Warning: Permanently added '[localhost]:1791' (ECDSA) to the list of known hosts. 2022/10/01 08:24:07 fuzzer started 2022/10/01 08:24:08 dialing manager at localhost:35095 syzkaller login: [ 45.247776] cgroup: Unknown subsys name 'net' [ 45.462704] cgroup: Unknown subsys name 'rlimit' 2022/10/01 08:24:22 syscalls: 204 2022/10/01 08:24:22 code coverage: enabled 2022/10/01 08:24:22 comparison tracing: enabled 2022/10/01 08:24:22 extra coverage: enabled 2022/10/01 08:24:22 setuid sandbox: enabled 2022/10/01 08:24:22 namespace sandbox: enabled 2022/10/01 08:24:22 Android sandbox: enabled 2022/10/01 08:24:22 fault injection: enabled 2022/10/01 08:24:22 leak checking: enabled 2022/10/01 08:24:22 net packet injection: enabled 2022/10/01 08:24:22 net device setup: enabled 2022/10/01 08:24:22 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/01 08:24:22 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/01 08:24:22 USB emulation: enabled 2022/10/01 08:24:22 hci packet injection: enabled 2022/10/01 08:24:22 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/01 08:24:22 802.15.4 emulation: enabled 2022/10/01 08:24:22 fetching corpus: 0, signal 0/0 (executing program) 2022/10/01 08:24:22 starting 8 fuzzer processes 08:24:22 executing program 1: r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x60d286c4b14df7b4, 0x61, 0x23, 0x8a, 0x8, 0x12d1, 0x14b8, 0xfac0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xc5, 0x0, 0x80, 0x49, [{{0x9, 0x4, 0xdb, 0x40, 0x0, 0xff, 0x3, 0x14, 0x3, [@hid_hid={0x9, 0x21, 0x4, 0x40, 0x1, {0x22, 0x639}}]}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x15, 0x0, 0x39, 0xff, 0x1}, 0x39, &(0x7f0000000080)={0x5, 0xf, 0x39, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0x6, 0x1f, 0x4, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x3, 0xb, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x2, 0x4d, 0x2}, @ssp_cap={0x18, 0x10, 0xa, 0x8, 0x3, 0x7, 0xf00, 0x101, [0x0, 0xffff, 0xff0000]}]}, 0x6, [{0x33, &(0x7f00000000c0)=@string={0x33, 0x3, "a2e8b191adb2231f1f049528253546715d1584f16bbdc70b57a1033875ae1daea477fb53f3e357b0227b1a439de8decc98"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x81d}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x100c}}, {0xed, &(0x7f0000000180)=@string={0xed, 0x3, "56c629811fc966d541adc0d5e6c16b05172f71a78dbff56b6231f24e71b9dcdf56d22c3b9df3a8316c23b61b6a381f3e56a958f5c0a1c48b8c262eb335f0151d0bc1015886e93a2cefc7629d1d2a7107e5da0d85b8d602ece8b59a409491598b42f0c941f0aa4ea22e5da4771967f450c90b817967287e351be63f10c731cc0e6d3c19bed3cc8bcce51f9b2307a8a8dc1b2423d9d9a079bcce9a73db6d116085799ef0c155004df800036750c51241fb9661a6c062b4f626c0c4ae18e0a7bab9bf1fb0472d799b4193ee19118ffca29077e5b0bc2240786deb77d541e6f54cff03991b130ad93b244d817b"}}, {0x15, &(0x7f0000000280)=@string={0x15, 0x3, "dcafcd69b865ac7078c12aab813653c650fdde"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x44f}}]}) syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, &(0x7f0000000380)={0x40, 0x23, 0x4f, {0x4f, 0x23, "7d421e05321daf4efc0fe23707ee3aabc6fe64911be3c8701c33b729c00d01f997f2b444f2818bc077b5ee5ed33a891f0ab60760a5e747200857ac9aee1afe41b54dc7e33ea40dcb3d137b9a8a"}}, &(0x7f0000000400)={0x0, 0x3, 0xd, @string={0xd, 0x3, "c55830009201e8ea866abe"}}, &(0x7f0000000440)={0x0, 0xf, 0x10, {0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x1a, 0x3, 0x80, 0x7, 0x6}]}}, &(0x7f0000000480)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x1, 0x0, 0x4, '0x0, {0x4}, &(0x7f0000000b80)=""/175, 0xaf, &(0x7f0000000c40)=""/26, &(0x7f0000000c80)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) timer_create(0x2, &(0x7f0000000d40)={0x0, 0x2d, 0x0, @tid=r1}, &(0x7f0000000d80)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000dc0), 0x2, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000e00)='cpu.pressure\x00', 0x2, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000e40)={0x2, 0x80, 0x0, 0x4a, 0x7, 0x7f, 0x0, 0x6, 0x4, 0xe, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x0, 0x4}, 0x40012, 0x0, 0x9, 0x2, 0x5, 0x1, 0x80, 0x0, 0x52e, 0x0, 0x2}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x6) geteuid() perf_event_open(&(0x7f0000000f00)={0x5, 0x80, 0x5, 0x40, 0x6, 0x7, 0x0, 0x62ed, 0x20001, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000ec0), 0xe}, 0x0, 0x8fc, 0x54b, 0x8, 0x1ff, 0x7fff, 0x4, 0x0, 0x8211, 0x0, 0x3}, 0xffffffffffffffff, 0x4, r2, 0x8) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000f80), 0x10000, 0x0) clone(0x1000, &(0x7f0000000fc0)="cbbfa86f33e87b82bd0570788bd34a22e45df533db24a5b9aae6d78d8ba3d927f8d565f57e8ae1617cd2eebf127ca6469dab2af532fd57bf1ba486595bd0d58dbe2196ae69a82bb2a26dca023eede66a2c0bb301ebd46f4b123ec27a95a96cf87a50700c22d48c42864a70ce070fcf3a39a4f66823644e589d9b3a436768a9f348c5c0a6f11493043d43330025a3352b935d59f4e19860e84c447acacfefd89512eae45e56f0801bdb68e1886c1f1714ba5e3de302cbc3a318cba17266a66101e8ec677714fe4d725815f527b88eb80b65000dfb6c6e214996308254021167436267eaf8004af250a2d3d2f38954e8cb532cb850faeb63", &(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)="82fb5e28049fd05d4e28deeee15db2bb37bcd2d515f00ac3de0ada12e09b07f622ef7593dd46dbed066c99179b5cea9de35e798cd72dc40dd08ac2768b1e49cfebd2dea2c18e0fe8ff3466b07a2f0a117672fe462c07b058746bd1e59a6b5bf3d8e76d536f4c6ff3a696b15d709fb77d49264b93d094a5316d8d4776c5b622b00b02e9e0a7b121567388f269318fc4e3a1") r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001200)='syz1\x00', 0x200002, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000001240), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x40, r5, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}, 0x1, 0x0, 0x0, 0x200040c2}, 0x4081) socket$inet_icmp_raw(0x2, 0x3, 0x1) getgid() r6 = openat$cgroup_subtree(r4, &(0x7f0000001380), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000001440)='syz1\x00', 0x1ff) 08:24:22 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r2 = openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/libata', 0x100, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000180), 0x2, 0x0) r6 = openat$cgroup_pressure(r0, &(0x7f00000001c0)='io.pressure\x00', 0x2, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_devices(r3, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r4, {0x7ff, 0x1}}, '.\x00'}) sched_setparam(0x0, &(0x7f00000002c0)=0x6) openat$cgroup_procs(r4, &(0x7f0000000300)='cgroup.threads\x00', 0x2, 0x0) r7 = getgid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r5, {0xffffffffffffffff, r7}}, './file0/file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) getpgid(r10) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r8, 0x40182103, &(0x7f0000000400)={r9, 0x2, r2, 0x2, 0x80000}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r11, 0xc0189373, &(0x7f0000000480)={{0x1, 0x1, 0x18, r6, {0x1}}, './file0/file0\x00'}) 08:24:22 executing program 2: syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) socketpair(0x27, 0x2, 0x1000, &(0x7f0000000180)={0xffffffffffffffff}) connect$bt_sco(r5, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) r6 = syz_open_dev$mouse(&(0x7f0000000200), 0x4, 0x2e0980) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r6, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) bind$bt_sco(r5, &(0x7f0000000280), 0x8) syz_open_dev$mouse(&(0x7f00000002c0), 0x4, 0x400000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000340)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000400)={r9, 0x1, 0x9}) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x40, 0x40, 0x80000000, 0x9, {{0x31, 0x4, 0x1, 0x6, 0xc4, 0x64, 0x0, 0x8, 0x29, 0x0, @empty, @rand_addr=0x64010102, {[@cipso={0x86, 0x81, 0x2, [{0x5, 0xf, "b8a10592ded646b3e87b5e20f1"}, {0x0, 0x5, "e36710"}, {0x1, 0xa, "a2ac099f65819990"}, {0x2, 0x9, "135cd19ef04e25"}, {0x7, 0x12, "efa15bc63f698a7796d9931acfeb348d"}, {0x5, 0x11, "6ab4dd1e5168e9cc5237526e72e54e"}, {0x1, 0x9, "36b4307a5c32fe"}, {0x5, 0xe, "69c9f6a38ecfef4765f2293e"}, {0x2, 0x12, "df6d82cff4fc0c8dcde2eab6095479a2"}, {0x7, 0x8, "c70d0ce5793b"}]}, @ssrr={0x89, 0x7, 0xdf, [@private=0xa010101]}, @noop, @noop, @timestamp_prespec={0x44, 0x1c, 0xeb, 0x3, 0x6, [{@empty, 0x3}, {@dev={0xac, 0x14, 0x14, 0x3f}}, {@multicast2, 0x8}]}, @lsrr={0x83, 0x7, 0x76, [@local]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r10, 0x89f0, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000580)={'ip_vti0\x00', r11, 0x8, 0x40, 0x3da5, 0xb5e00, {{0x6, 0x4, 0x0, 0x6, 0x18, 0x67, 0x0, 0x48, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @multicast1, {[@end]}}}}}) membarrier(0xc, 0x0) 08:24:22 executing program 3: prctl$PR_SET_FPEXC(0xc, 0x100000) prctl$PR_SET_FPEXC(0xc, 0x1) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x23b, 0x280) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffff}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x40040010) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x62088000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x5}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4020}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000002c0)={0x3}) add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'gretap0\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x7, 0x7, 0xaa5, 0x5, {{0x9, 0x4, 0x2, 0x4, 0x24, 0x64, 0x0, 0x3f, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0xf, 0x4b, [@multicast2, @broadcast, @loopback]}]}}}}}) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000480)={0x1f4, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7fff, @loopback, 0xffffffc1}}, {0x14, 0x2, @in={0x2, 0x4e21, @empty}}}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_to_bridge\x00'}}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa8a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x72, 0x3, "c031602c6221672a5cea29a8b1dc9ae0167cd3de22acf758666d88881744168bb0d11ee8b1d611ecfa4339d1cfca9ed2c5bae2b9505484a61b7670aa97e1ca18950047cfe101e73d3f79d7b3abf89d2da8cec3863d475bfc0769e7e9250b331d230d1fe8ec1d2757cdbed1c59645"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x78c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff9a}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x20}, 0x44000040) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x234, &(0x7f0000000780)={[{0x31, 0x4e00, "aba2db01379985962cf3cd133bc30ca66adf4d014d6f00001fd83cbc8e5f4977a5719e673cd4e4980c73b6290402cd0e39"}, {0x30, 0x4e00, "5ea481a1033d16c4545749705386a3b312a186453223a3bcf062e24f7446af58447039865b041381703615661fc2427a"}, {0xd4, 0x4e00, "517819918095b87c6e8ac8e488ebf55646c25337955c20e93e64d5623db9a0f0a43768be311b4957975aa493ffcecc43bf49d28676abba8b6ccaca288b1620a05b219a7a04b2ab1919faaeda458e9ea471269de1ccfaf1090d4a1c61e8e38017ddfaff59b7308ac04c4452190775379eff26b35c2fc5b6c756c20bbfd95bfec8d8b5b8b0f9254a71a58b425e645cc6ae4c5cbb1a3531790a387b002056ce9d2d57994df8c971412b7cfed5f36bc0705b13f4d3df6011aeab479c8e5ad6fb1dc0de01d2d41ad10822c5ae3d66106f3223865eb207"}, {}, {0x56, 0x4e00, "6724343995935907565e3be35492983379f668acec103b9bb8ca5cbdd475dbd814b8616140f392163f04242dc9ce64298669eac5ddb8ebd66b3342322681dc875e6f71052402c2a8013e5f80df6420a62685bfd16aa7"}, {0x89, 0x4e00, "15b06b86e23f3a3143b581fc60bea092da04ef793953c80918fdecb3714f55588e090e98bc9d929cfa76149ae71244503bdeafcfd2b6e17d86056bc3c7740e28dbfd5d24eba82ef0d87a478b65edc14cba8409540391e25ad69261d11a389f9f6d978044c53cfb9ded08638ab1dedbe3609d099c076f6e0e74547d7340a8f80026b88cdad15fdcbfa1"}]}) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x44, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x20000000) r4 = openat$cgroup_freezer_state(r0, &(0x7f0000000b00), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r4, {0x5f}}, './file0\x00'}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0xbc, 0x0, 0x1, 0x70bd2c, 0xffffffff, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:agp_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_bond\x00'}]}, 0xbc}}, 0x800) prctl$PR_SET_UNALIGN(0x6, 0x0) 08:24:22 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001280)={0x90, 0x0, &(0x7f00000011c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@fda={0x66646185, 0x3, 0x2, 0x21}, @fd, @flat=@weak_binder={0x77622a85, 0xa, 0x2}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000001100)={@fd, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/4096, 0x1000}, @ptr={0x70742a85, 0x0, &(0x7f00000010c0)=""/33, 0x21, 0x2, 0xf}}, &(0x7f0000001180)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0xfffffffffffffffe}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000012c0)='./binderfs2/custom1\x00', 0x6, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001300)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file0\x00'}) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x5) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000001340)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000001380)={{0x1, 0x1, 0x18, r2, {0x6}}, './file0\x00'}) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000001400)='./file1\x00', 0x1000000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001440)='/sys/module/sunrpc', 0x121000, 0x100) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000001480)={{0x1, 0x1, 0x18, r6, {0xbf9d}}, '\x00'}) r8 = openat$cgroup_type(r6, &(0x7f00000014c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000001500)={{0x1, 0x1, 0x18, r8, {0x5}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000001540)={{0x1, 0x1, 0x18, r7, {0x7, 0x1f}}, '.\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000001580)={{0x1, 0x1, 0x18, r7, {0x9}}, './file0\x00'}) write$cgroup_type(r9, &(0x7f00000015c0), 0x9) timer_delete(0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001600)='/sys/module/8250', 0x4000, 0x10) 08:24:22 executing program 4: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r0, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x10b}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xce}]}, 0x48}, 0x1, 0x0, 0x0, 0x24004024}, 0x40040) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000240)={0xfffffffffffffffe, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x74, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:auditd_log_t:s0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x40008d4) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_hsr\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}]}, 0x34}, 0x1, 0x0, 0x0, 0x94}, 0x4890) pselect6(0x40, &(0x7f00000004c0)={0x3e800000000000, 0xf31, 0x9, 0x8, 0xb6fc, 0x0, 0x286, 0x6}, &(0x7f0000000500)={0x200, 0x9, 0x400, 0x1, 0x1, 0x3f, 0x1ff, 0x1}, &(0x7f0000000540)={0x2, 0x200, 0xffff, 0x2b4, 0x0, 0x2, 0x7, 0x7}, &(0x7f0000000580), &(0x7f0000000600)={&(0x7f00000005c0)={[0x2]}, 0x8}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xa4, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:modem_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:inetd_log_t:s0\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004080}, 0x20000000) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000007c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x64, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000980), r1) r4 = syz_open_dev$mouse(&(0x7f00000009c0), 0x80000000, 0x4080) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000a00)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x800}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000a40)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000a80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000b80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x74, r3, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd980}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x24}]}, 0x74}, 0x1, 0x0, 0x0, 0x44015}, 0x4000060) sendmsg$NLBL_CALIPSO_C_LISTALL(r1, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008424}, 0x4040000) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000cc0)='syz0\x00', 0x200002, 0x0) openat$cgroup_int(r8, &(0x7f0000000d00)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0) 08:24:23 executing program 7: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x1}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r2, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x80) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000001c0), r1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x220}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r2, 0xc00, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r5}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x8800}, 0x8000) r6 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7, 0x101280) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000400), r4) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r7, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x21}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) openat$cgroup_type(r0, &(0x7f0000000500), 0x2, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) setsockopt$inet_icmp_ICMP_FILTER(r6, 0x1, 0x1, &(0x7f0000000640)={0x800}, 0x4) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}}, 0x4000000) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r3, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8000) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000880), r4) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r8, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44014}, 0x4000090) 08:24:23 executing program 6: getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)=0x0) keyctl$get_persistent(0x16, r0, 0xfffffffffffffffe) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1, 0xee00}}, './file0\x00'}) keyctl$search(0xa, 0x0, &(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x2}, 0xfffffffffffffffb) r3 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "4b17bd94b64996f955ca1a408e24f394a01bfcb5532cc3de9cb7a1e0cbf711f55034e59d22a961be676917baae46cbc7712e6446c322f0298f03e74cd64a94c0", 0x18}, 0x48, 0xfffffffffffffffa) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x6, 0xffff8e2f}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0x12}}, './file0\x00'}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_READY(r6, 0xc0189376, &(0x7f0000000340)={{0x1, 0x1, 0x18, r7, {0x595}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r8, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r9, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000400)={{0x1, 0x1, 0x18, r6, {0x9fb6}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r9, 0xc0189371, &(0x7f0000000440)={{0x1, 0x1, 0x18, r11}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000480)={{0x1, 0x1, 0x18, r11, {0x9}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r9, 0xc0189377, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r12, {0x5014d0c7, 0x8930}}, './file0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000540)={{0x1, 0x1, 0x18, r10, {r13}}, './file0\x00'}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xc) keyctl$negate(0xd, r3, 0x10001, r3) [ 59.486242] audit: type=1400 audit(1664612663.014:6): avc: denied { execmem } for pid=288 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 60.792186] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.793964] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.798180] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 60.800341] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 60.802277] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 60.804155] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 60.806089] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.807654] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.809116] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 60.810489] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 60.811794] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 60.813215] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.814822] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 60.816411] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.818026] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.819512] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 60.820877] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 60.822358] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 60.823709] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.824917] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 60.830560] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.832822] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.834402] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.836159] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 60.837867] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 60.839006] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 60.840525] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 60.842326] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 60.844196] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 60.845942] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.847091] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 60.848681] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.849974] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 60.851224] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 60.852832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.854190] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 60.855773] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 60.857151] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 60.864285] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 60.866009] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 60.869102] Bluetooth: hci3: HCI_REQ-0x0c1a [ 60.876929] Bluetooth: hci1: HCI_REQ-0x0c1a [ 60.885243] Bluetooth: hci6: HCI_REQ-0x0c1a [ 60.886860] Bluetooth: hci5: HCI_REQ-0x0c1a [ 60.889878] Bluetooth: hci4: HCI_REQ-0x0c1a [ 60.906480] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 60.911320] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.912806] Bluetooth: hci2: HCI_REQ-0x0c1a [ 60.933327] Bluetooth: hci0: HCI_REQ-0x0c1a [ 60.974557] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 60.976485] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 60.978210] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 60.981357] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 60.983262] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 60.984944] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 61.000079] Bluetooth: hci7: HCI_REQ-0x0c1a [ 62.903063] Bluetooth: hci3: command 0x0409 tx timeout [ 62.966734] Bluetooth: hci0: command 0x0409 tx timeout [ 62.966750] Bluetooth: hci1: command 0x0409 tx timeout [ 62.967620] Bluetooth: hci2: command 0x0409 tx timeout [ 62.968222] Bluetooth: hci5: command 0x0409 tx timeout [ 62.968740] Bluetooth: hci6: command 0x0409 tx timeout [ 62.969271] Bluetooth: hci4: command 0x0409 tx timeout [ 63.030675] Bluetooth: hci7: command 0x0409 tx timeout [ 64.950697] Bluetooth: hci3: command 0x041b tx timeout [ 65.014762] Bluetooth: hci4: command 0x041b tx timeout [ 65.015791] Bluetooth: hci6: command 0x041b tx timeout [ 65.015841] Bluetooth: hci5: command 0x041b tx timeout [ 65.016201] Bluetooth: hci2: command 0x041b tx timeout [ 65.016647] Bluetooth: hci1: command 0x041b tx timeout [ 65.017013] Bluetooth: hci0: command 0x041b tx timeout [ 65.078626] Bluetooth: hci7: command 0x041b tx timeout [ 66.999707] Bluetooth: hci3: command 0x040f tx timeout [ 67.062672] Bluetooth: hci0: command 0x040f tx timeout [ 67.063118] Bluetooth: hci1: command 0x040f tx timeout [ 67.063530] Bluetooth: hci4: command 0x040f tx timeout [ 67.063987] Bluetooth: hci2: command 0x040f tx timeout [ 67.064393] Bluetooth: hci5: command 0x040f tx timeout [ 67.064833] Bluetooth: hci6: command 0x040f tx timeout [ 67.126624] Bluetooth: hci7: command 0x040f tx timeout [ 69.047673] Bluetooth: hci3: command 0x0419 tx timeout [ 69.111650] Bluetooth: hci6: command 0x0419 tx timeout [ 69.112087] Bluetooth: hci5: command 0x0419 tx timeout [ 69.112496] Bluetooth: hci2: command 0x0419 tx timeout [ 69.113229] Bluetooth: hci4: command 0x0419 tx timeout [ 69.113635] Bluetooth: hci1: command 0x0419 tx timeout [ 69.114017] Bluetooth: hci0: command 0x0419 tx timeout [ 69.174734] Bluetooth: hci7: command 0x0419 tx timeout [ 116.482285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.493492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.010373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.014761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 08:25:20 executing program 3: prctl$PR_SET_FPEXC(0xc, 0x100000) prctl$PR_SET_FPEXC(0xc, 0x1) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x23b, 0x280) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffff}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x40040010) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x62088000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x5}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4020}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000002c0)={0x3}) add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'gretap0\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x7, 0x7, 0xaa5, 0x5, {{0x9, 0x4, 0x2, 0x4, 0x24, 0x64, 0x0, 0x3f, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0xf, 0x4b, [@multicast2, @broadcast, @loopback]}]}}}}}) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000480)={0x1f4, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7fff, @loopback, 0xffffffc1}}, {0x14, 0x2, @in={0x2, 0x4e21, @empty}}}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_to_bridge\x00'}}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa8a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x72, 0x3, "c031602c6221672a5cea29a8b1dc9ae0167cd3de22acf758666d88881744168bb0d11ee8b1d611ecfa4339d1cfca9ed2c5bae2b9505484a61b7670aa97e1ca18950047cfe101e73d3f79d7b3abf89d2da8cec3863d475bfc0769e7e9250b331d230d1fe8ec1d2757cdbed1c59645"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x78c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff9a}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x20}, 0x44000040) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x234, &(0x7f0000000780)={[{0x31, 0x4e00, "aba2db01379985962cf3cd133bc30ca66adf4d014d6f00001fd83cbc8e5f4977a5719e673cd4e4980c73b6290402cd0e39"}, {0x30, 0x4e00, "5ea481a1033d16c4545749705386a3b312a186453223a3bcf062e24f7446af58447039865b041381703615661fc2427a"}, {0xd4, 0x4e00, "517819918095b87c6e8ac8e488ebf55646c25337955c20e93e64d5623db9a0f0a43768be311b4957975aa493ffcecc43bf49d28676abba8b6ccaca288b1620a05b219a7a04b2ab1919faaeda458e9ea471269de1ccfaf1090d4a1c61e8e38017ddfaff59b7308ac04c4452190775379eff26b35c2fc5b6c756c20bbfd95bfec8d8b5b8b0f9254a71a58b425e645cc6ae4c5cbb1a3531790a387b002056ce9d2d57994df8c971412b7cfed5f36bc0705b13f4d3df6011aeab479c8e5ad6fb1dc0de01d2d41ad10822c5ae3d66106f3223865eb207"}, {}, {0x56, 0x4e00, "6724343995935907565e3be35492983379f668acec103b9bb8ca5cbdd475dbd814b8616140f392163f04242dc9ce64298669eac5ddb8ebd66b3342322681dc875e6f71052402c2a8013e5f80df6420a62685bfd16aa7"}, {0x89, 0x4e00, "15b06b86e23f3a3143b581fc60bea092da04ef793953c80918fdecb3714f55588e090e98bc9d929cfa76149ae71244503bdeafcfd2b6e17d86056bc3c7740e28dbfd5d24eba82ef0d87a478b65edc14cba8409540391e25ad69261d11a389f9f6d978044c53cfb9ded08638ab1dedbe3609d099c076f6e0e74547d7340a8f80026b88cdad15fdcbfa1"}]}) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x44, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x20000000) r4 = openat$cgroup_freezer_state(r0, &(0x7f0000000b00), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r4, {0x5f}}, './file0\x00'}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0xbc, 0x0, 0x1, 0x70bd2c, 0xffffffff, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:agp_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_bond\x00'}]}, 0xbc}}, 0x800) prctl$PR_SET_UNALIGN(0x6, 0x0) [ 117.136222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.150403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 08:25:20 executing program 7: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x1}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r2, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x80) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000001c0), r1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x220}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r2, 0xc00, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r5}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x8800}, 0x8000) r6 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7, 0x101280) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000400), r4) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r7, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x21}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) openat$cgroup_type(r0, &(0x7f0000000500), 0x2, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) setsockopt$inet_icmp_ICMP_FILTER(r6, 0x1, 0x1, &(0x7f0000000640)={0x800}, 0x4) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}}, 0x4000000) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r3, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8000) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000880), r4) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r8, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44014}, 0x4000090) [ 117.437168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy 08:25:20 executing program 7: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x1}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r2, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x80) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000001c0), r1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x220}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r2, 0xc00, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r5}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x8800}, 0x8000) r6 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7, 0x101280) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000400), r4) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r7, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x21}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) openat$cgroup_type(r0, &(0x7f0000000500), 0x2, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) setsockopt$inet_icmp_ICMP_FILTER(r6, 0x1, 0x1, &(0x7f0000000640)={0x800}, 0x4) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}}, 0x4000000) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r3, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8000) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000880), r4) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r8, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44014}, 0x4000090) [ 117.443020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.449646] audit: type=1400 audit(1664612720.977:7): avc: denied { open } for pid=3892 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 117.451161] audit: type=1400 audit(1664612720.978:8): avc: denied { kernel } for pid=3892 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 08:25:21 executing program 7: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x1}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r2, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x80) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000001c0), r1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x220}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r2, 0xc00, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r5}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x8800}, 0x8000) r6 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7, 0x101280) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000400), r4) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r7, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x21}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) openat$cgroup_type(r0, &(0x7f0000000500), 0x2, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) setsockopt$inet_icmp_ICMP_FILTER(r6, 0x1, 0x1, &(0x7f0000000640)={0x800}, 0x4) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}}, 0x4000000) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r3, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8000) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000880), r4) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r8, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44014}, 0x4000090) 08:25:21 executing program 3: prctl$PR_SET_FPEXC(0xc, 0x100000) prctl$PR_SET_FPEXC(0xc, 0x1) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x23b, 0x280) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffff}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x40040010) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x62088000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x5}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4020}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000002c0)={0x3}) add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'gretap0\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x7, 0x7, 0xaa5, 0x5, {{0x9, 0x4, 0x2, 0x4, 0x24, 0x64, 0x0, 0x3f, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0xf, 0x4b, [@multicast2, @broadcast, @loopback]}]}}}}}) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000480)={0x1f4, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7fff, @loopback, 0xffffffc1}}, {0x14, 0x2, @in={0x2, 0x4e21, @empty}}}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_to_bridge\x00'}}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa8a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x72, 0x3, "c031602c6221672a5cea29a8b1dc9ae0167cd3de22acf758666d88881744168bb0d11ee8b1d611ecfa4339d1cfca9ed2c5bae2b9505484a61b7670aa97e1ca18950047cfe101e73d3f79d7b3abf89d2da8cec3863d475bfc0769e7e9250b331d230d1fe8ec1d2757cdbed1c59645"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x78c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff9a}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x20}, 0x44000040) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x234, &(0x7f0000000780)={[{0x31, 0x4e00, "aba2db01379985962cf3cd133bc30ca66adf4d014d6f00001fd83cbc8e5f4977a5719e673cd4e4980c73b6290402cd0e39"}, {0x30, 0x4e00, "5ea481a1033d16c4545749705386a3b312a186453223a3bcf062e24f7446af58447039865b041381703615661fc2427a"}, {0xd4, 0x4e00, "517819918095b87c6e8ac8e488ebf55646c25337955c20e93e64d5623db9a0f0a43768be311b4957975aa493ffcecc43bf49d28676abba8b6ccaca288b1620a05b219a7a04b2ab1919faaeda458e9ea471269de1ccfaf1090d4a1c61e8e38017ddfaff59b7308ac04c4452190775379eff26b35c2fc5b6c756c20bbfd95bfec8d8b5b8b0f9254a71a58b425e645cc6ae4c5cbb1a3531790a387b002056ce9d2d57994df8c971412b7cfed5f36bc0705b13f4d3df6011aeab479c8e5ad6fb1dc0de01d2d41ad10822c5ae3d66106f3223865eb207"}, {}, {0x56, 0x4e00, "6724343995935907565e3be35492983379f668acec103b9bb8ca5cbdd475dbd814b8616140f392163f04242dc9ce64298669eac5ddb8ebd66b3342322681dc875e6f71052402c2a8013e5f80df6420a62685bfd16aa7"}, {0x89, 0x4e00, "15b06b86e23f3a3143b581fc60bea092da04ef793953c80918fdecb3714f55588e090e98bc9d929cfa76149ae71244503bdeafcfd2b6e17d86056bc3c7740e28dbfd5d24eba82ef0d87a478b65edc14cba8409540391e25ad69261d11a389f9f6d978044c53cfb9ded08638ab1dedbe3609d099c076f6e0e74547d7340a8f80026b88cdad15fdcbfa1"}]}) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x44, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x20000000) r4 = openat$cgroup_freezer_state(r0, &(0x7f0000000b00), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r4, {0x5f}}, './file0\x00'}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0xbc, 0x0, 0x1, 0x70bd2c, 0xffffffff, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:agp_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_bond\x00'}]}, 0xbc}}, 0x800) prctl$PR_SET_UNALIGN(0x6, 0x0) [ 117.765821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.767177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 08:25:21 executing program 7: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x1}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r2, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x80) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000001c0), r1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x220}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r2, 0xc00, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r5}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x8800}, 0x8000) r6 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7, 0x101280) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000400), r4) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r7, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x21}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) openat$cgroup_type(r0, &(0x7f0000000500), 0x2, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) setsockopt$inet_icmp_ICMP_FILTER(r6, 0x1, 0x1, &(0x7f0000000640)={0x800}, 0x4) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}}, 0x4000000) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r3, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8000) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000880), r4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 118.058061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.059334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 08:25:38 executing program 4: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r0, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x10b}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xce}]}, 0x48}, 0x1, 0x0, 0x0, 0x24004024}, 0x40040) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000240)={0xfffffffffffffffe, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x74, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:auditd_log_t:s0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x40008d4) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_hsr\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}]}, 0x34}, 0x1, 0x0, 0x0, 0x94}, 0x4890) pselect6(0x40, &(0x7f00000004c0)={0x3e800000000000, 0xf31, 0x9, 0x8, 0xb6fc, 0x0, 0x286, 0x6}, &(0x7f0000000500)={0x200, 0x9, 0x400, 0x1, 0x1, 0x3f, 0x1ff, 0x1}, &(0x7f0000000540)={0x2, 0x200, 0xffff, 0x2b4, 0x0, 0x2, 0x7, 0x7}, &(0x7f0000000580), &(0x7f0000000600)={&(0x7f00000005c0)={[0x2]}, 0x8}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xa4, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:modem_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:inetd_log_t:s0\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004080}, 0x20000000) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000007c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x64, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000980), r1) r4 = syz_open_dev$mouse(&(0x7f00000009c0), 0x80000000, 0x4080) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000a00)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x800}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000a40)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000a80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000b80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x74, r3, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd980}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x24}]}, 0x74}, 0x1, 0x0, 0x0, 0x44015}, 0x4000060) sendmsg$NLBL_CALIPSO_C_LISTALL(r1, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008424}, 0x4040000) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000cc0)='syz0\x00', 0x200002, 0x0) openat$cgroup_int(r8, &(0x7f0000000d00)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0) 08:25:38 executing program 1: r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x60d286c4b14df7b4, 0x61, 0x23, 0x8a, 0x8, 0x12d1, 0x14b8, 0xfac0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xc5, 0x0, 0x80, 0x49, [{{0x9, 0x4, 0xdb, 0x40, 0x0, 0xff, 0x3, 0x14, 0x3, [@hid_hid={0x9, 0x21, 0x4, 0x40, 0x1, {0x22, 0x639}}]}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x15, 0x0, 0x39, 0xff, 0x1}, 0x39, &(0x7f0000000080)={0x5, 0xf, 0x39, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0x6, 0x1f, 0x4, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x3, 0xb, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x2, 0x4d, 0x2}, @ssp_cap={0x18, 0x10, 0xa, 0x8, 0x3, 0x7, 0xf00, 0x101, [0x0, 0xffff, 0xff0000]}]}, 0x6, [{0x33, &(0x7f00000000c0)=@string={0x33, 0x3, "a2e8b191adb2231f1f049528253546715d1584f16bbdc70b57a1033875ae1daea477fb53f3e357b0227b1a439de8decc98"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x81d}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x100c}}, {0xed, &(0x7f0000000180)=@string={0xed, 0x3, "56c629811fc966d541adc0d5e6c16b05172f71a78dbff56b6231f24e71b9dcdf56d22c3b9df3a8316c23b61b6a381f3e56a958f5c0a1c48b8c262eb335f0151d0bc1015886e93a2cefc7629d1d2a7107e5da0d85b8d602ece8b59a409491598b42f0c941f0aa4ea22e5da4771967f450c90b817967287e351be63f10c731cc0e6d3c19bed3cc8bcce51f9b2307a8a8dc1b2423d9d9a079bcce9a73db6d116085799ef0c155004df800036750c51241fb9661a6c062b4f626c0c4ae18e0a7bab9bf1fb0472d799b4193ee19118ffca29077e5b0bc2240786deb77d541e6f54cff03991b130ad93b244d817b"}}, {0x15, &(0x7f0000000280)=@string={0x15, 0x3, "dcafcd69b865ac7078c12aab813653c650fdde"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x44f}}]}) syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, &(0x7f0000000380)={0x40, 0x23, 0x4f, {0x4f, 0x23, "7d421e05321daf4efc0fe23707ee3aabc6fe64911be3c8701c33b729c00d01f997f2b444f2818bc077b5ee5ed33a891f0ab60760a5e747200857ac9aee1afe41b54dc7e33ea40dcb3d137b9a8a"}}, &(0x7f0000000400)={0x0, 0x3, 0xd, @string={0xd, 0x3, "c55830009201e8ea866abe"}}, &(0x7f0000000440)={0x0, 0xf, 0x10, {0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x1a, 0x3, 0x80, 0x7, 0x6}]}}, &(0x7f0000000480)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x1, 0x0, 0x4, '0x0, {0x4}, &(0x7f0000000b80)=""/175, 0xaf, &(0x7f0000000c40)=""/26, &(0x7f0000000c80)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) timer_create(0x2, &(0x7f0000000d40)={0x0, 0x2d, 0x0, @tid=r1}, &(0x7f0000000d80)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000dc0), 0x2, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000e00)='cpu.pressure\x00', 0x2, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000e40)={0x2, 0x80, 0x0, 0x4a, 0x7, 0x7f, 0x0, 0x6, 0x4, 0xe, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x0, 0x4}, 0x40012, 0x0, 0x9, 0x2, 0x5, 0x1, 0x80, 0x0, 0x52e, 0x0, 0x2}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x6) geteuid() perf_event_open(&(0x7f0000000f00)={0x5, 0x80, 0x5, 0x40, 0x6, 0x7, 0x0, 0x62ed, 0x20001, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000ec0), 0xe}, 0x0, 0x8fc, 0x54b, 0x8, 0x1ff, 0x7fff, 0x4, 0x0, 0x8211, 0x0, 0x3}, 0xffffffffffffffff, 0x4, r2, 0x8) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000f80), 0x10000, 0x0) clone(0x1000, &(0x7f0000000fc0)="cbbfa86f33e87b82bd0570788bd34a22e45df533db24a5b9aae6d78d8ba3d927f8d565f57e8ae1617cd2eebf127ca6469dab2af532fd57bf1ba486595bd0d58dbe2196ae69a82bb2a26dca023eede66a2c0bb301ebd46f4b123ec27a95a96cf87a50700c22d48c42864a70ce070fcf3a39a4f66823644e589d9b3a436768a9f348c5c0a6f11493043d43330025a3352b935d59f4e19860e84c447acacfefd89512eae45e56f0801bdb68e1886c1f1714ba5e3de302cbc3a318cba17266a66101e8ec677714fe4d725815f527b88eb80b65000dfb6c6e214996308254021167436267eaf8004af250a2d3d2f38954e8cb532cb850faeb63", &(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)="82fb5e28049fd05d4e28deeee15db2bb37bcd2d515f00ac3de0ada12e09b07f622ef7593dd46dbed066c99179b5cea9de35e798cd72dc40dd08ac2768b1e49cfebd2dea2c18e0fe8ff3466b07a2f0a117672fe462c07b058746bd1e59a6b5bf3d8e76d536f4c6ff3a696b15d709fb77d49264b93d094a5316d8d4776c5b622b00b02e9e0a7b121567388f269318fc4e3a1") r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001200)='syz1\x00', 0x200002, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000001240), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x40, r5, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}, 0x1, 0x0, 0x0, 0x200040c2}, 0x4081) socket$inet_icmp_raw(0x2, 0x3, 0x1) getgid() r6 = openat$cgroup_subtree(r4, &(0x7f0000001380), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000001440)='syz1\x00', 0x1ff) 08:25:38 executing program 2: syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) socketpair(0x27, 0x2, 0x1000, &(0x7f0000000180)={0xffffffffffffffff}) connect$bt_sco(r5, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) r6 = syz_open_dev$mouse(&(0x7f0000000200), 0x4, 0x2e0980) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r6, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) bind$bt_sco(r5, &(0x7f0000000280), 0x8) syz_open_dev$mouse(&(0x7f00000002c0), 0x4, 0x400000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000340)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000400)={r9, 0x1, 0x9}) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x40, 0x40, 0x80000000, 0x9, {{0x31, 0x4, 0x1, 0x6, 0xc4, 0x64, 0x0, 0x8, 0x29, 0x0, @empty, @rand_addr=0x64010102, {[@cipso={0x86, 0x81, 0x2, [{0x5, 0xf, "b8a10592ded646b3e87b5e20f1"}, {0x0, 0x5, "e36710"}, {0x1, 0xa, "a2ac099f65819990"}, {0x2, 0x9, "135cd19ef04e25"}, {0x7, 0x12, "efa15bc63f698a7796d9931acfeb348d"}, {0x5, 0x11, "6ab4dd1e5168e9cc5237526e72e54e"}, {0x1, 0x9, "36b4307a5c32fe"}, {0x5, 0xe, "69c9f6a38ecfef4765f2293e"}, {0x2, 0x12, "df6d82cff4fc0c8dcde2eab6095479a2"}, {0x7, 0x8, "c70d0ce5793b"}]}, @ssrr={0x89, 0x7, 0xdf, [@private=0xa010101]}, @noop, @noop, @timestamp_prespec={0x44, 0x1c, 0xeb, 0x3, 0x6, [{@empty, 0x3}, {@dev={0xac, 0x14, 0x14, 0x3f}}, {@multicast2, 0x8}]}, @lsrr={0x83, 0x7, 0x76, [@local]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r10, 0x89f0, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000580)={'ip_vti0\x00', r11, 0x8, 0x40, 0x3da5, 0xb5e00, {{0x6, 0x4, 0x0, 0x6, 0x18, 0x67, 0x0, 0x48, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @multicast1, {[@end]}}}}}) membarrier(0xc, 0x0) 08:25:38 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r2 = openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/libata', 0x100, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000180), 0x2, 0x0) r6 = openat$cgroup_pressure(r0, &(0x7f00000001c0)='io.pressure\x00', 0x2, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_devices(r3, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r4, {0x7ff, 0x1}}, '.\x00'}) sched_setparam(0x0, &(0x7f00000002c0)=0x6) openat$cgroup_procs(r4, &(0x7f0000000300)='cgroup.threads\x00', 0x2, 0x0) r7 = getgid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r5, {0xffffffffffffffff, r7}}, './file0/file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) getpgid(r10) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r8, 0x40182103, &(0x7f0000000400)={r9, 0x2, r2, 0x2, 0x80000}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r11, 0xc0189373, &(0x7f0000000480)={{0x1, 0x1, 0x18, r6, {0x1}}, './file0/file0\x00'}) [ 135.132322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.133282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 08:25:38 executing program 6: getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)=0x0) keyctl$get_persistent(0x16, r0, 0xfffffffffffffffe) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1, 0xee00}}, './file0\x00'}) keyctl$search(0xa, 0x0, &(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x2}, 0xfffffffffffffffb) r3 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "4b17bd94b64996f955ca1a408e24f394a01bfcb5532cc3de9cb7a1e0cbf711f55034e59d22a961be676917baae46cbc7712e6446c322f0298f03e74cd64a94c0", 0x18}, 0x48, 0xfffffffffffffffa) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x6, 0xffff8e2f}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0x12}}, './file0\x00'}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_READY(r6, 0xc0189376, &(0x7f0000000340)={{0x1, 0x1, 0x18, r7, {0x595}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r8, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r9, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000400)={{0x1, 0x1, 0x18, r6, {0x9fb6}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r9, 0xc0189371, &(0x7f0000000440)={{0x1, 0x1, 0x18, r11}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000480)={{0x1, 0x1, 0x18, r11, {0x9}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r9, 0xc0189377, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r12, {0x5014d0c7, 0x8930}}, './file0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000540)={{0x1, 0x1, 0x18, r10, {r13}}, './file0\x00'}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xc) keyctl$negate(0xd, r3, 0x10001, r3) 08:25:38 executing program 3: prctl$PR_SET_FPEXC(0xc, 0x100000) prctl$PR_SET_FPEXC(0xc, 0x1) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x23b, 0x280) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffff}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x40040010) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x62088000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x5}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4020}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000002c0)={0x3}) add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'gretap0\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x7, 0x7, 0xaa5, 0x5, {{0x9, 0x4, 0x2, 0x4, 0x24, 0x64, 0x0, 0x3f, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0xf, 0x4b, [@multicast2, @broadcast, @loopback]}]}}}}}) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000480)={0x1f4, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7fff, @loopback, 0xffffffc1}}, {0x14, 0x2, @in={0x2, 0x4e21, @empty}}}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_to_bridge\x00'}}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa8a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x72, 0x3, "c031602c6221672a5cea29a8b1dc9ae0167cd3de22acf758666d88881744168bb0d11ee8b1d611ecfa4339d1cfca9ed2c5bae2b9505484a61b7670aa97e1ca18950047cfe101e73d3f79d7b3abf89d2da8cec3863d475bfc0769e7e9250b331d230d1fe8ec1d2757cdbed1c59645"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x78c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff9a}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x20}, 0x44000040) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x234, &(0x7f0000000780)={[{0x31, 0x4e00, "aba2db01379985962cf3cd133bc30ca66adf4d014d6f00001fd83cbc8e5f4977a5719e673cd4e4980c73b6290402cd0e39"}, {0x30, 0x4e00, "5ea481a1033d16c4545749705386a3b312a186453223a3bcf062e24f7446af58447039865b041381703615661fc2427a"}, {0xd4, 0x4e00, "517819918095b87c6e8ac8e488ebf55646c25337955c20e93e64d5623db9a0f0a43768be311b4957975aa493ffcecc43bf49d28676abba8b6ccaca288b1620a05b219a7a04b2ab1919faaeda458e9ea471269de1ccfaf1090d4a1c61e8e38017ddfaff59b7308ac04c4452190775379eff26b35c2fc5b6c756c20bbfd95bfec8d8b5b8b0f9254a71a58b425e645cc6ae4c5cbb1a3531790a387b002056ce9d2d57994df8c971412b7cfed5f36bc0705b13f4d3df6011aeab479c8e5ad6fb1dc0de01d2d41ad10822c5ae3d66106f3223865eb207"}, {}, {0x56, 0x4e00, "6724343995935907565e3be35492983379f668acec103b9bb8ca5cbdd475dbd814b8616140f392163f04242dc9ce64298669eac5ddb8ebd66b3342322681dc875e6f71052402c2a8013e5f80df6420a62685bfd16aa7"}, {0x89, 0x4e00, "15b06b86e23f3a3143b581fc60bea092da04ef793953c80918fdecb3714f55588e090e98bc9d929cfa76149ae71244503bdeafcfd2b6e17d86056bc3c7740e28dbfd5d24eba82ef0d87a478b65edc14cba8409540391e25ad69261d11a389f9f6d978044c53cfb9ded08638ab1dedbe3609d099c076f6e0e74547d7340a8f80026b88cdad15fdcbfa1"}]}) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x44, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x20000000) r4 = openat$cgroup_freezer_state(r0, &(0x7f0000000b00), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r4, {0x5f}}, './file0\x00'}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0xbc, 0x0, 0x1, 0x70bd2c, 0xffffffff, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:agp_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_bond\x00'}]}, 0xbc}}, 0x800) prctl$PR_SET_UNALIGN(0x6, 0x0) 08:25:38 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001280)={0x90, 0x0, &(0x7f00000011c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@fda={0x66646185, 0x3, 0x2, 0x21}, @fd, @flat=@weak_binder={0x77622a85, 0xa, 0x2}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000001100)={@fd, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/4096, 0x1000}, @ptr={0x70742a85, 0x0, &(0x7f00000010c0)=""/33, 0x21, 0x2, 0xf}}, &(0x7f0000001180)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0xfffffffffffffffe}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000012c0)='./binderfs2/custom1\x00', 0x6, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001300)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file0\x00'}) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x5) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000001340)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000001380)={{0x1, 0x1, 0x18, r2, {0x6}}, './file0\x00'}) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000001400)='./file1\x00', 0x1000000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001440)='/sys/module/sunrpc', 0x121000, 0x100) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000001480)={{0x1, 0x1, 0x18, r6, {0xbf9d}}, '\x00'}) r8 = openat$cgroup_type(r6, &(0x7f00000014c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000001500)={{0x1, 0x1, 0x18, r8, {0x5}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000001540)={{0x1, 0x1, 0x18, r7, {0x7, 0x1f}}, '.\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000001580)={{0x1, 0x1, 0x18, r7, {0x9}}, './file0\x00'}) write$cgroup_type(r9, &(0x7f00000015c0), 0x9) timer_delete(0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001600)='/sys/module/8250', 0x4000, 0x10) 08:25:38 executing program 7: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x1}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r2, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x80) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000001c0), r1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x220}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r2, 0xc00, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r5}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x8800}, 0x8000) r6 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7, 0x101280) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000400), r4) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r7, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x21}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) openat$cgroup_type(r0, &(0x7f0000000500), 0x2, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) setsockopt$inet_icmp_ICMP_FILTER(r6, 0x1, 0x1, &(0x7f0000000640)={0x800}, 0x4) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}}, 0x4000000) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r3, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8000) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000880), r4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 08:25:38 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r2 = openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/libata', 0x100, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000180), 0x2, 0x0) r6 = openat$cgroup_pressure(r0, &(0x7f00000001c0)='io.pressure\x00', 0x2, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_devices(r3, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r4, {0x7ff, 0x1}}, '.\x00'}) sched_setparam(0x0, &(0x7f00000002c0)=0x6) openat$cgroup_procs(r4, &(0x7f0000000300)='cgroup.threads\x00', 0x2, 0x0) r7 = getgid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r5, {0xffffffffffffffff, r7}}, './file0/file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) getpgid(r10) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r8, 0x40182103, &(0x7f0000000400)={r9, 0x2, r2, 0x2, 0x80000}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r11, 0xc0189373, &(0x7f0000000480)={{0x1, 0x1, 0x18, r6, {0x1}}, './file0/file0\x00'}) [ 135.237203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.251532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 08:25:38 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r2 = openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/libata', 0x100, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000180), 0x2, 0x0) r6 = openat$cgroup_pressure(r0, &(0x7f00000001c0)='io.pressure\x00', 0x2, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_devices(r3, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r4, {0x7ff, 0x1}}, '.\x00'}) sched_setparam(0x0, &(0x7f00000002c0)=0x6) openat$cgroup_procs(r4, &(0x7f0000000300)='cgroup.threads\x00', 0x2, 0x0) r7 = getgid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r5, {0xffffffffffffffff, r7}}, './file0/file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) getpgid(r10) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r8, 0x40182103, &(0x7f0000000400)={r9, 0x2, r2, 0x2, 0x80000}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r11, 0xc0189373, &(0x7f0000000480)={{0x1, 0x1, 0x18, r6, {0x1}}, './file0/file0\x00'}) 08:25:38 executing program 6: getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)=0x0) keyctl$get_persistent(0x16, r0, 0xfffffffffffffffe) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1, 0xee00}}, './file0\x00'}) keyctl$search(0xa, 0x0, &(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x2}, 0xfffffffffffffffb) r3 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "4b17bd94b64996f955ca1a408e24f394a01bfcb5532cc3de9cb7a1e0cbf711f55034e59d22a961be676917baae46cbc7712e6446c322f0298f03e74cd64a94c0", 0x18}, 0x48, 0xfffffffffffffffa) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x6, 0xffff8e2f}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0x12}}, './file0\x00'}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_READY(r6, 0xc0189376, &(0x7f0000000340)={{0x1, 0x1, 0x18, r7, {0x595}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r8, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r9, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000400)={{0x1, 0x1, 0x18, r6, {0x9fb6}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r9, 0xc0189371, &(0x7f0000000440)={{0x1, 0x1, 0x18, r11}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000480)={{0x1, 0x1, 0x18, r11, {0x9}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r9, 0xc0189377, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r12, {0x5014d0c7, 0x8930}}, './file0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000540)={{0x1, 0x1, 0x18, r10, {r13}}, './file0\x00'}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xc) keyctl$negate(0xd, r3, 0x10001, r3) 08:25:38 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001280)={0x90, 0x0, &(0x7f00000011c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@fda={0x66646185, 0x3, 0x2, 0x21}, @fd, @flat=@weak_binder={0x77622a85, 0xa, 0x2}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000001100)={@fd, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/4096, 0x1000}, @ptr={0x70742a85, 0x0, &(0x7f00000010c0)=""/33, 0x21, 0x2, 0xf}}, &(0x7f0000001180)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0xfffffffffffffffe}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000012c0)='./binderfs2/custom1\x00', 0x6, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001300)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file0\x00'}) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x5) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000001340)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000001380)={{0x1, 0x1, 0x18, r2, {0x6}}, './file0\x00'}) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000001400)='./file1\x00', 0x1000000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001440)='/sys/module/sunrpc', 0x121000, 0x100) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000001480)={{0x1, 0x1, 0x18, r6, {0xbf9d}}, '\x00'}) r8 = openat$cgroup_type(r6, &(0x7f00000014c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000001500)={{0x1, 0x1, 0x18, r8, {0x5}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000001540)={{0x1, 0x1, 0x18, r7, {0x7, 0x1f}}, '.\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000001580)={{0x1, 0x1, 0x18, r7, {0x9}}, './file0\x00'}) write$cgroup_type(r9, &(0x7f00000015c0), 0x9) timer_delete(0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001600)='/sys/module/8250', 0x4000, 0x10) 08:25:38 executing program 7: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x1}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r2, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x80) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000001c0), r1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x220}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r2, 0xc00, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r5}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x8800}, 0x8000) r6 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7, 0x101280) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000400), r4) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r7, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x21}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) openat$cgroup_type(r0, &(0x7f0000000500), 0x2, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) setsockopt$inet_icmp_ICMP_FILTER(r6, 0x1, 0x1, &(0x7f0000000640)={0x800}, 0x4) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}}, 0x4000000) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r3, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 08:25:38 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r2 = openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/libata', 0x100, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000180), 0x2, 0x0) openat$cgroup_pressure(r0, &(0x7f00000001c0)='io.pressure\x00', 0x2, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_devices(r3, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r4, {0x7ff, 0x1}}, '.\x00'}) sched_setparam(0x0, &(0x7f00000002c0)=0x6) openat$cgroup_procs(r4, &(0x7f0000000300)='cgroup.threads\x00', 0x2, 0x0) r6 = getgid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r5, {0xffffffffffffffff, r6}}, './file0/file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) getpgid(r9) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000000400)={r8, 0x2, r2, 0x2, 0x80000}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000440)={{0x1, 0x1, 0x18}, './file0/file0\x00'}) 08:25:39 executing program 4: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r0, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x10b}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xce}]}, 0x48}, 0x1, 0x0, 0x0, 0x24004024}, 0x40040) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000240)={0xfffffffffffffffe, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x74, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:auditd_log_t:s0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x40008d4) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_hsr\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}]}, 0x34}, 0x1, 0x0, 0x0, 0x94}, 0x4890) pselect6(0x40, &(0x7f00000004c0)={0x3e800000000000, 0xf31, 0x9, 0x8, 0xb6fc, 0x0, 0x286, 0x6}, &(0x7f0000000500)={0x200, 0x9, 0x400, 0x1, 0x1, 0x3f, 0x1ff, 0x1}, &(0x7f0000000540)={0x2, 0x200, 0xffff, 0x2b4, 0x0, 0x2, 0x7, 0x7}, &(0x7f0000000580), &(0x7f0000000600)={&(0x7f00000005c0)={[0x2]}, 0x8}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xa4, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:modem_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:inetd_log_t:s0\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004080}, 0x20000000) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000007c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x64, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000980), r1) r4 = syz_open_dev$mouse(&(0x7f00000009c0), 0x80000000, 0x4080) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000a00)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x800}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000a40)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000a80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000b80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x74, r3, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd980}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x24}]}, 0x74}, 0x1, 0x0, 0x0, 0x44015}, 0x4000060) sendmsg$NLBL_CALIPSO_C_LISTALL(r1, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008424}, 0x4040000) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000cc0)='syz0\x00', 0x200002, 0x0) openat$cgroup_int(r8, &(0x7f0000000d00)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0) 08:25:39 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r2 = openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/libata', 0x100, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000180), 0x2, 0x0) openat$cgroup_pressure(r0, &(0x7f00000001c0)='io.pressure\x00', 0x2, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_devices(r3, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r4, {0x7ff, 0x1}}, '.\x00'}) sched_setparam(0x0, &(0x7f00000002c0)=0x6) openat$cgroup_procs(r4, &(0x7f0000000300)='cgroup.threads\x00', 0x2, 0x0) r6 = getgid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r5, {0xffffffffffffffff, r6}}, './file0/file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) getpgid(r9) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000000400)={r8, 0x2, r2, 0x2, 0x80000}) 08:25:39 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001280)={0x90, 0x0, &(0x7f00000011c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@fda={0x66646185, 0x3, 0x2, 0x21}, @fd, @flat=@weak_binder={0x77622a85, 0xa, 0x2}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000001100)={@fd, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/4096, 0x1000}, @ptr={0x70742a85, 0x0, &(0x7f00000010c0)=""/33, 0x21, 0x2, 0xf}}, &(0x7f0000001180)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0xfffffffffffffffe}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000012c0)='./binderfs2/custom1\x00', 0x6, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001300)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file0\x00'}) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x5) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000001340)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000001380)={{0x1, 0x1, 0x18, r2, {0x6}}, './file0\x00'}) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000001400)='./file1\x00', 0x1000000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001440)='/sys/module/sunrpc', 0x121000, 0x100) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000001480)={{0x1, 0x1, 0x18, r6, {0xbf9d}}, '\x00'}) r8 = openat$cgroup_type(r6, &(0x7f00000014c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000001500)={{0x1, 0x1, 0x18, r8, {0x5}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000001540)={{0x1, 0x1, 0x18, r7, {0x7, 0x1f}}, '.\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000001580)={{0x1, 0x1, 0x18, r7, {0x9}}, './file0\x00'}) write$cgroup_type(r9, &(0x7f00000015c0), 0x9) timer_delete(0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001600)='/sys/module/8250', 0x4000, 0x10) 08:25:51 executing program 6: getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)=0x0) keyctl$get_persistent(0x16, r0, 0xfffffffffffffffe) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1, 0xee00}}, './file0\x00'}) keyctl$search(0xa, 0x0, &(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x2}, 0xfffffffffffffffb) r3 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "4b17bd94b64996f955ca1a408e24f394a01bfcb5532cc3de9cb7a1e0cbf711f55034e59d22a961be676917baae46cbc7712e6446c322f0298f03e74cd64a94c0", 0x18}, 0x48, 0xfffffffffffffffa) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x6, 0xffff8e2f}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0x12}}, './file0\x00'}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_READY(r6, 0xc0189376, &(0x7f0000000340)={{0x1, 0x1, 0x18, r7, {0x595}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r8, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r9, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000400)={{0x1, 0x1, 0x18, r6, {0x9fb6}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r9, 0xc0189371, &(0x7f0000000440)={{0x1, 0x1, 0x18, r11}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000480)={{0x1, 0x1, 0x18, r11, {0x9}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r9, 0xc0189377, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r12, {0x5014d0c7, 0x8930}}, './file0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000540)={{0x1, 0x1, 0x18, r10, {r13}}, './file0\x00'}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xc) keyctl$negate(0xd, r3, 0x10001, r3) 08:25:51 executing program 1: r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x60d286c4b14df7b4, 0x61, 0x23, 0x8a, 0x8, 0x12d1, 0x14b8, 0xfac0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xc5, 0x0, 0x80, 0x49, [{{0x9, 0x4, 0xdb, 0x40, 0x0, 0xff, 0x3, 0x14, 0x3, [@hid_hid={0x9, 0x21, 0x4, 0x40, 0x1, {0x22, 0x639}}]}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x15, 0x0, 0x39, 0xff, 0x1}, 0x39, &(0x7f0000000080)={0x5, 0xf, 0x39, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0x6, 0x1f, 0x4, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x3, 0xb, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x2, 0x4d, 0x2}, @ssp_cap={0x18, 0x10, 0xa, 0x8, 0x3, 0x7, 0xf00, 0x101, [0x0, 0xffff, 0xff0000]}]}, 0x6, [{0x33, &(0x7f00000000c0)=@string={0x33, 0x3, "a2e8b191adb2231f1f049528253546715d1584f16bbdc70b57a1033875ae1daea477fb53f3e357b0227b1a439de8decc98"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x81d}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x100c}}, {0xed, &(0x7f0000000180)=@string={0xed, 0x3, "56c629811fc966d541adc0d5e6c16b05172f71a78dbff56b6231f24e71b9dcdf56d22c3b9df3a8316c23b61b6a381f3e56a958f5c0a1c48b8c262eb335f0151d0bc1015886e93a2cefc7629d1d2a7107e5da0d85b8d602ece8b59a409491598b42f0c941f0aa4ea22e5da4771967f450c90b817967287e351be63f10c731cc0e6d3c19bed3cc8bcce51f9b2307a8a8dc1b2423d9d9a079bcce9a73db6d116085799ef0c155004df800036750c51241fb9661a6c062b4f626c0c4ae18e0a7bab9bf1fb0472d799b4193ee19118ffca29077e5b0bc2240786deb77d541e6f54cff03991b130ad93b244d817b"}}, {0x15, &(0x7f0000000280)=@string={0x15, 0x3, "dcafcd69b865ac7078c12aab813653c650fdde"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x44f}}]}) syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, &(0x7f0000000380)={0x40, 0x23, 0x4f, {0x4f, 0x23, "7d421e05321daf4efc0fe23707ee3aabc6fe64911be3c8701c33b729c00d01f997f2b444f2818bc077b5ee5ed33a891f0ab60760a5e747200857ac9aee1afe41b54dc7e33ea40dcb3d137b9a8a"}}, &(0x7f0000000400)={0x0, 0x3, 0xd, @string={0xd, 0x3, "c55830009201e8ea866abe"}}, &(0x7f0000000440)={0x0, 0xf, 0x10, {0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x1a, 0x3, 0x80, 0x7, 0x6}]}}, &(0x7f0000000480)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x1, 0x0, 0x4, '0x0, {0x4}, &(0x7f0000000b80)=""/175, 0xaf, &(0x7f0000000c40)=""/26, &(0x7f0000000c80)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) timer_create(0x2, &(0x7f0000000d40)={0x0, 0x2d, 0x0, @tid=r1}, &(0x7f0000000d80)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000dc0), 0x2, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000e00)='cpu.pressure\x00', 0x2, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000e40)={0x2, 0x80, 0x0, 0x4a, 0x7, 0x7f, 0x0, 0x6, 0x4, 0xe, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x0, 0x4}, 0x40012, 0x0, 0x9, 0x2, 0x5, 0x1, 0x80, 0x0, 0x52e, 0x0, 0x2}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x6) geteuid() perf_event_open(&(0x7f0000000f00)={0x5, 0x80, 0x5, 0x40, 0x6, 0x7, 0x0, 0x62ed, 0x20001, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000ec0), 0xe}, 0x0, 0x8fc, 0x54b, 0x8, 0x1ff, 0x7fff, 0x4, 0x0, 0x8211, 0x0, 0x3}, 0xffffffffffffffff, 0x4, r2, 0x8) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000f80), 0x10000, 0x0) clone(0x1000, &(0x7f0000000fc0)="cbbfa86f33e87b82bd0570788bd34a22e45df533db24a5b9aae6d78d8ba3d927f8d565f57e8ae1617cd2eebf127ca6469dab2af532fd57bf1ba486595bd0d58dbe2196ae69a82bb2a26dca023eede66a2c0bb301ebd46f4b123ec27a95a96cf87a50700c22d48c42864a70ce070fcf3a39a4f66823644e589d9b3a436768a9f348c5c0a6f11493043d43330025a3352b935d59f4e19860e84c447acacfefd89512eae45e56f0801bdb68e1886c1f1714ba5e3de302cbc3a318cba17266a66101e8ec677714fe4d725815f527b88eb80b65000dfb6c6e214996308254021167436267eaf8004af250a2d3d2f38954e8cb532cb850faeb63", &(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)="82fb5e28049fd05d4e28deeee15db2bb37bcd2d515f00ac3de0ada12e09b07f622ef7593dd46dbed066c99179b5cea9de35e798cd72dc40dd08ac2768b1e49cfebd2dea2c18e0fe8ff3466b07a2f0a117672fe462c07b058746bd1e59a6b5bf3d8e76d536f4c6ff3a696b15d709fb77d49264b93d094a5316d8d4776c5b622b00b02e9e0a7b121567388f269318fc4e3a1") r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001200)='syz1\x00', 0x200002, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000001240), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x40, r5, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}, 0x1, 0x0, 0x0, 0x200040c2}, 0x4081) socket$inet_icmp_raw(0x2, 0x3, 0x1) getgid() r6 = openat$cgroup_subtree(r4, &(0x7f0000001380), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000001440)='syz1\x00', 0x1ff) 08:25:51 executing program 3: prctl$PR_SET_FPEXC(0xc, 0x100000) prctl$PR_SET_FPEXC(0xc, 0x1) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x23b, 0x280) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffff}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x40040010) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x62088000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x5}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4020}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000002c0)={0x3}) add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'gretap0\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x7, 0x7, 0xaa5, 0x5, {{0x9, 0x4, 0x2, 0x4, 0x24, 0x64, 0x0, 0x3f, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0xf, 0x4b, [@multicast2, @broadcast, @loopback]}]}}}}}) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000480)={0x1f4, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7fff, @loopback, 0xffffffc1}}, {0x14, 0x2, @in={0x2, 0x4e21, @empty}}}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_to_bridge\x00'}}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa8a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x72, 0x3, "c031602c6221672a5cea29a8b1dc9ae0167cd3de22acf758666d88881744168bb0d11ee8b1d611ecfa4339d1cfca9ed2c5bae2b9505484a61b7670aa97e1ca18950047cfe101e73d3f79d7b3abf89d2da8cec3863d475bfc0769e7e9250b331d230d1fe8ec1d2757cdbed1c59645"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x78c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff9a}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x20}, 0x44000040) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x234, &(0x7f0000000780)={[{0x31, 0x4e00, "aba2db01379985962cf3cd133bc30ca66adf4d014d6f00001fd83cbc8e5f4977a5719e673cd4e4980c73b6290402cd0e39"}, {0x30, 0x4e00, "5ea481a1033d16c4545749705386a3b312a186453223a3bcf062e24f7446af58447039865b041381703615661fc2427a"}, {0xd4, 0x4e00, "517819918095b87c6e8ac8e488ebf55646c25337955c20e93e64d5623db9a0f0a43768be311b4957975aa493ffcecc43bf49d28676abba8b6ccaca288b1620a05b219a7a04b2ab1919faaeda458e9ea471269de1ccfaf1090d4a1c61e8e38017ddfaff59b7308ac04c4452190775379eff26b35c2fc5b6c756c20bbfd95bfec8d8b5b8b0f9254a71a58b425e645cc6ae4c5cbb1a3531790a387b002056ce9d2d57994df8c971412b7cfed5f36bc0705b13f4d3df6011aeab479c8e5ad6fb1dc0de01d2d41ad10822c5ae3d66106f3223865eb207"}, {}, {0x56, 0x4e00, "6724343995935907565e3be35492983379f668acec103b9bb8ca5cbdd475dbd814b8616140f392163f04242dc9ce64298669eac5ddb8ebd66b3342322681dc875e6f71052402c2a8013e5f80df6420a62685bfd16aa7"}, {0x89, 0x4e00, "15b06b86e23f3a3143b581fc60bea092da04ef793953c80918fdecb3714f55588e090e98bc9d929cfa76149ae71244503bdeafcfd2b6e17d86056bc3c7740e28dbfd5d24eba82ef0d87a478b65edc14cba8409540391e25ad69261d11a389f9f6d978044c53cfb9ded08638ab1dedbe3609d099c076f6e0e74547d7340a8f80026b88cdad15fdcbfa1"}]}) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x44, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x20000000) r4 = openat$cgroup_freezer_state(r0, &(0x7f0000000b00), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r4, {0x5f}}, './file0\x00'}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0xbc, 0x0, 0x1, 0x70bd2c, 0xffffffff, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:agp_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_bond\x00'}]}, 0xbc}}, 0x800) 08:25:51 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001280)={0x90, 0x0, &(0x7f00000011c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@fda={0x66646185, 0x3, 0x2, 0x21}, @fd, @flat=@weak_binder={0x77622a85, 0xa, 0x2}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000001100)={@fd, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/4096, 0x1000}, @ptr={0x70742a85, 0x0, &(0x7f00000010c0)=""/33, 0x21, 0x2, 0xf}}, &(0x7f0000001180)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0xfffffffffffffffe}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000012c0)='./binderfs2/custom1\x00', 0x6, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001300)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file0\x00'}) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x5) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000001340)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000001380)={{0x1, 0x1, 0x18, r2, {0x6}}, './file0\x00'}) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000001400)='./file1\x00', 0x1000000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001440)='/sys/module/sunrpc', 0x121000, 0x100) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000001480)={{0x1, 0x1, 0x18, r6, {0xbf9d}}, '\x00'}) r8 = openat$cgroup_type(r6, &(0x7f00000014c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000001500)={{0x1, 0x1, 0x18, r8, {0x5}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000001540)={{0x1, 0x1, 0x18, r7, {0x7, 0x1f}}, '.\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000001580)={{0x1, 0x1, 0x18, r7, {0x9}}, './file0\x00'}) write$cgroup_type(r9, &(0x7f00000015c0), 0x9) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001600)='/sys/module/8250', 0x4000, 0x10) 08:25:51 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/libata', 0x100, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000180), 0x2, 0x0) openat$cgroup_pressure(r0, &(0x7f00000001c0)='io.pressure\x00', 0x2, 0x0) openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_devices(r2, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x7ff, 0x1}}, '.\x00'}) sched_setparam(0x0, &(0x7f00000002c0)=0x6) openat$cgroup_procs(r3, &(0x7f0000000300)='cgroup.threads\x00', 0x2, 0x0) r5 = getgid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4, {0xffffffffffffffff, r5}}, './file0/file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) getpgid(r6) 08:25:51 executing program 7: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x1}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r2, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x80) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000001c0), r1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x220}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r2, 0xc00, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r5}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x8800}, 0x8000) r6 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7, 0x101280) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000400), r4) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r7, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x21}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) openat$cgroup_type(r0, &(0x7f0000000500), 0x2, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) setsockopt$inet_icmp_ICMP_FILTER(r6, 0x1, 0x1, &(0x7f0000000640)={0x800}, 0x4) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}}, 0x4000000) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r3, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 08:25:51 executing program 2: syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) socketpair(0x27, 0x2, 0x1000, &(0x7f0000000180)={0xffffffffffffffff}) connect$bt_sco(r5, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) r6 = syz_open_dev$mouse(&(0x7f0000000200), 0x4, 0x2e0980) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r6, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) bind$bt_sco(r5, &(0x7f0000000280), 0x8) syz_open_dev$mouse(&(0x7f00000002c0), 0x4, 0x400000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000340)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000400)={r9, 0x1, 0x9}) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x40, 0x40, 0x80000000, 0x9, {{0x31, 0x4, 0x1, 0x6, 0xc4, 0x64, 0x0, 0x8, 0x29, 0x0, @empty, @rand_addr=0x64010102, {[@cipso={0x86, 0x81, 0x2, [{0x5, 0xf, "b8a10592ded646b3e87b5e20f1"}, {0x0, 0x5, "e36710"}, {0x1, 0xa, "a2ac099f65819990"}, {0x2, 0x9, "135cd19ef04e25"}, {0x7, 0x12, "efa15bc63f698a7796d9931acfeb348d"}, {0x5, 0x11, "6ab4dd1e5168e9cc5237526e72e54e"}, {0x1, 0x9, "36b4307a5c32fe"}, {0x5, 0xe, "69c9f6a38ecfef4765f2293e"}, {0x2, 0x12, "df6d82cff4fc0c8dcde2eab6095479a2"}, {0x7, 0x8, "c70d0ce5793b"}]}, @ssrr={0x89, 0x7, 0xdf, [@private=0xa010101]}, @noop, @noop, @timestamp_prespec={0x44, 0x1c, 0xeb, 0x3, 0x6, [{@empty, 0x3}, {@dev={0xac, 0x14, 0x14, 0x3f}}, {@multicast2, 0x8}]}, @lsrr={0x83, 0x7, 0x76, [@local]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r10, 0x89f0, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000580)={'ip_vti0\x00', r11, 0x8, 0x40, 0x3da5, 0xb5e00, {{0x6, 0x4, 0x0, 0x6, 0x18, 0x67, 0x0, 0x48, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @multicast1, {[@end]}}}}}) membarrier(0xc, 0x0) 08:25:51 executing program 4: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r0, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x10b}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xce}]}, 0x48}, 0x1, 0x0, 0x0, 0x24004024}, 0x40040) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000240)={0xfffffffffffffffe, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x74, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:auditd_log_t:s0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x40008d4) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_hsr\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}]}, 0x34}, 0x1, 0x0, 0x0, 0x94}, 0x4890) pselect6(0x40, &(0x7f00000004c0)={0x3e800000000000, 0xf31, 0x9, 0x8, 0xb6fc, 0x0, 0x286, 0x6}, &(0x7f0000000500)={0x200, 0x9, 0x400, 0x1, 0x1, 0x3f, 0x1ff, 0x1}, &(0x7f0000000540)={0x2, 0x200, 0xffff, 0x2b4, 0x0, 0x2, 0x7, 0x7}, &(0x7f0000000580), &(0x7f0000000600)={&(0x7f00000005c0)={[0x2]}, 0x8}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xa4, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:modem_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:inetd_log_t:s0\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004080}, 0x20000000) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000007c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x64, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000980), r1) r4 = syz_open_dev$mouse(&(0x7f00000009c0), 0x80000000, 0x4080) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000a00)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x800}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000a40)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000a80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000b80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x74, r3, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd980}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x24}]}, 0x74}, 0x1, 0x0, 0x0, 0x44015}, 0x4000060) sendmsg$NLBL_CALIPSO_C_LISTALL(r1, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008424}, 0x4040000) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000cc0)='syz0\x00', 0x200002, 0x0) openat$cgroup_int(r8, &(0x7f0000000d00)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0) 08:25:51 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001280)={0x90, 0x0, &(0x7f00000011c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@fda={0x66646185, 0x3, 0x2, 0x21}, @fd, @flat=@weak_binder={0x77622a85, 0xa, 0x2}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000001100)={@fd, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/4096, 0x1000}, @ptr={0x70742a85, 0x0, &(0x7f00000010c0)=""/33, 0x21, 0x2, 0xf}}, &(0x7f0000001180)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0xfffffffffffffffe}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000012c0)='./binderfs2/custom1\x00', 0x6, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001300)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file0\x00'}) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x5) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000001340)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000001380)={{0x1, 0x1, 0x18, r2, {0x6}}, './file0\x00'}) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000001400)='./file1\x00', 0x1000000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001440)='/sys/module/sunrpc', 0x121000, 0x100) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000001480)={{0x1, 0x1, 0x18, r6, {0xbf9d}}, '\x00'}) r8 = openat$cgroup_type(r6, &(0x7f00000014c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000001500)={{0x1, 0x1, 0x18, r8, {0x5}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000001540)={{0x1, 0x1, 0x18, r7, {0x7, 0x1f}}, '.\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000001580)={{0x1, 0x1, 0x18, r7, {0x9}}, './file0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001600)='/sys/module/8250', 0x4000, 0x10) [ 147.686544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.687643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.716292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.727117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 08:25:51 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001280)={0x90, 0x0, &(0x7f00000011c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@fda={0x66646185, 0x3, 0x2, 0x21}, @fd, @flat=@weak_binder={0x77622a85, 0xa, 0x2}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000001100)={@fd, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/4096, 0x1000}, @ptr={0x70742a85, 0x0, &(0x7f00000010c0)=""/33, 0x21, 0x2, 0xf}}, &(0x7f0000001180)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0xfffffffffffffffe}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000012c0)='./binderfs2/custom1\x00', 0x6, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001300)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file0\x00'}) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x5) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000001340)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000001380)={{0x1, 0x1, 0x18, r2, {0x6}}, './file0\x00'}) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000001400)='./file1\x00', 0x1000000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001440)='/sys/module/sunrpc', 0x121000, 0x100) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000001480)={{0x1, 0x1, 0x18, r6, {0xbf9d}}, '\x00'}) r8 = openat$cgroup_type(r6, &(0x7f00000014c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000001500)={{0x1, 0x1, 0x18, r8, {0x5}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000001540)={{0x1, 0x1, 0x18, r7, {0x7, 0x1f}}, '.\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001600)='/sys/module/8250', 0x4000, 0x10) 08:25:51 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/libata', 0x100, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000180), 0x2, 0x0) openat$cgroup_pressure(r0, &(0x7f00000001c0)='io.pressure\x00', 0x2, 0x0) openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_devices(r2, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x7ff, 0x1}}, '.\x00'}) sched_setparam(0x0, &(0x7f00000002c0)=0x6) openat$cgroup_procs(r3, &(0x7f0000000300)='cgroup.threads\x00', 0x2, 0x0) r5 = getgid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4, {0xffffffffffffffff, r5}}, './file0/file0\x00'}) getpgid(0x0) 08:25:51 executing program 6: getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)=0x0) keyctl$get_persistent(0x16, r0, 0xfffffffffffffffe) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1, 0xee00}}, './file0\x00'}) keyctl$search(0xa, 0x0, &(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x2}, 0xfffffffffffffffb) r3 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "4b17bd94b64996f955ca1a408e24f394a01bfcb5532cc3de9cb7a1e0cbf711f55034e59d22a961be676917baae46cbc7712e6446c322f0298f03e74cd64a94c0", 0x18}, 0x48, 0xfffffffffffffffa) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x6, 0xffff8e2f}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0x12}}, './file0\x00'}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_READY(r6, 0xc0189376, &(0x7f0000000340)={{0x1, 0x1, 0x18, r7, {0x595}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r8, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r9, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000400)={{0x1, 0x1, 0x18, r6, {0x9fb6}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r9, 0xc0189371, &(0x7f0000000440)={{0x1, 0x1, 0x18, r11}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000480)={{0x1, 0x1, 0x18, r11, {0x9}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r9, 0xc0189377, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r12, {0x5014d0c7, 0x8930}}, './file0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000540)={{0x1, 0x1, 0x18, r10, {r13}}, './file0\x00'}) keyctl$negate(0xd, r3, 0x10001, r3) 08:25:51 executing program 7: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x1}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r2, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x80) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000001c0), r1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x220}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r2, 0xc00, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r5}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x8800}, 0x8000) r6 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7, 0x101280) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000400), r4) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r7, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x21}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) openat$cgroup_type(r0, &(0x7f0000000500), 0x2, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) setsockopt$inet_icmp_ICMP_FILTER(r6, 0x1, 0x1, &(0x7f0000000640)={0x800}, 0x4) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}}, 0x4000000) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r3, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 08:25:51 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001280)={0x90, 0x0, &(0x7f00000011c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@fda={0x66646185, 0x3, 0x2, 0x21}, @fd, @flat=@weak_binder={0x77622a85, 0xa, 0x2}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000001100)={@fd, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/4096, 0x1000}, @ptr={0x70742a85, 0x0, &(0x7f00000010c0)=""/33, 0x21, 0x2, 0xf}}, &(0x7f0000001180)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0xfffffffffffffffe}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000012c0)='./binderfs2/custom1\x00', 0x6, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001300)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file0\x00'}) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x5) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000001340)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000001380)={{0x1, 0x1, 0x18, r2, {0x6}}, './file0\x00'}) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000001400)='./file1\x00', 0x1000000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001440)='/sys/module/sunrpc', 0x121000, 0x100) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000001480)={{0x1, 0x1, 0x18, r6, {0xbf9d}}, '\x00'}) r7 = openat$cgroup_type(r6, &(0x7f00000014c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000001500)={{0x1, 0x1, 0x18, r7, {0x5}}, './file1\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001600)='/sys/module/8250', 0x4000, 0x10) 08:25:51 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/libata', 0x100, 0x0) openat$cgroup_freezer_state(r3, &(0x7f0000000180), 0x2, 0x0) openat$cgroup_pressure(r0, &(0x7f00000001c0)='io.pressure\x00', 0x2, 0x0) openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_devices(r2, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x7ff, 0x1}}, '.\x00'}) sched_setparam(0x0, &(0x7f00000002c0)=0x6) openat$cgroup_procs(r3, &(0x7f0000000300)='cgroup.threads\x00', 0x2, 0x0) getgid() getpgid(0x0) 08:25:51 executing program 4: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r0, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x10b}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xce}]}, 0x48}, 0x1, 0x0, 0x0, 0x24004024}, 0x40040) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000240)={0xfffffffffffffffe, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x74, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:auditd_log_t:s0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x40008d4) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_hsr\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}]}, 0x34}, 0x1, 0x0, 0x0, 0x94}, 0x4890) pselect6(0x40, &(0x7f00000004c0)={0x3e800000000000, 0xf31, 0x9, 0x8, 0xb6fc, 0x0, 0x286, 0x6}, &(0x7f0000000500)={0x200, 0x9, 0x400, 0x1, 0x1, 0x3f, 0x1ff, 0x1}, &(0x7f0000000540)={0x2, 0x200, 0xffff, 0x2b4, 0x0, 0x2, 0x7, 0x7}, &(0x7f0000000580), &(0x7f0000000600)={&(0x7f00000005c0)={[0x2]}, 0x8}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xa4, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:modem_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:inetd_log_t:s0\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004080}, 0x20000000) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000007c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x64, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000980), r1) r4 = syz_open_dev$mouse(&(0x7f00000009c0), 0x80000000, 0x4080) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000a00)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x800}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000a40)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000a80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000b80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x74, r3, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd980}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x24}]}, 0x74}, 0x1, 0x0, 0x0, 0x44015}, 0x4000060) sendmsg$NLBL_CALIPSO_C_LISTALL(r1, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008424}, 0x4040000) openat$cgroup(0xffffffffffffffff, &(0x7f0000000cc0)='syz0\x00', 0x200002, 0x0) 08:25:51 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/libata', 0x100, 0x0) openat$cgroup_freezer_state(r3, &(0x7f0000000180), 0x2, 0x0) openat$cgroup_pressure(r0, &(0x7f00000001c0)='io.pressure\x00', 0x2, 0x0) openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_devices(r2, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x7ff, 0x1}}, '.\x00'}) sched_setparam(0x0, &(0x7f00000002c0)=0x6) openat$cgroup_procs(r3, &(0x7f0000000300)='cgroup.threads\x00', 0x2, 0x0) getpgid(0x0) 08:26:07 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/libata', 0x100, 0x0) openat$cgroup_freezer_state(r3, &(0x7f0000000180), 0x2, 0x0) openat$cgroup_pressure(r0, &(0x7f00000001c0)='io.pressure\x00', 0x2, 0x0) openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_devices(r2, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x7ff, 0x1}}, '.\x00'}) sched_setparam(0x0, &(0x7f00000002c0)=0x6) getpgid(0x0) 08:26:07 executing program 6: getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)=0x0) keyctl$get_persistent(0x16, r0, 0xfffffffffffffffe) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1, 0xee00}}, './file0\x00'}) keyctl$search(0xa, 0x0, &(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x2}, 0xfffffffffffffffb) r3 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "4b17bd94b64996f955ca1a408e24f394a01bfcb5532cc3de9cb7a1e0cbf711f55034e59d22a961be676917baae46cbc7712e6446c322f0298f03e74cd64a94c0", 0x18}, 0x48, 0xfffffffffffffffa) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x6, 0xffff8e2f}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0x12}}, './file0\x00'}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_READY(r6, 0xc0189376, &(0x7f0000000340)={{0x1, 0x1, 0x18, r7, {0x595}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r8, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r9, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000400)={{0x1, 0x1, 0x18, r6, {0x9fb6}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r9, 0xc0189371, &(0x7f0000000440)={{0x1, 0x1, 0x18, r10}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000480)={{0x1, 0x1, 0x18, r10, {0x9}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r9, 0xc0189377, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r11, {0x5014d0c7, 0x8930}}, './file0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)) keyctl$negate(0xd, r3, 0x10001, r3) 08:26:07 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001280)={0x90, 0x0, &(0x7f00000011c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@fda={0x66646185, 0x3, 0x2, 0x21}, @fd, @flat=@weak_binder={0x77622a85, 0xa, 0x2}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000001100)={@fd, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/4096, 0x1000}, @ptr={0x70742a85, 0x0, &(0x7f00000010c0)=""/33, 0x21, 0x2, 0xf}}, &(0x7f0000001180)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0xfffffffffffffffe}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000012c0)='./binderfs2/custom1\x00', 0x6, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001300)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file0\x00'}) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x5) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000001340)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000001380)={{0x1, 0x1, 0x18, r2, {0x6}}, './file0\x00'}) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000001400)='./file1\x00', 0x1000000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001440)='/sys/module/sunrpc', 0x121000, 0x100) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000001480)={{0x1, 0x1, 0x18, r6, {0xbf9d}}, '\x00'}) openat$cgroup_type(r6, &(0x7f00000014c0), 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001600)='/sys/module/8250', 0x4000, 0x10) 08:26:07 executing program 7: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x1}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r2, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x80) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000001c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x220}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r2, 0xc00, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r4}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x8800}, 0x8000) r5 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7, 0x101280) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000400), r3) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r6, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x21}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) openat$cgroup_type(r0, &(0x7f0000000500), 0x2, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) setsockopt$inet_icmp_ICMP_FILTER(r5, 0x1, 0x1, &(0x7f0000000640)={0x800}, 0x4) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}}, 0x4000000) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000880), r3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 08:26:07 executing program 2: syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) socketpair(0x27, 0x2, 0x1000, &(0x7f0000000180)={0xffffffffffffffff}) connect$bt_sco(r5, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) r6 = syz_open_dev$mouse(&(0x7f0000000200), 0x4, 0x2e0980) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r6, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) bind$bt_sco(r5, &(0x7f0000000280), 0x8) syz_open_dev$mouse(&(0x7f00000002c0), 0x4, 0x400000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000340)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000400)={r9, 0x1, 0x9}) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x40, 0x40, 0x80000000, 0x9, {{0x31, 0x4, 0x1, 0x6, 0xc4, 0x64, 0x0, 0x8, 0x29, 0x0, @empty, @rand_addr=0x64010102, {[@cipso={0x86, 0x81, 0x2, [{0x5, 0xf, "b8a10592ded646b3e87b5e20f1"}, {0x0, 0x5, "e36710"}, {0x1, 0xa, "a2ac099f65819990"}, {0x2, 0x9, "135cd19ef04e25"}, {0x7, 0x12, "efa15bc63f698a7796d9931acfeb348d"}, {0x5, 0x11, "6ab4dd1e5168e9cc5237526e72e54e"}, {0x1, 0x9, "36b4307a5c32fe"}, {0x5, 0xe, "69c9f6a38ecfef4765f2293e"}, {0x2, 0x12, "df6d82cff4fc0c8dcde2eab6095479a2"}, {0x7, 0x8, "c70d0ce5793b"}]}, @ssrr={0x89, 0x7, 0xdf, [@private=0xa010101]}, @noop, @noop, @timestamp_prespec={0x44, 0x1c, 0xeb, 0x3, 0x6, [{@empty, 0x3}, {@dev={0xac, 0x14, 0x14, 0x3f}}, {@multicast2, 0x8}]}, @lsrr={0x83, 0x7, 0x76, [@local]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r10, 0x89f0, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000580)={'ip_vti0\x00', r11, 0x8, 0x40, 0x3da5, 0xb5e00, {{0x6, 0x4, 0x0, 0x6, 0x18, 0x67, 0x0, 0x48, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @multicast1, {[@end]}}}}}) membarrier(0xc, 0x0) 08:26:07 executing program 3: prctl$PR_SET_FPEXC(0xc, 0x100000) prctl$PR_SET_FPEXC(0xc, 0x1) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x23b, 0x280) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffff}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x40040010) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x62088000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x5}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4020}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000002c0)={0x3}) add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'gretap0\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x7, 0x7, 0xaa5, 0x5, {{0x9, 0x4, 0x2, 0x4, 0x24, 0x64, 0x0, 0x3f, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0xf, 0x4b, [@multicast2, @broadcast, @loopback]}]}}}}}) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000480)={0x1f4, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7fff, @loopback, 0xffffffc1}}, {0x14, 0x2, @in={0x2, 0x4e21, @empty}}}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_to_bridge\x00'}}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa8a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x72, 0x3, "c031602c6221672a5cea29a8b1dc9ae0167cd3de22acf758666d88881744168bb0d11ee8b1d611ecfa4339d1cfca9ed2c5bae2b9505484a61b7670aa97e1ca18950047cfe101e73d3f79d7b3abf89d2da8cec3863d475bfc0769e7e9250b331d230d1fe8ec1d2757cdbed1c59645"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x78c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff9a}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x20}, 0x44000040) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x234, &(0x7f0000000780)={[{0x31, 0x4e00, "aba2db01379985962cf3cd133bc30ca66adf4d014d6f00001fd83cbc8e5f4977a5719e673cd4e4980c73b6290402cd0e39"}, {0x30, 0x4e00, "5ea481a1033d16c4545749705386a3b312a186453223a3bcf062e24f7446af58447039865b041381703615661fc2427a"}, {0xd4, 0x4e00, "517819918095b87c6e8ac8e488ebf55646c25337955c20e93e64d5623db9a0f0a43768be311b4957975aa493ffcecc43bf49d28676abba8b6ccaca288b1620a05b219a7a04b2ab1919faaeda458e9ea471269de1ccfaf1090d4a1c61e8e38017ddfaff59b7308ac04c4452190775379eff26b35c2fc5b6c756c20bbfd95bfec8d8b5b8b0f9254a71a58b425e645cc6ae4c5cbb1a3531790a387b002056ce9d2d57994df8c971412b7cfed5f36bc0705b13f4d3df6011aeab479c8e5ad6fb1dc0de01d2d41ad10822c5ae3d66106f3223865eb207"}, {}, {0x56, 0x4e00, "6724343995935907565e3be35492983379f668acec103b9bb8ca5cbdd475dbd814b8616140f392163f04242dc9ce64298669eac5ddb8ebd66b3342322681dc875e6f71052402c2a8013e5f80df6420a62685bfd16aa7"}, {0x89, 0x4e00, "15b06b86e23f3a3143b581fc60bea092da04ef793953c80918fdecb3714f55588e090e98bc9d929cfa76149ae71244503bdeafcfd2b6e17d86056bc3c7740e28dbfd5d24eba82ef0d87a478b65edc14cba8409540391e25ad69261d11a389f9f6d978044c53cfb9ded08638ab1dedbe3609d099c076f6e0e74547d7340a8f80026b88cdad15fdcbfa1"}]}) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x44, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x20000000) r4 = openat$cgroup_freezer_state(r0, &(0x7f0000000b00), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r4, {0x5f}}, './file0\x00'}) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0xbc, 0x0, 0x1, 0x70bd2c, 0xffffffff, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:agp_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_bond\x00'}]}, 0xbc}}, 0x800) 08:26:07 executing program 4: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r0, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x10b}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xce}]}, 0x48}, 0x1, 0x0, 0x0, 0x24004024}, 0x40040) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000240)={0xfffffffffffffffe, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x74, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:auditd_log_t:s0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x40008d4) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_hsr\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}]}, 0x34}, 0x1, 0x0, 0x0, 0x94}, 0x4890) pselect6(0x40, &(0x7f00000004c0)={0x3e800000000000, 0xf31, 0x9, 0x8, 0xb6fc, 0x0, 0x286, 0x6}, &(0x7f0000000500)={0x200, 0x9, 0x400, 0x1, 0x1, 0x3f, 0x1ff, 0x1}, &(0x7f0000000540)={0x2, 0x200, 0xffff, 0x2b4, 0x0, 0x2, 0x7, 0x7}, &(0x7f0000000580), &(0x7f0000000600)={&(0x7f00000005c0)={[0x2]}, 0x8}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xa4, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:modem_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:inetd_log_t:s0\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004080}, 0x20000000) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000007c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x64, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000980), r1) r4 = syz_open_dev$mouse(&(0x7f00000009c0), 0x80000000, 0x4080) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000a00)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x800}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000a40)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000a80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000b80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x74, r3, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd980}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x24}]}, 0x74}, 0x1, 0x0, 0x0, 0x44015}, 0x4000060) sendmsg$NLBL_CALIPSO_C_LISTALL(r1, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008424}, 0x4040000) 08:26:07 executing program 1: r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x60d286c4b14df7b4, 0x61, 0x23, 0x8a, 0x8, 0x12d1, 0x14b8, 0xfac0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xc5, 0x0, 0x80, 0x49, [{{0x9, 0x4, 0xdb, 0x40, 0x0, 0xff, 0x3, 0x14, 0x3, [@hid_hid={0x9, 0x21, 0x4, 0x40, 0x1, {0x22, 0x639}}]}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x15, 0x0, 0x39, 0xff, 0x1}, 0x39, &(0x7f0000000080)={0x5, 0xf, 0x39, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0x6, 0x1f, 0x4, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x3, 0xb, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x2, 0x4d, 0x2}, @ssp_cap={0x18, 0x10, 0xa, 0x8, 0x3, 0x7, 0xf00, 0x101, [0x0, 0xffff, 0xff0000]}]}, 0x6, [{0x33, &(0x7f00000000c0)=@string={0x33, 0x3, "a2e8b191adb2231f1f049528253546715d1584f16bbdc70b57a1033875ae1daea477fb53f3e357b0227b1a439de8decc98"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x81d}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x100c}}, {0xed, &(0x7f0000000180)=@string={0xed, 0x3, "56c629811fc966d541adc0d5e6c16b05172f71a78dbff56b6231f24e71b9dcdf56d22c3b9df3a8316c23b61b6a381f3e56a958f5c0a1c48b8c262eb335f0151d0bc1015886e93a2cefc7629d1d2a7107e5da0d85b8d602ece8b59a409491598b42f0c941f0aa4ea22e5da4771967f450c90b817967287e351be63f10c731cc0e6d3c19bed3cc8bcce51f9b2307a8a8dc1b2423d9d9a079bcce9a73db6d116085799ef0c155004df800036750c51241fb9661a6c062b4f626c0c4ae18e0a7bab9bf1fb0472d799b4193ee19118ffca29077e5b0bc2240786deb77d541e6f54cff03991b130ad93b244d817b"}}, {0x15, &(0x7f0000000280)=@string={0x15, 0x3, "dcafcd69b865ac7078c12aab813653c650fdde"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x44f}}]}) syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, &(0x7f0000000380)={0x40, 0x23, 0x4f, {0x4f, 0x23, "7d421e05321daf4efc0fe23707ee3aabc6fe64911be3c8701c33b729c00d01f997f2b444f2818bc077b5ee5ed33a891f0ab60760a5e747200857ac9aee1afe41b54dc7e33ea40dcb3d137b9a8a"}}, &(0x7f0000000400)={0x0, 0x3, 0xd, @string={0xd, 0x3, "c55830009201e8ea866abe"}}, &(0x7f0000000440)={0x0, 0xf, 0x10, {0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x1a, 0x3, 0x80, 0x7, 0x6}]}}, &(0x7f0000000480)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x1, 0x0, 0x4, '0x0, {0x4}, &(0x7f0000000b80)=""/175, 0xaf, &(0x7f0000000c40)=""/26, &(0x7f0000000c80)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) timer_create(0x2, &(0x7f0000000d40)={0x0, 0x2d, 0x0, @tid=r1}, &(0x7f0000000d80)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000dc0), 0x2, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000e00)='cpu.pressure\x00', 0x2, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000e40)={0x2, 0x80, 0x0, 0x4a, 0x7, 0x7f, 0x0, 0x6, 0x4, 0xe, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x0, 0x4}, 0x40012, 0x0, 0x9, 0x2, 0x5, 0x1, 0x80, 0x0, 0x52e, 0x0, 0x2}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x6) geteuid() perf_event_open(&(0x7f0000000f00)={0x5, 0x80, 0x5, 0x40, 0x6, 0x7, 0x0, 0x62ed, 0x20001, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000ec0), 0xe}, 0x0, 0x8fc, 0x54b, 0x8, 0x1ff, 0x7fff, 0x4, 0x0, 0x8211, 0x0, 0x3}, 0xffffffffffffffff, 0x4, r2, 0x8) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000f80), 0x10000, 0x0) clone(0x1000, &(0x7f0000000fc0)="cbbfa86f33e87b82bd0570788bd34a22e45df533db24a5b9aae6d78d8ba3d927f8d565f57e8ae1617cd2eebf127ca6469dab2af532fd57bf1ba486595bd0d58dbe2196ae69a82bb2a26dca023eede66a2c0bb301ebd46f4b123ec27a95a96cf87a50700c22d48c42864a70ce070fcf3a39a4f66823644e589d9b3a436768a9f348c5c0a6f11493043d43330025a3352b935d59f4e19860e84c447acacfefd89512eae45e56f0801bdb68e1886c1f1714ba5e3de302cbc3a318cba17266a66101e8ec677714fe4d725815f527b88eb80b65000dfb6c6e214996308254021167436267eaf8004af250a2d3d2f38954e8cb532cb850faeb63", &(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)="82fb5e28049fd05d4e28deeee15db2bb37bcd2d515f00ac3de0ada12e09b07f622ef7593dd46dbed066c99179b5cea9de35e798cd72dc40dd08ac2768b1e49cfebd2dea2c18e0fe8ff3466b07a2f0a117672fe462c07b058746bd1e59a6b5bf3d8e76d536f4c6ff3a696b15d709fb77d49264b93d094a5316d8d4776c5b622b00b02e9e0a7b121567388f269318fc4e3a1") r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001200)='syz1\x00', 0x200002, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000001240), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x40, r5, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}, 0x1, 0x0, 0x0, 0x200040c2}, 0x4081) socket$inet_icmp_raw(0x2, 0x3, 0x1) getgid() r6 = openat$cgroup_subtree(r4, &(0x7f0000001380), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000001440)='syz1\x00', 0x1ff) [ 163.550473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.552689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.558899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.564103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 08:26:07 executing program 6: getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)=0x0) keyctl$get_persistent(0x16, r0, 0xfffffffffffffffe) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1, 0xee00}}, './file0\x00'}) keyctl$search(0xa, 0x0, &(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x2}, 0xfffffffffffffffb) r3 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "4b17bd94b64996f955ca1a408e24f394a01bfcb5532cc3de9cb7a1e0cbf711f55034e59d22a961be676917baae46cbc7712e6446c322f0298f03e74cd64a94c0", 0x18}, 0x48, 0xfffffffffffffffa) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x6, 0xffff8e2f}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0x12}}, './file0\x00'}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_READY(r6, 0xc0189376, &(0x7f0000000340)={{0x1, 0x1, 0x18, r7, {0x595}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r8, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r9, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000400)={{0x1, 0x1, 0x18, r6, {0x9fb6}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r9, 0xc0189371, &(0x7f0000000440)={{0x1, 0x1, 0x18, r10}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000480)={{0x1, 0x1, 0x18, r10, {0x9}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r9, 0xc0189377, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r11, {0x5014d0c7, 0x8930}}, './file0\x00'}) keyctl$negate(0xd, r3, 0x10001, r3) 08:26:07 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001280)={0x90, 0x0, &(0x7f00000011c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@fda={0x66646185, 0x3, 0x2, 0x21}, @fd, @flat=@weak_binder={0x77622a85, 0xa, 0x2}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000001100)={@fd, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/4096, 0x1000}, @ptr={0x70742a85, 0x0, &(0x7f00000010c0)=""/33, 0x21, 0x2, 0xf}}, &(0x7f0000001180)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0xfffffffffffffffe}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000012c0)='./binderfs2/custom1\x00', 0x6, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001300)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file0\x00'}) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x5) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000001340)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000001380)={{0x1, 0x1, 0x18, r2, {0x6}}, './file0\x00'}) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000001400)='./file1\x00', 0x1000000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001440)='/sys/module/sunrpc', 0x121000, 0x100) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000001480)={{0x1, 0x1, 0x18, r6, {0xbf9d}}, '\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001600)='/sys/module/8250', 0x4000, 0x10) 08:26:21 executing program 1: r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x60d286c4b14df7b4, 0x61, 0x23, 0x8a, 0x8, 0x12d1, 0x14b8, 0xfac0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xc5, 0x0, 0x80, 0x49, [{{0x9, 0x4, 0xdb, 0x40, 0x0, 0xff, 0x3, 0x14, 0x3, [@hid_hid={0x9, 0x21, 0x4, 0x40, 0x1, {0x22, 0x639}}]}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x15, 0x0, 0x39, 0xff, 0x1}, 0x39, &(0x7f0000000080)={0x5, 0xf, 0x39, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0x6, 0x1f, 0x4, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x3, 0xb, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x2, 0x4d, 0x2}, @ssp_cap={0x18, 0x10, 0xa, 0x8, 0x3, 0x7, 0xf00, 0x101, [0x0, 0xffff, 0xff0000]}]}, 0x6, [{0x33, &(0x7f00000000c0)=@string={0x33, 0x3, "a2e8b191adb2231f1f049528253546715d1584f16bbdc70b57a1033875ae1daea477fb53f3e357b0227b1a439de8decc98"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x81d}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x100c}}, {0xed, &(0x7f0000000180)=@string={0xed, 0x3, "56c629811fc966d541adc0d5e6c16b05172f71a78dbff56b6231f24e71b9dcdf56d22c3b9df3a8316c23b61b6a381f3e56a958f5c0a1c48b8c262eb335f0151d0bc1015886e93a2cefc7629d1d2a7107e5da0d85b8d602ece8b59a409491598b42f0c941f0aa4ea22e5da4771967f450c90b817967287e351be63f10c731cc0e6d3c19bed3cc8bcce51f9b2307a8a8dc1b2423d9d9a079bcce9a73db6d116085799ef0c155004df800036750c51241fb9661a6c062b4f626c0c4ae18e0a7bab9bf1fb0472d799b4193ee19118ffca29077e5b0bc2240786deb77d541e6f54cff03991b130ad93b244d817b"}}, {0x15, &(0x7f0000000280)=@string={0x15, 0x3, "dcafcd69b865ac7078c12aab813653c650fdde"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x44f}}]}) syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, &(0x7f0000000380)={0x40, 0x23, 0x4f, {0x4f, 0x23, "7d421e05321daf4efc0fe23707ee3aabc6fe64911be3c8701c33b729c00d01f997f2b444f2818bc077b5ee5ed33a891f0ab60760a5e747200857ac9aee1afe41b54dc7e33ea40dcb3d137b9a8a"}}, &(0x7f0000000400)={0x0, 0x3, 0xd, @string={0xd, 0x3, "c55830009201e8ea866abe"}}, &(0x7f0000000440)={0x0, 0xf, 0x10, {0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x1a, 0x3, 0x80, 0x7, 0x6}]}}, &(0x7f0000000480)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x1, 0x0, 0x4, '0x0, {0x4}, &(0x7f0000000b80)=""/175, 0xaf, &(0x7f0000000c40)=""/26, &(0x7f0000000c80)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) timer_create(0x2, &(0x7f0000000d40)={0x0, 0x2d, 0x0, @tid=r1}, &(0x7f0000000d80)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000dc0), 0x2, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000e00)='cpu.pressure\x00', 0x2, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000e40)={0x2, 0x80, 0x0, 0x4a, 0x7, 0x7f, 0x0, 0x6, 0x4, 0xe, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x0, 0x4}, 0x40012, 0x0, 0x9, 0x2, 0x5, 0x1, 0x80, 0x0, 0x52e, 0x0, 0x2}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x6) geteuid() perf_event_open(&(0x7f0000000f00)={0x5, 0x80, 0x5, 0x40, 0x6, 0x7, 0x0, 0x62ed, 0x20001, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000ec0), 0xe}, 0x0, 0x8fc, 0x54b, 0x8, 0x1ff, 0x7fff, 0x4, 0x0, 0x8211, 0x0, 0x3}, 0xffffffffffffffff, 0x4, r2, 0x8) openat$autofs(0xffffffffffffff9c, &(0x7f0000000f80), 0x10000, 0x0) clone(0x1000, &(0x7f0000000fc0)="cbbfa86f33e87b82bd0570788bd34a22e45df533db24a5b9aae6d78d8ba3d927f8d565f57e8ae1617cd2eebf127ca6469dab2af532fd57bf1ba486595bd0d58dbe2196ae69a82bb2a26dca023eede66a2c0bb301ebd46f4b123ec27a95a96cf87a50700c22d48c42864a70ce070fcf3a39a4f66823644e589d9b3a436768a9f348c5c0a6f11493043d43330025a3352b935d59f4e19860e84c447acacfefd89512eae45e56f0801bdb68e1886c1f1714ba5e3de302cbc3a318cba17266a66101e8ec677714fe4d725815f527b88eb80b65000dfb6c6e214996308254021167436267eaf8004af250a2d3d2f38954e8cb532cb850faeb63", &(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)="82fb5e28049fd05d4e28deeee15db2bb37bcd2d515f00ac3de0ada12e09b07f622ef7593dd46dbed066c99179b5cea9de35e798cd72dc40dd08ac2768b1e49cfebd2dea2c18e0fe8ff3466b07a2f0a117672fe462c07b058746bd1e59a6b5bf3d8e76d536f4c6ff3a696b15d709fb77d49264b93d094a5316d8d4776c5b622b00b02e9e0a7b121567388f269318fc4e3a1") r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001200)='syz1\x00', 0x200002, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000001240), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x40, r4, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}, 0x1, 0x0, 0x0, 0x200040c2}, 0x4081) socket$inet_icmp_raw(0x2, 0x3, 0x1) getgid() openat$cgroup_subtree(r3, &(0x7f0000001380), 0x2, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000001440)='syz1\x00', 0x1ff) 08:26:21 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/libata', 0x100, 0x0) openat$cgroup_freezer_state(r3, &(0x7f0000000180), 0x2, 0x0) openat$cgroup_pressure(r0, &(0x7f00000001c0)='io.pressure\x00', 0x2, 0x0) openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_devices(r2, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x7ff, 0x1}}, '.\x00'}) getpgid(0x0) 08:26:21 executing program 3: prctl$PR_SET_FPEXC(0xc, 0x100000) prctl$PR_SET_FPEXC(0xc, 0x1) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x23b, 0x280) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffff}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x40040010) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x62088000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x5}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4020}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000002c0)={0x3}) add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'gretap0\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x7, 0x7, 0xaa5, 0x5, {{0x9, 0x4, 0x2, 0x4, 0x24, 0x64, 0x0, 0x3f, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0xf, 0x4b, [@multicast2, @broadcast, @loopback]}]}}}}}) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000480)={0x1f4, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7fff, @loopback, 0xffffffc1}}, {0x14, 0x2, @in={0x2, 0x4e21, @empty}}}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_to_bridge\x00'}}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa8a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x72, 0x3, "c031602c6221672a5cea29a8b1dc9ae0167cd3de22acf758666d88881744168bb0d11ee8b1d611ecfa4339d1cfca9ed2c5bae2b9505484a61b7670aa97e1ca18950047cfe101e73d3f79d7b3abf89d2da8cec3863d475bfc0769e7e9250b331d230d1fe8ec1d2757cdbed1c59645"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x78c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff9a}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x20}, 0x44000040) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x234, &(0x7f0000000780)={[{0x31, 0x4e00, "aba2db01379985962cf3cd133bc30ca66adf4d014d6f00001fd83cbc8e5f4977a5719e673cd4e4980c73b6290402cd0e39"}, {0x30, 0x4e00, "5ea481a1033d16c4545749705386a3b312a186453223a3bcf062e24f7446af58447039865b041381703615661fc2427a"}, {0xd4, 0x4e00, "517819918095b87c6e8ac8e488ebf55646c25337955c20e93e64d5623db9a0f0a43768be311b4957975aa493ffcecc43bf49d28676abba8b6ccaca288b1620a05b219a7a04b2ab1919faaeda458e9ea471269de1ccfaf1090d4a1c61e8e38017ddfaff59b7308ac04c4452190775379eff26b35c2fc5b6c756c20bbfd95bfec8d8b5b8b0f9254a71a58b425e645cc6ae4c5cbb1a3531790a387b002056ce9d2d57994df8c971412b7cfed5f36bc0705b13f4d3df6011aeab479c8e5ad6fb1dc0de01d2d41ad10822c5ae3d66106f3223865eb207"}, {}, {0x56, 0x4e00, "6724343995935907565e3be35492983379f668acec103b9bb8ca5cbdd475dbd814b8616140f392163f04242dc9ce64298669eac5ddb8ebd66b3342322681dc875e6f71052402c2a8013e5f80df6420a62685bfd16aa7"}, {0x89, 0x4e00, "15b06b86e23f3a3143b581fc60bea092da04ef793953c80918fdecb3714f55588e090e98bc9d929cfa76149ae71244503bdeafcfd2b6e17d86056bc3c7740e28dbfd5d24eba82ef0d87a478b65edc14cba8409540391e25ad69261d11a389f9f6d978044c53cfb9ded08638ab1dedbe3609d099c076f6e0e74547d7340a8f80026b88cdad15fdcbfa1"}]}) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x44, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x20000000) r4 = openat$cgroup_freezer_state(r0, &(0x7f0000000b00), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r4, {0x5f}}, './file0\x00'}) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0xbc, 0x0, 0x1, 0x70bd2c, 0xffffffff, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:agp_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_bond\x00'}]}, 0xbc}}, 0x800) 08:26:21 executing program 7: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x1}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r2, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x80) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000001c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x220}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r2, 0xc00, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r4}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x8800}, 0x8000) r5 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7, 0x101280) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000400), r3) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r6, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x21}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) openat$cgroup_type(r0, &(0x7f0000000500), 0x2, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) setsockopt$inet_icmp_ICMP_FILTER(r5, 0x1, 0x1, &(0x7f0000000640)={0x800}, 0x4) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000880), r3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 08:26:21 executing program 6: getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)=0x0) keyctl$get_persistent(0x16, r0, 0xfffffffffffffffe) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1, 0xee00}}, './file0\x00'}) keyctl$search(0xa, 0x0, &(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x2}, 0xfffffffffffffffb) r3 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "4b17bd94b64996f955ca1a408e24f394a01bfcb5532cc3de9cb7a1e0cbf711f55034e59d22a961be676917baae46cbc7712e6446c322f0298f03e74cd64a94c0", 0x18}, 0x48, 0xfffffffffffffffa) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x6, 0xffff8e2f}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0x12}}, './file0\x00'}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_READY(r6, 0xc0189376, &(0x7f0000000340)={{0x1, 0x1, 0x18, r7, {0x595}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r8, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r9, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000400)={{0x1, 0x1, 0x18, r6, {0x9fb6}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r9, 0xc0189371, &(0x7f0000000440)={{0x1, 0x1, 0x18, r10}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000480)={{0x1, 0x1, 0x18, r10, {0x9}}, './file0\x00'}) keyctl$negate(0xd, r3, 0x10001, r3) 08:26:21 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001280)={0x90, 0x0, &(0x7f00000011c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@fda={0x66646185, 0x3, 0x2, 0x21}, @fd, @flat=@weak_binder={0x77622a85, 0xa, 0x2}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000001100)={@fd, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/4096, 0x1000}, @ptr={0x70742a85, 0x0, &(0x7f00000010c0)=""/33, 0x21, 0x2, 0xf}}, &(0x7f0000001180)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0xfffffffffffffffe}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000012c0)='./binderfs2/custom1\x00', 0x6, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001300)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file0\x00'}) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x5) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000001340)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000001380)={{0x1, 0x1, 0x18, r2, {0x6}}, './file0\x00'}) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000001400)='./file1\x00', 0x1000000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001440)='/sys/module/sunrpc', 0x121000, 0x100) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001600)='/sys/module/8250', 0x4000, 0x10) 08:26:21 executing program 4: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r0, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x10b}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xce}]}, 0x48}, 0x1, 0x0, 0x0, 0x24004024}, 0x40040) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000240)={0xfffffffffffffffe, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x74, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:auditd_log_t:s0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x40008d4) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_hsr\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}]}, 0x34}, 0x1, 0x0, 0x0, 0x94}, 0x4890) pselect6(0x40, &(0x7f00000004c0)={0x3e800000000000, 0xf31, 0x9, 0x8, 0xb6fc, 0x0, 0x286, 0x6}, &(0x7f0000000500)={0x200, 0x9, 0x400, 0x1, 0x1, 0x3f, 0x1ff, 0x1}, &(0x7f0000000540)={0x2, 0x200, 0xffff, 0x2b4, 0x0, 0x2, 0x7, 0x7}, &(0x7f0000000580), &(0x7f0000000600)={&(0x7f00000005c0)={[0x2]}, 0x8}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xa4, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:modem_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:inetd_log_t:s0\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004080}, 0x20000000) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000007c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x64, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000980), r1) r4 = syz_open_dev$mouse(&(0x7f00000009c0), 0x80000000, 0x4080) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000a00)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x800}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000a40)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000a80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000b80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x74, r3, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd980}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x24}]}, 0x74}, 0x1, 0x0, 0x0, 0x44015}, 0x4000060) 08:26:21 executing program 2: syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) socketpair(0x27, 0x2, 0x1000, &(0x7f0000000180)={0xffffffffffffffff}) connect$bt_sco(r5, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) r6 = syz_open_dev$mouse(&(0x7f0000000200), 0x4, 0x2e0980) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r6, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) bind$bt_sco(r5, &(0x7f0000000280), 0x8) syz_open_dev$mouse(&(0x7f00000002c0), 0x4, 0x400000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000340)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000400)={r9, 0x1, 0x9}) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x40, 0x40, 0x80000000, 0x9, {{0x31, 0x4, 0x1, 0x6, 0xc4, 0x64, 0x0, 0x8, 0x29, 0x0, @empty, @rand_addr=0x64010102, {[@cipso={0x86, 0x81, 0x2, [{0x5, 0xf, "b8a10592ded646b3e87b5e20f1"}, {0x0, 0x5, "e36710"}, {0x1, 0xa, "a2ac099f65819990"}, {0x2, 0x9, "135cd19ef04e25"}, {0x7, 0x12, "efa15bc63f698a7796d9931acfeb348d"}, {0x5, 0x11, "6ab4dd1e5168e9cc5237526e72e54e"}, {0x1, 0x9, "36b4307a5c32fe"}, {0x5, 0xe, "69c9f6a38ecfef4765f2293e"}, {0x2, 0x12, "df6d82cff4fc0c8dcde2eab6095479a2"}, {0x7, 0x8, "c70d0ce5793b"}]}, @ssrr={0x89, 0x7, 0xdf, [@private=0xa010101]}, @noop, @noop, @timestamp_prespec={0x44, 0x1c, 0xeb, 0x3, 0x6, [{@empty, 0x3}, {@dev={0xac, 0x14, 0x14, 0x3f}}, {@multicast2, 0x8}]}, @lsrr={0x83, 0x7, 0x76, [@local]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r10, 0x89f0, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000580)={'ip_vti0\x00', r11, 0x8, 0x40, 0x3da5, 0xb5e00, {{0x6, 0x4, 0x0, 0x6, 0x18, 0x67, 0x0, 0x48, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @multicast1, {[@end]}}}}}) 08:26:21 executing program 6: getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)=0x0) keyctl$get_persistent(0x16, r0, 0xfffffffffffffffe) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1, 0xee00}}, './file0\x00'}) keyctl$search(0xa, 0x0, &(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x2}, 0xfffffffffffffffb) r3 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "4b17bd94b64996f955ca1a408e24f394a01bfcb5532cc3de9cb7a1e0cbf711f55034e59d22a961be676917baae46cbc7712e6446c322f0298f03e74cd64a94c0", 0x18}, 0x48, 0xfffffffffffffffa) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x6, 0xffff8e2f}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0x12}}, './file0\x00'}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_READY(r6, 0xc0189376, &(0x7f0000000340)={{0x1, 0x1, 0x18, r7, {0x595}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r8, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r9, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000400)={{0x1, 0x1, 0x18, r6, {0x9fb6}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r9, 0xc0189371, &(0x7f0000000440)={{0x1, 0x1, 0x18, r10}, './file0\x00'}) keyctl$negate(0xd, r3, 0x10001, r3) [ 177.737324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.738240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.752155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.754149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 08:26:21 executing program 6: getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)=0x0) keyctl$get_persistent(0x16, r0, 0xfffffffffffffffe) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1, 0xee00}}, './file0\x00'}) keyctl$search(0xa, 0x0, &(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x2}, 0xfffffffffffffffb) r3 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "4b17bd94b64996f955ca1a408e24f394a01bfcb5532cc3de9cb7a1e0cbf711f55034e59d22a961be676917baae46cbc7712e6446c322f0298f03e74cd64a94c0", 0x18}, 0x48, 0xfffffffffffffffa) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x6, 0xffff8e2f}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0x12}}, './file0\x00'}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_READY(r6, 0xc0189376, &(0x7f0000000340)={{0x1, 0x1, 0x18, r7, {0x595}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r8, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r9, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000400)={{0x1, 0x1, 0x18, r6, {0x9fb6}}, './file0\x00'}) keyctl$negate(0xd, r3, 0x10001, r3) 08:26:21 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/libata', 0x100, 0x0) openat$cgroup_freezer_state(r3, &(0x7f0000000180), 0x2, 0x0) openat$cgroup_pressure(r0, &(0x7f00000001c0)='io.pressure\x00', 0x2, 0x0) openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_devices(r2, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) getpgid(0x0) 08:26:21 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001280)={0x90, 0x0, &(0x7f00000011c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@fda={0x66646185, 0x3, 0x2, 0x21}, @fd, @flat=@weak_binder={0x77622a85, 0xa, 0x2}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000001100)={@fd, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/4096, 0x1000}, @ptr={0x70742a85, 0x0, &(0x7f00000010c0)=""/33, 0x21, 0x2, 0xf}}, &(0x7f0000001180)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0xfffffffffffffffe}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000012c0)='./binderfs2/custom1\x00', 0x6, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001300)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file0\x00'}) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x5) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000001340)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000001380)={{0x1, 0x1, 0x18, r2, {0x6}}, './file0\x00'}) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000001400)='./file1\x00', 0x1000000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001440)='/sys/module/sunrpc', 0x121000, 0x100) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001600)='/sys/module/8250', 0x4000, 0x10) 08:26:21 executing program 6: getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)=0x0) keyctl$get_persistent(0x16, r0, 0xfffffffffffffffe) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1, 0xee00}}, './file0\x00'}) keyctl$search(0xa, 0x0, &(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x2}, 0xfffffffffffffffb) r3 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "4b17bd94b64996f955ca1a408e24f394a01bfcb5532cc3de9cb7a1e0cbf711f55034e59d22a961be676917baae46cbc7712e6446c322f0298f03e74cd64a94c0", 0x18}, 0x48, 0xfffffffffffffffa) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x6, 0xffff8e2f}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0x12}}, './file0\x00'}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_READY(r6, 0xc0189376, &(0x7f0000000340)={{0x1, 0x1, 0x18, r7, {0x595}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r8, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r9, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) keyctl$negate(0xd, r3, 0x10001, r3) 08:26:21 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/libata', 0x100, 0x0) openat$cgroup_freezer_state(r3, &(0x7f0000000180), 0x2, 0x0) openat$cgroup_pressure(r0, &(0x7f00000001c0)='io.pressure\x00', 0x2, 0x0) openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) getpgid(0x0) 08:26:21 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001280)={0x90, 0x0, &(0x7f00000011c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@fda={0x66646185, 0x3, 0x2, 0x21}, @fd, @flat=@weak_binder={0x77622a85, 0xa, 0x2}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000001100)={@fd, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/4096, 0x1000}, @ptr={0x70742a85, 0x0, &(0x7f00000010c0)=""/33, 0x21, 0x2, 0xf}}, &(0x7f0000001180)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0xfffffffffffffffe}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000012c0)='./binderfs2/custom1\x00', 0x6, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001300)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file0\x00'}) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x5) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000001340)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000001380)={{0x1, 0x1, 0x18, r2, {0x6}}, './file0\x00'}) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000001400)='./file1\x00', 0x1000000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001600)='/sys/module/8250', 0x4000, 0x10) 08:26:21 executing program 6: getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)=0x0) keyctl$get_persistent(0x16, r0, 0xfffffffffffffffe) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1, 0xee00}}, './file0\x00'}) keyctl$search(0xa, 0x0, &(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x2}, 0xfffffffffffffffb) r3 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "4b17bd94b64996f955ca1a408e24f394a01bfcb5532cc3de9cb7a1e0cbf711f55034e59d22a961be676917baae46cbc7712e6446c322f0298f03e74cd64a94c0", 0x18}, 0x48, 0xfffffffffffffffa) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x6, 0xffff8e2f}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0x12}}, './file0\x00'}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_READY(r6, 0xc0189376, &(0x7f0000000340)={{0x1, 0x1, 0x18, r7, {0x595}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r8, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) keyctl$negate(0xd, r3, 0x10001, r3) [ 183.734808] Bluetooth: hci4: command 0x0406 tx timeout [ 183.734909] Bluetooth: hci6: command 0x0406 tx timeout [ 183.735791] Bluetooth: hci2: command 0x0406 tx timeout [ 183.736683] Bluetooth: hci1: command 0x0406 tx timeout [ 183.736719] Bluetooth: hci5: command 0x0406 tx timeout [ 183.737541] Bluetooth: hci0: command 0x0406 tx timeout [ 183.738355] Bluetooth: hci7: command 0x0406 tx timeout [ 183.739203] Bluetooth: hci3: command 0x0406 tx timeout [ 188.342620] INFO: task rcu_gp:3 blocked for more than 143 seconds. [ 188.343253] Not tainted 6.0.0-rc7-next-20220930 #1 [ 188.344052] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 188.344754] task:rcu_gp state:I stack:30328 pid:3 ppid:2 flags:0x00004000 [ 188.345485] Call Trace: [ 188.345909] [ 188.346088] __schedule+0x893/0x2470 [ 188.346624] ? io_schedule_timeout+0x150/0x150 [ 188.347070] ? do_raw_spin_lock+0x121/0x260 [ 188.348038] ? rwlock_bug.part.0+0x90/0x90 [ 188.348946] schedule+0xda/0x1b0 [ 188.349210] rescuer_thread+0x851/0xdb0 [ 188.349528] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 188.349967] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 188.350518] ? lockdep_hardirqs_on+0x79/0x100 [ 188.350893] ? worker_thread+0x1260/0x1260 [ 188.351392] kthread+0x2ed/0x3a0 [ 188.351723] ? kthread_complete_and_exit+0x40/0x40 [ 188.352225] ret_from_fork+0x22/0x30 [ 188.352820] [ 188.353120] INFO: task rcu_par_gp:4 blocked for more than 143 seconds. [ 188.353979] Not tainted 6.0.0-rc7-next-20220930 #1 [ 188.354730] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 188.355734] task:rcu_par_gp state:I stack:30944 pid:4 ppid:2 flags:0x00004000 [ 188.356863] Call Trace: [ 188.357152] [ 188.357410] __schedule+0x893/0x2470 [ 188.357862] ? io_schedule_timeout+0x150/0x150 [ 188.358372] ? do_raw_spin_lock+0x121/0x260 [ 188.358881] ? rwlock_bug.part.0+0x90/0x90 [ 188.359361] schedule+0xda/0x1b0 [ 188.359767] rescuer_thread+0x851/0xdb0 [ 188.360235] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 188.360826] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 188.361336] ? lockdep_hardirqs_on+0x79/0x100 [ 188.361707] ? worker_thread+0x1260/0x1260 [ 188.362034] kthread+0x2ed/0x3a0 [ 188.362298] ? kthread_complete_and_exit+0x40/0x40 [ 188.362706] ret_from_fork+0x22/0x30 [ 188.363002] [ 188.363191] INFO: task slub_flushwq:5 blocked for more than 143 seconds. [ 188.363717] Not tainted 6.0.0-rc7-next-20220930 #1 [ 188.364129] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 188.364721] task:slub_flushwq state:I stack:30944 pid:5 ppid:2 flags:0x00004000 [ 188.365343] Call Trace: [ 188.365541] [ 188.365745] __schedule+0x893/0x2470 [ 188.366048] ? io_schedule_timeout+0x150/0x150 [ 188.366403] ? do_raw_spin_lock+0x121/0x260 [ 188.366763] ? rwlock_bug.part.0+0x90/0x90 [ 188.367101] schedule+0xda/0x1b0 [ 188.367374] rescuer_thread+0x851/0xdb0 [ 188.367702] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 188.368097] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 188.368479] ? lockdep_hardirqs_on+0x79/0x100 [ 188.368854] ? worker_thread+0x1260/0x1260 [ 188.369188] kthread+0x2ed/0x3a0 [ 188.369454] ? kthread_complete_and_exit+0x40/0x40 [ 188.369855] ret_from_fork+0x22/0x30 [ 188.370157] [ 188.370342] INFO: task netns:6 blocked for more than 143 seconds. [ 188.370822] Not tainted 6.0.0-rc7-next-20220930 #1 [ 188.371216] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 188.371811] task:netns state:I stack:30944 pid:6 ppid:2 flags:0x00004000 [ 188.372452] Call Trace: [ 188.372672] [ 188.372855] __schedule+0x893/0x2470 [ 188.373155] ? io_schedule_timeout+0x150/0x150 [ 188.373510] ? do_raw_spin_lock+0x121/0x260 [ 188.373867] ? rwlock_bug.part.0+0x90/0x90 [ 188.374208] schedule+0xda/0x1b0 [ 188.374475] rescuer_thread+0x851/0xdb0 [ 188.374807] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 188.375191] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 188.375619] ? lockdep_hardirqs_on+0x79/0x100 [ 188.375975] ? worker_thread+0x1260/0x1260 [ 188.376316] kthread+0x2ed/0x3a0 [ 188.376602] ? kthread_complete_and_exit+0x40/0x40 [ 188.376987] ret_from_fork+0x22/0x30 [ 188.377294] [ 188.377481] INFO: task kworker/0:0:7 blocked for more than 143 seconds. [ 188.377989] Not tainted 6.0.0-rc7-next-20220930 #1 [ 188.378398] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 188.378995] task:kworker/0:0 state:I stack:29592 pid:7 ppid:2 flags:0x00004000 [ 188.379642] Workqueue: 0x0 (ata_sff) [ 188.379946] Call Trace: [ 188.380154] [ 188.380341] __schedule+0x893/0x2470 [ 188.380666] ? io_schedule_timeout+0x150/0x150 [ 188.381028] ? do_raw_spin_lock+0x121/0x260 [ 188.381375] schedule+0xda/0x1b0 [ 188.381668] worker_thread+0x15f/0x1260 [ 188.381991] ? process_one_work+0x16a0/0x16a0 [ 188.382343] kthread+0x2ed/0x3a0 [ 188.382632] ? kthread_complete_and_exit+0x40/0x40 [ 188.383013] ret_from_fork+0x22/0x30 [ 188.383321] [ 188.383505] INFO: task kworker/0:0H:8 blocked for more than 143 seconds. [ 188.384029] Not tainted 6.0.0-rc7-next-20220930 #1 [ 188.384439] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 188.385043] task:kworker/0:0H state:I stack:28952 pid:8 ppid:2 flags:0x00004000 [ 188.385684] Workqueue: 0x0 (kblockd) [ 188.385978] Call Trace: [ 188.386178] [ 188.386366] __schedule+0x893/0x2470 [ 188.386686] ? io_schedule_timeout+0x150/0x150 [ 188.387050] schedule+0xda/0x1b0 [ 188.387324] worker_thread+0x15f/0x1260 [ 188.387664] ? process_one_work+0x16a0/0x16a0 [ 188.388024] kthread+0x2ed/0x3a0 [ 188.388313] ? kthread_complete_and_exit+0x40/0x40 [ 188.388716] ret_from_fork+0x22/0x30 [ 188.389023] [ 188.389204] INFO: task mm_percpu_wq:10 blocked for more than 143 seconds. [ 188.389733] Not tainted 6.0.0-rc7-next-20220930 #1 [ 188.390131] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 188.390732] task:mm_percpu_wq state:I stack:30944 pid:10 ppid:2 flags:0x00004000 [ 188.391356] Call Trace: [ 188.391556] [ 188.391767] __schedule+0x893/0x2470 [ 188.392067] ? io_schedule_timeout+0x150/0x150 [ 188.392417] ? do_raw_spin_lock+0x121/0x260 [ 188.392783] ? rwlock_bug.part.0+0x90/0x90 [ 188.393117] schedule+0xda/0x1b0 [ 188.393391] rescuer_thread+0x851/0xdb0 [ 188.393727] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 188.394120] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 188.394516] ? lockdep_hardirqs_on+0x79/0x100 [ 188.394895] ? worker_thread+0x1260/0x1260 [ 188.395225] kthread+0x2ed/0x3a0 [ 188.395498] ? kthread_complete_and_exit+0x40/0x40 [ 188.395906] ret_from_fork+0x22/0x30 [ 188.396213] [ 188.396397] INFO: task rcu_tasks_kthre:11 blocked for more than 143 seconds. [ 188.396955] Not tainted 6.0.0-rc7-next-20220930 #1 [ 188.397362] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 188.397958] task:rcu_tasks_kthre state:I stack:29272 pid:11 ppid:2 flags:0x00004000 [ 188.398612] Call Trace: [ 188.398814] [ 188.398996] __schedule+0x893/0x2470 [ 188.399294] ? io_schedule_timeout+0x150/0x150 [ 188.399676] ? mark_held_locks+0x9e/0xe0 [ 188.399996] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 188.400407] schedule+0xda/0x1b0 [ 188.400701] rcu_tasks_one_gp+0x3db/0xc10 [ 188.401048] rcu_tasks_kthread+0x80/0xa0 [ 188.401360] ? rcu_tasks_postscan+0x10/0x10 [ 188.401715] kthread+0x2ed/0x3a0 [ 188.401986] ? kthread_complete_and_exit+0x40/0x40 [ 188.402367] ret_from_fork+0x22/0x30 [ 188.402695] [ 188.402882] INFO: task kworker/1:0H:21 blocked for more than 143 seconds. [ 188.403383] Not tainted 6.0.0-rc7-next-20220930 #1 [ 188.403805] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 188.404383] task:kworker/1:0H state:I stack:29760 pid:21 ppid:2 flags:0x00004000 [ 188.405036] Workqueue: 0x0 (events_highpri) [ 188.405383] Call Trace: [ 188.405609] [ 188.405791] __schedule+0x893/0x2470 [ 188.406089] ? io_schedule_timeout+0x150/0x150 [ 188.406451] schedule+0xda/0x1b0 [ 188.406750] worker_thread+0x15f/0x1260 [ 188.407070] ? process_one_work+0x16a0/0x16a0 [ 188.407412] kthread+0x2ed/0x3a0 [ 188.407694] ? kthread_complete_and_exit+0x40/0x40 [ 188.408076] ret_from_fork+0x22/0x30 [ 188.408377] [ 188.408559] INFO: task inet_frag_wq:23 blocked for more than 143 seconds. [ 188.409071] Not tainted 6.0.0-rc7-next-20220930 #1 [ 188.409469] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 188.410064] task:inet_frag_wq state:I stack:30704 pid:23 ppid:2 flags:0x00004000 [ 188.410702] Call Trace: [ 188.410901] [ 188.411078] __schedule+0x893/0x2470 [ 188.411378] ? io_schedule_timeout+0x150/0x150 [ 188.411756] ? do_raw_spin_lock+0x121/0x260 [ 188.412096] ? rwlock_bug.part.0+0x90/0x90 [ 188.412441] schedule+0xda/0x1b0 [ 188.412735] rescuer_thread+0x851/0xdb0 [ 188.413053] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 188.413446] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 188.413866] ? lockdep_hardirqs_on+0x79/0x100 [ 188.414219] ? worker_thread+0x1260/0x1260 [ 188.414587] kthread+0x2ed/0x3a0 [ 188.414857] ? kthread_complete_and_exit+0x40/0x40 [ 188.415240] ret_from_fork+0x22/0x30 [ 188.415550] [ 188.415821] [ 188.415821] Showing all locks held in the system: [ 188.416290] 1 lock held by rcu_tasks_kthre/11: [ 188.416672] #0: ffffffff85406850 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc10 [ 188.417422] 1 lock held by khungtaskd/25: [ 188.417763] #0: ffffffff85407320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 188.418474] 1 lock held by in:imklog/205: [ 188.418811] 2 locks held by syz-executor/4240: [ 188.419159] [ 188.419293] ============================================= [ 188.419293] 08:26:32 executing program 2: syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) socketpair(0x27, 0x2, 0x1000, &(0x7f0000000180)={0xffffffffffffffff}) connect$bt_sco(r5, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) r6 = syz_open_dev$mouse(&(0x7f0000000200), 0x4, 0x2e0980) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r6, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) bind$bt_sco(r5, &(0x7f0000000280), 0x8) syz_open_dev$mouse(&(0x7f00000002c0), 0x4, 0x400000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000340)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000400)={r9, 0x1, 0x9}) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r10, 0x89f0, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000580)={'ip_vti0\x00', 0x0, 0x8, 0x40, 0x3da5, 0xb5e00, {{0x6, 0x4, 0x0, 0x6, 0x18, 0x67, 0x0, 0x48, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @multicast1, {[@end]}}}}}) 08:26:32 executing program 4: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r0, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x10b}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xce}]}, 0x48}, 0x1, 0x0, 0x0, 0x24004024}, 0x40040) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000240)={0xfffffffffffffffe, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x74, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:auditd_log_t:s0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x40008d4) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_hsr\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}]}, 0x34}, 0x1, 0x0, 0x0, 0x94}, 0x4890) pselect6(0x40, &(0x7f00000004c0)={0x3e800000000000, 0xf31, 0x9, 0x8, 0xb6fc, 0x0, 0x286, 0x6}, &(0x7f0000000500)={0x200, 0x9, 0x400, 0x1, 0x1, 0x3f, 0x1ff, 0x1}, &(0x7f0000000540)={0x2, 0x200, 0xffff, 0x2b4, 0x0, 0x2, 0x7, 0x7}, &(0x7f0000000580), &(0x7f0000000600)={&(0x7f00000005c0)={[0x2]}, 0x8}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xa4, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:modem_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:inetd_log_t:s0\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004080}, 0x20000000) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000007c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x64, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000980), r1) r4 = syz_open_dev$mouse(&(0x7f00000009c0), 0x80000000, 0x4080) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000a00)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x800}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000a40)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000a80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000b80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x74, r3, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd980}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x24}]}, 0x74}, 0x1, 0x0, 0x0, 0x44015}, 0x4000060) 08:26:32 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001280)={0x90, 0x0, &(0x7f00000011c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@fda={0x66646185, 0x3, 0x2, 0x21}, @fd, @flat=@weak_binder={0x77622a85, 0xa, 0x2}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000001100)={@fd, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/4096, 0x1000}, @ptr={0x70742a85, 0x0, &(0x7f00000010c0)=""/33, 0x21, 0x2, 0xf}}, &(0x7f0000001180)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0xfffffffffffffffe}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000012c0)='./binderfs2/custom1\x00', 0x6, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001300)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file0\x00'}) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x5) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000001340)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000001380)={{0x1, 0x1, 0x18, r2, {0x6}}, './file0\x00'}) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) inotify_init() openat$sysfs(0xffffffffffffff9c, &(0x7f0000001600)='/sys/module/8250', 0x4000, 0x10) 08:26:32 executing program 6: getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)=0x0) keyctl$get_persistent(0x16, r0, 0xfffffffffffffffe) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1, 0xee00}}, './file0\x00'}) keyctl$search(0xa, 0x0, &(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x2}, 0xfffffffffffffffb) r3 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "4b17bd94b64996f955ca1a408e24f394a01bfcb5532cc3de9cb7a1e0cbf711f55034e59d22a961be676917baae46cbc7712e6446c322f0298f03e74cd64a94c0", 0x18}, 0x48, 0xfffffffffffffffa) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x6, 0xffff8e2f}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0x12}}, './file0\x00'}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_READY(r6, 0xc0189376, &(0x7f0000000340)={{0x1, 0x1, 0x18, r7, {0x595}}, './file0\x00'}) keyctl$negate(0xd, r3, 0x10001, r3) 08:26:32 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/libata', 0x100, 0x0) openat$cgroup_freezer_state(r2, &(0x7f0000000180), 0x2, 0x0) openat$cgroup_pressure(r0, &(0x7f00000001c0)='io.pressure\x00', 0x2, 0x0) getpgid(0x0) 08:26:32 executing program 3: prctl$PR_SET_FPEXC(0xc, 0x100000) prctl$PR_SET_FPEXC(0xc, 0x1) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x23b, 0x280) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffff}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x40040010) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x62088000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x5}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4020}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000002c0)={0x3}) add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'gretap0\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x7, 0x7, 0xaa5, 0x5, {{0x9, 0x4, 0x2, 0x4, 0x24, 0x64, 0x0, 0x3f, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0xf, 0x4b, [@multicast2, @broadcast, @loopback]}]}}}}}) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000480)={0x1f4, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7fff, @loopback, 0xffffffc1}}, {0x14, 0x2, @in={0x2, 0x4e21, @empty}}}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_to_bridge\x00'}}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa8a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x72, 0x3, "c031602c6221672a5cea29a8b1dc9ae0167cd3de22acf758666d88881744168bb0d11ee8b1d611ecfa4339d1cfca9ed2c5bae2b9505484a61b7670aa97e1ca18950047cfe101e73d3f79d7b3abf89d2da8cec3863d475bfc0769e7e9250b331d230d1fe8ec1d2757cdbed1c59645"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x78c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff9a}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x20}, 0x44000040) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x234, &(0x7f0000000780)={[{0x31, 0x4e00, "aba2db01379985962cf3cd133bc30ca66adf4d014d6f00001fd83cbc8e5f4977a5719e673cd4e4980c73b6290402cd0e39"}, {0x30, 0x4e00, "5ea481a1033d16c4545749705386a3b312a186453223a3bcf062e24f7446af58447039865b041381703615661fc2427a"}, {0xd4, 0x4e00, "517819918095b87c6e8ac8e488ebf55646c25337955c20e93e64d5623db9a0f0a43768be311b4957975aa493ffcecc43bf49d28676abba8b6ccaca288b1620a05b219a7a04b2ab1919faaeda458e9ea471269de1ccfaf1090d4a1c61e8e38017ddfaff59b7308ac04c4452190775379eff26b35c2fc5b6c756c20bbfd95bfec8d8b5b8b0f9254a71a58b425e645cc6ae4c5cbb1a3531790a387b002056ce9d2d57994df8c971412b7cfed5f36bc0705b13f4d3df6011aeab479c8e5ad6fb1dc0de01d2d41ad10822c5ae3d66106f3223865eb207"}, {}, {0x56, 0x4e00, "6724343995935907565e3be35492983379f668acec103b9bb8ca5cbdd475dbd814b8616140f392163f04242dc9ce64298669eac5ddb8ebd66b3342322681dc875e6f71052402c2a8013e5f80df6420a62685bfd16aa7"}, {0x89, 0x4e00, "15b06b86e23f3a3143b581fc60bea092da04ef793953c80918fdecb3714f55588e090e98bc9d929cfa76149ae71244503bdeafcfd2b6e17d86056bc3c7740e28dbfd5d24eba82ef0d87a478b65edc14cba8409540391e25ad69261d11a389f9f6d978044c53cfb9ded08638ab1dedbe3609d099c076f6e0e74547d7340a8f80026b88cdad15fdcbfa1"}]}) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x44, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x20000000) r4 = openat$cgroup_freezer_state(r0, &(0x7f0000000b00), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r4, {0x5f}}, './file0\x00'}) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0xbc, 0x0, 0x1, 0x70bd2c, 0xffffffff, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:agp_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_bond\x00'}]}, 0xbc}}, 0x800) 08:26:32 executing program 1: r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x60d286c4b14df7b4, 0x61, 0x23, 0x8a, 0x8, 0x12d1, 0x14b8, 0xfac0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xc5, 0x0, 0x80, 0x49, [{{0x9, 0x4, 0xdb, 0x40, 0x0, 0xff, 0x3, 0x14, 0x3, [@hid_hid={0x9, 0x21, 0x4, 0x40, 0x1, {0x22, 0x639}}]}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x15, 0x0, 0x39, 0xff, 0x1}, 0x39, &(0x7f0000000080)={0x5, 0xf, 0x39, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0x6, 0x1f, 0x4, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x3, 0xb, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x2, 0x4d, 0x2}, @ssp_cap={0x18, 0x10, 0xa, 0x8, 0x3, 0x7, 0xf00, 0x101, [0x0, 0xffff, 0xff0000]}]}, 0x6, [{0x33, &(0x7f00000000c0)=@string={0x33, 0x3, "a2e8b191adb2231f1f049528253546715d1584f16bbdc70b57a1033875ae1daea477fb53f3e357b0227b1a439de8decc98"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x81d}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x100c}}, {0xed, &(0x7f0000000180)=@string={0xed, 0x3, "56c629811fc966d541adc0d5e6c16b05172f71a78dbff56b6231f24e71b9dcdf56d22c3b9df3a8316c23b61b6a381f3e56a958f5c0a1c48b8c262eb335f0151d0bc1015886e93a2cefc7629d1d2a7107e5da0d85b8d602ece8b59a409491598b42f0c941f0aa4ea22e5da4771967f450c90b817967287e351be63f10c731cc0e6d3c19bed3cc8bcce51f9b2307a8a8dc1b2423d9d9a079bcce9a73db6d116085799ef0c155004df800036750c51241fb9661a6c062b4f626c0c4ae18e0a7bab9bf1fb0472d799b4193ee19118ffca29077e5b0bc2240786deb77d541e6f54cff03991b130ad93b244d817b"}}, {0x15, &(0x7f0000000280)=@string={0x15, 0x3, "dcafcd69b865ac7078c12aab813653c650fdde"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x44f}}]}) syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, &(0x7f0000000380)={0x40, 0x23, 0x4f, {0x4f, 0x23, "7d421e05321daf4efc0fe23707ee3aabc6fe64911be3c8701c33b729c00d01f997f2b444f2818bc077b5ee5ed33a891f0ab60760a5e747200857ac9aee1afe41b54dc7e33ea40dcb3d137b9a8a"}}, &(0x7f0000000400)={0x0, 0x3, 0xd, @string={0xd, 0x3, "c55830009201e8ea866abe"}}, &(0x7f0000000440)={0x0, 0xf, 0x10, {0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x1a, 0x3, 0x80, 0x7, 0x6}]}}, &(0x7f0000000480)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x1, 0x0, 0x4, '0x0, {0x4}, &(0x7f0000000b80)=""/175, 0xaf, &(0x7f0000000c40)=""/26, &(0x7f0000000c80)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) timer_create(0x2, &(0x7f0000000d40)={0x0, 0x2d, 0x0, @tid=r1}, &(0x7f0000000d80)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000dc0), 0x2, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000e00)='cpu.pressure\x00', 0x2, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000e40)={0x2, 0x80, 0x0, 0x4a, 0x7, 0x7f, 0x0, 0x6, 0x4, 0xe, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x0, 0x4}, 0x40012, 0x0, 0x9, 0x2, 0x5, 0x1, 0x80, 0x0, 0x52e, 0x0, 0x2}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x6) geteuid() perf_event_open(&(0x7f0000000f00)={0x5, 0x80, 0x5, 0x40, 0x6, 0x7, 0x0, 0x62ed, 0x20001, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000ec0), 0xe}, 0x0, 0x8fc, 0x54b, 0x8, 0x1ff, 0x7fff, 0x4, 0x0, 0x8211, 0x0, 0x3}, 0xffffffffffffffff, 0x4, r2, 0x8) openat$autofs(0xffffffffffffff9c, &(0x7f0000000f80), 0x10000, 0x0) clone(0x1000, &(0x7f0000000fc0)="cbbfa86f33e87b82bd0570788bd34a22e45df533db24a5b9aae6d78d8ba3d927f8d565f57e8ae1617cd2eebf127ca6469dab2af532fd57bf1ba486595bd0d58dbe2196ae69a82bb2a26dca023eede66a2c0bb301ebd46f4b123ec27a95a96cf87a50700c22d48c42864a70ce070fcf3a39a4f66823644e589d9b3a436768a9f348c5c0a6f11493043d43330025a3352b935d59f4e19860e84c447acacfefd89512eae45e56f0801bdb68e1886c1f1714ba5e3de302cbc3a318cba17266a66101e8ec677714fe4d725815f527b88eb80b65000dfb6c6e214996308254021167436267eaf8004af250a2d3d2f38954e8cb532cb850faeb63", &(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)="82fb5e28049fd05d4e28deeee15db2bb37bcd2d515f00ac3de0ada12e09b07f622ef7593dd46dbed066c99179b5cea9de35e798cd72dc40dd08ac2768b1e49cfebd2dea2c18e0fe8ff3466b07a2f0a117672fe462c07b058746bd1e59a6b5bf3d8e76d536f4c6ff3a696b15d709fb77d49264b93d094a5316d8d4776c5b622b00b02e9e0a7b121567388f269318fc4e3a1") openat$cgroup(0xffffffffffffffff, &(0x7f0000001200)='syz1\x00', 0x200002, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000001240), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x40, r3, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}, 0x1, 0x0, 0x0, 0x200040c2}, 0x4081) socket$inet_icmp_raw(0x2, 0x3, 0x1) getgid() mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000001440)='syz1\x00', 0x1ff) 08:26:32 executing program 7: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x1}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r2, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x80) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000001c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x220}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r2, 0xc00, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r4}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x8800}, 0x8000) syz_open_dev$vcsa(&(0x7f0000000380), 0x7, 0x101280) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000400), r3) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r5, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x21}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) openat$cgroup_type(r0, &(0x7f0000000500), 0x2, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000880), r3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 189.395417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.396292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.409381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.410188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 08:26:32 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001280)={0x90, 0x0, &(0x7f00000011c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@fda={0x66646185, 0x3, 0x2, 0x21}, @fd, @flat=@weak_binder={0x77622a85, 0xa, 0x2}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000001100)={@fd, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/4096, 0x1000}, @ptr={0x70742a85, 0x0, &(0x7f00000010c0)=""/33, 0x21, 0x2, 0xf}}, &(0x7f0000001180)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0xfffffffffffffffe}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000012c0)='./binderfs2/custom1\x00', 0x6, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001300)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file0\x00'}) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x5) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000001340)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000001380)={{0x1, 0x1, 0x18, r2, {0x6}}, './file0\x00'}) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001600)='/sys/module/8250', 0x4000, 0x10) 08:26:32 executing program 6: getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)=0x0) keyctl$get_persistent(0x16, r0, 0xfffffffffffffffe) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1, 0xee00}}, './file0\x00'}) keyctl$search(0xa, 0x0, &(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x2}, 0xfffffffffffffffb) r3 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "4b17bd94b64996f955ca1a408e24f394a01bfcb5532cc3de9cb7a1e0cbf711f55034e59d22a961be676917baae46cbc7712e6446c322f0298f03e74cd64a94c0", 0x18}, 0x48, 0xfffffffffffffffa) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x6, 0xffff8e2f}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0x12}}, './file0\x00'}) socket$inet_udplite(0x2, 0x2, 0x88) keyctl$negate(0xd, r3, 0x10001, r3) 08:26:32 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/libata', 0x100, 0x0) openat$cgroup_freezer_state(r2, &(0x7f0000000180), 0x2, 0x0) getpgid(0x0) 08:26:33 executing program 6: getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)=0x0) keyctl$get_persistent(0x16, r0, 0xfffffffffffffffe) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1, 0xee00}}, './file0\x00'}) keyctl$search(0xa, 0x0, &(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x2}, 0xfffffffffffffffb) r3 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "4b17bd94b64996f955ca1a408e24f394a01bfcb5532cc3de9cb7a1e0cbf711f55034e59d22a961be676917baae46cbc7712e6446c322f0298f03e74cd64a94c0", 0x18}, 0x48, 0xfffffffffffffffa) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x6, 0xffff8e2f}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0x12}}, './file0\x00'}) keyctl$negate(0xd, r3, 0x10001, r3) 08:26:33 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/libata', 0x100, 0x0) getpgid(0x0) 08:26:33 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) getpgid(0x0) 08:26:33 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001280)={0x90, 0x0, &(0x7f00000011c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@fda={0x66646185, 0x3, 0x2, 0x21}, @fd, @flat=@weak_binder={0x77622a85, 0xa, 0x2}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000001100)={@fd, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/4096, 0x1000}, @ptr={0x70742a85, 0x0, &(0x7f00000010c0)=""/33, 0x21, 0x2, 0xf}}, &(0x7f0000001180)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0xfffffffffffffffe}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000012c0)='./binderfs2/custom1\x00', 0x6, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001300)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file0\x00'}) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x5) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000001340)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000001380)={{0x1, 0x1, 0x18, r2, {0x6}}, './file0\x00'}) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001600)='/sys/module/8250', 0x4000, 0x10) 08:26:33 executing program 6: getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)=0x0) keyctl$get_persistent(0x16, r0, 0xfffffffffffffffe) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1, 0xee00}}, './file0\x00'}) keyctl$search(0xa, 0x0, &(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x2}, 0xfffffffffffffffb) r3 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "4b17bd94b64996f955ca1a408e24f394a01bfcb5532cc3de9cb7a1e0cbf711f55034e59d22a961be676917baae46cbc7712e6446c322f0298f03e74cd64a94c0", 0x18}, 0x48, 0xfffffffffffffffa) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x6, 0xffff8e2f}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) keyctl$negate(0xd, r3, 0x10001, r3) 08:26:33 executing program 2: syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) socketpair(0x27, 0x2, 0x1000, &(0x7f0000000180)={0xffffffffffffffff}) connect$bt_sco(r5, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) r6 = syz_open_dev$mouse(&(0x7f0000000200), 0x4, 0x2e0980) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r6, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) bind$bt_sco(r5, &(0x7f0000000280), 0x8) syz_open_dev$mouse(&(0x7f00000002c0), 0x4, 0x400000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000340)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000400)={r9, 0x1, 0x9}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000580)={'ip_vti0\x00', 0x0, 0x8, 0x40, 0x3da5, 0xb5e00, {{0x6, 0x4, 0x0, 0x6, 0x18, 0x67, 0x0, 0x48, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @multicast1, {[@end]}}}}}) 08:26:33 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) getpgid(0x0) 08:26:33 executing program 7: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x1}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r2, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x80) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000001c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x220}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r2, 0xc00, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r4}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x8800}, 0x8000) syz_open_dev$vcsa(&(0x7f0000000380), 0x7, 0x101280) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000400), r3) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r5, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x21}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) openat$cgroup_type(r0, &(0x7f0000000500), 0x2, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000880), r3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 08:26:33 executing program 6: getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)=0x0) keyctl$get_persistent(0x16, r0, 0xfffffffffffffffe) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1, 0xee00}}, './file0\x00'}) keyctl$search(0xa, 0x0, &(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x2}, 0xfffffffffffffffb) r3 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "4b17bd94b64996f955ca1a408e24f394a01bfcb5532cc3de9cb7a1e0cbf711f55034e59d22a961be676917baae46cbc7712e6446c322f0298f03e74cd64a94c0", 0x18}, 0x48, 0xfffffffffffffffa) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x6, 0xffff8e2f}}, './file0\x00'}) keyctl$negate(0xd, r3, 0x10001, r3) 08:26:33 executing program 4: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r0, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x10b}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xce}]}, 0x48}, 0x1, 0x0, 0x0, 0x24004024}, 0x40040) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000240)={0xfffffffffffffffe, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x74, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:auditd_log_t:s0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x40008d4) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_hsr\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}]}, 0x34}, 0x1, 0x0, 0x0, 0x94}, 0x4890) pselect6(0x40, &(0x7f00000004c0)={0x3e800000000000, 0xf31, 0x9, 0x8, 0xb6fc, 0x0, 0x286, 0x6}, &(0x7f0000000500)={0x200, 0x9, 0x400, 0x1, 0x1, 0x3f, 0x1ff, 0x1}, &(0x7f0000000540)={0x2, 0x200, 0xffff, 0x2b4, 0x0, 0x2, 0x7, 0x7}, &(0x7f0000000580), &(0x7f0000000600)={&(0x7f00000005c0)={[0x2]}, 0x8}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xa4, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:modem_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:inetd_log_t:s0\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004080}, 0x20000000) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000007c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x64, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000980), r1) r4 = syz_open_dev$mouse(&(0x7f00000009c0), 0x80000000, 0x4080) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000a00)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x800}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000a40)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000a80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000b80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x74, r3, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd980}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x24}]}, 0x74}, 0x1, 0x0, 0x0, 0x44015}, 0x4000060) 08:26:33 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001280)={0x90, 0x0, &(0x7f00000011c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@fda={0x66646185, 0x3, 0x2, 0x21}, @fd, @flat=@weak_binder={0x77622a85, 0xa, 0x2}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000001100)={@fd, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/4096, 0x1000}, @ptr={0x70742a85, 0x0, &(0x7f00000010c0)=""/33, 0x21, 0x2, 0xf}}, &(0x7f0000001180)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0xfffffffffffffffe}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000012c0)='./binderfs2/custom1\x00', 0x6, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001300)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file0\x00'}) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x5) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000001340)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000001380)={{0x1, 0x1, 0x18, r2, {0x6}}, './file0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001600)='/sys/module/8250', 0x4000, 0x10) VM DIAGNOSIS: 08:26:32 Registers: info registers vcpu 0 RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff823bb06c RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88800902f8a0 R8 =0000000000000001 R9 =ffff88800902f82b R10=ffffed1001205f05 R11=0000000000000001 R12=000000000000002f R13=ffffffff8765a960 R14=ffffffff8765a9b0 R15=ffffffff8765ac10 RIP=ffffffff823bb0c1 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000562caecf9648 CR3=000000000d758000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 00000000ff000000 0000000000000000 YMM01=0000000000000000 0000000000000000 636f6c63006b6165 6c6d656d6b2f6775 YMM02=0000000000000000 0000000000000000 0000000000ffffff ff00000000000000 YMM03=0000000000000000 0000000000000000 0000ff0000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffff000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff888015fc59b8 RCX=ffffffff8129b5da RDX=ffff888015fc5a50 RSI=0000000000000008 RDI=ffffffff86d038d8 RBP=ffffffff86d03820 RSP=ffff8880188e75d0 R8 =0000000000000000 R9 =ffffffff86cd383f R10=fffffbfff0d9a707 R11=0000000000000001 R12=ffff888015fc5040 R13=ffff888015fc5a30 R14=0000000000000002 R15=0000000000040000 RIP=ffffffff8129b62b RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fac94c22900 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fac94055400 CR3=000000000f314000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 494e4f544f4e4f4d 5f454352554f535f YMM01=0000000000000000 0000000000000000 4d49545f43494e4f 544f4e4f4d5f4543 YMM02=0000000000000000 0000000000000000 3830306234386136 3036386166633561 YMM03=0000000000000000 0000000000000000 2f6c616e72756f6a 2f676f6c2f6e7572 YMM04=0000000000000000 0000000000000000 32062a86fd343ae5 000000000013a998 YMM05=0000000000000000 0000000000000000 d3fdd5f48436fbd7 00000000000aead0 YMM06=0000000000000000 0000000000000000 ef29333c960e2c3d 00000000000ae988 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 44495f474f4c5359 530069253d595449 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0020000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000