last executing test programs: 11m46.405692937s ago: executing program 32 (id=256): ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000002140)=0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x4}}}, @hoplimit={{0x14}}, @hopopts={{0x58, 0x29, 0x36, {0x5e, 0x7, '\x00', [@pad1, @pad1, @padn, @calipso={0x7, 0x28, {0x3, 0x8, 0x0, 0xfff, [0x2, 0x966, 0xfffffffffffffff7, 0x1]}}, @calipso={0x7, 0x8, {0x1, 0x0, 0x3, 0x1}}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}], 0xc0}}], 0x1, 0x8000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2cff7f0000", 0x5) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d000000000001000000000000000141"], 0x38}}, 0x0) r5 = accept4(r2, 0x0, 0x0, 0x800) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={@map, 0x11, 0x0, 0x3, &(0x7f00000002c0)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x6f) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 11m6.061176368s ago: executing program 33 (id=378): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0x6f8f6035791be0c, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000002c0)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f00000003c0)={0x2, 0x5, 0x0, 0x2, 0x5, 0x0, 0x0, 0x25dfdbfd, [@sadb_address={0x3, 0x6, 0x0, 0x80, 0xe, @in={0x2, 0x4e21, @loopback}}]}, 0x28}, 0x1, 0x400000000000000}, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x6) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}}}, 0x24}}, 0x0) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}]}}]}, 0x3c}}, 0x24000000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 8m56.557185455s ago: executing program 2 (id=801): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, 0x0) eventfd2(0x0, 0x80001) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000240)={0xffffffffffffffff, 0x7ffb}) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r2, 0x80184132, 0x0) r3 = syz_io_uring_setup(0x5c2, 0x0, 0x0, &(0x7f00000000c0)) io_uring_enter(r3, 0x68be, 0x5002, 0x4, 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d40"], 0x6c}}, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000000a0ad9aaa96a9e7d395d49d2ff6fd29c44dc370747000000000000"], 0x14}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x4c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x38, 0x1, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x4084) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)="957bc3871f54da01138019ebbb3587e39b0af28eea1dc1c5b6b0f27c1111d0f8b71e196a9bb19b466172df083b602f37901653c0b41e9ea3218f6680923cb44fcde97805fe3eaf057d955a0de7c0d566c5549dfde8c0703c0f633cd8c5f98fc10f484ec2ab2611e94e", 0x69}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0x103}, {&(0x7f0000000300)="d4eb0cb9b5afe8a92397fd60", 0xc}], 0x5, &(0x7f0000000880)=[@rthdr_2292={{0x98, 0x29, 0x39, {0x32, 0x10, 0x3, 0xc6, 0x0, [@dev={0xfe, 0x80, '\x00', 0xe}, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @mcast1, @local]}}}], 0x98}}], 0x1, 0x40004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000004851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000004180000000000001000000000000200009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100200000ffffb702000008000000b50a00000000000085000000b400000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) listen(r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf2020000000000015000200000000103d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff07006702000003000000160600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[], 0x48) 8m52.414755056s ago: executing program 2 (id=818): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0xaa001) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000340)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000200)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r3}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f00000000c0)=[r3], &(0x7f0000000280), &(0x7f0000000300)=[r4], &(0x7f0000000340)}) 8m52.22967053s ago: executing program 2 (id=819): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$I2C(0x0, 0x1, 0x2603) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup, 0x2b, 0x0, 0xc, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)}, 0xffffffffffffffe5) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8ffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, &(0x7f0000000000)) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') creat(&(0x7f0000000580)='./file1\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) pipe2$9p(0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x5) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f0000000440)) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000044000900000092000000000305000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x4000040) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="3000000011000108000000000000", @ANYRES32=0x0], 0x30}}, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)}, 0x0) 8m51.435868581s ago: executing program 2 (id=823): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x7efc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x50) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$sock_SIOCADDRT(r0, 0x890b, 0x0) dup3(r5, r4, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r5, 0x641e) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x19, 0x0, &(0x7f0000000080), &(0x7f0000000180)='GPL\x00', 0x8, 0x5b, &(0x7f00000001c0)=""/91, 0x0, 0x28, '\x00', 0x0, @cgroup_sockopt=0x15, r5, 0x8, &(0x7f0000000300)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0xd, 0x8000, 0x7}, 0x10, 0x0, r2, 0x7, &(0x7f00000004c0)=[r0, r6, r1, 0x1, r0, 0x1, r1], &(0x7f0000000500)=[{0x4, 0x1, 0x2, 0x93f05dff323c8fa4}, {0x0, 0x1, 0x1, 0x3}, {0x2, 0x3, 0x8, 0x3}, {0x2, 0x5, 0x2, 0xb}, {0x1, 0x3, 0x6, 0x2}, {0x5, 0x1, 0xb, 0x4}, {0x1, 0x1, 0xd, 0xc}], 0x10, 0x1}, 0x94) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r7, 0xffffffffffffffff, 0x0) 8m50.393767141s ago: executing program 2 (id=825): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x40802) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0xd7, 0x6573, 0x4}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x400000000000000, 0x12, r0, 0x100000000) 8m49.453012876s ago: executing program 2 (id=828): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x5, 0x4, 0x4, 0x800007, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1}, 0x50) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r0, 0x97, 0x1, 0x10}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, 0x0, 0x0, 0x4}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x5, 0x4, 0x4, 0x800007, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1}, 0x50) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r0, 0x97, 0x1, 0x10}) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, 0x0, 0x0, 0x4}, 0x20) (async) 8m34.437328483s ago: executing program 34 (id=828): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x5, 0x4, 0x4, 0x800007, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1}, 0x50) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r0, 0x97, 0x1, 0x10}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, 0x0, 0x0, 0x4}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x5, 0x4, 0x4, 0x800007, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1}, 0x50) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r0, 0x97, 0x1, 0x10}) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, 0x0, 0x0, 0x4}, 0x20) (async) 7m44.408983873s ago: executing program 7 (id=1038): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000000)='./file1\x00', 0x40400, 0x80) mkdirat(r0, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = msgget(0x3, 0x1) msgsnd(r1, &(0x7f0000000080)={0x1, "d27c20782d7673be5149d0afa14f8e837991c06d231b9ec4be61ede215dc4ed765b9bf74ef0dee79ab9b83900985c90a380a88f1e072b8b3c042baf3eda0e77b6a9541b62009e4daec9a04709e852aaa7bfd44a44d3dde9eb16aa7"}, 0x63, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x800, 0x2) writev(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)="ef", 0x1}], 0x1) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f00000003c0), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x13}, 0x94) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e20, 0xa1, @mcast2, 0x6}, 0x1c) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x5008, 0x50000, @remote, 0x5}, 0x1c) ioctl$PPPOEIOCDFWD(r3, 0xb101, 0x0) 7m42.951211797s ago: executing program 7 (id=1043): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x5}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000440)={r7, 0x2, 0x0, 0x7, 0x0, [0x0], [0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x4]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) (fail_nth: 8) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r9}) 7m41.661288021s ago: executing program 7 (id=1048): sched_setscheduler(0x0, 0x2, 0x0) getpid() connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x0, 0x3}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e21000000080003400000000806000140000100000900010073797a30000000000900020073797a320000000008000b400000000314000000110001"], 0x9c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) close(r1) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018010000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xb, 0x10000}, 0x20) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) fchmod(r3, 0x7) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r3, 0x4002f516, &(0x7f0000000040)={0x98, 0x5}) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f00000024c0)={0xa, 0x7, 0x0, @loopback}, 0x20) r5 = syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x8, 0x40202) ioctl$AUTOFS_IOC_SETTIMEOUT(r5, 0x80049367, &(0x7f00000001c0)=0x1) 7m41.505318367s ago: executing program 7 (id=1050): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000002340)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x0, 0x0) (fail_nth: 9) 7m41.274538443s ago: executing program 7 (id=1053): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000080)={0xc000003, 0x1859, &(0x7f0000001040)=[0x3, 0x3, 0x2, 0x64, 0x5, 0x25, 0x10000, 0x0, 0xb553, 0xc, 0x392, 0x954, 0x6, 0x0, 0x0, 0x1, 0x8, 0x0, 0xb16a, 0xfffffffa, 0x5, 0x7ff, 0x50000, 0xc69, 0x7, 0x7, 0x0, 0x8, 0x7, 0x3ff, 0xcee, 0x1, 0x1, 0x3, 0x7, 0x200, 0x140000, 0x906, 0x7, 0x8000, 0x6, 0x1, 0xd, 0x1, 0x8, 0x1, 0x80000000, 0x6, 0x1, 0x3e9, 0x6a098000, 0x40, 0x8, 0x0, 0x1, 0x94f, 0x2, 0x400, 0x8, 0x200, 0x5, 0x80000000, 0x4a, 0x7, 0xfffffffd, 0x9, 0x80, 0x1, 0xc, 0x7, 0x2000, 0x1, 0x2, 0x4, 0x40, 0x9, 0x1000, 0x1, 0x7, 0x4, 0x4ad, 0xe816, 0x9, 0x8, 0x2, 0x7f, 0x4, 0x6, 0x80000001, 0x0, 0x49c, 0x1, 0x5, 0x8, 0x1, 0x7, 0x1, 0x5, 0xff, 0x10000, 0x0, 0x0, 0x10001, 0x5, 0x85, 0xfffffffc, 0x7d5, 0x5, 0x1, 0x5, 0xfffffffd, 0x35b680, 0xb448, 0x8, 0x2, 0x1, 0x7d7, 0x9, 0x80000000, 0x5, 0xff, 0x7ff, 0x8, 0x8, 0xfffffbc7, 0x1, 0x134b6f9f, 0xfffffff8, 0x7, 0x1159, 0x5, 0x4, 0x7, 0x2, 0x3, 0x1, 0xe, 0x40, 0x2, 0x7, 0xa6, 0x25d, 0x9, 0x9, 0x0, 0x29, 0x8, 0x2, 0x1, 0x0, 0x8, 0x4, 0x100, 0xb07, 0x10000, 0x0, 0x1, 0x6, 0xf6c, 0xaf, 0x4800000, 0x9, 0x5, 0x9, 0x5, 0x5, 0x10001, 0xfffffffc, 0x64, 0x0, 0x401, 0x5007, 0x49fc, 0x8, 0x95, 0x3dff, 0x1, 0x1, 0x9, 0x5, 0xde, 0x401, 0x8bf9, 0xfff00000, 0x6, 0x3, 0x8, 0x5, 0x4, 0x1, 0x4, 0x24, 0x9, 0x0, 0xfffffffa, 0x9, 0x7, 0xf, 0x3, 0x8, 0x800, 0xfffffffa, 0x40000000, 0x0, 0x80000001, 0xe, 0x6, 0x8, 0xffff, 0x2020, 0x7, 0x4, 0x3, 0x6, 0xd6, 0x7, 0x0, 0x391573e2, 0xfffffffa, 0x1, 0x7, 0xb, 0x4, 0x5, 0x7fff, 0x3, 0x9, 0xfff, 0x1, 0x7, 0x9, 0x6, 0x10, 0xfffff001, 0xfe01, 0x4, 0x1, 0x8, 0x706, 0x2, 0x4, 0xfffffffa, 0x9562, 0x2b, 0x1, 0x2, 0x4, 0xeb, 0xa, 0x2, 0x2502f8f4, 0x3, 0x85aa, 0x0, 0x0, 0x6, 0x6, 0x5d46, 0x3, 0x5, 0xfff, 0x8, 0x90, 0x7, 0x81, 0x2, 0x0, 0x1d, 0x6, 0x13, 0x1, 0x7fffffff, 0x3, 0xffffffff, 0x1, 0x2, 0x8000, 0x7fff, 0x8000, 0x5, 0x1, 0x0, 0x1c00, 0x4, 0x6, 0xee, 0x1000, 0x3, 0x0, 0x80000000, 0x4, 0x1, 0xab, 0x7d0a, 0x5, 0xb53, 0x0, 0x7, 0x0, 0x6, 0x7, 0x6, 0x7, 0x800, 0x1, 0x5, 0x4, 0x0, 0x7, 0x9, 0x5, 0x800, 0x368, 0x3, 0x3d21461, 0x4, 0x7fff, 0x800, 0x3, 0x67, 0x81, 0x81, 0xfffffffe, 0x4, 0x6, 0x61, 0x7, 0x7f, 0x3, 0xe, 0x4, 0x1, 0x4, 0x1, 0x8, 0x2, 0x9, 0x25, 0x10, 0x6, 0x7ff, 0x8, 0x8, 0xd2, 0x6, 0x9, 0xa03c, 0x9, 0xb1d, 0x7, 0x2ce, 0x7fff, 0x7, 0x7, 0x7fff, 0x7, 0x0, 0x10001, 0x8, 0x6, 0x81, 0x2, 0x2, 0xe, 0x1000, 0x2, 0x5, 0x8, 0x3ff, 0x7, 0xb1, 0x9, 0x10001, 0x5, 0x3, 0xff000000, 0x564, 0x4, 0x7, 0xa2b7, 0xff, 0x8000, 0x80000001, 0x6, 0x3, 0x35, 0x9, 0x4fb5, 0x1, 0x80000001, 0x6, 0xfffffd12, 0x9, 0x3, 0x8, 0x400, 0x3, 0x4, 0x3, 0x4d, 0x3, 0xffffffff, 0x5, 0x5f, 0x2, 0x10, 0x4, 0x39, 0x9, 0x6, 0x40, 0xe, 0x8, 0x0, 0x81, 0x8, 0x1, 0xfffffffb, 0x8, 0xaf6ae34, 0x73, 0x7, 0x1d, 0x2, 0x35, 0x4, 0x8, 0x84, 0x9, 0xffff2769, 0x7, 0x8001, 0xccee, 0x8, 0xa, 0x4, 0x4, 0x9, 0x3, 0x4, 0x2, 0x6, 0x3ff, 0x5, 0x80000001, 0x0, 0x3ff, 0x8, 0x3, 0x8c, 0x3, 0xed0, 0x3, 0x8, 0x4, 0x20, 0xc22b, 0x90db, 0x9, 0x5, 0x401, 0x6, 0xffffffff, 0xe6, 0xfffffffa, 0x9, 0x200, 0xd, 0x9, 0xbb, 0x80000000, 0x1081, 0xcbf, 0x2ea7d5df, 0x8, 0x4, 0x4, 0x80000001, 0x8, 0x580, 0xffff8000, 0x8, 0x6, 0x7ff, 0x5, 0xff, 0x0, 0xeb, 0x5, 0x3ff, 0xfffffe00, 0x7, 0x678b, 0x6, 0x0, 0x100, 0x5, 0xd4b, 0x1, 0x7, 0x8, 0x7, 0x7, 0x8, 0x7f, 0x1, 0x6, 0x6, 0x1afc, 0x5, 0x6, 0x300000, 0x8261, 0x7, 0xfd3, 0x0, 0x401, 0xffffa35f, 0x4, 0x5, 0x3, 0x0, 0x80000000, 0x7ff, 0xffffffff, 0x9d39, 0x4, 0x4, 0x800, 0x4, 0x6, 0xc, 0x5, 0x9, 0xe, 0x50c4e7a, 0x8, 0xbf79, 0x38, 0x1, 0x3, 0xfffffffc, 0x6, 0x14, 0x1, 0xe7b2, 0x8312, 0xef, 0x81, 0x0, 0xa072, 0x7, 0x401, 0x4, 0x81, 0x9, 0x80000001, 0x2, 0x101, 0x2, 0x80000000, 0x8, 0x8, 0x800, 0x8, 0x6, 0x800000, 0x9b, 0x8, 0x9, 0x5, 0xc, 0x9, 0x570000, 0x9, 0x2, 0x1, 0x55, 0x80, 0x2, 0x1, 0x7, 0x6, 0x9, 0x0, 0x6, 0x8, 0x10, 0x2, 0x1, 0x2, 0x4, 0x9, 0xfffffffe, 0x4, 0x8d, 0x8, 0x4, 0x9, 0x3, 0x80000001, 0x3, 0x5, 0x2a8, 0x7, 0x5, 0x8, 0x5, 0x2c9, 0x40, 0x91, 0xf0, 0xa7, 0x6, 0x1, 0x9, 0x1, 0x80, 0x5, 0x7fff, 0x2, 0x6, 0xcf82, 0x8, 0x4, 0xb144, 0x5, 0xf, 0x3, 0x13c, 0x9, 0x5, 0x4, 0xe, 0x7, 0xcd3, 0x4, 0xff, 0x3ff, 0x5, 0x6, 0x0, 0x8, 0x7, 0x3, 0xe000, 0xea7dd3d, 0x1, 0x0, 0x2, 0xffffffa6, 0x100, 0x7019, 0xb9, 0x8000, 0x2eb, 0x6, 0x5, 0x3, 0xe8f9, 0x73d0, 0x5845, 0x2, 0x9, 0x4d8, 0x80, 0x800, 0xd, 0x2, 0xb, 0x4, 0xffffffff, 0x0, 0x8222, 0x4, 0x7fffffff, 0x4, 0x401, 0x9, 0x4, 0x1, 0x800, 0x6, 0x8, 0x2, 0x4, 0x6, 0x1e47, 0x7f, 0xfff, 0x81, 0x0, 0x7fffffff, 0x2, 0x4, 0x9, 0xfffff954, 0x2, 0x5, 0x1cea, 0x7, 0x2, 0x800, 0xfffffff2, 0x7, 0xb, 0x8, 0x200, 0xe44, 0x3, 0xc, 0xdaf6, 0x800000, 0x3, 0x4, 0x3, 0x79, 0x3ff, 0xd, 0x7ff, 0x2, 0x2, 0x3, 0xfffffffe, 0x5, 0x2, 0x7, 0x0, 0x6, 0x7, 0x0, 0x6c3, 0xffffff16, 0x9, 0x35, 0x256b, 0x0, 0xfffffffb, 0x7fffffff, 0x6, 0x401, 0xf8, 0x8, 0x9d9c, 0x1, 0x6, 0x1, 0x1, 0x1ff80, 0x7ff, 0x7, 0x6, 0x3, 0xbe, 0x628, 0x101, 0x5, 0x3, 0x8, 0x9, 0x80000000, 0x200, 0x2, 0x1105, 0x6e1, 0x3, 0x80000001, 0x3, 0x7fffffff, 0x9, 0x0, 0x3, 0x800, 0x1000, 0xce4, 0xdb8, 0x7, 0x5, 0x1, 0x1, 0x7, 0x100, 0x4, 0x2, 0x2, 0x3ff, 0x7, 0x16c, 0x400, 0x200, 0x101, 0x8, 0x2, 0x4, 0xa6, 0x8000, 0x9, 0x1ff, 0x2, 0x0, 0x0, 0x4, 0x3, 0x0, 0x3, 0xffffef27, 0x2870d275, 0x3, 0x4, 0x7, 0x1, 0xfdd0, 0x9, 0x7, 0x3, 0x717, 0x1, 0x1, 0x3c97, 0x5d, 0x3, 0x10000, 0x3, 0x0, 0x7, 0x6, 0x3, 0xffffffff, 0x6, 0x6, 0x25, 0x6, 0x200, 0xfff, 0x17ef, 0xac74, 0x8, 0x101, 0x0, 0x8, 0x1, 0xfffeffff, 0x9, 0xffff7fff, 0x5, 0x80, 0x6, 0x1, 0x7fff, 0x4, 0x0, 0x5, 0x4, 0xfffff137, 0xfffffffb, 0x1, 0x58e, 0xa, 0x1, 0xab8, 0xff, 0xc1, 0xa323, 0x1, 0x400, 0x4, 0x59960000, 0x8, 0xb, 0x6, 0x0, 0x1c000, 0x6, 0x81, 0x4, 0x9, 0x8, 0x0, 0xd67c, 0x0, 0x7fffffff, 0x6, 0x9, 0x4a, 0x6, 0x7, 0x10001, 0x19fff987, 0x8, 0xa0, 0x4ca, 0x9, 0xab, 0x5, 0x4, 0x7, 0x5, 0x5, 0x5, 0x8, 0x4, 0x7fffffff, 0x3, 0xb2, 0x40000, 0x1, 0xfff, 0x2, 0x8, 0x2, 0x5, 0x8, 0xa, 0x3, 0x5eb, 0x3, 0x2, 0x10001, 0x0, 0x7, 0xc, 0xff, 0x5, 0x44d, 0x5, 0x9, 0x400, 0x42, 0x9, 0xffff, 0xe, 0x4, 0xf3, 0x13, 0x5, 0xe7c, 0x5, 0x5, 0x9, 0x0, 0x0, 0x1, 0xf0, 0x525, 0x7, 0x52f0, 0x200, 0xf, 0xf7d7, 0x6, 0x7, 0x8, 0xe622, 0x2, 0x2, 0x60, 0x1, 0x255, 0xfffffffa, 0x7, 0x81, 0x10000, 0x101, 0x1000, 0x5, 0x4, 0xf05, 0x6a4, 0x9, 0x80000000, 0x617, 0x6, 0x6, 0x101, 0x2, 0x7c, 0x8, 0x9, 0x4, 0x3ff, 0x4, 0x3, 0x6, 0x8, 0x3ff, 0x9, 0x1, 0x3, 0x80, 0x4, 0x8000, 0x8, 0x6, 0x7, 0x9, 0x8001, 0x8, 0x6, 0x7, 0x9, 0xe, 0x685, 0x109, 0xfffffffa, 0x0, 0x9, 0x400, 0x5, 0x1, 0x0, 0x3d, 0x80000001, 0x3, 0x6, 0x9, 0x1, 0x3, 0x8, 0x4e33, 0x1, 0x6, 0x5b6, 0x2, 0xfffffffc, 0x10001, 0x6, 0x6, 0x7, 0x6, 0x8000, 0x1, 0x6, 0x9, 0xf, 0xc, 0x9, 0x7, 0xfffffffd, 0x2, 0x3, 0x400, 0x3, 0x100, 0x9, 0x8, 0x3, 0x81, 0x2, 0x3, 0x2, 0x3, 0xffff, 0x3, 0x5, 0x0, 0xfffffbff, 0x4, 0x9, 0x1, 0x6, 0x80000001, 0xfff, 0x4, 0x401, 0x6, 0x8000, 0x3a9, 0x2, 0x8000, 0x9, 0x800, 0xd9, 0x5, 0x4, 0x13a7, 0xd, 0x81, 0x0, 0x8d, 0x80000001, 0x6, 0x9, 0x9, 0x96, 0xff, 0x4, 0xffffffff, 0x80000000, 0x5, 0x2, 0x2, 0x2, 0x2, 0xfff, 0x40, 0x1, 0x1, 0x80000000, 0x6, 0x6c, 0x8, 0x1000, 0x0, 0xef90, 0x3e6, 0x279, 0x4, 0x9, 0x4, 0x1, 0x80000001, 0x10001, 0x101, 0x4a, 0x21fd, 0x6, 0x4, 0x4, 0xe, 0x6, 0x0, 0x9, 0x52b1, 0x7, 0x2, 0x6, 0x8, 0xfffffffd, 0x6, 0x924, 0x0, 0x3, 0x8, 0x9, 0x4, 0xfffff894, 0x4, 0x200, 0x0, 0x1, 0x2, 0x11, 0x7ff, 0x1, 0x2, 0x4, 0x9, 0xef5, 0xf4, 0x6, 0x1, 0x8, 0x55c, 0x9, 0x481d, 0x2, 0x651, 0x2, 0x10000, 0x7, 0xffff, 0x6, 0xfffffffb, 0x4, 0x61b3, 0x10001, 0x8, 0x7f, 0x6, 0x401, 0x1, 0x80000000, 0x9, 0x3, 0x4, 0x5, 0x8001, 0x8, 0x2, 0x7fff, 0x4, 0xfd, 0xc32, 0x94, 0x200000, 0x3, 0xcbc, 0x7, 0x8, 0x5, 0x3, 0x8001, 0x8, 0x4, 0x101, 0x9, 0x4, 0xfffffffa, 0x80000001, 0xfffffffe, 0x8, 0x6, 0x6, 0x1, 0x0, 0xf, 0x2, 0x4, 0x7, 0x8, 0x10, 0xa, 0x81, 0x5, 0x2, 0x1d0, 0x9, 0x5, 0x7fff, 0xfffffffe, 0x80000000, 0xfffffe01, 0x6, 0x18f, 0x7, 0x6, 0x7, 0x0, 0xffff, 0x3, 0xfffffff8, 0x81, 0x5, 0x2, 0x1, 0x3, 0xe2, 0x6, 0x4, 0x3ff, 0xfffff800, 0x8, 0xf63, 0xfffffffb, 0x996e, 0xffff, 0xffffffff, 0x9400, 0x401, 0xcb2, 0xecb0, 0x5, 0x8, 0x8, 0x0, 0x7, 0x6, 0x1, 0x3, 0x6, 0x5, 0xcb0, 0x7ff, 0x992, 0x8, 0x6, 0x30000, 0xe, 0x3, 0x80000001, 0x8000, 0x2, 0x9, 0x3d, 0x10001, 0x0, 0xe, 0x400, 0x9e9f, 0x7, 0xa, 0x1, 0x3, 0x2, 0x2, 0x3, 0x13b, 0x80, 0xfffffff9, 0xbf, 0x9, 0x7fff, 0x3, 0x3, 0xa8b, 0xd5, 0x800, 0x9, 0x2, 0x9, 0x10000, 0x2, 0x4, 0x98, 0x50, 0x3, 0x2, 0x4, 0x5, 0x12000000, 0x5, 0x7, 0x3a2, 0x4, 0x5, 0x3, 0xc363, 0x9, 0x401, 0x10000, 0xe1de, 0x7, 0xd41d, 0x4, 0x3, 0xfffffffb, 0x4, 0x5, 0x20, 0xffffffff, 0x3, 0x0, 0xf, 0x101, 0x7, 0x6, 0x7f, 0x0, 0x2, 0x2, 0xffff, 0x0, 0x7fffffff, 0x1, 0x10001, 0x0, 0x0, 0x2, 0xb38d, 0xc, 0x6, 0x1, 0x9, 0x80000000, 0x51, 0x2, 0x800, 0x8, 0x57, 0x1, 0x6, 0x3, 0x4278, 0x80000000, 0x200000, 0x2, 0x1, 0x9, 0x9, 0x9, 0x401, 0x800, 0x0, 0x6, 0xcb3, 0x2, 0x6, 0xb5b3, 0x6, 0x5, 0x5, 0x2, 0x2, 0xfff, 0x7, 0x4, 0x7, 0x10, 0x10001, 0x3, 0x0, 0x4, 0x4, 0x5, 0x6, 0x9, 0x8000, 0x0, 0x6, 0x614174ef, 0x1, 0x2, 0x5ac, 0x0, 0x8, 0x8, 0x10001, 0x7ff, 0x5000, 0x3, 0x2, 0x1, 0x0, 0x49, 0x2, 0x7fffffff, 0x7, 0x3ff, 0x101, 0x7fffffff, 0x5, 0x9, 0x6, 0x0, 0xf2e, 0xd, 0x10000, 0xfffffff8, 0x1, 0xf, 0xef2, 0xffff, 0x7, 0xfffffff9, 0x2, 0x7, 0x3, 0x2, 0x9, 0x1, 0x5, 0x9, 0x1, 0x400, 0x2, 0x3, 0x8, 0x10001, 0x811, 0x200, 0x3, 0x8, 0xa44, 0x3, 0x7, 0xffff8e20, 0x0, 0x2, 0x3, 0x4, 0x8, 0x3, 0x5, 0x200, 0x4bdbcb64, 0x4, 0x1, 0xff000000, 0x2, 0xfbd, 0x1, 0x8, 0x0, 0x8d8e, 0x6, 0x3ff, 0x3, 0x6, 0x2, 0x8, 0x3, 0x4, 0x82, 0xff, 0x8, 0x800000, 0xa03, 0x7, 0x1, 0x3800000, 0x4, 0x2, 0x3, 0x8ac0000, 0xc92, 0x2, 0x7, 0x5, 0x4, 0x2, 0x8, 0x3, 0x92, 0x100, 0x7, 0x7, 0xceb0, 0x6, 0x3, 0x10000, 0x80000000, 0x3, 0x8, 0x8, 0xb550, 0x10001, 0x7fffffff, 0x4, 0x8, 0xfffffff8, 0x0, 0x2, 0x7, 0x2, 0xffffff7f, 0x5, 0xa5, 0x2b, 0x200, 0xea9, 0xc7, 0x10, 0xdb, 0xf8, 0x2, 0x0, 0x9, 0x3, 0x9, 0x2, 0x3, 0x2, 0x1, 0x2, 0xfffffffe, 0x3, 0x80, 0x2, 0x7, 0xdd86, 0x5, 0x1, 0x9, 0x1, 0xb55, 0xfff, 0x2, 0x1, 0xffff0001, 0x8, 0x2, 0x80000000, 0x7, 0x6, 0xb, 0x7c7268ec, 0x3ff, 0x3e, 0x4, 0x5, 0x16b800, 0x1, 0x7, 0x0, 0x8, 0x100, 0x9a5, 0x4, 0x10, 0x8000, 0x3, 0x8, 0x6, 0x3ff, 0x7ff, 0x800, 0x3, 0x79, 0x9, 0x7ff, 0xff, 0x81, 0x8, 0x0, 0x5, 0xa7c, 0x4, 0x9, 0x10000, 0x401, 0x9, 0x6, 0x8, 0x8000, 0x60, 0x89d3, 0x5, 0x9, 0x5, 0x1, 0x600d, 0xba0, 0x3, 0x21d5b03f, 0x20, 0x7f, 0x97ba6fc, 0x80000000, 0xf25, 0x3, 0x9000000, 0x5, 0x6, 0x6, 0x1, 0x9, 0xffff, 0x7b1a, 0x0, 0xfffffbbf, 0x2, 0x2, 0x6, 0x7fff, 0xd, 0x1000, 0x0, 0x2, 0x8000, 0x2f, 0x7fffffff, 0x7, 0x0, 0x7, 0x1, 0x3, 0x545, 0x5, 0x6, 0x9, 0x0, 0xa9, 0x8001, 0x0, 0x8001, 0x1, 0x8, 0x9, 0x7, 0x1000, 0x6, 0x10001, 0x1, 0x5bef, 0x1, 0x3, 0x7ff, 0xffffffff, 0x9, 0x3, 0x4, 0x8, 0x9, 0x8000, 0xb, 0xd, 0xfffffffb, 0x3, 0x80000000, 0x1000, 0x2, 0x3, 0x90, 0x1e, 0x5988, 0xffff7fff, 0x4, 0xfffffff7, 0x40, 0x6, 0x4, 0x0, 0xff, 0x538d, 0x6, 0x81, 0xfffffff8, 0x1, 0x5a3f, 0x400, 0x2a, 0xfff, 0x1, 0x9, 0x0, 0x7fff, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x2, 0x9353, 0x8c, 0x6, 0x0, 0xc0000, 0x6, 0xfffffff4, 0x0, 0x1, 0x188f, 0x1, 0x6, 0x1ff, 0xfffffbf7, 0x40, 0xff, 0x1, 0xe, 0xffffffff, 0xf, 0x8, 0x40, 0x3, 0x7fff, 0x80000000, 0xb, 0xe, 0x3, 0xfffffffb, 0x99, 0x8, 0x4, 0x1, 0x7, 0x3, 0x0, 0x8e3, 0x2, 0x5, 0x7fffffff, 0x80000000, 0x3, 0xffffffff, 0x2, 0x0, 0xb10, 0x400, 0xfffff801, 0x4, 0x6, 0xffff, 0x4, 0x9, 0x1, 0xcc7a, 0x8, 0xc176, 0x1, 0x7f, 0xffffff6c, 0x9, 0x1, 0x1000, 0x3b2, 0x3, 0x200, 0x400, 0x80000000, 0x46, 0x0, 0x0, 0xe, 0x80, 0x9, 0x0, 0x3, 0xfff, 0xfffff800, 0x6, 0x81, 0x2, 0x40, 0xa, 0x4, 0x4, 0xea, 0x2, 0x0, 0x65, 0x0, 0x1, 0x1, 0x6, 0x1, 0xffffffff, 0x8, 0xd4, 0xffffffff, 0x61f528b4, 0x2, 0x1, 0x8, 0x10, 0x7, 0x4, 0x9, 0x7, 0xb89, 0x9, 0x8, 0x8, 0x5, 0x81, 0x0, 0x2, 0x4, 0x401, 0x5, 0x8, 0xe, 0x7, 0x0, 0x1ff, 0x3, 0x5, 0x7f, 0x6, 0x3, 0x0, 0xbde, 0x7, 0x4, 0x200, 0x5fbd, 0x7, 0x10000, 0x7ee6, 0x3, 0x7, 0x2, 0x7, 0x5, 0x1000, 0x7, 0x80000001, 0x7fff, 0x8, 0x7, 0x3, 0xd, 0x7, 0x680bd84, 0x58d9e0cf, 0x7, 0x7fffffff, 0x80, 0x7, 0x10001, 0x441510c6, 0x1, 0x7fff, 0x6, 0x9, 0x4, 0x0, 0x0, 0x4, 0x0, 0xfffffff7, 0xfffffdab, 0x28a, 0x0, 0x5, 0x80000, 0x6, 0x0, 0x5, 0x0, 0x8, 0x8, 0x7d, 0x5, 0x8, 0x1, 0x9, 0x9, 0x4, 0x4, 0x7, 0x7, 0x5, 0x0, 0xfff, 0x10000, 0x9, 0xff, 0x4, 0x9, 0x1000, 0xffff2e3b, 0x0, 0x3, 0x8, 0x20, 0x8, 0x4, 0x2, 0xa, 0x8, 0x1, 0xa, 0xc, 0x2, 0x3, 0x4, 0x9, 0x7, 0x7, 0x1, 0x0, 0x0, 0x40, 0x4, 0x1000, 0x0, 0x6, 0x8, 0x9, 0x10001, 0x76cf, 0x16, 0x4, 0x0, 0xffffff80, 0xfffffffe, 0xd, 0x7, 0x5, 0x2, 0x100, 0x7, 0x4, 0x3, 0xff, 0x90, 0x4, 0xe, 0x3, 0x5, 0x10, 0x2, 0x6, 0x10000, 0x2, 0x9, 0x3, 0x10000, 0x8, 0xfffff801, 0x0, 0x2, 0x5, 0x2, 0x3, 0x10, 0xe, 0x3a, 0x66, 0xfffffff9, 0x8, 0x6, 0x1, 0x4, 0x2, 0x4, 0x3, 0x6, 0x9, 0x7, 0x1, 0x9, 0x4, 0x0, 0x3, 0x8f4, 0x0, 0x100, 0x80000001, 0x38156409, 0x1, 0x6, 0x10000, 0x8, 0x6, 0xe6, 0xa384, 0x6, 0x7, 0x8, 0x8, 0x10001, 0x3, 0x4, 0x584a, 0x1, 0x100, 0xffffffff, 0x0, 0x6, 0x0, 0xfffffffb, 0x33a8, 0xff, 0x2706, 0xfffffffd, 0x8, 0xd, 0xd, 0x7d80, 0x5, 0x80000000, 0xfff, 0x7fff, 0x4, 0x8, 0x1ff, 0xfffff7ed, 0x80000000, 0x7, 0x1600, 0x7ff, 0x5, 0x99, 0x4, 0x9, 0x5, 0x7fff, 0x2fe5, 0xfba, 0x7, 0x1ff, 0x7, 0x5, 0x2, 0x5, 0x39ed, 0x3, 0x7, 0x7ff, 0x8, 0x193, 0xfffffff8, 0x4, 0xb3c, 0x9, 0x8ae7, 0xcd, 0x6, 0x6, 0x400, 0x0, 0x1000, 0x5, 0x2, 0xc4ee, 0x80, 0xe4e, 0x9, 0x6df8, 0x7fff, 0x0, 0xe, 0x1, 0x0, 0x9, 0xd02, 0xd0, 0x40, 0xdda2, 0x101, 0xd, 0xfffffff9, 0x8, 0x6, 0xf0a4, 0x8, 0x9d, 0x7, 0x1, 0x5225, 0x8001, 0x7fff, 0xfffffffe, 0x80000001, 0x3, 0x4, 0xffff, 0x1, 0x7, 0xab35, 0x3, 0x6, 0x7, 0xf0, 0x8, 0x7, 0xffff, 0x6ca9, 0x9, 0x0, 0x2, 0x200, 0x7f, 0x8, 0xfffffff7, 0xa, 0x100, 0x4, 0x7, 0x1, 0x400, 0x9, 0x68, 0x7, 0xb, 0xa, 0x2, 0x0, 0x200, 0x2, 0x2, 0x774e, 0xb85, 0x8eec, 0x63b, 0x4, 0xeaf2, 0x4, 0xfff, 0x200, 0x0, 0x10001, 0x9, 0x5, 0xffffffff, 0x4, 0x5, 0x5, 0x3, 0x8a9, 0x9, 0x6e6, 0x9, 0x7, 0x7, 0x8, 0x3ff, 0x7, 0x100, 0x2, 0xdf7f, 0xc7ff, 0x9, 0x2, 0x6, 0xb, 0x13d1, 0x8, 0x9, 0x2ade, 0xc, 0x36c8, 0x9, 0x9, 0x3, 0x81, 0x7f, 0x7fffffff, 0xcdb, 0x1, 0x0, 0x8, 0x4, 0x1, 0x9b3a, 0xe, 0x8, 0x4392, 0x100, 0x9, 0xa, 0x1, 0x2, 0xff, 0x7, 0x999, 0x2e46, 0x48000000, 0x46, 0xffffff7f, 0x3, 0x7, 0x100, 0x800, 0x4, 0x3, 0x81, 0x3, 0x1800000, 0xffff, 0xfff, 0x7, 0x7, 0xfffffffb, 0x89, 0x81, 0x7, 0x80000001, 0xa, 0x0, 0x6, 0xff, 0xfffffbff, 0x425d, 0x8, 0x0, 0x8, 0x6, 0x81, 0xe, 0x3, 0x7, 0x8, 0x9, 0x6, 0x7, 0x6, 0xd21f, 0x8, 0xf325d252, 0x9, 0x10001, 0x0, 0x6, 0x64, 0x81, 0x2, 0x80000000, 0x5, 0x5a2, 0x2875, 0xb4000000, 0x5, 0x101, 0xf, 0x401, 0x2, 0x0, 0x0, 0x7ad1, 0x1, 0xd279, 0x8, 0xffffffd0, 0x3, 0x6, 0x1, 0xffffffff, 0x5, 0xf, 0x401, 0x6c, 0x23, 0x87d5, 0x6, 0x6, 0x1488, 0x5, 0x4, 0x3, 0x84, 0xfffffeff, 0x7, 0x4, 0x6, 0x81, 0x33, 0x2, 0x1, 0x4, 0xffffffff, 0x2, 0x8, 0x8, 0x1010000, 0x9, 0xff, 0x9, 0x9, 0x1, 0x4, 0x7, 0x4, 0x5, 0x5, 0xa0, 0x6, 0x3, 0xf, 0x100, 0x1, 0x8, 0x2, 0x2, 0xd, 0xfff, 0x2, 0x4, 0x80000001, 0x8, 0x5, 0x33, 0x10001, 0xd, 0x1000000, 0x1400, 0x6, 0x8, 0x95, 0x3, 0x4, 0x5aa, 0x0, 0x8, 0x0, 0x980, 0x8, 0x2, 0x200, 0x54d2c0a4, 0xfffffff7, 0x7fffffff, 0x1, 0x8, 0x101, 0x8, 0xd, 0x3, 0x3, 0x5, 0xdf, 0x1, 0x1, 0x4, 0x9, 0x81, 0xc, 0x3, 0x9, 0xba, 0x6, 0x0, 0x100, 0x1, 0xe2, 0x8cd, 0x3, 0x0, 0x8, 0x800, 0x5, 0x5, 0xfffffffe, 0xe, 0x8, 0x0, 0x10000, 0x7, 0x7fffffff, 0x5, 0xffffff48, 0x1, 0x5, 0x5, 0x3ff, 0x8, 0x8, 0x9, 0x0, 0x4, 0x898, 0x7, 0x0, 0x9, 0x7f, 0x779, 0x8000, 0xafe, 0x1c0, 0x4, 0x10, 0x3, 0x4, 0x5, 0xfff, 0x20, 0x17d3, 0x7, 0x724a, 0x4, 0x3, 0xe39, 0x3c9, 0x9, 0x6, 0x7ff, 0x10001, 0x80000000, 0x3cef, 0x7, 0x3, 0x9, 0x1d, 0xffffffff, 0x0, 0x77a, 0x9, 0x7ff, 0x6, 0x9142, 0x5, 0xffffc521, 0x3, 0x390, 0xd, 0x3de9, 0x80, 0x0, 0x4, 0xfffffffc, 0xffffff4f, 0x36, 0x1000, 0x3, 0x7fff, 0x3, 0x200, 0x8, 0x4, 0x6, 0x1ff, 0x0, 0x1, 0x3ff, 0x1, 0x2a33, 0x9, 0x7, 0x40, 0x6, 0x2, 0x100, 0x1ff, 0xc, 0x1, 0x7, 0x4, 0x571, 0x8, 0x0, 0x10001, 0x1, 0x6, 0x6, 0x72, 0x1, 0x9, 0x1, 0x6, 0x100, 0x7, 0x10000, 0x9ab, 0x10, 0x7fffffff, 0x4, 0x81, 0xf, 0x9, 0x8, 0x8, 0xc8ca, 0x8, 0x3, 0xe, 0x9, 0x5, 0x401, 0xf4a2, 0xc8e7, 0x1ff, 0xffffe1a2, 0x401, 0x6, 0x0, 0x4, 0x2, 0x3267, 0x3, 0xb1, 0x1, 0x200, 0x8cba, 0x7, 0x5, 0x2, 0x1, 0x7, 0x0, 0x1, 0xe1c, 0x8615, 0x7, 0xd, 0x7, 0x0, 0x3, 0x9, 0x9, 0x80000001, 0x9, 0x400, 0x3, 0xfffffffd, 0x3, 0x2, 0xd, 0x8, 0x50, 0x1, 0x2367d1fc, 0xe2c, 0xb, 0x80000000, 0x2, 0x1000, 0xed7, 0xa2, 0x9a7, 0x480000, 0x100, 0x2, 0x3, 0x2f1, 0x0, 0x6, 0x3, 0x70, 0x3, 0x88f, 0x101, 0x3, 0x310, 0x10000, 0x4, 0x7fffffff, 0x6, 0x3, 0xbf, 0x3, 0x4, 0x0, 0x6, 0xfffffffc, 0x7, 0x200, 0x2, 0x7, 0x7fff, 0xa8ba, 0x6, 0xff, 0x1e, 0x5, 0x1000, 0x9, 0x3, 0x5, 0x1, 0x7, 0x2, 0x2, 0x3, 0x0, 0x400, 0x3ff, 0x9, 0x0, 0xcc0, 0x72b, 0x1000, 0x4, 0x6d83, 0xa, 0x0, 0xfffffff8, 0x2, 0xb27, 0x4, 0x40, 0x8, 0x6, 0xf, 0x5, 0x9, 0x9, 0x4, 0x2, 0xfffffffc, 0xb, 0x3, 0x7, 0xbe, 0x2, 0x89, 0x3, 0xcdf, 0xe9e, 0x4, 0x8, 0x2, 0x2, 0x1, 0x3, 0x3, 0x5, 0x9, 0x2, 0x8eea, 0x10000, 0x7, 0x7fffffff, 0x0, 0xefe3, 0xfff, 0x6, 0x8d, 0x9, 0x2d0, 0xb8f, 0x3, 0x81, 0x2, 0x0, 0x401, 0x7, 0x6, 0x5, 0x5, 0x5, 0xffff, 0x9, 0x3, 0x0, 0x5, 0xe, 0x6c, 0x3, 0xb, 0x515, 0x0, 0xfffffffc, 0x9, 0x9, 0x3, 0x5, 0xffffff1a, 0x2fe29731, 0x2, 0x0, 0x2, 0x40, 0x2, 0x2, 0x9e, 0x7917, 0xcc7, 0x81, 0x754, 0x3, 0x7, 0x5, 0x10000, 0x5, 0x1, 0x6, 0x3, 0x7, 0xfff, 0x3, 0xe68, 0x1, 0x200, 0xa, 0xf, 0xa08, 0x1ff, 0x2, 0x3, 0x3, 0x8, 0x1000, 0x400, 0x7, 0x80000000, 0x397f381c, 0x8, 0xb, 0x8df, 0x9, 0x7f, 0x2, 0x5, 0x70c, 0x4000, 0xf2, 0x7, 0x5947, 0x9, 0x80000000, 0x2f70000, 0x975, 0x2, 0xcfc, 0x81, 0x8, 0x5, 0x80000001, 0x5, 0x17f, 0xffffffff, 0x8, 0x3, 0x101, 0x800, 0x16d0, 0x10001, 0x2, 0x4, 0x0, 0x101, 0x200, 0x0, 0x6, 0x77b312ab, 0x1, 0xffffff74, 0x481, 0x2000000, 0x10000, 0x3, 0x3, 0x7, 0x6, 0x0, 0x52c, 0x6044, 0xffffffff, 0x200, 0x2, 0xffff, 0x7, 0x10000, 0xc25, 0x4, 0x1, 0xfffffffe, 0x4, 0xff, 0x1800000, 0x7, 0x8, 0x1, 0x8, 0xe, 0x7, 0x7fffffff, 0x4, 0xfffffff2, 0x6, 0x800, 0x1, 0x4d0, 0xb, 0x3, 0x7, 0x1, 0xffffff5f, 0x7ff, 0x4, 0x1ff, 0x9, 0xd6e, 0x0, 0x0, 0xffffffff, 0x1000, 0x6, 0xfffffffd, 0x5, 0x80000001, 0x63cb0000, 0xfffffffa, 0x9, 0x3, 0x6c25a522, 0xf, 0x1ff, 0x3, 0x3, 0x8, 0x0, 0xb7f8, 0x8, 0x7fff, 0xfffffff3, 0x1, 0xe7, 0x0, 0x7, 0x7, 0x3, 0x9, 0xffff, 0x4, 0x9, 0x1, 0xe594, 0xc, 0x1281, 0x3ff, 0x0, 0x0, 0x1, 0x0, 0xfff, 0x80000001, 0x7, 0x8, 0x2, 0xfff, 0x10001, 0x2, 0xa, 0x1, 0x5, 0x6, 0xffffffff, 0x6, 0x8, 0x255, 0x3, 0x0, 0x9, 0x0, 0x8001, 0x2a, 0x2, 0x4, 0xffffffff, 0x401, 0x80000001, 0x9, 0x5, 0x8, 0x7, 0x401, 0x0, 0x1ff, 0x6ba4, 0x10001, 0x3, 0x5234, 0x9, 0x3198, 0x9, 0xd, 0x2, 0x8f2, 0xa95, 0x5, 0x100, 0x9, 0x8, 0x1000, 0xfcc2, 0x9f, 0x0, 0x0, 0x3, 0x6, 0x2, 0x1, 0xae, 0x2, 0x32, 0x8b90, 0xff, 0x1, 0x1, 0x1000, 0x9, 0x0, 0x5, 0x8e1, 0xffffffff, 0x1, 0x7, 0xffff, 0xffffffff, 0x66, 0x4, 0x63, 0xfffffff7, 0x10, 0x4, 0xffffffff, 0x10, 0x9, 0x8a0b, 0x0, 0x100, 0x5, 0x2, 0x7, 0x3, 0x9, 0xe06e, 0x8, 0x9, 0x1, 0x4, 0x9, 0x8000, 0xe8, 0x4, 0x3, 0x8175, 0x3ff, 0x8, 0x7, 0x200, 0x5, 0x5, 0x385f4f3f, 0x3, 0x8, 0x80000001, 0x4, 0x0, 0x980, 0x0, 0x6, 0x8001, 0x101, 0x6, 0x2, 0x7, 0x6, 0x7, 0x6, 0x8, 0x0, 0x5, 0x7, 0x806, 0x40, 0x7fffffff, 0xd8, 0x6, 0x80000001, 0x7, 0x68, 0x9, 0x1, 0x6, 0x10001, 0x5, 0x7, 0x3, 0x2, 0x5, 0xb67, 0x46, 0x6c, 0x3d64, 0x9, 0x9, 0x7, 0x80000001, 0x2, 0x400, 0x272, 0x3fa02ad7, 0x9, 0x3, 0x8, 0x7, 0xfffffff4, 0x4, 0x4, 0x10, 0x3, 0x6, 0x10000, 0x6, 0x5, 0x4, 0x1d, 0x8, 0x4, 0x9, 0x2, 0x7, 0x9, 0xf7, 0x5, 0x8, 0xf, 0x39f2, 0x6, 0xfffffffa, 0x9, 0x0, 0xd5c2, 0x7, 0x7, 0x3bb1a90b, 0x2, 0x2, 0x3c96, 0x7f, 0x2, 0x1, 0x7, 0x8, 0xa, 0x0, 0x8, 0x7fff, 0x30e, 0x99, 0x4, 0x2, 0x5, 0x0, 0x9, 0x1, 0xe, 0x2ad30b45, 0xa453, 0x5, 0x401, 0x6, 0x9, 0x7, 0x0, 0x6, 0x2, 0xb8, 0x2, 0x37a, 0x9, 0x6, 0x1ff, 0x8, 0x81, 0x317a, 0x6, 0x1, 0xf647, 0x1000, 0xb, 0xc5, 0x1, 0xffffffff, 0xb0ab, 0x8, 0x5, 0x7, 0x0, 0x5, 0x100, 0x9, 0x7ff, 0x9, 0xc874cef, 0x9, 0xc, 0x10001, 0x3, 0xa6b, 0x80, 0x5, 0x5, 0x5, 0x1, 0x2, 0x1, 0x5, 0x27b18174, 0x8, 0x8001, 0x5, 0x2, 0x8001, 0x4, 0x7, 0xe, 0x5, 0xfffffff7, 0x1, 0x6000, 0x81, 0xc406, 0x29b57191, 0xfffffffe, 0x5, 0x9, 0x9, 0x953d, 0x6, 0x9, 0x5, 0x6, 0x6, 0x2e, 0x800, 0x0, 0xe, 0x7fffffff, 0xa6, 0x8001, 0x9, 0x22c, 0x78, 0x80, 0x9, 0x6, 0x9, 0x6, 0x4752, 0x2, 0x0, 0x0, 0xa, 0xd, 0x2, 0x2, 0x3, 0x6, 0xc, 0x3, 0x2, 0x4, 0x3, 0x2, 0x9, 0x2, 0x921, 0x0, 0x1, 0x159, 0xd, 0x9, 0xda30, 0x0, 0x9, 0x81, 0xc, 0x1, 0xc, 0x0, 0x3, 0x2, 0x8, 0x6eb5, 0x544, 0x8, 0x5, 0x4, 0xfffff000, 0x96, 0x2, 0x80000000, 0x73, 0x5, 0x2e70, 0x800, 0x7, 0x101, 0x4, 0x8, 0x5, 0x9, 0xef, 0x0, 0xa9f9, 0x8000, 0x0, 0x7fff, 0x45a, 0x7fffffff, 0x1, 0x4d, 0x2, 0xd, 0x822, 0x8001, 0x0, 0x1, 0x6, 0x60000000, 0x7, 0x8, 0x7, 0x3, 0x169, 0xfff, 0xa3, 0x3, 0xffffffff, 0xffffff8c, 0x7, 0xfa, 0x9, 0x3, 0x2, 0x7, 0x9, 0x320, 0xbb, 0x2, 0xfd31, 0xffffffff, 0xc, 0x5, 0x4, 0x2, 0xd, 0x9, 0x4, 0x1, 0xf5, 0x8, 0x0, 0x2, 0xfffffffb, 0x8, 0x7, 0xfffffffe, 0xd25, 0x3, 0xa7, 0xa2b0, 0x4, 0xefb5, 0xf, 0x9, 0x1, 0x0, 0xffffffff, 0xffff8001, 0x7, 0xf95, 0x5, 0x2, 0x4, 0xffffffa1, 0xffffffdc, 0x3, 0x6, 0x1, 0x100, 0x6, 0x3, 0xffffff20, 0x1, 0x3, 0x7, 0x8, 0x0, 0x0, 0x4, 0x9, 0x1, 0x6, 0x3, 0xfffffffb, 0x9, 0x76000, 0xc, 0x2, 0x0, 0x101, 0x5, 0x3ff, 0x9, 0x5, 0xfffff001, 0x400, 0x8b75, 0x5, 0x80, 0x3, 0x9, 0x3399254, 0x28000000, 0x5, 0x7c, 0x9, 0x1, 0x9, 0x9, 0x7, 0xa, 0x8, 0x0, 0x1, 0xd16, 0x6, 0x6, 0x2, 0x6, 0x1f98, 0xddc, 0x5, 0xc87, 0xffffffff, 0x10001, 0x7ff, 0x3, 0xfffffffe, 0x6, 0xf, 0x8, 0xfffffffc, 0x56e4, 0x4, 0xfffffffb, 0x400, 0x2, 0x9, 0x3492, 0x5, 0x8000, 0x5, 0x3, 0xffff, 0x1, 0x100, 0x4, 0x3, 0x9, 0x0, 0x2, 0x4, 0x0, 0x80000001, 0xfffff02f, 0xd, 0x8, 0x6, 0xa, 0x762, 0x4641, 0x3, 0x2000000, 0x5bf4, 0x6, 0x0, 0x6, 0xda, 0x7ff, 0xae, 0xffffffd4, 0x200, 0x9, 0x3, 0x22, 0x3, 0x7, 0x2, 0x6, 0x5, 0x0, 0x9, 0x4, 0x5, 0xa, 0x5d, 0x0, 0x7fffffff, 0x3, 0x8, 0x4, 0x7, 0x8, 0x3, 0x7, 0x200, 0x9, 0x401, 0x3, 0x0, 0x8, 0xb, 0x3, 0x401, 0x3, 0xff, 0x4, 0x1, 0x1, 0xfffffc00, 0x7, 0x6, 0x2, 0x8, 0xb, 0x1, 0x3, 0x100, 0xa75, 0x2, 0xfc, 0xfff, 0x1, 0x5, 0xfff, 0x3, 0x7fff, 0x5474, 0xffe00000, 0x6, 0x80, 0x10000, 0x46e2, 0x5, 0xc60d, 0x1, 0x101, 0x1, 0xa, 0x7, 0xcf85, 0x7, 0x4, 0xf, 0x8, 0x0, 0x3, 0xd08fe40, 0x6, 0x5, 0xffffffff, 0xffffffda, 0x1, 0xff, 0x6, 0x1, 0xdf, 0x942, 0x4, 0x9, 0x3, 0x10000, 0x7f, 0x400, 0x3, 0x7fffffff, 0x100, 0x2, 0x4, 0x1, 0x958, 0x385, 0x0, 0x400, 0x6, 0x5, 0xf3, 0x6, 0x5, 0x10001, 0xfcdc, 0xa, 0xa, 0x3, 0x1, 0x3ff, 0x80000000, 0x2, 0x0, 0x3, 0x80, 0x800, 0x0, 0x2, 0x6, 0x4, 0x7, 0x0, 0x4, 0x6, 0x200, 0x6, 0x9, 0x7, 0x15, 0x2, 0x1, 0x0, 0x5, 0x9, 0x9, 0x8, 0x8, 0x3fc0, 0xc, 0x2, 0x8, 0x2, 0x5, 0x8001, 0x0, 0x0, 0x6, 0x2, 0x3, 0x81, 0x6, 0x4, 0xff, 0x0, 0xfff, 0x2, 0x5242, 0x7, 0xffff, 0xb0, 0xfdbb, 0x6, 0x1, 0x9, 0x0, 0x7, 0xd915, 0x9, 0xfff, 0x1, 0x8, 0xffffffff, 0x2, 0x1, 0x8, 0xb, 0x3, 0x7f, 0x80, 0x2, 0x3, 0x7, 0xb, 0x101, 0x80000001, 0x101, 0x100, 0x168, 0x100, 0x1, 0xf, 0x8, 0x3, 0x0, 0x0, 0x7, 0xe, 0x40000, 0x8, 0x5, 0x100, 0x4, 0x5, 0x4, 0x0, 0x2, 0x5, 0xfffffffb, 0x100, 0x4cdfaa16, 0x1, 0xffffffc0, 0x2, 0x3, 0x4, 0xa, 0x4, 0xb764, 0x5, 0xfffffffa, 0xe9, 0xd, 0x6, 0x6, 0xfffffbff, 0xff, 0x9, 0x9, 0x8, 0x7, 0x200, 0x1, 0x6, 0xf18, 0x9, 0x0, 0x10, 0x80000001, 0x3, 0x9, 0x0, 0x6, 0xfffffffc, 0x3, 0x7, 0x608, 0x1, 0x6, 0x84, 0x1, 0x800, 0x52, 0x1, 0x4, 0x4, 0x0, 0x4, 0x5, 0x3ff, 0x8, 0x8000, 0x0, 0x1, 0x8, 0x400, 0xf4fc, 0xfff, 0x3, 0x43, 0x4, 0x2, 0xdb2, 0xa, 0x3, 0xc, 0x3, 0x8001, 0xd, 0x6, 0x2, 0x4, 0x6, 0x0, 0x3, 0xe7, 0x1, 0x1c, 0x10000, 0x6, 0x6c86, 0x6, 0x8001, 0x9, 0x7fff, 0x7fffffff, 0x0, 0x3, 0x0, 0x6, 0x80000000, 0x6, 0x4, 0xfffffff8, 0x400, 0x54db, 0x7ff, 0x50a82fcb, 0x7, 0xa21b, 0x8, 0x754b8438, 0x6, 0x7, 0xa0000000, 0x8, 0x76, 0x9c40, 0x10, 0x7, 0xd262, 0x5, 0x80000001, 0x4, 0x1000, 0xfffffff8, 0x3, 0x1, 0x0, 0x7, 0x3, 0xfffffffd, 0x2, 0x5, 0x7, 0x8, 0x1, 0xfffffff8, 0x2, 0x1, 0x4, 0x1, 0xe0000000, 0x80000001, 0x3, 0x1, 0x10001, 0x5, 0x8, 0x9, 0x5, 0x9, 0x6, 0x401, 0x3ff, 0x2, 0x8, 0xfff, 0x7, 0x1, 0x3, 0x1, 0xffff8293, 0x9, 0x2, 0xe, 0x2, 0xffffffff, 0xa, 0x0, 0x7, 0x80, 0xf659, 0x7fffffff, 0x7fffffff, 0x0, 0x7, 0x3e14, 0xfffffffe, 0x8000, 0xa125, 0x81, 0x9, 0x5, 0x5, 0xef, 0x9, 0x2, 0xbd8, 0x10, 0x100, 0x3, 0x8, 0x3, 0x0, 0x8, 0x1, 0x2, 0x58, 0x4, 0x0, 0x800, 0x684, 0x7ff, 0x80, 0x9, 0x8001, 0x0, 0xae, 0x8, 0xd, 0x6, 0xffff0000, 0x0, 0x9, 0x1800000, 0x70, 0xf, 0x8, 0x0, 0x6, 0x3, 0x1000, 0x1, 0xd0577b60, 0xfffffffa, 0x52d, 0x7, 0x4, 0xfffffffe, 0x2, 0x8, 0x1, 0x7, 0x1000, 0x9, 0x4, 0x200, 0x5, 0x8, 0x8, 0x401, 0x7f, 0xfffffffa, 0x3, 0x2, 0x3, 0x1d3, 0x2, 0x56e3, 0x1b79, 0x1a100000, 0xbfdd, 0x9, 0x10, 0x92c, 0x3, 0x1, 0x1, 0x3, 0x2, 0x9, 0x6, 0xb7bd, 0x3ff, 0x8001, 0x2, 0x0, 0x7, 0x9, 0xffffdebc, 0x10000, 0x101, 0x0, 0x9, 0x9fa4, 0x0, 0xffffff58, 0x6, 0x4a, 0xfff, 0x2c8, 0x9, 0x2, 0x7139, 0x2, 0xfffffffd, 0x6, 0x1, 0x80, 0x6, 0x94, 0x4, 0x2, 0x84e, 0x401, 0x1, 0x1, 0x5, 0xfff, 0x8, 0x885, 0xa1d6, 0xc1, 0x1000, 0x5, 0x9, 0x800, 0x9, 0x5, 0x2c11, 0x6e, 0x8001, 0x613, 0x8823, 0x6, 0xb59a, 0x800000, 0x8, 0x6, 0xfffffff9, 0x5, 0xfffffffc, 0x24000, 0x2, 0x4c73, 0x6, 0xffff, 0x6, 0x1, 0x4, 0x3a3, 0x40, 0x5, 0x76418c62, 0x88, 0xf, 0x4f, 0xce37, 0x0, 0x5, 0x8ed2, 0x698, 0x8001, 0x6, 0x1, 0x57efee3a, 0xf6da, 0xa1d1, 0x5, 0x6, 0x7, 0x7fffffff, 0x8000, 0x6, 0x8, 0x0, 0x5, 0x4, 0xa4d5, 0x3, 0x0, 0x40000000, 0x8, 0x7fffffff, 0x81, 0x4, 0x1, 0x9c40, 0x3, 0x4, 0x80000000, 0x2, 0x6, 0xffffffff, 0x4af7, 0x1, 0x8, 0xed8, 0x200, 0x9, 0x9, 0x4, 0x0, 0x800, 0x4, 0x1, 0x4, 0x1, 0x5de9, 0x8, 0x7b, 0xcfc5, 0x81, 0x1, 0x0, 0x8, 0x8, 0x8001, 0x0, 0x38000, 0x10, 0xe, 0xe3, 0xee, 0x1, 0x5, 0x4, 0xd, 0xb44, 0x401, 0x2fc, 0x80000000, 0x5cd7, 0x4, 0x8000, 0xffffffff, 0x8a, 0x0, 0x4, 0x7f, 0x200, 0x50000000, 0x7ff, 0x7, 0x6, 0x0, 0x80000000, 0x852a, 0xe40, 0x6, 0x9d, 0x7fff, 0x4, 0x1, 0x8cb, 0x7, 0x0, 0x7, 0xdc6, 0xfffffffb, 0x401, 0x9, 0x6, 0x7fffffff, 0x0, 0x8, 0x4, 0x7, 0x0, 0x0, 0x6828, 0x0, 0x81, 0xcfd, 0x5, 0x3fa, 0x0, 0xf, 0x3, 0x4d1e, 0x4, 0x5, 0xff, 0x7, 0x4, 0x7f, 0x7, 0xe0000, 0x2, 0x48, 0x9, 0x21f, 0xf, 0x7e2, 0x2, 0x6, 0x0, 0x2, 0x100, 0x10000000, 0x2, 0x0, 0xfffffff8, 0x8d14, 0x0, 0x10000, 0xf4, 0x9, 0x0, 0x2, 0x3, 0x97, 0x0, 0x100, 0x80000001, 0xfffffffe, 0x2, 0x6, 0x4, 0x2, 0x28a, 0x1, 0x1, 0x8, 0xfffff968, 0x6, 0x3ff, 0x9d3479d8, 0x4, 0x4, 0x8, 0x4e9, 0x0, 0x7ff, 0x4, 0x80000001, 0x80000000, 0xfff, 0x7bc2, 0x10, 0xfbe9, 0x1, 0x5, 0x0, 0x5, 0x8, 0x2, 0x1, 0xff, 0xffffffff, 0x2, 0x64, 0x4c, 0x7, 0x8, 0x4eb4, 0x8001, 0x3, 0x45, 0x8, 0x4, 0x7f, 0x0, 0xffffffff, 0x4, 0x5, 0x3, 0x5, 0x2e5, 0x5, 0x0, 0x5, 0x8000, 0x1000, 0x3, 0x0, 0x6, 0xfff, 0x0, 0x1, 0x21, 0x0, 0x0, 0xe8f8, 0x2, 0x2, 0xb, 0x7, 0x4b93, 0x0, 0x4, 0x80000001, 0x200, 0x6, 0x1ff, 0xb, 0x9, 0x4, 0xfffffffb, 0xffff0000, 0x44e8, 0x2, 0x9, 0x6, 0x1, 0x3, 0x6, 0xaf40, 0x7f, 0x3, 0xffff, 0x4ff, 0x0, 0x8, 0x7, 0x2, 0x80, 0x7, 0x9, 0x0, 0xfffffffc, 0xe86, 0x2a, 0x5, 0x10001, 0x5, 0x2, 0xe, 0xffff8000, 0x9, 0xfffffff0, 0x7ff, 0x7, 0x0, 0x10001, 0xca1b, 0x3, 0x3, 0x8, 0x56, 0x7, 0x9, 0x0, 0x5, 0xbb5b, 0x2, 0x6, 0x401, 0x0, 0x4, 0x1, 0x2, 0xa7, 0x0, 0x6, 0x7, 0x0, 0x9, 0x15, 0x39, 0x0, 0x0, 0x2, 0x2, 0x200, 0xc, 0x15, 0xffffff00, 0x9, 0x6, 0xd7c8, 0xac, 0x9, 0x4, 0xbd4, 0x8f, 0xe, 0x5e, 0x3, 0x1c, 0x6, 0xffff, 0x159, 0x8, 0xfffffff8, 0x6, 0x81, 0x3ff, 0x953, 0x7, 0x3, 0x1, 0x1, 0x0, 0x7f, 0xfffff001, 0x4, 0x9, 0x40, 0x4, 0x3, 0x2, 0xffffffff, 0x5, 0x5, 0x5, 0x9, 0x2, 0x80000000, 0x10000, 0x1ff, 0x400, 0xb5, 0x2, 0x6a, 0x5, 0xc, 0x8000, 0x10001, 0x5, 0x9, 0x3170, 0x9, 0x5, 0x1, 0x8, 0x6, 0x2, 0xd, 0x2, 0x78, 0xffffed2c, 0x0, 0x978, 0x4, 0x8, 0x4, 0x4, 0x5, 0xbc0, 0x7, 0x7, 0x7, 0xa, 0x0, 0x9f, 0x541d, 0x1000, 0xfa, 0x7, 0x380932f5, 0xee2b, 0x8, 0x7fffffff, 0x4, 0x8, 0x1, 0x7, 0xffffffff, 0x100, 0x8, 0x69b7, 0xffffffff, 0x80, 0x3, 0x1, 0x6, 0x81, 0x8000, 0x0, 0x9, 0x7, 0x5, 0x1, 0x1, 0x1, 0x6, 0x602, 0x3, 0x3, 0x346b, 0x80000000, 0x7fff, 0x4, 0x7f, 0x100, 0x7, 0xc53, 0xf, 0x6, 0xfffffff7, 0x6, 0x1, 0x9c, 0x3, 0x40, 0x9, 0xd, 0x6, 0xd, 0x40, 0x80, 0x5, 0xa000000, 0x7, 0xfffffffb, 0x6, 0x4, 0x9, 0xfff, 0xc51d, 0x2, 0x8, 0x7, 0xd4, 0x200, 0x9, 0x5, 0xd, 0x7fffffff, 0x5, 0x0, 0x5, 0x5, 0x5, 0x0, 0x6bae, 0xfffffffb, 0x101, 0xfffffffe, 0x7, 0x0, 0xfffffff9, 0x4369, 0x401, 0x9, 0xff, 0x3, 0xfffffff8, 0x4, 0xa00, 0x9, 0x7, 0x400, 0xfffffffc, 0xcf5, 0xd2, 0xff, 0x7, 0x8, 0x0, 0x6, 0x6, 0x4c, 0x8, 0x9, 0x8, 0xffffffc0, 0xfffff95a, 0x2, 0x9, 0x0, 0x1, 0x0, 0x5, 0x80000000, 0xffffffff, 0x2, 0x4, 0xe, 0x40, 0x1000, 0x8, 0x8, 0x8, 0x1, 0x3, 0x81, 0x5, 0x9, 0x547b, 0x2, 0x7ff, 0x3ba, 0x6e2, 0x2, 0x4, 0x9, 0x2, 0x0, 0x4, 0x100, 0x0, 0xa0000, 0x56655a00, 0x8, 0x100, 0x0, 0x9, 0x10, 0x7734, 0x1000, 0x4, 0x7, 0x6945, 0x0, 0x400, 0x9, 0x6, 0x0, 0x2, 0x1, 0x3, 0x2, 0x2ef, 0xffffffff, 0x6, 0xe7, 0xd7, 0x7, 0x1, 0x6, 0x10, 0x5, 0x9, 0x1, 0xadc, 0x3, 0x4, 0x10000, 0xd1, 0x5, 0x490df1de, 0x7fffffff, 0x6, 0x2, 0xddb2, 0x4, 0x678, 0x9, 0x0, 0x1, 0xb, 0x0, 0x7fffffff, 0x8, 0x0, 0x0, 0x9c, 0x58, 0x10, 0x2a, 0x2, 0x9, 0x200000, 0x6, 0x6, 0x6, 0xffff, 0x3, 0x9, 0x34, 0x7, 0x4, 0x1, 0x0, 0x4, 0x1000, 0x9df659e, 0x8, 0x6c, 0x7, 0x2, 0x3, 0x3ff, 0xf, 0x4, 0x81, 0x153, 0x5, 0x1, 0x200, 0x7, 0x6, 0x4, 0xffff0001, 0x9, 0x7f, 0x5a7, 0x800, 0x0, 0x6, 0x6, 0x40, 0x5bb6, 0xbb, 0xffffff01, 0x8, 0x4, 0x1ff, 0x1, 0x8, 0x800, 0xffffff7f, 0x3, 0x8001, 0x9, 0x5, 0x2, 0x3, 0x4, 0x6, 0x7, 0x3, 0xffffff98, 0xe026, 0x3, 0x5, 0x7, 0xcf9, 0xe, 0x2, 0x9, 0x100, 0x8, 0x81, 0x1000, 0x1, 0xba, 0x80, 0x2, 0x3, 0x6, 0x8000, 0x10001, 0x0, 0x8, 0x8, 0x9, 0x8, 0x80, 0x7, 0x0, 0x3, 0x1, 0x200, 0x40, 0x8, 0x87, 0xffffffb7, 0xfffffffc, 0x7f, 0x3, 0x0, 0x9, 0x4, 0x400, 0x6, 0x40000000, 0x5, 0xeb6, 0xb, 0xfffffffd, 0x10, 0x81, 0x8000, 0x1ff, 0x8, 0x0, 0x2, 0x1ff, 0x2, 0x80000000, 0x1a6, 0x72a, 0x80, 0xffffffff, 0xffffffff, 0x2, 0x80000001, 0x5, 0x8, 0x5, 0x3, 0x6, 0x76d0, 0x7, 0x1, 0x5, 0x7, 0x8000, 0x1ff, 0x2889, 0x8, 0xfd5, 0x738, 0x5, 0x0, 0x10, 0x3, 0x8, 0x6, 0x3, 0x3, 0x1, 0xa7f, 0x5, 0x3, 0x4, 0xd, 0xfffffffb, 0x9, 0x3, 0x2, 0x40, 0x3, 0x6, 0x9, 0x9, 0x2, 0x5, 0x8, 0x101, 0x4a36, 0x10000, 0xd45, 0x2e969847, 0x8ae, 0x7, 0x6, 0x8, 0x6, 0x3, 0x200, 0x4, 0x8, 0xffffffff, 0x1, 0xc9a3, 0xfffffffa, 0xfffffff7, 0x0, 0x9789, 0xffffffff, 0x4, 0x28000000, 0x6, 0x0, 0x20a, 0x5, 0x9, 0x0, 0x8, 0x2, 0xffffff45, 0x0, 0x100, 0xfffeffff, 0x0, 0x4, 0x7, 0x100, 0x0, 0x8a, 0x3, 0x10000, 0x9, 0x5, 0x8, 0x5, 0x5, 0x6, 0x4, 0x3b9, 0xffff5b98, 0x101, 0x5, 0x7, 0x6, 0x4, 0xfffffffa, 0x60000, 0x8, 0x7e, 0xe, 0x2, 0x2, 0x901c, 0x4, 0x3, 0x7, 0x34db, 0x7, 0x10001, 0x7fffffff, 0x1ff, 0xfffff2b3, 0x0, 0x9, 0xfffffffb, 0x6, 0x4, 0x7, 0x2, 0x9, 0x7fff, 0x4, 0x80000, 0x1, 0x2, 0x3f, 0xd, 0x9, 0x7f, 0x3, 0x8, 0x2, 0x5, 0x6, 0x200, 0x8, 0x1, 0x200, 0x0, 0x5, 0x9, 0x21, 0x9, 0xd, 0x1, 0x3, 0x3, 0x1, 0xffffffff, 0x464, 0x9, 0xec9, 0x4, 0x2, 0x7ff, 0x8, 0x3, 0x4, 0xfffff800, 0xe5, 0x1, 0x5, 0x6, 0xa3, 0x7ff, 0x1, 0x7, 0x2, 0x7484, 0x6cd232e, 0x4, 0x6, 0x3, 0x2, 0xea1, 0x3, 0xc, 0x6, 0x2, 0x0, 0x7, 0x4, 0x4, 0x80000000, 0xb0, 0x5, 0x80000000, 0x7fffffff, 0x6, 0xfffffffc, 0x2, 0x48, 0x2, 0x0, 0x6fe, 0x4, 0xbb1d, 0x1, 0xfffffff7, 0xd, 0x6, 0x2, 0x4, 0x21e1, 0xc4, 0x4, 0x6, 0x80000001, 0x9, 0x9, 0x9, 0x20e, 0x9, 0x81bb, 0xcd7b, 0x7, 0x5, 0x7, 0x80000000, 0xa36, 0x1, 0x2, 0xff, 0xe, 0x8001, 0x6dbe2fed, 0x401, 0xfffffffb, 0x280, 0x9, 0xffffffff, 0x42, 0x2, 0x9, 0x8, 0x7ee, 0x7, 0xd, 0x4d, 0x6, 0x5, 0x6, 0x4, 0x2a25, 0x5, 0x9, 0x3, 0x9, 0x2, 0x2, 0x1, 0xe7f, 0x10000, 0x5, 0x4, 0xfffffffb, 0x80000000, 0x6, 0x7fff, 0x9, 0x0, 0xa0f, 0x7fffffff, 0x88, 0x4, 0x3, 0x4, 0x80, 0x35c, 0x7fffffff, 0x0, 0xffffff01, 0x69c4, 0x101, 0x5, 0x8001, 0x7, 0x1, 0x8, 0x200, 0x7ff, 0x81, 0x60000, 0xd5, 0x3, 0xfffffff9, 0xc, 0x6, 0x3, 0x6, 0x8, 0x6, 0x9, 0xd, 0x9fc, 0x2, 0x6, 0x39, 0x26, 0x101, 0xf, 0x3, 0x3ff, 0x4, 0x81, 0x7502, 0x116, 0x57c11786, 0x77de, 0x9, 0x10001, 0x5, 0x1, 0xa, 0x36, 0x10001, 0xd, 0x8, 0x9, 0x1000, 0x5, 0xfffffffb, 0x1ca, 0x46, 0x1ff, 0x10000, 0x9, 0x7, 0x92ed, 0xbf4d, 0xfffffffd, 0x6, 0x5, 0x0, 0x8, 0x2, 0x5, 0x4000, 0x1, 0xeca, 0x200, 0x6, 0x80, 0x6, 0xffffffff, 0x3, 0x4, 0xf9, 0x1, 0x3, 0x6, 0x0, 0x7, 0x966, 0x3, 0x7, 0x8, 0x2, 0x4, 0x401, 0x0, 0x7ff, 0x2, 0x4, 0x9, 0x800, 0x5, 0x10000, 0x4, 0x4, 0x3, 0x5, 0x2, 0x4684, 0x3, 0x3, 0x5, 0x7, 0x3, 0x5, 0xfffffffd, 0x88c, 0x8000, 0x2b84, 0x9, 0xfffffffa, 0xd1c1, 0x8, 0x1, 0x10001, 0x6, 0x7, 0x6, 0x7, 0x7fffffff, 0x4, 0x401, 0x9, 0x3, 0x2, 0x95, 0x400, 0x3, 0xfffffff1, 0x1, 0x8, 0xfffff2c3, 0x80000, 0x6f86, 0x10000, 0xfffffffc, 0x2, 0xb, 0x1, 0x30, 0xccd, 0xffffffff, 0x5de4, 0x1f484b8e, 0xffff, 0x0, 0x2, 0xffffffff, 0xba, 0x5, 0x4, 0x1, 0x81, 0x10001, 0xcb1, 0x4, 0xffffffa8, 0x9, 0x4, 0xf, 0x6, 0x1, 0x1000, 0x401, 0x95, 0x6c74cf66, 0x10001, 0x4, 0x770, 0x6, 0x63, 0x1c9, 0x800, 0xd, 0xc, 0x1ff, 0x1, 0x81, 0x200, 0x8, 0x9, 0x53ab, 0x3, 0x7, 0x800, 0x6, 0x9, 0x5e, 0x8, 0x4, 0x7, 0xc6, 0x7, 0x3, 0x8, 0x3, 0x9, 0x2, 0x100, 0x7f, 0x4, 0x9, 0x0, 0x3, 0x8000, 0x3ff, 0xff, 0xffffff81, 0x5, 0x80000000, 0x2, 0x1, 0x3, 0x1ff, 0x0, 0x65, 0x9, 0x8, 0x1, 0x917, 0x1, 0xcb6e, 0x2, 0x10, 0xffffffff, 0x6, 0x3, 0x6, 0x8ed, 0x81, 0x6, 0x0, 0xfffffffb, 0x80, 0x1, 0xfffffffb, 0x8, 0xfffffffa, 0x0, 0x6, 0x8, 0xfffff0d1, 0x0, 0x4, 0x1f7, 0xffffffff, 0x7, 0x400, 0x7, 0x2b, 0xe, 0x6, 0xa49d, 0x1, 0x3, 0xd, 0x7, 0x8, 0x6, 0x7f, 0xfffffff7, 0x2, 0xa, 0x1, 0x80000000, 0x2, 0x200, 0xc424, 0x0, 0x3, 0x4, 0x3, 0x1, 0x6e3, 0x0, 0xfb, 0xe4, 0x2, 0x100, 0x8, 0xf28, 0x9, 0x1, 0x3, 0x1, 0x251, 0x1, 0xf1, 0x5, 0x4, 0x7ff, 0x5, 0x9, 0x4, 0x0, 0x40, 0xffffffff, 0x3, 0xea, 0x0, 0x8, 0x0, 0x401, 0x8000, 0x4, 0x0, 0x2, 0x2, 0x2, 0x9, 0x0, 0xfffffff8, 0x7, 0x9, 0x9, 0xe83, 0x59b1, 0x9, 0x8, 0x101, 0x7, 0xc, 0x4, 0x1000, 0x10001, 0x1, 0x4, 0x6, 0x6, 0x8, 0x1, 0x3, 0x6, 0x4, 0x5, 0x7, 0x78a, 0x397, 0x2, 0x8, 0x2, 0x3, 0x7, 0xfffffffb, 0x10001, 0x7, 0x8, 0x8, 0x401, 0x7, 0x7, 0x3, 0x10, 0x5, 0x6, 0x1, 0x10, 0xfffffffd, 0x4, 0x6, 0x4, 0x3, 0x100, 0xbc, 0x1, 0x1, 0x3, 0xffff62d2, 0x8, 0x8, 0x4, 0x401, 0x9, 0x7, 0xb, 0x3, 0x9, 0xfffffffe, 0x5, 0x9c, 0x9, 0x2, 0xf, 0xf83, 0x1, 0xf, 0x7fff, 0x1, 0x9, 0x8, 0xffffffff, 0xc1, 0x80, 0xe, 0x5, 0x2, 0x583, 0x8, 0x401, 0x400, 0x5, 0xe2, 0x100, 0x3, 0x0, 0xa6, 0x400, 0x0, 0x10000, 0xe9ed, 0x2, 0xc484, 0xc19c, 0x8001, 0xffffffff, 0x23fd2369, 0xfffffffa, 0x2, 0xfffffff3, 0xa9, 0x3, 0x8, 0x8, 0x2, 0x9, 0x3, 0x3ff, 0x9, 0x3ff, 0x733cd3db, 0x5, 0xb45b, 0xfffffffa, 0x5, 0x8, 0x2, 0x7fff, 0x6b, 0x9, 0xf0, 0x6, 0x0, 0xb33c, 0x2, 0x3, 0xff, 0x7f, 0x6, 0x5, 0x100, 0x6, 0xfffffff3, 0x80, 0x5, 0x1, 0x10000000, 0xffffff6d, 0x3, 0x8, 0x7ff, 0xdd, 0xf, 0x40, 0x6, 0x1, 0xfffffffd, 0x1, 0x5, 0x10, 0x5a76, 0x7, 0xa, 0x7, 0xb54, 0x5, 0x9, 0x4, 0x1, 0x174, 0x81, 0x0, 0xb, 0x3, 0xcc, 0xf08, 0x3, 0x8000, 0x5fd, 0x4, 0x5, 0xdc, 0x8, 0x7, 0x0, 0x9, 0x4, 0x9, 0x2, 0x4, 0x6, 0x4411, 0x7fffffff, 0x3, 0x3, 0x9, 0x7f, 0x8, 0x7, 0xf, 0x2, 0x80000001, 0x47af568b, 0x0, 0x7ff, 0x650, 0x5, 0x3, 0x9, 0x2, 0x4, 0x4a, 0x1, 0x3f1, 0x1, 0x1, 0x7, 0x9, 0x7, 0x2, 0xb9, 0xa6e3, 0x3, 0x4, 0xf834, 0xfffffff8, 0xb, 0x6c, 0x3, 0x7, 0x3ff, 0x2abae22c, 0x2, 0x9, 0xa5, 0x8, 0x0, 0x101, 0x80010, 0x7, 0x4ef6235d, 0x5, 0x6, 0x6d1, 0x2000, 0x5, 0x3, 0x2, 0x5, 0x5, 0x2, 0x1, 0x2, 0x8, 0x2, 0x5, 0x2, 0xf159, 0xffffff00, 0x800, 0x8, 0x0, 0x7, 0xbd, 0x4, 0x7, 0x5, 0x7, 0x5, 0x7, 0xf, 0x2b3, 0x2d, 0x800, 0x0, 0xffffffff, 0x4ed, 0x1, 0xffffffff, 0xb5400000, 0xffffffff, 0x3, 0x10001, 0xa, 0x200, 0x4, 0x6, 0x4, 0x0, 0x8, 0x80000000, 0x4, 0x400, 0x5, 0x0, 0x3, 0x4, 0x2, 0xbde3, 0x400, 0x6, 0x7793, 0x7fd7c1cb, 0x8, 0x0, 0x2, 0x10000, 0x3, 0x2, 0x6, 0x3, 0x3850fe04, 0x7, 0x7, 0xffff, 0x3, 0x2, 0xeb08, 0x8, 0x4, 0x401, 0x0, 0xc0000, 0x5, 0x7, 0x1, 0x8, 0x4, 0x7, 0xfffffffa, 0x9, 0x5, 0x200, 0x8001, 0x7, 0x80, 0x5, 0x6, 0x401, 0xc, 0x7f, 0x1, 0xfff, 0xb71, 0x6, 0x7f, 0x3, 0xf, 0x5, 0x7, 0x1ff, 0x8000, 0x6, 0x8, 0x5, 0xf8000000, 0x1, 0x3, 0x8, 0x8, 0x9, 0x60000, 0xf723, 0x5, 0x6, 0x1000, 0x10000, 0x4, 0x69b, 0x3ff, 0x8, 0xfff, 0xffffff23, 0x5, 0xcd4, 0x2, 0x9, 0x1, 0x5d, 0x9, 0x80000000, 0x9, 0x2, 0x1, 0x0, 0x2, 0xe, 0x5, 0x10000, 0x5, 0x1, 0x0, 0x8, 0x9, 0x7, 0x527, 0x400, 0x6, 0xdb, 0x5, 0x5, 0x6, 0x7ff, 0xc, 0x9, 0x3, 0x6, 0x7, 0x5, 0x7f, 0x4, 0x4, 0xfc12, 0x0, 0xfffff000, 0x5, 0x8, 0x4, 0x0, 0x9d4, 0x101, 0x3b1, 0x6, 0x7, 0x100, 0x19, 0x81, 0x1, 0xe0, 0x76, 0x9, 0x8, 0x0, 0x6, 0x800, 0x8, 0xffffffff, 0x551, 0xfffffff9, 0xa, 0x0, 0x80000001, 0x10000, 0x8000, 0x1, 0xfffff800, 0x1f, 0x0, 0xfff, 0x4, 0x5, 0x9, 0x9, 0x10000, 0x7f, 0x4, 0xfff, 0xfb1, 0x7, 0x2, 0x6, 0x400, 0x401, 0xd25e, 0x0, 0x6, 0x800, 0x2, 0x1ff, 0xb, 0x80000001, 0x6, 0xfff, 0xfffffff9, 0x6, 0xa, 0xc, 0xea, 0x151, 0x8, 0x1, 0x73b, 0xffffd787, 0xd, 0x3, 0x5e9, 0x4, 0x3, 0x2, 0x0, 0x608, 0x3, 0x5, 0x7, 0xf9e6, 0xe, 0x3, 0x5, 0xfffffff9, 0x400, 0x9c34, 0x2, 0x1000, 0x3, 0xee, 0xa, 0xf, 0xffffffff, 0x20000000, 0x17, 0x1, 0x5, 0x4, 0x1, 0x1, 0x9, 0x5, 0x2, 0x3, 0x5c0, 0x6, 0x3, 0x101, 0x0, 0xd, 0x6, 0xe78, 0x3, 0x6, 0xbd, 0x8000, 0xffff, 0x3, 0x244, 0x9, 0x800, 0x9, 0x5, 0x9, 0x2, 0x6, 0x2, 0x1, 0x2, 0x835, 0x1, 0x6, 0xc, 0x8, 0x7fff, 0x40, 0x2, 0x3, 0x6, 0xc, 0x81, 0x10001, 0x9cdd, 0x8, 0x40, 0x4, 0x9, 0x800, 0x3, 0xc2, 0x7fffffff, 0xb, 0x5, 0x80000001, 0x100, 0xb, 0x0, 0x4, 0x3, 0x3, 0x4dd0, 0x5, 0xa9f0, 0x3, 0x3ff, 0xed, 0x100, 0xe1c, 0x0, 0x8, 0x7, 0x0, 0x4, 0x4, 0x6, 0x6, 0x43, 0x5, 0x4, 0xe4e, 0x1, 0x5, 0xfffffff7, 0x10, 0xf, 0xed6, 0x6, 0x3, 0x9, 0x0, 0x4, 0x7, 0xfffffff8, 0x217c, 0x7, 0x3, 0x1, 0x80, 0x7ff, 0xaf, 0x8, 0x4, 0x0, 0x0, 0x1f4b, 0x959, 0x1, 0x0, 0x8, 0x3, 0x63, 0x9, 0x7, 0x0, 0x24b9, 0x9, 0xee, 0xfffffffe, 0x8, 0x5, 0x4, 0x7, 0x1, 0x4, 0x6, 0x3, 0x0, 0x0, 0x3, 0x7, 0xcd8, 0xfff, 0x3, 0x4, 0x34000000, 0x49d, 0x9, 0x1, 0x8, 0x3, 0x5, 0x1000, 0x3, 0x5, 0xfffffff8, 0x9, 0x3, 0x3, 0xffffffff, 0x8, 0xbf79, 0xbf, 0x6, 0x9, 0x3, 0x8, 0x4a, 0xac, 0x1, 0x401, 0x10001, 0xf5, 0x40, 0x3, 0x1ff, 0xfffff801, 0x8, 0x10000, 0x2, 0x1, 0x3, 0x5, 0x76c, 0x7, 0x6, 0x79a, 0xc6, 0x14, 0x1, 0x6, 0x2, 0xfffffffd, 0x3, 0x9, 0xc31, 0x2, 0x5, 0x3, 0x3, 0x0, 0x5, 0x1, 0x5, 0x7ff, 0x3, 0xc9, 0x9, 0x7, 0x1, 0xdac, 0x2, 0x2, 0x8001, 0x80000000, 0x829, 0x5, 0x7, 0xce47, 0xffff, 0x21, 0x80, 0x7, 0x6, 0xd, 0x10, 0x20000, 0x7, 0x3, 0x3, 0x7bbe, 0x3, 0x8, 0xf89, 0x6, 0x74, 0x1, 0x7fffffff, 0xc36, 0x9, 0x80000001, 0x0, 0x7, 0x1, 0xe0, 0x40, 0x8, 0x0, 0xffffffff, 0x6, 0x5, 0x9, 0x5, 0x6, 0x1, 0x1, 0x2, 0x7e, 0x9, 0x8, 0x0, 0x0, 0x200, 0x8000, 0xa, 0xffffffdd, 0x0, 0x71f4, 0x80000001, 0x8, 0xa, 0x5, 0x800, 0x40, 0x617b, 0x7, 0x6, 0x6, 0x0, 0x7, 0x80000000, 0xc28, 0x0, 0x7, 0x9, 0x5, 0x95, 0xc00000, 0x8, 0x1, 0xc00000, 0x1, 0x4, 0x4, 0x6, 0x4, 0x5, 0x11, 0x2, 0x0, 0x8001, 0x3, 0x401, 0x4, 0x3, 0x6, 0x3ff, 0x1c0, 0x4, 0x5, 0x2, 0x7d3, 0x3, 0x1, 0xffffffc0, 0x3, 0x7, 0x7, 0x1, 0x6, 0x0, 0x80000000, 0x3, 0x200, 0x8, 0x3, 0xadb9, 0x401, 0x0, 0x48, 0x0, 0x4, 0x1, 0x2, 0x7, 0x7, 0x37, 0x80000000, 0x3, 0x4, 0x6d44, 0x1, 0x3, 0xf141, 0x3, 0xaee, 0x7, 0xfff, 0x8a8a591, 0x0, 0x1, 0x8d9, 0x6, 0x0, 0x6, 0x2000, 0x2, 0x2, 0x4, 0xcc6c, 0x8, 0x3ff, 0x5, 0x5, 0x9, 0x5, 0x9, 0xda, 0xffff1cee, 0x2, 0x6, 0x14b, 0x9f8d, 0x7, 0x7, 0x7, 0x10, 0x1, 0x7, 0x3ff, 0x0, 0x6, 0x8, 0x1, 0x8, 0x6, 0x1, 0x80000001, 0x2, 0x3, 0x7, 0x4, 0x9, 0x9, 0x7, 0x47, 0x7, 0x7, 0x6, 0x0, 0x1, 0x1, 0xfffffffc, 0x5, 0x3, 0x1ff, 0x8, 0x9, 0x7, 0x30000, 0x6, 0x4, 0x8000, 0x7fffffff, 0x2, 0x80000000, 0x16de, 0x2, 0x0, 0xe1, 0xf, 0x873d, 0xb, 0x3, 0x1, 0x5, 0x9, 0x1, 0x8, 0x2, 0x10001, 0xf1, 0x200, 0x1, 0x5, 0xfffffff9, 0x1, 0x8, 0x80000000, 0x0, 0x6, 0x2, 0x20000000, 0x8e, 0x6, 0xe3, 0x1ff, 0xe369, 0x80000001, 0x4, 0x10, 0x7ff, 0x4, 0xa73, 0x8, 0xffff, 0x6, 0x4, 0x7, 0x5, 0xffff, 0x57, 0x9, 0x4, 0x0, 0x1, 0xc, 0x9, 0x70, 0x6, 0x3, 0x7, 0x5, 0x0], 0x1, 0x4}) 7m39.519607672s ago: executing program 7 (id=1058): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000940)={{0x1, 0x9192, 0x2, 0xffff}, 'syz0\x00', 0x4f}) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x2) ioctl$UI_DEV_CREATE(r3, 0x5501) read$FUSE(r2, &(0x7f0000002300)={0x2020}, 0xfcdd) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2}}, 0x0, 0x6, 0x0, 0x1}, 0x28) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007800c00018008000140ffdfffff0500070084000000060004404e2200000c000280080001407f000001"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 7m39.18308676s ago: executing program 6 (id=1062): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000580)=""/78, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000a80)={0x1, 0x0, [{0x0, 0x1000, &(0x7f0000002600)=""/4096}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=@base={0xb, 0x7, 0x6, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r4, 0xffffffffffffffff}, &(0x7f0000000000)=0x18, &(0x7f0000000080)='%ps \x00'}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r5, &(0x7f0000000280), 0x0}, 0x20) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000), 0x0, 0x81000}) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c643c, &(0x7f0000000300)={0x0, 0x1000000}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={r7, 0x38865ee9a23a6f8a}) 7m38.972809514s ago: executing program 6 (id=1066): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c9f4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75055df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b556381768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8dc0d472672286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8455029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a82a6ef09d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b420e74c6bcdf1ed0b306141a83bf1268e954ad069257fbfaa1a7ea582badc1a7f2a5b0965f3535872d85c0bc3a233a3ea85df6a8ed76f0f803d54b7bef77d8ea71621f8a78dd17c3b58c5c7476ed6191acbb949e77f7cac81c543f7751e5e1000"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x22e, 0x22e, 0x4, [@enum={0xa, 0x4, 0x0, 0x6, 0x4, [{0xb, 0x9}, {0xc}, {0x9, 0x3}, {0xb, 0x8}]}, @datasec={0x9, 0xa, 0x0, 0xf, 0x2, [{0x5, 0xfd, 0x9}, {0x4, 0x3, 0xd}, {0x2, 0x0, 0xff}, {0x1, 0x2, 0xf}, {0x3, 0x7, 0x36e4}, {0x1, 0xf07, 0x4}, {0x2, 0xaa, 0x81}, {0x4, 0x4, 0x3}, {0x2, 0x2, 0x2}, {0x2, 0x10, 0xc8ed}], "1754"}, @union={0x8, 0x9, 0x0, 0x5, 0x0, 0x5, [{0x3, 0x2, 0x1}, {0x10, 0x1, 0x1000}, {0x7, 0x1, 0x100}, {0xe, 0x0, 0x7}, {0xc, 0x5, 0x2}, {0x2, 0x5, 0x8}, {0x3, 0x0, 0x9}, {0x10, 0x5, 0x3}, {0x7, 0x4, 0x2}]}, @fwd={0x4}, @enum={0x2, 0x8, 0x0, 0x6, 0x4, [{0x9, 0x5}, {0x1, 0x3}, {0xb, 0x8}, {0xa, 0x401}, {0x7, 0xa4}, {0x9, 0x401}, {0xa, 0x5}, {0x0, 0x2}]}, @union={0x6, 0x6, 0x0, 0x5, 0x1, 0x3, [{0xe, 0x1, 0x4}, {0xd, 0x0, 0x4cf4cd50}, {0xb, 0x5}, {0xe, 0x9b25, 0x2}, {0x9, 0x3, 0x400}, {0x0, 0x2, 0x2}]}, @union={0x6, 0x3, 0x0, 0x5, 0x1, 0x66e5, [{0x4, 0x1, 0x80000000}, {0xb, 0x2, 0x9a6b}, {0x4, 0x3, 0x7ff}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0xfffffff8}}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x2e]}}, &(0x7f0000000200)=""/55, 0x24c, 0x37, 0x1, 0x69a15443}, 0x28) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r0, r0, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@cgroup=r0, r2, 0x2f, 0x8, 0x4, @void, @value=r0}, 0x20) 7m38.87116912s ago: executing program 6 (id=1069): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80004}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x28, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r2 = dup(r1) read$FUSE(r2, &(0x7f0000003940)={0x2020}, 0x203b) sendfile(r1, r2, 0x0, 0x80006) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) prctl$PR_SET_IO_FLUSHER(0x34, 0x2) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0400292020"], 0x7) io_setup(0x6, &(0x7f0000000040)) 7m38.655225713s ago: executing program 6 (id=1071): r0 = syz_open_procfs(0x0, &(0x7f0000000580)='sched\x00') read$nci(r0, &(0x7f0000000280)=""/134, 0x86) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000000f14010027bd7000fcdbdf250b00450075766572627376"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000380)="41aa28582b394161813fb891a55632fe35000acc7905af0e2c99673411fbdd7b7e5cfc50be4165263aeb91bb3cbb9a06b1c9c8b9bf72d99be61e9fcf00c557612eff61f6c11e1abd823d1a1dc6e749764ccf6b55c076c2db746e79961bea77266be1375c0aa25f6f967336439c3e15df7e4ac1e1067f9eaeb4c3e13fcdc3e3325d220c31b432410e5d66b1b7f76861", 0x8f}, {&(0x7f0000000880)="2562c5e99b9f6b5b44a9134b31756fba3253e5c295e19e3eef3f95b43a5a85c30cdecee06a0c88cf592081cdc5d091a4b2142a75c7ee2565b93a9eb072cbc3f48a8b04e0f610a5480d74551f6db105ae6a2bba2dacf91e5dcc384111fb5014d432e6f82951d0ce5991609d6654502ef9ee34b57e8d9714", 0x77}, {&(0x7f0000000300)="184866553f80fc7b57782f2a8fb43ba5767eb6455df5bff20e7759", 0x1b}, {&(0x7f0000000a40)="134f04935c0bb6b3125fcaeaad07413b34f26e8ae834f29fe91f659871d6776b328f1dd8990a4745c426517669e1725e1eb7979a854ada6da00301244e48a6a3fc3c5edba971aba6ef9d7c4dde9f70d12be5df6f8c4690a4da77e5b463eecfac7b36237819a736fed32c729874a1ca658e08916b4f87992d0fad90d49dbe8314bd52ca2bf820223bfb825cd277330f7a8255b7471aceb6f5a169de47924477374ed3d246", 0xa4}, {&(0x7f0000000940)="fe0cefd07d48c4295cec8de23ea8bfc17f7f2f838be40584f6c96e957f2a218c112afd27d43a83b9b1bc7eb63f0e230cc43fb9f7", 0x34}, {&(0x7f0000000980)="111ae32dcdfaf5ae5c1d184b59ee2f69dbefab8e555b64278556686604420b6460efcb9cc44eb4af2f31f0a33c952a", 0x2f}, {&(0x7f0000000b40)="8ab0ae14631ea3f52f1a1fc0677b767dbe12f31929de1af81558a6f9f3162ffdd8e64fd6cf0b52123d2b0184957ad99230b2751603a7d7bd5f44664a8834385f39f7f8e25a3a7360ae0f56e9c5be10a02bab37d1ba45f29a9b950071e52beac9411e6cef6676a15394a33474e91043fca9", 0x71}, {&(0x7f0000000c40)="b8a2e6a91c2c4fffd4b2e86301adc30d6ad6ef812294b03c2ac12c280dadc09fc9836117e9cc8d66f829bc0e7ef004fe435c0dd8aaaea8b6d5cd41b7f39c26d26424a76d056605", 0x47}], 0x8, &(0x7f0000000dc0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x51}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000440)='FROZEN\x00', 0x7) r7 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r7, &(0x7f0000001580)={&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000000300)=""/66, 0xffffffffffffff20}, {&(0x7f0000000200)=""/15, 0xf}, {&(0x7f0000000140)=""/82, 0x52}, {&(0x7f00000013c0)=""/168, 0xa8}, {&(0x7f0000001800)=""/4104, 0x1000}, {&(0x7f0000001700)=""/197, 0xc5}, {&(0x7f00000000c0)=""/24, 0x18}, {&(0x7f00000015c0)=""/165, 0xa5}], 0x8, &(0x7f0000001500)=""/123, 0x7b}, 0x2106) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x40000002}]}) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r11, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) 7m37.237783822s ago: executing program 6 (id=1077): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0x11, 0x148, 0x318, 0x0, 0x428, 0x2a8, 0x2a8, 0x428, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2d0, 0x318, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x1, 0x1, 0x2, 0x0, 0xc}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x520) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x20201) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, &(0x7f0000000780)=0x2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000100070000000900020073797a30000000001400078008001240fffffffe080013400000080015000300686173683a69702c706f72742c6e6574000000000500050002000000050004"], 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r7 = socket$netlink(0x10, 0x3, 0x0) recvfrom(r7, &(0x7f0000000180)=""/182, 0xb6, 0x20, 0x0, 0x0) 7m34.113487767s ago: executing program 6 (id=1086): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x9, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xe75f0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed07447900000000000000001800", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x10, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0x1, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xfff1}, {0x0, 0x10}, {0x2, 0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r5}, @TCA_ROUTE4_IIF={0x8, 0x4, r5}]}}]}, 0x44}}, 0x24040084) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r6, &(0x7f0000000000)="fa", 0xfffffdef) socket$vsock_stream(0x28, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000004c0)={0x0, 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffa3, 0x0, 0xffffffffffffffff, 0x24}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) r8 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r9, 0x80083313, &(0x7f0000000240)) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0xa52a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) ppoll(&(0x7f0000000500)=[{r8}], 0x1, 0x0, 0x0, 0x0) pselect6(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x20003, 0x1, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 7m23.455122773s ago: executing program 35 (id=1058): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000940)={{0x1, 0x9192, 0x2, 0xffff}, 'syz0\x00', 0x4f}) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x2) ioctl$UI_DEV_CREATE(r3, 0x5501) read$FUSE(r2, &(0x7f0000002300)={0x2020}, 0xfcdd) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2}}, 0x0, 0x6, 0x0, 0x1}, 0x28) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007800c00018008000140ffdfffff0500070084000000060004404e2200000c000280080001407f000001"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 7m18.80112678s ago: executing program 36 (id=1086): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x9, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xe75f0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed07447900000000000000001800", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x10, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0x1, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xfff1}, {0x0, 0x10}, {0x2, 0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r5}, @TCA_ROUTE4_IIF={0x8, 0x4, r5}]}}]}, 0x44}}, 0x24040084) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r6, &(0x7f0000000000)="fa", 0xfffffdef) socket$vsock_stream(0x28, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000004c0)={0x0, 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffa3, 0x0, 0xffffffffffffffff, 0x24}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) r8 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r9, 0x80083313, &(0x7f0000000240)) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0xa52a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) ppoll(&(0x7f0000000500)=[{r8}], 0x1, 0x0, 0x0, 0x0) pselect6(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x20003, 0x1, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 5m39.686963169s ago: executing program 8 (id=1390): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000140)={0x1f, @fixed}, 0x8) r1 = syz_open_dev$video(&(0x7f0000000000), 0x10000, 0x8000) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000040)={0x1, 0x0, {0x80000000, 0x84a, 0x1010, 0x2, 0x1, 0x6, 0x0, 0x5}}) r2 = dup2(r0, r0) listen(r0, 0x3) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x4000, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r9, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) socket$nl_generic(0x10, 0x3, 0x10) setuid(0x0) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)={0x30, r10, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4000804) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000002640)=0x14) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0x60) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, 0x0, 0x0) 5m38.63238605s ago: executing program 8 (id=1393): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000600)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0xf5, 0x0, 0x4, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x63, 0x0, {0x5, 0x4, 0x0, 0x3f, 0x0, 0x0, 0x4000, 0x4, 0x2f, 0x7, @dev={0xac, 0x14, 0x14, 0x10}, @broadcast}, "0000000000000005"}}}}}, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0xd994, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000240)={0x3ff, 0x1, 0x3, "c019a5f63fb2895a14ea8d9a710cd07a0caa90674d882dcaa812a608a15c0890", 0x56555959}) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB='s']) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x16) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'pcmmio\x00', [0x4f27, 0x6, 0x3, 0x4, 0x5, 0x20000cc5, 0x5, 0x1004, 0xa, 0xfffffffc, 0x2, 0x3, 0x3, 0x1, 0x4000007, 0x101, 0x0, 0x1a449, 0x9, 0x7, 0xd, 0xcaa7, 0x9, 0x20001e58, 0x200007, 0x63e, 0x39, 0x8, 0x3, 0x0, 0x6]}) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f00000000c0)) 5m38.285621892s ago: executing program 8 (id=1397): socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500190002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x64, r3, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x5ce}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x5}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6b5999021a219b19}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x310}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x305}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x526}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2d3}]]}, 0x64}, 0x1, 0x0, 0x0, 0x8800}, 0x4044800) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000580)={0x87, 0x6, 0x0, {0x1, 0x4, 0xffffffffffffff2f, 0x0, '\xd5\xbf\x9d\a\xfd\x94%X\xc8\x00\xb7\x16\x04\"\xa6\x1d\x8fs\xf5=\xd5\x1bF@P\bTq\x81E\xdb\xb4\xeb\xa0\xff\xde\x92\xc5\x80\xdb\xa4<\xa2\xf5\x9e\x0f\x02\xf1x\xe6V&\xb6\xec\x80-\x00M?\xc5\xfd\xe0\x05\xfda\x92\xa8\x85\x92\x87\x82\xe5T\x8ejd\x97\xad\xa6n\xf9\xa7Z\xc3z\x9b\'&\t93\xc3\xde\x89'}}, 0x87) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCMSET(r4, 0x5418, 0x0) openat$ttyS3(0xffffff9c, 0x0, 0x20040, 0x0) r5 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) write$sequencer(r5, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r8}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f00007df000/0x2000)=nil, 0x2000, 0x3000008, 0x30, 0xffffffffffffffff, 0xfdbd9000) pread64(0xffffffffffffffff, 0x0, 0x0, 0x20000000000040) 5m35.017017689s ago: executing program 8 (id=1409): mkdir(&(0x7f0000000300)='./bus\x00', 0x41) r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000000)={0x0, 0xa001}, 0x8) symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000100)='./bus\x00') r1 = open$dir(&(0x7f0000001240)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000500)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="0200000001000400000000000400000000000000100002000000000020"], 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x86) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone3(&(0x7f0000000980)={0x200, 0x0, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="7202000000f6000000000000005d61416479a81d2d4979e3c700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = getpid() r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r5}, 0x10) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000080)=""/4097, 0x1001}], 0x1, 0x3f, 0x0) process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r7 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r7, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 5m34.719766263s ago: executing program 8 (id=1413): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000240)="f3420faece66b884000f00d8410fc76980c7442400ee000000c744240200000000ff1c2466baa100ecf2c16e002a48b8ed000000000000000f23d00f21f835200000000f23f80f08b9800000c00f3235000100000f300f13ab09000000", 0x5d}], 0x1, 0xc, 0x0, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000240)=ANY=[], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0) ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000080)) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r2, @ANYRES8, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) unshare(0x24020400) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getpeername(r6, 0x0, &(0x7f00000000c0)) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r9, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) r10 = getpid() r11 = syz_pidfd_open(r10, 0x0) setns(r11, 0x24020000) 5m34.256664485s ago: executing program 8 (id=1416): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000180)="2000030012005f0214f9f4070000fbe40a0000000000", 0x41d) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @random="1553ff41cf11", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4df608", 0x14, 0x6, 0x0, @private1, @local, {[], {{0x4e20, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xfffc}}}}}}}, 0x0) recvmmsg(r3, &(0x7f00000021c0), 0x5b, 0x40, 0x0) getitimer(0x0, &(0x7f0000000800)) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001100050000000000feffffff07000000", @ANYRES32=r6], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) 5m33.696447161s ago: executing program 37 (id=1416): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000180)="2000030012005f0214f9f4070000fbe40a0000000000", 0x41d) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @random="1553ff41cf11", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4df608", 0x14, 0x6, 0x0, @private1, @local, {[], {{0x4e20, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xfffc}}}}}}}, 0x0) recvmmsg(r3, &(0x7f00000021c0), 0x5b, 0x40, 0x0) getitimer(0x0, &(0x7f0000000800)) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001100050000000000feffffff07000000", @ANYRES32=r6], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) 1m1.986847912s ago: executing program 1 (id=2317): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002e00090027bd700000070000004a4dca0000000000000018740e0f0018"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000005c0)={r5, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r6 = syz_open_dev$loop(&(0x7f00000001c0), 0x1, 0x88383) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000001280)={r4, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}}) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r7, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="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", 0x1c4}], 0x1}}], 0x1, 0x400c0) sendto$inet(r7, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) 1m0.097796476s ago: executing program 1 (id=2322): syz_io_uring_setup(0x132a, &(0x7f0000000000)={0x0, 0x5042, 0x40, 0x1, 0x3df}, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000280)={0x7, 0x100008a}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x1}, 0x10) setsockopt(r3, 0x84, 0x9, &(0x7f0000000580)="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", 0x1b1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r1, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f00000002c0)=[{0x6, 0x1, 0xe, 0x7ffffffe}]}) shutdown(r1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000080000000000000000000008500000036000000850000002a0000009500000000000000910f001083f7b8033157ad3a9ec3e0a154dde8e516b33d49cd6d8ea1ef44e26a9689047dc810523bb6cb646edac69057131e1be7162eed1f07ba5e28f6fe1cb93967ef2f0ef2d0df01ab65f8f730d2851251b7cda33d6e3116f566927744a6e23559db48c03d567c61c68d4095f639c7ddaa0d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @mcast2, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r4, 0x9}}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000540)={0xe, 0x16, 0xfa00, @id_resuseaddr={&(0x7f0000000100)=0x1, r6, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000240)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @empty, 0x3}, r6}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r6, 0xffffffff}}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r7, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) setrlimit(0x5, &(0x7f0000000300)={0x2, 0x80000001}) 55.324025011s ago: executing program 1 (id=2336): r0 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89a3, &(0x7f0000000040)={'bridge0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000500)={0x2, 0x4, 0x0, 0x9, 0x9, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x200, 0xfe, 0x3, 0xfd, 0x0, 0xe0000000}, @sadb_x_filter={0x5, 0x1a, @in=@local, @in=@rand_addr=0x64010100, 0x2c, 0x4, 0x14}]}, 0x48}}, 0x20008805) 54.565714497s ago: executing program 1 (id=2339): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@l2tp={0x2, 0x0, @loopback}, &(0x7f00000000c0)=0x80, 0x80800) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000140)=""/114, &(0x7f0000000200)=0x72) syz_emit_ethernet(0x168, &(0x7f0000000300)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, @void, {@generic={0x22f0, "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"}}}, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x86) fchdir(r2) mkdirat(r2, &(0x7f0000000100)='./file0\x00', 0x2a0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r2, 0x4004e502, &(0x7f0000000000)=0x8) 54.152732363s ago: executing program 1 (id=2341): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) statx(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x2, &(0x7f0000000240)) 53.59240802s ago: executing program 1 (id=2343): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6) ioctl$SG_NEXT_CMD_LEN(r5, 0x2283, 0x0) 38.245614323s ago: executing program 38 (id=2343): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6) ioctl$SG_NEXT_CMD_LEN(r5, 0x2283, 0x0) 19.157311896s ago: executing program 0 (id=2438): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, r0, 0x2, &(0x7f0000000080)) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e5cf01406e0510401c20000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000001c0)={0x40, 0x13, 0x1, "f2"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 18.572101355s ago: executing program 0 (id=2439): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x180880) bind$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0xffff, @none, 0xfffd, 0x1}, 0xe) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x16801, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) bind$can_raw(r4, &(0x7f00000000c0), 0x10) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$video(&(0x7f0000000040), 0x1, 0x240) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x0, 0xf, 0x0, &(0x7f0000000180)="c1dfb080cd21d308098ee68886dd96", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x800, &(0x7f0000000180)=ANY=[@ANYBLOB="7491616e733d66642c7266646e6f3d9c8cad19b3866345406afa5cbc8f8b8fa8a16abc4fbcf40ec78e51dfe4269a0afe86b80b418ae1eed36dba5c8ae8bb8b29394c7d1772b0f003222e66829a443257f07b5c17ce62fc9b3f404d8451e6942292c1637d05ad7845fbf7a8f26dfef2da90ea4bff9bb2822eb2263ccac98d04b33a6c0ee9e2d51be639fb8fdf17e84a0f515e29ec636312b9e315a95a5de1472b40", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',nodevmap,cache=loose,appraise_type=imasig,subj_type=*:\\,\x00']) r8 = dup(r0) accept4$vsock_stream(r8, 0x0, 0x58, 0x0) 18.252782959s ago: executing program 0 (id=2442): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r8) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x44, r9, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x1c, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}, {0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$SG_NEXT_CMD_LEN(r7, 0x2283, &(0x7f0000000380)=0x3) write$sndseq(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0xf2, @time={0x24}, {}, {}, @raw32={[0x9, 0xfa83, 0x5a7]}}, {0x6, 0x0, 0xfe, 0xc1, @tick=0xffffff00, {0x9, 0x30}, {0xa, 0x9}, @result={0x6, 0x4005}}], 0x38) capset(&(0x7f0000000840)={0x20080522}, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000000)=0x14) sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000210", @ANYRES16=r1, @ANYBLOB="030b28bd7000ffdbdf250300000008000400ffffffff"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8800) openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x101200, 0x0) 17.229703411s ago: executing program 0 (id=2445): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r1, 0x0, 0xe) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0xfffffffffffffcf2, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70020000060a0b0400000000000000000200000044020480400201800a0001006d61746368000000300202800800010062706600080002400000000114020300d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d532452032d5f166334739d1719a5778bd4f724ee4ca57f2527aeeb0c75755d68fc6fa55f4825682ee95e581039823e5963beedcf65b8b005623d90772b8b6ebd2498b0aff725a3eabb6c99cb2edfe10b9c33be8a971e08401bc0807e75a2ff376b7934473bc1f02bb512b77414daf260c9c7d4e1f0758b56ec5823892af310e6252fcfb1d9dbaddefdaa26f43f12f831fd221926d6536eeff641db46920ae0e48f3ff5de599714ba6510ce479d4116a519792281736f39c9fc0e10ef557392c43389271cebcf36543fcf6f83bf74b93ee4eb5e8c82e35bb4784cc1ed0ad291b16e8368487589f7590bf5896f340a36555a1cf69736da230a809176dbdfba3d47efb9a6932e5503d277532b7d4e6f7c7373a298e5843a9f74d5fd07fbc6ad22bc644ba9b3c94ec3c8f0b9321b16e5826b1f058f781760a5d4b6a8880202b41689139c37cd51f65a92d883f8901add03b650c9ec182fb565a4d657ebba9d6a5eb426b22d5933b72362e6ec327fb679aa8034b8b3b6680ad138be47652a3e77981187d2921cebfc1639aa280e3d38dba9b1af49ceded79c78a2d656b3a3e946e17e6257def6679f70f11aa01a2d906aecf4dbc7d1a332a8932ed719ce7eecb5450f494f944b3f6b637502ddba609c6e45ccfad1db7c7dda3e2c755ddcf27132985442e9b8df16f96c82e72e3e2491856d07756b9f08000240000000000900020073797a32000000000900010073797a30"], 0x2c8}}, 0x4048010) setreuid(0x0, 0xee01) r4 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r4, 0x1, &(0x7f0000000380)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x100}, 0x0, 0x0, 0x8000003, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x8, 0x5, 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) eventfd(0x8c66) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) 15.517402412s ago: executing program 0 (id=2449): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) setreuid(0x0, 0xee00) bind$inet6(r0, &(0x7f0000000080)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf}}, 0xffffffff}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local, @local, @void, {@ipv6={0x86dd, @generic={0xe, 0x6, 'V\aj', 0x8, 0x88, 0x1, @local, @local, {[@routing={0x3a, 0x0, 0x2, 0x9, 0x8000300}]}}}}}, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9bb488f34ab2a8d665756595359e75786e48c2d3c7fff2e7c61d50531d52164825bf2e0094e1f6093774e4d22ea38f414246dc3189f23383b594d8048824880e44e51364a5ffc63d189a296800973d79622112339679fed127f682ddf64cb60201a602f708546be8ac20e0de785326d8210574562252e4aff13855150be5c8bbc8fa1299512ded510165e278d4f17d00ce68607ca9df863b8c06f8b1fb04fea5bb965fa08b541629dd0b42580039fcf709d6663ae84a2127318674"], 0x6c}}, 0x90) 15.492628154s ago: executing program 0 (id=2451): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800, 0x8, 0x2}, 0x1c) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000040)=0x16, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000300)={0x8000, 0x1, 0x9}, 0x18) openat$incfs(r4, &(0x7f0000000340)='.pending_reads\x00', 0x304, 0x100) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r7, {0x0, 0x6}, {0xffe0, 0xa}, {0x1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x80000001, 0xc3e, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040094}, 0x2400c056) sendmsg$inet(r3, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000000c0)=0x100, 0x4) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000140), &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r8}, 0x10) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x1, r8, 0x8000000, r0}, 0x10) 11.401386762s ago: executing program 9 (id=2462): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x10000, 0xc, 0x0, 0xfffffe0000000001, 0xfa11, 0xffbfffff}, 0x0) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone3(&(0x7f0000000600)={0x14002000, &(0x7f0000000100), &(0x7f0000000440), 0x0, {0x2f}, &(0x7f00000002c0)=""/202, 0xca, &(0x7f00000003c0)=""/82, &(0x7f00000004c0)=[0x0], 0x1, {r2}}, 0x58) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000000f4cb85200000400", 0x30314442}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r4, &(0x7f0000004380)={0x2020}, 0x2032) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) r6 = eventfd2(0x43, 0x1) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000000)={0x1, r6}) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f00000005c0)={0x0, r6}) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000680)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x8000, 0x0, 0x0, 0x0, 0x33, 0x48, 0x0, 0xe4}) r8 = socket$kcm(0xa, 0x2, 0x0) syz_emit_ethernet(0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="0180c200000201805900000088fb"], 0x0) sendmsg$sock(r8, &(0x7f0000000000)={&(0x7f00000001c0)=@in6={0x2, 0x4e23, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0xd}, 0x80, 0x0, 0x0, &(0x7f0000000640)}, 0x4800) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r9, 0x104, 0x0, 0x0, 0x0) mlock(&(0x7f00003d6000/0x3000)=nil, 0x3000) 10.071658185s ago: executing program 5 (id=2466): ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0xd, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000009000000000000000400000095000000000000000000800000a71abfe140d6655385e5523cbfdffbcaec8dcc45dc9203faf83b00297aa485fee1aef26e3b86418ea4797fa515d398ccc87e8d66db3c70200900000000000000f56f815a0eac77e90569d013bbcf95780ac7278241b13591563c2cd0e2a512d8dfd30e7b96ea78983e8ac2f4644b69e964b941e6653098fa3a31108bc826cf1af7d45505eaec"], &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f00000000c0)={0x0, 0x33a, 0x8, 0x62b76744, 0x0, [0x0], [0x30, 0x7, 0x2, 0x3ff], [0x8, 0x1, 0x55], [0x74b, 0xffffffffffffffff, 0x2c1e, 0x4]}) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000140)={r3}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r0, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={r0, 0x20, &(0x7f0000000640)={&(0x7f0000000580)=""/57, 0x39, 0x0, &(0x7f00000005c0)=""/107, 0x6b}}, 0x10) r7 = open(&(0x7f00000006c0)='./file0\x00', 0x101500, 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1b, 0x14, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_fd={0x18, 0x3, 0x1, 0x0, r4}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffe}, @ldst={0x3, 0x1, 0x4, 0x4, 0x7, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0xca0, 0x1e, &(0x7f0000000440)=""/30, 0x40f00, 0x40, '\x00', r5, @fallback=0x1d, r0, 0x8, &(0x7f0000000540)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, r6, r1, 0x0, &(0x7f0000000740)=[r0, r0, r0, r7, r0, r0, r8, r0, r0], 0x0, 0x10, 0x4}, 0x94) 9.914646133s ago: executing program 5 (id=2467): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r8) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x44, r9, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x1c, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}, {0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$SG_NEXT_CMD_LEN(r7, 0x2283, &(0x7f0000000380)=0x3) write$sndseq(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0xf2, @time={0x24}, {}, {}, @raw32={[0x9, 0xfa83, 0x5a7]}}, {0x6, 0x0, 0xfe, 0xc1, @tick=0xffffff00, {0x9, 0x30}, {0xa, 0x9}, @result={0x6, 0x4005}}], 0x38) capset(&(0x7f0000000840)={0x20080522}, &(0x7f0000000880)={0x0, 0xdd1, 0xffffffb3, 0x0, 0x88fd, 0x10}) r10 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8800, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000000)=0x14) sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000210", @ANYRES16=r1, @ANYBLOB="030b28bd7000ffdbdf250300000008000400ffffffff"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8800) openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x101200, 0x0) 9.172919001s ago: executing program 9 (id=2468): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000100)=@ethtool_coalesce={0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) (async, rerun: 32) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xb5, 0x40, 0x33, 0x40, 0x1a86, 0x7522, 0x3536, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xd6, 0x24}}]}}]}}, 0x0) (rerun: 32) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000200)={0x20, 0xe, 0xb8, "b86c56e57dbb24a7e42c280f2532ae79be51b5bb87803424aff7ca431a347d538e38bdf6ad295ee2b3b62f7e1a3010c9f5c90d90d6e7acdc91570b9c6f5336e3690557697a7214511644c36563214edb93a3a4d46f34d899820c46973f0ce5d8bd4b41f1cdfca97d94ae88921e9f2bada9c00e5dba35f7f12b4128c8da629466699e28af2702b50869e3c0a6d12fd2107a2341e9e6cbabd755a256b7ed9bcde125ca0d8a77000a05702eadcb92c87d7d6d55a5ba80ddee3c"}, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (rerun: 32) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x50, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x86, 0x10, 0x9, [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x7, 0x1, 0x2, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x9, 0xa, 0x4}}}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x101, 0x6, 0x8, 0x80, 0x20, 0xd}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x1, [{0xdd, &(0x7f00000003c0)=@string={0xdd, 0x3, "4a63224c5c0a0eeb9b36ef417bb05076c35f090958740bebb22963c17c790e592667dc987eb608f65d00e520e1ca2e4d22da8a5660ed570781f2c625f33affa8046dec33748d3918bc1e43a3fd708a4093ac4c6ebda3999d4bfb06e312bdee25626837188cc1bdfabd4a8d92a638056697162120581bd2412df379c422a7ce206857c4219d84614ce4fe7584912cad5be8be437875f0459ee2ab67ec133cae71a2ea529c8f85372ad358551bb36018bad941e1c947a2fbd34cd4d927ff326e3c79286aef95ae956fa012f3a0b6455290f319616df9872711ce97d0"}}]}) 8.92639742s ago: executing program 5 (id=2471): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = io_uring_setup(0x68f6, &(0x7f00000002c0)={0x0, 0x48c7, 0x8, 0x0, 0x1000168}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x3a) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x379}, 0x0, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, &(0x7f0000000000)={0x90000000}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$unix(0x1, 0x2, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r10, @ANYBLOB="0c009900ff07000070000000140004009e42f7687aa1e14a72300000000000000800050007"], 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 7.481977479s ago: executing program 5 (id=2473): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x18, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000080)={&(0x7f0000000100)=[{0x9, 0x6001, 0x0, 0x0}], 0x1}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000000)={0x3}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_seqnum', 0x101000, 0x80) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x5c, r5, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9028cfcbfabe859b7ae7d0b14d253733"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "90226da732063912"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9df92b8a5f7a61538350a2b100b0a8e4"}]}]}, 0x5c}}, 0x4000080) r7 = eventfd2(0x6, 0x80000) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000300)={r7, 0x8, 0x2, r7}) 7.205191878s ago: executing program 3 (id=2474): sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x4001) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={r1, 0x2}, &(0x7f0000000200)=0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r3, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) 7.04498851s ago: executing program 3 (id=2475): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb1e9a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000003e80)=[{{&(0x7f0000000480)=@nfc_llcp, 0x80, &(0x7f00000029c0)=[{&(0x7f0000000500)=""/17, 0x11}, {&(0x7f0000000540)=""/73, 0x49}, {&(0x7f0000000640)=""/143, 0x8f}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000000700)=""/21, 0x15}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f0000000740)=""/23, 0x17}, {&(0x7f0000000780)=""/44, 0x2c}, {&(0x7f00000007c0)=""/8, 0x8}, {&(0x7f00000028c0)=""/213, 0xd5}], 0xa, &(0x7f0000002a80)=""/143, 0x8f}, 0x6}, {{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/88, 0x58}, {&(0x7f0000002bc0)=""/72, 0x48}, {&(0x7f0000002c40)=""/97, 0x61}, {&(0x7f0000002cc0)=""/225, 0xe1}, {&(0x7f0000000800)}, {&(0x7f0000002dc0)=""/59, 0x3b}], 0x6, &(0x7f0000002e80)=""/4096, 0x1000}, 0x1}], 0x2, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b08000000000000000000000000042ab09020bf21fd564de15656fdd8955de09dfb3603277c2dc18acc36b2918a4e"], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000008f000000000000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000a400000086000000bf0920000000000055090100000000649500000000000000bf91000000000000b702000003000000850000002a000000b70000000000001895"], &(0x7f00000003c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_khugepaged_scan_pmd\x00', r2}, 0x18) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0xc0185879, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010000104280100"/20, @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x44}, 0x1, 0x0, 0x0, 0x240008d4}, 0x4054) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300), 0x20502, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000240)={0x578, 0x30, 0xf0, 0x640, 0x0, 0x1f, 0x32, 0x0, {0xfffffffe, 0xced}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x200}, {}, 0x0, 0x40, 0x0, 0x2, 0x0, 0x9, 0xfffffffe, 0x9, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x2, 0x0, 0x3}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="c345286d00"], 0x14}}, 0x4000) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000400)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x1a}) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xe0, r9, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv_slave_1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x2}, 0x0) 6.835337506s ago: executing program 9 (id=2476): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x47ffffa, 0x122842) r2 = getuid() fchown(r1, r2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x77, 0x101301) syz_usb_connect(0x2, 0x4e, &(0x7f0000000700)=ANY=[@ANYBLOB="120100008cbd7f209904f4cdee780102030109023c0001100010000904130001ff06d2"], 0x0) ioctl$USBDEVFS_CONNECTINFO(r3, 0x80045520, &(0x7f0000000000)) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000440)={r0, 0x0, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x13, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c18e8438ef2a565ef1e83323695c58d66500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a019363e8772fd29f35239d200", "24431a3977a68e174f005e95ac6a00"}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) (fail_nth: 2) 6.717599493s ago: executing program 4 (id=2477): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xa, 0x4008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5c, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) get_robust_list(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x880) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x4000850) open(0x0, 0x1a1043, 0xc5) userfaultfd(0x801) prlimit64(r0, 0xc, 0x0, &(0x7f00000004c0)) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) socket$nl_audit(0x10, 0x3, 0x9) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff46ca9fbf7abae19cbb08004502005c00000000002f907800000000e0000001248081000000000010000800000086dd00090006080088be"], 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200052f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x1f4, 0xd50, 0x6558, &(0x7f0000000000)="ff", 0x0, 0x6, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x69) 6.675899386s ago: executing program 9 (id=2478): pwritev(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x3) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4000040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x68, 0x30, 0xfff5, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xbabd, 0x81, 0x10000000, 0x1, 0xfff}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x1c3, 0x0) shutdown(0xffffffffffffffff, 0x1) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) 5.708806037s ago: executing program 3 (id=2479): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_wake_idle_without_ipi\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000480)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab4", 0xffffffffffffffca, 0x840, 0x0, 0x0) sendto$inet6(r5, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000a00)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r5, r7, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) r8 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r8, r1, 0x0, 0x1, 0xfffffffffffffffe}, 0x17) r9 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCSISO7816(r9, 0xc0285443, &(0x7f00000002c0)={0x2, 0x80000001, 0x1, 0x5, 0x1}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40000000000000}, {0xfff, 0x8, 0x0, 0x2, 0x2, 0x29, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0xfffffffffffffffe}, {0x7fff, 0x0, 0x8, 0x3e, 0x0, 0x1, 0x0, 0x1}]}) 5.70809621s ago: executing program 4 (id=2480): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r8) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x44, r9, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x1c, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}, {0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$SG_NEXT_CMD_LEN(r7, 0x2283, &(0x7f0000000380)=0x3) write$sndseq(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0xf2, @time={0x24}, {}, {}, @raw32={[0x9, 0xfa83, 0x5a7]}}, {0x6, 0x0, 0xfe, 0xc1, @tick=0xffffff00, {0x9, 0x30}, {0xa, 0x9}, @result={0x6, 0x4005}}], 0x38) capset(&(0x7f0000000840)={0x20080522}, &(0x7f0000000880)={0x0, 0xdd1, 0xffffffb3, 0x0, 0x88fd, 0x10}) r10 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8800, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000000)=0x14) sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000210", @ANYRES16=r1, @ANYBLOB="030b28bd7000ffdbdf250300000008000400ffffffff"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8800) openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x101200, 0x0) 5.573560641s ago: executing program 9 (id=2481): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4e1d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/120, 0x78}], 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=r7, 0x4, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='='], 0x38}}, 0x4000080) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r4, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 4.728441327s ago: executing program 4 (id=2482): r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f0000000040)=0x1) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000300)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f00000000c0)={r4, 0x0, 0x0, 0x0, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x4]}) mkdirat(0xffffffffffffff9c, 0x0, 0x140) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x18d6, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r9 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r9, 0x1e, &(0x7f0000000000)=[r9], 0x1) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) 3.841915127s ago: executing program 5 (id=2483): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002e00090027bd700000070000004a4dca0000000000000018740e0f0018"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000005c0)={r5, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r6 = syz_open_dev$loop(&(0x7f00000001c0), 0x1, 0x88383) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000001280)={r4, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}}) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r7, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="16ecaaaeb69ec105e9dd534f1bd77f8051db33a07055391264d230088248daa370b0bc75883a507be52e9744ca1479096e0a1d347324d779b5fe3167e722437570ee9c472c6399c49d1473a32016f512dee12a2f9dc3bd6060001c8139ae43a3cbf08d05c66712c9a0b2994264c8614da6c0251fdeb06bcb94139d6b3df7bd60ac9d53ac834c97388aa638bb50457e57f90b3e8e11975ebd2c81a2a13cb5dc9b7fae4411137ad278cf52dd8d32de5b07a396cd19a242b247d2ca16ce1a663064abfc1ba416f7b1fc251409afd53815f775ab04810637bd8c9b2606a8512ee5622829a369d77900cfc7987f950003fb657f4c17131695efdcead8816ddae634049c3dab49a0ca36b1d5d93c8dac8fa0ba2a74f55d159667e3b52ec903f439a21a023b4bc7bf4463d73f5ae46a680f138c34f0ab2e8503ce342bfb26e481f087a08d410a8886335ac1fda0df344dfbb68b6bb8fcc2bf9a85fe835f350fb281e1159b093d52c519a3d61cd4979941c87ebf52404bdb04ebce4e1980314c1b03a674a86d6cf027b9076559eecadd6cbc5daab4002468d3653a11bbcb9cf625b1e4fe49a398e63200944d4ecee2741a09daf3650edb6a8dca6dc705873b78767c0e942a766c8b", 0x1c4}], 0x1}}], 0x1, 0x400c0) sendto$inet(r7, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) 3.600709371s ago: executing program 4 (id=2484): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000440)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000180)={r4, r5, 0x1, 0x400000}) 3.021084276s ago: executing program 4 (id=2485): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x18, r0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x814}, 0x0) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x9, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7021400000000001823000000", @ANYRES32=r5, @ANYRESDEC=r3], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x0) io_submit(0x0, 0x0, &(0x7f0000000300)) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x4, "f42a97b9"}}) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x3, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x30]}}, 0x0, 0x28, 0x0, 0x1, 0x4}, 0x28) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.802125076s ago: executing program 5 (id=2486): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000008e40), 0x40, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r3, 0x800c5011, &(0x7f0000008e80)) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x113c}, 0x1, 0x0, 0x0, 0x48000}, 0x400c004) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x3}], 0x1, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r5, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r6, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x544, 0x33, 0x6, 0x3, 0x5, 0x200}, &(0x7f0000000180)={0x8, 0x2, 0x401, 0x2, 0x7, 0x7fff, 0x2, 0x3}, 0x0, &(0x7f0000000240)={0x0, 0x3938700}, 0x0) r7 = syz_open_dev$I2C(&(0x7f0000000340), 0x0, 0x0) ioctl$I2C_PEC(r7, 0x708, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$netlink(0x10, 0x3, 0x14) 1.50235543s ago: executing program 3 (id=2487): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0x8, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) brk(0x55d55ede6004) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x27) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) r4 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r4, 0x0) r5 = syz_pidfd_open(0x0, 0x0) r6 = openat$random(0xffffffffffffff9c, &(0x7f0000000300), 0x28000, 0x0) poll(&(0x7f0000000340)=[{r6, 0x204}], 0x1, 0x0) process_madvise(r5, 0x0, 0x0, 0x4, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) ioctl$TIOCL_SETVESABLANK(r9, 0x560e, &(0x7f0000000140)) ioctl$VT_RESIZEX(r9, 0x560a, &(0x7f0000000080)={0xd, 0x18, 0x3, 0x0, 0x0, 0x1000}) socket$nl_route(0x10, 0x3, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r10, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r10, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff98, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 1.17971323s ago: executing program 9 (id=2488): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x42}]}]}, 0x80}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x10cfa, 0x3, 0x8000008, 0x3, 0x3, 0x1, 0x0, 0x7cce8c743ee810df}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r3, r5, 0x25, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r6, r3, 0x4, r3}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f0000000500)={0x800080, 0x10000, 0x2, 0x0, 0x40, 0x558}) close(0x3) 298.802191ms ago: executing program 3 (id=2489): r0 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000f80)="c6a2df5b40a88f13b14b695dcff8bdf91bee7d5d3192038a00d99b16e5cc48025acfb12448ecd50d96cc503dc30db319dbd926973d11195e8bd225df76d8d3c5d34e68829bb7c5bfcb51f0ab73d2e4500a669b1270c2e9626684e54ad6a9e468ca0a4084725b82d483ff5bfae8a249b509f2553bb4c1690269301e9693313afb0e", 0x81}], 0x1) ioctl$TIOCGPTPEER(r0, 0x5441, 0x7ff) sched_setscheduler(0x0, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs={0x1}, 0x2) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_READ(r1, 0x40187013, &(0x7f0000000040)) 298.309968ms ago: executing program 3 (id=2490): syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0xff, 0x1c}, 0xc) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x3b) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r4, 0x4068aea3, &(0x7f0000000000)={0xa3, 0x0, 0xfffffffffffffffe}) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000040), 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000800)=@newqdisc={0x98, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4, 0xc}]}}]}, 0x98}}, 0x0) r9 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r9, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000500)="e3", 0x1}], 0x1) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0) r10 = syz_io_uring_setup(0x2eeb, &(0x7f0000000400)={0x0, 0x8894, 0x0, 0x3, 0x2a7, 0x0, r5}, &(0x7f0000000100), &(0x7f0000000180)) io_uring_enter(r10, 0x74ae, 0xee2, 0x10, &(0x7f0000000480)={[0xdd1]}, 0x8) 0s ago: executing program 4 (id=2491): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r8) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x44, r9, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x1c, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}, {0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$SG_NEXT_CMD_LEN(r7, 0x2283, &(0x7f0000000380)=0x3) write$sndseq(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0xf2, @time={0x24}, {}, {}, @raw32={[0x9, 0xfa83, 0x5a7]}}, {0x6, 0x0, 0xfe, 0xc1, @tick=0xffffff00, {0x9, 0x30}, {0xa, 0x9}, @result={0x6, 0x4005}}], 0x38) capset(&(0x7f0000000840)={0x20080522}, &(0x7f0000000880)={0x0, 0xdd1, 0xffffffb3, 0x0, 0x88fd, 0x10}) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCSETD(r10, 0x5423, 0x0) sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000210", @ANYRES16=r1, @ANYBLOB="030b28bd7000ffdbdf250300000008000400ffffffff"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8800) openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x101200, 0x0) kernel console output (not intermixed with test programs): ] audit: type=1400 audit(1767205883.107:960): avc: denied { read } for pid=14159 comm="syz.4.1888" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 667.788787][ T30] audit: type=1400 audit(1767205883.217:961): avc: denied { open } for pid=14159 comm="syz.4.1888" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 667.985881][T14164] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 667.992926][T14173] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20004 [ 668.000823][T14173] netlink: 'syz.0.1892': attribute type 27 has an invalid length. [ 668.463386][T14164] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 668.478096][T14164] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 668.541687][T14164] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 668.570896][T14164] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 668.732509][T14164] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 668.778239][T14164] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 668.857653][ T30] audit: type=1400 audit(1767205884.877:962): avc: denied { mount } for pid=14191 comm="syz.0.1895" name="/" dev="autofs" ino=42757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 669.052020][ T1207] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 669.263257][ T1207] usb 4-1: Using ep0 maxpacket: 8 [ 669.290143][ T1207] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 669.328904][ T1207] usb 4-1: config 0 has no interface number 0 [ 669.380586][ T1207] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 669.421164][ T1207] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 669.488751][T14204] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1898'. [ 669.497777][ T1207] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 669.544097][ T1207] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 669.562024][ T1207] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 669.658477][ T1207] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.709303][ T1207] usb 4-1: config 0 descriptor?? [ 669.790297][T14204] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 669.821597][ T1207] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 669.993614][ T5820] Bluetooth: hci1: command 0x0406 tx timeout [ 670.086697][ T6006] usb 4-1: USB disconnect, device number 16 [ 670.218203][ T6006] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 670.292332][ T30] audit: type=1400 audit(1767205886.317:963): avc: denied { read } for pid=14214 comm="syz.9.1901" path="socket:[42782]" dev="sockfs" ino=42782 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 670.628346][ T5820] Bluetooth: hci2: command 0x0406 tx timeout [ 670.634936][T12459] Bluetooth: hci6: command 0x2016 tx timeout [ 670.812478][ T5820] Bluetooth: hci3: command 0x2016 tx timeout [ 671.269082][ T149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.277811][T10660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.332515][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.469867][T14232] fuse: Bad value for 'fd' [ 671.478637][T14232] Set syz0 is full, maxelem 0 reached [ 671.564962][T14233] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1905'. [ 672.054728][ T30] audit: type=1400 audit(1767205888.077:964): avc: denied { ioctl } for pid=14237 comm="syz.3.1908" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xf50d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 672.178651][T14242] FAULT_INJECTION: forcing a failure. [ 672.178651][T14242] name failslab, interval 1, probability 0, space 0, times 0 [ 672.202432][T14242] CPU: 0 UID: 0 PID: 14242 Comm: syz.4.1910 Tainted: G L syzkaller #0 PREEMPT(full) [ 672.202462][T14242] Tainted: [L]=SOFTLOCKUP [ 672.202469][T14242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 672.202479][T14242] Call Trace: [ 672.202485][T14242] [ 672.202492][T14242] dump_stack_lvl+0x16c/0x1f0 [ 672.202519][T14242] should_fail_ex+0x512/0x640 [ 672.202548][T14242] should_failslab+0xc2/0x120 [ 672.202571][T14242] kmem_cache_alloc_noprof+0x83/0x770 [ 672.202588][T14242] ? skb_clone+0x190/0x3f0 [ 672.202610][T14242] ? skb_clone+0x190/0x3f0 [ 672.202625][T14242] skb_clone+0x190/0x3f0 [ 672.202643][T14242] netlink_deliver_tap+0xabd/0xd30 [ 672.202669][T14242] netlink_dump+0xa5f/0xd30 [ 672.202690][T14242] ? __pfx_netlink_dump+0x10/0x10 [ 672.202728][T14242] netlink_recvmsg+0x7dc/0xa90 [ 672.202749][T14242] ? __pfx_netlink_recvmsg+0x10/0x10 [ 672.202771][T14242] ? iovec_from_user+0xbb/0x140 [ 672.202802][T14242] ____sys_recvmsg+0x5f9/0x6b0 [ 672.202827][T14242] ? __pfx_____sys_recvmsg+0x10/0x10 [ 672.202857][T14242] ? __lock_acquire+0x436/0x2890 [ 672.202886][T14242] ___sys_recvmsg+0x114/0x1a0 [ 672.202904][T14242] ? __pfx____sys_recvmsg+0x10/0x10 [ 672.202935][T14242] ? __pfx___might_resched+0x10/0x10 [ 672.202953][T14242] do_recvmmsg+0x2fe/0x750 [ 672.202973][T14242] ? __pfx_do_recvmmsg+0x10/0x10 [ 672.202993][T14242] ? __mutex_unlock_slowpath+0x161/0x790 [ 672.203022][T14242] ? __fget_files+0x20e/0x3c0 [ 672.203050][T14242] __x64_sys_recvmmsg+0x22a/0x280 [ 672.203069][T14242] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 672.203094][T14242] do_syscall_64+0xcd/0xf80 [ 672.203118][T14242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.203135][T14242] RIP: 0033:0x7ff2f8d8f749 [ 672.203156][T14242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 672.203171][T14242] RSP: 002b:00007ff2f9c1a038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 672.203187][T14242] RAX: ffffffffffffffda RBX: 00007ff2f8fe5fa0 RCX: 00007ff2f8d8f749 [ 672.203199][T14242] RDX: 0000000000000003 RSI: 000020000000a1c0 RDI: 0000000000000003 [ 672.203209][T14242] RBP: 00007ff2f9c1a090 R08: 0000000000000000 R09: 0000000000000000 [ 672.203219][T14242] R10: 0000000000002202 R11: 0000000000000246 R12: 0000000000000001 [ 672.203230][T14242] R13: 00007ff2f8fe6038 R14: 00007ff2f8fe5fa0 R15: 00007ffea9f6cc18 [ 672.203255][T14242] [ 672.705257][ T5820] Bluetooth: hci2: command 0x0406 tx timeout [ 672.711380][ T5820] Bluetooth: hci6: command 0x2016 tx timeout [ 673.422428][ T30] audit: type=1804 audit(1767205889.417:965): pid=14264 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1913" name="/newroot/422/file0" dev="tmpfs" ino=2283 res=1 errno=0 [ 673.477748][T14254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 673.512313][ T30] audit: type=1400 audit(1767205889.497:966): avc: denied { create } for pid=14253 comm="syz.3.1911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 673.552390][T14267] xt_cgroup: invalid path, errno=-2 [ 674.541418][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.549558][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.559444][ T6006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.567988][ T1207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.577037][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.590265][ T5958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.385843][ T5820] Bluetooth: hci2: command 0x0406 tx timeout [ 675.850544][ T30] audit: type=1400 audit(1767205891.867:967): avc: denied { mount } for pid=14286 comm="syz.1.1920" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 676.014232][ T30] audit: type=1400 audit(1767205892.037:968): avc: denied { watch } for pid=14286 comm="syz.1.1920" path="/424/file0" dev="tmpfs" ino=2294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 676.146246][ T30] audit: type=1400 audit(1767205892.037:969): avc: denied { watch_sb } for pid=14286 comm="syz.1.1920" path="/424/file0" dev="tmpfs" ino=2294 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 676.342626][T14291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1921'. [ 676.367016][T14291] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1921'. [ 676.473127][ T1086] net_ratelimit: 3 callbacks suppressed [ 676.473142][ T1086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.487498][ T5958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.496102][T10660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.603486][T14298] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1923'. [ 676.616413][T14298] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1923'. [ 676.626508][ T30] audit: type=1400 audit(1767205892.617:970): avc: denied { shutdown } for pid=14293 comm="syz.4.1922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 676.649047][T14298] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1923'. [ 676.664835][T14298] 9pnet_virtio: no channels available for device syz [ 676.757398][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.616415][T14308] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20004 [ 677.632974][T14308] IPVS: sh: FWM 3 0x00000003 - no destination available [ 677.640026][T14308] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.648316][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 677.689337][T14308] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.761992][ T5958] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 677.780141][T14307] netlink: 'syz.4.1924': attribute type 27 has an invalid length. [ 677.822194][ T1207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.892465][T14304] syzkaller1: entered promiscuous mode [ 677.897972][T14304] syzkaller1: entered allmulticast mode [ 677.949648][ T5958] usb 2-1: Using ep0 maxpacket: 32 [ 678.034517][ T5958] usb 2-1: config 0 has no interfaces? [ 678.171112][ T5958] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 678.184669][ T5958] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 678.199647][ T5958] usb 2-1: Product: syz [ 678.205172][ T5958] usb 2-1: Manufacturer: syz [ 678.212139][ T5958] usb 2-1: SerialNumber: syz [ 678.223269][ T5958] usb 2-1: config 0 descriptor?? [ 678.435923][ T1207] usb 2-1: USB disconnect, device number 62 [ 679.405664][T14324] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1926'. [ 679.511572][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.273830][ T30] audit: type=1400 audit(1767205896.287:971): avc: denied { unmount } for pid=14335 comm="syz.3.1933" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 680.335207][ T49] Process accounting resumed [ 680.491944][T14310] lo speed is unknown, defaulting to 1000 [ 681.190199][T14343] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 681.196977][T14345] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 681.212748][T14343] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 681.237310][T14345] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 681.247397][T14345] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 681.256089][T14343] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 681.482057][T14343] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 681.613716][T14343] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 681.693019][T14343] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 681.919857][T14343] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 681.942090][T14343] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 682.144530][ T1073] net_ratelimit: 7 callbacks suppressed [ 682.144546][ T1073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.160163][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.169940][ T5958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.386028][ T6006] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 683.001693][ T30] audit: type=1400 audit(1767205898.617:972): avc: denied { getopt } for pid=14381 comm="syz.3.1945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 683.059232][T14389] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20004 [ 683.065823][ T6006] usb 5-1: config 8 has an invalid interface number: 80 but max is 0 [ 683.068189][T14389] IPVS: sh: FWM 3 0x00000003 - no destination available [ 683.083414][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 683.112911][ T6006] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 683.124488][ T6006] usb 5-1: config 8 has no interface number 0 [ 683.128420][T14389] netlink: 'syz.1.1946': attribute type 27 has an invalid length. [ 683.161344][ T6006] usb 5-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 683.168520][T14389] syzkaller1: entered promiscuous mode [ 683.239314][T14389] syzkaller1: entered allmulticast mode [ 683.398994][T14388] futex_wake_op: syz.9.1947 tries to shift op by -1; fix this program [ 683.407377][ T6006] usb 5-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 683.420430][T14388] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14388 comm=syz.9.1947 [ 683.436462][ T6006] usb 5-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 683.548411][ T6006] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 683.565275][ T6006] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.592929][ T6006] usb 5-1: NFC: intf ffff888055610000 id ffffffff8f325300 [ 684.088582][ T30] audit: type=1400 audit(1767205900.107:973): avc: denied { ioctl } for pid=14365 comm="syz.4.1942" path="socket:[43134]" dev="sockfs" ino=43134 ioctlcmd=0xf50f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 684.135589][ T6006] usb 5-1: USB disconnect, device number 46 [ 684.323566][T14399] unsupported nlmsg_type 40 [ 684.634609][T14409] fuse: Bad value for 'fd' [ 684.640282][T14409] Set syz0 is full, maxelem 0 reached [ 685.899248][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.905941][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.935080][ T5958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.968251][T14429] futex_wake_op: syz.9.1960 tries to shift op by -1; fix this program [ 685.986583][ T30] audit: type=1400 audit(1767205902.007:974): avc: denied { read } for pid=14430 comm="syz.1.1959" name="file2" dev="tmpfs" ino=2335 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 686.295633][T14435] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20004 [ 686.303599][T14435] netlink: 'syz.0.1961': attribute type 27 has an invalid length. [ 686.322488][T14429] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14429 comm=syz.9.1960 [ 686.392035][ T30] audit: type=1400 audit(1767205902.007:975): avc: denied { open } for pid=14430 comm="syz.1.1959" path="/432/file2" dev="tmpfs" ino=2335 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 686.549372][ T30] audit: type=1400 audit(1767205902.567:976): avc: denied { ioctl } for pid=14430 comm="syz.1.1959" path="/432/file2" dev="tmpfs" ino=2335 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 686.677805][T14444] comedi comedi0: Minor 3 specified more than once! [ 687.036518][ T30] audit: type=1400 audit(1767205903.057:977): avc: denied { mount } for pid=14442 comm="syz.4.1963" name="/" dev="hugetlbfs" ino=43183 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 687.558550][ T30] audit: type=1400 audit(1767205903.577:978): avc: denied { getopt } for pid=14454 comm="syz.0.1966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 687.582060][ T30] audit: type=1400 audit(1767205903.607:979): avc: denied { setopt } for pid=14454 comm="syz.0.1966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 688.186105][ T3950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.194931][ T6063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.206067][T11928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.219796][T10660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.228625][ T6063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.236722][ T6063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.253705][ T6006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.297436][ T30] audit: type=1400 audit(1767205904.317:980): avc: denied { read } for pid=14464 comm="syz.1.1970" path="socket:[44121]" dev="sockfs" ino=44121 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 688.362878][T14469] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17927 sclass=netlink_route_socket pid=14469 comm=syz.9.1971 [ 689.031966][T10660] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 689.222482][T10660] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 689.270086][T10660] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 689.309560][T10660] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.935255][ T4168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.944421][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.953129][ T5958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.974940][T10660] usb 4-1: config 0 descriptor?? [ 690.227737][T10660] usbhid 4-1:0.0: can't add hid device: -71 [ 690.252079][T10660] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 690.293060][T10660] usb 4-1: USB disconnect, device number 17 [ 690.302966][ T30] audit: type=1400 audit(1767205906.327:981): avc: denied { bind } for pid=14464 comm="syz.1.1970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 691.348673][T14497] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20004 [ 691.376575][T14497] netlink: 'syz.3.1977': attribute type 27 has an invalid length. [ 691.499722][T14497] syzkaller1: entered promiscuous mode [ 691.505497][T14497] syzkaller1: entered allmulticast mode [ 691.560903][T14496] futex_wake_op: syz.0.1974 tries to shift op by -1; fix this program [ 691.711955][T14496] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14496 comm=syz.0.1974 [ 692.479406][ T30] audit: type=1400 audit(1767205908.497:982): avc: denied { append } for pid=14510 comm="syz.4.1982" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 693.262355][ T13] net_ratelimit: 7 callbacks suppressed [ 693.262372][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.277006][ T1207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.342833][ T6006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.431285][T10660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.382399][ T1207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.566253][T14541] futex_wake_op: syz.4.1991 tries to shift op by -1; fix this program [ 694.739610][T14518] lo speed is unknown, defaulting to 1000 [ 694.812906][T14542] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14542 comm=syz.4.1991 [ 694.847672][T14542] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1991'. [ 695.024214][ T3950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.032915][T10660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.064087][ T5958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.452986][ T6063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.218069][ T30] audit: type=1400 audit(1767205912.237:983): avc: denied { write } for pid=14557 comm="syz.1.1988" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 696.462648][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.809157][T14568] tipc: Enabling of bearer rejected, failed to enable media [ 699.042301][ T8080] net_ratelimit: 2 callbacks suppressed [ 699.042319][ T8080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.072077][ T6063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.080659][ T1207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.088764][ T5932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.830585][ T5932] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 700.004095][ T5932] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 700.025486][ T5932] usb 2-1: config 1 has no interface number 0 [ 700.045546][ T5932] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 700.087402][ T5932] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 700.121945][ T5932] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 700.182105][ T5932] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 700.186129][ T1207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.222494][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.242014][ T5932] usb 2-1: Product: syz [ 700.246176][ T5932] usb 2-1: Manufacturer: syz [ 700.250762][ T5932] usb 2-1: SerialNumber: syz [ 700.276046][T14587] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 700.512262][ T30] audit: type=1326 audit(1767205916.527:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14586 comm="syz.1.2005" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe6b3b8f749 code=0x0 [ 700.760407][ T38] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.768958][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.777648][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.367279][ T6063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.428722][ T1207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.495847][ T5932] usb 2-1: Error in usbnet_get_endpoints (-71) [ 702.513988][ T5932] usb 2-1: USB disconnect, device number 63 [ 702.882794][T14632] futex_wake_op: syz.3.2018 tries to shift op by -1; fix this program [ 703.008749][T14626] syzkaller1: entered promiscuous mode [ 703.014278][T14626] syzkaller1: entered allmulticast mode [ 703.172737][T14636] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14636 comm=syz.3.2018 [ 703.225669][T14636] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2018'. [ 703.391978][ T1207] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 703.532359][ T1207] usb 2-1: device descriptor read/64, error -71 [ 703.782050][ T1207] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 703.971841][ T1207] usb 2-1: device descriptor read/64, error -71 [ 703.995334][ T30] audit: type=1400 audit(1767205919.947:985): avc: denied { bind } for pid=14649 comm="syz.0.2020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 704.103481][ T1207] usb usb2-port1: attempt power cycle [ 704.207762][T14659] random: crng reseeded on system resumption [ 704.223638][ T30] audit: type=1400 audit(1767205920.227:986): avc: denied { write } for pid=14657 comm="syz.3.2027" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 704.256996][ T30] audit: type=1400 audit(1767205920.227:987): avc: denied { ioctl } for pid=14657 comm="syz.3.2027" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 704.470001][ T30] audit: type=1400 audit(1767205920.487:988): avc: denied { create } for pid=14664 comm="syz.4.2028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 704.472027][ T1207] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 704.499038][ T30] audit: type=1400 audit(1767205920.527:989): avc: denied { setopt } for pid=14664 comm="syz.4.2028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 704.519628][ T1207] usb 2-1: device descriptor read/8, error -71 [ 704.542445][ T6063] net_ratelimit: 3 callbacks suppressed [ 704.542456][ T6063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.557595][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.566454][ T6063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.575447][ T5932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.597575][T14668] FAULT_INJECTION: forcing a failure. [ 704.597575][T14668] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 705.223532][T14668] CPU: 1 UID: 0 PID: 14668 Comm: syz.4.2029 Tainted: G L syzkaller #0 PREEMPT(full) [ 705.223558][T14668] Tainted: [L]=SOFTLOCKUP [ 705.223564][T14668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 705.223574][T14668] Call Trace: [ 705.223580][T14668] [ 705.223586][T14668] dump_stack_lvl+0x16c/0x1f0 [ 705.223613][T14668] should_fail_ex+0x512/0x640 [ 705.223639][T14668] _copy_from_user+0x2e/0xd0 [ 705.223664][T14668] snd_pcm_oss_write2+0x1c2/0x410 [ 705.223689][T14668] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 705.223709][T14668] ? snd_pcm_kernel_ioctl+0x267/0x2e0 [ 705.223731][T14668] snd_pcm_oss_write+0x710/0xa10 [ 705.223748][T14668] ? security_file_permission+0x71/0x210 [ 705.223766][T14668] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 705.223780][T14668] vfs_write+0x2a0/0x11d0 [ 705.223797][T14668] ? __pfx_vfs_write+0x10/0x10 [ 705.223809][T14668] ? find_held_lock+0x2b/0x80 [ 705.223825][T14668] ? __fget_files+0x204/0x3c0 [ 705.223842][T14668] ? __fget_files+0x20e/0x3c0 [ 705.223860][T14668] ksys_write+0x12a/0x250 [ 705.223873][T14668] ? __pfx_ksys_write+0x10/0x10 [ 705.223890][T14668] do_syscall_64+0xcd/0xf80 [ 705.223905][T14668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.223916][T14668] RIP: 0033:0x7ff2f8d8f749 [ 705.223931][T14668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 705.223941][T14668] RSP: 002b:00007ff2f9bf9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 705.223952][T14668] RAX: ffffffffffffffda RBX: 00007ff2f8fe6090 RCX: 00007ff2f8d8f749 [ 705.223959][T14668] RDX: 0000000000004000 RSI: 00002000000012c0 RDI: 0000000000000003 [ 705.223965][T14668] RBP: 00007ff2f9bf9090 R08: 0000000000000000 R09: 0000000000000000 [ 705.223971][T14668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 705.223977][T14668] R13: 00007ff2f8fe6128 R14: 00007ff2f8fe6090 R15: 00007ffea9f6cc18 [ 705.223991][T14668] [ 705.622446][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.682509][ T1207] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 705.702497][ T1207] usb 2-1: device descriptor read/8, error -71 [ 705.772025][ T5932] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 705.842115][ T1207] usb usb2-port1: unable to enumerate USB device [ 705.888360][T14688] futex_wake_op: syz.9.2036 tries to shift op by -1; fix this program [ 705.907520][T14688] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14688 comm=syz.9.2036 [ 705.942003][ T5932] usb 5-1: device descriptor read/64, error -71 [ 705.952703][T14691] netlink: 'syz.9.2037': attribute type 4 has an invalid length. [ 705.960484][T14691] netlink: 152 bytes leftover after parsing attributes in process `syz.9.2037'. [ 705.975842][T14691] : renamed from bond0 (while UP) [ 706.051010][ T30] audit: type=1400 audit(1767205922.067:990): avc: denied { listen } for pid=14694 comm="syz.9.2039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 706.071803][ T30] audit: type=1400 audit(1767205922.097:991): avc: denied { accept } for pid=14694 comm="syz.9.2039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 706.295454][ T5932] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 706.347449][T14705] fuse: Bad value for 'fd' [ 706.353494][T14705] Set syz0 is full, maxelem 0 reached [ 706.795833][ T1207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.851344][ T5932] usb 5-1: device descriptor read/64, error -71 [ 707.018169][ T5932] usb usb5-port1: attempt power cycle [ 707.538887][T14724] futex_wake_op: syz.9.2047 tries to shift op by -1; fix this program [ 707.553938][T14724] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14724 comm=syz.9.2047 [ 707.594500][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.631990][ T49] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 707.761995][ T5932] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 707.792547][ T5932] usb 5-1: device descriptor read/8, error -71 [ 707.913793][ T6063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.922831][ T49] usb 4-1: device descriptor read/64, error -71 [ 708.163106][ T49] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 708.362106][ T49] usb 4-1: device descriptor read/64, error -71 [ 708.377911][ T5932] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 708.402607][ T5932] usb 5-1: device descriptor read/8, error -71 [ 708.495513][ T49] usb usb4-port1: attempt power cycle [ 708.630008][ T5932] usb usb5-port1: unable to enumerate USB device [ 708.701415][T14744] program syz.1.2051 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 708.892725][ T49] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 708.922812][ T49] usb 4-1: device descriptor read/8, error -71 [ 709.024446][ T1207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.182025][ T49] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 709.182133][ T5932] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 709.202357][ T49] usb 4-1: device descriptor read/8, error -71 [ 709.312231][ T49] usb usb4-port1: unable to enumerate USB device [ 709.321996][ T5932] usb 5-1: device descriptor read/64, error -71 [ 709.531951][ T5866] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 709.560328][T14762] futex_wake_op: syz.0.2058 tries to shift op by -1; fix this program [ 709.570997][T14762] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14762 comm=syz.0.2058 [ 709.572123][ T5932] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 709.733160][ T5866] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 709.741301][ T5866] usb 2-1: config 1 has no interface number 0 [ 709.747546][ T5866] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 709.760056][ T5866] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 710.231667][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.284620][ T5932] usb 5-1: device descriptor read/64, error -71 [ 710.291109][ T5866] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 710.304437][T10660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.315223][ T5866] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 710.332257][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.340274][ T5866] usb 2-1: Product: syz [ 710.349505][ T5866] usb 2-1: Manufacturer: syz [ 710.356966][ T5866] usb 2-1: SerialNumber: syz [ 710.372017][T14772] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 710.378553][T14772] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 710.386427][T14760] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 710.397318][ T5932] usb usb5-port1: attempt power cycle [ 710.406870][T14772] vhci_hcd vhci_hcd.0: Device attached [ 710.422499][ T30] audit: type=1400 audit(1767205926.447:992): avc: denied { append } for pid=14768 comm="syz.3.2061" name="event3" dev="devtmpfs" ino=988 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 710.592015][ T49] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 710.610790][ T30] audit: type=1326 audit(1767205926.627:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14759 comm="syz.1.2057" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe6b3b8f749 code=0x0 [ 710.642892][ T5958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.662037][ T49] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 710.703914][ T9] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 710.903014][ T5932] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 711.262347][ T6063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.278414][ T5932] usb 5-1: device descriptor read/8, error -71 [ 712.029989][ T9] usb 4-1: config 0 has no interfaces? [ 712.036298][ T9] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 712.046578][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.064600][ T9] usb 4-1: config 0 descriptor?? [ 712.362703][ T5866] usb 2-1: Error in usbnet_get_endpoints (-71) [ 712.376816][ T6063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.380930][ T5866] usb 2-1: USB disconnect, device number 68 [ 712.456600][T14798] futex_wake_op: syz.1.2069 tries to shift op by -1; fix this program [ 712.469984][T14773] usbip_core: unknown command [ 712.487184][ T6063] usb 4-1: USB disconnect, device number 22 [ 712.501923][T14773] vhci_hcd: unknown pdu 129 [ 712.532025][ T49] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 712.582321][T14773] usbip_core: unknown command [ 712.590395][ T13] vhci_hcd vhci_hcd.3: stop threads [ 712.607067][ T13] vhci_hcd vhci_hcd.3: release socket [ 712.662001][ T49] usb 39-1: device descriptor read/64, error -71 [ 712.676428][T14803] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2068'. [ 712.689466][T14803] FAULT_INJECTION: forcing a failure. [ 712.689466][T14803] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 712.702692][T14803] CPU: 1 UID: 0 PID: 14803 Comm: syz.4.2068 Tainted: G L syzkaller #0 PREEMPT(full) [ 712.702719][T14803] Tainted: [L]=SOFTLOCKUP [ 712.702725][T14803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 712.702735][T14803] Call Trace: [ 712.702742][T14803] [ 712.702750][T14803] dump_stack_lvl+0x16c/0x1f0 [ 712.702775][T14803] should_fail_ex+0x512/0x640 [ 712.702804][T14803] _copy_from_iter+0x2a4/0x16c0 [ 712.702832][T14803] ? __alloc_skb+0x220/0x410 [ 712.702854][T14803] ? __alloc_skb+0x35d/0x410 [ 712.702878][T14803] ? __pfx__copy_from_iter+0x10/0x10 [ 712.702902][T14803] ? netlink_autobind.isra.0+0x158/0x370 [ 712.702931][T14803] netlink_sendmsg+0x820/0xdd0 [ 712.702957][T14803] ? __pfx_netlink_sendmsg+0x10/0x10 [ 712.702986][T14803] ____sys_sendmsg+0xa5d/0xc30 [ 712.703009][T14803] ? copy_msghdr_from_user+0x10a/0x160 [ 712.703025][T14803] ? __pfx_____sys_sendmsg+0x10/0x10 [ 712.703052][T14803] ? __lock_acquire+0x436/0x2890 [ 712.703076][T14803] ___sys_sendmsg+0x134/0x1d0 [ 712.703094][T14803] ? __pfx____sys_sendmsg+0x10/0x10 [ 712.703111][T14803] ? lock_acquire+0x179/0x330 [ 712.703157][T14803] __sys_sendmsg+0x16d/0x220 [ 712.703175][T14803] ? __pfx___sys_sendmsg+0x10/0x10 [ 712.703191][T14803] ? __pfx___schedule+0x10/0x10 [ 712.703216][T14803] ? rcu_is_watching+0x12/0xc0 [ 712.703240][T14803] do_syscall_64+0xcd/0xf80 [ 712.703263][T14803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.703280][T14803] RIP: 0033:0x7ff2f8d8f749 [ 712.703295][T14803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 712.703311][T14803] RSP: 002b:00007ff2f9bd8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 712.703328][T14803] RAX: ffffffffffffffda RBX: 00007ff2f8fe6180 RCX: 00007ff2f8d8f749 [ 712.703339][T14803] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 000000000000000a [ 712.703349][T14803] RBP: 00007ff2f9bd8090 R08: 0000000000000000 R09: 0000000000000000 [ 712.703360][T14803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 712.703370][T14803] R13: 00007ff2f8fe6218 R14: 00007ff2f8fe6180 R15: 00007ffea9f6cc18 [ 712.703394][T14803] [ 712.862120][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 713.212148][ T49] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 713.247011][T14809] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14809 comm=syz.1.2069 [ 713.401652][T14812] delete_channel: no stack [ 713.635593][ T1207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.679845][ T5932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.867994][T14805] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2069'. [ 714.479320][ T30] audit: type=1326 audit(1767205930.497:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14823 comm="syz.9.2074" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb90ed8f749 code=0x0 [ 714.705365][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.177831][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.654992][T14844] ceph: No source [ 716.702324][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.830464][T14848] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 716.843741][T14848] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 716.858746][T14848] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 716.868804][T14848] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 716.882293][T14848] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 716.892774][T14848] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 716.906403][T14848] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 716.916381][T14848] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 716.926712][T14848] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 717.182874][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.922569][ T30] audit: type=1400 audit(1767205933.947:995): avc: denied { connect } for pid=14860 comm="syz.1.2087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 718.393034][ T5866] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 718.415455][ T6063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.613515][ T5866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 718.641195][ T5866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 718.651776][ T5866] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 718.675914][ T5866] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 718.695324][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.716016][ T5866] usb 4-1: config 0 descriptor?? [ 719.915331][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.936732][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.947754][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.027709][T14874] fuse: Bad value for 'fd' [ 720.045559][T14874] Set syz0 is full, maxelem 0 reached [ 720.052448][ T5866] usbhid 4-1:0.0: can't add hid device: -71 [ 720.075857][ T5866] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 720.119275][ T5866] usb 4-1: USB disconnect, device number 23 [ 720.134025][T14876] futex_wake_op: syz.3.2092 tries to shift op by -1; fix this program [ 720.214485][T14878] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 720.631773][T14890] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2092'. [ 720.689236][T14885] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2092'. [ 720.942492][ T1207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.022191][ T5866] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 721.144462][ T30] audit: type=1326 audit(1767205937.167:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14892 comm="syz.9.2095" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb90ed8f749 code=0x0 [ 721.302072][ T5866] usb 2-1: Using ep0 maxpacket: 8 [ 721.319680][ T5866] usb 2-1: unable to get BOS descriptor or descriptor too short [ 721.795494][ T5866] usb 2-1: config 4 interface 0 has no altsetting 0 [ 721.806413][ T5866] usb 2-1: string descriptor 0 read error: -22 [ 721.823752][ T5866] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 721.840308][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.882963][ T5866] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 721.917858][ T5866] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 721.947265][ T5866] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 721.963203][ T5866] usb 2-1: media controller created [ 721.982453][ T6063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.988155][ T5866] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 722.122067][ T1207] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 722.211749][T14901] netlink: 'syz.0.2096': attribute type 4 has an invalid length. [ 722.293276][ T1207] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 722.323181][ T1207] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 722.336220][ T1207] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.373180][ T1207] usb 5-1: config 0 descriptor?? [ 722.396758][ T1207] pwc: Askey VC010 type 2 USB webcam detected. [ 722.593323][ T1207] pwc: send_video_command error -71 [ 722.603450][ T1207] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 722.618717][ T1207] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 722.631807][ T1207] usb 5-1: USB disconnect, device number 55 [ 722.943002][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.236834][ T5975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.256280][ T5866] zl10353_read_register: readreg error (reg=127, ret==0) [ 723.324837][ T5866] usb 2-1: USB disconnect, device number 69 [ 723.481979][ T1207] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 723.654023][T14920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2100'. [ 723.663426][T14920] netlink: 'syz.1.2100': attribute type 5 has an invalid length. [ 723.671252][T14920] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2100'. [ 723.736992][T14920] geneve2: entered promiscuous mode [ 723.742792][T14920] geneve2: entered allmulticast mode [ 723.804152][ T3912] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 723.915030][ T3912] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 723.933180][ T3912] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 723.953386][ T3912] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 724.043713][ T1207] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 724.065300][ T1207] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 724.084887][ T1207] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.150962][ T1207] usb 5-1: config 0 descriptor?? [ 724.174982][ T1207] pwc: Askey VC010 type 2 USB webcam detected. [ 724.351282][ T5975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.398504][T14929] delete_channel: no stack [ 724.442438][ T30] audit: type=1400 audit(1767205940.457:997): avc: denied { create } for pid=14931 comm="syz.9.2105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 724.511104][ T30] audit: type=1400 audit(1767205940.457:998): avc: denied { append } for pid=14933 comm="syz.1.2106" name="sg0" dev="devtmpfs" ino=785 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 724.581013][ T1207] pwc: recv_control_msg error -32 req 02 val 2b00 [ 724.599399][ T1207] pwc: recv_control_msg error -32 req 02 val 2700 [ 724.601305][ T30] audit: type=1400 audit(1767205940.467:999): avc: denied { map } for pid=14933 comm="syz.1.2106" path="/dev/sg0" dev="devtmpfs" ino=785 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 724.901988][ T1207] pwc: recv_control_msg error -32 req 02 val 2c00 [ 724.969764][ T30] audit: type=1400 audit(1767205940.467:1000): avc: denied { execute } for pid=14933 comm="syz.1.2106" path="/dev/sg0" dev="devtmpfs" ino=785 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 724.970381][ T1207] pwc: recv_control_msg error -32 req 04 val 1000 [ 725.032289][T14946] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2107'. [ 725.162456][ T1207] pwc: recv_control_msg error -32 req 04 val 1300 [ 725.179094][ T30] audit: type=1400 audit(1767205940.977:1001): avc: denied { mount } for pid=14943 comm="syz.0.2107" name="/" dev="rpc_pipefs" ino=45369 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 725.182862][ T1207] pwc: recv_control_msg error -32 req 04 val 1400 [ 725.221122][ T1207] pwc: recv_control_msg error -32 req 02 val 2000 [ 725.472617][T14959] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 725.504208][ T30] audit: type=1400 audit(1767205941.487:1002): avc: denied { mounton } for pid=14952 comm="syz.3.2110" path="/113/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 725.685487][ T5975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.728899][ T30] audit: type=1400 audit(1767205941.517:1003): avc: denied { read } for pid=14952 comm="syz.3.2110" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 725.979474][ T30] audit: type=1400 audit(1767205941.547:1004): avc: denied { read } for pid=14952 comm="syz.3.2110" name="/" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 726.063063][ T30] audit: type=1400 audit(1767205941.547:1005): avc: denied { open } for pid=14952 comm="syz.3.2110" path="/113/file0" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 726.784086][ T5975] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 726.904128][T14898] bridge0: port 3(gretap0) entered disabled state [ 726.926803][ T30] audit: type=1400 audit(1767205941.557:1006): avc: denied { read } for pid=14952 comm="syz.3.2110" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 727.017687][ T5975] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 727.040589][ T5975] usb 4-1: config 1 has no interface number 0 [ 727.108246][T14975] overlayfs: failed to clone upperpath [ 727.141670][ T5975] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 727.220232][ T5975] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 727.266264][T14898] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.273630][T14898] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.291841][ T5975] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 727.399816][ T5975] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 727.424004][ T5975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.495291][ T5975] usb 4-1: Product: syz [ 727.524430][ T5975] usb 4-1: Manufacturer: syz [ 727.562312][ T5975] usb 4-1: SerialNumber: syz [ 727.610510][T14968] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 728.894257][T14898] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 729.105225][T14898] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 729.444247][T14984] binder: 14982:14984 ioctl c0306201 200000000540 returned -22 [ 729.459786][T14985] delete_channel: no stack [ 729.717182][T14898] veth0_macvtap: left allmulticast mode [ 729.732861][T14898] 0ªX¹¦D: left allmulticast mode [ 729.891765][T14898] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 730.129055][T14898] vlan2: left promiscuous mode [ 730.155977][T14898] bridge0: left promiscuous mode [ 730.166516][T14898] vlan2: left allmulticast mode [ 730.171937][T14898] bridge0: left allmulticast mode [ 730.302257][ T1207] pwc: recv_control_msg error -110 req 04 val 1500 [ 730.765395][ T5866] lo speed is unknown, defaulting to 1000 [ 730.771139][ T5866] syz0: Port: 1 Link DOWN [ 730.778742][ T9] lo speed is unknown, defaulting to 1000 [ 730.803396][ T1207] pwc: recv_control_msg error -32 req 02 val 2500 [ 730.810175][ T1207] pwc: recv_control_msg error -32 req 02 val 2400 [ 730.831077][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 730.838522][ T1207] pwc: recv_control_msg error -32 req 02 val 2600 [ 730.845328][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 730.853035][ T1207] pwc: recv_control_msg error -32 req 02 val 2900 [ 730.859871][ T1207] pwc: recv_control_msg error -71 req 02 val 2800 [ 730.862248][ T4020] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.876484][ T5975] usb 4-1: Error in usbnet_get_endpoints (-71) [ 730.897403][ T1207] pwc: recv_control_msg error -71 req 04 val 1100 [ 730.920772][ T4020] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.930055][ T4020] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.939096][ T4020] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.004917][ T1207] pwc: recv_control_msg error -71 req 04 val 1200 [ 731.022343][ T1207] pwc: Registered as video103. [ 731.053789][ T1207] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input41 [ 731.064070][ T5975] usb 4-1: USB disconnect, device number 24 [ 731.103164][ T1207] usb 5-1: USB disconnect, device number 56 [ 731.151683][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.183002][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 731.183353][T15006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 731.287537][T15009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2120'. [ 731.352215][ T9] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 731.501989][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 731.508538][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 731.519673][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 731.529515][ T9] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 731.538605][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.552162][ T9] usb 2-1: config 0 descriptor?? [ 731.561939][ T5975] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 731.723414][ T5975] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 731.735046][ T5975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 731.746130][ T5975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 731.759486][ T5975] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 731.768870][ T5975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.779391][ T5975] usb 4-1: Product: syz [ 731.785147][ T5975] usb 4-1: Manufacturer: syz [ 731.789836][ T5975] usb 4-1: SerialNumber: syz [ 731.804381][ T5975] usb 4-1: config 0 descriptor?? [ 731.812987][ T5975] streamzap 4-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 731.980566][ T9] ft260 0003:0403:6030.0012: unknown main item tag 0x7 [ 732.028471][ T5975] usb 4-1: USB disconnect, device number 25 [ 732.116203][T15012] lo speed is unknown, defaulting to 1000 [ 732.260773][ T9] ft260 0003:0403:6030.0012: failed to retrieve chip version [ 732.353690][ T9] ft260 0003:0403:6030.0012: probe with driver ft260 failed with error -71 [ 732.405145][ T9] usb 2-1: USB disconnect, device number 70 [ 733.362913][T15028] delete_channel: no stack [ 733.600462][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 733.600476][ T30] audit: type=1326 audit(1767205949.617:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15029 comm="syz.9.2131" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb90ed8f749 code=0x0 [ 733.811968][ T9] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 734.864027][ T1207] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 734.891963][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 734.911649][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 735.008924][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 735.030950][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 735.062224][ T1207] usb 5-1: Using ep0 maxpacket: 16 [ 735.084378][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 735.117842][ T1207] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 735.127274][ T1207] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.144140][ T1207] usb 5-1: Product: syz [ 735.144244][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 735.164604][ T1207] usb 5-1: Manufacturer: syz [ 735.174286][ T1207] usb 5-1: SerialNumber: syz [ 735.187992][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.207266][ T1207] usb 5-1: config 0 descriptor?? [ 735.219735][ T1207] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 735.243269][ T1207] usb 5-1: Detected FT-X [ 735.415541][ T30] audit: type=1400 audit(1767205951.427:1011): avc: denied { nlmsg_read } for pid=15033 comm="syz.0.2132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 735.501282][ T1207] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 735.602752][ T9] usb 2-1: GET_CAPABILITIES returned 0 [ 735.612783][ T9] usbtmc 2-1:16.0: can't read capabilities [ 735.850077][T15046] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2130'. [ 736.057356][ T1207] ftdi_sio 5-1:0.0: GPIO initialisation failed: -5 [ 736.077858][ T1207] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 736.285219][ T9] usb 5-1: USB disconnect, device number 57 [ 736.300481][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 736.314483][ T9] ftdi_sio 5-1:0.0: device disconnected [ 736.401463][T15049] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20004 [ 736.437339][T15049] IPVS: sh: FWM 3 0x00000003 - no destination available [ 736.497195][T15049] netlink: 'syz.3.2135': attribute type 27 has an invalid length. [ 736.777719][T15051] fuse: Bad value for 'fd' [ 736.789201][T15051] Set syz0 is full, maxelem 0 reached [ 736.822695][T15048] syzkaller1: entered promiscuous mode [ 736.828279][T15048] syzkaller1: entered allmulticast mode [ 736.923350][ T9] usb 2-1: USB disconnect, device number 71 [ 738.172007][ T6063] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 738.424635][T15074] delete_channel: no stack [ 738.548469][ T6063] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 738.567614][ T6063] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 739.162466][ T6063] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 739.175615][ T6063] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 739.189094][ T6063] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.199445][ T6063] usb 4-1: Product: syz [ 739.218240][ T6063] usb 4-1: Manufacturer: syz [ 739.244268][ T6063] usb 4-1: SerialNumber: syz [ 739.296670][ T6063] usb 4-1: config 0 descriptor?? [ 739.317266][T15061] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 739.333780][T15061] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 739.353070][ T6063] usb 4-1: ucan: probing device on interface #0 [ 739.976300][T15090] comedi: No check for data length of config insn id 3 is implemented [ 740.022751][T15090] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 740.062867][T15090] comedi: Assuming n=6195 is correct [ 740.181957][ T6063] usb 4-1: ucan: failed to retrieve device info [ 740.294063][ T6063] usb 4-1: ucan: probe failed; try to update the device firmware [ 740.310197][ T6063] usb 4-1: USB disconnect, device number 26 [ 740.342494][T15096] tmpfs: Bad value for 'mpol' [ 741.096632][T15108] delete_channel: no stack [ 742.189820][T15116] lo speed is unknown, defaulting to 1000 [ 743.565035][T15126] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 743.742364][T15129] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.2162'. [ 743.782113][T15129] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 744.970856][ T30] audit: type=1400 audit(1767205960.987:1012): avc: denied { map } for pid=15141 comm="syz.1.2166" path="socket:[46265]" dev="sockfs" ino=46265 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 745.022131][ T30] audit: type=1400 audit(1767205961.037:1013): avc: denied { ioctl } for pid=15136 comm="syz.3.2160" path="socket:[45782]" dev="sockfs" ino=45782 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 746.786505][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.801961][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.499655][T15180] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.2172'. [ 749.525374][T15180] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2172'. [ 750.348006][ T30] audit: type=1400 audit(1767205966.247:1014): avc: denied { accept } for pid=15184 comm="syz.1.2175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 750.852200][ T5866] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 751.052093][ T5866] usb 4-1: Using ep0 maxpacket: 16 [ 751.112529][ T5866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 751.124024][ T5866] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 751.172066][ T5866] usb 4-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 751.181152][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.205384][ T5866] usb 4-1: config 0 descriptor?? [ 752.243881][ T5866] nintendo 0003:057E:2019.0013: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.3-1/input0 [ 752.292235][T15206] nfs: Unknown parameter '' [ 754.261009][ T5866] nintendo 0003:057E:2019.0013: Failed to get joycon info; ret=-71 [ 754.313094][ T5866] nintendo 0003:057E:2019.0013: Failed to retrieve controller info; ret=-71 [ 754.321805][ T5866] nintendo 0003:057E:2019.0013: Failed to initialize controller; ret=-71 [ 754.521912][ T5866] nintendo 0003:057E:2019.0013: probe - fail = -71 [ 754.532086][ T5866] nintendo 0003:057E:2019.0013: probe with driver nintendo failed with error -71 [ 754.574687][ T5866] usb 4-1: USB disconnect, device number 27 [ 755.951960][ T5958] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 756.237955][ T5958] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 756.276112][ T5958] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 756.392028][ T5958] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 756.506820][ T5958] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 756.572918][ T5958] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.690836][ T5958] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 756.756433][ T5958] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 756.811610][ T5958] usb 5-1: USB disconnect, device number 58 [ 757.997442][ T30] audit: type=1400 audit(1767205974.017:1015): avc: denied { mount } for pid=15259 comm="syz.3.2194" name="/" dev="configfs" ino=1066 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 758.049509][ T30] audit: type=1400 audit(1767205974.047:1016): avc: denied { setopt } for pid=15259 comm="syz.3.2194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 759.239782][ T30] audit: type=1400 audit(1767205975.257:1017): avc: denied { write } for pid=15280 comm="syz.4.2202" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 759.306034][ T30] audit: type=1400 audit(1767205975.267:1018): avc: denied { ioctl } for pid=15280 comm="syz.4.2202" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 760.203460][ T30] audit: type=1400 audit(1767205976.227:1019): avc: denied { read write } for pid=15287 comm="syz.4.2205" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 760.231091][ T30] audit: type=1400 audit(1767205976.227:1020): avc: denied { open } for pid=15287 comm="syz.4.2205" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 761.032387][ T30] audit: type=1400 audit(1767205977.057:1021): avc: denied { mounton } for pid=15299 comm="syz.0.2196" path="/532/file0" dev="tmpfs" ino=2834 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 761.055747][T15300] fuse: Unknown parameter '' [ 761.197127][ T30] audit: type=1400 audit(1767205977.217:1022): avc: denied { bind } for pid=15305 comm="syz.3.2211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 761.277418][ T30] audit: type=1400 audit(1767205977.297:1023): avc: denied { read write } for pid=15302 comm="syz.4.2209" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 761.312018][T15304] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 761.319440][T15304] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 761.327138][ T30] audit: type=1400 audit(1767205977.297:1024): avc: denied { open } for pid=15302 comm="syz.4.2209" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 761.925112][T15315] netlink: 324 bytes leftover after parsing attributes in process `syz.1.2212'. [ 761.935302][T15315] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2212'. [ 762.159261][T15318] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2211'. [ 763.022120][ T49] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 763.922201][ T49] usb 5-1: Using ep0 maxpacket: 8 [ 763.930376][ T49] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 763.953370][ T49] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 764.523515][ T49] usb 5-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 764.546327][ T49] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.558311][ T49] usb 5-1: config 0 descriptor?? [ 764.971611][T15324] @0Ù: renamed from bond_slave_1 [ 764.985300][T15324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 765.006850][T15324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 766.280762][ T49] usbhid 5-1:0.0: can't add hid device: -71 [ 766.286859][ T49] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 766.381734][ T49] usb 5-1: USB disconnect, device number 59 [ 766.682202][T15347] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2221'. [ 767.386508][T15369] ipt_REJECT: TCP_RESET invalid for non-tcp [ 769.546500][ T30] audit: type=1400 audit(1767205985.567:1025): avc: denied { map } for pid=15390 comm="syz.9.2231" path="socket:[46701]" dev="sockfs" ino=46701 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 769.717635][T15397] netlink: 'syz.4.2232': attribute type 4 has an invalid length. [ 769.728015][T15397] netlink: 'syz.4.2232': attribute type 4 has an invalid length. [ 770.835336][ T6063] lo speed is unknown, defaulting to 1000 [ 770.841060][ T6063] syz0: Port: 1 Link ACTIVE [ 770.862044][ T5975] lo speed is unknown, defaulting to 1000 [ 770.867916][ T30] audit: type=1400 audit(1767205985.597:1026): avc: denied { read accept } for pid=15390 comm="syz.9.2231" path="socket:[46701]" dev="sockfs" ino=46701 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 772.146034][T15417] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 772.173527][T15417] syz_tun: entered allmulticast mode [ 772.421976][ T49] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 772.585644][ T49] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 772.602519][ T49] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.620767][ T49] usb 5-1: Product: syz [ 772.704690][ T49] usb 5-1: Manufacturer: syz [ 772.713546][ T30] audit: type=1400 audit(1767205988.737:1027): avc: denied { setopt } for pid=15424 comm="syz.1.2236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 772.721347][ T49] usb 5-1: SerialNumber: syz [ 772.788710][ T49] usb 5-1: config 0 descriptor?? [ 772.824610][ T49] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 773.112678][ T5975] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 773.120484][ T30] audit: type=1400 audit(1767205989.097:1028): avc: denied { setopt } for pid=15427 comm="syz.3.2244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 773.394193][ T49] gspca_sunplus: reg_r err -110 [ 774.161997][ T5975] usb 2-1: Using ep0 maxpacket: 8 [ 774.173900][ T5975] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 774.211381][ T5975] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 774.232676][ T5975] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 774.242164][ T5975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.384346][ T5975] usb 2-1: config 0 descriptor?? [ 775.398843][ T5975] hso 2-1:0.0: Can't find BULK IN endpoint [ 775.672992][ T5975] usb 2-1: USB disconnect, device number 72 [ 776.923722][T15476] random: crng reseeded on system resumption [ 776.942864][T15477] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2255'. [ 777.322301][ T30] audit: type=1400 audit(1767205993.297:1029): avc: denied { firmware_load } for pid=15474 comm="syz.1.2254" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 777.775877][ T30] audit: type=1400 audit(1767205993.787:1030): avc: denied { mount } for pid=15474 comm="syz.1.2254" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 778.812146][ T5975] usb 5-1: USB disconnect, device number 60 [ 778.818325][ T30] audit: type=1800 audit(1767205994.837:1031): pid=15490 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.9.2258" name="nullb0" dev="tmpfs" ino=1233 res=0 errno=0 [ 779.342051][ T5975] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 779.502166][ T5975] usb 4-1: Using ep0 maxpacket: 32 [ 779.512861][ T5975] usb 4-1: unable to get BOS descriptor or descriptor too short [ 779.528068][ T5975] usb 4-1: config 5 has an invalid interface number: 52 but max is 0 [ 779.538724][ T5975] usb 4-1: config 5 has no interface number 0 [ 779.559813][ T5975] usb 4-1: config 5 interface 52 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 779.581214][ T5975] usb 4-1: config 5 interface 52 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 779.607326][ T5975] usb 4-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=51.58 [ 779.623469][ T5975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.640553][ T5975] usb 4-1: Product: syz [ 779.650113][ T5975] usb 4-1: Manufacturer: syz [ 779.659468][ T5975] usb 4-1: SerialNumber: syz [ 780.106741][ T30] audit: type=1400 audit(1767205996.127:1032): avc: denied { write } for pid=15497 comm="syz.3.2264" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 780.151967][ T5866] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 780.153285][ T5975] aircable 4-1:5.52: aircable converter detected [ 780.177371][ T30] audit: type=1400 audit(1767205996.157:1033): avc: denied { ioctl } for pid=15497 comm="syz.3.2264" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d0d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 780.213480][ T5975] usb 4-1: aircable converter now attached to ttyUSB0 [ 780.258784][ T5975] usb 4-1: USB disconnect, device number 28 [ 780.278360][ T5975] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0 [ 780.290998][ T5975] aircable 4-1:5.52: device disconnected [ 780.325123][ T5866] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 780.347228][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 780.370436][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 780.383178][ T5866] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 781.232763][ T5866] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 781.242460][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.260008][ T5866] usb 2-1: config 0 descriptor?? [ 781.268256][T15511] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 781.621710][T15533] lo speed is unknown, defaulting to 1000 [ 781.808112][T15534] lo speed is unknown, defaulting to 1000 [ 782.788239][T15547] kernel profiling enabled (shift: 17) [ 782.814034][ T5866] usbhid 2-1:0.0: can't add hid device: -71 [ 782.903363][ T5866] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 783.128133][ T5866] usb 2-1: USB disconnect, device number 73 [ 783.834298][ T5866] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 784.137799][ T5866] usb 2-1: device descriptor read/64, error -71 [ 785.445389][T15570] FAULT_INJECTION: forcing a failure. [ 785.445389][T15570] name failslab, interval 1, probability 0, space 0, times 0 [ 785.532164][T15570] CPU: 1 UID: 0 PID: 15570 Comm: syz.4.2283 Tainted: G L syzkaller #0 PREEMPT(full) [ 785.532192][T15570] Tainted: [L]=SOFTLOCKUP [ 785.532199][T15570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 785.532208][T15570] Call Trace: [ 785.532214][T15570] [ 785.532222][T15570] dump_stack_lvl+0x16c/0x1f0 [ 785.532248][T15570] should_fail_ex+0x512/0x640 [ 785.532273][T15570] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 785.532293][T15570] should_failslab+0xc2/0x120 [ 785.532315][T15570] kmem_cache_alloc_node_noprof+0x86/0x800 [ 785.532332][T15570] ? __alloc_skb+0x156/0x410 [ 785.532362][T15570] ? __alloc_skb+0x156/0x410 [ 785.532385][T15570] __alloc_skb+0x156/0x410 [ 785.532408][T15570] ? __alloc_skb+0x35d/0x410 [ 785.532431][T15570] ? __pfx___alloc_skb+0x10/0x10 [ 785.532456][T15570] ? netlink_autobind.isra.0+0x158/0x370 [ 785.532484][T15570] netlink_alloc_large_skb+0x69/0x140 [ 785.532506][T15570] netlink_sendmsg+0x698/0xdd0 [ 785.532531][T15570] ? __pfx_netlink_sendmsg+0x10/0x10 [ 785.532560][T15570] ____sys_sendmsg+0xa5d/0xc30 [ 785.532582][T15570] ? copy_msghdr_from_user+0x10a/0x160 [ 785.532597][T15570] ? __pfx_____sys_sendmsg+0x10/0x10 [ 785.532630][T15570] ___sys_sendmsg+0x134/0x1d0 [ 785.532648][T15570] ? __pfx____sys_sendmsg+0x10/0x10 [ 785.532695][T15570] __sys_sendmsg+0x16d/0x220 [ 785.532712][T15570] ? __pfx___sys_sendmsg+0x10/0x10 [ 785.532745][T15570] do_syscall_64+0xcd/0xf80 [ 785.532768][T15570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.532786][T15570] RIP: 0033:0x7ff2f8d8f749 [ 785.532801][T15570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 785.532817][T15570] RSP: 002b:00007ff2f9c1a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 785.532839][T15570] RAX: ffffffffffffffda RBX: 00007ff2f8fe5fa0 RCX: 00007ff2f8d8f749 [ 785.532850][T15570] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 785.532861][T15570] RBP: 00007ff2f9c1a090 R08: 0000000000000000 R09: 0000000000000000 [ 785.532870][T15570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 785.532880][T15570] R13: 00007ff2f8fe6038 R14: 00007ff2f8fe5fa0 R15: 00007ffea9f6cc18 [ 785.532904][T15570] [ 785.769654][T15571] bridge0: port 3(gretap0) entered blocking state [ 785.776224][T15571] bridge0: port 3(gretap0) entered disabled state [ 785.782756][T15571] gretap0: entered allmulticast mode [ 785.790980][T15572] overlayfs: failed to resolve './file0': -2 [ 785.838647][T15571] gretap0: entered promiscuous mode [ 785.844373][T15571] bridge0: port 3(gretap0) entered blocking state [ 785.850873][T15571] bridge0: port 3(gretap0) entered forwarding state [ 785.861473][ T30] audit: type=1400 audit(1767206001.877:1034): avc: denied { ioctl } for pid=15550 comm="syz.9.2277" path="socket:[47754]" dev="sockfs" ino=47754 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 787.095197][T15586] fuse: Bad value for 'fd' [ 787.173263][T15586] Set syz0 is full, maxelem 0 reached [ 787.499401][ T5975] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 788.146195][ T5975] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 788.160701][ T5975] usb 4-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 788.173815][ T5975] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 788.204678][ T5975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.385146][ T5975] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 788.431671][ T5975] usb 4-1: invalid MIDI out EP 0 [ 788.641759][ T5975] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 788.717285][ T5975] usb 4-1: USB disconnect, device number 29 [ 788.739571][T15612] udevd[15612]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 790.221929][ T30] audit: type=1326 audit(1767206006.197:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15620 comm="syz.4.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2f8d8f749 code=0x7ffc0000 [ 790.272059][ T30] audit: type=1326 audit(1767206006.197:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15620 comm="syz.4.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7ff2f8d8f749 code=0x7ffc0000 [ 790.309552][ T30] audit: type=1326 audit(1767206006.197:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15620 comm="syz.4.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2f8d8f749 code=0x7ffc0000 [ 790.335877][ T30] audit: type=1326 audit(1767206006.197:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15620 comm="syz.4.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7ff2f8d8f749 code=0x7ffc0000 [ 790.360855][ T30] audit: type=1326 audit(1767206006.197:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15620 comm="syz.4.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2f8d8f749 code=0x7ffc0000 [ 790.453948][T15632] sit0: entered allmulticast mode [ 790.472648][ T30] audit: type=1326 audit(1767206006.197:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15620 comm="syz.4.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff2f8d8f749 code=0x7ffc0000 [ 790.534037][ T30] audit: type=1326 audit(1767206006.197:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15620 comm="syz.4.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2f8d8f749 code=0x7ffc0000 [ 790.687310][ T30] audit: type=1326 audit(1767206006.197:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15620 comm="syz.4.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff2f8d8f749 code=0x7ffc0000 [ 790.742219][ T30] audit: type=1326 audit(1767206006.197:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15620 comm="syz.4.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2f8d8f749 code=0x7ffc0000 [ 790.886283][T15645] netlink: 'syz.1.2304': attribute type 10 has an invalid length. [ 790.965781][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 790.966802][ T30] audit: type=1400 audit(1767206006.987:1064): avc: denied { setopt } for pid=15640 comm="syz.1.2304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 791.077628][T15650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2306'. [ 791.099651][T15650] fuse: Bad value for 'fd' [ 791.124159][T15650] Set syz0 is full, maxelem 0 reached [ 791.939308][T15640] delete_channel: no stack [ 795.331030][T15690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2320'. [ 795.357161][ T30] audit: type=1400 audit(1767206011.377:1065): avc: denied { setcheckreqprot } for pid=15687 comm="syz.4.2321" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 795.383445][T15694] fuse: Bad value for 'fd' [ 795.687700][T15690] Set syz0 is full, maxelem 0 reached [ 796.468476][ T30] audit: type=1400 audit(1767206012.487:1066): avc: denied { listen } for pid=15706 comm="syz.9.2325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 796.494638][ T30] audit: type=1400 audit(1767206012.517:1067): avc: denied { accept } for pid=15706 comm="syz.9.2325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 796.514966][ T30] audit: type=1400 audit(1767206012.517:1068): avc: denied { read } for pid=15706 comm="syz.9.2325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 797.032095][ T49] usb 5-1: new full-speed USB device number 61 using dummy_hcd [ 797.838556][ T30] audit: type=1400 audit(1767206013.857:1069): avc: denied { getopt } for pid=15722 comm="syz.9.2328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 797.873932][ T49] usb 5-1: config 4 has an invalid interface number: 88 but max is 0 [ 797.886581][ T49] usb 5-1: config 4 has no interface number 0 [ 797.905078][ T49] usb 5-1: config 4 interface 88 altsetting 119 has a duplicate endpoint with address 0xB, skipping [ 798.609020][ T49] usb 5-1: config 4 interface 88 altsetting 119 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 798.761903][ T49] usb 5-1: config 4 interface 88 altsetting 119 endpoint 0x85 has invalid maxpacket 11067, setting to 64 [ 799.504393][ T49] usb 5-1: config 4 interface 88 altsetting 119 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 799.578924][ T49] usb 5-1: config 4 interface 88 has no altsetting 0 [ 799.823862][T15744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2333'. [ 799.890614][T15744] fuse: Bad value for 'fd' [ 799.896221][T15744] Set syz0 is full, maxelem 0 reached [ 800.694640][ T49] usb 5-1: string descriptor 0 read error: -71 [ 800.701318][ T49] usb 5-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=af.e7 [ 800.710615][ T49] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.731446][ T49] usb 5-1: can't set config #4, error -71 [ 800.746539][ T49] usb 5-1: USB disconnect, device number 61 [ 801.117487][T15761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.125749][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.750512][ T30] audit: type=1400 audit(1767206017.767:1070): avc: denied { setattr } for pid=5813 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 801.852484][ T49] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 802.082625][ T49] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 802.102052][ T49] usb 5-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 802.111109][ T49] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.151276][ T49] usb 5-1: config 0 descriptor?? [ 802.222232][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.232452][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.262082][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.270534][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.914206][ T49] usbhid 5-1:0.0: can't add hid device: -71 [ 803.920211][ T49] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 803.959722][ T49] usb 5-1: USB disconnect, device number 62 [ 804.356900][ T49] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 804.913910][T15797] 9p: Bad value for 'rfdno' [ 804.922852][ T49] usb 5-1: Using ep0 maxpacket: 32 [ 804.939043][ T49] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 804.963222][ T49] usb 5-1: config 0 has no interface number 0 [ 804.980542][ T49] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 805.000392][ T49] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.020260][ T49] usb 5-1: Product: syz [ 805.030988][ T49] usb 5-1: Manufacturer: syz [ 805.040898][ T49] usb 5-1: SerialNumber: syz [ 805.056126][ T49] usb 5-1: config 0 descriptor?? [ 805.077617][ T49] smsc95xx v2.0.0 [ 805.214421][T15805] netlink: 'syz.0.2354': attribute type 10 has an invalid length. [ 805.222338][T15805] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2354'. [ 805.231790][T15805] bridge0: port 4(dummy0) entered blocking state [ 805.238913][T15805] bridge0: port 4(dummy0) entered disabled state [ 805.262167][T15805] dummy0: entered allmulticast mode [ 805.274090][T15805] bridge0: port 4(dummy0) entered blocking state [ 805.280547][T15805] bridge0: port 4(dummy0) entered forwarding state [ 805.642369][ T30] audit: type=1400 audit(1767206021.577:1071): avc: denied { connect } for pid=15784 comm="syz.4.2347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 807.190006][ T49] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 807.190697][ T30] audit: type=1400 audit(1767206023.207:1072): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 807.207253][ T49] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 807.296053][ T49] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 811.586160][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 811.611912][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.620244][ T49] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 811.638738][ T49] usb 5-1: USB disconnect, device number 63 [ 811.661907][ T30] audit: type=1400 audit(1767206023.997:1073): avc: denied { kexec_image_load } for pid=15826 comm="syz.9.2359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 811.705124][T15831] openvswitch: netlink: Flow actions attr not present in new flow. [ 812.258786][T15847] overlayfs: failed to clone upperpath [ 815.002470][ T30] audit: type=1400 audit(1767206031.027:1074): avc: denied { connect } for pid=15882 comm="syz.4.2372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 816.654879][T15914] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2375'. [ 817.090980][T15920] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2378'. [ 817.271188][T15924] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2380'. [ 817.294861][T15926] fuse: Bad value for 'user_id' [ 817.299710][T15926] fuse: Bad value for 'user_id' [ 817.388282][T15929] netlink: 'syz.9.2380': attribute type 10 has an invalid length. [ 817.414018][T15929] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2380'. [ 817.439591][T15929] dummy0: entered promiscuous mode [ 817.722160][ T5953] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 817.981279][T12459] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 817.994072][T12459] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 818.004345][T12459] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 818.013560][T12459] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 818.024678][T12459] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 818.035490][ T5820] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 818.042941][ T5820] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 818.052786][ T5820] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 818.064188][ T5820] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 818.075100][ T5820] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 818.113378][ T5953] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 818.124660][ T5953] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 818.134658][ T5953] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 818.161574][ T5953] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 818.171223][ T5953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.202168][ T5953] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 819.043174][ T5953] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 819.294867][ T5953] usb 5-1: USB disconnect, device number 64 [ 819.392452][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 819.452206][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 819.693500][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 819.732836][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 820.022170][ T5953] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 820.152576][ T5820] Bluetooth: hci4: command tx timeout [ 820.253013][ T5953] usb 4-1: Using ep0 maxpacket: 16 [ 820.298376][ T5953] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 820.446232][ T5953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 820.526558][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 820.606454][ T5953] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 820.635512][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 820.695794][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.784255][ T5953] usb 4-1: Product: syz [ 820.834955][ T5953] usb 4-1: Manufacturer: syz [ 820.882787][ T5953] usb 4-1: SerialNumber: syz [ 821.008106][ T5953] usb 4-1: config 0 descriptor?? [ 821.129119][ T5953] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 821.200263][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 821.235889][ T5953] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 821.326837][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 822.222255][ T5820] Bluetooth: hci4: command tx timeout [ 822.413156][ T5953] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 822.454456][T15978] ipt_REJECT: TCP_RESET invalid for non-tcp [ 822.759544][T15934] lo speed is unknown, defaulting to 1000 [ 822.775420][ T5953] em28xx 4-1:0.0: Config register raw data: 0x41 [ 823.090696][T15989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.099351][T15989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.108049][T15989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.119848][T15989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.128297][T15989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.136654][T15989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.145066][T15989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.158953][T15989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.167807][T15989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.176409][T15989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.437691][T15986] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 823.535233][ T5975] usb 4-1: USB disconnect, device number 30 [ 823.567957][ T5975] em28xx 4-1:0.0: Disconnecting em28xx [ 823.629222][ T5975] em28xx 4-1:0.0: Freeing device [ 823.814294][ T36] gretap0: left allmulticast mode [ 823.824336][ T36] gretap0: left promiscuous mode [ 824.092110][ T36] bridge0: port 3(gretap0) entered disabled state [ 824.147893][ T36] bridge_slave_1: left allmulticast mode [ 824.160240][ T36] bridge_slave_1: left promiscuous mode [ 824.851438][ T5820] Bluetooth: hci4: command tx timeout [ 824.861163][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.906909][ T36] bridge_slave_0: left allmulticast mode [ 824.997092][ T36] bridge_slave_0: left promiscuous mode [ 825.012226][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.481544][ T30] audit: type=1400 audit(1767206041.497:1075): avc: denied { bind } for pid=16011 comm="syz.0.2402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 825.541231][ T30] audit: type=1400 audit(1767206041.557:1076): avc: denied { setopt } for pid=16011 comm="syz.0.2402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 825.657058][ T1207] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 825.672236][ T36] bond2 (unregistering): (slave ip6erspan0): Releasing active interface [ 825.829006][ T1207] usb 4-1: Using ep0 maxpacket: 16 [ 825.835997][ T1207] usb 4-1: config 0 has no interfaces? [ 825.855164][ T1207] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 825.872849][ T1207] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.932277][ T1207] usb 4-1: config 0 descriptor?? [ 826.011358][ T36] bond1 (unregistering): (slave gretap1): Releasing active interface [ 826.402379][ T5953] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 826.484264][ T30] audit: type=1400 audit(1767206042.507:1077): avc: denied { write } for pid=16008 comm="syz.3.2400" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 826.646980][ T5953] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 826.760884][ T5953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.872402][T12459] Bluetooth: hci4: command tx timeout [ 826.908734][ T5953] usb 5-1: config 0 descriptor?? [ 827.947848][ T49] usb 4-1: USB disconnect, device number 31 [ 827.953461][ T5953] ath6kl: Failed to submit usb control message: -71 [ 827.960541][ T5953] ath6kl: unable to send the bmi data to the device: -71 [ 827.997169][ T5953] ath6kl: Unable to send get target info: -71 [ 828.015125][ T5953] ath6kl: Failed to init ath6kl core: -71 [ 828.045248][ T5953] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 828.085608][ T5953] usb 5-1: USB disconnect, device number 65 [ 828.777376][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 828.790356][ T36] bond0 (unregistering): (slave team0): Releasing backup interface [ 828.800918][ T36] bond0 (unregistering): Released all slaves [ 828.817321][ T36] bond1 (unregistering): Released all slaves [ 829.033649][ T30] audit: type=1400 audit(1767206045.057:1078): avc: denied { shutdown } for pid=16036 comm="syz.4.2405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 829.168026][ T36] bond2 (unregistering): Released all slaves [ 829.180348][ T36] bond3 (unregistering): (slave lo): Releasing backup interface [ 829.188540][ T36] bond3 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 829.200529][ T36] bond3 (unregistering): Released all slaves [ 829.220303][T16013] erspan0: entered promiscuous mode [ 829.225786][T16013] erspan0: entered allmulticast mode [ 829.263065][T16044] FAULT_INJECTION: forcing a failure. [ 829.263065][T16044] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 829.277182][T16044] CPU: 1 UID: 0 PID: 16044 Comm: syz.4.2406 Tainted: G L syzkaller #0 PREEMPT(full) [ 829.277212][T16044] Tainted: [L]=SOFTLOCKUP [ 829.277217][T16044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 829.277227][T16044] Call Trace: [ 829.277234][T16044] [ 829.277241][T16044] dump_stack_lvl+0x16c/0x1f0 [ 829.277268][T16044] should_fail_ex+0x512/0x640 [ 829.277297][T16044] _copy_from_user+0x2e/0xd0 [ 829.277323][T16044] kstrtouint_from_user+0xd6/0x1d0 [ 829.277342][T16044] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 829.277360][T16044] ? __lock_acquire+0x436/0x2890 [ 829.277384][T16044] ? lock_acquire+0x179/0x330 [ 829.277410][T16044] proc_fail_nth_write+0x83/0x220 [ 829.277429][T16044] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 829.277454][T16044] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 829.277470][T16044] vfs_write+0x2a0/0x11d0 [ 829.277494][T16044] ? __pfx___mutex_lock+0x10/0x10 [ 829.277519][T16044] ? __pfx_vfs_write+0x10/0x10 [ 829.277547][T16044] ? __fget_files+0x20e/0x3c0 [ 829.277578][T16044] ksys_write+0x12a/0x250 [ 829.277599][T16044] ? __pfx_ksys_write+0x10/0x10 [ 829.277627][T16044] do_syscall_64+0xcd/0xf80 [ 829.277651][T16044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.277668][T16044] RIP: 0033:0x7ff2f8d8e1ff [ 829.277683][T16044] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 829.277698][T16044] RSP: 002b:00007ff2f9bf9030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 829.277715][T16044] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff2f8d8e1ff [ 829.277726][T16044] RDX: 0000000000000001 RSI: 00007ff2f9bf90a0 RDI: 0000000000000005 [ 829.277736][T16044] RBP: 00007ff2f9bf9090 R08: 0000000000000000 R09: 0000000000000000 [ 829.277746][T16044] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 829.277756][T16044] R13: 00007ff2f8fe6128 R14: 00007ff2f8fe6090 R15: 00007ffea9f6cc18 [ 829.277781][T16044] [ 829.476469][T16033] lo speed is unknown, defaulting to 1000 [ 829.607958][T16045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2404'. [ 829.772368][ T36] tipc: Disabling bearer [ 829.794087][ T36] tipc: Left network mode [ 830.330353][T15934] chnl_net:caif_netlink_parms(): no params data found [ 831.191720][ T30] audit: type=1326 audit(1767206047.207:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16092 comm="syz.9.2417" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb90ed8f749 code=0x0 [ 831.290265][T15934] bridge0: port 1(bridge_slave_0) entered blocking state [ 831.308343][T15934] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.341624][T15934] bridge_slave_0: entered allmulticast mode [ 831.349465][T15934] bridge_slave_0: entered promiscuous mode [ 831.367021][T15934] bridge0: port 2(bridge_slave_1) entered blocking state [ 831.410597][T15934] bridge0: port 2(bridge_slave_1) entered disabled state [ 831.414029][T16102] fuse: Bad value for 'fd' [ 831.425091][T16102] net_ratelimit: 90 callbacks suppressed [ 831.425107][T16102] Set syz0 is full, maxelem 0 reached [ 831.430785][T15934] bridge_slave_1: entered allmulticast mode [ 831.447790][T15934] bridge_slave_1: entered promiscuous mode [ 831.667448][T15934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 831.686953][T15934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 831.781085][T15934] team0: Port device team_slave_0 added [ 831.821972][ T1207] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 831.823677][T15934] team0: Port device team_slave_1 added [ 831.883808][ T36] hsr_slave_0: left promiscuous mode [ 831.889780][ T36] hsr_slave_1: left promiscuous mode [ 831.900311][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 831.908916][ T36] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 831.916206][ T36] batman_adv: batadv0: Removing interface: virt_wifi0 [ 831.961975][ T1207] usb 4-1: device descriptor read/64, error -71 [ 832.212856][ T1207] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 832.300312][ T36] team0 (unregistering): Port device team_slave_1 removed [ 832.340570][ T36] team0 (unregistering): Port device team_slave_0 removed [ 832.351950][ T1207] usb 4-1: device descriptor read/64, error -71 [ 832.462906][ T1207] usb usb4-port1: attempt power cycle [ 832.785532][T15934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 832.797822][T15934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 832.802175][ T1207] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 832.839610][T15934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 832.852372][T15934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 832.853199][ T1207] usb 4-1: device descriptor read/8, error -71 [ 832.873521][T15934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 832.900274][T15934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 832.985765][T15934] hsr_slave_0: entered promiscuous mode [ 832.996213][T15934] hsr_slave_1: entered promiscuous mode [ 833.002485][T15934] debugfs: 'hsr0' already exists in 'hsr' [ 833.008258][T15934] Cannot create hsr debugfs directory [ 833.059216][ T36] IPVS: stop unused estimator thread 0... [ 833.102739][ T1207] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 833.132462][ T1207] usb 4-1: device descriptor read/8, error -71 [ 833.244022][ T1207] usb usb4-port1: unable to enumerate USB device [ 833.700807][T16154] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 833.752623][T15934] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 833.782466][T15934] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 833.807512][T15934] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 833.822129][T15934] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 833.880932][T16156] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16156 comm=syz.0.2427 [ 834.451335][T15934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 834.479809][T16175] fuse: Bad value for 'fd' [ 834.483714][T16177] overlayfs: missing 'lowerdir' [ 834.493540][T16175] Set syz0 is full, maxelem 0 reached [ 834.506841][T15934] 8021q: adding VLAN 0 to HW filter on device team0 [ 834.540093][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 834.547252][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 834.587669][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 834.594781][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 834.753078][ T5953] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 835.672143][ T5953] usb 5-1: Using ep0 maxpacket: 8 [ 835.683239][ T5953] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 835.696924][ T5953] usb 5-1: config 0 has no interface number 0 [ 835.714752][ T5953] usb 5-1: config 0 interface 21 altsetting 4 endpoint 0x5 has invalid maxpacket 1478, setting to 1024 [ 835.731729][ T5953] usb 5-1: config 0 interface 21 altsetting 4 bulk endpoint 0x5 has invalid maxpacket 1024 [ 835.777136][ T5953] usb 5-1: config 0 interface 21 has no altsetting 0 [ 835.805085][ T5953] usb 5-1: New USB device found, idVendor=0955, idProduct=09ff, bcdDevice=db.8f [ 835.822073][ T5953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.833140][ T5953] usb 5-1: Product: syz [ 835.837402][ T5953] usb 5-1: Manufacturer: syz [ 835.849093][ T5953] usb 5-1: SerialNumber: syz [ 835.867777][ T5953] r8152-cfgselector 5-1: Unknown version 0x0000 [ 835.879095][ T5953] r8152-cfgselector 5-1: config 0 descriptor?? [ 835.886848][T15934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 835.892470][T16176] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 835.937361][T16208] overlayfs: failed to clone upperpath [ 836.129756][T16176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 836.155111][T16176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 836.246694][ T5953] r8152 5-1:0.21: Expected endpoints are not found [ 836.291532][ T5953] r8152-cfgselector 5-1: USB disconnect, device number 66 [ 836.379667][T15934] veth0_vlan: entered promiscuous mode [ 836.416337][T15934] veth1_vlan: entered promiscuous mode [ 836.473380][T15934] veth0_macvtap: entered promiscuous mode [ 836.494497][T15934] veth1_macvtap: entered promiscuous mode [ 836.534684][T15934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 836.564618][T15934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 836.596910][ T3912] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.607624][ T3912] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.625747][ T3912] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.654192][ T3912] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.817571][T16232] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16232 comm=syz.3.2435 [ 836.844289][ T4469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 836.874895][ T4469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 836.965819][ T4469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 837.026862][ T4469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 837.376578][T16264] fuse: Bad value for 'fd' [ 837.893596][T16264] Set syz0 is full, maxelem 0 reached [ 838.205101][ T30] audit: type=1400 audit(1767206054.207:1080): avc: denied { read } for pid=16248 comm="syz.4.2440" dev="sockfs" ino=51401 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 838.683684][ T30] audit: type=1800 audit(1767206054.697:1081): pid=16285 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2445" name="SYSV798dd814" dev="tmpfs" ino=0 res=0 errno=0 [ 840.071720][ T49] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 840.096727][ T30] audit: type=1400 audit(1767206056.117:1082): avc: denied { audit_read } for pid=16312 comm="syz.0.2451" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 840.184172][T16319] FAULT_INJECTION: forcing a failure. [ 840.184172][T16319] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 840.228837][T16319] CPU: 0 UID: 0 PID: 16319 Comm: syz.5.2452 Tainted: G L syzkaller #0 PREEMPT(full) [ 840.228866][T16319] Tainted: [L]=SOFTLOCKUP [ 840.228872][T16319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 840.228882][T16319] Call Trace: [ 840.228888][T16319] [ 840.228895][T16319] dump_stack_lvl+0x16c/0x1f0 [ 840.228921][T16319] should_fail_ex+0x512/0x640 [ 840.228949][T16319] _copy_from_user+0x2e/0xd0 [ 840.228974][T16319] copy_msghdr_from_user+0x98/0x160 [ 840.228991][T16319] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 840.229012][T16319] ? __pfx__kstrtoull+0x10/0x10 [ 840.229035][T16319] ___sys_sendmsg+0xfe/0x1d0 [ 840.229053][T16319] ? __pfx____sys_sendmsg+0x10/0x10 [ 840.229092][T16319] ? __pfx___might_resched+0x10/0x10 [ 840.229114][T16319] __sys_sendmmsg+0x200/0x420 [ 840.229133][T16319] ? __pfx___sys_sendmmsg+0x10/0x10 [ 840.229158][T16319] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 840.229191][T16319] ? fput+0x70/0xf0 [ 840.229206][T16319] ? ksys_write+0x1ac/0x250 [ 840.229227][T16319] ? __pfx_ksys_write+0x10/0x10 [ 840.229251][T16319] __x64_sys_sendmmsg+0x9c/0x100 [ 840.229268][T16319] ? lockdep_hardirqs_on+0x7c/0x110 [ 840.229288][T16319] do_syscall_64+0xcd/0xf80 [ 840.229310][T16319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.229328][T16319] RIP: 0033:0x7fb82538f749 [ 840.229342][T16319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 840.229358][T16319] RSP: 002b:00007fb826177038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 840.229375][T16319] RAX: ffffffffffffffda RBX: 00007fb8255e5fa0 RCX: 00007fb82538f749 [ 840.229386][T16319] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 840.229396][T16319] RBP: 00007fb826177090 R08: 0000000000000000 R09: 0000000000000000 [ 840.229407][T16319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 840.229417][T16319] R13: 00007fb8255e6038 R14: 00007fb8255e5fa0 R15: 00007fff45ed9f78 [ 840.229441][T16319] [ 840.601713][ T49] usb 4-1: config 0 has an invalid descriptor of length 115, skipping remainder of the config [ 840.632336][ T49] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 840.682059][ T49] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 12336, setting to 64 [ 840.721933][ T49] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 840.751941][ T1207] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 840.775648][ T49] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 840.793752][ T49] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 840.839017][ T49] usb 4-1: Manufacturer: syz [ 840.878849][ T49] usb 4-1: config 0 descriptor?? [ 840.932706][ T1207] usb 5-1: Using ep0 maxpacket: 8 [ 840.940380][ T1207] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7f [ 840.950447][ T1207] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=32 [ 841.073466][ T1207] usb 5-1: SerialNumber: syz [ 841.081066][ T5820] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 841.096363][ T30] audit: type=1400 audit(1767206057.117:1083): avc: denied { read } for pid=16329 comm="syz.5.2455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 841.096498][ T5820] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 841.129479][ T1207] pvrusb2: Hardware description: Terratec Grabster AV400 [ 841.136714][ T1207] pvrusb2: ********** [ 841.140787][ T1207] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 841.150972][ T5820] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 841.158870][ T1207] pvrusb2: Important functionality might not be entirely working. [ 841.166930][ T1207] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 841.181365][ T1207] pvrusb2: ********** [ 841.187735][ T5820] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 841.197110][ T5820] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 841.401111][ T30] audit: type=1400 audit(1767206057.427:1084): avc: denied { getopt } for pid=16320 comm="syz.4.2453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 841.426467][ T2338] pvrusb2: Invalid write control endpoint [ 841.452152][ T1207] usb 5-1: USB disconnect, device number 67 [ 841.477390][ T49] rc_core: IR keymap rc-hauppauge not found [ 841.494437][ T49] Registered IR keymap rc-empty [ 841.510108][ T49] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 841.559946][ T49] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 841.574773][ T2338] pvrusb2: Invalid write control endpoint [ 841.688427][ T49] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 841.703846][ T2338] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 841.722789][ T49] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input42 [ 841.749495][ T2338] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 841.883323][ T2338] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 841.908228][ T49] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 842.352288][ T2338] pvrusb2: Device being rendered inoperable [ 842.358510][ T2338] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 842.365957][ T2338] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 842.391968][ T49] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 842.441138][ T2338] pvrusb2: Attached sub-driver cx25840 [ 842.447000][ T49] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 842.475019][ T2338] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 842.487452][ T2338] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 842.528514][T16330] team0 (unregistering): Port device team_slave_0 removed [ 842.549028][ T49] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 842.642191][ T49] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 842.672325][ T49] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 842.699453][ T49] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 842.722214][ T49] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 842.762235][ T49] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 842.789159][T16330] team0 (unregistering): Port device team_slave_1 removed [ 842.800820][ T49] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 842.916744][ T49] mceusb 4-1:0.0: Registered ÒŸ with mce emulator interface version 1 [ 842.936082][ T49] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 842.965569][ T49] usb 4-1: USB disconnect, device number 36 [ 843.269992][T12459] Bluetooth: hci0: command tx timeout [ 843.657626][T16373] team0: No ports can be present during mode change [ 843.762107][ T49] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 843.829131][ T30] audit: type=1400 audit(1767206059.847:1085): avc: denied { bind } for pid=16380 comm="syz.4.2461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 843.889121][ T4168] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.901091][ T30] audit: type=1400 audit(1767206059.847:1086): avc: denied { getopt } for pid=16380 comm="syz.4.2461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 843.947834][ T49] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 843.962861][ T49] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 843.978699][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.991182][ T49] usb 4-1: Product: syz [ 844.000340][ T49] usb 4-1: Manufacturer: syz [ 844.005362][ T49] usb 4-1: SerialNumber: syz [ 844.075870][ T4168] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.209656][ T4168] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.293624][ T49] comedi comedi5: Wrong number of endpoints [ 844.299560][ T49] ni6501 4-1:5.0: driver 'ni6501' failed to auto-configure device. [ 844.383897][ T49] usb 4-1: USB disconnect, device number 37 [ 844.427771][ T4168] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.248260][ T4168] dummy0: left allmulticast mode [ 845.296989][ T4168] bridge0: port 4(dummy0) entered disabled state [ 845.319619][ T30] audit: type=1400 audit(1767206061.337:1087): avc: denied { append } for pid=16403 comm="syz.3.2465" name="pfkey" dev="proc" ino=4026533430 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 845.352661][T12459] Bluetooth: hci0: command tx timeout [ 845.398118][ T4168] gretap0: left allmulticast mode [ 845.441929][ T4168] gretap0: left promiscuous mode [ 845.447610][ T4168] bridge0: port 3(gretap0) entered disabled state [ 845.496468][ T4168] bridge_slave_1: left allmulticast mode [ 845.515646][ T4168] bridge_slave_1: left promiscuous mode [ 845.538118][ T4168] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.650874][ T4168] bridge_slave_0: left allmulticast mode [ 845.657478][ T4168] bridge_slave_0: left promiscuous mode [ 845.674552][ T4168] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.387662][ T30] audit: type=1400 audit(1767206062.407:1088): avc: denied { bind } for pid=16424 comm="syz.3.2470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 846.412082][T16425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2470'. [ 846.421276][ T30] audit: type=1400 audit(1767206062.437:1089): avc: denied { node_bind } for pid=16424 comm="syz.3.2470" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 846.977313][T16429] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2471'. [ 847.065956][ T30] audit: type=1400 audit(1767206063.087:1090): avc: denied { setattr } for pid=16437 comm="syz.4.2472" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 847.341980][ T1207] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 847.428253][T12459] Bluetooth: hci0: command tx timeout [ 847.488081][ T4168] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 847.498447][ T4168] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 847.509650][ T4168] .` (unregistering): Released all slaves [ 847.514728][ T1207] usb 5-1: Using ep0 maxpacket: 32 [ 847.525647][ T1207] usb 5-1: config 16 has an invalid interface number: 19 but max is 0 [ 847.534054][ T1207] usb 5-1: config 16 has an invalid descriptor of length 255, skipping remainder of the config [ 847.552453][ T1207] usb 5-1: config 16 has no interface number 0 [ 847.565446][ T1207] usb 5-1: config 16 interface 19 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 847.599113][ T1207] usb 5-1: New USB device found, idVendor=0499, idProduct=cdf4, bcdDevice=78.ee [ 847.619077][ T1207] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.639484][ T1207] usb 5-1: Product: syz [ 847.649396][ T1207] usb 5-1: Manufacturer: syz [ 847.657028][ T1207] usb 5-1: SerialNumber: syz [ 847.724423][ T4168] bond1 (unregistering): (slave veth3): Releasing active interface [ 847.747776][ T4168] bond1 (unregistering): Released all slaves [ 847.762973][T16335] lo speed is unknown, defaulting to 1000 [ 847.885923][T16439] loop6: detected capacity change from 0 to 524287999 [ 847.954341][ T4168] : left promiscuous mode [ 848.032476][ T4168] tipc: Left network mode [ 848.048023][ T1207] usb 5-1: USB disconnect, device number 68 [ 848.089532][T15954] udevd[15954]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:16.19/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 848.172167][ T49] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 848.345830][ T49] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 848.510448][ T49] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 848.543454][ T49] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 848.552610][ T49] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.563952][ T49] usb 6-1: config 0 descriptor?? [ 848.893675][T16497] batadv_slave_1: entered promiscuous mode [ 849.126237][ T49] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 849.260488][ T49] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 849.318001][T16497] batman_adv: batadv0: Adding interface: macvlan2 [ 849.338167][ T49] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 849.366868][ T49] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 849.383718][T16497] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 849.417089][T16497] batman_adv: batadv0: Interface activated: macvlan2 [ 849.419785][ T49] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 849.428180][T16335] chnl_net:caif_netlink_parms(): no params data found [ 849.441355][ T49] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 849.471621][ T49] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 849.502061][T12459] Bluetooth: hci0: command tx timeout [ 849.524098][ T49] cp2112 0003:10C4:EA90.0014: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 849.667926][ T49] cp2112 0003:10C4:EA90.0014: Part Number: 0x82 Device Version: 0xFE [ 850.562480][ T49] cp2112 0003:10C4:EA90.0014: error reading lock byte: -71 [ 850.699082][ T49] usb 6-1: USB disconnect, device number 2 [ 850.735945][T16335] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.775153][T16335] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.944956][T16335] bridge_slave_0: entered allmulticast mode [ 851.482351][T16335] bridge_slave_0: entered promiscuous mode [ 852.145509][T16335] bridge0: port 2(bridge_slave_1) entered blocking state [ 852.154157][T16335] bridge0: port 2(bridge_slave_1) entered disabled state [ 852.161393][T16335] bridge_slave_1: entered allmulticast mode [ 852.213530][T16335] bridge_slave_1: entered promiscuous mode [ 852.345225][ T4168] hsr_slave_0: left promiscuous mode [ 852.363758][ T4168] hsr_slave_1: left promiscuous mode [ 852.381658][ T4168] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 852.536209][ T4168] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 852.601975][ T4168] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 852.646614][ T4168] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 853.447795][ T4168] veth1_macvtap: left promiscuous mode [ 853.476592][ T4168] veth0_macvtap: left promiscuous mode [ 853.514471][ T4168] veth1_vlan: left promiscuous mode [ 853.519822][ T4168] veth0_vlan: left promiscuous mode [ 854.256087][T16581] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2488'. [ 854.272307][ T4168] pim6reg (unregistering): left allmulticast mode [ 854.433650][ T8340] smc: removing ib device syz2 [ 854.743959][ T4168] team0 (unregistering): Port device team_slave_1 removed [ 854.800077][ T4168] team0 (unregistering): Port device team_slave_0 removed [ 855.290821][T16335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 855.347945][T16335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 855.504504][ T5866] ================================================================== [ 855.512601][ T5866] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x190/0x1c0 [ 855.521459][ T5866] Read of size 8 at addr ffff8880283b82e8 by task kworker/0:3/5866 [ 855.529344][ T5866] [ 855.531649][ T5866] CPU: 0 UID: 0 PID: 5866 Comm: kworker/0:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 855.531665][ T5866] Tainted: [L]=SOFTLOCKUP [ 855.531669][ T5866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 855.531676][ T5866] Workqueue: events smc_ib_port_event_work [ 855.531694][ T5866] Call Trace: [ 855.531699][ T5866] [ 855.531703][ T5866] dump_stack_lvl+0x116/0x1f0 [ 855.531717][ T5866] print_report+0xcd/0x630 [ 855.531731][ T5866] ? __virt_addr_valid+0x81/0x610 [ 855.531742][ T5866] ? __phys_addr+0xe8/0x180 [ 855.531752][ T5866] ? __ethtool_get_link_ksettings+0x190/0x1c0 [ 855.531768][ T5866] kasan_report+0xe0/0x110 [ 855.531781][ T5866] ? __ethtool_get_link_ksettings+0x190/0x1c0 [ 855.531797][ T5866] __ethtool_get_link_ksettings+0x190/0x1c0 [ 855.531814][ T5866] __ethtool_get_link_ksettings+0x144/0x1c0 [ 855.531831][ T5866] ib_get_eth_speed+0x122/0xb50 [ 855.531856][ T5866] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 855.531881][ T5866] ? do_raw_spin_unlock+0x172/0x230 [ 855.531897][ T5866] rxe_query_port+0x127/0x360 [ 855.531908][ T5866] ib_query_port+0x441/0x8a0 [ 855.531923][ T5866] smc_ib_port_event_work+0x12f/0xbf0 [ 855.531938][ T5866] ? rcu_is_watching+0x12/0xc0 [ 855.531949][ T5866] process_one_work+0x9ba/0x1b20 [ 855.531964][ T5866] ? __pfx_process_one_work+0x10/0x10 [ 855.531979][ T5866] ? assign_work+0x1a0/0x250 [ 855.531991][ T5866] worker_thread+0x6c8/0xf10 [ 855.532006][ T5866] ? __kthread_parkme+0x19e/0x250 [ 855.532016][ T5866] ? __pfx_worker_thread+0x10/0x10 [ 855.532029][ T5866] kthread+0x3c5/0x780 [ 855.532041][ T5866] ? __pfx_kthread+0x10/0x10 [ 855.532053][ T5866] ? rcu_is_watching+0x12/0xc0 [ 855.532062][ T5866] ? __pfx_kthread+0x10/0x10 [ 855.532074][ T5866] ret_from_fork+0x983/0xb10 [ 855.532085][ T5866] ? __pfx_ret_from_fork+0x10/0x10 [ 855.532096][ T5866] ? __switch_to+0x7af/0x10d0 [ 855.532109][ T5866] ? __pfx_kthread+0x10/0x10 [ 855.532121][ T5866] ret_from_fork_asm+0x1a/0x30 [ 855.532140][ T5866] [ 855.532144][ T5866] [ 855.726551][ T5866] Allocated by task 5821: [ 855.730858][ T5866] kasan_save_stack+0x33/0x60 [ 855.735522][ T5866] kasan_save_track+0x14/0x30 [ 855.740176][ T5866] __kasan_kmalloc+0xaa/0xb0 [ 855.744750][ T5866] __kvmalloc_node_noprof+0x3ac/0xa40 [ 855.750105][ T5866] alloc_netdev_mqs+0xd7/0x1550 [ 855.754934][ T5866] rtnl_create_link+0xc08/0xf60 [ 855.759760][ T5866] rtnl_newlink+0xb3b/0x1f50 [ 855.764333][ T5866] rtnetlink_rcv_msg+0x95e/0xe90 [ 855.769247][ T5866] netlink_rcv_skb+0x158/0x420 [ 855.773990][ T5866] netlink_unicast+0x5aa/0x870 [ 855.778755][ T5866] netlink_sendmsg+0x8c8/0xdd0 [ 855.783499][ T5866] __sys_sendto+0x4a3/0x520 [ 855.787983][ T5866] __x64_sys_sendto+0xe0/0x1c0 [ 855.792731][ T5866] do_syscall_64+0xcd/0xf80 [ 855.797221][ T5866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.803089][ T5866] [ 855.805392][ T5866] Freed by task 4168: [ 855.809342][ T5866] kasan_save_stack+0x33/0x60 [ 855.813996][ T5866] kasan_save_track+0x14/0x30 [ 855.818649][ T5866] kasan_save_free_info+0x3b/0x60 [ 855.823664][ T5866] __kasan_slab_free+0x5f/0x80 [ 855.828404][ T5866] kfree+0x2f8/0x6e0 [ 855.832273][ T5866] device_release+0xa4/0x240 [ 855.836844][ T5866] kobject_put+0x1ef/0x6f0 [ 855.841244][ T5866] netdev_run_todo+0x7da/0x12a0 [ 855.846082][ T5866] default_device_exit_batch+0x99a/0xc80 [ 855.851695][ T5866] ops_undo_list+0x363/0xab0 [ 855.856261][ T5866] cleanup_net+0x41b/0x830 [ 855.860655][ T5866] process_one_work+0x9ba/0x1b20 [ 855.865579][ T5866] worker_thread+0x6c8/0xf10 [ 855.870163][ T5866] kthread+0x3c5/0x780 [ 855.874210][ T5866] ret_from_fork+0x983/0xb10 [ 855.878777][ T5866] ret_from_fork_asm+0x1a/0x30 [ 855.883522][ T5866] [ 855.885825][ T5866] The buggy address belongs to the object at ffff8880283b8000 [ 855.885825][ T5866] which belongs to the cache kmalloc-cg-4k of size 4096 [ 855.900114][ T5866] The buggy address is located 744 bytes inside of [ 855.900114][ T5866] freed 4096-byte region [ffff8880283b8000, ffff8880283b9000) [ 855.913970][ T5866] [ 855.916274][ T5866] The buggy address belongs to the physical page: [ 855.922657][ T5866] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x283b8 [ 855.931389][ T5866] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 855.939860][ T5866] memcg:ffff888032830041 [ 855.944071][ T5866] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 855.951763][ T5866] page_type: f5(slab) [ 855.955723][ T5866] raw: 00fff00000000040 ffff88813ff30500 dead000000000100 dead000000000122 [ 855.964286][ T5866] raw: 0000000000000000 0000000000040004 00000000f5000000 ffff888032830041 [ 855.972849][ T5866] head: 00fff00000000040 ffff88813ff30500 dead000000000100 dead000000000122 [ 855.981493][ T5866] head: 0000000000000000 0000000000040004 00000000f5000000 ffff888032830041 [ 855.990139][ T5866] head: 00fff00000000003 ffffea0000a0ee01 00000000ffffffff 00000000ffffffff [ 855.998783][ T5866] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 856.007428][ T5866] page dumped because: kasan: bad access detected [ 856.013812][ T5866] page_owner tracks the page as allocated [ 856.019500][ T5866] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5821, tgid 5821 (syz-executor), ts 62341796860, free_ts 62266484355 [ 856.042571][ T5866] post_alloc_hook+0x1af/0x220 [ 856.047319][ T5866] get_page_from_freelist+0xd0b/0x31a0 [ 856.052751][ T5866] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 856.058620][ T5866] alloc_pages_mpol+0x1fb/0x550 [ 856.063447][ T5866] new_slab+0x2c3/0x430 [ 856.067583][ T5866] ___slab_alloc+0xe18/0x1c90 [ 856.072240][ T5866] __slab_alloc.constprop.0+0x63/0x110 [ 856.077682][ T5866] __kvmalloc_node_noprof+0x592/0xa40 [ 856.083030][ T5866] alloc_netdev_mqs+0xd7/0x1550 [ 856.087859][ T5866] rtnl_create_link+0xc08/0xf60 [ 856.092684][ T5866] rtnl_newlink+0xb3b/0x1f50 [ 856.097254][ T5866] rtnetlink_rcv_msg+0x95e/0xe90 [ 856.102166][ T5866] netlink_rcv_skb+0x158/0x420 [ 856.106908][ T5866] netlink_unicast+0x5aa/0x870 [ 856.111650][ T5866] netlink_sendmsg+0x8c8/0xdd0 [ 856.116392][ T5866] __sys_sendto+0x4a3/0x520 [ 856.120880][ T5866] page last free pid 5821 tgid 5821 stack trace: [ 856.127178][ T5866] __free_frozen_pages+0x7df/0x1170 [ 856.132357][ T5866] qlist_free_all+0x4c/0xf0 [ 856.136835][ T5866] kasan_quarantine_reduce+0x195/0x1e0 [ 856.142275][ T5866] __kasan_slab_alloc+0x69/0x90 [ 856.147105][ T5866] __kmalloc_cache_noprof+0x282/0x800 [ 856.152468][ T5866] kobject_uevent_env+0x265/0x1920 [ 856.157560][ T5866] __kobject_del+0x168/0x220 [ 856.162128][ T5866] kobject_put+0x34d/0x6f0 [ 856.166523][ T5866] net_rx_queue_update_kobjects+0x54d/0x770 [ 856.172393][ T5866] netif_set_real_num_rx_queues+0x216/0x380 [ 856.178265][ T5866] veth_init_queues+0x151/0x190 [ 856.183101][ T5866] veth_newlink+0x4f3/0xa00 [ 856.187597][ T5866] rtnl_newlink+0xc19/0x1f50 [ 856.192181][ T5866] rtnetlink_rcv_msg+0x95e/0xe90 [ 856.197099][ T5866] netlink_rcv_skb+0x158/0x420 [ 856.201840][ T5866] netlink_unicast+0x5aa/0x870 [ 856.206582][ T5866] [ 856.208882][ T5866] Memory state around the buggy address: [ 856.214489][ T5866] ffff8880283b8180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 856.222532][ T5866] ffff8880283b8200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 856.230570][ T5866] >ffff8880283b8280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 856.238608][ T5866] ^ [ 856.246039][ T5866] ffff8880283b8300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 856.254071][ T5866] ffff8880283b8380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 856.262103][ T5866] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 856.692283][ T30] audit: type=1400 audit(1767206072.717:1091): avc: denied { write } for pid=5803 comm="syz-executor" path="pipe:[5230]" dev="pipefs" ino=5230 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 856.851743][ T30] audit: type=1400 audit(1767206072.857:1092): avc: denied { read } for pid=5172 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 857.001940][ T30] audit: type=1400 audit(1767206072.857:1093): avc: denied { search } for pid=5172 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 857.024227][ T5866] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 857.031441][ T5866] CPU: 0 UID: 0 PID: 5866 Comm: kworker/0:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 857.042372][ T5866] Tainted: [L]=SOFTLOCKUP [ 857.046680][ T5866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 857.056724][ T5866] Workqueue: events smc_ib_port_event_work [ 857.062547][ T5866] Call Trace: [ 857.065826][ T5866] [ 857.068761][ T5866] dump_stack_lvl+0x3d/0x1f0 [ 857.073362][ T5866] vpanic+0x640/0x6f0 [ 857.077350][ T5866] panic+0xca/0xd0 [ 857.081067][ T5866] ? __pfx_panic+0x10/0x10 [ 857.085473][ T5866] ? __ethtool_get_link_ksettings+0x190/0x1c0 [ 857.091520][ T5866] ? preempt_schedule_common+0x44/0xc0 [ 857.096950][ T5866] ? preempt_schedule_thunk+0x16/0x30 [ 857.102290][ T5866] ? check_panic_on_warn+0x1f/0xb0 [ 857.107372][ T5866] check_panic_on_warn+0xab/0xb0 [ 857.112281][ T5866] end_report+0x107/0x160 [ 857.116582][ T5866] kasan_report+0xee/0x110 [ 857.120974][ T5866] ? __ethtool_get_link_ksettings+0x190/0x1c0 [ 857.127015][ T5866] __ethtool_get_link_ksettings+0x190/0x1c0 [ 857.132888][ T5866] __ethtool_get_link_ksettings+0x144/0x1c0 [ 857.138777][ T5866] ib_get_eth_speed+0x122/0xb50 [ 857.143620][ T5866] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 857.148981][ T5866] ? do_raw_spin_unlock+0x172/0x230 [ 857.154164][ T5866] rxe_query_port+0x127/0x360 [ 857.158818][ T5866] ib_query_port+0x441/0x8a0 [ 857.163394][ T5866] smc_ib_port_event_work+0x12f/0xbf0 [ 857.168754][ T5866] ? rcu_is_watching+0x12/0xc0 [ 857.173500][ T5866] process_one_work+0x9ba/0x1b20 [ 857.178440][ T5866] ? __pfx_process_one_work+0x10/0x10 [ 857.183796][ T5866] ? assign_work+0x1a0/0x250 [ 857.188413][ T5866] worker_thread+0x6c8/0xf10 [ 857.192983][ T5866] ? __kthread_parkme+0x19e/0x250 [ 857.197986][ T5866] ? __pfx_worker_thread+0x10/0x10 [ 857.203084][ T5866] kthread+0x3c5/0x780 [ 857.207134][ T5866] ? __pfx_kthread+0x10/0x10 [ 857.211700][ T5866] ? rcu_is_watching+0x12/0xc0 [ 857.216441][ T5866] ? __pfx_kthread+0x10/0x10 [ 857.221010][ T5866] ret_from_fork+0x983/0xb10 [ 857.225578][ T5866] ? __pfx_ret_from_fork+0x10/0x10 [ 857.230667][ T5866] ? __switch_to+0x7af/0x10d0 [ 857.235324][ T5866] ? __pfx_kthread+0x10/0x10 [ 857.239894][ T5866] ret_from_fork_asm+0x1a/0x30 [ 857.244649][ T5866] [ 857.247942][ T5866] Kernel Offset: disabled [ 857.252239][ T5866] Rebooting in 86400 seconds..