137] Bluetooth: hci2: command 0x0405 tx timeout [ 323.534699][ T30] audit: type=1400 audit(1766259843.717:715): avc: denied { mounton } for pid=9816 comm="syz.6.870" path="/117/file1/file0" dev="autofs" ino=28629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 323.540212][ T9840] netlink: 'syz.7.877': attribute type 1 has an invalid length. [ 323.567196][ T9840] netlink: 16062 bytes leftover after parsing attributes in process `syz.7.877'. [ 324.035596][ T24] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 324.150780][ T9841] No such timeout policy "syz1" [ 324.240263][ T24] usb 2-1: config 1 has an invalid interface number: 166 but max is 0 [ 324.262453][ T24] usb 2-1: config 1 has no interface number 0 [ 324.262488][ T24] usb 2-1: config 1 interface 166 has no altsetting 0 [ 324.265550][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=9950, bcdDevice=50.1a [ 324.265576][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.265593][ T24] usb 2-1: Product: syz [ 324.265607][ T24] usb 2-1: Manufacturer: syz [ 324.265620][ T24] usb 2-1: SerialNumber: syz [ 324.932652][ T24] dvb-usb: found a 'Hauppauge Nova-T 500 Dual DVB-T' in warm state. [ 324.948468][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 324.961237][ T24] dvbdev: DVB: registering new adapter (Hauppauge Nova-T 500 Dual DVB-T) [ 324.975859][ T24] usb 2-1: media controller created [ 325.009134][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 325.374235][ T9871] netlink: 'syz.3.885': attribute type 4 has an invalid length. [ 325.381907][ T9871] netlink: 'syz.3.885': attribute type 3 has an invalid length. [ 325.403994][ T5922] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 325.419433][ T9871] netlink: 132 bytes leftover after parsing attributes in process `syz.3.885'. [ 325.568867][ T5922] usb 8-1: config 0 interface 0 altsetting 27 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.586631][ T5922] usb 8-1: config 0 interface 0 has no altsetting 0 [ 325.593283][ T5922] usb 8-1: New USB device found, idVendor=056a, idProduct=037a, bcdDevice= 0.00 [ 325.612753][ T5922] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.635010][ T5922] usb 8-1: config 0 descriptor?? [ 326.290688][ T5922] usbhid 8-1:0.0: can't add hid device: -71 [ 326.297282][ T5922] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 326.307887][ T5922] usb 8-1: USB disconnect, device number 9 [ 326.484043][ T24] dvb-usb: no frontend was attached by 'Hauppauge Nova-T 500 Dual DVB-T' [ 326.492499][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 326.502368][ T24] dvbdev: DVB: registering new adapter (Hauppauge Nova-T 500 Dual DVB-T) [ 326.512504][ T24] usb 2-1: media controller created [ 326.523306][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 326.537508][ T24] dvb-usb: no frontend was attached by 'Hauppauge Nova-T 500 Dual DVB-T' [ 326.590600][ T24] rc_core: IR keymap rc-dib0700-rc5 not found [ 326.596692][ T24] Registered IR keymap rc-empty [ 326.605311][ T24] dvb-usb: could not initialize remote control. [ 326.611958][ T24] dvb-usb: Hauppauge Nova-T 500 Dual DVB-T successfully initialized and connected. [ 326.641099][ T24] usb 2-1: USB disconnect, device number 40 [ 326.708444][ T5922] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 326.721664][ T24] dvb-usb: Hauppauge Nova-T 500 Dual DVB-T successfully deinitialized and disconnected. [ 326.867413][ T9891] netlink: 36 bytes leftover after parsing attributes in process `syz.7.892'. [ 326.876467][ T9891] netlink: 8 bytes leftover after parsing attributes in process `syz.7.892'. [ 327.799496][ T5922] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 327.807914][ T5922] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.819197][ T5922] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 327.828733][ T5922] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 327.837027][ T5922] usb 6-1: Manufacturer: syz [ 327.844612][ T5922] usb 6-1: config 0 descriptor?? [ 327.926930][ T5922] rc_core: IR keymap rc-hauppauge not found [ 327.932871][ T5922] Registered IR keymap rc-empty [ 327.940612][ T5922] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 327.953988][ T5922] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input24 [ 328.099893][ C1] igorplugusb 6-1:0.0: Error: urb status = -32 [ 328.129220][ T5878] usb 6-1: USB disconnect, device number 20 [ 328.392974][ T9908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.895'. [ 328.902665][ T9920] netlink: 48 bytes leftover after parsing attributes in process `syz.5.900'. [ 329.193503][ T30] audit: type=1400 audit(1766259849.020:716): avc: denied { append } for pid=9921 comm="syz.5.901" name="binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 329.217375][ T9923] binder_alloc: 9921: binder_alloc_buf, no vma [ 329.229600][ T30] audit: type=1400 audit(1766259849.039:717): avc: denied { call } for pid=9921 comm="syz.5.901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 329.637293][ T9942] wireguard0: entered promiscuous mode [ 329.643252][ T9942] wireguard0: entered allmulticast mode [ 330.560090][ T9957] netlink: 207952 bytes leftover after parsing attributes in process `syz.7.911'. [ 330.571521][ T9956] netlink: 'syz.5.910': attribute type 10 has an invalid length. [ 330.589983][ T9956] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 330.613342][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.622119][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.707877][ T9960] netlink: 8 bytes leftover after parsing attributes in process `syz.7.911'. [ 330.973871][ T5885] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 331.135960][ T5885] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.150206][ T5885] usb 6-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 331.160674][ T5885] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.177260][ T5885] usb 6-1: config 0 descriptor?? [ 332.292929][ T9964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.301416][ T25] block nbd0: Possible stuck request ffff8880270a0000: control (read@0,1024B). Runtime 90 seconds [ 332.320201][ T25] block nbd0: Possible stuck request ffff8880270a0200: control (read@1024,1024B). Runtime 90 seconds [ 332.326037][ T9964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.331134][ T25] block nbd0: Possible stuck request ffff8880270a0400: control (read@2048,1024B). Runtime 90 seconds [ 332.349865][ T25] block nbd0: Possible stuck request ffff8880270a0600: control (read@3072,1024B). Runtime 90 seconds [ 332.402491][ T9964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.440529][ T9964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.449266][ T9964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.457850][ T9964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.485559][ T9964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.518167][ T9964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.536732][ T9964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.620302][ T9985] overlayfs: failed to resolve './file0': -2 [ 332.623693][ T9964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.260847][ T9998] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 333.314747][T10000] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2561 sclass=netlink_route_socket pid=10000 comm=syz.7.918 [ 333.846330][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 333.853429][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 333.935199][ T5922] usb 6-1: USB disconnect, device number 21 [ 333.968399][ T5885] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 334.984946][ T5885] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.002062][ T5885] usb 8-1: config 0 interface 0 has no altsetting 0 [ 335.013534][ T5885] usb 8-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 335.024631][ T5885] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.044465][ T5885] usb 8-1: config 0 descriptor?? [ 335.553853][T10017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.576289][T10017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.607300][ T5885] kye 0003:0458:5010.000F: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 335.668695][ T5885] kye 0003:0458:5010.000F: item fetching failed at offset 5/7 [ 335.721398][ T5885] kye 0003:0458:5010.000F: parse failed [ 335.726974][ T5885] kye 0003:0458:5010.000F: probe with driver kye failed with error -22 [ 335.816033][ T5922] usb 8-1: USB disconnect, device number 10 [ 336.082834][ T5922] libceph: connect (1)[c::]:6789 error -101 [ 336.089527][ T5922] libceph: mon0 (1)[c::]:6789 connect error [ 336.116142][T10058] ceph: No mds server is up or the cluster is laggy [ 336.287099][ T5885] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 336.381553][ T30] audit: type=1400 audit(1766259855.737:718): avc: denied { setopt } for pid=10065 comm="syz.7.938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 336.458248][ T5885] usb 2-1: Using ep0 maxpacket: 16 [ 336.466294][ T5885] usb 2-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 336.475682][ T5885] usb 2-1: New USB device strings: Mfr=117, Product=0, SerialNumber=0 [ 336.485613][ T5885] usb 2-1: Manufacturer: syz [ 336.497483][ T5885] usb 2-1: config 0 descriptor?? [ 336.813132][T10071] wg2 speed is unknown, defaulting to 1000 [ 338.536595][T10083] cgroup: subsys name conflicts with all [ 338.704285][ T5885] usbhid 2-1:0.0: can't add hid device: -71 [ 338.710305][ T5885] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 338.754225][ T5885] usb 2-1: USB disconnect, device number 41 [ 340.322306][T10098] netlink: 20 bytes leftover after parsing attributes in process `syz.1.945'. [ 340.354784][T10098] netlink: 20 bytes leftover after parsing attributes in process `syz.1.945'. [ 340.760058][ T30] audit: type=1400 audit(1766259859.824:719): avc: denied { create } for pid=10091 comm="syz.3.942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 340.984514][T10111] netlink: 32 bytes leftover after parsing attributes in process `syz.5.948'. [ 341.136898][ T5137] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 341.147305][ T5137] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 341.157412][ T5137] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 341.168078][ T5137] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 341.177615][ T5137] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 341.226075][ T5885] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 341.269719][T10115] wg2 speed is unknown, defaulting to 1000 [ 341.403293][ T6882] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.418843][ T5885] usb 2-1: Using ep0 maxpacket: 32 [ 341.429931][ T5885] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 341.440822][ T5885] usb 2-1: config 0 has no interface number 0 [ 341.447155][ T5885] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 341.461700][ T5885] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 341.524338][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.535273][ T5885] usb 2-1: Product: syz [ 341.539797][ T5885] usb 2-1: Manufacturer: syz [ 341.544606][ T5885] usb 2-1: SerialNumber: syz [ 341.554078][ T5885] usb 2-1: config 0 descriptor?? [ 341.571593][ T5885] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 341.588128][ T5885] em28xx 2-1:0.132: Video interface 132 found: [ 341.648132][ T6882] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.048939][ T6882] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.065459][ T5885] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 342.258059][ T5885] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 342.268641][ T5885] em28xx 2-1:0.132: board has no eeprom [ 342.835530][ T5885] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 342.844080][ T5885] em28xx 2-1:0.132: analog set to bulk mode. [ 342.850463][ T5864] em28xx 2-1:0.132: Registering V4L2 extension [ 342.869436][ T5885] usb 2-1: USB disconnect, device number 42 [ 342.892012][ T5885] em28xx 2-1:0.132: Disconnecting em28xx [ 343.150564][ T5854] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 343.369367][ T5854] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 343.418928][ T5816] Bluetooth: hci6: command tx timeout [ 343.460603][ T5854] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x58, changing to 0x8 [ 343.560050][ T5854] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 343.656375][ T5854] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 343.710975][ T5854] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.791839][ T5854] usb 6-1: Product: syz [ 343.796074][ T5854] usb 6-1: Manufacturer: syz [ 343.822570][ T5864] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 343.825912][ T6882] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.840260][ T5854] usb 6-1: SerialNumber: syz [ 343.852543][ T5864] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 343.890554][ T5864] em28xx 2-1:0.132: No AC97 audio processor [ 343.915858][ T5864] usb 2-1: Decoder not found [ 343.935226][ T5864] em28xx 2-1:0.132: failed to create media graph [ 343.956785][ T5864] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 343.980033][T10145] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 343.996448][ T5864] em28xx 2-1:0.132: Remote control support is not available for this card. [ 344.005369][ T5885] em28xx 2-1:0.132: Closing input extension [ 344.034270][ T5885] em28xx 2-1:0.132: Freeing device [ 344.309964][T10115] chnl_net:caif_netlink_parms(): no params data found [ 344.518979][ T5885] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 344.691795][ T5885] usb 8-1: Using ep0 maxpacket: 16 [ 344.712585][ T5885] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 344.750986][ T5885] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 344.772481][ T5885] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 344.796089][ T5885] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 344.805503][ T5885] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.874408][ T5885] usb 8-1: Product: syz [ 344.878693][ T5885] usb 8-1: Manufacturer: syz [ 344.903652][ T5885] usb 8-1: SerialNumber: syz [ 345.051284][T10135] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request [ 345.062683][T10135] netlink: 24 bytes leftover after parsing attributes in process `syz.5.954'. [ 345.121976][ T5854] cdc_ncm 6-1:1.0: bind() failure [ 345.154120][ T5854] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 345.198436][ T5854] usb 6-1: USB disconnect, device number 22 [ 345.367241][ T5885] usb 8-1: 0:2 : does not exist [ 345.616447][ T5885] usb 8-1: 1:0: cannot get min/max values for control 4 (id 1) [ 345.656102][ T5137] Bluetooth: hci6: command tx timeout [ 345.661994][ T5885] usb 8-1: USB disconnect, device number 11 [ 345.719070][ T5960] udevd[5960]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 345.759259][ T5854] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 345.853632][ T6882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 345.866777][ T6882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 345.880664][ T6882] bond0 (unregistering): Released all slaves [ 345.918820][T10115] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.927048][T10115] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.934617][T10115] bridge_slave_0: entered allmulticast mode [ 345.942046][ T5854] usb 2-1: Using ep0 maxpacket: 8 [ 345.946777][T10115] bridge_slave_0: entered promiscuous mode [ 345.970140][ T5854] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 346.003180][ T5854] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.089283][ T5854] usb 2-1: Product: syz [ 346.194884][ T5854] usb 2-1: Manufacturer: syz [ 346.220410][ T5854] usb 2-1: SerialNumber: syz [ 346.350555][ T5854] usb 2-1: config 0 descriptor?? [ 346.360082][T10176] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 346.408238][T10115] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.420442][T10115] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.428099][T10115] bridge_slave_1: entered allmulticast mode [ 346.439374][T10115] bridge_slave_1: entered promiscuous mode [ 346.525275][T10115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.537293][T10115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.606321][ T5854] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 346.617652][T10172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.628084][T10172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.650069][ T5854] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 346.678562][ T5854] usb 2-1: USB disconnect, device number 43 [ 346.881846][T10115] team0: Port device team_slave_0 added [ 347.587666][ T30] audit: type=1400 audit(1766259865.979:720): avc: denied { append } for pid=10205 comm="syz.5.966" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 347.705881][ T30] audit: type=1400 audit(1766259866.335:721): avc: denied { ioctl } for pid=10210 comm="syz.1.968" path="socket:[29590]" dev="sockfs" ino=29590 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 347.755126][ T30] audit: type=1400 audit(1766259866.372:722): avc: denied { read } for pid=10218 comm="syz.7.969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 347.757059][T10115] team0: Port device team_slave_1 added [ 347.818983][T10220] bond1: Removing last arp target with arp_interval on [ 347.830542][T10220] bond1: entered allmulticast mode [ 347.836764][T10220] 8021q: adding VLAN 0 to HW filter on device bond1 [ 347.865831][ T5137] Bluetooth: hci6: command tx timeout [ 347.941183][T10215] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 347.986042][T10215] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 347.987392][T10115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.032925][T10115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.084921][T10115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.109780][T10115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.128203][T10115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.154211][T10115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.165465][ T5854] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 348.298364][ T6882] hsr_slave_0: left promiscuous mode [ 348.316079][ T5885] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 348.324985][ T6882] hsr_slave_1: left promiscuous mode [ 348.330987][ T6882] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.339420][ T5854] usb 6-1: Using ep0 maxpacket: 32 [ 348.350978][ T5854] usb 6-1: config 0 has an invalid interface number: 29 but max is 0 [ 348.360792][ T5854] usb 6-1: config 0 has no interface number 0 [ 348.371653][ T6882] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.379361][ T5854] usb 6-1: config 0 interface 29 has no altsetting 0 [ 348.390746][ T5854] usb 6-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 348.404186][ T6882] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.411866][ T5854] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.419868][ T5854] usb 6-1: Product: syz [ 348.425331][ T6882] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.433523][ T5854] usb 6-1: Manufacturer: syz [ 348.438163][ T5854] usb 6-1: SerialNumber: syz [ 348.461165][ T6882] veth1_macvtap: left promiscuous mode [ 348.468462][ T5854] usb 6-1: config 0 descriptor?? [ 348.477718][ T6882] veth0_macvtap: left promiscuous mode [ 348.487850][ T6882] veth1_vlan: left promiscuous mode [ 348.493267][ T6882] veth0_vlan: left promiscuous mode [ 348.517198][ T5885] usb 8-1: Using ep0 maxpacket: 16 [ 348.524246][ T5885] usb 8-1: config 0 interface 0 altsetting 44 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 348.544527][ T5885] usb 8-1: config 0 interface 0 altsetting 44 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 348.573293][ T5885] usb 8-1: config 0 interface 0 altsetting 44 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 348.600729][ T5885] usb 8-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 348.628765][ T5885] usb 8-1: config 0 interface 0 has no altsetting 0 [ 348.650406][ T5885] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 348.665619][ T5885] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.682717][ T5885] usb 8-1: Product: syz [ 348.691188][ T5885] usb 8-1: Manufacturer: syz [ 348.705431][ T5885] usb 8-1: SerialNumber: syz [ 348.721845][ T5885] usb 8-1: config 0 descriptor?? [ 348.742053][T10230] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 348.761782][ T5885] input: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input25 [ 349.028112][ T5885] usb 8-1: USB disconnect, device number 12 [ 349.078838][T10250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.092979][T10250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.166991][T10251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.182221][T10251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.192039][ T6882] team0 (unregistering): Port device team_slave_1 removed [ 349.224437][ T6882] team0 (unregistering): Port device team_slave_0 removed [ 349.404869][ T5885] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 349.552277][T10115] hsr_slave_0: entered promiscuous mode [ 349.558452][T10115] hsr_slave_1: entered promiscuous mode [ 349.572470][ T5854] peak_usb 6-1:0.29: PEAK-System PCAN-USB X6 v245 fw v48.251.12 (2 channels) [ 349.608637][ T5885] usb 8-1: unable to get BOS descriptor or descriptor too short [ 349.616893][ T5885] usb 8-1: not running at top speed; connect to a high speed hub [ 349.627490][ T5885] usb 8-1: config 57 has an invalid descriptor of length 0, skipping remainder of the config [ 349.648995][ T5885] usb 8-1: New USB device found, idVendor=13d8, idProduct=0002, bcdDevice=60.d3 [ 349.673934][ T5885] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.682152][ T5885] usb 8-1: Product: syz [ 349.691889][ T5885] usb 8-1: Manufacturer: syz [ 349.702765][ T5885] usb 8-1: SerialNumber: syz [ 350.018706][T10115] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 350.068122][ T5885] usb 8-1: selecting invalid altsetting 3 [ 350.088621][ T5137] Bluetooth: hci6: command tx timeout [ 350.105868][ T5885] comedi comedi5: could not set alternate setting 3 in high speed [ 350.116795][T10115] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 350.126063][ T5885] usbdux 8-1:57.0: driver 'usbdux' failed to auto-configure device. [ 350.137613][ T24] IPVS: starting estimator thread 0... [ 350.147793][ T5885] usbdux 8-1:57.0: probe with driver usbdux failed with error -22 [ 350.163871][ T5885] usb 8-1: USB disconnect, device number 13 [ 350.179394][T10115] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 350.211702][T10115] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 350.252701][T10271] wg2 speed is unknown, defaulting to 1000 [ 350.262020][T10268] IPVS: using max 80 ests per chain, 192000 per kthread [ 350.337418][T10277] openvswitch: netlink: Message has 2712 unknown bytes. [ 350.405517][T10115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.441953][T10115] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.461404][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.468568][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.501409][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.508568][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.517152][ T5885] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 350.762699][ T5885] usb 8-1: config 0 has no interfaces? [ 350.775164][ T5885] usb 8-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02 [ 350.805173][ T5885] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 350.825079][ T5885] usb 8-1: SerialNumber: syz [ 350.848451][ T5885] usb 8-1: config 0 descriptor?? [ 350.913599][ T30] audit: type=1400 audit(1766259869.337:723): avc: denied { ioctl } for pid=10288 comm="syz.3.979" path="socket:[29672]" dev="sockfs" ino=29672 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 351.112432][T10297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.980'. [ 351.142240][ T5885] usb 8-1: USB disconnect, device number 14 [ 351.157764][ T5854] peak_usb 6-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 351.176793][T10297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.980'. [ 351.187747][ T5854] peak_usb 6-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 351.192130][T10115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.245022][T10297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.980'. [ 351.290480][ T5854] peak_usb 6-1:0.29: probe with driver peak_usb failed with error -71 [ 351.299318][T10297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.980'. [ 351.325309][ T5854] usb 6-1: USB disconnect, device number 23 [ 351.333187][T10297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.980'. [ 351.385848][T10297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.980'. [ 351.444946][T10297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.980'. [ 351.477430][T10297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.980'. [ 351.493003][T10297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.980'. [ 351.527268][T10297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.980'. [ 351.730292][T10115] veth0_vlan: entered promiscuous mode [ 351.789683][T10115] veth1_vlan: entered promiscuous mode [ 351.875017][T10115] veth0_macvtap: entered promiscuous mode [ 351.903343][T10115] veth1_macvtap: entered promiscuous mode [ 351.919135][T10324] netlink: 'syz.3.982': attribute type 6 has an invalid length. [ 351.999167][T10115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.015140][T10115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.454349][ T9345] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.467841][ T9345] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.508742][ T9345] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.535903][ T9345] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.748109][ T9345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.770387][T10342] overlayfs: failed to clone upperpath [ 352.773818][ T9345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.867764][ T9345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.894350][ T9345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.384650][ T30] audit: type=1400 audit(1766259871.638:724): avc: denied { getopt } for pid=10359 comm="syz.8.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 354.055029][ T30] audit: type=1400 audit(1766259872.246:725): avc: denied { getopt } for pid=10363 comm="syz.5.991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 354.744763][T10384] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 354.784970][ T30] audit: type=1400 audit(1766259872.957:726): avc: denied { relabelto } for pid=10383 comm="syz.8.995" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 354.819236][ T30] audit: type=1400 audit(1766259872.957:727): avc: denied { associate } for pid=10383 comm="syz.8.995" name="/" dev="cgroup2" ino=1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 354.995860][ T5885] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 355.209385][ T5885] usb 6-1: Using ep0 maxpacket: 8 [ 355.238781][ T5885] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 355.248625][ T5885] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 355.262000][ T5885] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 355.293721][ T5885] usb 6-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 355.303034][ T5885] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.312911][ T5885] usb 6-1: Product: syz [ 355.317967][ T5885] usb 6-1: Manufacturer: syz [ 355.323956][ T5885] usb 6-1: SerialNumber: syz [ 355.336878][ T5885] ti_usb_3410_5052 6-1:1.0: TI USB 3410 1 port adapter converter detected [ 355.556394][ T5922] usb 6-1: USB disconnect, device number 24 [ 355.809122][T10407] netlink: 'syz.3.1000': attribute type 29 has an invalid length. [ 356.205829][ T30] audit: type=1326 audit(1766259874.286:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10419 comm="syz.5.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f024058f749 code=0x7ffc0000 [ 356.258142][ T30] audit: type=1326 audit(1766259874.286:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10419 comm="syz.5.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f024058f749 code=0x7ffc0000 [ 356.282346][ T30] audit: type=1326 audit(1766259874.286:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10419 comm="syz.5.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f024058f749 code=0x7ffc0000 [ 356.316139][ T30] audit: type=1326 audit(1766259874.286:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10419 comm="syz.5.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f024058f749 code=0x7ffc0000 [ 356.439028][T10421] veth0_to_bridge: left allmulticast mode [ 356.444785][T10421] veth0_to_bridge: left promiscuous mode [ 356.450751][T10421] bridge0: port 3(veth0_to_bridge) entered disabled state [ 356.465307][ T30] audit: type=1326 audit(1766259874.286:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10419 comm="syz.5.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f024058f749 code=0x7ffc0000 [ 357.125155][T10421] bridge_slave_0: left allmulticast mode [ 357.130835][T10421] bridge_slave_0: left promiscuous mode [ 357.145240][ T30] audit: type=1326 audit(1766259874.286:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10419 comm="syz.5.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f024058f749 code=0x7ffc0000 [ 357.202138][T10421] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.273773][T10421] bridge_slave_1: left allmulticast mode [ 357.279455][T10421] bridge_slave_1: left promiscuous mode [ 357.306216][T10421] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.346574][T10421] bond0: (slave bond_slave_0): Releasing backup interface [ 357.383653][T10421] bond0: (slave bond_slave_1): Releasing backup interface [ 357.401505][T10421] team0: Port device team_slave_0 removed [ 357.419950][T10421] team0: Port device team_slave_1 removed [ 357.428100][T10421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.438412][T10421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.466867][T10421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.482750][T10421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.497402][T10421] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 357.730759][T10437] __nla_validate_parse: 25 callbacks suppressed [ 357.730772][T10437] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1006'. [ 357.799110][T10430] infiniband syz!: set active [ 357.803884][T10430] infiniband syz!: added team_slave_0 [ 357.827413][T10430] RDS/IB: syz!: added [ 357.842495][T10430] smc: adding ib device syz! with port count 1 [ 357.848669][T10430] smc: ib device syz! port 1 has no pnetid [ 357.892755][ T5864] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 358.076167][ T5864] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 358.089988][ T5864] usb 8-1: config 0 has no interface number 0 [ 358.099112][ T5864] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.744266][ T5864] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.806526][ T5864] usb 8-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 358.977659][ T5864] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.003278][ T5864] usb 8-1: config 0 descriptor?? [ 359.036175][T10437] syz.3.1006 (10437) used greatest stack depth: 17768 bytes left [ 359.384929][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 359.384946][ T30] audit: type=1400 audit(1766259877.260:781): avc: denied { mounton } for pid=10461 comm="syz.5.1014" path="/198/file0" dev="tmpfs" ino=1097 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 359.417282][T10466] erofs (device loop5): cannot find valid erofs superblock [ 359.463596][T10435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.479689][T10435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.504055][ T5864] prodikeys 0003:041E:2801.0010: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.7-1/input1 [ 359.545074][ T5864] hid_prodikeys: hid-prodikeys: failed to find output report [ 359.545074][ T5864] [ 359.740927][ T5864] usb 8-1: USB disconnect, device number 15 [ 360.273647][T10492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.285343][T10492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.524441][ T5864] usb 6-1: new low-speed USB device number 25 using dummy_hcd [ 360.625110][T10503] netlink: 'syz.7.1024': attribute type 9 has an invalid length. [ 360.633244][T10503] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1024'. [ 360.667900][ T30] audit: type=1400 audit(1766259878.457:782): avc: denied { name_bind } for pid=10504 comm="syz.7.1025" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 360.719141][ T5864] usb 6-1: Invalid ep0 maxpacket: 32 [ 360.875456][ T5864] usb 6-1: new low-speed USB device number 26 using dummy_hcd [ 361.048991][ T5864] usb 6-1: Invalid ep0 maxpacket: 32 [ 361.062041][ T30] audit: type=1400 audit(1766259878.832:783): avc: denied { read } for pid=10513 comm="syz.8.1028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 361.091113][ T5864] usb usb6-port1: attempt power cycle [ 361.142225][T10523] 9p: Bad value for 'rfdno' [ 361.149613][T10523] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1028'. [ 361.475456][ T5864] usb 6-1: new low-speed USB device number 27 using dummy_hcd [ 361.495932][ T5864] usb 6-1: Invalid ep0 maxpacket: 32 [ 361.731090][ T5864] usb 6-1: new low-speed USB device number 28 using dummy_hcd [ 361.752724][ T5864] usb 6-1: Invalid ep0 maxpacket: 32 [ 361.850714][ T5864] usb usb6-port1: unable to enumerate USB device [ 362.371214][T10541] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1035'. [ 362.395111][T10541] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=10541 comm=syz.7.1035 [ 362.408859][T10541] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=10541 comm=syz.7.1035 [ 362.423725][T10541] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=10541 comm=syz.7.1035 [ 362.439392][T10541] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=10541 comm=syz.7.1035 [ 362.452214][T10541] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=10541 comm=syz.7.1035 [ 362.470945][T10541] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=10541 comm=syz.7.1035 [ 363.176016][ T30] audit: type=1400 audit(1766259880.805:784): avc: denied { write } for pid=10569 comm="syz.7.1044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 363.202270][ T30] audit: type=1400 audit(1766259880.824:785): avc: denied { ioctl } for pid=10569 comm="syz.7.1044" path="socket:[31545]" dev="sockfs" ino=31545 ioctlcmd=0x8901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 363.486585][ T30] audit: type=1400 audit(1766259881.095:786): avc: denied { listen } for pid=10584 comm="syz.8.1048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 363.489210][T10586] xt_CT: You must specify a L4 protocol and not use inversions on it [ 363.558526][ T30] audit: type=1400 audit(1766259881.161:787): avc: denied { set_context_mgr } for pid=10584 comm="syz.8.1048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 364.331624][T10615] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1055'. [ 364.646655][ T25] block nbd0: Possible stuck request ffff8880270a0000: control (read@0,1024B). Runtime 120 seconds [ 364.660844][ T25] block nbd0: Possible stuck request ffff8880270a0200: control (read@1024,1024B). Runtime 120 seconds [ 364.673684][ T25] block nbd0: Possible stuck request ffff8880270a0400: control (read@2048,1024B). Runtime 120 seconds [ 364.685127][ T25] block nbd0: Possible stuck request ffff8880270a0600: control (read@3072,1024B). Runtime 120 seconds [ 365.260676][T10637] netlink: 'syz.3.1057': attribute type 16 has an invalid length. [ 366.213814][ T5816] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 366.225512][ T5816] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 366.234343][ T5816] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 366.274888][ T5816] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 366.285056][ T5816] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 366.851926][T10641] wg2 speed is unknown, defaulting to 1000 [ 367.170289][ T30] audit: type=1400 audit(1766259884.538:788): avc: denied { setattr } for pid=10663 comm="syz.5.1062" path="/dev/mixer" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 367.225631][ T24] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 368.219835][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 368.226606][ T24] usb 8-1: config index 0 descriptor too short (expected 5924, got 36) [ 368.238557][ T24] usb 8-1: config 250 has an invalid interface number: 228 but max is -1 [ 368.274894][ T24] usb 8-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 368.319686][ T24] usb 8-1: config 250 has no interface number 0 [ 368.334518][ T24] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 368.388903][ T24] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 368.455057][ T24] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 368.490386][ T5137] Bluetooth: hci0: command tx timeout [ 368.508557][ T24] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 368.529750][ T24] usb 8-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 368.545149][ T24] usb 8-1: config 250 interface 228 has no altsetting 0 [ 368.546893][ T24] usb 8-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 368.546909][ T24] usb 8-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 368.546920][ T24] usb 8-1: Product: syz [ 368.546928][ T24] usb 8-1: SerialNumber: syz [ 368.549602][ T24] hub 8-1:250.228: bad descriptor, ignoring hub [ 368.549618][ T24] hub 8-1:250.228: probe with driver hub failed with error -5 [ 368.774156][ T24] usblp 8-1:250.228: usblp0: USB Bidirectional printer dev 16 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 369.071917][ T30] audit: type=1400 audit(1766259886.315:789): avc: denied { read write } for pid=10657 comm="syz.7.1061" name="lp0" dev="devtmpfs" ino=3233 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 369.332942][ T30] audit: type=1400 audit(1766259886.352:790): avc: denied { open } for pid=10657 comm="syz.7.1061" path="/dev/usb/lp0" dev="devtmpfs" ino=3233 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 370.339977][T10641] chnl_net:caif_netlink_parms(): no params data found [ 370.371002][ T5918] usb 8-1: USB disconnect, device number 16 [ 370.390535][ T5918] usblp0: removed [ 370.479539][ T30] audit: type=1400 audit(1766259887.634:791): avc: denied { listen } for pid=10705 comm="syz.3.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 370.501723][ T30] audit: type=1400 audit(1766259887.634:792): avc: denied { accept } for pid=10705 comm="syz.3.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 370.524479][T10724] digital: digital_start_poll: Unknown protocol [ 370.700082][ T5137] Bluetooth: hci0: command tx timeout [ 370.742864][T10641] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.750122][T10641] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.771855][T10641] bridge_slave_0: entered allmulticast mode [ 370.783110][T10641] bridge_slave_0: entered promiscuous mode [ 370.793410][T10735] kvm: pic: non byte read [ 370.799097][T10641] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.806373][T10641] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.813752][T10641] bridge_slave_1: entered allmulticast mode [ 370.837580][T10641] bridge_slave_1: entered promiscuous mode [ 370.860543][ T5919] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 370.955196][T10740] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1072'. [ 371.001367][T10641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.042171][ T5919] usb 6-1: Using ep0 maxpacket: 16 [ 371.079398][ T5919] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 371.093605][T10641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.103943][ T5919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 371.150137][ T5919] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 371.163935][ T5919] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.173044][ T5919] usb 6-1: Product: syz [ 371.177720][ T5919] usb 6-1: Manufacturer: syz [ 371.183499][ T5919] usb 6-1: SerialNumber: syz [ 371.200603][T10641] team0: Port device team_slave_0 added [ 371.207157][ T5919] usb 6-1: config 0 descriptor?? [ 371.229219][ T5919] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 371.240813][T10641] team0: Port device team_slave_1 added [ 371.252215][ T5919] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 371.443838][T10641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.491070][T10641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.521618][T10641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.534045][ T5864] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 371.581009][T10641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.592964][T10641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.643461][T10641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.733276][ T5864] usb 8-1: too many configurations: 37, using maximum allowed: 8 [ 371.749326][ T5864] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 371.765605][ T5864] usb 8-1: can't read configurations, error -61 [ 371.790377][T10641] hsr_slave_0: entered promiscuous mode [ 371.802744][T10641] hsr_slave_1: entered promiscuous mode [ 371.843453][T10641] debugfs: 'hsr0' already exists in 'hsr' [ 371.855336][T10641] Cannot create hsr debugfs directory [ 371.870582][ T5919] em28xx 6-1:0.0: unknown em28xx chip ID (98) [ 371.919947][ T5864] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 372.084784][ T5919] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 372.092778][T10717] netlink: 190972 bytes leftover after parsing attributes in process `syz.5.1070'. [ 372.137452][ T5864] usb 8-1: too many configurations: 37, using maximum allowed: 8 [ 372.161745][ T5864] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 372.170138][ T5864] usb 8-1: can't read configurations, error -61 [ 372.193443][ T5864] usb usb8-port1: attempt power cycle [ 372.506465][ T5919] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 372.516559][ T5919] em28xx 6-1:0.0: No AC97 audio processor [ 372.637672][ T5919] usb 6-1: USB disconnect, device number 29 [ 372.665114][ T5919] em28xx 6-1:0.0: Disconnecting em28xx [ 372.695313][ T5919] em28xx 6-1:0.0: Freeing device [ 372.722273][T10641] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 372.774357][T10641] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 372.813675][T10641] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 372.820630][ T5864] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 372.862907][T10641] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 372.882030][ T5864] usb 8-1: too many configurations: 37, using maximum allowed: 8 [ 372.915322][ T5864] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 372.934652][ T5137] Bluetooth: hci0: command tx timeout [ 372.949521][ T5864] usb 8-1: can't read configurations, error -61 [ 373.096880][ T5864] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 373.108060][T10641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.133361][T10641] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.149065][ T5864] usb 8-1: too many configurations: 37, using maximum allowed: 8 [ 373.163860][ T9361] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.170942][ T9361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.180890][ T5864] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 373.188928][ T5864] usb 8-1: can't read configurations, error -61 [ 373.202041][ T5864] usb usb8-port1: unable to enumerate USB device [ 373.206091][T10769] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 373.220538][ T9361] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.227648][ T9361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.364240][ T30] audit: type=1400 audit(1766259890.861:793): avc: denied { write } for pid=10775 comm="syz.5.1080" name="vlan0" dev="proc" ino=4026534150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 374.761343][T10641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.171194][ T5137] Bluetooth: hci0: command tx timeout [ 375.290206][ T30] audit: type=1400 audit(1766259892.142:794): avc: denied { lock } for pid=10771 comm="syz.3.1079" path="socket:[33169]" dev="sockfs" ino=33169 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 375.634629][T10641] veth0_vlan: entered promiscuous mode [ 375.659441][T10641] veth1_vlan: entered promiscuous mode [ 375.724834][T10641] veth0_macvtap: entered promiscuous mode [ 375.738548][T10641] veth1_macvtap: entered promiscuous mode [ 375.770731][T10641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.809031][T10641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.825322][ T6882] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.852561][ T6882] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.871531][ T6882] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.885991][ T6882] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.019886][ T6882] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.063665][ T6882] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.137324][ T6879] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.160796][ T6879] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.215083][ T30] audit: type=1400 audit(1766259892.994:795): avc: denied { add_name } for pid=10641 comm="syz-executor" name="syz9" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 376.242121][T10641] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000007: 0000 [#1] SMP KASAN NOPTI [ 376.254192][T10641] KASAN: null-ptr-deref in range [0x0000000000000038-0x000000000000003f] [ 376.262602][T10641] CPU: 1 UID: 0 PID: 10641 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 376.271505][ T30] audit: type=1400 audit(1766259893.031:796): avc: denied { create } for pid=10641 comm="syz-executor" name="syz9" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 376.272133][T10641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 376.294311][ T30] audit: type=1400 audit(1766259893.031:797): avc: denied { associate } for pid=10641 comm="syz-executor" name="syz9" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 376.302448][T10641] RIP: 0010:simple_xattrs_free+0x60/0x1e0 [ 376.302474][T10641] Code: ea 03 80 3c 02 00 0f 85 8b 01 00 00 49 c7 45 00 00 00 00 00 e8 21 9c 75 ff 4c 89 fa 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 56 01 00 00 48 bd 00 00 00 00 00 fc ff df 49 8b [ 376.324424][ T6050] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 376.329590][T10641] RSP: 0018:ffffc9000419fae0 EFLAGS: 00010202 [ 376.329609][T10641] RAX: dffffc0000000000 RBX: ffff88802d19bf00 RCX: ffffffff826a4395 [ 376.329618][T10641] RDX: 0000000000000007 RSI: ffffffff82494a6f RDI: 0000000000000038 [ 376.329628][T10641] RBP: ffff88802d19bf98 R08: 0000000000000005 R09: 0000000000000000 [ 376.386653][T10641] R10: 00000000ffffffea R11: ffffffff82288a94 R12: 1ffff92000833f6b [ 376.394606][T10641] R13: 0000000000000000 R14: ffff88802a5113e0 R15: 0000000000000038 [ 376.402560][T10641] FS: 0000555571b0e500(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 376.411467][T10641] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 376.418030][T10641] CR2: 00007f3785665da0 CR3: 0000000031412000 CR4: 00000000003526f0 [ 376.425996][T10641] Call Trace: [ 376.429252][T10641] [ 376.432164][T10641] __kernfs_new_node+0x7b4/0x990 [ 376.437087][T10641] ? __pfx___kernfs_new_node+0x10/0x10 [ 376.442528][T10641] ? find_held_lock+0x2b/0x80 [ 376.447193][T10641] ? kernfs_root+0xee/0x2a0 [ 376.451678][T10641] kernfs_new_node+0x13c/0x1e0 [ 376.456428][T10641] ? kasan_save_track+0x14/0x30 [ 376.461258][T10641] kernfs_create_dir_ns+0x4c/0x1a0 [ 376.466353][T10641] cgroup_mkdir+0x40f/0x12e0 [ 376.470925][T10641] ? __pfx_cgroup_mkdir+0x10/0x10 [ 376.475930][T10641] kernfs_iop_mkdir+0x111/0x190 [ 376.480763][T10641] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 376.485774][T10641] vfs_mkdir+0x731/0xb60 [ 376.489996][T10641] do_mkdirat+0x442/0x5e0 [ 376.494308][T10641] ? __pfx_do_mkdirat+0x10/0x10 [ 376.499157][T10641] ? getname_flags.part.0+0x1c5/0x550 [ 376.504506][T10641] __x64_sys_mkdirat+0x83/0xb0 [ 376.509251][T10641] do_syscall_64+0xcd/0xf80 [ 376.513736][T10641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.519606][T10641] RIP: 0033:0x7f378578de97 [ 376.524001][T10641] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.543655][T10641] RSP: 002b:00007fff6f881f28 EFLAGS: 00000206 ORIG_RAX: 0000000000000102 [ 376.552063][T10641] RAX: ffffffffffffffda RBX: 00007fff6f881f80 RCX: 00007f378578de97 [ 376.560026][T10641] RDX: 00000000000001ff RSI: 00007fff6f881f80 RDI: 00000000ffffff9c [ 376.567977][T10641] RBP: 0000000000000001 R08: 0000000000000017 R09: 00007fff6f881c77 [ 376.575924][T10641] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008 [ 376.583881][T10641] R13: 0000000000000003 R14: 00007fff6f8823f8 R15: 0000000000000000 [ 376.591850][T10641] [ 376.594857][T10641] Modules linked in: [ 376.599621][ T30] audit: type=1400 audit(1766259893.031:798): avc: denied { read } for pid=5168 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 376.599782][T10641] ---[ end trace 0000000000000000 ]--- [ 376.621702][ T30] audit: type=1400 audit(1766259893.031:799): avc: denied { search } for pid=5168 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 376.621730][ T30] audit: type=1400 audit(1766259893.031:800): avc: denied { search } for pid=5168 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 376.621755][ T30] audit: type=1400 audit(1766259893.031:801): avc: denied { add_name } for pid=5168 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 376.621780][ T30] audit: type=1400 audit(1766259893.031:802): avc: denied { create } for pid=5168 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 376.738896][T10641] RIP: 0010:simple_xattrs_free+0x60/0x1e0 [ 376.745813][T10641] Code: ea 03 80 3c 02 00 0f 85 8b 01 00 00 49 c7 45 00 00 00 00 00 e8 21 9c 75 ff 4c 89 fa 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 56 01 00 00 48 bd 00 00 00 00 00 fc ff df 49 8b [ 376.766396][T10641] RSP: 0018:ffffc9000419fae0 EFLAGS: 00010202 [ 376.776392][T10641] RAX: dffffc0000000000 RBX: ffff88802d19bf00 RCX: ffffffff826a4395 [ 376.784714][T10641] RDX: 0000000000000007 RSI: ffffffff82494a6f RDI: 0000000000000038 [ 376.792699][T10641] RBP: ffff88802d19bf98 R08: 0000000000000005 R09: 0000000000000000 [ 376.793802][ T6050] usb 8-1: device descriptor read/64, error -71 [ 376.804666][T10641] R10: 00000000ffffffea R11: ffffffff82288a94 R12: 1ffff92000833f6b [ 376.815502][T10641] R13: 0000000000000000 R14: ffff88802a5113e0 R15: 0000000000000038 [ 376.823554][T10641] FS: 0000555571b0e500(0000) GS:ffff8881248f5000(0000) knlGS:0000000000000000 [ 376.833692][T10641] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 376.841254][T10641] CR2: 00007f02407b42f8 CR3: 0000000031412000 CR4: 00000000003526f0 [ 376.849739][T10641] Kernel panic - not syncing: Fatal exception [ 376.856086][T10641] Kernel Offset: disabled [ 376.860387][T10641] Rebooting in 86400 seconds..