last executing test programs: 20m9.160039645s ago: executing program 0 (id=76): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)={'#! ', './file0'}, 0xb) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='attr/keycreate\x00') read$FUSE(r3, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x13, &(0x7f0000000180)=[0x3, 0x401], 0x2) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000200)=@mmap={0x1, 0x1, 0x4, 0x1, 0x6, {0x77359400}, {0x1, 0x0, 0x5, 0x9, 0x64, 0xe, "7cf93be8"}, 0xfffffff7, 0x1, {}, 0x2}) ppoll(&(0x7f0000000040)=[{r5, 0x100}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, r4, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 20m8.177201755s ago: executing program 0 (id=79): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x2, 0x80100) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f00000000c0)={0x3, 0x6, 0x2}) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r1, r2, 0x26, 0x0, @val=@perf_event={0x7}}, 0x18) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001080)={r3, r1, 0x4, r1}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="6102330050300100080211000001080211000000505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) kexec_load(0x0, 0x10, &(0x7f0000000340)=[{0x0, 0x0, 0x3e0000000000, 0x3e0000000000}], 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x22000422}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6dcc1c00000051e5062d9f4950be613d66cdbf1c", @ANYRES16=r5, @ANYBLOB="00012cbd7000fbdbdf250800000008000300", @ANYRES32=r8, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4cc51}, 0x84) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x0, 0x0) r9 = epoll_create1(0x0) epoll_wait(r9, &(0x7f000000affb), 0x0, 0x7fff) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f00000000c0)=@rose={'rose', 0x0}, 0x10) 20m6.477081171s ago: executing program 0 (id=85): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e6400"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r8], 0x50}}, 0x2) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="4000000010001f02000000541b00000000000000", @ANYRES32=0x0, @ANYBLOB="04040000000000001800128008000100767469000c00028008000500e000000208000a00", @ANYRES32=r5, @ANYRESDEC=r5], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r9 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r9) r10 = syz_open_dev$dri(&(0x7f0000000000), 0x3, 0x20203) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r10, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r11, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000680)={r12, 0x1ff, 0x0, 0x1, 0x3, [], [0x800020], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r9, 0xc06864b8, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x4000}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="660a00002000000061118c000000c97f7403f42e6ad9b7e1ccc2d9052976000085000000cc0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41000}, 0x94) 20m4.675630068s ago: executing program 0 (id=87): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x2) listen(r1, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB='&'], 0x10) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = socket$kcm(0x29, 0x2, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r7, 0x541c, 0xfffffffffffffffd) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f00000005c0)={r5, r6, 0x6, 0x2c, &(0x7f0000000000)="924d121cefcb1d410a0cb9fc3419994bd2a041692e15a542fa085b3a26a3b07ae7d6369f68466c62e00114aa", 0xe6, 0x0, 0x1ff, 0x2, 0x1, 0x0, 0x7, 'syz0\x00'}) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x10c5408, 0x0) 20m3.221104165s ago: executing program 0 (id=92): socket(0xa, 0x3, 0x3d) r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) lseek(r0, 0x5, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, 0x14) (async, rerun: 64) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) (rerun: 64) syz_usb_connect$uac1(0x0, 0x96, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902840003010000000904000000000000000000000400000201020c24020106020604800e0589f703010001010200000904110101010200000724010603011009050109ff03000000072d01010000000904020000010200100904020101010200000b240201014d2f8de49166c924020009058209100000000307250181000000f4af6939ce3d680add86113df0c5b80976b9475e786055de947786303936aa88000000"], 0x0) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000000740), 0x52, &(0x7f00000007c0)=""/146, 0x92}, 0x4}, {{&(0x7f0000001140)=@caif=@dgm, 0x80, &(0x7f0000001440)=[{&(0x7f00000011c0)=""/42, 0x2a}, {&(0x7f0000001200)}, {&(0x7f0000001240)=""/212, 0xd4}, {&(0x7f0000001340)=""/229, 0xe5}], 0x4, &(0x7f0000001480)=""/22, 0x16}, 0x7}, {{&(0x7f00000014c0)=@nfc_llcp, 0x80, &(0x7f0000001a00)=[{&(0x7f0000001540)=""/49, 0x31}, {&(0x7f0000001580)}, {&(0x7f00000015c0)=""/252, 0xfc}, {&(0x7f00000016c0)=""/229, 0xe5}, {&(0x7f00000017c0)=""/139, 0x8b}, {&(0x7f0000001cc0)=""/232, 0xe8}, {&(0x7f0000001980)=""/43, 0x2b}, {&(0x7f0000001c40)=""/68, 0x44}], 0x8, &(0x7f0000001a80)=""/36, 0x24}, 0x10001}, {{&(0x7f0000000880)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000900)=""/206, 0xce}, {&(0x7f0000000a00)=""/36, 0x24}], 0x2, &(0x7f0000000a80)=""/8, 0x8}, 0x10000}, {{&(0x7f0000000ac0)=@qipcrtr, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000b40)=""/58, 0x3a}, {&(0x7f0000001ac0)=""/96, 0x60}, {&(0x7f0000000c00)=""/14, 0xe}, {&(0x7f0000000c40)=""/36, 0x24}, {&(0x7f0000000c80)=""/248, 0xf8}, {&(0x7f0000000d80)=""/244, 0xf4}, {&(0x7f0000000e80)=""/19, 0x13}], 0x7, &(0x7f0000000f40)=""/230, 0xe6}, 0x8000}, {{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000001040)=""/6, 0x6}], 0x1, &(0x7f00000010c0)=""/94, 0x5e}, 0x1}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000004c0)=""/251, 0xfb}], 0x1, &(0x7f0000000200)=""/23, 0x17}, 0x3}, {{&(0x7f00000005c0)=@phonet, 0x80, &(0x7f0000000b80)=[{&(0x7f00000003c0)=""/42, 0x2a}, {&(0x7f0000000640)=""/25, 0x19}, {&(0x7f0000000680)=""/76, 0x4c}, {&(0x7f0000000700)=""/77, 0x4d}, {&(0x7f0000000780)}], 0x5, &(0x7f0000001200)=""/34, 0x22}, 0xdb9}, {{&(0x7f0000001880)=@vsock, 0x80, &(0x7f0000001580)=[{&(0x7f0000001dc0)=""/214, 0xd6}, {&(0x7f0000001ec0)=""/213, 0xd5}], 0x2, &(0x7f0000001900)=""/95, 0x5f}, 0x6}, {{&(0x7f0000001fc0)=@ethernet={0x0, @random}, 0x80, &(0x7f00000022c0)=[{&(0x7f00000019c0)=""/42, 0x2a}, {&(0x7f0000002040)=""/201, 0xc9}, {&(0x7f0000002140)=""/170, 0xaa}, {&(0x7f0000002200)=""/167, 0xa7}], 0x4, &(0x7f0000002300)=""/101, 0x65}, 0x1}], 0xa, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000100)={r3, &(0x7f0000000040)="91cc4de2", 0x0}, 0x20) (async) mremap(&(0x7f0000306000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f00001cb000/0x2000)=nil) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="6465636f646573206e6f6e6500d16f4f1323ee605acfbeba0fc09d49c22553615b45e57e772d6bc618be064cdbbcd683736bfdf27ee89f03bb1202c75a878893da26cec32220fe6d70dbce57416d559fa3e03755178967038b7f"], 0xd) (async) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) r7 = fcntl$dupfd(r6, 0x406, r6) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) (async) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) sendmsg$TIPC_NL_NODE_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000b80)=ANY=[], 0x134}, 0x1, 0x0, 0x0, 0x24040841}, 0x40008) (async) sendmsg$NL80211_CMD_GET_KEY(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0xc045) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, 0x0) (async) syz_open_procfs$namespace(0x0, 0x0) 20m0.76475784s ago: executing program 0 (id=100): ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0xb, 0x18}, 0xc) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x15, r2}) r3 = fsopen(&(0x7f0000000040)='iso9660\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000ac0)='gid', &(0x7f00000000c0)='0\x00#\x00S\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = creat(&(0x7f0000000200)='./file1\x00', 0x2) syz_open_dev$sndpcmc(0x0, 0x1, 0x0) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_triestat\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000000300)=r6) shmdt(r9) read$FUSE(r5, &(0x7f0000006280)={0x2020}, 0x2020) 19m59.206655742s ago: executing program 32 (id=100): ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0xb, 0x18}, 0xc) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x15, r2}) r3 = fsopen(&(0x7f0000000040)='iso9660\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000ac0)='gid', &(0x7f00000000c0)='0\x00#\x00S\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = creat(&(0x7f0000000200)='./file1\x00', 0x2) syz_open_dev$sndpcmc(0x0, 0x1, 0x0) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_triestat\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000000300)=r6) shmdt(r9) read$FUSE(r5, &(0x7f0000006280)={0x2020}, 0x2020) 19m12.220800311s ago: executing program 5 (id=254): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount(0x0, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) fcntl$dupfd(r1, 0x406, r1) socket$nl_audit(0x10, 0x3, 0x9) r3 = dup(r0) ioctl$TIOCL_BLANKSCREEN(r3, 0x541c, &(0x7f0000000040)) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 19m11.358313188s ago: executing program 5 (id=256): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000000)={0x1d, r1, 0x0, {}, 0xfe}, 0x18) r3 = memfd_secret(0x80000) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r3, 0x400454a4, &(0x7f00000000c0)=0x1) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r1, 0x0, {}, 0x2}, 0x18, &(0x7f0000000180)={&(0x7f0000000280)="08030005c7373d5b04", 0x9}}, 0xee) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x111, 0x70bd29, 0x101500, {0x0, 0x0, 0x74, r1, {0x6, 0x8}, {0x5, 0xffff}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x6f4, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000802, 0xee01, 0x0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="14800000", @ANYRES16=0x0, @ANYBLOB="170a29bd7000fedbdf2510000000"], 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0xc114) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x32, &(0x7f0000000040)={@loopback}, 0x14) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x1010, r6, 0x180000000) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) openat$dsp(0xffffff9c, &(0x7f00000003c0), 0x84000, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) 19m10.769207841s ago: executing program 5 (id=258): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0xa4, '\x00', 0x567c4e8f, 0x1ff, 0x7, 0x7}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 19m10.46756257s ago: executing program 5 (id=260): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x2700000000000000, 0x0) 19m10.382099107s ago: executing program 5 (id=261): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet(0x2, 0x1, 0x0) ptrace$ARCH_SHSTK_LOCK(0x1e, r1, 0x0, 0x5003) socket$packet(0x11, 0x3, 0x300) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0) 19m9.29153477s ago: executing program 5 (id=265): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000300)=0x3, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_clone(0x10806600, 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0x1, 0xffffffffff000, 0x200, &(0x7f0000ffb000/0x3000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0xa4, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x10, 0xfffffffc, 0xdc67}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, @dev={0xfe, 0x80, '\x00', 0x8}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x0, 0xfffffffc}}) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x103a02, 0x0) ioctl$RTC_SET_TIME(r5, 0x4024700a, &(0x7f0000000200)={0x4007, 0x20, 0x14, 0x1b, 0xb, 0x63, 0x4, 0xf5, 0x1}) syz_clone3(&(0x7f0000000240)={0x4c000000, 0x0, 0x0, 0x0, {0x23}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) 19m9.03946932s ago: executing program 33 (id=265): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000300)=0x3, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_clone(0x10806600, 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0x1, 0xffffffffff000, 0x200, &(0x7f0000ffb000/0x3000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0xa4, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x10, 0xfffffffc, 0xdc67}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, @dev={0xfe, 0x80, '\x00', 0x8}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x0, 0xfffffffc}}) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x103a02, 0x0) ioctl$RTC_SET_TIME(r5, 0x4024700a, &(0x7f0000000200)={0x4007, 0x20, 0x14, 0x1b, 0xb, 0x63, 0x4, 0xf5, 0x1}) syz_clone3(&(0x7f0000000240)={0x4c000000, 0x0, 0x0, 0x0, {0x23}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) 7m33.209071043s ago: executing program 2 (id=2501): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x3, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0xc200, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1, 0x10001}}, './file0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) (async) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x3, @loopback}, 0x1c) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0xc200, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1, 0x10001}}, './file0\x00'}) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) 7m33.167350005s ago: executing program 2 (id=2502): connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0xec0, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 7m31.445002457s ago: executing program 2 (id=2505): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='sessionid\x00') read$FUSE(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101402, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='contention_end\x00'}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={0xffffffffffffffff, 0x0, 0xa2, 0xe8, &(0x7f0000000300)="c8a2df6acbd9d3558f4ffdd7d04490bbed868ffffaa40b34705a5e4c5d86672337394e319d91cf596341eac4ad9186159455388b80a405333741de2e6cf332e5cc3d4765aeadefb3cf8c7556bf3a5141b76ba79cb7a63c4b89a56e2354963f3c784915863b36bc857f6577ebb0d4aed7ea6b8e5bae78a6d1fcf6429844f1c9e8cadd297e69fb6ed8dcc0b9273a795a333688380c05fdeebcd6de282c3ea38eae217a", &(0x7f0000000400)=""/232, 0xffffffff, 0x0, 0xe2, 0x3a, &(0x7f0000000500)="b142e2fdf7b80b15572e603f87724e36ad2fdd6d273d1d5ba0acee9aa9474ee43531095ea4590f74cadc51cdccfc61e7585e4ff495ef65a6f015eebe5171566f48537bdf7638ada4164dbe7c58ab3c79f4bf8791b5418671bb5af46f33d6f98436ed3ed633b211abcc435e8f811410d46e16f77dfee76341b9962d1898afb5722dacba13fd2106115e159e6a86cd5e44b79fa0fad60f16fe1459ef85b3cfe4e70603e6b2caa3f5bf77f01ad06bb7f028012c0e116f9d49b080cee7b24d192575220d67c21cdf9c670282d33543f8c7c98c8731b45e4e195941c61c4bb7bbab5089bd", &(0x7f0000000200)="69027736ca3f188084b19faeb63635cd99640a8f229a67ea71bdcad75be708f6170e0ed0864aea5609d09aa5a97e099c15d80722d1f8fbd1ff8c", 0x4, 0x0, 0x9b1}, 0x50) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) socket$xdp(0x2c, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x400000000000004) read(r5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES32=r2], 0xdc}}, 0x48141) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102363, 0x18fdb) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xf) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000000)=0x1) ioctl$DRM_IOCTL_GET_MAGIC(r3, 0x80046402, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r3, 0x40046411, &(0x7f0000000000)=0x1) close_range(r4, r5, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000100060000000000040000000000000008000300", @ANYRES32=0x0, @ANYBLOB="10000300da1eb953aab6c9185e000000002000030000000000"], 0x2c, 0x2) setreuid(0xffffffffffffffff, 0xee01) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 7m28.87158432s ago: executing program 2 (id=2513): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000400)={0x10000001}) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="234709b2d4b6e2ce068e9683257a745c44b6b4f74831385573a4b4a28fc49b0f440b42d2ccf7c6ad079e4a7ed9257388ea7d1450a75290739049a48bb92356d39c7a2ef5b8b7de49a377003bd6a0f557cb24561117edd7a1af3c34ba161314ea15f4", @ANYRES8], 0xbc}}, 0x0) setrlimit(0x8, &(0x7f00000000c0)={0xb5, 0x8b79}) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), 0xffffffffffffffff) mount$fuse(0x0, 0x0, 0xfffffffffffffffd, 0x11002, &(0x7f0000000540)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@dont_measure}, {@uid_eq}, {@fsmagic={'fsmagic', 0x3d, 0x5}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@fowner_lt}, {@fowner_gt={'fowner>', 0xee01}}]}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x4a02, 0x3}, 0xb, 0x0) landlock_restrict_self(r5, 0x0) setreuid(0xee01, 0xffffffffffffffff) faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r7, 0x4018aee3, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x8c6, 0x0}) 7m22.062682644s ago: executing program 2 (id=2536): setrlimit(0x6, &(0x7f0000000000)={0x100, 0x80000000000000}) (async) setrlimit(0x6, &(0x7f0000000000)={0x100, 0x80000000000000}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) memfd_create(&(0x7f00000008c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88M\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0x2) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) socket$pppoe(0x18, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) (async) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023892) syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x1803, 0x10000, 0x1, 0x100002cf}, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) (async) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) io_setup(0x1, 0x0) 7m20.944912379s ago: executing program 2 (id=2539): r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x84000) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x1000000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00@\x00\a'], 0x24}, 0x1, 0x0, 0x0, 0x4008011}, 0xc000) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007bc0)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_HANDLE={0xc}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb0}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) r5 = syz_usb_connect(0x1, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "010096dc"}]}}, 0x0}, 0x0) syz_usb_control_io$printer(r5, &(0x7f0000000f80)={0x14, &(0x7f0000001040)={0x0, 0x24, 0xe5, {0xe5, 0x18, "7c25c927815db4052f9ac6c55a652f6c094cd7faba74cea3baa2905a245274cadde4a898e5c4d292afd05c17bc772dd844166b029ce797e4043accfd9716d028a3555a4c1a13b64aa482b532f3a82000c1937e5e34161873c2be0f6d55eb915c58ab4b41d9dd554bae444d5ef9f9bbbb92cfbb6c30e94e8fe3f91f9ec0a1949b5a7fd519125386779d8925238305f2727705f5e2993ab7d7026ac28a6a714b8ca6251e0079f1fd1c0b42f5b0432d8d5c485f093bafb72833804cb5762ad7ef4225532dff3d5ef2bd155aa43ccb2228b42f55dbcbd149a6f825eb8f9a77cbe9f0706350"}}, 0x0}, &(0x7f0000001480)={0x34, &(0x7f00000011c0)={0x20, 0x0, 0x3e, "91c2467a696353f22fcac43e2fd05a86cd619aad589084e10f2afdbb4b48d140b9ecf1085669733b5d35c3a221277ce1d4820761993a34a3982318459442"}, &(0x7f00000012c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000001300)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000001340)={0x20, 0x0, 0x41, {0x3f, "43ab6f4ac0205ddfba6695d8f8aec79bdee8d2a72fba76b69dfa740447ead9a5f16a9845c775143029ae575e37ce8b07cb15fa9c045450e8eaa93484f5da9f"}}, 0x0, &(0x7f0000001440)={0x20, 0x0, 0x1, 0x9a}}) mount$nfs(0x0, 0x0, 0x0, 0x1000000, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000040)={0x0, 0x0, 0x201e, 0x221e, 0xffffffd6, 0xc251, 0x7ffffffe, 0x1}) syz_usb_ep_write(r3, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000e80)={0x44, 0x0, 0x0, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x59}, &(0x7f0000000d40)={0x20, 0x81, 0x2, "05d4"}, &(0x7f0000000d80)={0x20, 0x82, 0x2, "5c1a"}, &(0x7f0000000dc0)={0x20, 0x83, 0x1, "c4"}, &(0x7f0000000e00)={0x20, 0x84, 0x1, "cc"}, 0x0}) bind$alg(r2, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9540c580774eafe98aa000000", 0x0, 0x9, 0x0, 0xfffffdf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) 7m4.798229676s ago: executing program 34 (id=2539): r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x84000) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x1000000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00@\x00\a'], 0x24}, 0x1, 0x0, 0x0, 0x4008011}, 0xc000) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007bc0)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_HANDLE={0xc}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb0}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) r5 = syz_usb_connect(0x1, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "010096dc"}]}}, 0x0}, 0x0) syz_usb_control_io$printer(r5, &(0x7f0000000f80)={0x14, &(0x7f0000001040)={0x0, 0x24, 0xe5, {0xe5, 0x18, "7c25c927815db4052f9ac6c55a652f6c094cd7faba74cea3baa2905a245274cadde4a898e5c4d292afd05c17bc772dd844166b029ce797e4043accfd9716d028a3555a4c1a13b64aa482b532f3a82000c1937e5e34161873c2be0f6d55eb915c58ab4b41d9dd554bae444d5ef9f9bbbb92cfbb6c30e94e8fe3f91f9ec0a1949b5a7fd519125386779d8925238305f2727705f5e2993ab7d7026ac28a6a714b8ca6251e0079f1fd1c0b42f5b0432d8d5c485f093bafb72833804cb5762ad7ef4225532dff3d5ef2bd155aa43ccb2228b42f55dbcbd149a6f825eb8f9a77cbe9f0706350"}}, 0x0}, &(0x7f0000001480)={0x34, &(0x7f00000011c0)={0x20, 0x0, 0x3e, "91c2467a696353f22fcac43e2fd05a86cd619aad589084e10f2afdbb4b48d140b9ecf1085669733b5d35c3a221277ce1d4820761993a34a3982318459442"}, &(0x7f00000012c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000001300)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000001340)={0x20, 0x0, 0x41, {0x3f, "43ab6f4ac0205ddfba6695d8f8aec79bdee8d2a72fba76b69dfa740447ead9a5f16a9845c775143029ae575e37ce8b07cb15fa9c045450e8eaa93484f5da9f"}}, 0x0, &(0x7f0000001440)={0x20, 0x0, 0x1, 0x9a}}) mount$nfs(0x0, 0x0, 0x0, 0x1000000, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000040)={0x0, 0x0, 0x201e, 0x221e, 0xffffffd6, 0xc251, 0x7ffffffe, 0x1}) syz_usb_ep_write(r3, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000e80)={0x44, 0x0, 0x0, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x59}, &(0x7f0000000d40)={0x20, 0x81, 0x2, "05d4"}, &(0x7f0000000d80)={0x20, 0x82, 0x2, "5c1a"}, &(0x7f0000000dc0)={0x20, 0x83, 0x1, "c4"}, &(0x7f0000000e00)={0x20, 0x84, 0x1, "cc"}, 0x0}) bind$alg(r2, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9540c580774eafe98aa000000", 0x0, 0x9, 0x0, 0xfffffdf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) 4m1.627480069s ago: executing program 4 (id=3130): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007910288000e4fd005e500000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r1}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000009500)=@newtaction={0xe68, 0x30, 0x0, 0x70bd27, 0x25dfdbfd, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1f, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x401, 0x20000000, 0x1, 0x4}, 0x3c, 0x9}, [{0x10000, 0x80000001, 0x90b71e2, 0x6, 0x6, 0x9}, {0xb943, 0x0, 0x8, 0x7, 0x1, 0x6}, {0x4, 0x80000001, 0x9cb, 0x9, 0x4b, 0x3}, {0x80000000, 0x272f8ca0, 0x0, 0x400, 0x8, 0xde}, {0x9, 0x9, 0x1, 0xfffffff7, 0x9, 0x800000}, {0xa, 0xa, 0x1000, 0x7, 0x2, 0x2000}, {0x63, 0x1, 0x2, 0x1, 0x6, 0x301}, {0x4757, 0x5, 0x8, 0xbc64, 0x5b, 0x45ef}, {0x1f, 0xfffffffc, 0x1, 0x3, 0x2, 0x2}, {0x7ff, 0x400, 0x10000, 0x9, 0x1, 0x4}, {0x8, 0xa7, 0x40, 0x6, 0x2, 0x9}, {0x2, 0x6, 0x81, 0x7f, 0x2, 0xa}, {0x40, 0x1ff, 0xa, 0x3, 0x6, 0xbebd}, {0x8, 0x3ff, 0x0, 0x8, 0x7, 0x5}, {0x0, 0x4206, 0x7, 0x1, 0x9, 0xdf99caf9}, {0x1, 0x2, 0x9, 0xfffffffd, 0x8, 0x4}, {0xffff, 0x7, 0x9, 0xd, 0x7, 0xc}, {0x6, 0x6d4c, 0x2, 0x2, 0x7, 0x3}, {0x5, 0x8000, 0x3, 0xfffffff4, 0x0, 0x7}, {0x0, 0x424, 0x4, 0xffff0001, 0x2, 0xfffffffb}, {0x6d, 0x4, 0x3b79, 0x2, 0x4, 0x7ff}, {0x90e9, 0xc1e8, 0x80, 0x15, 0x8, 0xc79}, {0x398, 0x4, 0x8, 0x9, 0x8b1, 0xd8}, {0xc9, 0x9, 0x6, 0xf, 0x0, 0x28}, {0xa9, 0x0, 0x81, 0x800, 0x100, 0x7}, {0xfffffff8, 0x7, 0x0, 0x0, 0xab}, {0xc10b, 0x2191, 0x6, 0x9, 0x0, 0xbe}, {0x80000000, 0x2c2d, 0x400, 0x2, 0x3, 0x7}, {0xfe, 0x9, 0x9, 0x9, 0x7, 0x80}, {0x10000, 0x3, 0x7, 0x800, 0xffffffff, 0x1}, {0x7, 0x6, 0x7ffa328c, 0x2, 0x7b51, 0x8ce6}, {0x8, 0x212626f5, 0x2, 0x2, 0x8001, 0x2}, {0x7, 0x2, 0x7fff, 0x4, 0x7, 0x9}, {0x9, 0x5, 0x2, 0x4, 0x9, 0xe}, {0xfffffffe, 0x2, 0x354a657a, 0x7, 0x8, 0x8}, {0x1, 0x5, 0x9e2a, 0x0, 0x7, 0x3}, {0x7f, 0x5, 0x57b, 0x2, 0x0, 0x5}, {0x3, 0x3, 0x1, 0x3, 0x5, 0x9}, {0xff, 0x0, 0xfff, 0x8, 0x4, 0x9}, {0x2c, 0x2, 0x6, 0x10001, 0x2, 0x101}, {0x2, 0x0, 0x4, 0x6, 0x3, 0x10001}, {0xd, 0xfff, 0x5, 0x94, 0x2, 0x6}, {0x5d, 0x80, 0x4, 0x7, 0x11, 0x6}, {0x3, 0x5, 0xc8, 0x5, 0x18000000, 0x6}, {0xfffffffb, 0x7, 0x3, 0x9, 0x8001, 0x6}, {0x1, 0xb94, 0x800, 0xffffff49, 0x5, 0x9}, {0x95d5, 0x8, 0x8, 0x9, 0x1, 0x89bc}, {0x24, 0x1000, 0x7, 0x400040, 0x1, 0x1}, {0x400, 0x800, 0x0, 0x400, 0x10, 0x1}, {0x29a, 0x3, 0x4, 0x6, 0x7, 0x3}, {0x38000000, 0x5, 0x3e690dd2, 0x0, 0x49f, 0x8}, {0x9, 0x8, 0x7f, 0x5, 0x8, 0x8}, {0xfffffff6, 0x0, 0x2, 0x8, 0x1ff, 0x4}, {0xfffffff8, 0x6, 0xfffffffc, 0x7, 0x7, 0x1}, {0xc, 0x70c, 0xad8, 0x7, 0x355e7bd2, 0x7}, {0x5, 0x5, 0x1, 0xe3, 0x6ec, 0x3}, {0xff, 0x7, 0x66, 0xe, 0x9, 0x9}, {0x0, 0x0, 0x2, 0x1, 0x200, 0x8}, {0x32db, 0x1, 0x1, 0xffffffff, 0xe790, 0x9}, {0x2, 0x400, 0xfa, 0x9, 0x6, 0x1}, {0x7f, 0x1, 0x5, 0x8000, 0xffffffff, 0x8}, {0x1, 0xfff, 0x7f, 0x8000, 0xe, 0xc44}, {0x80000000, 0x9, 0x0, 0xf98, 0x9, 0x8}, {0x5, 0x1, 0x18, 0x0, 0x80000001, 0x9}, {0x0, 0x8, 0x3, 0x200, 0x5, 0x7}, {0x80000001, 0x2, 0x9, 0xc8, 0xfffffffc}, {0x5, 0x3b, 0x400, 0x4, 0x4, 0x3}, {0x7, 0x8, 0x1, 0x400, 0x9, 0x529}, {0x9, 0x16, 0x10001, 0x3, 0x1, 0xfffffffa}, {0x6, 0x74, 0xffffffff, 0x3, 0x1, 0x7ff}, {0x80000000, 0x9, 0x9, 0x0, 0x9}, {0xffffff97, 0xc, 0x9, 0x3, 0x1, 0x5}, {0xd, 0x4, 0xd, 0x3f, 0x2, 0x7}, {0xa, 0x4, 0x2, 0x3, 0x5}, {0x0, 0x283, 0x4, 0x6, 0x8, 0xee7}, {0x6, 0x7, 0x3, 0x0, 0x7f, 0x9}, {0x8, 0xe, 0x100, 0x8, 0x4, 0x5}, {0x1, 0xfffffffc, 0x2, 0x4, 0x100, 0x80000001}, {0x4, 0xffff, 0x2a, 0xf24d, 0xffff8001, 0x5}, {0xd6b, 0x7b8c3976, 0x1, 0x0, 0xf7d9, 0x1}, {0xae9, 0x6, 0xfffffffe, 0x6e53de2f, 0x4, 0xe2758a}, {0x7, 0x8, 0x4, 0x9, 0x8, 0x7fff}, {0xff, 0x1, 0x4, 0x8, 0x1, 0x9}, {0x0, 0x3, 0x8a, 0x6, 0x10, 0x5}, {0x2, 0xe24, 0x5, 0x96, 0x7, 0xd859}, {0x6, 0x6, 0x7, 0x403, 0xfff, 0x2}, {0x3, 0xb, 0x6f70, 0x3, 0xe, 0x6}, {0x0, 0x8, 0xdd1d8af, 0xd1e, 0x4dd, 0x7}, {0x9, 0x1, 0x9, 0x1000000, 0x4, 0x81}, {0xfffffffc, 0xad, 0x9, 0x7, 0x8000, 0x6}, {0x5, 0x6, 0x5, 0x2, 0x7f, 0x7}, {0x8, 0x6, 0xe79, 0x10f, 0x80, 0x3}, {0x9404, 0x4d, 0x8, 0xc63, 0x475, 0x9}, {0xc4c3, 0x4, 0x1, 0xfadc, 0x8, 0x5}, {0x4, 0x1, 0x3, 0x8, 0x10, 0xfffeffff}, {0x9, 0x5, 0x14, 0x1, 0x7, 0x1}, {0x5, 0xed40, 0x8000, 0x7cf, 0x10, 0xe}, {0x3, 0x0, 0x1c7b, 0x9fc3, 0x57c4, 0x800}, {0x5, 0xfffeffff, 0x4, 0x1, 0x0, 0x3}, {0x6, 0x9, 0x8, 0x3, 0x5, 0x7}, {0x6, 0x2, 0x4, 0x9, 0x7fff, 0x5}, {0x7fff, 0x8, 0x0, 0x9, 0xced, 0x80000000}, {0x7ff, 0x3, 0x6, 0x7fff, 0x9, 0xd}, {0x3, 0x5, 0xb, 0x8001, 0x9, 0x1}, {0x0, 0x2, 0x6, 0x2, 0x9, 0x8}, {0x0, 0x7, 0xae6ad9f, 0x9, 0x7, 0x6}, {0x6, 0x200, 0x81, 0xfffffff7, 0x6, 0x4}, {0x0, 0x4, 0x546, 0x6, 0x2, 0x1}, {0xad03, 0x81, 0x7, 0x6, 0x5, 0x9}, {0x4, 0xfff, 0x2, 0x3, 0x9, 0xd}, {0xe, 0x2d4, 0x5, 0x40, 0x1c7a3607, 0xcb2d}, {0x7, 0x9, 0x3, 0x2, 0x4, 0x7fffffff}, {0x0, 0x3, 0x3, 0x8, 0x6}, {0x91, 0x8, 0xfffffffc, 0x8, 0x10000, 0x1}, {0x9, 0x5, 0x8, 0x2, 0x7, 0x8d}, {0x4, 0xb, 0xfffff364, 0x4, 0x400, 0x4}, {0x81, 0x3, 0x1, 0x80000000, 0xbf1}, {0x8, 0x6, 0xd4, 0x1, 0x6, 0x1}, {0x3ff, 0x1, 0x1, 0x800, 0x800, 0xa4}, {0x8, 0x0, 0xfffffff7, 0xfffffffc, 0x4, 0xad5f}, {0x62, 0xe, 0x0, 0x7f7, 0x3, 0x3ff}, {0x100, 0xfffffff9, 0x5, 0xd, 0x84, 0xc20e}, {0xc, 0x6c, 0x2, 0x4, 0x7, 0xea}, {0x8, 0x0, 0x8, 0x0, 0xb2, 0x3}, {0x7, 0x3, 0xec, 0x5, 0x8, 0x1}, {0x8, 0x3000000, 0xffff, 0x81, 0xfffffff6, 0x9}, {0x1, 0xda, 0x5, 0x3, 0x6553, 0x4}, {0xfffffff9, 0x6, 0x7, 0x4, 0xa6, 0x50d8a0cf}], [{0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x5}, {0x3}, {}, {0x5, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x6}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x4}, {0x3}, {0x3}, {0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x3}, {0x3}, {0x2}, {0x4, 0x1}, {}, {0x5}, {0xbc772ccd0a61e388, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x4}, {}, {}, {}, {0x1}, {0x3}, {0x1}, {0x1, 0x1}, {}, {}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x2}, {0x4}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x3}, {0x1}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x2}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x5, 0x1}, {0x5}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x0, 0x1}, {}, {0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x5}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_X86_SET_MSR_FILTER(r0, 0x4188aec6, &(0x7f0000000a40)={0x0, [{0x1, 0x318, 0x6, &(0x7f0000000180)="3842e99bd7d00fa09fe237c2b22d9cd282b9a669113c6491bd5ef57028867840d11c7ef4f4f43bf729f599ece3d1d9edfcc8e89726013fd6e2c1ecb4e1211acf1257bc4ace93e2b749e9c8b943fedb54bb80037c80b3ac7fe286a0a53957d4bf7e02ef"}, {0x3, 0x1b0, 0x6, &(0x7f00000000c0)="286ebbbe30e3f1def0bca1f9574696795c35ed6448b21f7ae12c0bbf12f8f863af910fa250e3c442a57b8766fb7aed0ac4c0a37d1bed"}, {0x2, 0x2d0, 0x6, &(0x7f00000002c0)="ca013b560d18865f3d7ff89d6051c65e95a2190139806698b6bd5c7b9ddad5f66e4bf563b77f4836f1f22bf24619e74e4f7f68eaef1d94bd70df62c5330b3289de23266dfdd9954d0ae9853eefc482d02149349196506e429711"}, {0x0, 0x3e0, 0x1eb4, &(0x7f0000000340)="08b0307481947aff41a12202a2ca20558ab33be1ffead2ba6a0b5587597ba4ae4dad924f2c58af34e543adaa3ee6a9dc43a2e98807e7ec37a8b7ab20be85f41c9932dc89717cade83a7b15f4cd011bfb73b398e9aedd7eb7d8757a6940f7fd28b1cbb16805ed17afee490b2666e95883aec705ee6ef64c401faa267f"}, {0x1, 0x370, 0x9, &(0x7f00000003c0)="efc7b1baba99c2e49579c405e9b586104063d88913b3e60a40710d148f0efe9607334929121d9124323c05ed7b30b6b3563624103db79a19788bd78d0f4c0292948683b9c51cbd4a4621ae1ba4e7c69355914423e6c74855f7e4ea7673248e1067966812a8df821db3ff254c6d9f"}, {0x0, 0x318, 0x400, &(0x7f0000000440)="ad325ecbd0912cc8695fe98db00768d21c857eb6220fecda259164e2f976d12c0bc111b3f18827d46c780cad8f90f11d811b7dbade868b1305551724d96aa6de12c8e8854f425311095a6301b24ec9672f70092fc52a10955f966ac29cda479f6f9c7c"}, {0x2, 0x178, 0x10000, &(0x7f00000004c0)="7d5686e64ad4f8c9acb21ffe728c16cf6de22873748192f5c8a1d5d311d96492117e314adc55c6fea2f0056dfeba38"}, {0x1, 0x160, 0x7, &(0x7f0000000500)="281bdcba5151f27d19fb82fda7d0e07dedc33d9ca7ceb2cce956221be6dd229aafc2e526cc813c1470a41660"}, {0x1, 0x340, 0x8, &(0x7f0000000540)="5fef2bcda4871f57f6aea395154b18c81ebb945230a79756b852856f6ed4b6cd5cba885697ed2cffb050312f0e8d87d631bdf1b6fc7112611267b6ad130a4dc92325c477d42d468c01326d9c21dacb4b03427edbf87bb28f6b8a3112d3501ab5c4d1409655955645"}, {0x1, 0x590, 0xa76, &(0x7f0000000640)="fa76e435f011ebb6fa5a84efbde85f20bc3d540c06c80293330f74dfa08020196effca67569106f22b5a077031e1cdd03a8b304379831f628b440f09c857efc68169ff0679feb6d8bae6bcbd04d9cd92a0badc455aa75f97416a3ecf1de521c0e145cab63c966ab476f6b1c926512edef22fc2e036cecce8620cbdd67534cb174447b9cd297d412d638581361d6e045a76b58c702de368bd00ab2e83bdf097a8e09f4bd881b1107aedb904d3f76c36012948"}, {0x1, 0xc8, 0xa04, &(0x7f0000000700)="2511865fd555c6e3b38098752c71c134b4a93a3390396cb307"}, {0x2, 0x338, 0x0, &(0x7f0000000740)="83501406aae880749994e4b46268bb232667ce979e350b3d0e7b394c15eb565dd86d4cd74238a174ce46af6f077a505d9a3ee4e9d0454b2a035f60d2192de139cbc9a4ecdaf9a8904ef1dc16fc581fd1f87d26a7d1752207cdd1090a44c167a5fe82e797307970"}, {0x1, 0x770, 0x3, &(0x7f00000007c0)="1b58add7b0b2addfb00beb466cbf529ff96307438440411181aa22ae61aeaedce233864f46d3498db4f7083ff90a39431380e7198cfea979ce4a95e61c87e9d40fe215c1db21497f51928e67b1f6a17bc51f02eb806a2d667e72399ca8f610f34592d29098349ff46e0281956eb3c4ad7c74454c1370c443d1f9e18bab58ddc8a584857c264f49b65cb324569cd7316077bcecb199af63adcc11bbcb17d3814315376f56a657869bb1d47a1d368e1d7caba882d460333fb1204231e25e0adbe8f91c03ec7710c58b67832ddfc92470f7bd205f01eed4a0f627af83268cc0c19ae427bed0fcf6a6b4422d62058412"}, {0x0, 0xd0, 0x5, &(0x7f00000008c0)="f5fbbbc229ee3fcff65136ad0adb3dfbcdd5254304eab7710f34"}, {0x2, 0x398, 0x8, &(0x7f0000000900)="c8bac431e33666bd6a7605cba8b5ef4e4c4c48448db1eefcb60e1310a521a2f5d15851d8668bff25eba4cff5d0c35a8c925ee0ea060984197b1cf2a9a41232ad60a1fc3367d545597f6b45be5dd71a49665e1c359c650617a5d033b1d6ebfbd9839da8ac8ffa8cba2e16cd604d6424c8fed1fb"}, {0x3, 0x460, 0x4, &(0x7f0000000980)="a3956372428f5c026dd660b17355f7db1d919a1455ad2498a1db3dd1176768b28bba2d582ca05d54dc4509c386f2160676a0c76b82649c5864e1aa091cfe50886c53a900b238c17e13254fd7064b58932f75c5810898c504f4b94a45761e33bf82e9d387b65b5fc90c01eb226bc7dd020ff2c9ca2d155bec834fdfb61d51b42ee4e412487beeb082c1585691"}]}) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701fefffffffcdbdf25017c000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="8f0000000800000000001459e8869160e547cb010000060203020202020100"], 0x2e) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r5, 0x40044104, &(0x7f0000000000)=0x9) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x2, 0x80805, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000c80), 0x1, 0x101402) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="181bd11500"/24], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) ioctl$VIDIOC_LOG_STATUS(r6, 0x5646, 0x0) 3m57.66939777s ago: executing program 4 (id=3138): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x1010, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0xfffffd10, &(0x7f0000000200)=0x2000000000006) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {0x0, 0x1}, 0xb, 0x40, &(0x7f00000003c0)={0x5, 0x1, 0x40, 0xd}, 0x8, 0xffffffff, 0x13c, 0x0, 0xffffffff, 0x3, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4004550d, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000540)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x1ff, 0xe}, &(0x7f0000000300)=0x90) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000004c00)=""/102392, 0x18ff8) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000002600)={0x7a, 0x0, "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"}) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700000000000000000000000000000000000000000000000000000000000000060000000000000000050000000a004e200e8a34c38f"], 0x310) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x4e20, 0x0, @mcast1}}, {{0xa, 0x0, 0x94, @empty}}}, 0x108) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_iso={0x0, {0x1, 0x1}, 0x49e, 0xc0, 0x0, 0x0, 0x800003, 0x60000, 0x0, 0x800, 0x7, 0x0}) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8080) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3}, 0x2000000, 0x0, 'id0\x00', 'timer0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) 3m54.698975542s ago: executing program 4 (id=3146): r0 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) r1 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@loopback, 0x3, 0x0, 0x2, 0x1, 0xffff, 0x7}, 0x20) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) fcntl$addseals(r0, 0x409, 0x3) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r3, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_BSS_SELECT={0x10, 0xe3, 0x0, 0x1, {0xc, 0x0, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x2, 0x83}}]}}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x100000a, 0x24011, r0, 0x0) ftruncate(r0, 0x0) 3m52.68513998s ago: executing program 4 (id=3149): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001100)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB], 0x12c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 3m52.630389522s ago: executing program 4 (id=3150): r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_access(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) timer_create(0x2, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) syz_usb_connect(0x0, 0x24, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r6) write$sndseq(r1, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {0x2}, @connect={{0x2, 0x3}, {0x1}}}, {0x0, 0x0, 0x0, 0x0, @time={0x2, 0x2}, {0x0, 0x8}, {}, @control}, {0x0, 0x0, 0x1, 0x0, @time={0x1}, {}, {}, @connect={{}, {0x0, 0x5}}}], 0x70) 3m42.144961831s ago: executing program 4 (id=3173): mknod$loop(0x0, 0x2000, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0xc0045543, 0x0) bpf$MAP_CREATE(0xe4ffffff00000000, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) syz_clone3(0x0, 0x0) sendto$inet(r0, &(0x7f0000000140)='^', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @local}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x458, 0x1c8, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3b8, 0xffffffff, 0xffffffff, 0x3b8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0xffff0000, 0x24, 0x0, 'syz1\x00'}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1a, 0x1, 0x5}}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1a0, 0x1c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) fstat(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_IOC_PROTOVER(r2, 0x80049363, &(0x7f0000000000)) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4040094) listen(r0, 0xda90) accept4(r0, 0x0, 0x0, 0x0) 3m25.77587983s ago: executing program 35 (id=3173): mknod$loop(0x0, 0x2000, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0xc0045543, 0x0) bpf$MAP_CREATE(0xe4ffffff00000000, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) syz_clone3(0x0, 0x0) sendto$inet(r0, &(0x7f0000000140)='^', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @local}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x458, 0x1c8, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3b8, 0xffffffff, 0xffffffff, 0x3b8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0xffff0000, 0x24, 0x0, 'syz1\x00'}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1a, 0x1, 0x5}}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1a0, 0x1c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) fstat(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_IOC_PROTOVER(r2, 0x80049363, &(0x7f0000000000)) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4040094) listen(r0, 0xda90) accept4(r0, 0x0, 0x0, 0x0) 2m0.255927037s ago: executing program 6 (id=3516): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10}}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000600)='./binderfs2/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, 0x0, 0x4814) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x208000, 0x0) r3 = syz_io_uring_setup(0x496, &(0x7f0000000f80)={0x0, 0x79af, 0x3180, 0x7ffc, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000080)) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r5, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x0) readv(r6, &(0x7f0000000780)=[{&(0x7f00000002c0)=""/255, 0xff}, {0x0}], 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000640)='./cgroup\x00', 0x42e100, 0x140) syz_io_uring_submit(r4, 0x0, &(0x7f0000000140)=@IORING_OP_TIMEOUT={0xb, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000680), 0x1, 0x10, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x80, &(0x7f0000000100)=0xffb, 0x0, 0x4) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x80001001}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000045000900000000000000000003000000351e6e574bab68bdfeebd3c333bc2bf6b3077ec747f5e5ff3ef2a9fa4367aea4e5b7f1bf9436e8fd39eb63257a83aa385a263ac14e9fca370ddd12414ff802bae226c77c8e31f8a02a032db3e276581ce70538535f59661a55a03406da88bb7b2630fc1ce303774dc51e656074c7edcfb644e4c4b5e866e545945b4d0b04940394522210685338f871398bdcb148e29d32268d4fff629f6455cc2009a7f766395db39ecb4b8f5fd19252c5493f0dd1f1b196d5b926f0c696493cd4"], 0x14}}, 0x0) sendmsg(r7, &(0x7f00000005c0)={&(0x7f0000000180)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x7ff, @remote, 0x200}}, 0x80, &(0x7f0000000200)=[{&(0x7f00000004c0)="703d28f0aca1b29921406cee711a681b960a39ce37d7964f30feefde3e506f36d53ae3641f1f081e625895ac40208f0c77f5a05728e7b2d6e9b2dcb88f5f0780a74ff6a982c0706b0ff59f7444afdcea5f4e7686ea1b20492080e0d35886da388f7358b5453c269f267d794560ea7955c37efa467f37e7a2ad76050e4d8178b0e78957da8f1fe6c8c7dc3e542e1f96d5dc39ae467f41b2b65c068ac652bc911081e8af0e352d5ff9d4d2a0be96a5a20bc575cb4b8a15bc6a5716bbebf0446c5368096a32ea3cbc9db70e772f6dcf15f0653fa7bd134a0a9b61928a76", 0xdc}], 0x1}, 0x20000000) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x74000000) write$dsp(r0, &(0x7f0000002000), 0x0) 1m59.006979458s ago: executing program 6 (id=3520): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x7, @private0, 0xfffffffe}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000000240)="832b31d45a3b8dc39737429c25dc5e3be97a71436000d248f0d7d6127bb5629fee1d49a549522e96d6701aee7889245864a7b33b08037643a7cb4c065d7b4f4231786d3f665192a8e0d9aea025f4203c352b21fb6cd2009994f043c0b4fa0bd460af", 0x62}, {&(0x7f00000002c0)="eff742eef1b489659aed73ab4eccafaac6618bb3a0ef30ffe79e9a48881e0ffbca943b0b4e82", 0x26}, {&(0x7f0000000480)="87a5e313125a8d87ed0e49cdb12828b8d2bb2cb227189eed0954ce2a22885046229192c35e0f06958be6cee5629d642f233271986e640b3bd29bfc07a21a242f7236ed42b02f07097682cb8945bfdf3879f1753876420f8336dbcfd6bd316b6b410cdb4c75b382a8d66ee84edd234b69c048512278a936cdbf1abdf6d0109eae3cc24a866f25c5edef12d88a744c7be38f85f2d50cd5ee22ec54cc16b8df90836f5de53967327f9872fce33ad78532c10078", 0xb2}, {&(0x7f0000000380)="4723bc9b731b6bb356e647b604e6c11b04b35dfd89d5186b4263d04611c7ea8563e89bb9014e43d90861b6c44b6113036f78e095c33b005603412e4a5b8599e0c73312f1a4912e101c0932b3f06aa5403f968405f7095ef817c6b64f75202829b4e639849d12c262634047df00027a9a", 0x70}, {&(0x7f00000009c0)="86ef6117202cdc29d959219c7664a7618a3ab947954f1c404455f11d904c6df596ea67c009ab10bea01e752fb05872b1d2981f5bcc378c6ba12d55e0d340b8d97590addb92241c9c07fbdba3701c65fab7b982889637f43dcdbc96d1eb35786ac851a373c7d6a75777f629a177adbe898c58f07679f49cca595917a9a877735c8eac8121173bfa254fc5313420310d0d3cf7c7b46a055fd9b4f285423db3ee04882ec1a20ff57df426a1aa39301895763f402095c118b4911fc20b2f8b382ee564bae4aad9245554bec356b268aab94dc1a7776b3356ee", 0xd7}, {&(0x7f0000000540)="87af0339d4e8caa955986fde356e975974e469d8e4a791292ce5d0b8ff1d0be6f284a042249587e7d2198d5682165e4b1c3fb0cb70c14ac71775e115a086c7c99c85a8ed4c212a09ed3ddba8779537bada8cde0f2c8c160131a238e9e6015e9863843287893e05e4901215d01cb39078092666082c6682175bbd61888e743bfa1cd825247419b2cd1925f98184f29e0b0ac615ebc245b1bb1ca623d5ff270d01fd90194bbfa96406a5493cc1295cf2", 0xaf}, {&(0x7f00000007c0)="2d43bad064e36a3f2e9abf39b376b1f0e1869fe425fb6617683e550536f77062e1344cb668c875ed90c9e5a3a872d2c8253e511b6636b0d34b8de21eba83dfc48751f7d56c669191d10d8196e48fb61265af034829aa43753ad665b65d24d147487e98e0051ba36363f5c09f3d5b632f53f92036643074ae48fe05970e1d07510fb0c19104e5d82d213cebd0dd39e534a45aa60bdc20908ddeffa27381f8a4651d710423341cb64e5d5ba684dc98048eb301fd3cfa63ee51f8b96f25a50c3141e9", 0xc1}, {&(0x7f00000006c0)="5ee3cd22967d53b43be9a2df8b53753718e2b51125221e88b480331cad7e6cecc581c8eaab44321e4fc3101cf93b013101adb7ad0d84ac5b3c707764fdd2dec733c33ccf5b29497ad7c948b4b18f5bdbfc400c44994f36359e5ad83c2a9acd3434413baa6d59", 0x66}], 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="140000000000000029000000431f00000400000000000000"], 0x18}}], 0x1, 0x400c000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32], 0x118) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800008b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r2 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r2, 0xffffffff80000601, 0x0, &(0x7f0000000300)={0xfffffffffeff8001, 0x9, 0x1}) 1m57.951348106s ago: executing program 6 (id=3523): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="8eb981f65925db11ae59bfc4752ed10bfd0a228260a925d40482d01eab7d985f0fe9e56db8204546eae7820d23d8c49dd7b806e12b0355"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r4 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f0000000240)={0x1, 0x1fffffe, 0x7, 0x80000000006, 0x2b, 0xffffffff, 0xfffdfffffffffffe, 0x5, 0x0, 0x5, 0xfffffffd, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x100000}], 0x2, 0x0, 0x0, 0xb) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r5, 0x4008ae48, &(0x7f0000000080)=0x9000) r6 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) ioctl$SIOCAX25CTLCON(r6, 0x89e8, &(0x7f0000000300)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x4, 0x2, 0xf, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @null]}) 1m56.864322712s ago: executing program 6 (id=3527): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000480)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x9b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000x0000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 1m56.44112782s ago: executing program 6 (id=3529): mmap(&(0x7f000084f000/0x3000)=nil, 0x3000, 0xe, 0x4010, 0xffffffffffffffff, 0x4ca46000) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000002500010033bd7004fedbdf250900000c20000e801c"], 0x34}, 0x1, 0x0, 0x0, 0x4800d}, 0x20000000) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x0, 0x0) fchdir(r2) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x3f) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r2) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r2, 0x4) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f8e67e1ee5fb8df73128961d51d26c952d484ca79a8bf23b3d2fc9f7b0b7e036acbfeb4257814151b6b086e0a76c150d7ab27316627688dea9ebd6a153da4dc30920de404cf45758fd7a795d4f39421863bebc87ea957d3a2906ae04e6dfc14adb778820110e90821ca4a2ff98a9aeb717ac93725fe6836a02", @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf25040000000c000680060005004e2200000800040008000000080004000800000005000500030000001800018014000400fe8000000000000000000000000000410800040007000000bfff0300070000000800020004000000000005000a000000"], 0x70}, 0x1, 0x0, 0x0, 0x144}, 0x4000010) 1m55.460999687s ago: executing program 6 (id=3532): ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000180)) r0 = socket(0x1, 0x3, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000001080)={0x3, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e1f, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x108) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r4, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}, 0x7f}], 0x13, 0x40012100, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e23}, 0x6e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x4ff1, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) close(r0) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m54.229541049s ago: executing program 36 (id=3532): ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000180)) r0 = socket(0x1, 0x3, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000001080)={0x3, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e1f, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x108) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r4, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}, 0x7f}], 0x13, 0x40012100, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e23}, 0x6e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x4ff1, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) close(r0) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) 14.255397812s ago: executing program 7 (id=3812): r0 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f00006c0000/0x1000)=nil, 0x800000}) madvise(&(0x7f00007a5000/0x2000)=nil, 0x2000, 0xb) 13.671000223s ago: executing program 7 (id=3813): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000003c0), 0x1a200, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000001b000)={{{@in6=@ipv4={""/10, ""/2, @multicast1}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6}}, &(0x7f0000000400)=0xe8) read$FUSE(0xffffffffffffffff, &(0x7f000001b200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001700)={0xffffffffffffffff, r1, r2}, 0xc) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @local}, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) setsockopt$inet_mreqn(r3, 0x0, 0x25, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) syz_usb_connect$uac1(0x2, 0xac, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000406b1d010140000102030109029a00030100007f0904000000010100000a24010000000201020c24020000000000000000000c24020400000000001000000d2407000000004336d88b1a56090401000001020000090401010101020000090501094000000000072501800000020904020000010200000904020101010200000f2402028000000002000000000000072401fe8000000905820920"], 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0xbf4, 0x0, 0x7903c054}]}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) close_range(r6, r7, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r8, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r6}, 0x20) recvmmsg(r6, &(0x7f0000001f00)=[{{&(0x7f0000000240)=@phonet, 0x80, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000380)=""/14, 0xe}, {&(0x7f0000001680)=""/67, 0x43}, {&(0x7f0000000440)=""/192, 0xc0}, {&(0x7f0000000500)=""/4, 0x4}, {&(0x7f0000000540)=""/61, 0x3d}], 0x6, &(0x7f0000000600)=""/4096, 0x1000}, 0x3}, {{&(0x7f0000001600)=@nfc_llcp, 0x80, &(0x7f0000001900)=[{&(0x7f000001b100)=""/220, 0xdc}, {&(0x7f0000001740)=""/169, 0xa9}, {&(0x7f0000001800)=""/174, 0xae}, {&(0x7f00000018c0)}], 0x4, &(0x7f0000001940)=""/54, 0x36}, 0x3}, {{&(0x7f0000001980)=@can, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001a00)=""/131, 0x83}, {&(0x7f0000001ac0)=""/205, 0xcd}, {&(0x7f0000001bc0)=""/176, 0xb0}, {&(0x7f0000001c80)=""/247, 0xf7}, {&(0x7f0000001d80)=""/166, 0xa6}], 0x5, &(0x7f0000001ec0)=""/39, 0x27}, 0x2}], 0x3, 0x120, 0x0) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}, 0x0) 13.168824467s ago: executing program 8 (id=3815): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff0000000000000000ca545ffd0000000000000000000000020000000000000000000000000000000000000100000000000c0015005907350081"], 0xc4}}, 0x2c000010) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000150001ef"], 0xb8}}, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x60, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0xa, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast1}}}}]}]}, 0x60}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000000100000009000100737959300000000034000000030a010200000000000000000108fffb0900030073797a32000000000900010073797a3000000082d79fa667280008000a400000000420000000080a01080000000000000000010000000900010073797a30", @ANYRESHEX=r2], 0x9c}}, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}, 0x10) sendmmsg(r1, &(0x7f0000000180), 0x4000190, 0x0) unshare(0x2a020480) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.dequeue\x00', 0x275a, 0x0) utimensat(r8, 0x0, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r10, @ANYBLOB="07000000000000000000020000000400018063ae9d4dff2113b94dd7d6be2fc11c2b6955d92cfba7c300d1eea5143a09718216f8131b07296bb6c8275e762ecdf813c8a2d7285eb2d7aab41f9dab3fdbb887b130f3b56ebf6b063ea0cc046866535477dc80bd24d396a51cf9f68829c15ca9"], 0x18}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xa85024c5a35a3918}, 0xc, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="a1a7bace6ad0c6bf5f02401c6da0350633eca0b50c163cd3fef1e20939a5e02b68dc197591459a6d278ead843635fe242e6e556109906445bd8f3a3a5e8cdeb9b6958ed5e980f7762efc6aa369f2d49e06691b32e4ff645d0015d2f83ed85ffd81b0a2d50460aae2e9f2064e17ef8acdaba9689c5ce798c08b592e75d74f661f1b3e9b4d943c202e3e2c28058f17adf8ca5980e10994714755d3ea4405180ecf55ed44845cfde272bb42209a476955d423e65afda148e8a6f0c4c21d6a845f0000", @ANYRES16=r10, @ANYBLOB="01002cbd7000fbdbdf250a000000050005000200000008000300060000004800068006000100020000000500020007000000060005004e2000000500020080000000060001000a0000001400040000000000000000000000ffff000000000500020002000000"], 0x6c}, 0x1, 0x0, 0x0, 0x20000091}, 0x2004c012) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r11, 0xff, 0xbe, 0x0, 0x0) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r12, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r12, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r12, 0x84, 0x15, &(0x7f0000000080)={0x3}, 0x1) sendto$inet6(r12, &(0x7f0000000040)='l', 0x1, 0xf5, &(0x7f0000000100)={0xa, 0x4e23, 0xfffffffe, @loopback}, 0x1c) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="00000a000000c18943b08ab13f58430b5eaf1b6deec6c9f9fd3f2537379d968c57c4473a02923cb529967ee4818ef7127983ebe7006993458626fec2a72518db13752696dfd933d2f7871b994e86ba11d1c0ac7d69d6e8fe256f0632a96c205c48ce8d80ad84f1b2c094da75082270c4a8c6ab348d28fb9b9bf261987b026415c8eb9fe6fa44d56437ba0967b0e4f9b742714e7159bae537de91d285279bf5541d060d1a97133b7205f219f869a144f788107799babfba131b876608f12bd682e7302138760044502d2c5936a640f6d5d5701412a36b441b27087eb5c1283f9f8adae7"], 0x14}}, 0x0) 11.601880803s ago: executing program 8 (id=3818): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3a) sendmmsg$inet6(r1, &(0x7f0000000780)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x7, @private0, 0xfffffffe}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000000240)="832b31d45a3b8dc39737429c25dc5e3be97a71436000d248f0d7d6127bb5629fee1d49a549522e96d6701aee7889245864a7b33b08037643a7cb4c065d7b4f4231786d3f665192a8e0d9aea025f4203c352b21fb6cd2009994f043c0b4fa0bd460af", 0x62}, {&(0x7f00000002c0)="eff742eef1b489659aed73ab4eccafaac6618bb3a0ef30ffe79e9a48881e0ffbca943b0b4e82", 0x26}, {&(0x7f0000000480)="87a5e313125a8d87ed0e49cdb12828b8d2bb2cb227189eed0954ce2a22885046229192c35e0f06958be6cee5629d642f233271986e640b3bd29bfc07a21a242f7236ed42b02f07097682cb8945bfdf3879f1753876420f8336dbcfd6bd316b6b410cdb4c75b382a8d66ee84edd234b69c048512278a936cdbf1abdf6d0109eae3cc24a866f25c5edef12d88a744c7be38f85f2d50cd5ee22ec54cc16b8df90836f5de53967327f9872fce33ad78532c10078", 0xb2}, {&(0x7f0000000380)="4723bc9b731b6bb356e647b604e6c11b04b35dfd89d5186b4263d04611c7ea8563e89bb9014e43d90861b6c44b6113036f78e095c33b005603412e4a5b8599e0c73312f1a4912e101c0932b3f06aa5403f968405f7095ef817c6b64f75202829b4e639849d12c262634047df00027a9a", 0x70}, {&(0x7f00000009c0)="86ef6117202cdc29d959219c7664a7618a3ab947954f1c404455f11d904c6df596ea67c009ab10bea01e752fb05872b1d2981f5bcc378c6ba12d55e0d340b8d97590addb92241c9c07fbdba3701c65fab7b982889637f43dcdbc96d1eb35786ac851a373c7d6a75777f629a177adbe898c58f07679f49cca595917a9a877735c8eac8121173bfa254fc5313420310d0d3cf7c7b46a055fd9b4f285423db3ee04882ec1a20ff57df426a1aa39301895763f402095c118b4911fc20b2f8b382ee564bae4aad9245554bec356b268aab94dc1a7776b3356ee", 0xd7}, {&(0x7f0000000540)="87af0339d4e8caa955986fde356e975974e469d8e4a791292ce5d0b8ff1d0be6f284a042249587e7d2198d5682165e4b1c3fb0cb70c14ac71775e115a086c7c99c85a8ed4c212a09ed3ddba8779537bada8cde0f2c8c160131a238e9e6015e9863843287893e05e4901215d01cb39078092666082c6682175bbd61888e743bfa1cd825247419b2cd1925f98184f29e0b0ac615ebc245b1bb1ca623d5ff270d01fd90194bbfa96406a5493cc1295cf2", 0xaf}, {&(0x7f00000007c0)="2d43bad064e36a3f2e9abf39b376b1f0e1869fe425fb6617683e550536f77062e1344cb668c875ed90c9e5a3a872d2c8253e511b6636b0d34b8de21eba83dfc48751f7d56c669191d10d8196e48fb61265af034829aa43753ad665b65d24d147487e98e0051ba36363f5c09f3d5b632f53f92036643074ae48fe05970e1d07510fb0c19104e5d82d213cebd0dd39e534a45aa60bdc20908ddeffa27381f8a4651d710423341cb64e5d5ba684dc98048eb301fd3cfa63ee51f8b96f25a50c3141e9", 0xc1}, {0x0}], 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="140000000000000029000000431f00000400000000000000"], 0x18}}], 0x1, 0x400c000) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32], 0x118) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800008b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r4 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r4, 0xffffffff80000601, 0x0, &(0x7f0000000300)={0xfffffffffeff8001, 0x9, 0x1}) 10.951012011s ago: executing program 8 (id=3823): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r3, &(0x7f0000004400), 0x400000000000203, 0x0) io_setup(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f2c7cd75b9292dd90000000000000000030000040900010073797a31000000000900010073797a31000000000900010073797a3100000000e50002400600000108000240000000020c8c044000000010000000050c0004400000000000000005"], 0x60}, 0x1, 0x0, 0x0, 0x404880c}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000090000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004260000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000004480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800800034000000002"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 10.90777402s ago: executing program 7 (id=3824): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="8eb981f65925db11ae59bfc4752ed10bfd0a228260a925d40482d01eab7d985f0fe9e56db8204546eae7820d23d8c49dd7b806e12b0355"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000240)={0x1, 0x1fffffe, 0x7, 0x80000000006, 0x2b, 0xffffffff, 0xfffdfffffffffffe, 0x5, 0x0, 0x5, 0xfffffffd, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x100000}], 0x2, 0x0, 0x0, 0xb) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r4, 0x4008ae48, &(0x7f0000000080)=0x9000) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) ioctl$SIOCAX25CTLCON(r5, 0x89e8, &(0x7f0000000300)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x4, 0x2, 0xf, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @null]}) 9.026266208s ago: executing program 1 (id=3827): socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000740)={'syztnl0\x00', &(0x7f0000000ac0)={'gre0\x00', 0x0, 0x40, 0x7, 0x1, 0x70ce, {{0x15, 0x4, 0x2, 0x0, 0x54, 0x64, 0x0, 0x1, 0x29, 0x0, @remote, @local, {[@end, @noop, @timestamp_prespec={0x44, 0x1c, 0x83, 0x3, 0x2, [{@multicast2, 0x1}, {@remote, 0x7}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x2}]}, @rr={0x7, 0x7, 0xbe, [@private=0xa010100]}, @cipso={0x86, 0x9, 0x2, [{0x1, 0x3, '+'}]}, @rr={0x7, 0xb, 0xfd, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4, 0x10}]}}}}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000980)={@remote, r0}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x668, &(0x7f0000000000)={0x0, 0x8dd3, 0x1, 0x42, 0x235}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r4, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xcc0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r4, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, &(0x7f00000008c0)={0x28, 0x4, r4, r4, 0x3, 0xfffffffffffffffa, 0x3fff}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0xc) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') pidfd_getfd(r7, r5, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000005c0)='..&-^\x00', &(0x7f0000000640)='/selinux/status\x00', 0x0) ioctl$KDFONTOP_COPY(r6, 0x4b72, &(0x7f0000000100)={0x3, 0x1, 0xf0, 0x13, 0x1c8, &(0x7f0000000b40)}) socket(0x1e, 0x805, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x2) 9.012687162s ago: executing program 3 (id=3828): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = socket$inet(0xa, 0x1, 0x0) iopl(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$rxrpc(0x21, 0x2, 0xa) syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x8, 0x0, 0xfffffdfc}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000340)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x63e, @loopback, 0xee}}, 0x0, 0x0, 0x1}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000008c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3f0, 0x288, 0x1e8, 0x358, 0x288, 0x1e8, 0x358, 0x358, 0x358, 0x358, 0x358, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0xffffffff, 'bridge_slave_0\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x80}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2f}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00', {}, {}, 0x32}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xf7, 0x4, @ipv4=@loopback, 0x4e23}}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r9, 0x4048aecb, &(0x7f0000000300)={0x3, 0x0, [{0x1, 0x0, 0x0, 0x6, 0xfffffffe}, {0x0, 0x6, 0x0, 0x0, 0x58b}, {0xc0000001, 0xffffffff, 0x0, 0x9, 0x1, 0x80000001, 0x80}]}) 8.188908313s ago: executing program 8 (id=3829): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, 0x0, &(0x7f00000000c0)) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000400)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, '\x00 '}, @global=@item_4={0x3, 0x1, 0x2, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, '?P'}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) r5 = syz_usb_connect$rtl8150(0x0, 0x0, 0x0, 0x0) syz_usb_ep_write(r5, 0x81, 0x4c, &(0x7f0000000200)="42425f4242424276a87714090033131fe10e8421f6b34b9f68fa27ed21c659dfebfe11ef00e918441698844c733b8f0da2bf24d553c21ccdfd2d8ceccf0b3cf46229c32cdb10330accd8a0bf") syz_usb_ep_write(r4, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r4, 0x81, 0x0, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000100)=0x10) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000840)={r6, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) 8.100448625s ago: executing program 7 (id=3831): syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000200)="b1", 0x1}], 0x1}}], 0x1, 0x24040800) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet(r3, &(0x7f00000007c0)={&(0x7f00000001c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000740)=[{&(0x7f0000001600)="aa", 0x1}], 0x1}, 0x50) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x201, 0xca25, 0x5, r5}, 0x10) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10) getrusage(0x0, &(0x7f0000000400)) write$char_usb(r0, &(0x7f0000000280)="ec", 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) 7.918191823s ago: executing program 3 (id=3832): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_X2APIC_API(r2, 0x4068aea3, &(0x7f0000000000)={0x81, 0x0, 0x1}) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000100)={0x4b29241a6eaffd29, 0x8080000, 0x401, 0x1, 0x8001}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) pipe2(&(0x7f0000001040)={0xffffffffffffffff}, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r4, r6, 0xfffffffffffffc01, 0x0) tee(r4, r6, 0x60000000000, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r7, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3517, 0xc2de, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r8 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r8, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000540)='#', 0x1}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000008400000007000000ac1414aa0000000020000000000000008400000008000000200100"/56], 0x38, 0x4855}, 0x24000052) 6.194891258s ago: executing program 9 (id=3836): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000500)={0x2, 0x0, @ioapic={0x10000, 0x1, 0x401, 0x7fffffff, 0x0, [{0x7, 0x10, 0xff, '\x00', 0x38}, {0x4, 0xfe, 0x7c, '\x00', 0x31}, {0x5, 0xb3, 0x1, '\x00', 0xd}, {0x5, 0x9, 0x10, '\x00', 0x6}, {0x5, 0x7f, 0x6, '\x00', 0x79}, {0x7, 0x80, 0x0, '\x00', 0x6}, {0x4, 0x8, 0x1, '\x00', 0x45}, {0x52, 0x9, 0x3, '\x00', 0x9}, {0x40, 0x2, 0x73, '\x00', 0xff}, {0x1, 0xb6, 0x89, '\x00', 0x80}, {0x6, 0x8, 0xa0, '\x00', 0x1}, {0x1, 0x1, 0x7, '\x00', 0x4}, {0x8, 0xc, 0x5, '\x00', 0x8}, {0xd, 0x10, 0x8c, '\x00', 0x4}, {0x0, 0xc0, 0x7, '\x00', 0x3}, {0x8, 0x2, 0xf6, '\x00', 0x2}, {0x7, 0x6, 0x8, '\x00', 0x5}, {0x9, 0x0, 0xfa, '\x00', 0x5}, {0x1, 0x3, 0x6, '\x00', 0x6}, {0xf8, 0x8, 0xa, '\x00', 0xf8}, {0x8, 0x1, 0xcc, '\x00', 0xf7}, {0x6, 0x6, 0xfe, '\x00', 0xa}, {0xff, 0x0, 0x3, '\x00', 0x7}, {0x16, 0x81, 0x4, '\x00', 0xff}]}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800"], 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000300004"], 0x84}}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0eab070004000523"], 0xfe33) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2083, 0x501c6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0xfe}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x40050}, 0x4000880) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000070, 0x0, 0x400006}]}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000080)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = getpid() r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) getpgid(r7) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r6, 0x4068aea3, &(0x7f0000000000)={0xed, 0x0, 0xbaf5}) 5.639887999s ago: executing program 3 (id=3837): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_io_uring_setup(0x49a, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000019300)=ANY=[@ANYBLOB="2100000000000000000000000000100000040000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000001a1d548e5f03004200fedcc93043b4e4dde46f8a77a98d62b2c9fdea0b10fbff36d8734b0396a3995550cce10335b429b4a06762c64664dab70728bba0b1e64f15fcb467d6424d63162dd0642f342365e80eaab7c588b027ebb98eee", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000020000000000000000000000020000000000000000"], 0x48) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000200)=0x1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000193c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000940d9bf599c66c39f206407dd8d1e135fb055baa3cc6099a51199c958942151e117b84e101b6fb9f393f5a8b36ccac73ddc22d58975d537cc6311aeddd10d95f75ddbcf88806ed3bb6cccb0381ee0e941f18014fe8b4b60366ae9d9d87327587099fa88306ed56a9ff51056bf4d924ce6cab5ba4373ef87a743520a8e965d9436986cb447d1cc4ae899dcb73c94306acc634ecac2fcef2b035a970b2e28c6192de3a007b20d6445d73876129c5e7e7b8f7db70842c8299dcdca9be33f6b828953561d65d03c92a37e96d0a04029f914b2e0f9c9de782afe96a3be60af5", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000440005002001000000000000000000000000000000000002320000000a000000fc010000000000000000000000000000000000000400"/180], 0xfc}}, 0x44080) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, 0x0) socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) pread64(0xffffffffffffffff, 0x0, 0x0, 0x20000000000040) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000300)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r5, 0x2285, 0x0) writev(r5, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0c00000f7fc08fcd111fbdf23ea32dbb0664a5f747d7deda3fa0b7327bd49eb067a0689fff2a4", 0x2b}], 0x2) 5.532773514s ago: executing program 1 (id=3838): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r4) ptrace$peeksig(0x4209, r1, &(0x7f0000000100)={0x9, 0x0, 0x2}, &(0x7f0000000440)=[{}, {}]) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000680)={r5, 0x1ff, 0x0, 0x1, 0x3, [], [0x800020], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x4000}) r6 = fsopen(&(0x7f00000000c0)='hfsplus\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00002000000061118c000000800085000000cc0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41000}, 0x94) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r7, &(0x7f0000001fc0)={0x42, 0x3, 0x0, {0x0, 0x21, 0x0, '/proc/sys/net/ipv4/vs/secure_tcp\x00'}}, 0x42) 4.464812871s ago: executing program 1 (id=3839): socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000740)={'syztnl0\x00', &(0x7f0000000ac0)={'gre0\x00', 0x0, 0x40, 0x7, 0x1, 0x70ce, {{0x15, 0x4, 0x2, 0x0, 0x54, 0x64, 0x0, 0x1, 0x29, 0x0, @remote, @local, {[@end, @noop, @timestamp_prespec={0x44, 0x1c, 0x83, 0x3, 0x2, [{@multicast2, 0x1}, {@remote, 0x7}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x2}]}, @rr={0x7, 0x7, 0xbe, [@private=0xa010100]}, @cipso={0x86, 0x9, 0x2, [{0x1, 0x3, '+'}]}, @rr={0x7, 0xb, 0xfd, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4, 0x10}]}}}}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000980)={@remote, r0}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x668, &(0x7f0000000000)={0x0, 0x8dd3, 0x1, 0x42, 0x235}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r4, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xcc0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r4, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, &(0x7f00000008c0)={0x28, 0x4, r4, r4, 0x3, 0xfffffffffffffffa, 0x3fff}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0xc) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') pidfd_getfd(r7, r5, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000005c0)='..&-^\x00', &(0x7f0000000640)='/selinux/status\x00', 0x0) ioctl$KDFONTOP_COPY(r6, 0x4b72, &(0x7f0000000100)={0x3, 0x1, 0xf0, 0x13, 0x1c8, &(0x7f0000000b40)}) socket(0x1e, 0x805, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x2) 4.149067523s ago: executing program 9 (id=3840): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3a) sendmmsg$inet6(r1, &(0x7f0000000780)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x7, @private0, 0xfffffffe}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000000240)="832b31d45a3b8dc39737429c25dc5e3be97a71436000d248f0d7d6127bb5629fee1d49a549522e96d6701aee7889245864a7b33b08037643a7cb4c065d7b4f4231786d3f665192a8e0d9aea025f4203c352b21fb6cd2009994f043c0b4fa0bd460af", 0x62}, {&(0x7f00000002c0)="eff742eef1b489659aed73ab4eccafaac6618bb3a0ef30ffe79e9a48881e0ffbca943b0b4e82", 0x26}, {&(0x7f0000000480)="87a5e313125a8d87ed0e49cdb12828b8d2bb2cb227189eed0954ce2a22885046229192c35e0f06958be6cee5629d642f233271986e640b3bd29bfc07a21a242f7236ed42b02f07097682cb8945bfdf3879f1753876420f8336dbcfd6bd316b6b410cdb4c75b382a8d66ee84edd234b69c048512278a936cdbf1abdf6d0109eae3cc24a866f25c5edef12d88a744c7be38f85f2d50cd5ee22ec54cc16b8df90836f5de53967327f9872fce33ad78532c10078", 0xb2}, {&(0x7f0000000380)="4723bc9b731b6bb356e647b604e6c11b04b35dfd89d5186b4263d04611c7ea8563e89bb9014e43d90861b6c44b6113036f78e095c33b005603412e4a5b8599e0c73312f1a4912e101c0932b3f06aa5403f968405f7095ef817c6b64f75202829b4e639849d12c262634047df00027a9a", 0x70}, {&(0x7f00000009c0)="86ef6117202cdc29d959219c7664a7618a3ab947954f1c404455f11d904c6df596ea67c009ab10bea01e752fb05872b1d2981f5bcc378c6ba12d55e0d340b8d97590addb92241c9c07fbdba3701c65fab7b982889637f43dcdbc96d1eb35786ac851a373c7d6a75777f629a177adbe898c58f07679f49cca595917a9a877735c8eac8121173bfa254fc5313420310d0d3cf7c7b46a055fd9b4f285423db3ee04882ec1a20ff57df426a1aa39301895763f402095c118b4911fc20b2f8b382ee564bae4aad9245554bec356b268aab94dc1a7776b3356ee", 0xd7}, {&(0x7f0000000540)="87af0339d4e8caa955986fde356e975974e469d8e4a791292ce5d0b8ff1d0be6f284a042249587e7d2198d5682165e4b1c3fb0cb70c14ac71775e115a086c7c99c85a8ed4c212a09ed3ddba8779537bada8cde0f2c8c160131a238e9e6015e9863843287893e05e4901215d01cb39078092666082c6682175bbd61888e743bfa1cd825247419b2cd1925f98184f29e0b0ac615ebc245b1bb1ca623d5ff270d01fd90194bbfa96406a5493cc1295cf2", 0xaf}, {&(0x7f00000007c0)="2d43bad064e36a3f2e9abf39b376b1f0e1869fe425fb6617683e550536f77062e1344cb668c875ed90c9e5a3a872d2c8253e511b6636b0d34b8de21eba83dfc48751f7d56c669191d10d8196e48fb61265af034829aa43753ad665b65d24d147487e98e0051ba36363f5c09f3d5b632f53f92036643074ae48fe05970e1d07510fb0c19104e5d82d213cebd0dd39e534a45aa60bdc20908ddeffa27381f8a4651d710423341cb64e5d5ba684dc98048eb301fd3cfa63ee51f8b96f25a50c3141e9", 0xc1}, {&(0x7f00000006c0)}], 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="140000000000000029000000431f00000400000000000000"], 0x18}}], 0x1, 0x400c000) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32], 0x118) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800008b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r4 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r4, 0xffffffff80000601, 0x0, &(0x7f0000000300)={0xfffffffffeff8001, 0x9, 0x1}) 3.788469951s ago: executing program 8 (id=3841): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) socket$nl_route(0x10, 0x3, 0x0) mremap(&(0x7f0000aaf000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000810000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x2, 0x2d0042) mincore(&(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000001c0)=""/148) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\a\x00'], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x100, &(0x7f0000000300)={0x0, 0x1, 0x3}) dup2(r3, r1) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) 3.757228181s ago: executing program 9 (id=3842): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="8eb981f65925db11ae59bfc4752ed10bfd0a228260a925d40482d01eab7d985f0fe9e56db8204546eae7820d23d8c49dd7b806e12b0355"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000240)={0x1, 0x1fffffe, 0x7, 0x80000000006, 0x2b, 0xffffffff, 0xfffdfffffffffffe, 0x5, 0x0, 0x5, 0xfffffffd, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x100000}], 0x2, 0x0, 0x0, 0xb) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r4, 0x4008ae48, &(0x7f0000000080)=0x9000) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) ioctl$SIOCAX25CTLCON(r5, 0x89e8, &(0x7f0000000300)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x4, 0x2, 0xf, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @null]}) 3.319282059s ago: executing program 7 (id=3843): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x4, 0x1, 0x3, "f452cc31ecec24d66a6a9d9d92c213bd5036da51bbe01093ad2de24cf28f5887", 0x59565955}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000002100), 0x3201020, &(0x7f0000000100)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRES64=r2, @ANYRESDEC=0x0, @ANYBLOB=',group_idZ', @ANYRES32=r2]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r3, &(0x7f0000000080)={0x18, 0x0, r4, {0x7}}, 0x18) open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x2) timer_create(0x0, 0x0, &(0x7f0000000300)) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r5 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x1ff, 0x2000) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4e21, 0xb, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xff}, 0x1c) ioctl$SNDRV_PCM_IOCTL_RESET(r5, 0x4141, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x4000007) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x8d8, 0x5, 0x50424752, 0x6, 0x8000002, 0xb, 0x0, 0xffffffff, 0x0, 0x6, 0x0, 0x4}}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 2.852206539s ago: executing program 8 (id=3844): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x7, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r1}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = syz_usb_connect(0x4, 0x11a4, &(0x7f0000000dc0)={{0x12, 0x1, 0x300, 0x11, 0x24, 0x5e, 0x8, 0x582, 0x52, 0x7b0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1192, 0x4, 0x6, 0x8, 0x20, 0x6, [{{0x9, 0x4, 0x27, 0xb, 0xb, 0x2a, 0x4f, 0x48, 0x8, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "91"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x2cee, 0x834c, 0x6, 0x5}, {0x6, 0x24, 0x1a, 0x4, 0x10}, [@network_terminal={0x7, 0x24, 0xa, 0x5, 0x3, 0x5, 0x8}]}, @cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, ' '}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x6, 0x5d, 0x1d}, {0x6, 0x24, 0x1a, 0x4, 0x53}, [@mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x0, 0x2}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0xd, 0x40}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0xea}, @country_functional={0xa, 0x24, 0x7, 0x5, 0x1957, [0x5, 0x401]}]}], [{{0x9, 0x5, 0x4, 0x10, 0x40, 0x0, 0x3, 0xf, [@generic={0x7f, 0xa, "417c1b12c94dd3613611dfa85d7816325119f410c675c572e51414ad28bc68e26e0d6c0f54040672dfd14583005d11b08b962d7923b3d941de57704bcd8ea9ed5a2c5418ed97718b61144cc88d2b9a89616c2681a8bad7527388aaf6d2b9865acfadcf537bdb3f55a469522253c3da42be3bfc05710c329fffa30b16e3"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x4}]}}, {{0x9, 0x5, 0x80, 0x4, 0x40, 0x6b, 0x90, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5c, 0x7}]}}, {{0x9, 0x5, 0x81, 0x0, 0x400, 0xfb, 0x6, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x3}]}}, {{0x9, 0x5, 0x3, 0x8, 0x400, 0xfa, 0x8, 0x4, [@generic={0xf8, 0x21, "c161f2100d46974808fc2542a73416b57be16d424cd8a8b5ed05a349c130e90c3a13cfe4b27b1b0de5223b45e92bb16fd9a38986ff41571a3d894c1c3acc830118f524e73428686455c91a78275ccfe51032f4ac79068ee5c076d05a109741787be502b47c3eb994e0fd4bc4bc1dfb3f06d23a0feb3adc2b31632c61bc7b1a59551ae223e72045fc8437639a5a26f30df83539c117cf5a9840002747526cb9a1107261a48f254c05cc55910150c3692fd5ff0d9185166d42a7810bac8349589b454c76eb95cfafaf20b329173a640e7eac833d26bf946ec155914958d641ea7f70a14e225121cd6eadec803577e47ab93a1a491a6976"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0x4, 0x1, 0x5, [@generic={0x1a, 0x30, "9dccf0ed1070cf1c063933a7b0e9c0455d59df099f4728b6"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x9, 0x2, 0xd5, [@generic={0x5, 0x10, "5024cd"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0xb4de}]}}, {{0x9, 0x5, 0x8, 0x10, 0x200, 0xf, 0x3b, 0x7, [@generic={0x6b, 0x8, "cdddf3ff83df07116aaea2cf4d4ed9a2133a221d7282be624458ddc5d3b07205b0a6096d80a599bdabc2dc66e61b5b728251d29ec403e589caec6a3de69cae14b691745751ca629778331a159e5fd31360844a7d9daf809396279d720bb370187d16c7f28867025bd1"}]}}, {{0x9, 0x5, 0x80, 0x8, 0x20, 0x2, 0x3, 0x4, [@generic={0x8e, 0x10, "8c5c2eeca435b2d91baf84e649a40ddce42cee718f20a4d115b1ec38f9727afd681d556bc6e292d857dbfbbbb19d46501323d45c732e0aecba535ab89be87f922a5921f27adf5cfcec2cb559c55e9e9ab2f4f19abac3977096f50822a176d541d4f06a7a1440a3ca44e4363a183390b3ce059112d8ff650c3e3dcb558ec193354148c99d582e6e3a93b30142"}, @generic={0x2f, 0x4, "ddcffa85d159abd665ee43693bea6bcc6a56dba702e339202b46ad5e7d0401f165a105e545bf57c9bf9535fc8e"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x40, 0x21, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xb, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x4}]}}, {{0x9, 0x5, 0x4, 0x10, 0x20, 0x5, 0x3, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x8035}]}}, {{0x9, 0x5, 0xa, 0x1, 0x3ff, 0x8a, 0xcb, 0x9, [@generic={0x53, 0xc, "09af1ee4f70cd4fa3901ec4e7f26e9bc8493db418e66c6ce33743d98c9871f10d57edb2f83ff766c78e84af70505c8a68e8aa3e45a0e7f00c53d651f0e7f351207eb4fb08d155496aa6459b57a23166f30"}]}}]}}, {{0x9, 0x4, 0xb5, 0x2, 0x6, 0xc1, 0xdc, 0x9b, 0x7, [@uac_control={{0xa, 0x24, 0x1, 0x6}, [@selector_unit={0x8, 0x24, 0x5, 0x3, 0x4, 'j`:'}]}, @hid_hid={0x9, 0x21, 0x0, 0x6b, 0x1, {0x22, 0x53c}}], [{{0x9, 0x5, 0x3, 0x0, 0x10, 0x0, 0x1, 0x7, [@generic={0x42, 0x5, "2eacc6133f8f3ad9fbbcedb2e05a772ee5eceab6916e0bdba31410643ec2eb87b18ccdd3f91bca785cfbd3d44ad7a453fa1ddb43dd0b4d0a92e43d9d1f65a023"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x40, 0x9, 0x6, 0xd6, [@generic={0x34, 0x8, "c542d0ad1bceee52585ce99b83d5054b60bd638f0d1cce3d7b01f9e0213a524cc3d9fb70a68602a57faf0e5941d5efaa8245"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0xa, 0x3, 0x1, [@generic={0xa2, 0xb, "70c5af31c53608fe133bd15b7722d545e96cd3eb0c20c1fc36c073c345b571e131a368a438b3bb17dfda8c1357756c615c0e8f44a8826a4f3debdb10b45d1abca655c9a34cf9443dcf398901465be80277687a89410b2a6cc2f5d096c22951cd2115ec626deab3e1c78829d6692ac2d4f9fd3797285f60bd98afaf8701d8921f2529cc8ff3f524ac4a0e7d35b163bd8d11bfd72869bc531d5579591645c6f2d6"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x200, 0x8, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x88, 0x800}]}}, {{0x9, 0x5, 0xa, 0x10, 0x3af, 0x3, 0x0, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xd9, 0x86}]}}, {{0x9, 0x5, 0x2, 0x8, 0x20, 0x64, 0x8, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x84, 0xf, 0x9}]}}]}}, {{0x9, 0x4, 0xb4, 0x5, 0x10, 0xff, 0xff, 0xff, 0x4, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "1b33dd"}, {0x5, 0x24, 0x0, 0xfff}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x0, 0xb, 0x9}, {0x6, 0x24, 0x1a, 0x3, 0xa}, [@network_terminal={0x7, 0x24, 0xa, 0x0, 0x1, 0xd1}, @mbim={0xc, 0x24, 0x1b, 0x6, 0x815, 0x3, 0x6, 0xc, 0x34}, @acm={0x4, 0x24, 0x2, 0x2}, @mdlm={0x15}]}, @cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "bb2ededb6b"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x101, 0x0, 0xc1}, {0x6, 0x24, 0x1a, 0x1, 0x14}, [@mbim_extended={0x8, 0x24, 0x1c, 0x1b, 0xa, 0xf7}, @mdlm_detail={0x104, 0x24, 0x13, 0x5, "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"}, @country_functional={0x10, 0x24, 0x7, 0x9, 0xd, [0x0, 0x4, 0x5, 0x2, 0xb3]}, @dmm={0x7, 0x24, 0x14, 0x0, 0x8}]}], [{{0x9, 0x5, 0x1, 0x2, 0x400, 0xe, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x183, 0xb, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x9}]}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0x7, 0x6, 0x6, [@generic={0xa2, 0xf, "8fce0554c59488c3c6184265d4ed5c6f46437763399239acb7b30adc4f0ecf907836ffac2efebc1df80f545c8b47cfe7c966fc79af51f514023f9041324be8e8ff0979494e0852409685e8f280778ff2ac7ba51a3325dea7b065cef0b941ebdf3de28d6dfa2cdb9ab33addca648980076b0c0a1559cbd0b0ac0d332c1f8ac4248fa7d59456bbda721261d14988cb59c06d8bfcc7f7a0676f5018d58ca1e86d18"}]}}, {{0x9, 0x5, 0xf, 0x4, 0x3ff, 0x0, 0xd, 0xfa, [@generic={0xb2, 0xe, "b0b4375b4c54f773c7e8973e7f106bcdfd3992be67207846f56d0399368cdab382a5fecefbd39acfb7d5d053e2b7a907d2748a24c7522cba0c1f5a871da746552765c750807aa72ce8af78fab5a5122f4fd48345b3530367f0c8986f75d22856ad814ea3bce7a0b7b2e8d5a80c1ef612eb325e995a72d62773b2654635f00eead6d677d0a0f5837b8c845e6b76826a8ac7541955c97d8c3c3e2dca1840002033046c6c1716a47b86853aa20b4bf3fff4"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x3ff, 0x7, 0x5, 0x0, [@generic={0xfb, 0x5, "67c4ec1502eb3f60ac0b322ff064d92d7f1fc019bfc08889a36d3fa8232c3cc67497edc401ca460f1c1ce2fa18ada0392fc979e91d6e249856297c28718aa77ff10f101d08d8db866974807fb83ad0629c25cbc2880e590f387cf690e5c233d14ca6b12609ce5acc26a775fc35d703cccf161dc9611d0fd1ff54cc3ed4d4269b59635bd0581f5b9d8ae237902a71eca46c2d39ddb2a1837d4caa0bf2d946ae43da250065128d9af24b7a40926415d7014cd8cb9eecc5b71d50f2caa05ce70a5a8ab3300b0a2d50e0977f2ab6dafb8382a42e51d23acceab777486624740cfebc3a4e3949b01ced0668b768495e1731f5cabfa03343e9274eb4"}, @uac_iso={0x7, 0x25, 0x1, 0x180, 0x3, 0x8b56}]}}, {{0x9, 0x5, 0x3, 0x4, 0x40, 0x3, 0x0, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0xad2a}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x4, 0x4, 0xfb, [@generic={0x81, 0xf, "73c69e5559ee5bf103afd720deef3da2b913903446824b487ea5c1911b7e97bcdda96ce401241713cc6c4d713431886a7f11f4132a7f6ed16c71cd449782553f59433a5a02d4254ad22e1ecac31cf11a017a28e84d395b333007dc26f5d464466c2f5b9b4f4ba0c2293e71d1ca973b00b0ae1e1abf9f1e5567c9c12fe50614"}]}}, {{0x9, 0x5, 0x0, 0x3, 0x3ff, 0x0, 0x1a, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5}, @generic={0xb8, 0x9, "d6a7673d03b4155f8f40def64861dc7a73b6ae0a1e6bfad2425ff768ce099dc3d8d5fe8e2507cdc6fe3bde93f8b2d95d5228bd93deb1c03923c4e7bc707bb0ccd1d9c65c6fe6a276655ea9a1e0c98174aa2871aa741a4e581badcdeaf67c9f79dbc263dc70bbe9a7827a1509654221e9437fff42d86468f562682449e2e777c6b127cc8d0f0143503e0347a633e02f04e429d33a0f4145f3dff0e6b110b16296f78cb75cdbfd9f0b6f30492af7b31bac659ae4672609"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x0, 0x8, 0x1, [@generic={0xcd, 0xb, "c3b1cb8a6fba454dd97ccb7e6ed6bd4d7f30d8ce7d5835c7bce52fb08e51226ab64ef85d4491004e9135cef3d58608b35c1962acc39ddae71cb005f08b18ad83a715bd085a8dc2e61fe319b741dd57212c16599ef7e0ef7ac2b339680773c40341d76e82b928f77fed0d4d21ba978e5b06dc5782f54ed874052d2720142101c92d23dfbe7322c8d6a35802fa14c823f2f64d468b9766d39b7af4c96c37b979455d8ca566555a08223a0ba63997b58cd6d5c1b94532149f2f69a834702b9b9a81e42e723066faf4b883f201"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0xf, 0x7}]}}, {{0x9, 0x5, 0xc, 0x4, 0x400, 0x81, 0x4, 0x2e, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0xa}]}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x5, 0x7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4b, 0xd9}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x31a}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0xa, 0xa4, 0x4, [@generic={0x39, 0x11, "bca8269f52a804cf875225b5de8db2209c6a6b29b21eccb8a81ee68eedc98fa682ff34dd383ecc9f6bc6df8113238be044e852bbfb985d"}]}}, {{0x9, 0x5, 0x4, 0x7, 0x20, 0x5, 0xf7, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xd, 0x5}, @generic={0xa, 0x21, "df15e4e731bd9490"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x9, 0x8, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x6}]}}, {{0x9, 0x5, 0x80, 0x4, 0x400, 0x9, 0x3, 0xa9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x800}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x9, 0x7, 0x7f, [@generic={0x13, 0x3, "004012a446678786727af79072a6d41230"}]}}, {{0x9, 0x5, 0xc21b8758dd5a348f, 0x10, 0x3ff, 0x3, 0xf, 0xfa, [@generic={0xba, 0x10, "1907f3a2df7e163cf2b1f1dfafe0e494a59015523e3bcae095193761754b039ac0f45319d8735006abc397bbc991882e2230e6cc7ad867b94f418082b3a2c20322a685b6ba38c249e3a63da4e0b21ca169a0038f096ecca6a37d88120d47c4087266f8412816f52dccbab1b07fcf26e2da49a09e344fe1a9bc5ecd73c18d3f21e85b7b5807f6989b2f176333519a4b705f431992eb726a0bcde0e3f2f2914cb14306053468a4c42158771b1570fe4898c401b1427ab8c6ca"}]}}]}}, {{0x9, 0x4, 0xb5, 0x7, 0x7, 0xcc, 0x80, 0x6, 0xa, [@uac_control={{0xa, 0x24, 0x1, 0x4, 0x5}}, @hid_hid={0x9, 0x21, 0x2, 0x7, 0x1, {0x22, 0xa21}}], [{{0x9, 0x5, 0x8, 0x1, 0x400, 0x6a, 0x5, 0xa0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc, 0xfffb}]}}, {{0x9, 0x5, 0xe, 0x1, 0x8, 0x0, 0x2, 0x3, [@generic={0xfd, 0xe, "78997c0805d681f094413441ceefa6ea03a0e8cf8fac8b27e8c0665980ea2bd6d391a96b1f865142bf0a1c70ea4132a047abd429072fdd169442fce084f086260a1b4905d101a5a1270a69281db44810d8328bbf4161783a10ad92f9e893074313edbf02c489f6e41236f30ecbdcbe13b721b7cb5b64d113c2e9d85f71f08b9b10eb12e311fcc19a0a42c0e9206b9232a9363b0b14d2854145e69e1dc5c53d2775c5144e3147795384f430626571f5be1bc3a7db165dc79e8ede8930220f647f130820c372a5663b82ff30022cc85cec23c38c9e6158559df5a5d78e33e5a6b677fe0023cf549ad40fe8c4737e380e26432dca55a22432601768e9"}, @generic={0x94, 0x23, "92bbd3ad24df46247d34139f37f0c05d857b6bcfc218ab36610d89a1576ad3c7caaad94c2a5c38a11016deb79e9760d1ca537b01a949b5a3b8a001a565f2e1f644884a48700207ad08ae65d379189b67fa49d806da09ccce8a8195d05d80d67a23844213bbb4c9745d444a7b5a52100c4cea17e51703a8b0b40b734c26bfd1c57b2b0f0edc8274319f9d90d5a427c776a7ae"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x6, 0x3, 0x8, [@generic={0x89, 0x1, "f73a267c3943534aab4b88feffcbce276a207a6c25bddf3dedb0b295fe9a35b06af979c8822ea873cfac311a196735fb72cab18564d5d3d1afd89e6dd01d7405bc69f7a63b040399291b2a202a9fd392d30b98480b1036c93908d4a4e3a417718a00ddd2a2bfc116c0f361c187ff890149a033577108370ecf5f80eb7eb26d5d871666989eba6f"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0x5, 0x1, 0x1, [@generic={0x44, 0x3d, "7b1b23f4476f204fecfb7b2cd23b59a52120189af53d1493d293facdab0925a31f7f55b69024b6dfbf70cc48a8539d97b67e6c12d0e5fa668bf5327ad8b83ee64621"}]}}, {{0x9, 0x5, 0x4, 0x1, 0x20, 0x7, 0x58, 0x5d, [@generic={0x68, 0x5, "91c03440f22be29933146052aa0bb746ed9fa87be211e7774ba1fd4996c426cfb44971f8faeccb5d1730c21e5cd0f7407df13e62715d3bbb5870904ad25acb464a49df9971bb030a9bfface4d94c91c31add9c7fa6202e663d17bfaf0dd0834f4019877c464b"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x3, 0x8, 0x3, [@generic={0xa5, 0x23, "d9a18ce146529f1b261c7fe9a7c53350e31d3ac6351c2c39d3ff0eb8b0bec6cea7d4e4a25bc4d8b89b9aa20775c9d78317f37927aacc87031b639dcf7a276b1520af2ea6648409eda7a0437b3c0619b6bdec73f3afba7f4d34f1e5d625344975f9737f6684539f5465a51f16db31de42f471ad610542e31e7d315580b69ea842c0016c4a84e7477f83c16dcac4e382f64ac337378be3f369b74ddb3bd2b4c8984e7fb6"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x9a, 0x7f}]}}, {{0x9, 0x5, 0x6, 0x1, 0x3ff, 0x6, 0xfa, 0x9, [@generic={0x2f, 0xc, "d4450ace9a906a21493b31fb33033cc4da862edcd70c5a93140ccbff45bff98c17d4cc2b6d32a31e62a2d5827a"}]}}]}}]}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x0, 0x40, 0x7, 0x3, 0xff, 0x7f}, 0x20, &(0x7f0000000380)={0x5, 0xf, 0x20, 0x4, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x89ddb15c03a96e1, 0x7, 0x5, 0x2ac}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x0, 0xd, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0xb, 0x2, 0xd}]}, 0x9, [{0xe5, &(0x7f00000005c0)=@string={0xe5, 0x3, "5601b15c59547c12c2fdf875e6d082c931c7ebdd29ec03d82612d228d67e8e49818a15c0ed757484b7999a961d884852554ad2cbbb2030cff23539597f33ae7bf29ddead192fb29a0af5acf3a2dac5db0e5c5fabac8f37ee5bac54245888a81d56a373ae7d8702505af939fcae19bc304c80bbe149f6b1e0e728e30e381fcb77f0cb8acec00d66808777d5f5b224e21284e72a70a0706c5337b2a66997e36198f061e2367d2d570f6564e39bbc207f3e6ede6cca919c848d49a095101b061733f50601ed1e0b3b0c82c6cb0df090996f09f195f5746560568a303480aeba825a167dc5"}}, {0x40, &(0x7f0000000540)=@string={0x40, 0x3, "5e14d7e0038b3c5c990700c403fda7d3dea1b9a8fa64ffd8ad1a48227b5a38d8e1025ad912873882d290c98118e0adf4d177671c0e5117aec4bea2744de2"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x419}}, {0xa8, &(0x7f0000000700)=@string={0xa8, 0x3, "26d00983f76045d5bdf4087807645a000b3f9c19820a569f149a874010742c34fb47c9725348e03998b73b75701a5e87a9bce75a75082e985999689459d21fdd7872fed79ebd41680a88899e6cb68dba80685a9c59ca2aa19d441cf8115296e35d1fe4a5eacdb4fe002b6a5cbddfc44db44c34cd235c6cd473a9171238d5456fefbc2c056dae35c3ec519c7d39afc62952225dd181424d0b4795b1a7cbe45943b6c9374681c2"}}, {0x40, &(0x7f00000007c0)=@string={0x40, 0x3, "00c50880b0819fd73c89f74b3013f9550820c5af6b57ae48fa4d92064202a80f3678879067abd1997af04b0ee86fc957f4c82ee9de4710c1734131108b2d"}}, {0x49, &(0x7f0000000800)=@string={0x49, 0x3, "9babe4289a9f83e3e2229f7e9c8a62f0a00eb927163710d7b7412e3e66426389687c45625b7767661c192936cfd55a86a00024515e67ee25c30063eb6d7d8fc3a214ad89cb5149"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x809}}, {0xc1, &(0x7f00000008c0)=@string={0xc1, 0x3, "eb57ebe051db83d2379ff431717fab3bbc2f51ad27fafd14978c33b5ecc22123358a3ed60cd6b22d6815eb5b71907956529185445f50bcc35203fc66990a2017505fb98a28c3a89478cfeca4c3cf556c36915eed8d46609fb4eb353813474bd67ae8c8835a9fa318b2ca39feec2fbe94b6040425baa795c11541d02f3a487dd5bbbba4929323be67fa98bb9d663107ae8a5d92cdef9fa9dd8310349a110e74191343b0e6e94078e7bbdcaa6dfd13f889d949f0f57b05c8742e4f1cc6396a65"}}, {0xae, &(0x7f00000009c0)=@string={0xae, 0x3, "7e98a39019d8578800d527ba96714ec93b812cb5d51976da969c7b19438cf4b9a1fc63782b6a1ac1fd14718f028104fffcfe78af10a11d383ccd70d868d52a4d305b5c1bca92af5a912ec3c2d1423c6e99a50f7df81f1a0cc352c7d7128e9ba4787e317df475dd61f0aaf43b2988908a4a16a8ef3438bfb4fff6f8d08acb7ec6808b28c2100b323d951ed5809131aee763460f1d1e9da768453d2b63af3f556fd6608c1dfe5df55440c09de6"}}]}) syz_usb_control_io(r5, &(0x7f0000002000)={0x2c, &(0x7f0000000b40)={0x0, 0x10, 0xb0, {0xb0, 0x8, "4ce762449f4c808eca40d05aa5a53ab47f0859dfc8f0e1c3666c2f467e433f84d0cc81891ca4178bb9d321ebae8badc8da6d03094611f92908e8f203aebac46e328da7bfb24c4937f709ddcb3a306eeb150dda55d52c8864096b8155dd488046dca677847c7947db5b7883a6d3f3a1d4f49f8a3b7653c339538a8b550939bdec5f4c10be72bae0212c4b20db6cc87314ba53e7cfdf40feed322df71b91b363dffb6484d1b5e7353a4d587206b650"}}, &(0x7f0000000c00)={0x0, 0x3, 0x8d, @string={0x8d, 0x3, "f0e598990d9f1330c6047bdb29ace1e8b105ceb3349caa227c85bc739e780791d2d5a390bda89089f0d2086be91c8f383ecae255bd91d8dac5e8661fdf900396d05da0b58a90ab4003e2c11b42cbdfaf1f9ee3a412cd39dd67bc607a616b9047b301629e848b31d9db7bbcf59a6e09311c885d69b1af0b2ffe9beb7ad1e2be5ac8e9bc5902c1f1e7683784"}}, &(0x7f0000000cc0)={0x0, 0xf, 0x2b, {0x5, 0xf, 0x2b, 0x3, [@wireless={0xb, 0x10, 0x1, 0x8, 0x8, 0x9d, 0x2, 0xa, 0x81}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x2, 0x7, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "5d0ea0e4c1879e4e931307dc55c71686"}]}}, &(0x7f0000000d00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x17, 0x1, 0x0, 0xd7, "b2a837e6", "00ac15e4"}}, &(0x7f0000001fc0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x60, 0x13, 0x3, 0x5, 0x9, 0x9}}}, &(0x7f0000002440)={0x84, &(0x7f0000002040)={0x0, 0x31, 0xb, "39be4cb3a34ba858b63547"}, &(0x7f0000002080)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000020c0)={0x0, 0x8, 0x1}, &(0x7f0000002100)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000002140)={0x20, 0x0, 0x4, {0x200, 0x40}}, &(0x7f0000002180)={0x40, 0x7, 0x2}, &(0x7f00000021c0)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000002200)={0x40, 0xb, 0x2, "eea4"}, &(0x7f0000002240)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000002280)={0x40, 0x13, 0x6, @remote}, &(0x7f00000022c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000002300)={0x40, 0x19, 0x2, "d040"}, &(0x7f0000002340)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000002380)={0x40, 0x1c, 0x1, 0x1}, &(0x7f00000023c0)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000002400)={0x40, 0x21, 0x1, 0x4}}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) pwrite64(r9, &(0x7f0000000d40)="3703c70f70e244b7878fedf0c0c6c2ff2f524255d61dbfb25921e3d3686454b93e5842722103c5c67b800da4173b9e63544ee1f32fd585dab49f06f4e7e92a867080b7b83c0a3125", 0x48, 0x0) ioctl$UFFDIO_MOVE(0xffffffffffffffff, 0xc028aa05, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, 0x0, 0x0, 0x0, 0x200000000}) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r1], &(0x7f00000000c0)=[0x3], &(0x7f0000000200)=[r3, r2, r2], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) 2.375267623s ago: executing program 7 (id=3845): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000000000010d804dd0000e5ff00000109022400010000000009040000010300000009210500000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000bc0)=ANY=[@ANYBLOB='Q\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000128bd7000fbdbdf", @ANYRESHEX=r0, @ANYBLOB="060036002b000000060036000700000006003600220000000600360036000000"], 0x3c}}, 0x8004) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1e4011, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002", 0x29}, {&(0x7f0000000100)="c40ad38ae96bf7e8ef19243a4a63c9ede45421a4cc1ea4504d4786682467", 0x1e}], 0x2}, 0x4) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='freezer.self_freezing\x00', 0x275a, 0x0) socket$inet(0x2, 0x2, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000004c0)={0x0, 0x3, 0x6, @random="5e1cf8b4c253"}, 0x10) fanotify_mark(0xffffffffffffffff, 0x1, 0x3, r2, &(0x7f0000000000)='./file0\x00') openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000240)={&(0x7f00000001c0)=[{0x203f, 0x200, 0x0, 0x0}, {0x8, 0x4800, 0x0, 0x0}, {0x4, 0x4000, 0xd3, &(0x7f0000000c40)="99a01bafb40d487c24506292e19c7b2d09f03a2439af2a1ec3f4bb05514edd79142b0a89620430b60ab59d9783d82de5f72f6ae831a26707d3e807bab4bd020aec396ef537759d8bd931a0e44a1000d71ecd2b64ea405a41e4b42e679aff959c652b90bb334a50efc62d4b3a1737d76561761b1433209a2bcb7839b8e67331c9cfe20f656dd523161a4b73d0fa157afbadb9b4b7297446004a8cb0f40bedf67e307b2e66c5a18046ba0c39bddfa1f07edf3b82d7431421074c424e756f42739bbd5f8801247f84f9e3390352c53a97e1f124d0"}, {0xfc, 0x5000, 0xc2, &(0x7f0000000d40)="5f327b215b3b4b79524baf0c0337ff3e7bcd13781f9a0bd553823b5154e2434aba995d518ccb27f91a995cfc0a5f168b2f019f5fb5d106b972e1bae9d854fe0876727af5d08b49d3c42db5661d7e6c058058f4039094620cb1de1b553209d849919cc142116f475a72af4f1e64d696de8b29b064a2995bd3365d0fd9c2c3dab6c70799ae247ca410f214e14159b3befa0539ceca9e7f078b1833990dae122c26eb6ea9435fb8e95d1e6a79d9ed5f3bdcae3ef1cbe8ea915ea5e957324aa503668eab"}], 0x4}) 2.288967563s ago: executing program 1 (id=3846): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="13000000290091c8b14a0778a8123d181d0aaf002694bff5d43668636d475a56ba99acbd72c8ad"], 0xfe33) 2.045250572s ago: executing program 1 (id=3847): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x4, 0x57, {0x57, 0x7, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3fd7c59ccb785025f2e7b3504ff87cbfd10f3c080b733000000000000000800000000000000ea7a288982d5337c364daf03bd400d66293b0a2b103dd93f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) syz_emit_ethernet(0xda, 0x0, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x0) (async) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff05000300016900000500030080ffffff05000300050000000800020003"], 0x50}}, 0x0) (async) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000340)=0x18) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000200)={0x20, 0x9, 0xe, "46460d3cea7ac9e83fc9cbec9de9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.554463837s ago: executing program 3 (id=3848): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_X86_SET_MSR_FILTER(r0, 0x4188aec6, &(0x7f0000000a40)={0x0, [{0x1, 0x318, 0x6, &(0x7f0000000180)="3842e99bd7d00fa09fe237c2b22d9cd282b9a669113c6491bd5ef57028867840d11c7ef4f4f43bf729f599ece3d1d9edfcc8e89726013fd6e2c1ecb4e1211acf1257bc4ace93e2b749e9c8b943fedb54bb80037c80b3ac7fe286a0a53957d4bf7e02ef"}, {0x3, 0x1b0, 0x6, &(0x7f00000000c0)="286ebbbe30e3f1def0bca1f9574696795c35ed6448b21f7ae12c0bbf12f8f863af910fa250e3c442a57b8766fb7aed0ac4c0a37d1bed"}, {0x2, 0x2d0, 0x6, &(0x7f00000002c0)="ca013b560d18865f3d7ff89d6051c65e95a2190139806698b6bd5c7b9ddad5f66e4bf563b77f4836f1f22bf24619e74e4f7f68eaef1d94bd70df62c5330b3289de23266dfdd9954d0ae9853eefc482d02149349196506e429711"}, {0x0, 0x3e0, 0x1eb4, &(0x7f0000000340)="08b0307481947aff41a12202a2ca20558ab33be1ffead2ba6a0b5587597ba4ae4dad924f2c58af34e543adaa3ee6a9dc43a2e98807e7ec37a8b7ab20be85f41c9932dc89717cade83a7b15f4cd011bfb73b398e9aedd7eb7d8757a6940f7fd28b1cbb16805ed17afee490b2666e95883aec705ee6ef64c401faa267f"}, {0x1, 0x370, 0x9, &(0x7f00000003c0)="efc7b1baba99c2e49579c405e9b586104063d88913b3e60a40710d148f0efe9607334929121d9124323c05ed7b30b6b3563624103db79a19788bd78d0f4c0292948683b9c51cbd4a4621ae1ba4e7c69355914423e6c74855f7e4ea7673248e1067966812a8df821db3ff254c6d9f"}, {0x0, 0x318, 0x400, &(0x7f0000000440)="ad325ecbd0912cc8695fe98db00768d21c857eb6220fecda259164e2f976d12c0bc111b3f18827d46c780cad8f90f11d811b7dbade868b1305551724d96aa6de12c8e8854f425311095a6301b24ec9672f70092fc52a10955f966ac29cda479f6f9c7c"}, {0x2, 0x178, 0x10000, &(0x7f00000004c0)="7d5686e64ad4f8c9acb21ffe728c16cf6de22873748192f5c8a1d5d311d96492117e314adc55c6fea2f0056dfeba38"}, {0x1, 0x160, 0x7, &(0x7f0000000500)="281bdcba5151f27d19fb82fda7d0e07dedc33d9ca7ceb2cce956221be6dd229aafc2e526cc813c1470a41660"}, {0x1, 0x340, 0x8, &(0x7f0000000540)="5fef2bcda4871f57f6aea395154b18c81ebb945230a79756b852856f6ed4b6cd5cba885697ed2cffb050312f0e8d87d631bdf1b6fc7112611267b6ad130a4dc92325c477d42d468c01326d9c21dacb4b03427edbf87bb28f6b8a3112d3501ab5c4d1409655955645"}, {0x1, 0x590, 0xa76, &(0x7f0000000640)="fa76e435f011ebb6fa5a84efbde85f20bc3d540c06c80293330f74dfa08020196effca67569106f22b5a077031e1cdd03a8b304379831f628b440f09c857efc68169ff0679feb6d8bae6bcbd04d9cd92a0badc455aa75f97416a3ecf1de521c0e145cab63c966ab476f6b1c926512edef22fc2e036cecce8620cbdd67534cb174447b9cd297d412d638581361d6e045a76b58c702de368bd00ab2e83bdf097a8e09f4bd881b1107aedb904d3f76c36012948"}, {0x1, 0xc8, 0xa04, &(0x7f0000000700)="2511865fd555c6e3b38098752c71c134b4a93a3390396cb307"}, {0x2, 0x338, 0x0, &(0x7f0000000740)="83501406aae880749994e4b46268bb232667ce979e350b3d0e7b394c15eb565dd86d4cd74238a174ce46af6f077a505d9a3ee4e9d0454b2a035f60d2192de139cbc9a4ecdaf9a8904ef1dc16fc581fd1f87d26a7d1752207cdd1090a44c167a5fe82e797307970"}, {0x1, 0x0, 0x3, &(0x7f00000007c0)}, {0x0, 0xd0, 0x5, &(0x7f00000008c0)="f5fbbbc229ee3fcff65136ad0adb3dfbcdd5254304eab7710f34"}, {0x2, 0x398, 0x8, &(0x7f0000000900)="c8bac431e33666bd6a7605cba8b5ef4e4c4c48448db1eefcb60e1310a521a2f5d15851d8668bff25eba4cff5d0c35a8c925ee0ea060984197b1cf2a9a41232ad60a1fc3367d545597f6b45be5dd71a49665e1c359c650617a5d033b1d6ebfbd9839da8ac8ffa8cba2e16cd604d6424c8fed1fb"}, {0x3, 0x230, 0x4, &(0x7f0000000980)="a3956372428f5c026dd660b17355f7db1d919a1455ad2498a1db3dd1176768b28bba2d582ca05d54dc4509c386f2160676a0c76b82649c5864e1aa091cfe50886c53a900b238"}]}) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701fefffffffcdbdf25017c000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) 1.446067203s ago: executing program 3 (id=3849): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r4) ptrace$peeksig(0x4209, r1, &(0x7f0000000100)={0x9, 0x0, 0x2}, &(0x7f0000000440)=[{}, {}]) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000680)={r5, 0x1ff, 0x0, 0x1, 0x3, [], [0x800020], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x4000}) r6 = fsopen(&(0x7f00000000c0)='hfsplus\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00002000000061118c000000800085000000cc0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41000}, 0x94) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r7, &(0x7f0000001fc0)={0x42, 0x3, 0x0, {0x0, 0x21, 0x0, '/proc/sys/net/ipv4/vs/secure_tcp\x00'}}, 0x42) 1.269525032s ago: executing program 9 (id=3850): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f00000005c0)) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x60000, 0xfec00000, 0x5, 0xd, 0xff}) 41.626405ms ago: executing program 9 (id=3851): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000000)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x98, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0x7ee}}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffb, 0x3, 0x20000000, 0x80800001, 0x8001}, 0x81}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xac}}, 0x0) (fail_nth: 22) 40.393619ms ago: executing program 9 (id=3852): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007910288000e4fd005e500000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000009500)=@newtaction={0xe68, 0x30, 0x0, 0x70bd27, 0x25dfdbfd, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1f, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x401, 0x20000000, 0x1, 0x4}, 0x3c, 0x9}, [{0x10000, 0x80000001, 0x90b71e2, 0x6, 0x6, 0x9}, {0xb943, 0x0, 0x8, 0x7, 0x1, 0x6}, {0x4, 0x80000001, 0x9cb, 0x9, 0x4b, 0x3}, {0x80000000, 0x272f8ca0, 0x0, 0x400, 0x8, 0xde}, {0x9, 0x9, 0x1, 0xfffffff7, 0x9, 0x800000}, {0xa, 0xa, 0x1000, 0x7, 0x2, 0x2000}, {0x63, 0x1, 0x2, 0x1, 0x6, 0x301}, {0x4757, 0x5, 0x8, 0xbc64, 0x5b, 0x45ef}, {0x1f, 0xfffffffc, 0x1, 0x3, 0x2, 0x2}, {0x7ff, 0x400, 0x10000, 0x9, 0x1, 0x4}, {0x8, 0xa7, 0x40, 0x6, 0x2, 0x9}, {0x2, 0x6, 0x81, 0x7f, 0x2, 0xa}, {0x40, 0x1ff, 0xa, 0x3, 0x6, 0xbebd}, {0x8, 0x3ff, 0x0, 0x8, 0x7, 0x5}, {0x0, 0x4206, 0x7, 0x1, 0x9, 0xdf99caf9}, {0x1, 0x2, 0x9, 0xfffffffd, 0x8, 0x4}, {0xffff, 0x7, 0x9, 0xd, 0x7, 0xc}, {0x6, 0x6d4c, 0x2, 0x2, 0x7, 0x3}, {0x5, 0x8000, 0x3, 0xfffffff4, 0x0, 0x7}, {0x0, 0x424, 0x4, 0xffff0001, 0x2, 0xfffffffb}, {0x6d, 0x4, 0x3b79, 0x2, 0x4, 0x7ff}, {0x90e9, 0xc1e8, 0x80, 0x15, 0x8, 0xc79}, {0x398, 0x4, 0x8, 0x9, 0x8b1, 0xd8}, {0xc9, 0x9, 0x6, 0xf, 0x0, 0x28}, {0xa9, 0x0, 0x81, 0x800, 0x100, 0x7}, {0xfffffff8, 0x7, 0x0, 0x0, 0xab}, {0xc10b, 0x2191, 0x6, 0x9, 0x0, 0xbe}, {0x80000000, 0x2c2d, 0x400, 0x2, 0x3, 0x7}, {0xfe, 0x9, 0x9, 0x9, 0x7, 0x80}, {0x10000, 0x3, 0x7, 0x800, 0xffffffff, 0x1}, {0x7, 0x6, 0x7ffa328c, 0x2, 0x7b51, 0x8ce6}, {0x8, 0x212626f5, 0x2, 0x2, 0x8001, 0x2}, {0x7, 0x2, 0x7fff, 0x4, 0x7, 0x9}, {0x9, 0x5, 0x2, 0x4, 0x9, 0xe}, {0xfffffffe, 0x2, 0x354a657a, 0x7, 0x8, 0x8}, {0x1, 0x5, 0x9e2a, 0x0, 0x7, 0x3}, {0x7f, 0x5, 0x57b, 0x2, 0x0, 0x5}, {0x3, 0x3, 0x1, 0x3, 0x5, 0x9}, {0xff, 0x0, 0xfff, 0x8, 0x4, 0x9}, {0x2c, 0x2, 0x6, 0x10001, 0x2, 0x101}, {0x2, 0x0, 0x4, 0x6, 0x3, 0x10001}, {0xd, 0xfff, 0x5, 0x94, 0x2, 0x6}, {0x5d, 0x80, 0x4, 0x7, 0x11, 0x6}, {0x3, 0x5, 0xc8, 0x5, 0x18000000, 0x6}, {0xfffffffb, 0x7, 0x3, 0x9, 0x8001, 0x6}, {0x1, 0xb94, 0x800, 0xffffff49, 0x5, 0x9}, {0x95d5, 0x8, 0x8, 0x9, 0x1, 0x89bc}, {0x24, 0x1000, 0x7, 0x400040, 0x1, 0x1}, {0x400, 0x800, 0x0, 0x400, 0x10, 0x1}, {0x29a, 0x3, 0x4, 0x6, 0x7, 0x3}, {0x38000000, 0x5, 0x3e690dd2, 0x0, 0x49f, 0x8}, {0x9, 0x8, 0x7f, 0x5, 0x8, 0x8}, {0xfffffff6, 0x0, 0x2, 0x8, 0x1ff, 0x4}, {0xfffffff8, 0x6, 0xfffffffc, 0x7, 0x7, 0x1}, {0xc, 0x70c, 0xad8, 0x7, 0x355e7bd2, 0x7}, {0x5, 0x5, 0x1, 0xe3, 0x6ec, 0x3}, {0xff, 0x7, 0x66, 0xe, 0x9, 0x9}, {0x0, 0x0, 0x2, 0x1, 0x200, 0x8}, {0x32db, 0x1, 0x1, 0xffffffff, 0xe790, 0x9}, {0x2, 0x400, 0xfa, 0x9, 0x6, 0x1}, {0x7f, 0x1, 0x5, 0x8000, 0xffffffff, 0x8}, {0x1, 0xfff, 0x7f, 0x8000, 0xe, 0xc44}, {0x80000000, 0x9, 0x0, 0xf98, 0x9, 0x8}, {0x5, 0x1, 0x18, 0x0, 0x80000001, 0x9}, {0x0, 0x8, 0x3, 0x200, 0x5, 0x7}, {0x80000001, 0x2, 0x9, 0xc8, 0xfffffffc}, {0x5, 0x3b, 0x400, 0x4, 0x4, 0x3}, {0x7, 0x8, 0x1, 0x400, 0x9, 0x529}, {0x9, 0x16, 0x10001, 0x3, 0x1, 0xfffffffa}, {0x6, 0x74, 0xffffffff, 0x3, 0x1, 0x7ff}, {0x80000000, 0x9, 0x9, 0x0, 0x9}, {0xffffff97, 0xc, 0x9, 0x3, 0x1, 0x5}, {0xd, 0x4, 0xd, 0x3f, 0x2, 0x7}, {0xa, 0x4, 0x2, 0x3, 0x5}, {0x0, 0x283, 0x4, 0x6, 0x8, 0xee7}, {0x6, 0x7, 0x3, 0x0, 0x7f, 0x9}, {0x8, 0xe, 0x100, 0x8, 0x4, 0x5}, {0x1, 0xfffffffc, 0x2, 0x4, 0x100, 0x80000001}, {0x4, 0xffff, 0x2a, 0xf24d, 0xffff8001, 0x5}, {0xd6b, 0x7b8c3976, 0x1, 0x0, 0xf7d9, 0x1}, {0xae9, 0x6, 0xfffffffe, 0x6e53de2f, 0x4, 0xe2758a}, {0x7, 0x8, 0x4, 0x9, 0x8, 0x7fff}, {0xff, 0x1, 0x4, 0x8, 0x1, 0x9}, {0x0, 0x3, 0x8a, 0x6, 0x10, 0x5}, {0x2, 0xe24, 0x5, 0x96, 0x7, 0xd859}, {0x6, 0x6, 0x7, 0x403, 0xfff, 0x2}, {0x3, 0xb, 0x6f70, 0x3, 0xe, 0x6}, {0x0, 0x8, 0xdd1d8af, 0xd1e, 0x4dd, 0x7}, {0x9, 0x1, 0x9, 0x1000000, 0x4, 0x81}, {0xfffffffc, 0xad, 0x9, 0x7, 0x8000, 0x6}, {0x5, 0x6, 0x5, 0x2, 0x7f, 0x7}, {0x8, 0x6, 0xe79, 0x10f, 0x80, 0x3}, {0x9404, 0x4d, 0x8, 0xc63, 0x475, 0x9}, {0xc4c3, 0x4, 0x1, 0xfadc, 0x8, 0x5}, {0x4, 0x1, 0x3, 0x8, 0x10, 0xfffeffff}, {0x9, 0x5, 0x14, 0x1, 0x7, 0x1}, {0x5, 0xed40, 0x8000, 0x7cf, 0x10, 0xe}, {0x3, 0x0, 0x1c7b, 0x9fc3, 0x57c4, 0x800}, {0x5, 0xfffeffff, 0x4, 0x1, 0x0, 0x3}, {0x6, 0x9, 0x8, 0x3, 0x5, 0x7}, {0x6, 0x2, 0x4, 0x9, 0x7fff, 0x5}, {0x7fff, 0x8, 0x0, 0x9, 0xced, 0x80000000}, {0x7ff, 0x3, 0x6, 0x7fff, 0x9, 0xd}, {0x3, 0x5, 0xb, 0x8001, 0x9, 0x1}, {0x0, 0x2, 0x6, 0x2, 0x9, 0x8}, {0x0, 0x7, 0xae6ad9f, 0x9, 0x7, 0x6}, {0x6, 0x200, 0x81, 0xfffffff7, 0x6, 0x4}, {0x0, 0x4, 0x546, 0x6, 0x2, 0x1}, {0xad03, 0x81, 0x7, 0x6, 0x5, 0x9}, {0x4, 0xfff, 0x2, 0x3, 0x9, 0xd}, {0xe, 0x2d4, 0x5, 0x40, 0x1c7a3607, 0xcb2d}, {0x7, 0x9, 0x3, 0x2, 0x4, 0x7fffffff}, {0x0, 0x3, 0x3, 0x8, 0x6}, {0x91, 0x8, 0xfffffffc, 0x8, 0x10000, 0x1}, {0x9, 0x5, 0x8, 0x2, 0x7, 0x8d}, {0x4, 0xb, 0xfffff364, 0x4, 0x400, 0x4}, {0x81, 0x3, 0x1, 0x80000000, 0xbf1}, {0x8, 0x6, 0xd4, 0x1, 0x6, 0x1}, {0x3ff, 0x1, 0x1, 0x800, 0x800, 0xa4}, {0x8, 0x0, 0xfffffff7, 0xfffffffc, 0x4, 0xad5f}, {0x62, 0xe, 0x0, 0x7f7, 0x3, 0x3ff}, {0x100, 0xfffffff9, 0x5, 0xd, 0x84, 0xc20e}, {0xc, 0x6c, 0x2, 0x4, 0x7, 0xea}, {0x8, 0x0, 0x8, 0x0, 0xb2, 0x3}, {0x7, 0x3, 0xec, 0x5, 0x8, 0x1}, {0x8, 0x3000000, 0xffff, 0x81, 0xfffffff6, 0x9}, {0x1, 0xda, 0x5, 0x3, 0x6553, 0x4}, {0xfffffff9, 0x6, 0x7, 0x4, 0xa6, 0x50d8a0cf}], [{0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x5}, {0x3}, {}, {0x5, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x6}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x4}, {0x3}, {0x3}, {0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x3}, {0x3}, {0x2}, {0x4, 0x1}, {}, {0x5}, {0xbc772ccd0a61e388, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x4}, {}, {}, {}, {0x1}, {0x3}, {0x1}, {0x1, 0x1}, {}, {}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x2}, {0x4}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x3}, {0x1}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x2}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x5, 0x1}, {0x5}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x0, 0x1}, {}, {0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x5}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701fefffffffcdbdf25017c000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="8f0000000800000000001459e8869160e547cb010000060203020202020100"], 0x2e) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r5, 0x40044104, &(0x7f0000000000)=0x9) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x2, 0x80805, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000c80), 0x1, 0x101402) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="181bd11500"/24], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) ioctl$VIDIOC_LOG_STATUS(r6, 0x5646, 0x0) 40.106274ms ago: executing program 1 (id=3853): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x13, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ff}, 0x20000000) 0s ago: executing program 3 (id=3854): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000018"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0xb, 0x40, 0x3, 0x41, 0xffffffffffffffff, 0x1000000}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r7, &(0x7f0000000300), 0x0}, 0x20) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000700)={0x2, 0x0, [{0x2, 0x7f, &(0x7f00000001c0)=""/127}, {0x11000, 0x89, &(0x7f0000000580)=""/137}]}) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f00000002c0)={0x1, r6}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x7, &(0x7f0000000740)=@framed={{}, [@ringbuf_query]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1) kernel console output (not intermixed with test programs): =root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1184.921451][T20473] vhci_hcd: connection closed [ 1184.945766][ T7220] pantherlord 0003:0810:0001.0039: item 0 2 1 7 parsing failed [ 1184.959676][T20483] audit: audit_lost=284 audit_rate_limit=0 audit_backlog_limit=64 [ 1184.967577][T20483] audit: backlog limit exceeded [ 1184.974892][ T7220] pantherlord 0003:0810:0001.0039: parse failed [ 1184.988681][T20050] vhci_hcd: stop threads [ 1184.992937][T20050] vhci_hcd: release socket [ 1184.999991][T17076] usb 49-1: new full-speed USB device number 2 using vhci_hcd [ 1185.015098][ T7220] pantherlord 0003:0810:0001.0039: probe with driver pantherlord failed with error -22 [ 1185.030457][T20050] vhci_hcd: disconnect device [ 1185.081489][T20489] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3497'. [ 1185.135016][ T7220] usb 4-1: USB disconnect, device number 115 [ 1186.698407][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 1186.949179][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 1187.029819][T17973] Bluetooth: hci1: command 0x0c1a tx timeout [ 1187.036023][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 1187.394339][T20507] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3501'. [ 1187.521849][ T7220] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1187.573014][T20507] wg1: entered promiscuous mode [ 1187.578424][T20515] Sensor B: ================= START STATUS ================= [ 1187.579614][T20507] wg1: entered allmulticast mode [ 1187.587222][T20515] Sensor B: Test Pattern: 75% Colorbar [ 1187.597916][T20515] Sensor B: Show Information: All [ 1187.602973][T20515] Sensor B: Vertical Flip: false [ 1187.608531][T20515] Sensor B: Horizontal Flip: false [ 1187.614065][T20515] Sensor B: Brightness: 128 [ 1187.619010][T20515] Sensor B: Contrast: 128 [ 1187.623667][T20515] Sensor B: Hue: 0 [ 1187.628365][T20515] Sensor B: Saturation: 128 [ 1187.633285][T20515] Sensor B: ================== END STATUS ================== [ 1187.842160][ T7220] usb 4-1: device descriptor read/64, error -71 [ 1188.076778][T20509] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1188.120050][ T7220] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1188.260513][ T7220] usb 4-1: device descriptor read/64, error -71 [ 1188.376905][ T7220] usb usb4-port1: attempt power cycle [ 1189.103604][ T7220] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1189.136512][ T7220] usb 4-1: device descriptor read/8, error -71 [ 1189.253579][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 1189.259694][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 1189.279441][ T30] kauditd_printk_skb: 272 callbacks suppressed [ 1189.279457][ T30] audit: type=1400 audit(2000000411.729:38537): avc: denied { ioctl } for pid=20506 comm="syz.3.3502" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1189.312228][ T30] audit: type=1400 audit(2000000411.729:38538): avc: denied { ioctl } for pid=20506 comm="syz.3.3502" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1189.341893][ T30] audit: type=1400 audit(2000000411.729:38539): avc: denied { read write } for pid=19483 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1189.366659][ T30] audit: type=1400 audit(2000000411.729:38540): avc: denied { open } for pid=19483 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1189.391008][ T30] audit: type=1400 audit(2000000411.729:38541): avc: denied { ioctl } for pid=19483 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1189.424627][ T7220] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1189.466857][ T30] audit: type=1400 audit(2000000411.860:38542): avc: denied { ioctl } for pid=20506 comm="syz.3.3502" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1189.492586][ T7220] usb 4-1: device descriptor read/8, error -71 [ 1189.500479][ T30] audit: type=1400 audit(2000000411.869:38543): avc: denied { read write } for pid=16631 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1189.523056][T20547] netlink: 'syz.1.3512': attribute type 2 has an invalid length. [ 1189.529836][ T30] audit: type=1400 audit(2000000411.869:38544): avc: denied { read write open } for pid=16631 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1189.534878][T20547] netlink: 'syz.1.3512': attribute type 1 has an invalid length. [ 1189.607775][ T7220] usb usb4-port1: unable to enumerate USB device [ 1189.640158][ T30] audit: type=1400 audit(2000000411.869:38545): avc: denied { ioctl } for pid=16631 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1189.644761][T20545] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1189.667149][ T30] audit: type=1400 audit(2000000411.897:38546): avc: denied { create } for pid=20543 comm="syz.7.3514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1189.745041][T19580] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1189.905330][T19580] usb 8-1: Using ep0 maxpacket: 8 [ 1189.912746][T19580] usb 8-1: config 0 has an invalid interface number: 31 but max is 0 [ 1190.450806][T17076] vhci_hcd: vhci_device speed not set [ 1190.667602][T19580] usb 8-1: config 0 has no interface number 0 [ 1190.682150][T19580] usb 8-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1190.691659][T19580] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.704472][T19580] usb 8-1: Product: syz [ 1190.708697][T19580] usb 8-1: Manufacturer: syz [ 1190.728620][T19580] usb 8-1: SerialNumber: syz [ 1190.741815][T19580] usb 8-1: config 0 descriptor?? [ 1191.787292][T19580] uvcvideo 8-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1191.846934][T19580] uvcvideo 8-1:0.31: No valid video chain found. [ 1191.929170][T19580] usb 8-1: USB disconnect, device number 23 [ 1193.169153][T20593] fuse: Bad value for 'rootmode' [ 1194.740395][ T30] kauditd_printk_skb: 251 callbacks suppressed [ 1194.740412][ T30] audit: type=1400 audit(2000000416.836:38798): avc: denied { read write } for pid=20613 comm="syz.7.3531" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1194.832893][ T30] audit: type=1400 audit(2000000416.836:38799): avc: denied { open } for pid=20613 comm="syz.7.3531" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1194.979526][T20615] qnx6: unable to read the first superblock [ 1194.985719][T20615] qnx6: unable to read the first superblock [ 1194.992064][T20615] qnx6: unable to read the first superblock [ 1195.029122][ T30] audit: type=1400 audit(2000000416.864:38800): avc: denied { ioctl } for pid=20613 comm="syz.7.3531" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1195.075488][T19670] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1195.126071][ T30] audit: type=1400 audit(2000000416.911:38801): avc: denied { execmem } for pid=20613 comm="syz.7.3531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1195.175534][ T30] audit: type=1400 audit(2000000417.032:38802): avc: denied { read write } for pid=18257 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1195.225019][ T30] audit: type=1400 audit(2000000417.032:38803): avc: denied { open } for pid=18257 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1195.306615][ T30] audit: type=1400 audit(2000000417.032:38804): avc: denied { ioctl } for pid=18257 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1195.309282][T19670] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1195.657227][ T30] audit: type=1400 audit(2000000417.060:38805): avc: denied { create } for pid=20613 comm="syz.7.3531" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1195.752784][ T30] audit: type=1400 audit(2000000417.088:38806): avc: denied { search } for pid=20584 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1195.858875][T20630] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1196.088281][T19670] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1196.905121][T19670] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1197.348237][T20650] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3539'. [ 1197.488388][T20650] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3539'. [ 1197.599234][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1197.609728][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1197.623203][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1197.640675][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1197.649285][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1197.954051][T19670] bridge_slave_1: left allmulticast mode [ 1197.987139][T19670] bridge_slave_1: left promiscuous mode [ 1198.011406][T19670] bridge0: port 2(bridge_slave_1) entered disabled state [ 1198.085659][T19670] bridge_slave_0: left allmulticast mode [ 1198.091866][T19670] bridge_slave_0: left promiscuous mode [ 1198.121232][T19670] bridge0: port 1(bridge_slave_0) entered disabled state [ 1198.244406][T19666] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1198.447273][T19666] usb 2-1: Using ep0 maxpacket: 16 [ 1198.460738][T19666] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1198.496033][T19666] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice=e5.00 [ 1198.518596][T19666] usb 2-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0 [ 1198.538008][T19666] usb 2-1: Manufacturer: syz [ 1198.560651][T19666] usb 2-1: config 0 descriptor?? [ 1198.573604][T19666] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1199.863660][T17973] Bluetooth: hci4: command tx timeout [ 1199.920495][T19670] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1199.935040][T19670] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1199.970358][T19670] bond0 (unregistering): Released all slaves [ 1200.072817][ T7220] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1200.130842][ T30] kauditd_printk_skb: 381 callbacks suppressed [ 1200.130883][ T30] audit: type=1400 audit(2000000421.878:39090): avc: denied { search } for pid=20685 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1200.253985][ T7220] usb 9-1: device descriptor read/64, error -71 [ 1200.308064][T19670] tipc: Left network mode [ 1200.484276][ T30] audit: type=1400 audit(2000000421.906:39091): avc: denied { module_request } for pid=20686 comm="syz.3.3545" kmod="fs-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1200.564376][ T7220] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1201.018536][ T30] audit: type=1400 audit(2000000421.906:39092): avc: denied { search } for pid=20685 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1831 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1201.043580][T20696] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1201.054637][ T7220] usb 9-1: device descriptor read/64, error -71 [ 1201.065552][T20695] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1201.080329][T20696] audit: audit_lost=318 audit_rate_limit=0 audit_backlog_limit=64 [ 1201.098762][T20695] audit: audit_lost=319 audit_rate_limit=0 audit_backlog_limit=64 [ 1201.113363][T18257] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1201.126170][T20696] audit: backlog limit exceeded [ 1201.145180][T20695] audit: backlog limit exceeded [ 1201.161875][T17076] usb 2-1: USB disconnect, device number 100 [ 1201.195230][ T7220] usb usb9-port1: attempt power cycle [ 1201.798379][ T7220] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1201.826941][ T7220] usb 9-1: device descriptor read/8, error -71 [ 1201.951881][T20655] chnl_net:caif_netlink_parms(): no params data found [ 1202.084767][T17973] Bluetooth: hci4: command tx timeout [ 1202.105084][ T7220] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1202.276009][ T7220] usb 9-1: device descriptor read/8, error -71 [ 1202.393124][ T7220] usb usb9-port1: unable to enumerate USB device [ 1202.441777][T20721] qnx6: unable to read the first superblock [ 1202.447865][T20721] qnx6: unable to read the first superblock [ 1202.453741][T20721] qnx6: unable to read the first superblock [ 1202.942322][T19670] hsr_slave_0: left promiscuous mode [ 1202.967462][T19670] hsr_slave_1: left promiscuous mode [ 1202.999359][T19670] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1203.155849][T19670] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1203.403774][T19670] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1203.411293][T19670] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1203.520249][T19670] batadv_slave_0: left promiscuous mode [ 1203.535941][T19670] veth1_macvtap: left promiscuous mode [ 1203.548753][T19670] veth0_macvtap: left promiscuous mode [ 1203.561381][T19670] veth1_vlan: left promiscuous mode [ 1203.684227][T19670] veth0_vlan: left promiscuous mode [ 1203.966086][T16998] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1204.307298][T17973] Bluetooth: hci4: command tx timeout [ 1204.530814][T16998] usb 8-1: Using ep0 maxpacket: 16 [ 1204.545918][T16998] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1204.582303][T16998] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice=e5.00 [ 1204.700415][T16998] usb 8-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0 [ 1204.736867][T16998] usb 8-1: Manufacturer: syz [ 1204.751577][T20756] qnx6: unable to read the first superblock [ 1204.757673][T20756] qnx6: unable to read the first superblock [ 1204.763628][T20756] qnx6: unable to read the first superblock [ 1205.046304][T16998] usb 8-1: config 0 descriptor?? [ 1205.069466][T16998] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1205.486043][ T30] kauditd_printk_skb: 300 callbacks suppressed [ 1205.486057][ T30] audit: type=1400 audit(2000000426.891:39379): avc: denied { read } for pid=20760 comm="syz.3.3560" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1205.515148][ C1] vkms_vblank_simulate: vblank timer overrun [ 1205.943572][ T30] audit: type=1400 audit(2000000426.891:39380): avc: denied { open } for pid=20760 comm="syz.3.3560" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1206.033368][ T30] audit: type=1400 audit(2000000426.948:39381): avc: denied { read } for pid=20762 comm="syz.1.3561" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1207.013602][ T30] audit: type=1400 audit(2000000426.948:39382): avc: denied { open } for pid=20762 comm="syz.1.3561" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1207.041595][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1207.043918][T17973] Bluetooth: hci4: command tx timeout [ 1207.059066][ T30] audit: type=1400 audit(2000000426.957:39383): avc: denied { ioctl } for pid=20762 comm="syz.1.3561" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1207.096359][ T30] audit: type=1400 audit(2000000426.957:39384): avc: denied { prog_load } for pid=20762 comm="syz.1.3561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1207.118660][ T30] audit: type=1400 audit(2000000426.957:39385): avc: denied { bpf } for pid=20762 comm="syz.1.3561" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1207.143947][ T30] audit: type=1400 audit(2000000426.957:39386): avc: denied { perfmon } for pid=20762 comm="syz.1.3561" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1207.169726][ T30] audit: type=1400 audit(2000000427.368:39387): avc: denied { read write } for pid=20760 comm="syz.3.3560" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1207.193385][ C1] vkms_vblank_simulate: vblank timer overrun [ 1207.200709][T17076] usb 4-1: new full-speed USB device number 120 using dummy_hcd [ 1207.201148][T16998] usb 8-1: USB disconnect, device number 24 [ 1207.213433][ T30] audit: type=1400 audit(2000000427.368:39388): avc: denied { open } for pid=20760 comm="syz.3.3560" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1207.383588][T17076] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1207.617119][T17076] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1207.641621][T17076] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 1207.672348][T17076] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1207.680018][T20782] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3566'. [ 1207.687801][T17076] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1207.951286][T17076] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1207.967395][T17076] usb 4-1: Product: syz [ 1207.983638][T17076] usb 4-1: Manufacturer: syz [ 1208.022142][T17076] usb 4-1: SerialNumber: syz [ 1209.039607][T19670] team0 (unregistering): Port device team_slave_1 removed [ 1209.489365][T19670] team0 (unregistering): Port device team_slave_0 removed [ 1209.605746][T20795] netlink: 'syz.1.3569': attribute type 27 has an invalid length. [ 1210.849371][ T30] kauditd_printk_skb: 130 callbacks suppressed [ 1210.849382][ T30] audit: type=1400 audit(2000000431.905:39519): avc: denied { create } for pid=20809 comm="syz.7.3573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1210.903940][ T30] audit: type=1400 audit(2000000431.961:39520): avc: denied { bind } for pid=20809 comm="syz.7.3573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1211.041863][ T30] audit: type=1400 audit(2000000431.989:39521): avc: denied { execmem } for pid=20809 comm="syz.7.3573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1211.214438][ T30] audit: type=1400 audit(2000000432.214:39522): avc: denied { read } for pid=20809 comm="syz.7.3573" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1211.657674][ T30] audit: type=1400 audit(2000000432.214:39523): avc: denied { open } for pid=20809 comm="syz.7.3573" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1211.685509][ T30] audit: type=1400 audit(2000000432.214:39524): avc: denied { ioctl } for pid=20809 comm="syz.7.3573" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1211.807660][T20655] bridge0: port 1(bridge_slave_0) entered blocking state [ 1211.842600][T20655] bridge0: port 1(bridge_slave_0) entered disabled state [ 1211.850453][T20655] bridge_slave_0: entered allmulticast mode [ 1211.867767][T20655] bridge_slave_0: entered promiscuous mode [ 1211.872005][ T30] audit: type=1400 audit(2000000432.719:39525): avc: denied { read write } for pid=19483 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1211.951111][T17076] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 1211.963076][T20655] bridge0: port 2(bridge_slave_1) entered blocking state [ 1211.969070][ T30] audit: type=1400 audit(2000000432.719:39526): avc: denied { open } for pid=19483 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1211.970170][T20655] bridge0: port 2(bridge_slave_1) entered disabled state [ 1211.994356][ C0] vkms_vblank_simulate: vblank timer overrun [ 1212.009215][T17076] usb 4-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 1212.025689][T17076] usb 4-1: found format II with max.bitrate = 128, frame size=0 [ 1212.054692][T17076] usb 4-1: 2:1: All rates were zero [ 1212.335276][ T30] audit: type=1400 audit(2000000432.719:39527): avc: denied { ioctl } for pid=19483 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1212.668244][T20655] bridge_slave_1: entered allmulticast mode [ 1212.684370][T17076] usb 4-1: USB disconnect, device number 120 [ 1212.700554][T20655] bridge_slave_1: entered promiscuous mode [ 1212.764164][ T30] audit: type=1400 audit(2000000432.812:39528): avc: denied { read write } for pid=16631 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1212.790710][T17386] udevd[17386]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1212.948759][T20655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1212.978146][ T7534] usb 2-1: new full-speed USB device number 101 using dummy_hcd [ 1213.022179][T20655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1213.328550][T17076] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1213.375051][ T7534] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1213.531871][T17076] usb 8-1: Using ep0 maxpacket: 8 [ 1213.587845][T17076] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 1213.659667][T17076] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1213.754244][T17076] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1213.872100][T17076] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 10982, setting to 64 [ 1213.921789][ T7534] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1213.945158][ T7534] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 1213.970376][ T7534] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1213.973333][T17076] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1213.998843][ T7534] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1214.010820][ T7534] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.021566][ T7534] usb 2-1: Product: syz [ 1214.026325][ T7534] usb 2-1: Manufacturer: syz [ 1214.032927][ T7534] usb 2-1: SerialNumber: syz [ 1214.091532][T17076] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1214.142418][T17076] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.206459][T17076] usbtmc 8-1:16.0: bulk endpoints not found [ 1214.224954][T20655] team0: Port device team_slave_0 added [ 1214.338239][T20655] team0: Port device team_slave_1 added [ 1214.463029][T20854] net_ratelimit: 12 callbacks suppressed [ 1214.463245][T20854] netlink: zone id is out of range [ 1214.477593][T20854] netlink: zone id is out of range [ 1214.482959][T20854] netlink: zone id is out of range [ 1214.488774][T20854] netlink: zone id is out of range [ 1214.494218][T20854] netlink: zone id is out of range [ 1214.499592][T20854] netlink: zone id is out of range [ 1214.505147][T20854] netlink: zone id is out of range [ 1214.510599][T20854] netlink: zone id is out of range [ 1214.516105][T20854] netlink: zone id is out of range [ 1214.521784][T20854] netlink: zone id is out of range [ 1214.638222][T19670] IPVS: stop unused estimator thread 0... [ 1214.677631][T20655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1214.698659][T20655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1214.821887][T20655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1214.840327][T20655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1214.850487][T20655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1214.876618][ C0] vkms_vblank_simulate: vblank timer overrun [ 1214.884365][T20655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1215.029145][T20655] hsr_slave_0: entered promiscuous mode [ 1215.036465][T20655] hsr_slave_1: entered promiscuous mode [ 1215.045168][T20655] debugfs: 'hsr0' already exists in 'hsr' [ 1215.060149][T20655] Cannot create hsr debugfs directory [ 1215.071059][T16201] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1215.252832][T16201] usb 4-1: Using ep0 maxpacket: 32 [ 1215.262530][T16201] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1215.297826][T16201] usb 4-1: config 0 has no interface number 0 [ 1215.319729][T16201] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1215.338505][T16201] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.367883][T16201] usb 4-1: Product: syz [ 1215.375837][T16201] usb 4-1: Manufacturer: syz [ 1215.446544][T17973] Bluetooth: hci5: unexpected event for opcode 0x0c26 [ 1215.488964][T16201] usb 4-1: SerialNumber: syz [ 1215.501452][T16201] usb 4-1: config 0 descriptor?? [ 1215.513275][T16201] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1215.547206][ T7534] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 1216.024867][ T7534] usb 2-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 1216.037196][ T7534] usb 2-1: found format II with max.bitrate = 128, frame size=0 [ 1216.045796][T16201] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1216.057863][ T7534] usb 2-1: 2:1: All rates were zero [ 1216.069584][T16201] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1216.107244][T20655] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1216.109623][ T7534] usb 2-1: USB disconnect, device number 101 [ 1216.160941][T20655] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1216.192154][T20655] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1216.240494][ T30] kauditd_printk_skb: 318 callbacks suppressed [ 1216.240509][ T30] audit: type=1400 audit(2000000436.947:39847): avc: denied { ioctl } for pid=20855 comm="syz.3.3583" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1216.279421][T20655] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1216.336187][T19557] udevd[19557]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1216.408313][ T30] audit: type=1400 audit(2000000436.956:39848): avc: denied { search } for pid=20876 comm="sed" name="resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1216.463256][ T30] audit: type=1400 audit(2000000436.956:39849): avc: denied { read } for pid=20876 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1876 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1216.469994][T20887] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3586'. [ 1216.534136][T20887] netlink: 'syz.8.3586': attribute type 10 has an invalid length. [ 1216.539177][ T30] audit: type=1400 audit(2000000436.956:39850): avc: denied { open } for pid=20876 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1876 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1216.576874][T20887] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1216.618306][T17076] usb 8-1: USB disconnect, device number 25 [ 1216.652528][ T30] audit: type=1400 audit(2000000436.956:39851): avc: denied { getattr } for pid=20876 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1876 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1216.721345][ T30] audit: type=1400 audit(2000000437.069:39852): avc: denied { read write } for pid=19483 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1216.754848][T20891] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1216.770921][T20891] audit: audit_lost=325 audit_rate_limit=0 audit_backlog_limit=64 [ 1216.783847][T20893] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1216.802659][T20891] audit: backlog limit exceeded [ 1216.806336][T20655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1217.000579][T20655] 8021q: adding VLAN 0 to HW filter on device team0 [ 1217.047165][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 1217.054432][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1217.260131][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 1217.267313][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1218.241951][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1218.242237][ T7743] usb 4-1: USB disconnect, device number 121 [ 1218.280317][T20894] Cannot find del_set index 3 as target [ 1218.395218][ T7743] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1218.426592][ T7743] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1218.628370][T20912] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1219.034494][ T7743] quatech2 4-1:0.51: device disconnected [ 1220.378606][T20655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1221.601919][ T30] kauditd_printk_skb: 254 callbacks suppressed [ 1221.601934][ T30] audit: type=1400 audit(2000000441.951:40105): avc: denied { getattr } for pid=20935 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1221.633560][ C0] vkms_vblank_simulate: vblank timer overrun [ 1221.859614][ T30] audit: type=1400 audit(2000000441.998:40106): avc: denied { search } for pid=20935 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1221.881954][ C0] vkms_vblank_simulate: vblank timer overrun [ 1221.977174][ T30] audit: type=1400 audit(2000000441.998:40107): avc: denied { search } for pid=20935 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1831 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1222.114632][T20951] netlink: 'syz.7.3597': attribute type 4 has an invalid length. [ 1222.147304][ T30] audit: type=1400 audit(2000000441.998:40108): avc: denied { search } for pid=20935 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1222.233820][ T30] audit: type=1400 audit(2000000441.998:40109): avc: denied { search } for pid=20935 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1222.257218][ C0] vkms_vblank_simulate: vblank timer overrun [ 1222.287741][ T30] audit: type=1400 audit(2000000441.998:40110): avc: denied { read open } for pid=20935 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1222.313372][ C0] vkms_vblank_simulate: vblank timer overrun [ 1222.415686][ T30] audit: type=1400 audit(2000000441.998:40111): avc: denied { getattr } for pid=20935 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1222.527990][T20959] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1222.534762][T20959] audit: audit_lost=327 audit_rate_limit=0 audit_backlog_limit=64 [ 1222.542585][T20959] audit: backlog limit exceeded [ 1224.901643][T20655] veth0_vlan: entered promiscuous mode [ 1225.351706][T20655] veth1_vlan: entered promiscuous mode [ 1225.651242][T20655] veth0_macvtap: entered promiscuous mode [ 1226.162768][T20655] veth1_macvtap: entered promiscuous mode [ 1226.782527][T20655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1226.812698][T20655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1226.827623][T19670] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.875137][T19670] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.992350][ T1015] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.001815][ T30] kauditd_printk_skb: 177 callbacks suppressed [ 1227.001833][ T30] audit: type=1400 audit(2000000447.003:40280): avc: denied { execmem } for pid=20987 comm="syz.8.3606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1227.110348][ T1015] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.312728][T20995] random: crng reseeded on system resumption [ 1227.360293][T20995] comedi comedi3: pcl818: I/O port conflict (0xffffffff80008001,16) [ 1227.470215][ T30] audit: type=1400 audit(2000000447.124:40281): avc: denied { create } for pid=20655 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1227.527561][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1227.543394][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1227.604900][ T30] audit: type=1400 audit(2000000447.124:40282): avc: denied { write } for pid=20655 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1227.710058][T21000] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3606'. [ 1227.736051][ T30] audit: type=1400 audit(2000000447.124:40283): avc: denied { read } for pid=20655 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1227.769388][T21000] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3606'. [ 1227.860916][ T30] audit: type=1400 audit(2000000447.143:40284): avc: denied { read write } for pid=20990 comm="syz.7.3607" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1228.069225][T21002] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1228.076511][T21002] audit: audit_lost=331 audit_rate_limit=0 audit_backlog_limit=64 [ 1228.082637][T20655] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1228.091043][T21002] audit: backlog limit exceeded [ 1228.179896][ T5490] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1228.227509][T16885] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1228.254896][T16885] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1230.613911][T21059] netlink: 'syz.8.3618': attribute type 4 has an invalid length. [ 1230.625715][T21059] netlink: 'syz.8.3618': attribute type 4 has an invalid length. [ 1230.924381][T21066] sit0: entered promiscuous mode [ 1230.956537][T21066] netlink: 'syz.3.3613': attribute type 1 has an invalid length. [ 1230.988026][T21066] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3613'. [ 1231.168113][T21070] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1231.204152][T21070] team0: Port device batadv1 added [ 1231.321005][ T5939] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1231.358982][T21070] hub 9-0:1.0: USB hub found [ 1231.378871][T21070] hub 9-0:1.0: 1 port detected [ 1231.588393][ T5939] usb 4-1: Using ep0 maxpacket: 32 [ 1231.595450][ T5939] usb 4-1: config 1 has an invalid interface number: 5 but max is 2 [ 1231.610651][ T5939] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1231.637112][ T5939] usb 4-1: config 1 has an invalid interface number: 238 but max is 2 [ 1232.052744][ T5939] usb 4-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 1232.061760][ T5939] usb 4-1: config 1 has no interface number 1 [ 1232.067838][ T5939] usb 4-1: config 1 has no interface number 3 [ 1232.075014][ T5939] usb 4-1: too many endpoints for config 1 interface 5 altsetting 249: 41, using maximum allowed: 30 [ 1232.086773][ T5939] usb 4-1: config 1 interface 5 altsetting 249 has 0 endpoint descriptors, different from the interface descriptor's value: 41 [ 1232.110499][ T5939] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 7 [ 1232.164042][ T5939] usb 4-1: config 1 interface 5 has no altsetting 0 [ 1232.238526][ T5939] usb 4-1: config 1 interface 2 has no altsetting 0 [ 1232.377364][ T30] kauditd_printk_skb: 472 callbacks suppressed [ 1232.377381][ T30] audit: type=1400 audit(2000000451.951:40714): avc: denied { execmem } for pid=21088 comm="syz.9.3624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1232.443576][ T5939] usb 4-1: string descriptor 0 read error: -71 [ 1232.449859][ T5939] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1232.464827][ T30] audit: type=1400 audit(2000000452.035:40715): avc: denied { search } for pid=21089 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1232.507203][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.523531][ T30] audit: type=1400 audit(2000000452.035:40716): avc: denied { search } for pid=21089 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1831 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1232.565406][ T5939] usb 4-1: can't set config #1, error -71 [ 1232.600111][ T5939] usb 4-1: USB disconnect, device number 122 [ 1232.664573][ T30] audit: type=1400 audit(2000000452.035:40717): avc: denied { search } for pid=21089 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1232.796351][ T30] audit: type=1400 audit(2000000452.035:40718): avc: denied { search } for pid=21089 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1232.819835][ C0] vkms_vblank_simulate: vblank timer overrun [ 1232.939437][T21106] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1232.963292][T21103] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1232.971675][T21106] audit: audit_lost=347 audit_rate_limit=0 audit_backlog_limit=64 [ 1232.990335][T21103] audit: audit_lost=348 audit_rate_limit=0 audit_backlog_limit=64 [ 1233.010952][T21106] audit: backlog limit exceeded [ 1233.698376][T21110] net_ratelimit: 14 callbacks suppressed [ 1233.698393][T21110] netlink: set zone limit has 4 unknown bytes [ 1233.908626][T21120] netlink: 256 bytes leftover after parsing attributes in process `syz.8.3629'. [ 1234.340128][T21133] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1235.266686][T21141] tmpfs: Bad value for 'huge' [ 1235.341366][T21145] kAFS: No cell specified [ 1236.975724][T21161] netlink: set zone limit has 4 unknown bytes [ 1237.775294][ T30] kauditd_printk_skb: 284 callbacks suppressed [ 1237.775306][ T30] audit: type=1400 audit(2000000457.077:41002): avc: denied { create } for pid=21173 comm="syz.3.3645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1237.810021][ T30] audit: type=1400 audit(2000000457.086:41003): avc: denied { read write } for pid=21170 comm="syz.9.3644" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1238.160252][T21171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1238.270874][ T5939] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1238.318155][T21171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1238.357143][ T30] audit: type=1400 audit(2000000457.086:41004): avc: denied { open } for pid=21170 comm="syz.9.3644" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1238.419379][ T30] audit: type=1400 audit(2000000457.086:41005): avc: denied { ioctl } for pid=21170 comm="syz.9.3644" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1238.450160][ T30] audit: type=1400 audit(2000000457.086:41006): avc: denied { read write } for pid=21173 comm="syz.3.3645" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1238.503305][ T30] audit: type=1400 audit(2000000457.086:41007): avc: denied { read write open } for pid=21173 comm="syz.3.3645" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1238.539305][ T30] audit: type=1400 audit(2000000457.086:41008): avc: denied { bpf } for pid=21173 comm="syz.3.3645" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1238.561843][ T5939] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1238.573210][ T5939] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1238.580254][ T30] audit: type=1400 audit(2000000457.086:41009): avc: denied { create } for pid=21173 comm="syz.3.3645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1238.608188][ T5939] usb 10-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1238.646484][ T5939] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.696675][ T30] audit: type=1400 audit(2000000457.086:41010): avc: denied { read write } for pid=21170 comm="syz.9.3644" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1238.720449][ C0] vkms_vblank_simulate: vblank timer overrun [ 1238.796556][ T5939] usb 10-1: Product: syz [ 1238.820112][ T5939] usb 10-1: Manufacturer: syz [ 1238.841510][ T5939] usb 10-1: SerialNumber: syz [ 1238.878651][ T5939] usb 10-1: config 0 descriptor?? [ 1238.920748][ T5939] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1238.940334][ T30] audit: type=1400 audit(2000000457.086:41011): avc: denied { open } for pid=21170 comm="syz.9.3644" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1239.131719][ T5939] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1240.186842][ T5939] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1240.207367][ T5939] usb 10-1: media controller created [ 1240.220351][ T5939] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1240.338156][T21199] kAFS: No cell specified [ 1240.652813][T21205] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3653'. [ 1240.885848][ T5939] DVB: Unable to find symbol tda10046_attach() [ 1240.926777][ T5939] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1240.970409][ T5939] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1241.044367][ T5939] dvb_usb_m920x 10-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1241.178261][ T5939] usb 10-1: USB disconnect, device number 2 [ 1241.380804][T20381] usb 2-1: new full-speed USB device number 102 using dummy_hcd [ 1241.629560][T20381] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1241.657246][T20381] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1241.699712][T20381] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 1241.745966][T20381] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1241.791324][T21222] netlink: 'syz.9.3657': attribute type 1 has an invalid length. [ 1241.805062][T20381] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1241.819184][T21222] netlink: 224 bytes leftover after parsing attributes in process `syz.9.3657'. [ 1241.854275][T20381] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.889646][T20381] usb 2-1: Product: syz [ 1241.904717][T20381] usb 2-1: Manufacturer: syz [ 1241.942999][T20381] usb 2-1: SerialNumber: syz [ 1241.985441][T21224] syzkaller0: entered promiscuous mode [ 1241.994796][T21224] syzkaller0: entered allmulticast mode [ 1242.525817][T21231] netlink: 'syz.8.3660': attribute type 8 has an invalid length. [ 1242.739408][T20381] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 1243.565533][ T30] kauditd_printk_skb: 267 callbacks suppressed [ 1243.565553][ T30] audit: type=1400 audit(2000000462.511:41246): avc: denied { execmem } for pid=21238 comm="syz.9.3663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1243.653495][T20381] usb 2-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 1243.672793][T20381] usb 2-1: found format II with max.bitrate = 128, frame size=0 [ 1243.680515][T20381] usb 2-1: 2:1: All rates were zero [ 1243.741333][T20381] usb 2-1: USB disconnect, device number 102 [ 1243.792973][T17386] udevd[17386]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1243.939481][ T30] audit: type=1400 audit(2000000462.680:41247): avc: denied { allowed } for pid=21244 comm="syz.3.3664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1244.532414][ T30] audit: type=1400 audit(2000000462.680:41248): avc: denied { read write } for pid=19483 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1244.567149][ T30] audit: type=1400 audit(2000000462.680:41249): avc: denied { open } for pid=19483 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1244.598553][ T30] audit: type=1400 audit(2000000462.680:41250): avc: denied { ioctl } for pid=19483 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1245.017636][ T30] audit: type=1400 audit(2000000462.717:41251): avc: denied { create } for pid=21244 comm="syz.3.3664" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1245.045270][ T30] audit: type=1400 audit(2000000462.717:41252): avc: denied { map } for pid=21244 comm="syz.3.3664" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=77344 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1245.400811][ T30] audit: type=1400 audit(2000000462.717:41253): avc: denied { read write } for pid=21244 comm="syz.3.3664" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=77344 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1245.550089][ T30] audit: type=1400 audit(2000000462.717:41254): avc: denied { map } for pid=21244 comm="syz.3.3664" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=77344 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1245.602548][ T30] audit: type=1400 audit(2000000462.736:41255): avc: denied { prog_load } for pid=21244 comm="syz.3.3664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1245.869588][T21264] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3663'. [ 1245.952113][T21264] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3663'. [ 1247.299955][ T5939] hid-generic 0005:0006:5508.003A: hidraw0: BLUETOOTH HID vc3.34 Device [syz0] on aa:aa:aa:aa:aa:aa [ 1247.314636][T19499] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1247.541209][T19499] usb 4-1: Using ep0 maxpacket: 16 [ 1247.660194][T19499] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1247.789099][T19499] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1247.840664][T19499] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice=e5.00 [ 1247.871384][T19499] usb 4-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0 [ 1247.901428][T19499] usb 4-1: Manufacturer: syz [ 1247.927898][T19499] usb 4-1: config 0 descriptor?? [ 1248.157499][T21282] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3674'. [ 1248.991083][ T30] kauditd_printk_skb: 207 callbacks suppressed [ 1248.991100][ T30] audit: type=1400 audit(2000000467.581:41421): avc: denied { read } for pid=21266 comm="syz.3.3669" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1249.038945][T19499] usbhid 4-1:0.0: can't add hid device: -71 [ 1249.047245][ T30] audit: type=1400 audit(2000000467.609:41422): avc: denied { open } for pid=21266 comm="syz.3.3669" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1249.054915][T19499] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1249.134361][ T30] audit: type=1326 audit(2000000467.619:41423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21290 comm="syz.7.3678" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f398c18f749 code=0x0 [ 1249.148009][T19499] usb 4-1: USB disconnect, device number 123 [ 1249.171073][ C0] vkms_vblank_simulate: vblank timer overrun [ 1249.312377][ T30] audit: type=1400 audit(2000000467.619:41424): avc: denied { write } for pid=21266 comm="syz.3.3669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1249.485469][ T30] audit: type=1400 audit(2000000467.637:41425): avc: denied { create } for pid=21289 comm="syz.9.3677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1249.521389][ T30] audit: type=1400 audit(2000000467.675:41426): avc: denied { setopt } for pid=21289 comm="syz.9.3677" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1249.543902][ T7743] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1249.751468][ T7743] usb 8-1: Using ep0 maxpacket: 16 [ 1249.775317][ T7743] usb 8-1: config 3 has an invalid interface number: 155 but max is 0 [ 1249.866060][ T7743] usb 8-1: config 3 has an invalid interface association descriptor of length 3, skipping [ 1249.893582][ T30] audit: type=1400 audit(2000000467.787:41427): avc: denied { unlink } for pid=19483 comm="syz-executor" name="file0" dev="tmpfs" ino=454 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1249.919932][ T7743] usb 8-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1249.931829][ T7743] usb 8-1: config 3 has no interface number 0 [ 1249.973298][ T7743] usb 8-1: config 3 interface 155 has no altsetting 0 [ 1249.989756][ T30] audit: type=1400 audit(2000000467.787:41428): avc: denied { read write } for pid=19483 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1250.018888][ T7743] usb 8-1: New USB device found, idVendor=05a9, idProduct=264a, bcdDevice=e5.4c [ 1250.027954][ T7743] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.038764][ T7743] usb 8-1: Product: syz [ 1250.043221][ T30] audit: type=1400 audit(2000000467.787:41429): avc: denied { open } for pid=19483 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1250.070295][ T7743] usb 8-1: Manufacturer: syz [ 1250.076886][ T7743] usb 8-1: SerialNumber: syz [ 1250.237796][ T30] audit: type=1400 audit(2000000467.787:41430): avc: denied { ioctl } for pid=19483 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1251.155418][T21317] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3683'. [ 1251.165486][T21317] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3683'. [ 1251.385165][T21323] netlink: set zone limit has 4 unknown bytes [ 1253.150242][ T7743] uvcvideo 8-1:3.155: probe with driver uvcvideo failed with error -22 [ 1253.185289][ T7743] usb 8-1: USB disconnect, device number 26 [ 1253.439345][T21347] SELinux: Context Ü is not valid (left unmapped). [ 1254.237728][ T7743] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1254.639038][ T30] kauditd_printk_skb: 202 callbacks suppressed [ 1254.639055][ T30] audit: type=1400 audit(2000000472.791:41633): avc: denied { create } for pid=21352 comm="syz.8.3696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1254.669395][ T30] audit: type=1400 audit(2000000472.810:41634): avc: denied { allowed } for pid=21352 comm="syz.8.3696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1254.704349][ T30] audit: type=1400 audit(2000000472.810:41635): avc: denied { create } for pid=21352 comm="syz.8.3696" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1254.725951][ T30] audit: type=1400 audit(2000000472.810:41636): avc: denied { map } for pid=21352 comm="syz.8.3696" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=77666 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1254.733241][T20215] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1254.750320][ C0] vkms_vblank_simulate: vblank timer overrun [ 1254.770829][ T30] audit: type=1400 audit(2000000472.810:41637): avc: denied { read write } for pid=21352 comm="syz.8.3696" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=77666 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1254.796282][ T30] audit: type=1400 audit(2000000472.820:41638): avc: denied { read } for pid=21354 comm="syz.9.3697" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1254.797633][ T7743] usb 2-1: Using ep0 maxpacket: 8 [ 1254.819512][ C0] vkms_vblank_simulate: vblank timer overrun [ 1254.820467][ T30] audit: type=1400 audit(2000000472.820:41639): avc: denied { open } for pid=21354 comm="syz.9.3697" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1254.827805][ T7743] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1254.831868][ T30] audit: type=1400 audit(2000000472.820:41640): avc: denied { connect } for pid=21352 comm="syz.8.3696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1254.854464][ C0] vkms_vblank_simulate: vblank timer overrun [ 1254.873608][ T7743] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 1254.897012][ T30] audit: type=1400 audit(2000000472.820:41641): avc: denied { ioctl } for pid=21354 comm="syz.9.3697" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1254.903586][ T7743] usb 2-1: config 0 has no interface number 0 [ 1254.924445][ T30] audit: type=1400 audit(2000000472.820:41642): avc: denied { prog_load } for pid=21354 comm="syz.9.3697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1254.932274][ T7743] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1254.972520][T20215] usb 4-1: Using ep0 maxpacket: 16 [ 1254.989811][T20215] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1255.009811][T20215] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1255.019721][ T7743] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1255.030013][ T7743] usb 2-1: config 0 interface 88 has no altsetting 0 [ 1255.037853][T20215] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice=e5.00 [ 1255.047417][T20215] usb 4-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0 [ 1255.062233][ T7743] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1255.072339][ T7743] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1255.097304][ T7743] usb 2-1: Product: syz [ 1255.101488][ T7743] usb 2-1: Manufacturer: syz [ 1255.136953][T20215] usb 4-1: Manufacturer: syz [ 1255.164606][T20215] usb 4-1: config 0 descriptor?? [ 1255.177575][ T7743] usb 2-1: SerialNumber: syz [ 1255.221685][ T7743] usb 2-1: config 0 descriptor?? [ 1255.636815][ T7743] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input79 [ 1255.667765][ T7743] usb 2-1: USB disconnect, device number 103 [ 1255.728276][T19499] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1256.397104][T20215] usbhid 4-1:0.0: can't add hid device: -71 [ 1256.417288][T20215] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1256.418521][T19499] usb 8-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=80.99 [ 1256.435467][T20215] usb 4-1: USB disconnect, device number 124 [ 1256.456584][T19499] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.470102][T19499] usb 8-1: Product: syz [ 1256.474306][T19499] usb 8-1: Manufacturer: syz [ 1256.478835][T21384] kAFS: No cell specified [ 1256.497238][T19499] usb 8-1: SerialNumber: syz [ 1256.505836][T19499] usb 8-1: config 0 descriptor?? [ 1257.496238][T19499] usb 8-1: USB disconnect, device number 27 [ 1258.540998][T21408] netlink: set zone limit has 4 unknown bytes [ 1258.619323][T21415] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3707'. [ 1258.649380][T21415] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3707'. [ 1258.721356][T21417] FAULT_INJECTION: forcing a failure. [ 1258.721356][T21417] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1258.758501][T21417] CPU: 1 UID: 0 PID: 21417 Comm: syz.3.3713 Not tainted syzkaller #0 PREEMPT(full) [ 1258.758526][T21417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1258.758536][T21417] Call Trace: [ 1258.758542][T21417] [ 1258.758549][T21417] dump_stack_lvl+0x16c/0x1f0 [ 1258.758573][T21417] should_fail_ex+0x512/0x640 [ 1258.758596][T21417] _copy_from_user+0x2e/0xd0 [ 1258.758612][T21417] copy_msghdr_from_user+0x98/0x160 [ 1258.758630][T21417] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1258.758645][T21417] ? __lock_acquire+0x433/0x22f0 [ 1258.758685][T21417] ___sys_sendmsg+0xfe/0x1d0 [ 1258.758704][T21417] ? __pfx____sys_sendmsg+0x10/0x10 [ 1258.758720][T21417] ? __lock_acquire+0x433/0x22f0 [ 1258.758775][T21417] __sys_sendmsg+0x16d/0x220 [ 1258.758791][T21417] ? __pfx___sys_sendmsg+0x10/0x10 [ 1258.758826][T21417] do_syscall_64+0xcd/0xf80 [ 1258.758847][T21417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1258.758864][T21417] RIP: 0033:0x7f4ee618f749 [ 1258.758877][T21417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1258.758893][T21417] RSP: 002b:00007f4ee7043038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1258.758909][T21417] RAX: ffffffffffffffda RBX: 00007f4ee63e5fa0 RCX: 00007f4ee618f749 [ 1258.758919][T21417] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1258.758930][T21417] RBP: 00007f4ee7043090 R08: 0000000000000000 R09: 0000000000000000 [ 1258.758939][T21417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1258.758949][T21417] R13: 00007f4ee63e6038 R14: 00007f4ee63e5fa0 R15: 00007ffc429a4be8 [ 1258.758973][T21417] [ 1259.251331][T21422] kAFS: No cell specified [ 1259.280974][T21424] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27920 sclass=netlink_route_socket pid=21424 comm=syz.9.3715 [ 1259.384844][T21429] ubi: mtd0 is already attached to ubi31 [ 1260.025201][ T30] kauditd_printk_skb: 288 callbacks suppressed [ 1260.025218][ T30] audit: type=1400 audit(2000000477.805:41931): avc: denied { write } for pid=21402 comm="syz.8.3711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1260.148219][ T30] audit: type=1400 audit(2000000478.020:41932): avc: denied { read write } for pid=18257 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1260.359014][ T30] audit: type=1400 audit(2000000478.020:41933): avc: denied { open } for pid=18257 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1260.870155][ T30] audit: type=1400 audit(2000000478.020:41934): avc: denied { ioctl } for pid=18257 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1260.911841][ T30] audit: type=1400 audit(2000000478.048:41935): avc: denied { read write } for pid=20655 comm="syz-executor" name="loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1260.943775][ T30] audit: type=1400 audit(2000000478.048:41936): avc: denied { open } for pid=20655 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1261.011967][ T30] audit: type=1400 audit(2000000478.048:41937): avc: denied { ioctl } for pid=20655 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=656 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1261.037861][ T30] audit: type=1400 audit(2000000478.077:41938): avc: denied { prog_load } for pid=21438 comm="syz.3.3719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1261.057207][ T30] audit: type=1400 audit(2000000478.077:41939): avc: denied { bpf } for pid=21438 comm="syz.3.3719" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1261.078201][ T30] audit: type=1400 audit(2000000478.077:41940): avc: denied { perfmon } for pid=21438 comm="syz.3.3719" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1261.235743][T20381] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1261.543129][T20381] usb 10-1: Using ep0 maxpacket: 16 [ 1261.605511][T20381] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1261.617183][T20381] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1261.780442][T20381] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice=e5.00 [ 1261.820978][T20381] usb 10-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0 [ 1261.860017][T20381] usb 10-1: Manufacturer: syz [ 1261.884104][T20381] usb 10-1: config 0 descriptor?? [ 1262.228485][T21460] 9pnet_fd: Insufficient options for proto=fd [ 1262.235927][T21460] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21460 comm=syz.1.3725 [ 1262.430623][T19499] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1263.041256][T19499] usb 4-1: Using ep0 maxpacket: 16 [ 1264.260510][T19499] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1264.271414][T19499] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1264.281507][T19499] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1264.299116][T19499] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1264.390302][T19499] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1264.445721][T19499] usb 4-1: config 0 descriptor?? [ 1264.548951][T20381] usbhid 10-1:0.0: can't add hid device: -71 [ 1264.555015][T20381] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1264.607597][T20381] usb 10-1: USB disconnect, device number 3 [ 1264.879555][T21482] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1265.191165][T17973] Bluetooth: hci2: unexpected event for opcode 0x2006 [ 1265.237475][T21458] random: crng reseeded on system resumption [ 1265.286083][T19499] input: HID 0955:7214 Haptics as /devices/virtual/input/input80 [ 1265.290523][T21474] 9pnet_fd: Insufficient options for proto=fd [ 1265.337865][T19499] shield 0003:0955:7214.003B: Registered Thunderstrike controller [ 1265.362023][T19499] shield 0003:0955:7214.003B: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 1265.414026][ T30] kauditd_printk_skb: 179 callbacks suppressed [ 1265.414042][ T30] audit: type=1400 audit(2000000482.950:42120): avc: denied { ioctl } for pid=21483 comm="syz.1.3731" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1265.488844][ T30] audit: type=1400 audit(2000000483.015:42121): avc: denied { ioctl } for pid=21483 comm="syz.1.3731" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1265.544067][T16998] shield 0003:0955:7214.003B: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1265.548950][T17076] usb 4-1: USB disconnect, device number 125 [ 1265.561845][ T7743] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1265.568016][T16998] shield 0003:0955:7214.003B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1265.605434][ T30] audit: type=1400 audit(2000000483.109:42122): avc: denied { ioctl } for pid=21483 comm="syz.1.3731" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1265.611391][T16998] shield 0003:0955:7214.003B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1265.631360][ T30] audit: type=1400 audit(2000000483.109:42123): avc: denied { read write } for pid=20655 comm="syz-executor" name="loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1265.672422][T16998] shield 0003:0955:7214.003B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1265.684653][ T30] audit: type=1400 audit(2000000483.118:42124): avc: denied { open } for pid=20655 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1265.716479][T21486] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3732'. [ 1265.723713][ T30] audit: type=1400 audit(2000000483.118:42125): avc: denied { ioctl } for pid=20655 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=656 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1265.730886][T21486] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 1265.754928][ T30] audit: type=1400 audit(2000000483.165:42126): avc: denied { ioctl } for pid=21483 comm="syz.1.3731" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1265.759959][T21486] macvlan2: entered allmulticast mode [ 1265.787835][ T30] audit: type=1400 audit(2000000483.193:42127): avc: denied { create } for pid=21485 comm="syz.9.3732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1265.794348][T21486] netdevsim netdevsim9 netdevsim0: entered allmulticast mode [ 1265.824181][ T30] audit: type=1400 audit(2000000483.221:42128): avc: denied { ioctl } for pid=21483 comm="syz.1.3731" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1265.850752][ T30] audit: type=1400 audit(2000000483.231:42129): avc: denied { ioctl } for pid=21485 comm="syz.9.3732" path="socket:[78301]" dev="sockfs" ino=78301 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1265.879388][ T7743] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1265.889205][ T7743] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1265.904364][ T7743] usb 2-1: config 0 descriptor?? [ 1265.917976][ T7743] cp210x 2-1:0.0: cp210x converter detected [ 1266.582519][ T7743] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1266.631933][T20381] usb 9-1: new full-speed USB device number 20 using dummy_hcd [ 1266.879401][T21484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1267.084407][T20381] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1267.117360][T21484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1267.235027][T20381] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1267.442094][T20381] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 1267.573596][ T7743] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1267.583346][T20381] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1267.630972][T20381] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1267.668722][T20381] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.689376][T20381] usb 9-1: Product: syz [ 1267.700137][T20381] usb 9-1: Manufacturer: syz [ 1267.709706][T20381] usb 9-1: SerialNumber: syz [ 1267.740408][T21500] netlink: set zone limit has 4 unknown bytes [ 1268.611957][T16998] usb 2-1: USB disconnect, device number 104 [ 1268.695290][T16998] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1268.757547][T16998] cp210x 2-1:0.0: device disconnected [ 1269.260749][T20381] usb 9-1: 2:1 : no or invalid class specific endpoint descriptor [ 1269.290875][T20381] usb 9-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 1269.305727][T20381] usb 9-1: found format II with max.bitrate = 128, frame size=0 [ 1269.353274][T20381] usb 9-1: 2:1: All rates were zero [ 1269.362055][T21517] afs: Unknown parameter 'dy' [ 1269.450209][T20381] usb 9-1: USB disconnect, device number 20 [ 1269.548360][T17386] udevd[17386]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1269.579374][T21522] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1269.636085][T16998] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1269.817847][T16998] usb 4-1: Using ep0 maxpacket: 16 [ 1269.871410][ T5937] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1269.968975][T16998] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1269.983976][T16998] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1270.053806][T16998] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice=e5.00 [ 1270.074392][ T5937] usb 2-1: Using ep0 maxpacket: 8 [ 1270.074494][T16998] usb 4-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0 [ 1270.168030][T16998] usb 4-1: Manufacturer: syz [ 1270.179440][T16998] usb 4-1: config 0 descriptor?? [ 1270.185657][ T5937] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1270.228595][ T5937] usb 2-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=b8.92 [ 1270.271448][ T5937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1270.308542][ T5937] cypress_m8 2-1:2.0: DeLorme Earthmate USB converter detected [ 1270.344497][ T5937] earthmate ttyUSB0: required endpoint is missing [ 1270.649768][T21537] futex_wake_op: syz.9.3749 tries to shift op by -1; fix this program [ 1270.790608][T19499] usb 8-1: new full-speed USB device number 28 using dummy_hcd [ 1270.825015][ T30] kauditd_printk_skb: 237 callbacks suppressed [ 1270.825030][ T30] audit: type=1400 audit(2000000488.010:42367): avc: denied { ioctl } for pid=21532 comm="syz.7.3748" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1270.902227][T21544] netlink: 'syz.1.3744': attribute type 1 has an invalid length. [ 1270.917234][T16998] usbhid 4-1:0.0: can't add hid device: -71 [ 1270.941407][T16998] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1270.978134][ T30] audit: type=1400 audit(2000000488.039:42368): avc: denied { ioctl } for pid=21532 comm="syz.7.3748" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1271.015311][T19499] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1271.067621][T16998] usb 4-1: USB disconnect, device number 126 [ 1271.074353][T19499] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1271.124342][ T30] audit: type=1400 audit(2000000488.067:42369): avc: denied { create } for pid=21518 comm="syz.3.3742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1271.127592][T19499] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 1271.192795][T19499] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1271.262164][ T30] audit: type=1400 audit(2000000488.067:42370): avc: denied { read } for pid=21518 comm="syz.3.3742" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1271.298925][T19499] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1271.339446][T19499] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.366893][ T30] audit: type=1400 audit(2000000488.067:42371): avc: denied { open } for pid=21518 comm="syz.3.3742" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1271.428495][T19499] usb 8-1: Product: syz [ 1271.444011][T19499] usb 8-1: Manufacturer: syz [ 1271.466433][T19499] usb 8-1: SerialNumber: syz [ 1271.525676][ T30] audit: type=1400 audit(2000000488.067:42372): avc: denied { create } for pid=21523 comm="syz.1.3744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1271.641883][ T30] audit: type=1400 audit(2000000488.076:42373): avc: denied { write } for pid=21518 comm="syz.3.3742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1272.046357][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1272.297202][ T30] audit: type=1400 audit(2000000488.104:42374): avc: denied { ioctl } for pid=21532 comm="syz.7.3748" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1272.648749][ T30] audit: type=1400 audit(2000000488.104:42375): avc: denied { module_request } for pid=21535 comm="syz.9.3749" kmod="net-pf-10-proto-255" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1272.859583][ T30] audit: type=1400 audit(2000000488.179:42376): avc: denied { ioctl } for pid=21532 comm="syz.7.3748" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1272.884634][ C0] vkms_vblank_simulate: vblank timer overrun [ 1272.922215][T19499] usb 8-1: 2:1 : no or invalid class specific endpoint descriptor [ 1272.952460][T19499] usb 8-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 1272.972097][T19499] usb 8-1: found format II with max.bitrate = 128, frame size=0 [ 1272.986487][T19499] usb 8-1: 2:1: All rates were zero [ 1273.085401][T19499] usb 8-1: USB disconnect, device number 28 [ 1273.151896][T21560] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3751'. [ 1273.165917][T21560] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3751'. [ 1273.258286][ T7534] usb 2-1: USB disconnect, device number 105 [ 1273.287139][ T7534] cypress_m8 2-1:2.0: device disconnected [ 1273.677469][ T7534] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1273.946379][ T7534] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 1273.963602][ T7534] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1274.489533][ T7534] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1274.500128][ T7534] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1274.508156][ T7534] usb 9-1: Manufacturer: syz [ 1274.516923][ T7534] usb 9-1: config 0 descriptor?? [ 1274.530445][ T7534] igorplugusb 9-1:0.0: endpoint incorrect [ 1275.428493][T21581] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3755'. [ 1275.553198][T21581] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3755'. [ 1276.191752][ T30] kauditd_printk_skb: 132 callbacks suppressed [ 1276.191769][ T30] audit: type=1400 audit(2000000493.024:42509): avc: denied { name_bind } for pid=21589 comm="syz.9.3758" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1276.224251][ T30] audit: type=1400 audit(2000000493.024:42510): avc: denied { node_bind } for pid=21589 comm="syz.9.3758" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1276.317986][ T30] audit: type=1400 audit(2000000493.108:42511): avc: denied { read } for pid=21589 comm="syz.9.3758" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1276.349249][ C0] vkms_vblank_simulate: vblank timer overrun [ 1276.391432][ T30] audit: type=1400 audit(2000000493.108:42512): avc: denied { open } for pid=21589 comm="syz.9.3758" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1276.715715][ T7534] usb 9-1: USB disconnect, device number 21 [ 1276.737043][ T30] audit: type=1400 audit(2000000493.146:42513): avc: denied { create } for pid=21589 comm="syz.9.3758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1276.802330][ T30] audit: type=1400 audit(2000000493.146:42514): avc: denied { write } for pid=21589 comm="syz.9.3758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1276.840444][ T30] audit: type=1400 audit(2000000493.146:42515): avc: denied { create } for pid=21589 comm="syz.9.3758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1276.874223][ T30] audit: type=1400 audit(2000000493.146:42516): avc: denied { write } for pid=21589 comm="syz.9.3758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1276.895643][ T30] audit: type=1400 audit(2000000493.146:42517): avc: denied { read } for pid=21589 comm="syz.9.3758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1276.920866][ T30] audit: type=1400 audit(2000000493.146:42518): avc: denied { write } for pid=21589 comm="syz.9.3758" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1277.183545][ T7534] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1277.365252][ T7534] usb 9-1: Using ep0 maxpacket: 16 [ 1277.375227][ T7534] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1277.403660][ T7534] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1277.427926][ T7534] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice=e5.00 [ 1277.445572][ T7534] usb 9-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0 [ 1277.462601][ T7534] usb 9-1: Manufacturer: syz [ 1277.490874][ T7534] usb 9-1: config 0 descriptor?? [ 1277.636600][T20215] usb 2-1: new full-speed USB device number 106 using dummy_hcd [ 1278.393616][T20215] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1278.423565][T20215] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1278.453109][T20215] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 1278.509167][T20215] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1278.527979][ T7534] usbhid 9-1:0.0: can't add hid device: -71 [ 1278.609075][T20215] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1278.623821][ T7534] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1278.662235][T20215] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1278.687103][ T7534] usb 9-1: USB disconnect, device number 22 [ 1278.696660][T20215] usb 2-1: Product: syz [ 1278.719430][T20215] usb 2-1: Manufacturer: syz [ 1279.780713][T20215] usb 2-1: SerialNumber: syz [ 1280.510807][T20215] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 1280.546544][T20215] usb 2-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 1280.675054][T20215] usb 2-1: found format II with max.bitrate = 128, frame size=0 [ 1280.700901][T20215] usb 2-1: 2:1: All rates were zero [ 1281.160573][ T5939] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1281.166720][T20215] usb 2-1: USB disconnect, device number 106 [ 1281.231107][T17386] udevd[17386]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1281.342917][ T5939] usb 9-1: Using ep0 maxpacket: 8 [ 1281.653084][ T5939] usb 9-1: config 1 interface 0 altsetting 253 bulk endpoint 0x1 has invalid maxpacket 576 [ 1281.667533][ T30] kauditd_printk_skb: 131 callbacks suppressed [ 1281.667557][ T30] audit: type=1400 audit(2000000498.066:42651): avc: denied { map_create } for pid=21623 comm="syz.9.3768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1281.695215][ T5939] usb 9-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1281.708327][ T5939] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1281.715061][ T30] audit: type=1400 audit(2000000498.066:42650): avc: denied { ioctl } for pid=21617 comm="syz.8.3766" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1281.766226][ T5939] usb 9-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 1281.809384][ T5939] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.844439][ T5939] usb 9-1: Product: syz [ 1281.866196][ T30] audit: type=1400 audit(2000000498.075:42652): avc: denied { map_read map_write } for pid=21623 comm="syz.9.3768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1281.891945][ T5939] usb 9-1: Manufacturer: syz [ 1281.923137][ T5939] usb 9-1: SerialNumber: syz [ 1281.942590][T21618] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1281.960713][ T30] audit: type=1400 audit(2000000498.253:42653): avc: denied { read write } for pid=18257 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1282.015834][ T30] audit: type=1400 audit(2000000498.253:42654): avc: denied { open } for pid=18257 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1282.084153][ T30] audit: type=1400 audit(2000000498.253:42655): avc: denied { ioctl } for pid=18257 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1282.110283][ T30] audit: type=1400 audit(2000000498.328:42656): avc: denied { read write } for pid=20655 comm="syz-executor" name="loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1282.211533][ T30] audit: type=1400 audit(2000000498.328:42657): avc: denied { open } for pid=20655 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1282.320248][ T30] audit: type=1400 audit(2000000498.328:42658): avc: denied { ioctl } for pid=20655 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=656 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1282.373215][ T5939] usblp0: Disabling reads from problematic bidirectional printer [ 1282.417747][ T5939] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 253 proto 1 vid 0x03F0 pid 0x0004 [ 1282.920696][ T30] audit: type=1400 audit(2000000498.356:42659): avc: denied { map_create } for pid=21626 comm="syz.3.3769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1283.297754][ T5939] usb 9-1: USB disconnect, device number 23 [ 1283.309621][ T5939] usblp0: removed [ 1283.389489][T21646] kAFS: unable to lookup cell '(,' [ 1283.892149][T21653] netlink: set zone limit has 4 unknown bytes [ 1284.015224][ T5939] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1284.025492][T18778] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1284.079148][T19499] usb 9-1: new full-speed USB device number 24 using dummy_hcd [ 1284.175141][ T5939] usb 8-1: Using ep0 maxpacket: 16 [ 1284.187320][ T5939] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1284.198279][T16998] usb 2-1: new full-speed USB device number 107 using dummy_hcd [ 1284.218923][ T5939] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1284.239406][T18778] usb 10-1: Using ep0 maxpacket: 8 [ 1284.246766][T19499] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1284.255640][ T5939] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice=e5.00 [ 1284.267618][T18778] usb 10-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1284.277148][T19499] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1284.288792][ T5939] usb 8-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0 [ 1284.297572][T18778] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.305834][T19499] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 1284.317344][ T5939] usb 8-1: Manufacturer: syz [ 1284.321976][T18778] usb 10-1: Product: syz [ 1284.329095][T18778] usb 10-1: Manufacturer: syz [ 1284.335574][ T5939] usb 8-1: config 0 descriptor?? [ 1284.342057][T19499] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1284.353125][T18778] usb 10-1: SerialNumber: syz [ 1284.366534][T18778] usb 10-1: config 0 descriptor?? [ 1284.376638][T19499] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1284.388292][T16998] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1284.399508][T18778] gspca_main: se401-2.14.0 probing 047d:5003 [ 1284.407088][T16998] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1284.417432][T19499] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.427070][T16998] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 1284.438188][T19499] usb 9-1: Product: syz [ 1284.442701][T19499] usb 9-1: Manufacturer: syz [ 1284.447359][T19499] usb 9-1: SerialNumber: syz [ 1284.452145][T16998] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1284.484480][T16998] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1284.493868][T16998] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.503377][T16998] usb 2-1: Product: syz [ 1284.508295][T16998] usb 2-1: Manufacturer: syz [ 1284.512938][T16998] usb 2-1: SerialNumber: syz [ 1285.287895][ T5939] usbhid 8-1:0.0: can't add hid device: -71 [ 1285.298056][ T5939] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1285.336411][ T5939] usb 8-1: USB disconnect, device number 29 [ 1285.356188][T17386] udevd[17386]: setting owner of /dev/bus/usb/008/029 to uid=0, gid=0 failed: No such file or directory [ 1285.385165][T19499] usb 9-1: 2:1 : no or invalid class specific endpoint descriptor [ 1285.405842][T19499] usb 9-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 1285.426097][T19499] usb 9-1: found format II with max.bitrate = 128, frame size=0 [ 1285.443769][T19499] usb 9-1: 2:1: All rates were zero [ 1285.471960][T16998] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 1285.493634][T19499] usb 9-1: USB disconnect, device number 24 [ 1285.514107][T16998] usb 2-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 1285.543757][T16998] usb 2-1: found format II with max.bitrate = 128, frame size=0 [ 1285.566669][T16998] usb 2-1: 2:1: All rates were zero [ 1285.634527][T16998] usb 2-1: USB disconnect, device number 107 [ 1285.711645][T17386] udevd[17386]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1286.072709][ T5937] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1286.195779][T20381] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1286.334961][ T5937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1286.482308][ T5937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1286.579200][T20381] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1286.708079][ T5937] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1286.746262][T20381] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1286.824488][T18778] gspca_se401: read req failed req 0x06 error -19 [ 1286.832778][T18778] usb 10-1: USB disconnect, device number 4 [ 1286.842890][ T5937] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1286.853035][T20381] usb 8-1: Product: syz [ 1286.857204][T20381] usb 8-1: Manufacturer: syz [ 1286.891127][T21678] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3784'. [ 1286.894552][ T5937] usb 4-1: Manufacturer: syz [ 1286.902662][T21678] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3784'. [ 1286.911528][T20381] usb 8-1: SerialNumber: syz [ 1287.022619][ T30] kauditd_printk_skb: 220 callbacks suppressed [ 1287.022637][ T30] audit: type=1400 audit(2000000503.155:42880): avc: denied { name_bind } for pid=21681 comm="syz.8.3786" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1287.084265][T20381] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1287.103036][ T5937] usb 4-1: config 0 descriptor?? [ 1287.125423][ T30] audit: type=1400 audit(2000000503.183:42881): avc: denied { node_bind } for pid=21681 comm="syz.8.3786" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1287.386871][ T30] audit: type=1400 audit(2000000503.211:42882): avc: denied { ioctl } for pid=21672 comm="syz.7.3783" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1287.744979][ T30] audit: type=1400 audit(2000000503.211:42883): avc: denied { ioctl } for pid=21672 comm="syz.7.3783" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1287.749019][ T7743] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1287.858192][ T30] audit: type=1400 audit(2000000503.220:42884): avc: denied { firmware_load } for pid=7743 comm="kworker/1:10" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1287.885593][ T30] audit: type=1400 audit(2000000503.248:42885): avc: denied { ioctl } for pid=21667 comm="syz.3.3781" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1288.123942][ T30] audit: type=1400 audit(2000000503.304:42886): avc: denied { read } for pid=21679 comm="syz.9.3785" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1288.244207][ T30] audit: type=1400 audit(2000000503.304:42887): avc: denied { open } for pid=21679 comm="syz.9.3785" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1288.282886][ T30] audit: type=1400 audit(2000000503.304:42888): avc: denied { ioctl } for pid=21679 comm="syz.9.3785" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1288.308985][ T30] audit: type=1400 audit(2000000503.314:42889): avc: denied { prog_load } for pid=21679 comm="syz.9.3785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1288.397541][T21701] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1289.013689][ T7743] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 1289.020961][ T7743] ath9k_htc: Failed to initialize the device [ 1289.045730][ T5937] uclogic 0003:256C:006D.003C: interface is invalid, ignoring [ 1289.120744][ T7743] usb 8-1: ath9k_htc: USB layer deinitialized [ 1290.044814][T19499] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1290.275607][T19499] usb 10-1: Using ep0 maxpacket: 32 [ 1290.316128][T19499] usb 10-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1290.359154][T19499] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.412002][T19499] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1290.483597][ T5939] usb 4-1: USB disconnect, device number 127 [ 1290.688867][T18778] usb 2-1: new full-speed USB device number 108 using dummy_hcd [ 1290.808124][ C0] hrtimer: interrupt took 10541 ns [ 1290.870762][T18778] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1290.910931][T18778] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1290.946737][T18778] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 1291.019377][T18778] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1291.096774][T18778] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1291.119688][T18778] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.140993][T18778] usb 2-1: Product: syz [ 1291.150844][T18778] usb 2-1: Manufacturer: syz [ 1291.165360][T18778] usb 2-1: SerialNumber: syz [ 1291.300277][T21728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1291.335451][T21728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1291.663348][T19499] gspca_nw80x: reg_w err -110 [ 1291.664208][ T7743] usb 8-1: USB disconnect, device number 30 [ 1291.668271][T19499] nw80x 10-1:3.0: probe with driver nw80x failed with error -110 [ 1291.883898][T18778] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 1291.934798][T18778] usb 2-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 1291.944728][T18778] usb 2-1: found format II with max.bitrate = 128, frame size=0 [ 1291.992261][T18778] usb 2-1: 2:1: All rates were zero [ 1292.013882][ T5937] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 1292.024789][T19499] usb 10-1: USB disconnect, device number 5 [ 1292.051395][T18778] usb 2-1: USB disconnect, device number 108 [ 1292.114248][T17386] udevd[17386]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1292.278663][ T5937] usb 9-1: Using ep0 maxpacket: 32 [ 1292.286998][ T5937] usb 9-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1292.301979][ T5937] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1292.318607][ T5937] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1292.400065][ T30] kauditd_printk_skb: 215 callbacks suppressed [ 1292.400096][ T30] audit: type=1400 audit(2000000508.168:43105): avc: denied { read } for pid=21736 comm="syz.3.3799" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1292.803353][ T30] audit: type=1400 audit(2000000508.168:43106): avc: denied { read open } for pid=21736 comm="syz.3.3799" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1292.827718][ C0] vkms_vblank_simulate: vblank timer overrun [ 1293.156165][ T30] audit: type=1400 audit(2000000508.178:43107): avc: denied { ioctl } for pid=21736 comm="syz.3.3799" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1293.181460][ C0] vkms_vblank_simulate: vblank timer overrun [ 1293.221716][ T30] audit: type=1400 audit(2000000508.178:43108): avc: denied { prog_load } for pid=21736 comm="syz.3.3799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1293.245171][ T30] audit: type=1400 audit(2000000508.178:43109): avc: denied { bpf } for pid=21736 comm="syz.3.3799" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1293.314060][ T30] audit: type=1400 audit(2000000508.178:43110): avc: denied { perfmon } for pid=21736 comm="syz.3.3799" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1293.410099][ T30] audit: type=1400 audit(2000000508.514:43111): avc: denied { read } for pid=21738 comm="syz.7.3800" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1293.512957][ T30] audit: type=1400 audit(2000000508.514:43112): avc: denied { read open } for pid=21738 comm="syz.7.3800" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1293.537116][ C0] vkms_vblank_simulate: vblank timer overrun [ 1293.659759][ T30] audit: type=1400 audit(2000000508.571:43113): avc: denied { ioctl } for pid=21730 comm="syz.8.3796" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1293.756564][T21760] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1295.307674][T21770] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1295.318097][ T5936] usb 9-1: USB disconnect, device number 25 [ 1295.716638][T21782] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3810'. [ 1296.790133][T21798] tipc: Started in network mode [ 1296.805984][T21798] tipc: Node identity , cluster identity 4711 [ 1296.816760][T21798] tipc: Failed to set node id, please configure manually [ 1296.898250][T21800] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3815'. [ 1296.912383][T21798] tipc: Enabling of bearer rejected, failed to enable media [ 1296.920731][T19499] usb 8-1: new full-speed USB device number 31 using dummy_hcd [ 1297.186284][T19499] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1297.208366][T19499] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1297.242115][T19499] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 1297.269841][T19499] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1297.295398][T19499] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1297.317024][T19499] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.337914][T19499] usb 8-1: Product: syz [ 1297.349970][T19499] usb 8-1: Manufacturer: syz [ 1297.365359][T19499] usb 8-1: SerialNumber: syz [ 1298.098365][ T30] kauditd_printk_skb: 225 callbacks suppressed [ 1298.098387][ T30] audit: type=1400 audit(2000000513.313:43337): avc: denied { prog_load } for pid=21792 comm="syz.7.3813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1298.383139][ T30] audit: type=1400 audit(2000000513.322:43338): avc: denied { bpf } for pid=21792 comm="syz.7.3813" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1298.383730][T19499] usb 8-1: 2:1 : no or invalid class specific endpoint descriptor [ 1298.508731][ T30] audit: type=1400 audit(2000000513.350:43339): avc: denied { map_create } for pid=21792 comm="syz.7.3813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1298.528270][T19499] usb 8-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 1298.559251][T19499] usb 8-1: found format II with max.bitrate = 128, frame size=0 [ 1298.575426][ T30] audit: type=1400 audit(2000000513.360:43340): avc: denied { map_read map_write } for pid=21792 comm="syz.7.3813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1298.607483][T19499] usb 8-1: 2:1: All rates were zero [ 1298.629275][ T30] audit: type=1400 audit(2000000513.725:43341): avc: denied { read write } for pid=19483 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1298.639832][T21817] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 1298.654882][ T30] audit: type=1400 audit(2000000513.725:43342): avc: denied { open } for pid=19483 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1298.736070][T19499] usb 8-1: USB disconnect, device number 31 [ 1298.736674][ T30] audit: type=1400 audit(2000000513.725:43343): avc: denied { ioctl } for pid=19483 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1298.783343][ T30] audit: type=1400 audit(2000000513.781:43344): avc: denied { read } for pid=21811 comm="syz.8.3818" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1298.810023][T17386] udevd[17386]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1298.908992][ T30] audit: type=1400 audit(2000000513.781:43345): avc: denied { open } for pid=21811 comm="syz.8.3818" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1298.978359][ T30] audit: type=1400 audit(2000000513.827:43346): avc: denied { create } for pid=21811 comm="syz.8.3818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1300.058058][T21835] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3823'. [ 1300.109593][T21835] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3823'. [ 1302.224420][ T5939] usb 8-1: new low-speed USB device number 32 using dummy_hcd [ 1302.584700][T20381] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1302.817590][T21864] block nbd3: shutting down sockets [ 1302.884017][T20381] usb 9-1: Using ep0 maxpacket: 16 [ 1302.901956][T20381] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1302.923774][T20381] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1302.943345][T20381] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1302.998722][T20381] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1303.026648][ T5939] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1303.049712][ T5939] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1303.053880][T20381] usb 9-1: config 0 descriptor?? [ 1303.075798][ T5939] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1303.091954][ T5939] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1303.107001][ T5939] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1303.120225][ T5939] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1303.149245][ T5939] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1303.166535][ T5939] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1303.199667][T21872] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3834'. [ 1303.214511][ T5939] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1303.240490][ T5939] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1303.269493][ T5939] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1303.286264][ T5939] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1303.300373][ T5939] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1303.324099][T21874] SELinux: Context /sbin/dhclient is not valid (left unmapped). [ 1303.333487][ T5939] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1303.352525][ T5939] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1303.373209][ T5939] usb 8-1: string descriptor 0 read error: -22 [ 1303.380631][ T5939] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1303.390700][ T5939] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1303.423430][ T5939] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1303.570616][ T30] kauditd_printk_skb: 207 callbacks suppressed [ 1303.570631][ T30] audit: type=1400 audit(2000000518.635:43554): avc: denied { read write } for pid=20655 comm="syz-executor" name="loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1303.624030][T20381] microsoft 0003:045E:07DA.003D: ignoring exceeding usage max [ 1303.627901][ T30] audit: type=1400 audit(2000000518.664:43555): avc: denied { open } for pid=20655 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1303.644425][T20381] HID 045e:07da: Invalid code 65791 type 1 [ 1303.677737][ T30] audit: type=1400 audit(2000000518.664:43556): avc: denied { ioctl } for pid=20655 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=656 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1303.705361][T20381] HID 045e:07da: Invalid code 768 type 1 [ 1303.737771][T20381] HID 045e:07da: Invalid code 769 type 1 [ 1303.752341][T20381] HID 045e:07da: Invalid code 770 type 1 [ 1303.781365][T20381] HID 045e:07da: Invalid code 771 type 1 [ 1303.788541][ T30] audit: type=1400 audit(2000000518.673:43557): avc: denied { ioctl } for pid=21851 comm="syz.8.3829" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1303.802935][T20381] HID 045e:07da: Invalid code 772 type 1 [ 1303.937434][T20381] HID 045e:07da: Invalid code 773 type 1 [ 1304.124295][T21882] netlink: 'syz.9.3836': attribute type 1 has an invalid length. [ 1304.155198][ T30] audit: type=1400 audit(2000000518.692:43558): avc: denied { prog_load } for pid=21877 comm="syz.9.3835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1304.203492][T20381] HID 045e:07da: Invalid code 774 type 1 [ 1304.209256][T21882] netlink: 'syz.9.3836': attribute type 4 has an invalid length. [ 1304.210388][ T30] audit: type=1400 audit(2000000518.729:43559): avc: denied { bpf } for pid=21877 comm="syz.9.3835" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1304.238966][T21882] netlink: 15334 bytes leftover after parsing attributes in process `syz.9.3836'. [ 1304.260114][ T30] audit: type=1400 audit(2000000518.729:43560): avc: denied { perfmon } for pid=21877 comm="syz.9.3835" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1304.282737][T20381] HID 045e:07da: Invalid code 775 type 1 [ 1304.289409][T20381] HID 045e:07da: Invalid code 776 type 1 [ 1304.324758][T20381] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:045E:07DA.003D/input/input81 [ 1304.391372][ T30] audit: type=1400 audit(2000000518.729:43561): avc: denied { bpf } for pid=21877 comm="syz.9.3835" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1304.391416][ T30] audit: type=1400 audit(2000000518.738:43562): avc: denied { read } for pid=21877 comm="syz.9.3835" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1304.391463][ T30] audit: type=1400 audit(2000000518.738:43563): avc: denied { open } for pid=21877 comm="syz.9.3835" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1304.426722][T21885] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3837'. [ 1304.623973][T21889] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in; [ 1304.623973][T21889] program syz.3.3837 not setting count and/or reply_len properly [ 1304.991404][T20381] microsoft 0003:045E:07DA.003D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 1306.088093][T20381] usb 9-1: USB disconnect, device number 26 [ 1306.530214][T18778] usb 8-1: USB disconnect, device number 32 [ 1307.844271][ T7743] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1307.906068][T21918] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1308.421440][ T7743] usb 8-1: Using ep0 maxpacket: 16 [ 1308.432053][ T7743] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1308.447010][T21922] netlink: set zone limit has 4 unknown bytes [ 1308.457129][ T7743] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1308.492149][ T7743] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice=e5.00 [ 1308.514869][ T7743] usb 8-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0 [ 1308.534402][ T7743] usb 8-1: Manufacturer: syz [ 1308.539171][T20381] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1308.565389][ T7743] usb 8-1: config 0 descriptor?? [ 1308.821276][T20381] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1308.851040][T20381] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1308.905794][T20381] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1308.963301][T20381] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1309.067391][ T30] kauditd_printk_skb: 200 callbacks suppressed [ 1309.067439][ T30] audit: type=1400 audit(2000000523.780:43764): avc: denied { ioctl } for pid=21913 comm="syz.7.3845" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1309.111684][T20381] usb 2-1: config 0 descriptor?? [ 1309.118715][ T7743] mcp2221 0003:04D8:00DD.003E: unknown main item tag 0x0 [ 1309.126042][ T7743] mcp2221 0003:04D8:00DD.003E: unknown main item tag 0x0 [ 1309.137939][ T7743] mcp2221 0003:04D8:00DD.003E: unknown main item tag 0x0 [ 1309.145100][ T7743] mcp2221 0003:04D8:00DD.003E: unknown main item tag 0x0 [ 1309.152930][ T30] audit: type=1400 audit(2000000523.808:43765): avc: denied { ioctl } for pid=21913 comm="syz.7.3845" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1309.163417][T21930] FAULT_INJECTION: forcing a failure. [ 1309.163417][T21930] name failslab, interval 1, probability 0, space 0, times 0 [ 1309.180325][ T7743] mcp2221 0003:04D8:00DD.003E: unknown main item tag 0x0 [ 1309.195546][T21930] CPU: 0 UID: 0 PID: 21930 Comm: syz.9.3851 Not tainted syzkaller #0 PREEMPT(full) [ 1309.195569][T21930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1309.195578][T21930] Call Trace: [ 1309.195584][T21930] [ 1309.195591][T21930] dump_stack_lvl+0x16c/0x1f0 [ 1309.195614][T21930] should_fail_ex+0x512/0x640 [ 1309.195630][T21930] ? kmem_cache_alloc_noprof+0x62/0x720 [ 1309.195662][T21930] should_failslab+0xc2/0x120 [ 1309.195682][T21930] kmem_cache_alloc_noprof+0x75/0x720 [ 1309.195704][T21930] ? lock_acquire+0x179/0x330 [ 1309.195723][T21930] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 1309.195752][T21930] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 1309.195774][T21930] ? rcu_is_watching+0x12/0xc0 [ 1309.195790][T21930] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 1309.195818][T21930] idr_get_free+0x528/0xa30 [ 1309.195843][T21930] idr_alloc_u32+0x190/0x2f0 [ 1309.195861][T21930] ? __pfx_idr_alloc_u32+0x10/0x10 [ 1309.195881][T21930] ? tcf_idr_check_alloc+0x588/0x770 [ 1309.195908][T21930] tcf_idr_check_alloc+0x136/0x770 [ 1309.195930][T21930] ? __pfx_tcf_idr_check_alloc+0x10/0x10 [ 1309.195959][T21930] tcf_connmark_init+0x235/0x970 [ 1309.195986][T21930] ? __pfx_tcf_connmark_init+0x10/0x10 [ 1309.196018][T21930] ? __asan_memcpy+0x3c/0x60 [ 1309.196040][T21930] tcf_action_init_1+0x460/0x6c0 [ 1309.196065][T21930] ? __pfx_tcf_action_init_1+0x10/0x10 [ 1309.196099][T21930] ? tcf_action_fill_size+0x110/0x340 [ 1309.196125][T21930] tcf_action_init+0x432/0xa50 [ 1309.196157][T21930] ? __pfx_tcf_action_init+0x10/0x10 [ 1309.196177][T21930] ? lock_acquire+0x179/0x330 [ 1309.196243][T21930] ? kfree_skbmem+0x1a4/0x1f0 [ 1309.196262][T21930] ? consume_skb+0xcc/0x100 [ 1309.196278][T21930] ? nlmon_xmit+0xa5/0xe0 [ 1309.196298][T21930] ? dev_hard_start_xmit+0x97/0x6e0 [ 1309.196328][T21930] tcf_action_add+0xee/0x5c0 [ 1309.196355][T21930] ? __pfx_tcf_action_add+0x10/0x10 [ 1309.196417][T21930] ? __nla_parse+0x40/0x60 [ 1309.196439][T21930] tc_ctl_action+0x35b/0x470 [ 1309.196462][T21930] ? __pfx_tc_ctl_action+0x10/0x10 [ 1309.196494][T21930] ? __pfx_tc_ctl_action+0x10/0x10 [ 1309.196516][T21930] rtnetlink_rcv_msg+0x3c9/0xe90 [ 1309.196537][T21930] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1309.196561][T21930] ? ref_tracker_free+0x37c/0x830 [ 1309.196581][T21930] netlink_rcv_skb+0x158/0x420 [ 1309.196600][T21930] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1309.196619][T21930] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1309.196651][T21930] ? netlink_deliver_tap+0x1ae/0xd30 [ 1309.196674][T21930] netlink_unicast+0x5aa/0x870 [ 1309.196697][T21930] ? __pfx_netlink_unicast+0x10/0x10 [ 1309.196726][T21930] netlink_sendmsg+0x8c8/0xdd0 [ 1309.196749][T21930] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1309.196778][T21930] ____sys_sendmsg+0xa5d/0xc30 [ 1309.196799][T21930] ? copy_msghdr_from_user+0x10a/0x160 [ 1309.196814][T21930] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1309.196832][T21930] ? __lock_acquire+0x433/0x22f0 [ 1309.196864][T21930] ___sys_sendmsg+0x134/0x1d0 [ 1309.196882][T21930] ? __pfx____sys_sendmsg+0x10/0x10 [ 1309.196897][T21930] ? __lock_acquire+0x433/0x22f0 [ 1309.196949][T21930] __sys_sendmsg+0x16d/0x220 [ 1309.196966][T21930] ? __pfx___sys_sendmsg+0x10/0x10 [ 1309.197000][T21930] do_syscall_64+0xcd/0xf80 [ 1309.197020][T21930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1309.197036][T21930] RIP: 0033:0x7fa8fff8f749 [ 1309.197050][T21930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1309.197064][T21930] RSP: 002b:00007fa900daa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1309.197080][T21930] RAX: ffffffffffffffda RBX: 00007fa9001e5fa0 RCX: 00007fa8fff8f749 [ 1309.197090][T21930] RDX: 0000000000000000 RSI: 0000200000007940 RDI: 0000000000000003 [ 1309.197099][T21930] RBP: 00007fa900daa090 R08: 0000000000000000 R09: 0000000000000000 [ 1309.197108][T21930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1309.197117][T21930] R13: 00007fa9001e6038 R14: 00007fa9001e5fa0 R15: 00007ffd47f6d548 [ 1309.197140][T21930] [ 1309.284405][T21932] netlink: zone id is out of range [ 1309.284418][T21932] netlink: zone id is out of range [ 1309.284501][T21932] netlink: zone id is out of range [ 1309.284615][T21932] netlink: zone id is out of range [ 1309.284687][T21932] netlink: zone id is out of range [ 1309.289413][ T30] audit: type=1400 audit(2000000523.818:43766): avc: denied { read write } for pid=20655 comm="syz-executor" name="loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1309.296375][T21932] netlink: zone id is out of range [ 1309.300068][ T30] audit: type=1400 audit(2000000523.818:43767): avc: denied { open } for pid=20655 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1309.306244][T21932] netlink: zone id is out of range [ 1309.310692][ T30] audit: type=1400 audit(2000000523.827:43768): avc: denied { ioctl } for pid=20655 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=656 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1309.310735][ T30] audit: type=1400 audit(2000000523.846:43769): avc: denied { ioctl } for pid=21919 comm="syz.1.3847" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1309.310798][ T30] audit: type=1400 audit(2000000523.920:43770): avc: denied { read write } for pid=20655 comm="syz-executor" name="loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1309.310837][ T30] audit: type=1400 audit(2000000523.920:43771): avc: denied { open } for pid=20655 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1309.310874][ T30] audit: type=1400 audit(2000000523.920:43772): avc: denied { ioctl } for pid=20655 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=656 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1309.310939][ T30] audit: type=1400 audit(2000000523.949:43773): avc: denied { prog_load } for pid=21931 comm="syz.9.3852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1309.311842][ T7743] mcp2221 0003:04D8:00DD.003E: USB HID v0.05 Device [syz] on usb-dummy_hcd.7-1/input0 [ 1309.323612][T21932] netlink: zone id is out of range [ 1309.400144][T20381] usbhid 2-1:0.0: can't add hid device: -71 [ 1309.413686][T21932] netlink: zone id is out of range [ 1309.477265][T20381] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1309.882937][ T7743] usb 8-1: USB disconnect, device number 33 [ 1310.091397][T21938] Sensor B: ================= START STATUS ================= [ 1310.099475][T21938] Sensor B: Test Pattern: 75% Colorbar [ 1310.249116][T21938] Sensor B: Show Information: All [ 1348.672878][ C0] net_ratelimit: 59 callbacks suppressed [ 1348.672895][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1422.543649][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1422.550593][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P21943/2:b..l P1157/1:b..l P5195/1:b..l [ 1422.561312][ C1] rcu: (detected by 1, t=10502 jiffies, g=114961, q=464 ncpus=2) [ 1422.569089][ C1] task:udevd state:R running task stack:24744 pid:5195 tgid:5195 ppid:1 task_flags:0x400140 flags:0x00080000 [ 1422.583539][ C1] Call Trace: [ 1422.586802][ C1] [ 1422.589709][ C1] ? __schedule+0x10b9/0x6150 [ 1422.594358][ C1] __schedule+0x1139/0x6150 [ 1422.598838][ C1] ? __pfx___schedule+0x10/0x10 [ 1422.603677][ C1] ? mark_held_locks+0x49/0x80 [ 1422.608414][ C1] preempt_schedule_irq+0x51/0x90 [ 1422.613413][ C1] irqentry_exit+0x1d8/0x8c0 [ 1422.617972][ C1] ? rcu_is_watching+0x12/0xc0 [ 1422.622707][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1422.628137][ C1] RIP: 0010:unwind_next_frame+0x58c/0x20a0 [ 1422.633925][ C1] Code: 9e c6 84 d2 0f 95 c2 40 84 d6 0f 85 ee 13 00 00 41 83 e7 07 44 38 f8 0f 9e c2 84 c0 0f 95 c0 84 c2 0f 85 d7 13 00 00 4c 89 f2 <44> 0f b6 79 05 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 0f b6 04 [ 1422.653588][ C1] RSP: 0018:ffffc90003fcf2b0 EFLAGS: 00000246 [ 1422.659623][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff912c321e [ 1422.667563][ C1] RDX: ffffc90003fcf355 RSI: 0000000000000001 RDI: ffffffff90a437e4 [ 1422.675504][ C1] RBP: ffffc90003fcf368 R08: ffffffff912c3222 R09: 000000008354c23c [ 1422.683442][ C1] R10: ffff88807a8e2ff0 R11: 0000000000012641 R12: ffffc90003fcf370 [ 1422.691383][ C1] R13: ffffc90003fcf320 R14: ffffc90003fcf355 R15: 0000000000000003 [ 1422.699339][ C1] ? __kasan_slab_free+0x5f/0x80 [ 1422.704263][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1422.710387][ C1] arch_stack_walk+0x94/0x100 [ 1422.715046][ C1] ? __kasan_slab_free+0x5f/0x80 [ 1422.719955][ C1] stack_trace_save+0x8e/0xc0 [ 1422.724602][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1422.729956][ C1] ? __lock_acquire+0x433/0x22f0 [ 1422.734881][ C1] kasan_save_stack+0x33/0x60 [ 1422.739543][ C1] ? kasan_save_stack+0x33/0x60 [ 1422.744370][ C1] ? kasan_save_track+0x14/0x30 [ 1422.749196][ C1] ? __kasan_save_free_info+0x3b/0x60 [ 1422.754573][ C1] ? __kasan_slab_free+0x5f/0x80 [ 1422.759499][ C1] kasan_save_track+0x14/0x30 [ 1422.764154][ C1] __kasan_save_free_info+0x3b/0x60 [ 1422.769342][ C1] __kasan_slab_free+0x5f/0x80 [ 1422.774079][ C1] kfree+0x29e/0x710 [ 1422.778033][ C1] ? tomoyo_realpath_from_path+0x19f/0x6e0 [ 1422.783816][ C1] ? tomoyo_realpath_from_path+0x19f/0x6e0 [ 1422.789596][ C1] ? tomoyo_encode+0x31/0x50 [ 1422.794159][ C1] tomoyo_realpath_from_path+0x19f/0x6e0 [ 1422.799857][ C1] tomoyo_check_open_permission+0x2ab/0x3c0 [ 1422.805759][ C1] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1422.812191][ C1] ? lock_acquire+0x179/0x330 [ 1422.816853][ C1] ? find_held_lock+0x2b/0x80 [ 1422.821513][ C1] ? mnt_get_write_access+0x52/0x2f0 [ 1422.826868][ C1] tomoyo_file_open+0x6b/0x90 [ 1422.831518][ C1] security_file_open+0x84/0x1e0 [ 1422.836425][ C1] do_dentry_open+0x597/0x1590 [ 1422.841163][ C1] ? security_inode_permission+0xbf/0x260 [ 1422.846864][ C1] vfs_open+0x82/0x3f0 [ 1422.850911][ C1] path_openat+0x2078/0x3140 [ 1422.855533][ C1] ? __pfx_path_openat+0x10/0x10 [ 1422.860466][ C1] do_filp_open+0x20b/0x470 [ 1422.865046][ C1] ? __pfx_do_filp_open+0x10/0x10 [ 1422.870057][ C1] ? alloc_fd+0x471/0x7d0 [ 1422.874364][ C1] do_sys_openat2+0x11f/0x280 [ 1422.879039][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 1422.884235][ C1] ? __sys_recvmsg+0x189/0x220 [ 1422.888997][ C1] ? __pfx___sys_recvmsg+0x10/0x10 [ 1422.894090][ C1] __x64_sys_openat+0x174/0x210 [ 1422.898910][ C1] ? __pfx___x64_sys_openat+0x10/0x10 [ 1422.904254][ C1] do_syscall_64+0xcd/0xf80 [ 1422.908748][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1422.914806][ C1] RIP: 0033:0x7fcc14ca7407 [ 1422.919193][ C1] RSP: 002b:00007ffe8b4afd60 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1422.927572][ C1] RAX: ffffffffffffffda RBX: 00007fcc1536b880 RCX: 00007fcc14ca7407 [ 1422.935520][ C1] RDX: 0000000000080141 RSI: 00005565120d702e RDI: ffffffffffffff9c [ 1422.943469][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1422.951410][ C1] R10: 00000000000001a4 R11: 0000000000000202 R12: 00000000ffffffff [ 1422.959349][ C1] R13: 00000000ffffffff R14: ffffffffffffffff R15: 0000000000000000 [ 1422.967295][ C1] [ 1422.970284][ C1] task:kworker/u8:9 state:R running task stack:23432 pid:1157 tgid:1157 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1422.983818][ C1] Workqueue: kvfree_rcu_reclaim kfree_rcu_work [ 1422.989964][ C1] Call Trace: [ 1422.993220][ C1] [ 1422.996134][ C1] ? __schedule+0x10b9/0x6150 [ 1423.000822][ C1] __schedule+0x1139/0x6150 [ 1423.005309][ C1] ? __pfx___schedule+0x10/0x10 [ 1423.010143][ C1] ? mark_held_locks+0x49/0x80 [ 1423.014896][ C1] preempt_schedule_irq+0x51/0x90 [ 1423.019902][ C1] irqentry_exit+0x1d8/0x8c0 [ 1423.024479][ C1] ? rcu_is_watching+0x12/0xc0 [ 1423.029226][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1423.034655][ C1] RIP: 0010:unwind_next_frame+0x66d/0x20a0 [ 1423.040435][ C1] Code: 0f 95 c6 40 84 f7 0f 85 58 15 00 00 83 e0 07 38 c2 40 0f 9e c6 84 d2 0f 95 c0 40 84 c6 0f 85 41 15 00 00 4c 0f bf 31 4d 01 fe <0f> b6 41 05 83 e0 07 3c 03 0f 84 0a 09 00 00 3c 04 0f 84 43 08 00 [ 1423.060018][ C1] RSP: 0018:ffffc900044ef650 EFLAGS: 00000282 [ 1423.066155][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff912b6588 [ 1423.074107][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 1423.082318][ C1] RBP: ffffc900044ef708 R08: ffffffff912b658c R09: 0000000082adb3ed [ 1423.090290][ C1] R10: ffff88802849d4b0 R11: 0000000000011b82 R12: ffffc900044ef710 [ 1423.098249][ C1] R13: ffffc900044ef6c0 R14: ffffc900044efb20 R15: ffffc900044efb10 [ 1423.106204][ C1] ? kmem_cache_free_bulk+0x2bf/0x680 [ 1423.111576][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1423.117719][ C1] arch_stack_walk+0x94/0x100 [ 1423.122383][ C1] ? kmem_cache_free_bulk+0x2bf/0x680 [ 1423.127732][ C1] stack_trace_save+0x8e/0xc0 [ 1423.132385][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1423.137731][ C1] kasan_save_stack+0x33/0x60 [ 1423.142387][ C1] ? kasan_save_stack+0x33/0x60 [ 1423.147216][ C1] ? kasan_save_track+0x14/0x30 [ 1423.152038][ C1] ? __kasan_save_free_info+0x3b/0x60 [ 1423.157387][ C1] ? __kasan_slab_free+0x5f/0x80 [ 1423.162384][ C1] ? kmem_cache_free_bulk+0x2bf/0x680 [ 1423.167743][ C1] kasan_save_track+0x14/0x30 [ 1423.172393][ C1] __kasan_save_free_info+0x3b/0x60 [ 1423.177567][ C1] __kasan_slab_free+0x5f/0x80 [ 1423.182300][ C1] kmem_cache_free_bulk+0x2bf/0x680 [ 1423.187477][ C1] ? kvfree_rcu_bulk+0x1b7/0x1e0 [ 1423.192402][ C1] kvfree_rcu_bulk+0x1b7/0x1e0 [ 1423.197145][ C1] kfree_rcu_work+0x124/0x1a0 [ 1423.201796][ C1] ? rcu_is_watching+0x12/0xc0 [ 1423.206542][ C1] process_one_work+0x9ba/0x1b20 [ 1423.211466][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1423.216816][ C1] ? assign_work+0x1a0/0x250 [ 1423.221377][ C1] worker_thread+0x6c8/0xf10 [ 1423.225948][ C1] ? __kthread_parkme+0x19e/0x250 [ 1423.230955][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1423.236043][ C1] kthread+0x3c5/0x780 [ 1423.240104][ C1] ? __pfx_kthread+0x10/0x10 [ 1423.244670][ C1] ? rcu_is_watching+0x12/0xc0 [ 1423.249411][ C1] ? __pfx_kthread+0x10/0x10 [ 1423.253988][ C1] ret_from_fork+0x983/0xb10 [ 1423.258558][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1423.263648][ C1] ? __switch_to+0x7af/0x10d0 [ 1423.268295][ C1] ? __pfx_kthread+0x10/0x10 [ 1423.272855][ C1] ret_from_fork_asm+0x1a/0x30 [ 1423.277597][ C1] [ 1423.280586][ C1] task:syz.1.3853 state:R running task stack:27368 pid:21943 tgid:21939 ppid:18928 task_flags:0x400040 flags:0x00080000 [ 1423.294050][ C1] Call Trace: [ 1423.297298][ C1] [ 1423.300205][ C1] ? __schedule+0x10b9/0x6150 [ 1423.304853][ C1] __schedule+0x1139/0x6150 [ 1423.309336][ C1] ? __pfx___schedule+0x10/0x10 [ 1423.314157][ C1] preempt_schedule_irq+0x51/0x90 [ 1423.319149][ C1] irqentry_exit+0x1d8/0x8c0 [ 1423.323719][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1423.329673][ C1] RIP: 0010:avtab_search_node+0x293/0x4b0 [ 1423.335372][ C1] Code: 03 42 80 3c 28 00 0f 85 ee 01 00 00 48 8b 5b 10 48 85 db 0f 84 14 01 00 00 e8 d9 5e 61 fd 48 89 d8 48 c1 e8 03 42 0f b6 14 28 <48> 89 d8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 ae 01 00 00 0f [ 1423.354970][ C1] RSP: 0018:ffffc9000c7bf840 EFLAGS: 00000a02 [ 1423.361015][ C1] RAX: 1ffff110065d2273 RBX: ffff888032e91398 RCX: 1ffff1100adee326 [ 1423.368965][ C1] RDX: 0000000000000000 RSI: ffffffff845c8157 RDI: ffffc9000c7bf976 [ 1423.376908][ C1] RBP: ffffc9000c7bf970 R08: 0000000000000005 R09: 0000000000000000 [ 1423.384851][ C1] R10: 0000000000000800 R11: 000000000ac0d5af R12: 00000000000004bc [ 1423.392802][ C1] R13: dffffc0000000000 R14: 0000000000000486 R15: 0000000000000006 [ 1423.400747][ C1] ? avtab_search_node+0x287/0x4b0 [ 1423.405838][ C1] context_struct_compute_av+0x622/0x1270 [ 1423.411537][ C1] ? __pfx_context_struct_compute_av+0x10/0x10 [ 1423.417675][ C1] security_compute_av+0x5ec/0x11d0 [ 1423.422906][ C1] avc_compute_av+0x83/0x7f0 [ 1423.427487][ C1] ? avc_lookup+0x16b/0x1d0 [ 1423.431973][ C1] avc_has_extended_perms+0xcdf/0x1090 [ 1423.437411][ C1] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 1423.443278][ C1] ? trace_irq_enable.constprop.0+0x2f/0x110 [ 1423.449232][ C1] ? finish_task_switch.isra.0+0x2e0/0xbc0 [ 1423.455011][ C1] ? trace_sched_exit_tp+0xd1/0x110 [ 1423.460185][ C1] ? __schedule+0x10b9/0x6150 [ 1423.464837][ C1] ? __schedule+0x114c/0x6150 [ 1423.469499][ C1] ? __pfx___schedule+0x10/0x10 [ 1423.474330][ C1] ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 1423.480636][ C1] ? irqentry_exit+0x1c1/0x8c0 [ 1423.485370][ C1] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1423.492208][ C1] ? irqentry_exit+0x1dd/0x8c0 [ 1423.496948][ C1] ? selinux_file_ioctl+0x180/0x270 [ 1423.502119][ C1] selinux_file_ioctl+0x180/0x270 [ 1423.507116][ C1] security_file_ioctl+0xc6/0x240 [ 1423.512136][ C1] __x64_sys_ioctl+0xb7/0x210 [ 1423.516810][ C1] do_syscall_64+0xcd/0xf80 [ 1423.521300][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1423.527167][ C1] RIP: 0033:0x7f6e5a18f34b [ 1423.531565][ C1] RSP: 002b:00007f6e583cd050 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1423.539953][ C1] RAX: ffffffffffffffda RBX: 00007f6e5a3e6128 RCX: 00007f6e5a18f34b [ 1423.547995][ C1] RDX: 0000000000000000 RSI: 0000000000006364 RDI: 00000000000000d9 [ 1423.555944][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffff16b2047 [ 1423.563888][ C1] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 1423.571840][ C1] R13: 00007f6e5a3e6128 R14: 00007ffff16b1f60 R15: 00007ffff16b2048 [ 1423.579820][ C1] [ 1423.582835][ C1] rcu: rcu_preempt kthread starved for 10597 jiffies! g114961 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1423.594432][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1423.604372][ C1] rcu: RCU grace-period kthread stack dump: [ 1423.610229][ C1] task:rcu_preempt state:R running task stack:27960 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1423.623675][ C1] Call Trace: [ 1423.626958][ C1] [ 1423.629873][ C1] ? __schedule+0x10b9/0x6150 [ 1423.634537][ C1] __schedule+0x1139/0x6150 [ 1423.639028][ C1] ? __mod_timer+0x8f2/0xd30 [ 1423.643610][ C1] ? __pfx___schedule+0x10/0x10 [ 1423.648435][ C1] ? find_held_lock+0x2b/0x80 [ 1423.653086][ C1] ? schedule+0x2d7/0x3a0 [ 1423.657388][ C1] schedule+0xe7/0x3a0 [ 1423.661428][ C1] schedule_timeout+0x123/0x290 [ 1423.666256][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1423.671611][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1423.676878][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1423.682656][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 1423.688089][ C1] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 1423.692837][ C1] ? rcu_gp_init+0xc2e/0x15e0 [ 1423.697489][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1423.702746][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1423.707914][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 1423.712827][ C1] ? rcu_gp_cleanup+0x7c1/0xe90 [ 1423.717660][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1423.723437][ C1] rcu_gp_kthread+0x26d/0x380 [ 1423.728088][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1423.733258][ C1] ? rcu_is_watching+0x12/0xc0 [ 1423.737989][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1423.743156][ C1] ? __kthread_parkme+0x19e/0x250 [ 1423.748157][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1423.753336][ C1] kthread+0x3c5/0x780 [ 1423.757377][ C1] ? __pfx_kthread+0x10/0x10 [ 1423.761937][ C1] ? rcu_is_watching+0x12/0xc0 [ 1423.766684][ C1] ? __pfx_kthread+0x10/0x10 [ 1423.771259][ C1] ret_from_fork+0x983/0xb10 [ 1423.775826][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1423.781079][ C1] ? __switch_to+0x7af/0x10d0 [ 1423.785758][ C1] ? __pfx_kthread+0x10/0x10 [ 1423.790329][ C1] ret_from_fork_asm+0x1a/0x30 [ 1423.795073][ C1] [ 1423.798061][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1423.804354][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1423.809532][ C0] NMI backtrace for cpu 0 [ 1423.809543][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 1423.809559][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1423.809567][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1423.809584][ C0] Code: 76 76 02 e9 d3 2f 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 d3 2b 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1423.809597][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c2 [ 1423.809609][ C0] RAX: 0000000005d8ccb7 RBX: 0000000000000000 RCX: ffffffff8b5e86f9 [ 1423.809618][ C0] RDX: 0000000000000000 RSI: ffffffff8daa3473 RDI: ffffffff8bf1d300 [ 1423.809627][ C0] RBP: fffffbfff1c12f50 R08: 0000000000000001 R09: ffffed101708672d [ 1423.809637][ C0] R10: ffff8880b843396b R11: 00000000ffffffff R12: 0000000000000000 [ 1423.809645][ C0] R13: ffffffff8e097a80 R14: ffffffff9085ced0 R15: 0000000000000000 [ 1423.809654][ C0] FS: 0000000000000000(0000) GS:ffff88812499c000(0000) knlGS:0000000000000000 [ 1423.809668][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1423.809678][ C0] CR2: 0000000000000000 CR3: 00000000516b3000 CR4: 00000000003526f0 [ 1423.809686][ C0] Call Trace: [ 1423.809691][ C0] [ 1423.809696][ C0] default_idle+0x13/0x20 [ 1423.809712][ C0] default_idle_call+0x6c/0xb0 [ 1423.809728][ C0] do_idle+0x38d/0x510 [ 1423.809743][ C0] ? __pfx_do_idle+0x10/0x10 [ 1423.809760][ C0] cpu_startup_entry+0x4f/0x60 [ 1423.809773][ C0] rest_init+0x16b/0x2b0 [ 1423.809790][ C0] ? acpi_subsystem_init+0x133/0x180 [ 1423.809805][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1423.809822][ C0] start_kernel+0x3f6/0x4d0 [ 1423.809838][ C0] x86_64_start_reservations+0x18/0x30 [ 1423.809852][ C0] x86_64_start_kernel+0x130/0x190 [ 1423.809868][ C0] common_startup_64+0x13e/0x148 [ 1423.809888][ C0]