last executing test programs: 15m20.041971568s ago: executing program 32 (id=529): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x114d3ec1a29a4f31}, {0xe}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x60040084}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x40044) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0x10e0}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, 0x0, &(0x7f0000000040)) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, 0x0) setresgid(0xee00, 0xee01, 0x0) setregid(0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@ifindex, 0xb, 0x0, 0x0, &(0x7f0000000000)=[0x0], 0x1, 0x0, &(0x7f0000000040), 0x0, 0x0}, 0x40) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x22046890) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 14m59.713389544s ago: executing program 33 (id=546): ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x4, 0x1, 0x60, @loopback, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x1, 0x20, 0x0, 0x8}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, 0x0, 0x0) 12m17.467109408s ago: executing program 34 (id=1316): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = inotify_init() r3 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000080)={0x20004, r4, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000440)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x59, 0x1}) close_range(r4, r2, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000280)={0x1, r7, 0xff, 0x100007, 0xa, 0x1ff, 0x1}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r10, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r10, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r10, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYBLOB="000004000000000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r10, 0x84, 0x77, &(0x7f00000003c0)={0x0, 0x3}, 0x8) socket$alg(0x26, 0x5, 0x0) close(0x3) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000180)=0x5, 0x4) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) 11m28.577915354s ago: executing program 4 (id=1516): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) socket$kcm(0x21, 0x2, 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) setns(0xc9, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x10f) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) io_uring_setup(0x51d1, &(0x7f0000000180)={0x0, 0x4c8f, 0x80, 0x1, 0xf4}) bind$x25(r4, &(0x7f0000000100), 0x12) listen(r4, 0x1) write$tun(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b007e000a43b820a8e8c9881db660"], 0x88) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fbdbdf250900000005000800010000000800010001000000050007000500000008000100010000000500070003"], 0x3c}, 0x1, 0x0, 0x0, 0x8081}, 0x0) 11m27.449905132s ago: executing program 4 (id=1522): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a9"], 0xfdef) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff7f, 0xfffffefe, 0xff000000, 0xff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2f, 0xb7, 0x0, 0x1}, 0x0, 0xe0, 0x100, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x1, 0x3, 0x10001, {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0xffffffffffffffff, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x300) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7a4d205fd632f830272d3a78302205252b9ae7d8be5638396a0fa0583974f3f28302280b7b4d3c9e13d74dbc7b9e8718956dd5fe482", 0x5f}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5faf0", 0x2a}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2a8c94e6bdf0c72c8e528f0778c5b5ad28a834e43f387c8282e50e7d6b0cd91", 0x8d}], 0x3, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) ioctl(r1, 0x8b32, &(0x7f0000000040)) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=0x0, @ANYRES64, @ANYRES32=r1, @ANYRES64=r1, @ANYRESDEC=r0], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) 11m26.85509072s ago: executing program 4 (id=1524): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x7fff, 0x3fc}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0x4) mmap(&(0x7f0000071000/0x1000)=nil, 0x1000, 0x2000002, 0x110, 0xffffffffffffffff, 0x825c5000) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008980)=[{{0x0, 0x0, 0x0}, 0xf99b}], 0x1, 0x2, 0x0) 11m25.645167301s ago: executing program 4 (id=1527): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000080)='4', 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) (async) write(r0, &(0x7f0000000080)='4', 0x1) (async) 11m25.102727522s ago: executing program 4 (id=1531): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) sigaltstack(&(0x7f0000000100)={&(0x7f0000000080)=""/93, 0x180000001, 0x5d}, &(0x7f0000001340)={&(0x7f0000000340)=""/4096, 0x0, 0x1000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) iopl(0x3) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) mount$9p_rdma(&(0x7f0000000180), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, 0x0) 10m33.187821727s ago: executing program 4 (id=1534): r0 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0xa) fchdir(r3) r4 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x0) ftruncate(r4, 0x2007ffb) close(r4) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) fcntl$setsig(0xffffffffffffffff, 0xa, 0x1d) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) 10m33.185556841s ago: executing program 35 (id=1539): r0 = syz_open_dev$media(&(0x7f0000000040), 0x20000000001, 0x300) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000010c50f80b00000000000010902240001000030010904000009030002000921000301222c0009058103080010040039d638337fd9a3a0a43056b323aa1e085aa64da52ba3a04dd8a8bcff7d278394567bbb"], 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYRESOCT], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000300)="b9e0e7c56300698c0ba00a0d339c", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40000) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010f0000000010811798080000000000010902410001000000000904"], 0x0) 10m33.185450547s ago: executing program 36 (id=1538): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(&(0x7f0000000040)='./bus\x00', 0x107) r3 = socket$kcm(0x2a, 0x7, 0x0) sendmsg$kcm(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001fffffff8500000004000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r8 = getpgrp(0x0) sched_setaffinity(r8, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) 10m33.185357928s ago: executing program 37 (id=1537): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x7fff, 0x3fc}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0x4) mmap(&(0x7f0000071000/0x1000)=nil, 0x1000, 0x2000002, 0x110, 0xffffffffffffffff, 0x825c5000) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008980)=[{{0x0, 0x0, 0x0}, 0xf99b}], 0x1, 0x2, 0x0) 10m33.185310029s ago: executing program 38 (id=1536): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xf32}) setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f00000000c0), 0x0) 10m33.185254006s ago: executing program 39 (id=1534): r0 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0xa) fchdir(r3) r4 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x0) ftruncate(r4, 0x2007ffb) close(r4) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) fcntl$setsig(0xffffffffffffffff, 0xa, 0x1d) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) 6m32.309212744s ago: executing program 0 (id=2313): bind$unix(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x70bd2b, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0xd5}, 0x44004) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x1694, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 6m31.872845719s ago: executing program 0 (id=2316): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x1c, 0x0, 0x10ada85e65c25359, 0x70bd25, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8441}, 0x2004000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) ioctl$KVM_SET_SREGS2(r7, 0x4140aecd, &(0x7f0000000000)={{0xffffffff, 0x2000, 0xe, 0x5, 0xa, 0xf, 0x6, 0x8, 0x5, 0x3, 0x7f, 0x8}, {0x200000, 0x54000, 0x8, 0xf9, 0x10, 0x81, 0x8, 0xd, 0x7f, 0x5, 0x38, 0x8}, {0x41000, 0xffff1000, 0xf, 0x3, 0x7, 0x5, 0x9, 0xc, 0x60, 0x5, 0x49, 0x8}, {0x30000, 0xeeee0000, 0x9, 0x3, 0xf7, 0x7, 0x7, 0xa, 0x0, 0x4, 0x11, 0x9}, {0x2a2fb000, 0x2000, 0xa, 0x2, 0xb0, 0x9, 0x5, 0x4, 0xf9, 0xd, 0x7, 0x2}, {0x30000, 0x0, 0x4, 0xf, 0x7f, 0xf, 0x3, 0xba, 0x5, 0x1, 0x6, 0x6}, {0x30000, 0xe000, 0xe, 0x7, 0x6, 0xff, 0x12, 0x60, 0x73, 0x1, 0xfd, 0xb}, {0xfffff000, 0xb000, 0x10, 0x2, 0x1, 0x2, 0x6, 0x7f, 0x4, 0x40, 0x64, 0x9}, {0x60000, 0x6}, {0x6000}, 0xc0040001, 0x0, 0xc000, 0x8, 0xc, 0x1100, 0xa000, 0x0, [0x3, 0x8000000000000000, 0x100]}) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x54}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, 0x0, 0x240008c4) syz_usb_connect$uac3(0x0, 0x97, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x582, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0x9, 0x80, 0x8, {0x8, 0xb, 0x0, 0x3, 0x1, 0x1, 0x30, 0x23}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x24, 0x3, 0x2, {0xa, 0x25, 0x25, 0x4f3a, 0x5, 0xfffd}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0xe, 0xfffffffb, 0x0, 0x2, 0x2, 0x9d, 0x4, 0xaa}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x74, 0x6, 0xc0, {0xa, 0x25, 0x25, 0x7ffffffc, 0x2, 0xbe1}}}}}}}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) landlock_create_ruleset(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1, 0x0) r9 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IPT_SO_GET_REVISION_TARGET(r9, 0x0, 0x43, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000040)=0x1e) 6m28.591490023s ago: executing program 0 (id=2328): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x20006) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x20, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x23}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4040004}, 0x8011) recvmmsg$unix(r2, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 6m25.146266568s ago: executing program 0 (id=2334): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x70) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34808421, 0x401, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0xa4001f7a}}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f0000000680)=ANY=[@ANYBLOB="180000008000000000000000fdffffff85000000ae000000b7080000300000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1a, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0xfffffffffffffff7, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x80, 0x6, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xd, 0x5}]}, @fwd={0xf}, @enum64={0xe, 0x7, 0x0, 0x13, 0x1, 0x0, [{0x1, 0x6, 0xbfb7}, {0xb, 0xc1d, 0x8}, {0xe, 0x5, 0x7}, {0xd, 0x7, 0x7}, {0x9, 0x80000001, 0x5}, {0x4, 0x4, 0x6}, {0x7, 0x0, 0xfffffff9}]}]}, {0x0, [0x2e, 0x2e, 0x30, 0x5f]}}, &(0x7f00000007c0)=""/253, 0x9e, 0xfd, 0x0, 0x7}, 0x28) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20c01, 0x36) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r5, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r4, &(0x7f00000000c0)='!', 0xb7f40, 0x3000000000000000}]) dup3(r4, r0, 0x0) 6m23.982627125s ago: executing program 0 (id=2338): socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000041000901feffffff00000000027c0000040042800c000180060006008035"], 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x800) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x3, @multicast2}, 0x22) r3 = syz_open_dev$sndpcmc(&(0x7f0000000b40), 0x5, 0x200000) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r3, 0x4112, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x2, 0x7fff) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) read$fb(0xffffffffffffffff, &(0x7f0000000640)=""/148, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0xac, 0x0, 0x1, 0xfffffffc}, {0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000000e80)=[{{&(0x7f0000000280)={0xa, 0x4e20, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000380)='^', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)='!', 0x1}], 0x1}}], 0x2, 0x20040055) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0xfffc}, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8040}, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000530000000a140000001100010000000000000000000000c228789d5fcdd618f45c4386aed0a5bac33f45c626bbffff3f7da318de02a7402762959753070ce3bc4468cf37907e1f76"], 0x28}}, 0x0) syz_usb_connect$lan78xx(0x6, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920001000109021b1901000000f30904150001da40df000905"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000b80)={0x9, &(0x7f0000000500)=[{0x3, 0x20, 0xcb, 0x7}, {0x9, 0x3a, 0x5, 0x4}, {0x62d, 0xc7, 0x4, 0x8}, {0xd99, 0x0, 0x8, 0x3}, {0x5, 0x3, 0x9, 0x2}, {0x1175, 0x5, 0x81, 0x6}, {0x9, 0x7f, 0xd1, 0x100}, {0x5, 0x8, 0xfc, 0xe54a}, {0xb1, 0xdc, 0x8e, 0x3}]}) sendmsg$NFT_MSG_GETOBJ(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a3100000000080003"], 0x34}}, 0x0) 6m18.174646031s ago: executing program 0 (id=2354): syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000008380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2022012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x80000000000000, {0x0, 0x1d}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PTP_EXTTS_REQUEST2(r2, 0xc0046686, &(0x7f0000000000)={0x1a5359be, 0x9}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r4, @ANYRESHEX=r5], 0x15) (async) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r4, @ANYRESHEX=r5], 0x15) 6m2.983688966s ago: executing program 40 (id=2354): syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000008380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2022012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x80000000000000, {0x0, 0x1d}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PTP_EXTTS_REQUEST2(r2, 0xc0046686, &(0x7f0000000000)={0x1a5359be, 0x9}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r4, @ANYRESHEX=r5], 0x15) (async) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r4, @ANYRESHEX=r5], 0x15) 2m47.236007074s ago: executing program 9 (id=3344): socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) syz_open_procfs(0x0, &(0x7f0000000140)='net/psched\x00') openat$uinput(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) unshare(0x2040400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x7ff}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000480)={0x0, 0x3938700}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0xa}, {}, {0x0, 0x3, 0x42}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x6c}, 0x0, @in6=@empty, 0x34ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}}, 0xe8) signalfd4(r1, &(0x7f0000000080)={[0x7b68]}, 0x8, 0x80000) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ee0ff540991100b038e5010203010902240001000000000904000002da8671000905865abf0300000009058202"], 0x0) 2m44.498565216s ago: executing program 9 (id=3354): syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$inet6(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x80003, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000080)=0x2, 0x12) pipe2(&(0x7f0000000080), 0x800) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 2m43.960420499s ago: executing program 9 (id=3357): sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) socket$kcm(0x21, 0x2, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r3, 0x402) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) syz_emit_ethernet(0x52, &(0x7f0000000040)={@local, @random="a0fb23ded097", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "012b00", 0x1c, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) getpeername$netlink(r2, &(0x7f0000000340), &(0x7f0000000540)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32=r1, @ANYBLOB="0000000000000000b702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2m42.501428032s ago: executing program 9 (id=3362): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x20}, 0x50) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = epoll_create1(0x0) epoll_pwait(r1, 0xfffffffffffffffd, 0x21, 0x40, 0x0, 0x55) r2 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x20040844) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r4, 0xe503, 0x0) syz_fuse_handle_req(r4, &(0x7f0000004100)="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", 0x2000, &(0x7f0000006d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m42.145618397s ago: executing program 2 (id=3363): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4080) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x80402, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, 0x0}) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r4, 0x29, 0x19, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000140)={0x2, 0x0, [{0x40000001, 0x80, 0x4, 0x31237648, 0x6, 0x2, 0x80}, {0x40000003, 0x80000000, 0x1, 0x8, 0xffffffff, 0x5b, 0x20000}]}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f00000000c0)={0xc7, 0x0, 0x1}) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x40045731, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m41.361496976s ago: executing program 2 (id=3364): r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000080)=@e={0xff, 0xa}) r2 = openat$random(0xffffffffffffff9c, 0xffffffffffffffff, 0x52f862, 0x0) pread64(r2, 0x0, 0x0, 0x0) r3 = fsmount(r0, 0x0, 0x2) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x4, 0x7, 0x10, @empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x7, 0x1, 0x4, 0x248}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r3, 0x20, &(0x7f0000000580)={&(0x7f0000000480)=""/69, 0x45, 0x0, &(0x7f0000000500)=""/87, 0x57}}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r9, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) preadv(r9, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xfffffffffffffc9d}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID(r10, 0x4008ae8a, &(0x7f0000000ac0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r10, 0xae80, 0x0) 2m41.269845344s ago: executing program 9 (id=3365): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond0\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000004540)=@newtfilter={0x368c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}, {0x9, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x365c, 0x2, [@TCA_BASIC_POLICE={0x82c, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0xfffffffa}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x4, 0x8, 0x5, 0x2, 0x5, 0x8, 0x5, 0x3, 0x6, 0x1000, 0x0, 0x6, 0x1, 0x2, 0x10001, 0xfffffffc, 0x7fff, 0x80000000, 0x47, 0xffffffff, 0x5, 0xffffffff, 0x800, 0x5, 0x3, 0xb, 0x0, 0x0, 0x1, 0x3, 0x7, 0x40, 0x5, 0x100, 0x1c0, 0xfffff000, 0x6, 0x0, 0x9, 0x9, 0x5, 0x2, 0x9, 0x7fffffff, 0x8, 0x4, 0x6, 0xc289, 0x10000, 0x3, 0xca, 0x5, 0x0, 0x100, 0x7, 0x8, 0x5, 0xfffffff8, 0x6, 0x9, 0x236a, 0x7, 0x7fffffff, 0x400, 0x3, 0x1, 0x7ff, 0x0, 0x0, 0xff, 0xffffffa0, 0x681d, 0x1b6983d1, 0x7, 0x4, 0x5, 0x6a6, 0x6, 0xfffffffd, 0x8000, 0x2, 0x7ff, 0x6, 0x8, 0x5, 0x7, 0x7, 0x2, 0x3, 0xfffffff3, 0x2, 0x0, 0xf2, 0x1, 0x8001, 0x8000, 0xc0, 0x1, 0x1, 0x1, 0x5, 0x7ff, 0x6, 0x7, 0x3000000, 0x1a, 0x7, 0x89, 0xffffffff, 0x9, 0x6685, 0x9, 0xd, 0x4, 0x6, 0x7851, 0x4, 0xfffffff0, 0xf402, 0xc, 0x5, 0x8c, 0x2, 0x9, 0x2, 0x5, 0x1ff, 0xfff, 0x9, 0x0, 0x8, 0x64, 0x81, 0x2, 0x2ec, 0x8, 0x8, 0xa37, 0x6, 0x9, 0x394, 0xfffffff9, 0x0, 0x8, 0xffffffff, 0xfffffffb, 0x8, 0x514, 0x7, 0xec, 0x1a76, 0x1ff, 0x2, 0x8, 0xe, 0x6, 0x9, 0x7, 0x3, 0x9, 0x2, 0x5, 0xd7e, 0x9, 0x2000000, 0x1, 0x0, 0x585, 0x703601ff, 0x9, 0x2, 0x5, 0x242d, 0x9, 0x58b, 0x3, 0x6, 0xa, 0xff, 0x5, 0x4, 0x3ff, 0x80000001, 0x3, 0x6, 0xfff, 0xff, 0x8, 0x801b, 0xe08, 0x5b, 0x1, 0xffffffa1, 0xb, 0x8, 0xcb, 0x9b0, 0x80000000, 0x7fffffff, 0x6, 0x2, 0x3, 0x6, 0xe, 0x1, 0x3, 0x6, 0x3, 0x1, 0xfffffffc, 0xa, 0x4, 0x2, 0x4, 0x8, 0x5fd, 0xc, 0x0, 0x10001, 0x7ce6, 0x6, 0x9, 0x5, 0xfff, 0x8, 0x1, 0x0, 0x5, 0x4, 0x7d58, 0x200, 0x6, 0x8000, 0x115, 0x7, 0x10, 0x6, 0x401, 0x8, 0x9, 0x178, 0x2, 0xd3ac, 0x8, 0xe9, 0x7, 0x80000000, 0x0, 0x1, 0x5, 0x700, 0x0, 0x6, 0x3, 0x6]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0x401, 0xb0, 0x4, 0x553, 0x6, 0xfffffffa, 0x0, 0xfffd, 0x6, 0x6, 0x3, 0xaf, 0xd8, 0x9, 0x56, 0xe1, 0x0, 0x2, 0x0, 0x100000, 0x7ff, 0x1ff, 0x6, 0x3, 0x2, 0x40000000, 0x3, 0x3, 0x4, 0x9, 0x10, 0x8, 0x10, 0xd67, 0x7, 0x80, 0x8, 0x7, 0x7, 0x8, 0xfffffffd, 0x9, 0x1, 0x2, 0xe, 0x5, 0x7, 0x0, 0x6, 0xfffffff9, 0xe, 0x3, 0x0, 0x40, 0x400, 0x9, 0xfff, 0x15b023bc, 0xfffffe01, 0xe, 0x7fff, 0x3, 0x5, 0xff, 0x7, 0x6, 0x7, 0x40, 0x1, 0x49, 0x1, 0x72aa4ed9, 0x1, 0x5, 0xe, 0x7ff, 0xf40, 0xfffffff7, 0x4fb, 0x5, 0x8, 0xf, 0x0, 0xcc, 0x6, 0x3, 0x3ff, 0xb0, 0x7, 0x2, 0x8, 0x8, 0xbbf, 0x0, 0x3ff, 0x8001, 0x7, 0x1, 0x10, 0x7, 0xb74, 0x4, 0x422, 0xdd, 0x8, 0x2, 0x3800, 0x1, 0x8, 0x8, 0x1, 0x7, 0x7, 0x4, 0x4, 0x5, 0x7, 0x3ff, 0x2, 0x7f, 0x6, 0x0, 0x0, 0x4, 0x80000000, 0x8, 0x1ff, 0x1, 0x80, 0xa, 0x2, 0x2, 0xb, 0x9, 0xe, 0x101, 0x9, 0xfffffff9, 0x5, 0x401, 0xac04, 0x3, 0x7, 0x2, 0x9, 0x4, 0xfffffff6, 0x4, 0xff, 0x9, 0x8, 0x640b118, 0x2, 0x3, 0x9, 0x8, 0xb59, 0x1, 0xffffffff, 0x80, 0x81, 0x1775, 0x3, 0x8, 0x4, 0x6, 0xff, 0x19be, 0x2, 0x7, 0x218, 0x1, 0x70000000, 0x9, 0x7, 0x5, 0x1, 0x8a2, 0xf4, 0x8, 0x7d0e, 0x10, 0xb0b, 0x2, 0x8001, 0xeb9, 0x5, 0x7, 0xfff, 0x7ff, 0x7, 0xf, 0x4, 0xc, 0x4, 0x9, 0x65a, 0x9, 0xefbb, 0x0, 0x6, 0x8, 0x5, 0x3, 0x31, 0x21, 0x4, 0x7, 0x9, 0x4, 0x8, 0x9, 0x81, 0x4, 0xe615, 0xc9, 0x72c9, 0x7, 0x80000001, 0x925, 0xffff, 0x2, 0x59698af3, 0x3, 0xffff, 0x9, 0x4, 0x8, 0xf9, 0x4, 0xe, 0xd1f, 0x3, 0x1, 0x4, 0x1000, 0x4, 0x8, 0xffffffff, 0xf5a, 0x7ff, 0xa, 0x7, 0x3, 0x6, 0xfff, 0x9, 0x6d, 0x8f7e, 0x8, 0x85, 0x10001, 0x4, 0x3]}]}, @TCA_BASIC_POLICE={0x854, 0x4, [@TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x8, 0x400, 0x80000000, 0x0, {0x9, 0x2, 0x7, 0x4, 0x400, 0x2f}, {0x9, 0x0, 0x9, 0x3, 0x5ab9, 0x1}, 0x9, 0x4, 0x34}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x4, 0x3, 0x8000, 0x8, 0x3, 0x3, 0x1ff, 0x3ff, 0x7, 0x7, 0x797, 0x6, 0x9, 0x8, 0x3, 0x10000, 0x362, 0x7, 0x458, 0x6, 0x9, 0x3, 0x2, 0x7d35, 0x0, 0x400, 0x147c, 0x8, 0x4, 0x1, 0xffff6b47, 0x5, 0xfffffff8, 0xfffffffe, 0x0, 0x4800, 0x4, 0x3b, 0x3f3, 0x8, 0x8000, 0x8, 0x2, 0x4, 0x2, 0x8, 0x10, 0x2, 0x5, 0x8, 0x5, 0x2, 0x7fffffff, 0x7fffffff, 0x80, 0x7, 0x6, 0x5, 0x2, 0x1, 0xa, 0x7fff, 0xfffffff0, 0x4, 0xd, 0x9, 0x4, 0x9, 0x1, 0x40, 0x2, 0x0, 0x7, 0x3ff, 0x3, 0xfff, 0x6, 0x2, 0x1, 0x119422d3, 0x4, 0x100, 0xe6, 0xb30d, 0xfffff021, 0x0, 0x6, 0x6, 0x4, 0xcc92, 0x6, 0xb, 0x101, 0x7f, 0xd1, 0x0, 0x6, 0x64e4, 0x8, 0x1000, 0xfffffffa, 0x3, 0x2, 0x9, 0x401, 0x3, 0xf5, 0x7f, 0x9, 0x2, 0x1, 0x80, 0x6, 0x7fff, 0x10000, 0xd8c, 0xe6ef, 0x400, 0x8, 0x1, 0x4, 0x7, 0x3, 0x1ff, 0x5, 0x3ff, 0x0, 0x4, 0x30ca, 0xb8, 0x19e, 0x2, 0x2d, 0x1f411e2e, 0x9, 0x9, 0x0, 0x3, 0x2673, 0x0, 0x1, 0x6, 0x2, 0x3, 0x1, 0x1, 0x1ff, 0x4, 0x2, 0x2, 0x81, 0x8, 0x5, 0x7c, 0xfffffff7, 0x100, 0x2, 0x46b, 0x7, 0x5, 0x8, 0x4, 0xc, 0x5, 0xffffffff, 0xa, 0xfffffffe, 0x3, 0x8000, 0x200, 0x4, 0x9, 0x6, 0x8001, 0x4, 0x8, 0x2, 0xa8d, 0x8, 0x6, 0x532, 0x3, 0x7c, 0x6, 0x4, 0x7, 0x8, 0xfff, 0x7275, 0x9, 0x2, 0x4e52, 0x1, 0x7f, 0xff, 0x2, 0x2, 0x7, 0x0, 0x2de, 0x3, 0x4, 0x401, 0x0, 0xffff0000, 0x0, 0x1, 0x1, 0x7, 0x4c3, 0x0, 0x8, 0x1, 0x5, 0xf77, 0x8000, 0xfff, 0x7f, 0x6, 0x1000, 0x5, 0x7fffffff, 0x4183e750, 0x1, 0x6, 0x3800000, 0x5, 0xd8a9, 0x0, 0x8, 0x7fffffff, 0x66, 0x4, 0x0, 0x7, 0x1, 0x6, 0x7ff, 0x9, 0xfffffffe, 0x3, 0x9, 0x1, 0x7fff, 0x8000, 0x0, 0xfffffffe, 0x800, 0x10000, 0xbf3, 0x9, 0x222, 0xfffffffb, 0x7, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x7, 0x10000, 0x6, 0x10000, 0x7fffffff, 0xfff, 0x9, 0x6, 0x8001, 0x2, 0x3, 0x6d, 0x9e, 0x4, 0x8, 0xd0a, 0x9, 0x8001, 0x1, 0x1, 0xb, 0xd00, 0x9, 0x400, 0x3, 0x6, 0x9, 0x9, 0x2, 0xd, 0x44, 0x2, 0x0, 0x5, 0x58da6291, 0x96, 0x1, 0x1, 0x1, 0x401, 0xfffffff7, 0x1, 0x8d5, 0xa, 0x0, 0x8, 0x1, 0x9, 0x1d, 0x7, 0xc77d, 0x0, 0x5, 0x4, 0x2, 0x10, 0x8, 0x7a, 0x18, 0x9, 0x9, 0x8, 0x43d, 0x5, 0x3ba, 0x7, 0x81, 0x7, 0x6f, 0x1, 0xe8c, 0xffff, 0x8, 0x4, 0x51f, 0x97c, 0x5, 0x0, 0x5, 0x9, 0x3ff, 0x1ff, 0x2, 0x94, 0x9bd7, 0x9, 0x4, 0x3, 0xa, 0xb4, 0x80000000, 0x130, 0x6, 0x9, 0x447, 0xffff7fff, 0x8, 0x1b8c, 0x32e74414, 0x8, 0xec9, 0x1000, 0x789, 0xffffff13, 0x14000000, 0x7fff, 0x7fff, 0x6, 0xf1, 0x5, 0x0, 0x1, 0x0, 0x9, 0x7, 0xfffffffd, 0xd, 0x8, 0xe, 0x9, 0x3, 0x7, 0x8, 0x8, 0x9, 0xb, 0x3, 0x3, 0xe, 0x6, 0x8, 0x8, 0x8, 0x2, 0x8, 0x2, 0x9, 0x7, 0x8, 0x5, 0x6, 0x6, 0x74, 0xfffffefa, 0xfff, 0x9, 0x2, 0xfffffffe, 0x6, 0x5, 0x4, 0x3, 0x2, 0x0, 0x3, 0x6, 0x1, 0xd, 0x7, 0x2, 0x0, 0x5, 0x4, 0x2, 0xd1b, 0x8, 0xffff5a62, 0xffff, 0x3, 0x200, 0x2, 0x9, 0x1, 0x5, 0xfffffff8, 0x7, 0x3, 0x1000, 0x5, 0xd, 0x8, 0x2, 0x1, 0xfffffffd, 0xfffffff3, 0x40, 0x12000000, 0x7fffffff, 0x2, 0x1, 0x5, 0x1, 0x4, 0x8, 0xfffff04e, 0x3, 0xf0, 0x18e8000, 0x0, 0xac, 0x9, 0x0, 0xfff, 0x4, 0x5, 0x9, 0x1, 0xa, 0x6, 0x800, 0xfffffff7, 0x7ff, 0x7, 0x10001, 0x5, 0xfffff947, 0x7, 0x1, 0x0, 0x6, 0x0, 0xc, 0x9, 0xea3, 0xc, 0x7ff, 0x2, 0xcf37, 0xc4cf, 0x200, 0x9, 0x4, 0x7b, 0x6, 0x20000000, 0x7ff, 0xba61, 0x5, 0x3, 0x0, 0x0, 0x2, 0x7, 0xff, 0x80000001, 0x0, 0x8, 0x3, 0x1, 0x6, 0x6, 0x6, 0x7, 0x0, 0xa72c]}]}, @TCA_BASIC_ACT={0xd4, 0x3, [@m_ctinfo={0xd0, 0xb, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x6}]}, {0x9a, 0x6, "d9b2b0fd6a4ede3f70fc517e47968f9da9e7781babf5d369936f221fa127a3bade229c5800f939d5f377faaa0f1dcf5083e8a22df297d032574660ab25e1ff5a48f70b7163f79bdbf97ec3f5dc8bfa019da8aee0f890de947fcf754a1faec8be43d3a1219fa1e8cfb9f1332f59bedf8cc9b89b21850cc3b7f9be6de60b63ca9ebf6a6c039417b0b8386ee72d24f89a9983e74353fdd2"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_BASIC_ACT={0x24bc, 0x3, [@m_sample={0xfc, 0x19, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x460}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1}]}, {0xbf, 0x6, "e5171582270dabef5972335ac48b7d3c87088699a5cd2c267173d1b24dd3d6dfe032edb76778370100ddfab38d9eae0b58b161753cc7cefd6ee87a4bf49cc44a40891ae2c1f8b28d8a13991c3048cab11ea767c1bf412327fc2fc604285aae93e79baa8569016e63dc126acc4ffc411c6814b8ed00abf429457c0c7382d69ddd0c746673c240e5f21fcbe3d7edcd1597e86ba7e4a071762d743ab3de2ef9d4986a29171f9735c307708fb4f1d23c895d8bd0a5af31ae7522a932a1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_nat={0x14c, 0x0, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xffff, 0x1, 0x5, 0xaa02, 0x6}, @empty, @local, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7c, 0x3, 0x4, 0x4, 0x9}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffff, 0x1ff, 0x4, 0x5, 0xc37}, @rand_addr=0x64010100, @empty, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x8, 0x8, 0x8, 0x40}, @rand_addr=0x64010101, @local, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xdfd, 0xf, 0x2, 0xb7, 0x7}, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xffffff00, 0x1}}]}, {0x5c, 0x6, "06480233ea9c39675d7420556710693ed9038ca37f04736a85fe933004f29ae84a21c1d9ff7a61c9dc9185a537e6627b26ab02c027aeb08051dbe40d901afb719c8f19dc25ac73f1b789764520b51d887895bcf6f923fcde"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_xt={0x110, 0x12, 0x0, 0x0, {{0x7}, {0x4}, {0xe6, 0x6, "eff0ce5bb3d1de67500a1b23348cfa5e1ccdc942a69b214783e9010143996b740d1eaa9131f42b91c00a24cb442cb99d8ad615effee60e8542b59af7d0eaade1a9541d25f4c042117909b8cbf1928d62f7b244c7919fdfc7ab2670c322747b094bf9e42cfefe5b467a8cc01d1f40c2afc394f491faf8321e0ab1e9c0fc9dfafa95e9e11d8c10379f6f5d9b412528045a6a7792e3465b80dcab71b0dae9888f9bd6c8e38b05229bcde47d5b87366dc72e14d22849b186eeadc87e407b39174fd7e01c92a5c694133a85b8cf52c5fac6852c36731b6f2572e1fff4a1ccdc051b9e5ca9"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_ife={0x110, 0x1e, 0x0, 0x0, {{0x8}, {0x6c, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0xd}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x7be, 0x9, 0x10000000, 0x100, 0x2}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x7f, 0x3, 0x7, 0x400, 0x100}}}, @TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x101, 0x3, 0x7ff, 0x1}}}]}, {0x7d, 0x6, "79ded12cf92bc60072483062ebb031ea8a9920c61b286636d64120eaa214a58eab6a5db8cf2d05f1cbf92c0c94f45d1f99484151d6205ef02166d1abd33f5f520acab9cb0d2408338fecc838919ffd5228ab3be686f423051204e63cb52726dc785c2369a979b1226393f5d98046cb6275af75978232666c0a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ctinfo={0x9c, 0x11, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0xf7ab, 0x3, 0x1, 0x7, 0x1}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x6}]}, {0x4d, 0x6, "d5f1b9167c35c8e0a15e9632e8be28919ae02acae0d4a25ee771a788b073d506655db0db7431d99d157021ae3907258e0672978529abf5177df15fd00b42104a6fce9603c6ec3b3c3f"}, {0xc}, {0xc, 0x8, {0x1, 0x5c3afe90af70d09d}}}}, @m_skbmod={0xec, 0x1b, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x99, 0x6, "f967cabb8f814206d1cf77c2ded0c444c3fda55ce7298c4547959fbf1a2b464774df349ef9271d70e02feb4a2d20fd7705822e7849bfa3a5cf32b364481c635a1a61a995c8eb29e5081aa79bddfaa755c42adf5a7ef9882cb6eeb0b4192b9d8d764c03d04b2ca438885a8767a832480b11ae30f69a3077833e7be767d8199903ebfd2df84e4da3e32e47608807bd3cbd8950b73752"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_pedit={0x1ec8, 0xd, 0x0, 0x0, {{0xa}, {0x1e20, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x11c, 0x5, 0x0, 0x1, [{0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS={0xeb0, 0x2, {{{0x5, 0x1, 0x5, 0x9, 0x63d0}, 0x5, 0x1, [{0x1, 0x8, 0x200, 0x57a3, 0xfffffffe, 0x1}, {0x5, 0x0, 0xba, 0xffff, 0x5, 0xa3c}, {0x101, 0x6, 0x5, 0x5, 0x6, 0xfffffffc}, {0x5, 0x2, 0x2, 0x2, 0x5, 0x1}, {0x200, 0x9, 0x8, 0x3, 0x401, 0xc2}, {0x3f771cfe, 0x239, 0x0, 0x0, 0x9}]}, [{0x0, 0x2, 0xc57, 0x9, 0x6, 0x1a8}, {0x7a, 0xfffffffc, 0x10, 0x0, 0x3f, 0x6}, {0x500, 0x0, 0x7fff, 0x10, 0xa, 0xa7}, {0x0, 0x8, 0xddd, 0x4, 0x800, 0x4}, {0x3, 0xfffffff8, 0x0, 0x8, 0xb664, 0x76}, {0x7, 0x7, 0xd4, 0x4, 0x0, 0x1}, {0x4, 0x800, 0x5cb2, 0x10000, 0x2, 0x7}, {0x0, 0x2, 0x9, 0x10000, 0x0, 0x5}, {0x0, 0x200000, 0x0, 0xffff, 0x80000000, 0xfffffffd}, {0x3, 0x0, 0x3, 0x8000, 0x1ff, 0x2400000}, {0x9, 0x80000001, 0x2, 0xf, 0x4, 0x6}, {0x5, 0x3, 0x5, 0x8000, 0x7, 0xfff}, {0xfff, 0x3, 0x74, 0x8000, 0x4, 0x40}, {0x8001, 0x5, 0x0, 0x8, 0xc}, {0x3, 0x8c93, 0x8, 0x5, 0x3}, {0xff, 0xffffffff, 0x3, 0x1, 0x7fffffff, 0x7}, {0x3, 0x7fffffff, 0x8, 0x3f6f, 0x3, 0x1ff}, {0x5, 0x80000001, 0x5, 0x0, 0xd, 0x7}, {0x28, 0x3, 0x8, 0x9d8, 0x7fffffff, 0xfffffffc}, {0x1, 0x96, 0x4, 0x8, 0x8, 0x7f}, {0x3, 0x6, 0x7, 0x3, 0x3, 0x8}, {0x8, 0xdc, 0x6, 0xfff, 0x4, 0x1ff}, {0x4, 0x7, 0x5, 0x5, 0x8, 0x5}, {0x81, 0x4, 0x4, 0x0, 0x6, 0x3}, {0x1, 0x3, 0x9, 0x7, 0x8, 0x7}, {0x204a, 0x2, 0x9, 0x2, 0x7fff, 0x6}, {0x66, 0x7, 0xaa42, 0x20000, 0x6, 0x5}, {0x4, 0x0, 0x5, 0x81, 0x1, 0x21880}, {0xfd1d, 0x23be8b64, 0x8, 0x0, 0x2, 0x8000}, {0x6a80, 0x9, 0x0, 0x6, 0x8, 0x2}, {0x5, 0x9, 0x8, 0x40, 0x8, 0x1}, {0x3ff, 0x7f, 0x7, 0x8000, 0xd4, 0xf23}, {0x780, 0x5, 0xffffffc9, 0x4, 0x8, 0x9}, {0x2f8c218, 0x9, 0x7, 0x80, 0x3, 0xb07f}, {0x8, 0x8, 0x1, 0x8, 0x1}, {0x9, 0x5, 0x2, 0x2, 0x400, 0x2}, {0x1, 0x9, 0x4, 0x5, 0x6, 0x3}, {0xd, 0xa, 0x2, 0xfffffff8, 0x3, 0x400}, {0x9, 0x4c72, 0x0, 0x40, 0x4, 0x10001}, {0xb, 0x76e, 0x40, 0x3, 0x5, 0x15c6}, {0x5, 0x5, 0xfffffffe, 0x7fff, 0x80000000, 0x2}, {0x2, 0x101, 0x4, 0x0, 0xfe1, 0x9}, {0x0, 0xf27, 0x7, 0x7, 0x3, 0x62}, {0x9, 0x1, 0x6, 0x0, 0x8, 0x800}, {0x5, 0x9, 0x1, 0x9, 0x9}, {0x1, 0x8, 0x1, 0x5, 0x4, 0xf}, {0x8, 0x10000, 0x0, 0xfff, 0x0, 0x3}, {0xe9, 0x400, 0x7fff, 0x800, 0x7, 0x3}, {0x3, 0x4, 0xfff, 0x9, 0x1ff, 0x7fff}, {0xfffffffd, 0xa711, 0x0, 0x4f1, 0x2, 0x4}, {0x0, 0xd, 0x6, 0x5, 0x7, 0x4}, {0xffffffff, 0x2, 0xffff, 0xaa, 0x2, 0x3}, {0x883, 0x6, 0x3, 0x0, 0x6, 0xc}, {0x6, 0x768, 0x0, 0x6, 0x7f}, {0x0, 0x2, 0x9, 0x800, 0x0, 0xbba}, {0x80, 0x4, 0xe01, 0x532, 0x101, 0x2}, {0x8000, 0x15, 0x4, 0x9, 0xfffffffc, 0x9}, {0xfffffffe, 0x8, 0x9, 0x7f, 0x3, 0x6}, {0x2, 0x7, 0x1, 0x55, 0xbd20, 0xffffff2e}, {0x6, 0x2fc, 0x5, 0x3, 0xff, 0x4}, {0x41cb, 0x100, 0x4, 0x10000, 0xfffffff3, 0xe}, {0x7, 0x6, 0x6, 0xfffffffa, 0x9, 0x1}, {0x4, 0x3, 0x5, 0xae07, 0xc000, 0x2}, {0x5, 0x4, 0x800, 0x1, 0x7fffffff, 0x4}, {0x0, 0x986, 0x6, 0x3, 0x5, 0x1}, {0x6, 0x80, 0x3, 0xfffffffc, 0x80000001, 0x7}, {0x10001, 0x5, 0x1, 0x0, 0x9, 0x9}, {0xfffffffa, 0x3, 0x64, 0x101, 0x8000, 0x4}, {0xa, 0x668, 0xd, 0xff, 0x9, 0x3}, {0x80, 0x1, 0x8, 0x6, 0x8, 0x8}, {0x7, 0x3, 0xa6eb, 0x2, 0x6}, {0x1, 0x9, 0x7, 0x0, 0x80, 0xc27}, {0x5, 0xfffffff8, 0x8, 0x7, 0x4, 0x3}, {0xe0, 0x85, 0x200, 0x2, 0x1000, 0x7}, {0x5, 0x3, 0x7, 0x34, 0x7, 0xbfb}, {0xa9e3, 0xbf, 0x1, 0x40, 0x4, 0x8}, {0x57, 0x4, 0xa, 0x9a, 0x2, 0x2}, {0x7, 0x4, 0xd, 0x4, 0x0, 0x3}, {0x401, 0x80, 0x10001, 0x6, 0x7ff, 0xbb6}, {0x7, 0x8000, 0xfffffff7, 0x5, 0xf62f, 0x80000000}, {0x0, 0x4, 0x9, 0xf, 0x7, 0x10000}, {0x0, 0x6, 0x8, 0x5, 0x9b6f, 0x6}, {0x0, 0x5c000000, 0x101, 0x7f, 0x145, 0x2}, {0x7, 0x0, 0xfffffbff, 0x1, 0x77, 0x9}, {0x1800000, 0x8000000, 0x100, 0x9, 0x9, 0x7}, {0x8, 0x3, 0x1, 0xe9d4, 0x2, 0x1}, {0x4, 0x6, 0x5, 0x1, 0x4, 0xe}, {0x8, 0x8a, 0x5, 0xb, 0xff, 0x3}, {0x60, 0x8001, 0x57, 0x7fffffff, 0x2e65, 0x7ff}, {0x8000, 0xf, 0x0, 0x4, 0x7, 0x9961}, {0x4, 0xfffffe00, 0x2500, 0x8, 0x9, 0x7}, {0x0, 0x2, 0x0, 0x7, 0x8, 0xb19d}, {0x0, 0x3, 0x1000, 0x6, 0x0, 0xfffffff3}, {0x80, 0x4, 0x2, 0x0, 0x4, 0x3}, {0x5, 0x8, 0x8, 0x800, 0x5df3, 0x1}, {0xd, 0xfa2b, 0x0, 0x34000, 0x4d5, 0x9}, {0x3, 0x7ff, 0x8, 0x7, 0x8, 0xfffff8bd}, {0x1, 0x800, 0xe6c, 0x55b, 0x800, 0xffffff81}, {0x2, 0x100, 0x2, 0x3, 0x3, 0x4cf}, {0xfffffffa, 0x7f, 0x4, 0xf9e3, 0x1}, {0x95d, 0x2, 0x8, 0x9, 0x401, 0x3}, {0x3, 0x10000, 0x3ff, 0xfffffff8, 0x1}, {0x46e4, 0x5, 0x1000, 0xb535, 0x7, 0xfffff001}, {0x160700, 0x9, 0xf7f1, 0x8, 0x5, 0x10}, {0x2158, 0x8, 0x7, 0x7ff, 0x2, 0x6}, {0xff, 0xdfb, 0xffffffff, 0x432, 0x10000, 0x5}, {0x0, 0x800, 0x6, 0x0, 0x3, 0xffffffff}, {0x8, 0x7f, 0x301, 0x2, 0xb, 0x6ffa}, {0x8, 0x9, 0xe6, 0x10001, 0x7fffffff, 0x7}, {0x0, 0x6655, 0x101, 0x800, 0x2, 0x9}, {0x2f5, 0x84, 0x5, 0x0, 0xfffffffa, 0x7}, {0x7, 0x5, 0xe, 0x400, 0x80, 0x5}, {0x0, 0xf63, 0x2, 0x10, 0xe0, 0x9}, {0xf92, 0x9, 0xc, 0x200, 0x7fff, 0x4d}, {0x2c3, 0x1, 0x2, 0x400, 0x7, 0x9}, {0x6, 0x18, 0x3, 0x7, 0x0, 0x100}, {0x6, 0x7, 0xffffffff, 0x3, 0x4806, 0x5}, {0x40, 0x800, 0x3ff, 0x5, 0x308, 0x7}, {0x7, 0x9, 0x5, 0x6b67, 0x7, 0x2}, {0x200, 0xa1, 0x0, 0x5, 0xa, 0xd3b3}, {0x1, 0x0, 0x1, 0x6, 0x9, 0xd}, {0x8, 0xfffffff7, 0xf4fa, 0x7, 0x1}, {0x0, 0x8, 0xffffffc4, 0x8, 0x5, 0x4}, {0x7fff, 0x4, 0x200, 0x8000, 0x101, 0x8}, {0x5fa5, 0x2, 0x5, 0x9e, 0x9, 0x4}, {0x2b54, 0x5f, 0x9, 0x3, 0x5, 0x7}, {0x6, 0x0, 0xff, 0x15f9, 0x101, 0x3}, {0x4, 0x8, 0x5e8d6a1d, 0x9, 0xffffff3d, 0x29f6}], [{0x0, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x5}, {0x1}, {0x3}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x0, 0x3}, {0x3}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x4}, {0x5}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x3}, {0x2}, {0x7, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {}, {0x4, 0x1}, {0x2}, {0x1}, {0x2, 0x2}, {0x3}, {}, {0x7, 0x1}, {0x5}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x3}, {0x1}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x4}, {}, {0x4}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x4}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {}, {0x2}, {0x5}, {0x7}, {}, {0x4, 0x1}, {0x3, 0x1}, {}, {}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x5}, {0x4, 0x1}, {}, {0x5}, {0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3}, {}, {0x4}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}], 0x1}}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x6, 0xf65, 0x1, 0x3, 0x6}, 0x2, 0x0, [{0xb836000, 0x6, 0x5, 0x2, 0xfffffff7, 0x8}, {0x80, 0x9, 0x5, 0x401, 0x9, 0x3}]}, [{0x800, 0x9, 0xc9, 0x6, 0x8000, 0x81}, {0x6, 0x6, 0x1, 0xffff8001, 0x1, 0x3}, {0x5, 0xfff, 0xe, 0x0, 0xffffffff, 0x101}, {0x4, 0x6, 0xffff, 0x6}, {0xfffffffd, 0x1, 0x800, 0x7, 0x3}, {0x8, 0x7, 0x3, 0x4, 0x4, 0x960}, {0x10000, 0xf663, 0x0, 0x7, 0x8, 0xab}, {0x9, 0x8001, 0x5640, 0x3d, 0x9c79, 0xe}, {0x4080000, 0x6, 0x101, 0xd68e, 0xe, 0x6}, {0x9, 0x411, 0x40, 0x100, 0x7, 0x6c96fc}, {0x800, 0x0, 0x4, 0x6, 0x7, 0x2}, {0xe, 0x425dce72, 0x8, 0x7, 0x0, 0xe}, {0xfff, 0x5, 0x4, 0xf13c, 0x8, 0xc}, {0x7, 0x1000, 0x1d8a, 0xffff, 0x200, 0x7}, {0x8, 0x5, 0xfc, 0x101, 0x1, 0x6a2}, {0x2, 0x6, 0xd, 0xfffffff8, 0x3, 0x40f2}, {0x45, 0xb1a, 0x0, 0x5, 0x800, 0x7f}, {0x400, 0x1b, 0x6, 0x1, 0x0, 0xffffff2a}, {0x8, 0xfffffff8, 0x9, 0x2, 0x101, 0x8}, {0x1000, 0x40, 0x7fffffff, 0x10001, 0x100, 0xe}, {0x6, 0x8, 0x1, 0x1, 0xb7ae, 0x8000}, {0x9, 0x80000001, 0xe, 0x3, 0x0, 0x101}, {0x1, 0x1, 0x0, 0x9, 0x5, 0x7348}, {0x99d, 0x0, 0x6, 0x8, 0x1, 0x8}, {0x5, 0xfffffc01, 0x7, 0xfffffff7, 0x5, 0x3}, {0x9f, 0x63d, 0x5, 0x5, 0x7, 0x1ff}, {0xf4, 0x6, 0x6, 0x7fff, 0xa1d3, 0x1}, {0xe30d, 0x9, 0x0, 0x0, 0x3, 0x7eb4ad5d}, {0x3, 0x7fffffff, 0x9, 0x2, 0x3, 0x100}, {0xffff0000, 0xf9eb, 0x6, 0x80000000, 0x62, 0x8}, {0x3, 0x3, 0x9, 0x5, 0x3ff, 0x4}, {0xffffffff, 0x6, 0xfd6, 0x3, 0x5, 0x25050a5f}, {0x4, 0x3, 0xde, 0xe6c00, 0x6, 0x10000000}, {0xfffffff9, 0x1, 0x7, 0x5, 0x7fffffff, 0x7fffffff}, {0x2, 0x1ff, 0x9, 0x8, 0xc, 0x7}, {0x0, 0x8, 0x666, 0x66, 0x40, 0x9}, {0x7, 0x0, 0x6, 0x1, 0x8, 0x100}, {0x3, 0x8000, 0x9, 0x100, 0x75b, 0x7}, {0x6, 0x1, 0x806e, 0xfffffffa, 0x1ff, 0x7fffffff}, {0xd, 0xc, 0x24b, 0x8000, 0x1, 0x7b7}, {0x3ff, 0x7, 0x5, 0xf, 0x80, 0x5}, {0x3ff, 0xd7dc, 0x4, 0x2, 0x9, 0x5cd}, {0x2800faaf, 0x6, 0x8, 0x5, 0x8, 0x2}, {0xb199, 0x0, 0x10001, 0x80, 0x5f3f}, {0x6, 0x8a3, 0xb46, 0x6, 0x3, 0x5}, {0x7, 0x8, 0x9, 0x2, 0x674a, 0x2}, {0x7, 0x8, 0x9bf6, 0x878, 0x8, 0xf}, {0x2, 0x4, 0x9e2e, 0xe5a2, 0x2, 0x65b3}, {0x8, 0x2, 0x10, 0x4eb500a9, 0x8001, 0x1}, {0x200, 0x5, 0x7, 0x3, 0xe, 0x3}, {0xd, 0x4, 0xffffff25, 0x7, 0x8, 0x9}, {0x3, 0x5, 0x4, 0x264d, 0x40, 0x9}, {0x9, 0xe151, 0x5, 0x8000, 0x4, 0x9}, {0x83b, 0x6, 0x8, 0x0, 0x4, 0x4}, {0x3ff, 0x0, 0x3, 0x1ff, 0x1f5, 0xf3}, {0x7fff, 0x38, 0x8, 0x3, 0x1, 0x7}, {0x4, 0xfffffff8, 0x5, 0x2, 0x80000001, 0x7}, {0x8, 0x3, 0x6, 0x395b, 0x6, 0x1}, {0x3, 0x5, 0x80000001, 0x7, 0x2405, 0x4}, {0xca, 0x8, 0x6, 0x0, 0xae308ea8, 0xf}, {0x3, 0xa, 0x3, 0x9, 0x10000}, {0x80000, 0x5, 0x2, 0x4, 0xfffffffc}, {0x2, 0x8, 0x80000001, 0x3b, 0x9, 0xb}, {0xb53, 0x80, 0xe, 0x5, 0x7, 0x10}, {0xffc00000, 0x2, 0x0, 0x4, 0x0, 0x7}, {0x7fffffff, 0x1, 0x6, 0x0, 0x6, 0xffffffc0}, {0x6, 0x2, 0x2a, 0x10001, 0x8, 0x9}, {0x4f8, 0x59, 0x40, 0x5, 0x1, 0x81}, {0x5, 0xfffffffc, 0x8, 0x1, 0x5, 0x7}, {0xc, 0x9, 0xacc5, 0x3, 0x5, 0x6}, {0x800, 0x40, 0xffffff3c, 0x1, 0xfffffff8, 0x4c32}, {0x6, 0xffffffff, 0x800, 0x10001, 0x5, 0x4}, {0x1, 0x9, 0xffff8000, 0x5a, 0xfffff801, 0x7}, {0x6, 0x0, 0x2, 0x4, 0x2, 0x3}, {0x9, 0x6, 0x2, 0xd, 0x2, 0x10001}, {0x7, 0xb9c1, 0x5, 0x7, 0x4, 0x10000}, {0x3, 0xa, 0xaf, 0x2, 0x1, 0x10000}, {0x8b9, 0x5, 0x7ff, 0x8, 0xc28f, 0x3ae}, {0x2, 0x31, 0xf4, 0xdc23, 0x7fff, 0x4}, {0x1, 0x6, 0x1000, 0xd25a, 0x6, 0x3}, {0x5, 0x2, 0x2, 0x2, 0x8, 0x3}, {0x7, 0x8, 0x9, 0x1f5b, 0x2, 0x9}, {0xc7c4, 0x9, 0x0, 0x7, 0x3, 0x101}, {0xe, 0x6, 0x8, 0x5, 0x9, 0x77b}, {0x9, 0x2, 0x7, 0x4, 0x5, 0x80000000}, {0xfffffffb, 0xce2e, 0x5, 0xff, 0xee12, 0x1}, {0x0, 0x80000000, 0x3, 0x9, 0x1, 0x3}, {0x7ff, 0x4, 0x80000001, 0x9, 0x4, 0x7}, {0xf, 0x0, 0x3, 0x0, 0xffff, 0x3}, {0x6, 0x5, 0x8, 0xffffffff, 0x80000001, 0x3}, {0x7ff, 0x426, 0xbe, 0x2, 0x8000000, 0x73}, {0x1, 0x1, 0xfffffffc, 0x8, 0x0, 0x7}, {0x4, 0x9, 0xff1, 0x1, 0x0, 0x10}, {0x10, 0x1, 0x1, 0x1000, 0x80000001, 0x1c64}, {0x1ff, 0x2, 0xff54, 0x3, 0x0, 0x80000000}, {0x1, 0x800, 0x91d0, 0x101, 0x100, 0x6}, {0x7fffffff, 0x4, 0x9, 0x7, 0x3, 0x8}, {0xe258, 0x6b, 0xfffffffb, 0x0, 0xfffffffb, 0x2}, {0x233, 0x80000001, 0x80000000, 0x1, 0x5, 0x6}, {0x10, 0x7, 0xfffffffb, 0x3, 0x0, 0x2}, {0xfffff10f, 0x3, 0x9, 0x7, 0x2}, {0x1ff, 0xa119521c, 0xa, 0x78b9, 0x3, 0x3}, {0x1, 0x253, 0x5, 0x7, 0x5, 0x6}, {0x240, 0x1, 0x21b, 0xff, 0x2, 0x3}, {0x400, 0x0, 0x0, 0x7, 0x10001, 0x4}, {0x0, 0xd740, 0x7, 0x2, 0xfffffffd, 0x10000}, {0x5, 0x9, 0x7, 0xb, 0xc, 0x1000}, {0x8, 0x9, 0x9, 0x2, 0x9, 0xe}, {0xce, 0x1, 0x101, 0x100, 0x4, 0x9}, {0x81, 0x9, 0x1, 0x7fffffff, 0xf9, 0x4}, {0xfffffffe, 0xffffffe5, 0x3, 0x0, 0x1b, 0xe}, {0x1000, 0xfe000000, 0x2, 0x0, 0x6, 0x4}, {0x9, 0x61, 0xff, 0x3, 0x6, 0x8000000}, {0x7f, 0x5, 0x0, 0x1, 0x100, 0x5}, {0x7, 0x8, 0x7, 0x3, 0x8, 0x9}, {0x7, 0x1, 0x7, 0x0, 0x9, 0xa6}, {0x2, 0x0, 0x5a, 0x80000000, 0x1000}, {0x5, 0x2, 0x8000, 0x8, 0x81, 0xfffffffa}, {0xfffffff9, 0x0, 0x101, 0x6, 0xa, 0x9}, {0x2, 0x80, 0x8000, 0x25, 0x100, 0x3}, {0x4, 0xe0fd, 0x81d, 0x4, 0x7, 0xe}, {0x1, 0x1, 0x4, 0x101, 0x3, 0x4d1}, {0x8, 0x6, 0x0, 0xf4bc, 0xe4e6, 0x9}, {0x1ff, 0xffffff01, 0xf, 0x8, 0x101, 0x3}, {0x100, 0x2, 0x5, 0x1, 0x4, 0x2}, {0x8, 0xc8a5, 0x25, 0x10001, 0x2, 0x8}, {0x770, 0x0, 0x1, 0x3, 0x3, 0xfffffffd}, {0x8, 0x4, 0x10000, 0x2, 0x7b49, 0x9}], [{0x4, 0x11360f30955d3c5b}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x5}, {}, {0x1}, {0x2}, {0x5}, {}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x3, 0x6e268859944c808e}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {}, {0x3}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {}, {0x2}, {}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {}, {}, {}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x2}, {}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x7, 0x1}, {0x4}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {0x4}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x3}, {0x3}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x2}], 0x1}}]}, {0x7d, 0x6, "e2a7f16f2a09fe3a3b459b46961db6fb6fa9190f4250124b7856cc7c78543cb425717d70b1a822c0058a34313466897b5d70ffcc9665e5a51dd906a047cabadcbd66b465142de7f8c92c979fdb91e75f3e82973d9e5ac478ac3165823c746a24e4908608a1aec00c016060f43b6d2713a5917744c2b3e2ed14"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_BASIC_POLICE={0x48, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x2, 0x2, 0x10, 0xdd3c, {0xb, 0x1, 0x5, 0x7000, 0x0, 0x8}, {0xfb, 0x0, 0x9, 0x200, 0xa, 0x88a6}, 0x2, 0x1ff, 0x3}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7f}]}]}}]}, 0x368c}}, 0x20040040) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xd6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r5) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x2, 0x0, 0x2, 0x1, {0xa, 0x4e24, 0x4, @empty, 0x1f}}}, 0x3a) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r4}}) write$P9_RVERSION(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x41) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="51000000ff00000000000000cafc754a7a28955db5c0b65543a2ecb96bda82a68a03dff2e71e13763348e1de4963d27e530a122ecac71b645f4a04f32ab760cb79f2250ca2fdf6c04534cc328f4ac68a9e76144901564a768a81ca230c1ee3747d747584824f0d1eda8efce2568611d52cc987a21c2773e480d59b087b082f0fb7e2f6f90b4cf932077daf8417d32475de52e1284ceb1d0f78038bbb648eefcfd2b05012145a2f0887b9c96112abb6c145ebd06f01f43bb1255093e1ed50c700b84f5bf9bf72f1c188b51c748d1e100af78b8bbbc8a6fc88e39f5bd01fa7795313eb049f977c910cd1f41e", @ANYRES32=0x0, @ANYBLOB='!\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r12, @ANYBLOB="280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="2100000000080500"], 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={r9, r10, r11}, 0xc) 2m38.963276303s ago: executing program 2 (id=3370): syz_io_uring_setup(0x4db2, &(0x7f0000000140)={0x0, 0x5a8c, 0x1, 0x2, 0x139}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f00000001c0)) syz_io_uring_modify_offsets$generic(r0, r1, 0x2c, 0x10000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') pread64(r2, &(0x7f0000001480)=""/265, 0x109, 0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000003000)={0x0, 0x1, 0x0, 0x100000, &(0x7f0000002000/0x100000)=nil}) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f0000004000)={0x0, 0x100000}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000003000)={0x0, 0x0, 0x0, 0x100000, &(0x7f0000002000/0x100000)=nil}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000180)='ufs\x00', 0x1a0c099, 0x0) listxattr(&(0x7f0000000040)='./bus\x00', 0x0, 0x3f) read$FUSE(r3, &(0x7f0000002540)={0x2020}, 0x2020) 2m38.837769008s ago: executing program 9 (id=3372): r0 = socket(0x1e, 0x4, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x99) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}, {@release_agent={'release_agent', 0x3d, './file0'}}]}) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_int(r1, 0x0, 0x1, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, 0x0, &(0x7f00000000c0)) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x3ff, 0x1, 0x1ff, 0x1, 0x6, 0x6}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg(r0, &(0x7f0000008a00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000006400)=@generic={0x1e, "178865bdc92c81dd53f6cdff1a1d56ecf595d19991ef31c8fe9827272f763c3564d09f1beef9326d2e9c3db162e4e2f5e4591629af3ae88090c076ec560f284a3c11558943014d6f1ca6dd6e82ac8464b25285f68b018f78425fe56c6f03ef004020942c43655ac7eaf9528524b3927867ebd2ac729e836550cff3bd70ec"}, 0x80, 0x0}}], 0x2, 0x9200000000000000) 2m37.573833229s ago: executing program 2 (id=3378): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="ca432b7e82609965336d9c414599bc04d23621a508809bd38400"/39, @ANYRES16=r1, @ANYBLOB="11042bbd7000fddbdf251400000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@timestamp, @window={0x3, 0x0, 0x32}, @mss={0x2, 0x4}, @mss={0x2, 0x6}], 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) mkdir(0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x141c41, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xb9) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x240}, 0xe) bind(r3, &(0x7f0000000300)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x80) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2b5b09b, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x34, 0x0, 0xffffffffffffffc0}]}) umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0x8) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r7, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, r8, 0x0, 0x0, 0x0, 0x2}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./my_configfs/dlm/cluster1/comms/1/local\x00', 0x2, 0x0) write$P9_RATTACH(r9, &(0x7f0000000040)={0x14, 0x69, 0x1, {0x8, 0x2, 0x2}}, 0x14) 2m37.178601979s ago: executing program 2 (id=3380): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="dc000000", @ANYRES16=r1, @ANYBLOB="0100000000000000000018000000c00030800c000180050002000300000024000300dfd722cbab076333ca4e235b39549b844c1274eb199053609ab6602334a8ff37140001800500020000000000080001000100000064000180080001000200000008000400000800003400038006000300a1aa000006000300a0aa00000800020002000000060001000300000006000100ffff000006000300ffff000005000200010000000c000500ff0f000000000000080004008948ffff14000400bc61f114f5399db1c47400dc8650a12d08000300", @ANYRES32=r3], 0xdc}, 0x1, 0x0, 0x0, 0x4008805}, 0x0) ioctl$TIOCGSID(r0, 0x5429, 0x0) (async) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) (async) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000000)=0x4000) 2m36.276297342s ago: executing program 2 (id=3384): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x40000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0xd4f, 0x1800007, 0x81, 0x2, 0x8, 0x0, 0x5, 0x5, 0x4bf7, 0x4, 0x200200000002, 0xffff, 0x3, 0x5, 0x9, 0x100000090], 0x4000, 0x25812}) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r5, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r5, 0x5, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=@newqdisc={0x89c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0x10}, {0x6}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x870, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x8f2263cdb33a7863}, @TCA_TBF_PBURST={0x8, 0x7, 0xeb}, @TCA_TBF_BURST={0x8, 0x6, 0x6}, @TCA_TBF_PBURST={0x8, 0x7, 0x1f65}, @TCA_TBF_PBURST={0x8, 0x7, 0x17d8}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x4, 0x7ff, 0xfffffff9, 0xff, 0x80a4abc, 0xfffffff3, 0x8, 0x2, 0x2, 0xfffffff9, 0x7, 0x10, 0x7, 0xf3af, 0x4, 0xc, 0x5, 0xe29, 0x2, 0x5, 0x40, 0x5, 0x2, 0x9, 0xc, 0x4, 0x6, 0x6848, 0x9c0, 0xf48, 0x1c, 0x80000001, 0x8, 0x4, 0x9, 0x80, 0xe61c, 0xe4e3, 0xa2c, 0x0, 0x8, 0x8001, 0x100, 0x0, 0x101, 0x0, 0x1, 0x0, 0x200, 0x52, 0x1db5, 0x20000, 0x82, 0x1ad9, 0xfffffff8, 0x69, 0x4, 0x8, 0xf2d2, 0x8, 0x16, 0x4, 0x10001, 0xb, 0x4, 0x2, 0xa, 0x5, 0xa1, 0xffffc164, 0xe, 0x0, 0xfffffffc, 0x4, 0x4, 0x4, 0x2, 0xb, 0x7, 0x676, 0x8000, 0xae6, 0xd376, 0xfffffffa, 0x3, 0x3, 0x80000001, 0x3, 0x4, 0x3d3, 0xe, 0x8, 0x1, 0x7f, 0x2, 0x7, 0x0, 0x4, 0xe09, 0xffff8000, 0x81, 0x6, 0x10001, 0x0, 0x10000, 0xa5b, 0x9, 0x6, 0x0, 0x3, 0x80000001, 0x8, 0x4581, 0x9, 0x3, 0x5, 0xfffffffd, 0x0, 0x5, 0x2, 0x4, 0x101, 0x10000, 0x8, 0x6, 0x3, 0xb4, 0x2e0d7981, 0x7, 0x7, 0x34, 0xff, 0x400, 0x0, 0xf24, 0x3, 0xfffffffb, 0x9, 0x5, 0x415, 0x55, 0x7, 0x100, 0x0, 0x4, 0x5, 0x8, 0x1ff, 0x6514, 0x24a, 0x6, 0x9, 0x9, 0xfffff001, 0xa0, 0x5, 0x8, 0x0, 0x3, 0x6, 0x7fff, 0x8, 0x80000000, 0x4, 0x2, 0xffff, 0x92, 0x2, 0x9, 0x3, 0x3, 0x80000000, 0x2, 0xcc5, 0x200, 0xbb2, 0x2, 0x3, 0x1ff, 0xfffffc01, 0x81, 0x5, 0x7ff, 0x2, 0x5, 0x5, 0x8, 0x6, 0xffffffff, 0x3, 0x0, 0x6, 0x4, 0x6, 0x903, 0x5, 0xfffffffd, 0x1ff, 0x9503, 0x3, 0x0, 0x9, 0x3, 0x9, 0xa62b, 0xff, 0x7, 0x4e, 0x800, 0xdb, 0x5dd, 0x8, 0x1, 0x7, 0x140, 0x3, 0xe, 0x1000, 0x0, 0x5, 0x7fff, 0x4, 0x101, 0x4, 0x7f, 0x10, 0x2, 0x2, 0x5, 0x9, 0xc, 0x2, 0x3ff, 0x8, 0x85d, 0xfffffffb, 0x9, 0x3, 0x7, 0x7, 0x9, 0x6, 0x5, 0x3, 0x8, 0x7, 0x7, 0x0, 0xfffffffe, 0x7ff, 0x0, 0x1b, 0x6, 0x401, 0x8]}, @TCA_TBF_BURST={0x8, 0x6, 0x1}, @TCA_TBF_BURST={0x8, 0x6, 0x8}, @TCA_TBF_PTAB={0x404, 0x3, [0x6, 0x7, 0x7, 0x7, 0x0, 0xc, 0x8, 0x6, 0x8, 0x9, 0x0, 0x7fffffff, 0xfff, 0x2, 0x9, 0x7, 0x4, 0x3, 0x7, 0xb7a, 0x1, 0x8000, 0x6b1, 0x0, 0x7, 0x3ff, 0x92, 0x8, 0x5, 0x3, 0x8, 0x8c3, 0x3, 0x4, 0x315, 0x1a, 0x3, 0x6, 0x0, 0x3, 0x9, 0xd, 0x3, 0xa, 0x9, 0x8, 0xe, 0x9, 0x2, 0x1, 0x8, 0xde, 0x0, 0x400, 0x4978, 0x2, 0x8, 0x7, 0xc, 0x8001, 0xcf, 0xf8d9, 0xd, 0x7, 0x14, 0x200, 0x1, 0x558, 0xfffffff9, 0x4, 0x1, 0x8, 0xa504, 0xe, 0x6, 0x5, 0x7f, 0x7, 0x767, 0xffffffff, 0x3, 0xffffbf8c, 0x5, 0x7fffffff, 0x9, 0x0, 0xe871, 0x8001, 0x4, 0x80000000, 0x7, 0x8, 0xe, 0xb8, 0x7, 0x2, 0x58, 0xffff000, 0x4, 0x1, 0x5907137e, 0x101, 0xfffffffe, 0xfffffff8, 0x1, 0x7bc51ad2, 0x6, 0x180000, 0x9, 0x2, 0xffffbef1, 0xffffffff, 0x401, 0x0, 0x103, 0x5, 0x1, 0x2, 0x40, 0x8, 0x1, 0x1000, 0x1, 0x401, 0x9, 0x1, 0x9, 0x355, 0x8, 0xc, 0x20b88000, 0x1, 0xb, 0xfffffffb, 0x3, 0x2, 0x7, 0x8, 0x3, 0x3, 0x6, 0x8, 0x1, 0x0, 0x5, 0x4, 0x6, 0x7, 0x8, 0xd, 0x6, 0xfffffff5, 0x4, 0x4, 0x8, 0x7, 0x9, 0x5, 0x3, 0x400, 0xd21d, 0xfffffffc, 0x7fff, 0x3644, 0x3, 0x29, 0x3, 0x2, 0x3, 0x3b4, 0x2, 0x80000000, 0x5, 0xfffffff9, 0xfffffffe, 0x5, 0x73, 0x665b655, 0x1, 0xd, 0x4, 0xb3, 0x2, 0x80000000, 0x101, 0x0, 0x4, 0x3, 0x8000, 0x9, 0xfffff093, 0x6, 0x9, 0x685, 0x56b, 0x200, 0x3, 0x1, 0x80000000, 0x31, 0x4, 0x971, 0x10001, 0x9, 0x7ff, 0x3, 0x3a9, 0x6, 0x3, 0x5d, 0x7, 0xd77, 0x9ad, 0x80000001, 0x3, 0x9, 0x7fffffff, 0xf308, 0x7, 0x10000, 0x20, 0x2, 0x80000000, 0x6, 0x0, 0x0, 0x3, 0x6, 0x1, 0x4, 0x401, 0xff, 0x6, 0x5, 0xffffffff, 0x7f, 0x8, 0x6, 0x6, 0xfffffffb, 0x9c9, 0x5, 0x3, 0xfffffffb, 0xffffffff, 0xff, 0x5, 0x9fde, 0x7, 0x9, 0xfffffff7, 0xad0, 0x1a8ece79, 0x61f4, 0xfffffffd, 0xfffffffc]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x1, 0xcbe, 0xffff, 0x81, 0x5}, {0xfd, 0x0, 0x9, 0x7097, 0xa, 0x47}, 0x1, 0x0, 0x21e4}}]}}]}, 0x89c}, 0x1, 0x0, 0x0, 0xc040}, 0x880) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 2m35.981087532s ago: executing program 41 (id=3384): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x40000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0xd4f, 0x1800007, 0x81, 0x2, 0x8, 0x0, 0x5, 0x5, 0x4bf7, 0x4, 0x200200000002, 0xffff, 0x3, 0x5, 0x9, 0x100000090], 0x4000, 0x25812}) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r5, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r5, 0x5, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=@newqdisc={0x89c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0x10}, {0x6}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x870, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x8f2263cdb33a7863}, @TCA_TBF_PBURST={0x8, 0x7, 0xeb}, @TCA_TBF_BURST={0x8, 0x6, 0x6}, @TCA_TBF_PBURST={0x8, 0x7, 0x1f65}, @TCA_TBF_PBURST={0x8, 0x7, 0x17d8}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x4, 0x7ff, 0xfffffff9, 0xff, 0x80a4abc, 0xfffffff3, 0x8, 0x2, 0x2, 0xfffffff9, 0x7, 0x10, 0x7, 0xf3af, 0x4, 0xc, 0x5, 0xe29, 0x2, 0x5, 0x40, 0x5, 0x2, 0x9, 0xc, 0x4, 0x6, 0x6848, 0x9c0, 0xf48, 0x1c, 0x80000001, 0x8, 0x4, 0x9, 0x80, 0xe61c, 0xe4e3, 0xa2c, 0x0, 0x8, 0x8001, 0x100, 0x0, 0x101, 0x0, 0x1, 0x0, 0x200, 0x52, 0x1db5, 0x20000, 0x82, 0x1ad9, 0xfffffff8, 0x69, 0x4, 0x8, 0xf2d2, 0x8, 0x16, 0x4, 0x10001, 0xb, 0x4, 0x2, 0xa, 0x5, 0xa1, 0xffffc164, 0xe, 0x0, 0xfffffffc, 0x4, 0x4, 0x4, 0x2, 0xb, 0x7, 0x676, 0x8000, 0xae6, 0xd376, 0xfffffffa, 0x3, 0x3, 0x80000001, 0x3, 0x4, 0x3d3, 0xe, 0x8, 0x1, 0x7f, 0x2, 0x7, 0x0, 0x4, 0xe09, 0xffff8000, 0x81, 0x6, 0x10001, 0x0, 0x10000, 0xa5b, 0x9, 0x6, 0x0, 0x3, 0x80000001, 0x8, 0x4581, 0x9, 0x3, 0x5, 0xfffffffd, 0x0, 0x5, 0x2, 0x4, 0x101, 0x10000, 0x8, 0x6, 0x3, 0xb4, 0x2e0d7981, 0x7, 0x7, 0x34, 0xff, 0x400, 0x0, 0xf24, 0x3, 0xfffffffb, 0x9, 0x5, 0x415, 0x55, 0x7, 0x100, 0x0, 0x4, 0x5, 0x8, 0x1ff, 0x6514, 0x24a, 0x6, 0x9, 0x9, 0xfffff001, 0xa0, 0x5, 0x8, 0x0, 0x3, 0x6, 0x7fff, 0x8, 0x80000000, 0x4, 0x2, 0xffff, 0x92, 0x2, 0x9, 0x3, 0x3, 0x80000000, 0x2, 0xcc5, 0x200, 0xbb2, 0x2, 0x3, 0x1ff, 0xfffffc01, 0x81, 0x5, 0x7ff, 0x2, 0x5, 0x5, 0x8, 0x6, 0xffffffff, 0x3, 0x0, 0x6, 0x4, 0x6, 0x903, 0x5, 0xfffffffd, 0x1ff, 0x9503, 0x3, 0x0, 0x9, 0x3, 0x9, 0xa62b, 0xff, 0x7, 0x4e, 0x800, 0xdb, 0x5dd, 0x8, 0x1, 0x7, 0x140, 0x3, 0xe, 0x1000, 0x0, 0x5, 0x7fff, 0x4, 0x101, 0x4, 0x7f, 0x10, 0x2, 0x2, 0x5, 0x9, 0xc, 0x2, 0x3ff, 0x8, 0x85d, 0xfffffffb, 0x9, 0x3, 0x7, 0x7, 0x9, 0x6, 0x5, 0x3, 0x8, 0x7, 0x7, 0x0, 0xfffffffe, 0x7ff, 0x0, 0x1b, 0x6, 0x401, 0x8]}, @TCA_TBF_BURST={0x8, 0x6, 0x1}, @TCA_TBF_BURST={0x8, 0x6, 0x8}, @TCA_TBF_PTAB={0x404, 0x3, [0x6, 0x7, 0x7, 0x7, 0x0, 0xc, 0x8, 0x6, 0x8, 0x9, 0x0, 0x7fffffff, 0xfff, 0x2, 0x9, 0x7, 0x4, 0x3, 0x7, 0xb7a, 0x1, 0x8000, 0x6b1, 0x0, 0x7, 0x3ff, 0x92, 0x8, 0x5, 0x3, 0x8, 0x8c3, 0x3, 0x4, 0x315, 0x1a, 0x3, 0x6, 0x0, 0x3, 0x9, 0xd, 0x3, 0xa, 0x9, 0x8, 0xe, 0x9, 0x2, 0x1, 0x8, 0xde, 0x0, 0x400, 0x4978, 0x2, 0x8, 0x7, 0xc, 0x8001, 0xcf, 0xf8d9, 0xd, 0x7, 0x14, 0x200, 0x1, 0x558, 0xfffffff9, 0x4, 0x1, 0x8, 0xa504, 0xe, 0x6, 0x5, 0x7f, 0x7, 0x767, 0xffffffff, 0x3, 0xffffbf8c, 0x5, 0x7fffffff, 0x9, 0x0, 0xe871, 0x8001, 0x4, 0x80000000, 0x7, 0x8, 0xe, 0xb8, 0x7, 0x2, 0x58, 0xffff000, 0x4, 0x1, 0x5907137e, 0x101, 0xfffffffe, 0xfffffff8, 0x1, 0x7bc51ad2, 0x6, 0x180000, 0x9, 0x2, 0xffffbef1, 0xffffffff, 0x401, 0x0, 0x103, 0x5, 0x1, 0x2, 0x40, 0x8, 0x1, 0x1000, 0x1, 0x401, 0x9, 0x1, 0x9, 0x355, 0x8, 0xc, 0x20b88000, 0x1, 0xb, 0xfffffffb, 0x3, 0x2, 0x7, 0x8, 0x3, 0x3, 0x6, 0x8, 0x1, 0x0, 0x5, 0x4, 0x6, 0x7, 0x8, 0xd, 0x6, 0xfffffff5, 0x4, 0x4, 0x8, 0x7, 0x9, 0x5, 0x3, 0x400, 0xd21d, 0xfffffffc, 0x7fff, 0x3644, 0x3, 0x29, 0x3, 0x2, 0x3, 0x3b4, 0x2, 0x80000000, 0x5, 0xfffffff9, 0xfffffffe, 0x5, 0x73, 0x665b655, 0x1, 0xd, 0x4, 0xb3, 0x2, 0x80000000, 0x101, 0x0, 0x4, 0x3, 0x8000, 0x9, 0xfffff093, 0x6, 0x9, 0x685, 0x56b, 0x200, 0x3, 0x1, 0x80000000, 0x31, 0x4, 0x971, 0x10001, 0x9, 0x7ff, 0x3, 0x3a9, 0x6, 0x3, 0x5d, 0x7, 0xd77, 0x9ad, 0x80000001, 0x3, 0x9, 0x7fffffff, 0xf308, 0x7, 0x10000, 0x20, 0x2, 0x80000000, 0x6, 0x0, 0x0, 0x3, 0x6, 0x1, 0x4, 0x401, 0xff, 0x6, 0x5, 0xffffffff, 0x7f, 0x8, 0x6, 0x6, 0xfffffffb, 0x9c9, 0x5, 0x3, 0xfffffffb, 0xffffffff, 0xff, 0x5, 0x9fde, 0x7, 0x9, 0xfffffff7, 0xad0, 0x1a8ece79, 0x61f4, 0xfffffffd, 0xfffffffc]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x1, 0xcbe, 0xffff, 0x81, 0x5}, {0xfd, 0x0, 0x9, 0x7097, 0xa, 0x47}, 0x1, 0x0, 0x21e4}}]}}]}, 0x89c}, 0x1, 0x0, 0x0, 0xc040}, 0x880) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 2m25.061885611s ago: executing program 8 (id=3433): openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000140)="1081", 0x2, 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000200)={r1, 0x19, 0x7d}, 0x0, &(0x7f0000000280)="682ef755c1464ee8ab484703b670e6e7e4b35cc5b40a14d6b2", &(0x7f00000002c0)=""/125) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000100)={@mcast2}, &(0x7f0000000140)=0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'team_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e0001002bbd7000ffdbdf2500000000", @ANYRESHEX=r5, @ANYRES16=r4], 0x1c}, 0x1, 0x0, 0x0, 0x831e368c771a0719}, 0x400c080) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000002c40), r6) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000440)={{0x41000, 0xffffffff, 0xc, 0x0, 0x7, 0xf1, 0x3, 0xff, 0x0, 0x81, 0x6, 0x2}, {0x40000, 0x6000, 0xd, 0x1a, 0x4, 0xd, 0x0, 0x3, 0x3, 0x4, 0x10, 0x6}, {0x100000, 0x1, 0xc, 0x11, 0x7, 0xe, 0xa, 0x40, 0x49, 0xdd, 0x0, 0x40}, {0x54000, 0x200000, 0xb, 0x8, 0x8, 0x2, 0x8, 0x1, 0x0, 0x9, 0x89}, {0x41000, 0xb000, 0x3, 0x3, 0x0, 0x7, 0xf9, 0xd, 0x8, 0xf, 0x7, 0x32}, {0x1000, 0x54000, 0xa, 0x5, 0xa, 0x5, 0x6, 0x1, 0x4, 0x2d, 0x1, 0x3}, {0x70000, 0x9000, 0x4, 0x5, 0x79, 0x4, 0x77, 0x3, 0x8, 0x9, 0x2a, 0x1}, {0x26000, 0x8000000, 0xc, 0xff, 0x8, 0x6, 0xe, 0x2, 0x2, 0x1, 0xd2, 0x7}, {0x50000}, {0xffff1000}, 0x80020008, 0x0, 0x6000, 0x481, 0x2, 0xf001, 0x4000, [0x70236ef5, 0x8, 0x100000001, 0x6]}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) 2m24.973693133s ago: executing program 8 (id=3434): syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$inet6(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x80003, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) pipe2(&(0x7f0000000080), 0x800) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 2m24.879857442s ago: executing program 8 (id=3435): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffe55}}]}}, 0x0) ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x7b9, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x27c, &(0x7f0000001080)=ANY=[@ANYBLOB="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"]) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(0xffffffffffffffff, &(0x7f0000003f40)=[{{&(0x7f00000005c0)=@in6={0xa, 0x0, 0x0, @private0}, 0x0, &(0x7f0000002540)=[{&(0x7f0000000640)=""/176}, {&(0x7f0000000740)=""/194}, {&(0x7f0000000840)=""/62}, {&(0x7f00000013c0)=""/4096}, {&(0x7f00000023c0)=""/161}, {&(0x7f00000024c0)=""/74}], 0x0, &(0x7f00000025c0)=""/248}, 0xe3af}, {{&(0x7f00000026c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0, &(0x7f0000003e80)=[{&(0x7f0000002740)=""/187}, {&(0x7f0000002800)=""/169}, {&(0x7f00000028c0)=""/207}, {&(0x7f00000029c0)=""/227}, {&(0x7f0000002ac0)=""/196}, {&(0x7f0000002bc0)=""/4096}, {&(0x7f0000003bc0)=""/123}, {&(0x7f0000003c40)=""/146}, {&(0x7f0000003d00)=""/97}, {&(0x7f0000003d80)=""/243}]}, 0x5}], 0x1, 0x40000040, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000a40)={&(0x7f0000000440)="58a7fa77f0d9f0be153fff93506fcf2d26669965ed0fd19401fd456f278b82dcea82bbdb84b3eeee5523e8685e31d1b481a0269ddd4b177a32c4ae14e9dfd4e60624b7e3fd2a968a5877fc5154e728619eb23771ffd0f3691ad240810738cd36ac8e27d34b9b6a74d7b8843af33d91b4d4c80cee7e5e1c5cff7961b4d21799a949fc5fb62a02c942bffaa1903bbf1162a1f05a752c17473f26a3ec271512bd", &(0x7f0000000500)=""/2, &(0x7f0000000540)="6525882b187827360b256d02e3b53be5b86da3f30c0e1beea36c08f6ec0303d923877b192cefe60680b111ef7fbf4c44f465a5abb0ca0dba17f2d784526ccef5197089b1fe0d59cf72b1cec8ee207fde7a38e70d7e2b", &(0x7f0000000900)="04ec7c726fa74b1a55437c74a402971d85b7902f63d74fe86d4748a07f92ca65beeaad059d7f6f757e98eba50e60eff8d1008ed480c024b35fd3e0341c41b1a0892d7e74946560c45a5e638ca4758d5ed254a439f827cece289006bb2421c2a015b7f7f169c7c624badc6134d812fbda6995d2c0edf014dd3c26b535d8d323ecd84fb0f04e908342dad17d369a2a9b40677a30655f12457c6fe4b560fad190535fb7ad4fa62c228122ccfb28ccba128431e37f869e1f81ceaf9043d6ad729b7d5d6f76b43ac3baa96d32d47f68", 0x2}, 0x38) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2m24.027752102s ago: executing program 8 (id=3438): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setns(0xc9, 0x0) r1 = socket(0x8, 0x5, 0x5) getpeername$inet6(r1, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x40100, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019080)='net/rt_cache\x00') r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000240)="b9800000c00f3235000400000f30c744240069000000c744240206000000c7442406000000000f011424c4c1f97e7ac9f3326d2066baf80cb88cf01b83ef66bafc0cb800000000ef2e360f7994a54e78d51566f30fa7c00f380a1fdfd564f3f4", 0x60}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r11, 0xa000000, 0xe, 0x0, &(0x7f00000000c0)="b994bc444b9893b04bf30981fd1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x3d) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000c80)={"568139cb5050a7a31ebfc4330c2bf68f86101d9a301cbe14b15f4f23031ceb319db01a783479d6b9a1201fb1cc7235f57f425131b1d59b14c7588e103ad23d61fc6b05b60536a1611d59d307e34d8c2ec3ef05629a47f994dd2e9f8b9ce05b338ae7db5267bc4082bd43ca93b78947a1c79e82df466d4fee2b222f1ebde976d2272a4f52329796330ee917cc4f5b3ec45ac1ecdaaf3dffe03c40b7c209e44cfeb08aad00e1b48da4289228d7d82d4f6a661942ace64f115d3cc6ac80f74420c390d89e7ab2133567aa41047d775e333184cc0b468ec5eb9bc3cb0fa00516e5452bf32a9e760f07efd5a5e5eb37eaff28ef92bb59498369808bdd310a4a95a5414a8ff450411ff67d3167eec8372455a19c0c5a608adfebded6974660fd85308a07860e16f62963da37448d6e1218f2092fb3d1662804623b63a07f3e5e881df9a5ac27ce3f1519003118aa6170ff423eb292dc70147bde37963f72d0642660e7107753167886fc10e108631a9ea4d6752145b8646187ba7e152b6bcbcedd6b83fb9435d5c8e8d5d25a3f173745eab94a4a296572d459a50d622c8769dc57a7cdf7efe9f259dc36f538d1836362f1bcb2c4ebceae7e3655d5e98ba481906f284bd03710005994eca8cbf8302dc8e2c21736b697b5f868e8af96fa8bbb1ae56571616a70ce05970d1e4142f303f7586fd2fc6f0ee3dce1db6524dd6aa28faab046e074df38430a49e8a6dde71028f16539744b7867e19c856e670e8b799d52da435bb07beea683a52e4d13602e7d4675a798a12c898ad5b00caa34313ff8fb6c3407cf815eca9795cffd9a24959653cc816851048ebf0772bebdd3ff9b8cfbd2c65c30e41586b00a14943e4815361789158139d440c4f627edb8ed59e1ca0bb0c60106e09635fa9335677337c554db885f75b8f9fffffff12c9796f8258de36636346ab768856bbdfc51843a53701423d75c1f43be24469aa03d366bbfb81218b31e5c0ad716efea52175c2fa78317cafb16ee173eb5e9428509ca4c8f9bf798adc7da1758a9c0334e44200c0578495ff805fce84456205caa70f0976a8603f84cb542d0df1416602321c587556785af525ddf5548b4f51113c52a7a17042faf6c8c02d8d1835e0f67f60ab392c20fc12188db029e45bb77cfccc423671d52ec5a92d08c2bb27a676b66f3b89ac084d99e3f516426a015268a1f3fb91b13c8baba49a0765a305c13cd1f47b3ea7a6393182759b614a08d36192a8b68abef6e5c16849452c74af3a9f854e1f2bc1c2eac2f055f8ffd8fdaa6bb04a68850c585f433c0e6b8dba1401fce5aab11d75d2323d8079891175096e31013ca0a3763511c86f2fbc31a33458c52059ebe253dcd3e837fed39765a11842028df450479dd56e1325cd8d088ff12a8f7dd23f200"}) ioctl$KVM_CAP_HYPERV_SYNIC2(r9, 0x4068aea3, 0x0) 2m23.4177277s ago: executing program 42 (id=3372): r0 = socket(0x1e, 0x4, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x99) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}, {@release_agent={'release_agent', 0x3d, './file0'}}]}) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_int(r1, 0x0, 0x1, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, 0x0, &(0x7f00000000c0)) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x3ff, 0x1, 0x1ff, 0x1, 0x6, 0x6}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg(r0, &(0x7f0000008a00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000006400)=@generic={0x1e, "178865bdc92c81dd53f6cdff1a1d56ecf595d19991ef31c8fe9827272f763c3564d09f1beef9326d2e9c3db162e4e2f5e4591629af3ae88090c076ec560f284a3c11558943014d6f1ca6dd6e82ac8464b25285f68b018f78425fe56c6f03ef004020942c43655ac7eaf9528524b3927867ebd2ac729e836550cff3bd70ec"}, 0x80, 0x0}}], 0x2, 0x9200000000000000) 2m23.278875373s ago: executing program 8 (id=3443): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x2d, &(0x7f0000000000)=0x92d2, 0x4) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000100, 0x20000000, 0x80000000000004, 0x6, 0x0, {0x0, 0x10041, 0x0, 0xc, 0x2, 0x2, 0x10000, 0x2, 0x5, 0xa000, 0xfffffffc, r3, 0x0, 0x7, 0x57}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r2, {0x7, 0x26, 0x6caff549, 0xfffffffff323ca07, 0x800, 0xfffc, 0x1, 0x80, 0x0, 0x0, 0x1, 0x10001}}, 0x50) r4 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0x14, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r9, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r9}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) inotify_init() getsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0xffffffff}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000180)={r11, 0x8}, 0x8) 2m22.121633961s ago: executing program 8 (id=3444): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x1d8, 0xc8, 0x8, 0x1d8, 0x5803, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @mcast1, [0xffffff00, 0xff, 0xff], [0x0, 0xff000000, 0xff], 'pimreg\x00', 'wlan0\x00', {}, {}, 0x2c, 0x1, 0x1, 0x51}, 0x0, 0xa8, 0xf0, 0x0, {0x0, 0x2000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x0, 0x3, 'pptp\x00', {0x100000000}}}}, {{@ipv6={@remote, @mcast1, [0xff000000, 0x100000100], [], 'macvtap0\x00', 'macsec0\x00', {}, {}, 0x87}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0xffffffff, 0x0, 'netbios-ns\x00', 'syz0\x00', {0xd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) syz_open_dev$tty1(0xc, 0x4, 0x4) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x81, 0x0) lseek(r2, 0x7ffffffffffffffe, 0x2) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r5, &(0x7f0000000180)=ANY=[@ANYBLOB='+cpu -pids'], 0xb) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000406d0493c20000000000fd090224"], 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmmsg(r6, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) 2m6.970158567s ago: executing program 43 (id=3444): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x1d8, 0xc8, 0x8, 0x1d8, 0x5803, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @mcast1, [0xffffff00, 0xff, 0xff], [0x0, 0xff000000, 0xff], 'pimreg\x00', 'wlan0\x00', {}, {}, 0x2c, 0x1, 0x1, 0x51}, 0x0, 0xa8, 0xf0, 0x0, {0x0, 0x2000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x0, 0x3, 'pptp\x00', {0x100000000}}}}, {{@ipv6={@remote, @mcast1, [0xff000000, 0x100000100], [], 'macvtap0\x00', 'macsec0\x00', {}, {}, 0x87}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0xffffffff, 0x0, 'netbios-ns\x00', 'syz0\x00', {0xd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) syz_open_dev$tty1(0xc, 0x4, 0x4) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x81, 0x0) lseek(r2, 0x7ffffffffffffffe, 0x2) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r5, &(0x7f0000000180)=ANY=[@ANYBLOB='+cpu -pids'], 0xb) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000406d0493c20000000000fd090224"], 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmmsg(r6, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) 12.067313246s ago: executing program 6 (id=3836): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) io_setup(0xbd, &(0x7f00000001c0)) (async) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) (async, rerun: 32) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) (rerun: 32) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000240)={&(0x7f0000000180)=[0x0], 0x1, r6, r7, 0x1, 0x0, 0x2, 0x1, {0xac7c, 0x1, 0x7, 0x69, 0xf4b, 0x2, 0x2, 0x45, 0x412f, 0xe154, 0x20, 0x7, 0xb2bf, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) (async, rerun: 32) r8 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) (async, rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@dellink={0x20, 0x11, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x408}}, 0x20}, 0x1, 0x200000000000000, 0x0, 0x4}, 0x40cc040) (rerun: 64) 11.692694296s ago: executing program 6 (id=3838): socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sndpcmc(0x0, 0xb, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000025300)=""/102392, 0x18ff8) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80383, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x14e203, 0x0) ioctl$SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5111) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) r2 = syz_open_pts(0xffffffffffffffff, 0x80) dup3(r2, 0xffffffffffffffff, 0x80000) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) setpriority(0x1, 0x0, 0x8) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c90010000c000500180d08000800a600b3da0500"], 0x15) r4 = accept$alg(r3, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)='[', 0x1}], 0x1, 0x0, 0x0, 0x30008040}, 0x40080d1) accept(r4, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x41, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) syz_emit_ethernet(0x46, &(0x7f00000004c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0xa, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@timestamp_addr={0x44, 0x14, 0x9, 0x1, 0x0, [{@broadcast}, {@private=0xa010102}]}]}}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 9.8689676s ago: executing program 6 (id=3845): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000b, 0x11, r0, 0x180000000) r1 = socket$pppl2tp(0x18, 0x1, 0x1) mmap(&(0x7f0000208000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) syz_open_dev$vim2m(0x0, 0x7, 0x2) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r2, &(0x7f0000000580)='1\x00', 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20000005) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) statfs(&(0x7f0000000040)='./cgroup.net/cgroup.procs\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x200000, &(0x7f0000000000/0x200000)=nil}) readv(0xffffffffffffffff, &(0x7f00000004c0), 0x12) write$sysctl(r2, &(0x7f00000000c0)='2\x00', 0x2) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) mount$9p_unix(0x0, &(0x7f00000003c0)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000500), 0x80, 0x0) connect$pppl2tp(r1, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x3, 0x4, 0x4, {0xa, 0x4e21, 0x7, @mcast2, 0xec25}}}, 0x32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 7.469798979s ago: executing program 3 (id=3850): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x1, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000010000000000005000000850000002f000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000600000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x2a, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000400)=r3, 0x4) write$cgroup_freezer_state(r2, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000600)={0x10098, 0x180, 0x0, 0x8001}) unshare(0x400) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r7, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0, 0xffff0000}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x0, 0x1}, 0x20) listen(r4, 0x8) accept4(r4, 0x0, 0x0, 0x0) 7.425974951s ago: executing program 6 (id=3851): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1, 0xa, 0x84df) r2 = socket$unix(0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vlan1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002600)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd27, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xc}, {}, {0x4, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x3a, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008050}, 0x20008800) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc, 0x2000000}, 0x1c) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000340)={0x1, 0xb}, 0x8) ioctl$FIOCLEX(r5, 0x5451) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="5248200d31fba68fcf4248cc876b6f5e196ca93130ca8b55d2189ecbd61caad11bd2e2ff3fc19e0dfbbc86b611cfcb948b69d3f5f10d905c00d61fd1bba4a888c98c43e6cd6e39456f17b7d9a6ae026a5e0d64f805845f616c6f55b882b0748c7c72fc98f976215ee32dd1adad9097e44d5ef220383e1fcd9c22204bd35da053af6cce05576ac6ddb817ecf2c93c144b0c32301bf3983a3d612b2692a8210627c771d5ffe4572cb07d544b5895f194618fc0337f83b361d5e977db7a122befc7ad3315f7b8fc2b3c607fa6d983ef661b45f593bce418", @ANYRES16=r4, @ANYBLOB="000129bd7000fedbdf250400000008003c000500000008003a00ff070000050038000000000008002b00e4e9fb0c"], 0x34}, 0x1, 0x0, 0x0, 0x20000804}, 0x80000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000440)='\xf0\x891\xb8R\xe6\x8d\x12\xe5\x80\x1a\xc9A\x93\xb1@\xbf\x89K\xd0\x86\xd9\x86\x18\xc4:\xc3\xe0\x8c\xed~\x97\a\xbe\xfb\v1d\xbe\xa1\xc1N\xd2p\xf0\xc6\xf3\x8eD\x1b\xc7q\x99?9\xf1\xe6\f\xa9\x90\xec:\x037\xe8\x0f\rX6\xf2>ah\xa2\xa7\x02W\t\xe1\xe1PY\xdf\x12\xd3\xe0\x01*\r:\xf2\xff\xff0C\x88*NA\xc3\x95`\xb2\xf1\xb1\xed\x91\xe4\x87\xcf_9\x1eIpAfN\x99\xa9\v)\x98p\xeaY\xc5&D\xe7\xf3\xba/\xcd\xdb\x9dz\xb2\xbf\xc6\xea?\x13(\x15\xc1\tmLt,[\x14N\xce\'\xdd\x80p;\xf4IR\xf3\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00\xc2\x87\xdayQ\xb2D\xebv\x02\x03Pa m\xef\xcbj\x8fn\xd9+\xa0\xbbt\xf5k_#\v\xab\xba\xec\xf0\x94~8\xf3/\x0eMoz\xf7\xa7\xe9\xe1\xec\xaf\xaey\xe8\xa9\x95\xa0\xeaF5\x00\x00\xd3\xa6\xedp=`8\x1a\x98}QE\xe0\xd2\xb7\x97\'R\'f/\xb4Ap\xa5\x8a\xc3\xe1k\xb3F\xfd\xa2<\x03\x94\x7f\xef\xbeV7\xb1\xf2\x85\xafE\xba\x18K\xb4\xde7\xfb\x8ffw\xe7M>\xf5 \x94\xc74(\xcb\xa3,Nw5\x1d^x\xe9\xd3\x85o\x90\xcc\xb1F\x9d\xa3\x90@\xba6\x1c\xbcp\x93?\x86\tS\xe4q\x0f\xba/\xef\'\x046\xfbN\xcb\x06\x99\xb7\xeaX\x17\xe8\xdeAF\x06\xb4\xff\xff\xcc\xc1\a5C\xe2\x13L\x03\x7f\x83q\x00\x00\x00\x00\x00\x000\x85\x89\r\xbe=\xb2:\xfe\x90\xc0\x90>\xcb\r\a\xa8\xf3\xe5:\x17\x7f\xa6\xf6_\x1bmB(\xa6C\xf8?\xa2\xb7\x80i\xd3\x94<1}=\xab/g\xbe\xe2\xa8\xecj\x8b\xde\v\xea\xc4\xd2Gf\x86\xd9~\xad\xed:\xc2\xd7\x03\xfaL\xfd\xd4\xd4G\x00^\xaf>kA%\xd4\xb9s\x8b\xb0\x11Nj\x10h\xc0mw\x8f\xa5-\xa4\xac\xb4\xa5\x1d\x03\x16O?w\x9a\b\x16\xc0\xc9\x8b\xb6m\x18\xe4\xea\xe9}\xaf\xf8\xbe\xbf\x87P\x04\xca\xae\x16\x97#a\x9f\tB4\x19\xa3\xdd\xf3mP\xeb\xb4\xd8N\x9f\x12\x1a \xab\xfd\x94\x8b\xcb%b\xe2\xc2\xf8\xecf_\xd6\x8f\xd3\xf2\x90tO\x1e \xca#\x1b\xe6\x98$\tdi6\x99[\\\x8d\xf5\xd2\x03,\x98i\\b\x83[\x85|\xc2\xe9_\xa8*\xe2\x19\x13\xbd\x17\x182\xf0\xa2\x83W\xb6\xe2e\xf1J\xf4\xdb\x87\xb9r\xbb\xc4\x7f^\xe1:]\xf8oX04\x11\xf1\xf5\n\xfdC\x950D\xf0\xcb_\x92\xdf.\x84\"\xfc\x9eeY0\xcf\x97\x1b}l\xee\xbc\n\x04\x82\x00 \xfc\xd2vJ\xb1\xc9@\xfeM\xee\x8b\b', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r7 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) readv(r6, &(0x7f0000000e80)=[{&(0x7f0000000700)=""/232, 0xe8}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2b5b093, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0/file0\x00', 0x0, 0x480400, 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0/../file0\x00') mkdir(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000880)='\xf5\xfc\xd2\xec]\x95zx8*\xa2d\x11\xb5\xb1\x01\x00\x00\x00\xe49{\x8a{\x81s\xea$\xdfg\xb1\x03DY!\x97\xadM\xd7\xff\x8a\xcd[>\x12e\xc3]d8\xba\x8ec\x00\x00\x00\x00\x00\x00\x00\xa0\xe2\xd5y\xec\x90\x00\x98Y\x91\x19\x16\x89\xd0\x1a\xad\xcd\xd6\xd0\xc6\xb9\xeb\x95\xd3\x9cl\x9cu#\xb4\xee\xe5\x9d\t\fV\xd4\xda\xfc`2?\x15P\xba\x14b\x1c\xcc\xd5\xb9jA$s\xb9g3\x15M\xd9\xb9 \xca[\xc7\xec\xa9;\xee\x01\xc9\xc4\x1f\xc3\xe4\xfa\xd3fU\x0e\x86\xc8\xa7\xaf\xaf\x04p\xa3\x8bb\xbf\\\xdb\x83\x00\x96sy\x14\x1eo\xcc9&\x946\xf9\xf5v\xee\xb5m$;\x01\xb8\xeau\x00\xd1S=\x920H\xc2z\xb5\xbe\x95\xef\xeb\xd1\xc8\xa1\xba\xach\xbef\xa8\x86\xc2\x18\x9cC\x15\x9c^\xcf\xe9\xbcp\xb4Ff\x00\x9d>p\"\x19\xd8}|~\xae\xdb\a59f\xb8?\xba\xf2\x8e\xa5y\\\xf0\fkd??-\x983\xf3\x19\xc7\xc0/\xe9\x1a\x80=\xa72)\xd2\x00'/277, &(0x7f00000002c0)='/\x00\x01\x00H\x98', 0x0) tkill(r7, 0xb) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES16=0x0], 0x20}, 0x1, 0x0, 0x0, 0x4000002}, 0x10) 7.079093376s ago: executing program 7 (id=3853): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(0xffffffffffffffff, 0x8002f515, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 6.562198947s ago: executing program 7 (id=3855): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000000c0)={0x200, r0, 0x80000}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/meminfo\x00', 0x0, 0x0) symlink(&(0x7f0000000080)='.\x00', 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)=ANY=[@ANYRES8=r2], 0x0) memfd_create(0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2400c110, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6) socket$unix(0x1, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106, 0x3}}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4c840) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24041091}, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r7 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8) r8 = openat$cgroup_devices(r6, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) write$cgroup_devices(r7, 0x0, 0x0) write$cgroup_devices(r8, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x70bd27, 0x0, {0xc}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d2}, 0x4000000) 6.134165079s ago: executing program 3 (id=3856): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000003c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f00000001c0)={0xfffffffffffffffc, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES16, @ANYRESDEC=r1, @ANYRES32=r2], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40015) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000006800010000000000fddbdf250a00000000000000060007000300000008000500", @ANYRES32=r4, @ANYBLOB="18000880"], 0x40}, 0x1, 0x0, 0x0, 0x4008081}, 0x0) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x6) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c000000200081dc00000000fddbdf2502000000090000031200010008000600f82cffff08001a"], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x44004) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x40, 0x3c, 0x2, {0x2, 0x21}}, 0x0}, &(0x7f00000002c0)={0x1c, &(0x7f0000000140)={0x40, 0x14, 0x35, "c7661547ef313ee5c4a4f75423947667889a4b1dba62d81549437494008108a36ae2706d109062e54d2d1b40f51b0db44cfdca0c5e"}, 0x0, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x4}}) 5.992299546s ago: executing program 7 (id=3857): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) sendfile(r3, r3, 0x0, 0x7f03) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) preadv(r4, &(0x7f0000000340)=[{&(0x7f0000000000)=""/30, 0x1e}], 0x1, 0x8, 0x2) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x8001000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x0, 0x11, 0x148, 0xd0, 0x0, 0x1b0, 0x2a8, 0x2a8, 0x1b0, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x2b}, 0xffffff00, 0xffffffff, 'pim6reg\x00', 'veth0_vlan\x00', {0xff}, {}, 0x5e, 0x3, 0x2}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x6, 0x5, 0x5, 0x6, 0x20], 0x7, 0x1}, {0xffffffffffffffff, [0x56, 0x4, 0x8, 0x5e, 0x1], 0x0, 0x4}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xfffa, 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x2, 0x9, 0x8, 'syz0\x00', {0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r8 = socket$nl_audit(0x10, 0x3, 0x9) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x89}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) read$char_usb(r7, &(0x7f0000000100)=""/178, 0xb2) syz_usb_disconnect(r6) socket$kcm(0x2d, 0x2, 0x0) 5.299187759s ago: executing program 7 (id=3860): shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0) prlimit64(0x0, 0x4, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_proto_private(r1, 0x8921, &(0x7f0000000040)="a43a") connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) open(&(0x7f0000000140)='./file0\x00', 0x2a5c0, 0x113) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c2) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = dup(0xffffffffffffffff) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(0x0, 0x92c, 0x0, 0x80010, r4, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1ff, 0x101200) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r5, 0xc0505510, &(0x7f0000000280)={0xfffffffd, 0x0, 0xd3b3, 0x4, 0x0}) 4.998559019s ago: executing program 6 (id=3861): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="d3f34746b238", @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x1, 0x5, 0x7, 0x800005fffffffffd}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x18, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x7ffb) 4.431098799s ago: executing program 6 (id=3863): r0 = socket$inet6(0xa, 0x805, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_emit_ethernet(0x4e, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd6076b2af00072f0020010000000000000000000000000001ff020000000000000000000000000001000022eb"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$inet6_tcp(0xa, 0x1, 0x0) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001000000000014000000110005a7"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close_range(0xffffffffffffffff, r1, 0x0) fchdir(0xffffffffffffffff) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000001080), 0x0) getsockopt$bt_hci(r0, 0x84, 0x81, 0x0, &(0x7f00000010c0)) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000001000)={0x0, 0x0, 0x5, &(0x7f0000000080)={0x9, "90f541a5e64f61909103f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}}) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="d229fa7522038b029078f8212764e0accad8a9785505ade4fdb20e32642ae9112ba9e042f8f6e83cdbe6e870c4b53b32505e883b18b40145e2641d24e5f7e0775a54a9db1e5b08456507f65af3e76a45b9f93d26309770bf50d08d03274bfb56111e7bd4f7f5704586e29ec3849744898d1147334ec9ae35e6d83159de02c64f1d0827c9eeb9c01915b4d13eec3be4ef50fdbb766a646e14061e0e43632c1a10294b9e9aad508c86d57df89fff065e4f2232980372b0fc59e13659700ceaef5ca2eaef3852b7d572", @ANYBLOB="7cad95ed0ee4bb8db0a81072af0e8f49bcdde3017fe9db57cdf7ba49c51d9e0a86ae4a10087c36bb601c5d7dd19564ae012b1a7ffad26aaf2c55381d30a55b490567495200495665eb32a68523e3aa99586b343e20d02a737b76f1790fa87551ab6f0070ec9a7caca6aa33b88263dab45ec3de0eb77fc8aa9d72777705e31839c5aa1eb5"], 0x0}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) getpid() 4.391674682s ago: executing program 1 (id=3864): syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$inet6(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x80003, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) pipe2(&(0x7f0000000080), 0x800) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 4.189978226s ago: executing program 1 (id=3866): r0 = socket(0x2, 0x1, 0x6) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @local}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r3, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x8000000}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa6}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c845}, 0x0) bind(r0, &(0x7f00000000c0)=@in={0x2, 0x3039, @loopback}, 0x10) r5 = fsopen(&(0x7f0000000680)='vxfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000180)='source\x00', &(0x7f00000001c0)='//127.0.0.1/share\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000380)='port\x00', &(0x7f00000003c0)='12345\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) accept(r0, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x0, 0x43, 0xa0, 0x0, 0x98, 0x408, 0x178, 0x178, 0x408, 0x178, 0x49, 0x0, {[{{@uncond, 0x12a, 0x1a0, 0x1d8, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x1, 'syz0\x00', 0x4}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x3, {0x100000001}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x0, 0x2}, {0xffffffffffffffff, 0x4}, {0x0, 0x6, 0x1}, 0xe, 0x3}}}, {{@uncond, 0x0, 0x1f8, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'ip_vti0\x00', {0x7ffffffe, 0x8000, 0x5, 0x6, 0x2, 0x6, 0xce, 0x10001, 0xe0}, {0x8}}}, @common=@inet=@tcp={{0x30}, {[0x4e23, 0x4e20], [0x4e23, 0x4e22], 0x5, 0x20, 0x8, 0x5}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x0, 0x4}, {0x1, 0x4}, {0x4, 0x3, 0x3}, 0x2, 0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x500) fsopen(&(0x7f0000000040)='erofs\x00', 0x1) r7 = landlock_create_ruleset(&(0x7f00000002c0)={0x57ee}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r8 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r8, 0x2219, 0xcf74, 0x16, 0x0, 0x0) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$getregset(0x4204, r9, 0x0, &(0x7f00000006c0)={0x0, 0xffffffffffffff37}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.0262879s ago: executing program 7 (id=3867): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x3, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000b40)='GPL\x00'}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'veth0_to_bridge\x00', @local}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_usb_connect(0x5, 0x48, &(0x7f0000000400)=ANY=[@ANYBLOB="12011003b0705a402104e302b7430102030109023600030007000309043ba7010202"], &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) sync() 3.940311832s ago: executing program 5 (id=3868): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x40100, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000280)={0xc000, 0x4000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000040)={0xfffffffffffff001, 0x10000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280), 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r8, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x41840) sendmsg$nl_xfrm(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRESHEX=r9, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff00000000040000001000000000000000000000000200000000000000048000000000000009000000000000000700000000000000c600000000000000060000000000000005000000000000000a000000000000000000000000000000000000000000000001010302000000000000000009000000008000002bbd70000c0008000800080000d10000"], 0x134}, 0x1, 0x0, 0x0, 0xc091}, 0x4004) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e020000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) ioctl$COMEDI_SETWSUBD(r1, 0x6411) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000000201030000000000000023020ae203040c0019"], 0x50}, 0x1, 0x0, 0x0, 0x44008000}, 0x4000052) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000540)) 3.618143231s ago: executing program 1 (id=3869): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="09000000190001002dbd7000fbdbdf2502202000ff02ff020018000006001300ac14142304000880"], 0x28}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f00000002c0)={0x0, 0x0, 0x0}) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00", 0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0xfe, 0x7fffffff}]}) r3 = socket(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000014c0)={0x112, [], 0x1, "dce78986424fbb"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000024c0)={0x8, [], 0xb3, "d4989dbb3ca71e"}) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x6, 0x1ff, 0x0, 0x8009}, 0x10) write(r3, &(0x7f0000000000)="1c00001f1a005f0214f9f407000904001f0000000002000000020000", 0x1c) 3.394059554s ago: executing program 3 (id=3870): socket(0xa, 0x3, 0x3a) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x3, 0x7fff0001}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000900)=[{0x6, 0x80, 0x5, 0x7fffffff}]}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) ptrace(0x10, r0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0xffffffffffffffa8, &(0x7f0000000040)={0x1}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@snprintf={{}, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x15, 0x0, 0x0, 0x76}}], {{}, {0x5}, {0x28}}}, &(0x7f00000003c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) openat$mixer(0xffffffffffffff9c, 0x0, 0x20002, 0x0) r5 = io_uring_setup(0x340a, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r5, 0x1e, 0x0, 0x1) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)='0', 0x1}], 0x1) 3.27698626s ago: executing program 1 (id=3871): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r2, 0x4068aea3, &(0x7f0000000040)={0xdb, 0x0, 0x200}) ioctl$KVM_CAP_X2APIC_API(r2, 0x4068aea3, &(0x7f00000002c0)={0x81, 0x0, 0x5}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40003}, 0x4040850) syz_usb_connect$uac1(0x2, 0x81, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x763, 0x2003, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x3, 0x1, 0x9, 0x40, 0x3f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xc, 0x8, 0xba, {0x7, 0x25, 0x1, 0x8, 0x4, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xfc, 0x3, 0x8, 0x1}, @as_header={0x7, 0x24, 0x1, 0x8, 0x5, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x3, 0x2, 0x1, {0x7, 0x25, 0x1, 0x0, 0xe, 0x3}}}}}}}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000709726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x404c800}, 0x4000050) r3 = socket(0xa, 0x3, 0xff) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETMODE(r4, 0x5601, 0x0) sendmsg$inet6(r3, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x2, 0x3, @loopback}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000300)="6797f04cdb6f2c8ff1c922acb0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56d", 0x28}], 0x1}, 0x30008b08) 2.817685865s ago: executing program 5 (id=3872): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x20000004, 0xffffffffffffff1d, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x20000004, 0xffffffffffffff1d, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x28, 0x0, &(0x7f0000000180)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000da600000800000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x30, 0x1) (async) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x30, 0x1) landlock_restrict_self(r4, 0x0) (async) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0xe) (async) landlock_restrict_self(r4, 0xe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_ublk_setup_io_uring(0xaa6, &(0x7f0000000340)={0x0, 0xf2d4, 0x2004a, 0x0, 0x184}, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f00000006c0)) syz_ublk_setup_io_uring(0x106cc2, &(0x7f0000000980)={0x0, 0x0, 0x4000, 0x2, 0x1e5, 0x0, r2}, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000140)) (async) r7 = syz_ublk_setup_io_uring(0x106cc2, &(0x7f0000000980)={0x0, 0x0, 0x4000, 0x2, 0x1e5, 0x0, r2}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) setresgid(0xee00, 0xee01, 0x0) (async) setresgid(0xee00, 0xee01, 0x0) setregid(0xffffffffffffffff, 0x0) (async) setregid(0xffffffffffffffff, 0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0, 0x40002102, 0x1, {0x3}}) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x3, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) sendmmsg$unix(r5, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000200)="c2", 0x1}], 0x1, 0x0, 0x0, 0x40044}}], 0x1, 0x4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r11 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(r11) getgroups(0x2, &(0x7f0000000180)=[0xee00, 0xee01]) write$P9_RGETATTR(r2, &(0x7f0000000240)={0xa0, 0x19, 0x2, {0x84, {0x20, 0x3, 0x2}, 0x45, 0x0, r13, 0xf0, 0x1, 0x2, 0x3, 0x0, 0x5, 0x3, 0x1, 0x3, 0x6, 0x800000000000009, 0x0, 0xffffffff, 0x2, 0x4b9feb59}}, 0xa0) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x48) r15 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r14, 0x5, 0x0, @void}, 0x10) close(0x4) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0100000004000000020000000700000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000001a3e92084e3dca87505b0b483ab3e64631c974a003955f09745cd392f1818466bada7da4e53dcd8cf727b75c5500ccd7bb0a5b89a4088fab587221cd361c3ec988a03195f65e49a0b62b1af435b1c03d0368dbb57fb0a077db6b60686595a1b4ecb73f261566361c4b41cda2c7cbd7057821813aaf073353d515a29acf956dac0c0309b3f17253c35d762a0fc7275149", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r16, @ANYBLOB="0000000000000000b7080000000000007b", @ANYBLOB="0000000000000000b702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r16, @ANYBLOB="0000000000000000b7080000000000007b", @ANYBLOB="0000000000000000b702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x15, 0x2e, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000001100080000000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000300000085000000060000008510000001000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000018110000", @ANYRES32=r16, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800324a9504acdf2236dab670359b8b0000b7040000000000008500000082000000bf91000000000000b7020000010000008500000084000000b700"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) getgroups(0x8, &(0x7f0000000a00)=[r12, 0x0, r13, r13, r12, r12, r13, r12]) close(r15) (async) close(r15) 2.784169835s ago: executing program 5 (id=3873): open_by_handle_at(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c0000000100df00c4ef0000ff00000000"], 0x4080) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="020100008167732673000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05ff0f00000000010000060800030006eab3912c5544d2b177877d242a05fcfdea49ce36cdfed2f454c923110d97217b32ed8040d2bedb958552180d6ea51dd586cf688334142c7a8e45f335214fe4f8684d4ba29656a5eec5b1799fdd2dbbf089203b794045ff09920cb57d46894030a978654a2e50e96c969eb22a04cc01008903a8f2e702232aa8", @ANYRES32=r2, @ANYBLOB="05005300010000000800050002000000"], 0x2c}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) keyctl$join(0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) r7 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000009b80)={0x40000012}) read$FUSE(r6, &(0x7f0000001300)={0x2020}, 0xfffffe05) 1.740455349s ago: executing program 5 (id=3874): capset(0x0, 0x0) (async) capset(0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000100)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6bb74189000003c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x37}], 0x1, 0x55, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fdd000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8a00, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8a00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000600)="260f38ca4628baa000edbaf80c66b80404f38066efbafc0c66ed66b9800000c00f326635010000000f30b8ff000f00d8baa00066b8b284be3466eff698b2020f20d86635200000000f22d80f01ca2ef0302c", 0x52}], 0x1, 0x2dabc54fdbff7bdf, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000600)="260f38ca4628baa000edbaf80c66b80404f38066efbafc0c66ed66b9800000c00f326635010000000f30b8ff000f00d8baa00066b8b284be3466eff698b2020f20d86635200000000f22d80f01ca2ef0302c", 0x52}], 0x1, 0x2dabc54fdbff7bdf, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fce000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x9000, 0x0, {}, 0x1}, {"00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005bcc00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cf3734f10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e5bd16380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100", "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000002c0)={0x0, 0x7}, 0x8) (async) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000002c0)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000140)={{0x0, 0x4, 0xfffc, 0x9}, 'syz0\x00', 0x13}) (async) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000140)={{0x0, 0x4, 0xfffc, 0x9}, 'syz0\x00', 0x13}) ioctl$UI_SET_FFBIT(r3, 0x4004556b, 0x51) ioctl$UI_DEV_CREATE(r3, 0x5501) ioctl$UI_DEV_CREATE(r3, 0x5501) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000110000007b8bf8ff00000000b70800000f0000007b8af0ff00000000bfa10000000000000701000000feffffbfa40000000000000704000000feffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000380)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$UI_DEV_DESTROY(r7, 0x5502) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000002c0)=r4, 0x4) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000400)={0x1f, 0x3}, 0x6) close_range(r4, r9, 0x0) (async) close_range(r4, r9, 0x0) 1.657957085s ago: executing program 3 (id=3875): socket$packet(0x11, 0x2, 0x300) r0 = socket(0x10, 0x803, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c00188008000140a080000008000240000000020800034000000002240001801400018008000100e000000108000200e00000010c000280050001"], 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r1, &(0x7f0000000280)="02043c00ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57", 0x46, 0x800, 0x0, 0x0) 1.575360835s ago: executing program 3 (id=3876): syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$inet6(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x80003, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) pipe2(&(0x7f0000000080), 0x800) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 1.385434392s ago: executing program 3 (id=3877): syz_usb_connect$uac2(0x3, 0xa0, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x15, 0x7}, [@output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x0, 0x4, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4, 0x1ccc, 0x5}, @as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x4, 0x8, 0xb8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) r3 = socket(0x10, 0x803, 0x0) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r4, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x3c) close(r4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x22242, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000006800e97800000000ffdbdf250a0000000000000004000b000400040006000700020000002c000c80"], 0x54}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='qnx4\x00', 0x204000, 0x0) syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x3) socket$phonet_pipe(0x23, 0x5, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x180) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x7) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x504c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x7f}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f00000003c0)={0x38, r2, 0x1, 0x70bd28, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x804) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) 1.269735386s ago: executing program 5 (id=3878): openat$uinput(0xffffffffffffff9c, &(0x7f00000035c0), 0x802, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000009f40)={0x98f90e, 0xffffbfff, '\x00', @p_u32=&(0x7f0000009f00)=0x1}}) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) ioctl$IOMMU_HWPT_INVALIDATE$TEST(0xffffffffffffffff, 0x3b8d, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f00000001c0)='lowerdir', 0x8) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003002000851000000600000018000000", @ANYRES32], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000680)="fe55fc2733656cd94cd632f708d5edc9bbe8b3ec7b6726cb94dd7ef916602cfa318a03da4cd0bc", 0x27}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0xc0) recvmmsg(0xffffffffffffffff, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x10000, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7a4d205fd632f830272d3a78302205252b9ae7d8be5638396a0fa0583974f3f28302280b7b4d3c9e13d74dbc7b9e8718956dd5fe482", 0x5f}, {&(0x7f0000000100)}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2a8c94e6bdf0c72c8e528f0778c5b5ad28a834e43f387c8282e50e7d6b0cd91a93f87f645b32c1f200f7d9f101c7bcf701e4462f36e5fe5503da319f5261659f63d203e503fc3476bb556d4987fbfbf", 0xbd}, {&(0x7f0000000440)="126ce0a7ad2d3c4b1b140fc7402f00828a02ec6c4e59757eda3f13f9d8a4376fed93dd5b8c0ba901c5305f", 0x2b}], 0x4, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 794.55606ms ago: executing program 1 (id=3879): kexec_load(0x3, 0x1, &(0x7f0000001c40)=[{0x0, 0x0, 0xfffffffffffffffa, 0xff}], 0x3e0000) 743.299075ms ago: executing program 1 (id=3880): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x8000, &(0x7f0000000040)={@_ha_fsid={[0x2, 0x3]}, {0x0, 0x15, 0x4}}, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x3}) r1 = epoll_create1(0x0) r2 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r0, &(0x7f0000000180)={r1, r2, 0x2}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000280)={0xf, 0x8, 0xfa00, {r4, 0x9}}, 0x10) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f00000002c0)={0x4, 0x7, 0xfffffffa, 0x6, 0x369b}, 0x14) ioctl$sock_inet_SIOCRTMSG(r5, 0x890d, &(0x7f0000000300)={0x0, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e20, @remote}, {0x2, 0x4e23, @private=0xa010101}, 0x53, 0x0, 0x0, 0x0, 0x40, 0x0, 0x1, 0xe, 0x7fff}) r6 = getuid() mount$tmpfs(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x4401, &(0x7f0000000400)={[{@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x65, 0x36, 0x25, 0x78]}}], [{@uid_gt={'uid>', r6}}]}) r7 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, r7) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@fallback=r2, 0x4, 0x1, 0x7, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)={@map=r0, r0, 0x37, 0xc, 0x0, @void, @value=r0, @void, @void, r9}, 0x20) ioctl$XFS_IOC_GETBMAPA(r1, 0xc020582c, &(0x7f00000006c0)={0x9, 0xfffffffffffffff0, 0x6, 0x100, 0x6849f65b}) r10 = ioctl$NS_GET_PARENT(r8, 0xb702, 0x0) setns(r10, 0x20000000) mmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x1000004, 0x2010, r0, 0x45034000) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000700)=0x3) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f0000000740)={0x4, 0x8, 0xfa00, {r4, 0xfff}}, 0x10) getpeername$packet(r0, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000007c0)=0x14) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@private0={0xfc, 0x0, '\x00', 0x1}, r11}, 0x14) r12 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r12, 0x4048587b, &(0x7f0000000f00)={{0xffffffffffffffff, &(0x7f0000000880)='uid>', 0x0, &(0x7f00000008c0)={@_ha_fsid={[0x2, 0x54e4922a]}, {0xfff4, 0x40, 0x3, 0x6}}, 0x9, &(0x7f0000000900)={@_ha_fsid}, &(0x7f0000000940)=0xbf}, 0x6, &(0x7f0000000e40)=[{0x1, 0x7, &(0x7f0000000980)='\x8d\x00', &(0x7f00000009c0)="1be354409823a0edc78751548719c197c24f741e509aa153759b445a65cac84c2acd5fa044c2846bffb7732e2188767f4b28c2f6f2b13b82d2e5128384a086", 0x3f, 0x16}, {0x2, 0x9, &(0x7f0000000a00)='/proc/sys/kernel/yama/ptrace_scope\x00', &(0x7f0000000a40)="86ceaf9ac6e5671b9bc1ccefd9df529f6a40ddd782346fdca1a84f818fb45acaedcc5f515a3501391bd62698de67a31ec571856866d0a4ef257cfc28bde919ca81646ef2a68244cc0462e639a5ee7544ce88143565f3af0ee5d371c1694cff074e473e09d1ddba05722a925fec86eca4b75a10cc378a25fe503f123c6298b1c5a51e672d8684e3cc7dc1d1ab882c8f0ca6ef", 0x92, 0x8}, {0x3, 0x1, &(0x7f0000000b00)='keyring\x00', &(0x7f0000000b40)="b798ec79b5b50effb16c1b2dab7e5cf903d970a934a20107a431834218f057ec11e8fb0dae101590603cc5b6c97962f86121476d72c6ee0dec", 0x39, 0x22}, {0x3, 0x40, &(0x7f0000000b80)='(@)-*\x00', &(0x7f0000000bc0)="99bf4d0c4f331dee62dc451d3cb2a73ee33b514481617eb82ebb7e78fc292ebbfa83c9c45e8da089c59ead4d2dd9d23f94211c2260684808058ee51983d0a50effdab7458dc85cda1e49b90b5fce4e2ce9a36cc43794", 0x56, 0x12}, {0x2, 0x3, &(0x7f0000000c40)='/.$\x00', &(0x7f0000000c80)="cd1c913f865c42e4fcb5f9f7101ef594d1b6c87a558fbb9eac2817f4b23da8eac99e044154edde42b21d4f8f22025cc54e079ed5aa30bafad582c7095bfcf58b1ca3307dca1fa57e319684ea6695cb263246d5633a1935d43f4100c06db11abe6543d0f7d0278a78968838a5fc9a6592738b1110abc6e3e56551525c565a3c8c5b048a7c48518b771ed7184d754f2e500524d96c", 0x94}, {0x3, 0x5, &(0x7f0000000d40)='\x1d^\x00', &(0x7f0000000d80)="3f93992b14616ec5c2d94d9bff08e157247cfcc79fb8a6b0bdddef5042285ba5f926f75a52d97ddc7c60950f581034e836856ab128842e23bf43ead072870eb0919cc5417759fd97e61059ffb4542cbad70b934f1543b8e183e17863e36c68f275ce9183fac0cc9f245acd044d48b40146575cff66af71cded7f211b8a3314bbac0d", 0x82, 0x30}]}) r13 = getpgid(0x0) sched_setscheduler(r13, 0x0, &(0x7f0000000f80)=0x800) r14 = syz_open_dev$MSR(&(0x7f0000000fc0), 0x7fff, 0x0) read$msr(r14, &(0x7f0000001000)=""/111, 0x6f) 693.894292ms ago: executing program 7 (id=3881): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x200000, &(0x7f0000000000/0x200000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000080)={0x1, [0x4, 0x4], 0x1}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000040000000800000006"], 0x48) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x1, @local}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r6, &(0x7f0000000240), &(0x7f00000001c0)=@udp}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r6, &(0x7f0000000140), &(0x7f0000000000)=""/82}, 0x20) ioctl$TCXONC(r5, 0x540a, 0x0) write(r5, &(0x7f0000000100)='^', 0x1) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000000)={0x6000, 0x200000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x200000, &(0x7f0000000000/0x200000)=nil}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0) write$UHID_CREATE2(r8, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r9 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) writev(r9, &(0x7f0000001a00)=[{&(0x7f0000000040)="b7967dfd021f5f", 0x7}, {&(0x7f0000000140)="8d6d5d18", 0x4}], 0x2) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r10, &(0x7f0000002640)={0x2020}, 0x2020) 0s ago: executing program 5 (id=3882): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, &(0x7f0000002a40)=0x8000) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x6c, @rand_addr=0x640100ff, 0x4e20, 0x1, 'lblc\x00', 0x20, 0xa7e, 0x3e}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x8000, 0x10007b}, {@remote, 0x4e20, 0x3, 0xcd}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x2) setreuid(0x0, 0xee01) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000300)=0xf) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000001f80)=r0, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000003540)={'wlan0\x00'}) syz_emit_ethernet(0x26b, &(0x7f00000006c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa2f86dd67e2ea7002350101fe800000000000000000000000000017fe8000000000000000000000000600aa000a000900000000fe8000000000000000000000000000bb00000000000000000000000000000001fc020000000000000000000000000000fc01000000000000000000000000000000000000000000000000000000000000291d0000000000000001000401d209e7b13cab838801ad590f1755c4df262faf443ab12c8e8a88d2b9ade6be06d76e624186fd6e4d0e23541ffb0582625c6d58f703394f9aa0d9f3d32bb413768115a5a5cd1044e168545a6a161531e73346ddb03585e84cc5a84df5006d82aa3142936ef3fd919f7f8a41f509659a296b6d684492ad91995f7f4bbf73c5bb0fda9637776c4721c6f5a72d26530d5255e32abca8f0e83887c1b20593973a5ab35b93107c7ec9320c715d30d3bc10f31049de88c3af58b3e81ac56a7532dd89499e49dc12fab3a4d0b6b1c6abe9666d20bd4e6b57e8f54ebaa9260b824b63be5f6c2ef4467aa36f6f39c100b0786d8243989fde141b58fd0168d3037bceb83194e2f19c85ea59edfca7876bb34f818113be22d0459a94b9449345eb33d2f5169a8189565e7bef8fd167d896775fa9687efc86db6f822cddce5b3784275f93c7941584c8c8bc47f8364f35388a1b5c1ae1d500e0992e1e2f7a80501600000000000000008ff71a6fa3a74e9730519507970e6df424b52ce27886b64fe203d3001ed5189e13c0fc4839635296f34caa27196f27eea79b53ee3a13dfb572d93563e6edc37223977711845a254db9562216ee6aa84836abac1546291f493026e104c1389bb4c1a1a8f0f1fcafda88aa40c680cba3c168aac39ef8f80be33cb9d25026bb3b01545981d89c45c74b2c9f871f28aeca4f4d712a7d2c61523a07703cbb23a044b91a5db8f8d73d16ef95d8fbd60f237e"], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x2, 0x0) timer_create(0x3, &(0x7f0000000180)={0x0, 0x3f, 0x403dd8a69efb723a, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/machinecheck/machinecheck0/ignore_ce\x00', 0x1, 0x0) write(r7, &(0x7f0000000200)='1\n\x00', 0x2) close(r7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/machinecheck/machinecheck0/ignore_ce\x00', 0x424801, 0x0) write(r8, &(0x7f0000000200)='0\n\x00', 0x2) kernel console output (not intermixed with test programs): hcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 974.088808][T21129] wlan0 speed is unknown, defaulting to 1000 [ 974.151379][T21129] vxcan1 speed is unknown, defaulting to 1000 [ 974.334905][T12535] Bluetooth: hci4: command tx timeout [ 974.425189][ T30] audit: type=1400 audit(2000000903.680:3207): avc: denied { write } for pid=21175 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 976.545137][T12535] Bluetooth: hci4: command tx timeout [ 977.108953][ T30] audit: type=1400 audit(2000000906.370:3208): avc: denied { write } for pid=21177 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 977.252775][T21202] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 977.345666][T21202] kvm: pic: non byte read [ 977.378386][T21202] kvm: pic: level sensitive irq not supported [ 977.378467][T21202] kvm: pic: non byte read [ 977.434931][ T30] audit: type=1400 audit(2000000906.700:3209): avc: denied { write } for pid=21204 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 977.437060][T21202] kvm: pic: level sensitive irq not supported [ 977.544073][T21202] kvm: pic: non byte read [ 977.576613][T21202] kvm: pic: level sensitive irq not supported [ 977.580949][T21202] kvm: pic: non byte read [ 977.608682][T21202] kvm: pic: level sensitive irq not supported [ 977.608879][T21202] kvm: pic: non byte read [ 977.994069][T21129] bridge0: port 1(bridge_slave_0) entered blocking state [ 978.026813][T21129] bridge0: port 1(bridge_slave_0) entered disabled state [ 978.056635][T21129] bridge_slave_0: entered allmulticast mode [ 978.102672][T21129] bridge_slave_0: entered promiscuous mode [ 978.142143][T21129] bridge0: port 2(bridge_slave_1) entered blocking state [ 978.181609][T21129] bridge0: port 2(bridge_slave_1) entered disabled state [ 978.216686][T21129] bridge_slave_1: entered allmulticast mode [ 978.226101][T21225] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3459'. [ 978.262005][T21129] bridge_slave_1: entered promiscuous mode [ 978.267200][T21225] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3459'. [ 978.299912][T21227] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 978.321525][T21225] netlink: 'syz.5.3459': attribute type 19 has an invalid length. [ 978.358756][T21225] netlink: 'syz.5.3459': attribute type 20 has an invalid length. [ 978.573499][T12535] Bluetooth: hci4: command tx timeout [ 978.595748][ T6038] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 978.672457][ T1123] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 978.734399][T21233] gadgetfs: bound to dummy_udc driver [ 978.768578][T21129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 978.787931][ T30] audit: type=1400 audit(2000000908.050:3210): avc: denied { create } for pid=21237 comm="syz.1.3462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 978.801711][T21129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 979.012951][ T7568] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 979.317002][T21245] ALSA: mixer_oss: invalid OSS volume '' [ 979.748925][ T30] audit: type=1400 audit(2000000908.880:3211): avc: denied { write } for pid=21211 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 979.962524][ C1] gadgetfs: connected [ 979.968459][ T7568] gadgetfs: disconnected [ 980.123139][ C1] gadgetfs: connected [ 980.133223][ T7568] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 980.154520][ T7568] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.175812][ C1] gadgetfs: configuration #1 [ 980.186421][ T30] audit: type=1400 audit(2000000909.450:3212): avc: denied { write } for pid=21250 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 980.194740][ T7568] input: USB Touchscreen 1234:5678 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input63 [ 980.212998][ T7565] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 980.356851][ C0] usbtouchscreen 1-1:1.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 980.367185][T21129] team0: Port device team_slave_0 added [ 980.403219][T19794] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 980.421007][ T7565] usb 6-1: config index 0 descriptor too short (expected 65109, got 72) [ 980.431856][T19794] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 980.453648][ T7565] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 980.455214][T21129] team0: Port device team_slave_1 added [ 980.481857][ T7565] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.491922][T21129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 980.493031][ T7565] usb 6-1: Product: syz [ 980.500020][T21129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 980.535949][T21129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 980.544317][ T7565] usb 6-1: Manufacturer: syz [ 980.549282][T21129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 980.551804][ T7565] usb 6-1: SerialNumber: syz [ 980.560028][T21129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 980.596520][T21129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 980.620961][ T5715] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 980.653117][T12535] Bluetooth: hci4: command tx timeout [ 980.653183][ T5789] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 980.691987][T21129] hsr_slave_0: entered promiscuous mode [ 980.702439][T21129] hsr_slave_1: entered promiscuous mode [ 980.713800][T21129] debugfs: 'hsr0' already exists in 'hsr' [ 980.719629][T21129] Cannot create hsr debugfs directory [ 980.810898][ T5789] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 980.859351][ T5789] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 980.894745][ T5789] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 980.932491][ T5789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.956995][ T5789] usb 2-1: Product: syz [ 980.967031][ T5789] usb 2-1: Manufacturer: syz [ 980.979024][ T5789] usb 2-1: SerialNumber: syz [ 981.005464][ T5789] ti_usb_3410_5052 2-1:2.0: TI USB 5052 2 port adapter converter detected [ 981.036643][ T5789] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 981.060591][ T5789] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 981.169158][ T30] audit: type=1400 audit(2000000910.430:3213): avc: denied { write } for pid=21255 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 981.228208][ T5789] usb 6-1: USB disconnect, device number 98 [ 981.328694][ T30] audit: type=1400 audit(2000000910.590:3214): avc: denied { write } for pid=21267 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 981.365552][T21269] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3464'. [ 981.576517][T21232] gadgetfs: suspended from state 3 [ 981.592374][ T7565] usb 1-1: USB disconnect, device number 57 [ 981.598928][T21232] gadgetfs: disconnected [ 981.698353][ T5715] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 981.726010][ T5715] ath9k_htc: Failed to initialize the device [ 981.770923][ T5789] usb 6-1: ath9k_htc: USB layer deinitialized [ 982.006845][T21277] trusted_key: encrypted_key: insufficient parameters specified [ 982.017581][T21283] kvm: user requested TSC rate below hardware speed [ 982.073737][ T30] audit: type=1400 audit(2000000911.330:3215): avc: denied { setopt } for pid=21281 comm="syz.5.3466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 982.336477][T21254] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110 [ 982.349554][ T30] audit: type=1400 audit(2000000911.600:3216): avc: denied { write } for pid=21271 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 982.421878][T21254] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 982.446168][T21254] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 982.482719][T21129] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 982.499487][T21254] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -32 [ 982.501222][ T30] audit: type=1400 audit(2000000911.760:3217): avc: denied { write } for pid=21294 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 982.543757][ T5715] usb 2-1: USB disconnect, device number 49 [ 982.575797][T21129] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 982.599010][ T5715] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 982.619398][T21129] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 982.650515][ T5715] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 982.655454][T21129] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 982.685472][T21129] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 982.695312][ T5715] ti_usb_3410_5052 2-1:2.0: device disconnected [ 982.711986][T21129] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 982.740502][T21129] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 982.788860][T21129] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 982.969919][ T30] audit: type=1400 audit(2000000912.230:3218): avc: denied { mounton } for pid=21296 comm="syz.5.3469" path="/file0" dev="ramfs" ino=82117 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 983.082282][T21129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 983.159130][T21129] 8021q: adding VLAN 0 to HW filter on device team0 [ 983.228930][ T6038] bridge0: port 1(bridge_slave_0) entered blocking state [ 983.236109][ T6038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 983.322230][ T6038] bridge0: port 2(bridge_slave_1) entered blocking state [ 983.329412][ T6038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 984.356116][T21129] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 984.696477][ T30] audit: type=1400 audit(2000000913.960:3219): avc: denied { write } for pid=21302 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 984.838372][T21343] serio: Serial port ptm0 [ 984.847415][ T30] audit: type=1400 audit(2000000914.110:3220): avc: denied { connect } for pid=21344 comm="syz.7.3474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 984.956761][ T30] audit: type=1400 audit(2000000914.220:3221): avc: denied { write } for pid=21345 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 985.344401][T21129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 985.436028][ T30] audit: type=1400 audit(2000000914.700:3222): avc: denied { write } for pid=21354 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 985.594083][T21372] fuse: Unknown parameter 'fZ' [ 985.644656][ T30] audit: type=1400 audit(2000000914.900:3223): avc: denied { write } for pid=21370 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 986.232551][ T30] audit: type=1400 audit(2000000915.490:3224): avc: denied { listen } for pid=21371 comm="syz.5.3476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 986.327347][T21129] veth0_vlan: entered promiscuous mode [ 986.390180][T21129] veth1_vlan: entered promiscuous mode [ 986.548642][T21129] veth0_macvtap: entered promiscuous mode [ 986.607433][T21129] veth1_macvtap: entered promiscuous mode [ 986.679042][T12537] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 986.700103][T12537] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 986.706296][ T30] audit: type=1400 audit(2000000915.970:3225): avc: denied { write } for pid=21376 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 986.731771][T12537] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 986.749990][T21129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 986.750367][T12537] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 986.768434][T12537] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 986.797491][T21129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 986.884908][T21403] FAULT_INJECTION: forcing a failure. [ 986.884908][T21403] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 986.906152][T21403] CPU: 1 UID: 0 PID: 21403 Comm: syz.5.3481 Tainted: G L syzkaller #0 PREEMPT(full) [ 986.906179][T21403] Tainted: [L]=SOFTLOCKUP [ 986.906184][T21403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 986.906193][T21403] Call Trace: [ 986.906198][T21403] [ 986.906203][T21403] dump_stack_lvl+0x100/0x190 [ 986.906228][T21403] should_fail_ex.cold+0x5/0xa [ 986.906248][T21403] _copy_to_iter+0x5a4/0x1720 [ 986.906272][T21403] ? __pfx__copy_to_iter+0x10/0x10 [ 986.906290][T21403] ? find_held_lock+0x2b/0x80 [ 986.906303][T21403] ? tcp_seq_stop+0x1ed/0x260 [ 986.906318][T21403] ? tcp_seq_stop+0x1ed/0x260 [ 986.906334][T21403] ? do_raw_spin_unlock+0x145/0x1e0 [ 986.906358][T21403] seq_read_iter+0xdab/0x1270 [ 986.906382][T21403] seq_read+0x344/0x4d0 [ 986.906397][T21403] ? __pfx_seq_read+0x10/0x10 [ 986.906410][T21403] ? copy_iovec_from_user+0x102/0x140 [ 986.906430][T21403] ? iovec_from_user+0xda/0x140 [ 986.906453][T21403] ? selinux_file_permission+0x8f/0x6d0 [ 986.906480][T21403] ? __pfx_seq_read+0x10/0x10 [ 986.906494][T21403] proc_reg_read+0x240/0x330 [ 986.906511][T21403] ? __pfx_proc_reg_read+0x10/0x10 [ 986.906526][T21403] vfs_readv+0x5d8/0x8d0 [ 986.906552][T21403] ? __pfx_vfs_readv+0x10/0x10 [ 986.906586][T21403] ? __fget_files+0x21f/0x3d0 [ 986.906606][T21403] ? do_preadv+0x1ac/0x270 [ 986.906630][T21403] do_preadv+0x1ac/0x270 [ 986.906651][T21403] ? __pfx_do_preadv+0x10/0x10 [ 986.906676][T21403] do_syscall_64+0x115/0x870 [ 986.906693][T21403] ? clear_bhb_loop+0x40/0x90 [ 986.906711][T21403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.906725][T21403] RIP: 0033:0x7fa77ff9e019 [ 986.906738][T21403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 986.906751][T21403] RSP: 002b:00007fa780de5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 986.906766][T21403] RAX: ffffffffffffffda RBX: 00007fa780225fa0 RCX: 00007fa77ff9e019 [ 986.906775][T21403] RDX: 0000000000000004 RSI: 00002000000001c0 RDI: 0000000000000005 [ 986.906784][T21403] RBP: 00007fa780de5090 R08: 0000000020000000 R09: 0000000000000000 [ 986.906793][T21403] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 986.906801][T21403] R13: 00007fa780226038 R14: 00007fa780225fa0 R15: 00007ffe9e445828 [ 986.906821][T21403] [ 987.272287][T21251] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.297538][T21251] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.311655][T21251] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.333695][T19794] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.377194][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 987.387996][ T30] audit: type=1400 audit(2000000916.650:3226): avc: denied { write } for pid=21408 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 987.949763][T11983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 987.971189][T11983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 988.007986][T21413] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3483'. [ 988.190387][T11899] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 988.227658][T11899] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 988.550170][T21424] comedi comedi1: pcl812: I/O port conflict (0x100,16) [ 989.336246][T12535] Bluetooth: hci7: command tx timeout [ 990.314093][ T30] audit: type=1400 audit(2000000919.570:3227): avc: denied { write } for pid=21414 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 990.451450][T21395] wlan0 speed is unknown, defaulting to 1000 [ 990.647919][T21395] vxcan1 speed is unknown, defaulting to 1000 [ 991.044386][T21445] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 991.428502][T12535] Bluetooth: hci7: command tx timeout [ 991.447240][ T30] audit: type=1400 audit(2000000920.620:3228): avc: denied { write } for pid=21443 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 991.517915][T21449] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3440'. [ 991.630505][T21449] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3440'. [ 991.639763][T19794] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 991.713090][T19793] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 991.736986][T19793] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 991.804991][T19793] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 992.153023][ T7570] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 992.424969][ T7570] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 992.472307][ T7570] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 992.523718][ T5715] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 992.637850][ T7570] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 992.665678][ T7570] usb 7-1: config 220 has no interface number 2 [ 992.695323][ T7570] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 992.717062][ T5715] usb 6-1: Using ep0 maxpacket: 16 [ 992.727379][ T5715] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 992.754995][ T5715] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 992.769388][ T5715] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.781744][ T5715] usb 6-1: Product: syz [ 992.890107][ T7570] usb 7-1: config 220 interface 0 has no altsetting 0 [ 992.897267][ T7570] usb 7-1: config 220 interface 76 has no altsetting 0 [ 992.904702][ T7570] usb 7-1: config 220 interface 1 has no altsetting 0 [ 992.911696][ T30] audit: type=1400 audit(2000000922.000:3229): avc: denied { write } for pid=21452 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 992.941423][ T7570] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 992.952742][ T7570] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.968394][ T5715] usb 6-1: Manufacturer: syz [ 992.968642][ T7570] usb 7-1: Product: syz [ 992.989453][ T5715] usb 6-1: SerialNumber: syz [ 992.991874][ T7570] usb 7-1: Manufacturer: syz [ 993.010701][ T7570] usb 7-1: SerialNumber: syz [ 993.030057][ T5715] usb 6-1: config 0 descriptor?? [ 993.075321][ T5715] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 993.091952][ T30] audit: type=1400 audit(2000000922.350:3230): avc: denied { write } for pid=21481 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 993.107000][ T5715] usb 6-1: Detected FT232R [ 993.255437][ T7570] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 993.278679][ T7570] uvcvideo 7-1:220.0: No valid video chain found. [ 993.292258][ T7570] usb 7-1: selecting invalid altsetting 0 [ 993.398112][ T5715] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 993.441814][ T5715] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 993.453472][T12535] Bluetooth: hci7: command tx timeout [ 993.462377][ T5715] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 993.476417][ T5715] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 993.478010][ T7570] usb 7-1: selecting invalid altsetting 0 [ 993.497857][ T7570] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 993.523626][ T7570] usb 7-1: USB disconnect, device number 42 [ 993.571174][ T5715] usb 6-1: USB disconnect, device number 99 [ 993.640245][ T5715] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 993.673713][ T5715] ftdi_sio 6-1:0.0: device disconnected [ 993.855474][T21395] bridge0: port 1(bridge_slave_0) entered blocking state [ 993.862718][T21395] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.870064][T21395] bridge_slave_0: entered allmulticast mode [ 993.879354][T21395] bridge_slave_0: entered promiscuous mode [ 993.893761][T21395] bridge0: port 2(bridge_slave_1) entered blocking state [ 993.906026][T21395] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.913571][T21395] bridge_slave_1: entered allmulticast mode [ 993.922709][T21395] bridge_slave_1: entered promiscuous mode [ 994.029428][T21395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 994.088566][T21395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 994.140273][ T30] audit: type=1400 audit(2000000923.400:3231): avc: denied { write } for pid=21488 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 994.245534][T21395] team0: Port device team_slave_0 added [ 994.314700][T21395] team0: Port device team_slave_1 added [ 994.460714][T21395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 994.494617][T21395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 994.540262][T21524] FAULT_INJECTION: forcing a failure. [ 994.540262][T21524] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 994.554309][T21395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 994.565356][T21524] CPU: 1 UID: 0 PID: 21524 Comm: syz.5.3500 Tainted: G L syzkaller #0 PREEMPT(full) [ 994.565382][T21524] Tainted: [L]=SOFTLOCKUP [ 994.565388][T21524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 994.565398][T21524] Call Trace: [ 994.565403][T21524] [ 994.565410][T21524] dump_stack_lvl+0x100/0x190 [ 994.565438][T21524] should_fail_ex.cold+0x5/0xa [ 994.565460][T21524] _copy_from_user+0x2e/0xd0 [ 994.565484][T21524] memdup_user+0x6b/0xe0 [ 994.565505][T21524] strndup_user+0x78/0xe0 [ 994.565525][T21524] __x64_sys_mount+0x17f/0x310 [ 994.565549][T21524] ? __pfx___x64_sys_mount+0x10/0x10 [ 994.565578][T21524] do_syscall_64+0x115/0x870 [ 994.565604][T21524] ? clear_bhb_loop+0x40/0x90 [ 994.565626][T21524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 994.565643][T21524] RIP: 0033:0x7fa77ff9e019 [ 994.565658][T21524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 994.565674][T21524] RSP: 002b:00007fa780de5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 994.565692][T21524] RAX: ffffffffffffffda RBX: 00007fa780225fa0 RCX: 00007fa77ff9e019 [ 994.565704][T21524] RDX: 0000200000000100 RSI: 00002000000001c0 RDI: 0000200000000240 [ 994.565716][T21524] RBP: 00007fa780de5090 R08: 0000200000000640 R09: 0000000000000000 [ 994.565727][T21524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 994.565738][T21524] R13: 00007fa780226038 R14: 00007fa780225fa0 R15: 00007ffe9e445828 [ 994.565761][T21524] [ 994.570817][T21395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 994.646818][ T30] audit: type=1400 audit(2000000923.870:3232): avc: denied { write } for pid=21519 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 994.660783][T21395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 994.725163][ T7565] hid (null): report_id 33474 is invalid [ 994.735902][T21395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 994.989837][T21529] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3499'. [ 995.001749][T21529] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.024815][ T7565] hid-generic 0005:4C4A:5505.0016: collection stack underflow [ 995.049486][ T7565] hid-generic 0005:4C4A:5505.0016: item 0 2 0 12 parsing failed [ 995.071477][ T7565] hid-generic 0005:4C4A:5505.0016: probe with driver hid-generic failed with error -22 [ 995.095692][T21395] hsr_slave_0: entered promiscuous mode [ 995.121842][T21395] hsr_slave_1: entered promiscuous mode [ 995.163689][T21395] debugfs: 'hsr0' already exists in 'hsr' [ 995.198767][T21395] Cannot create hsr debugfs directory [ 995.532934][T12535] Bluetooth: hci7: command tx timeout [ 997.797944][T21564] FAULT_INJECTION: forcing a failure. [ 997.797944][T21564] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 997.836338][T21564] CPU: 0 UID: 0 PID: 21564 Comm: syz.6.3508 Tainted: G L syzkaller #0 PREEMPT(full) [ 997.836367][T21564] Tainted: [L]=SOFTLOCKUP [ 997.836373][T21564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 997.836384][T21564] Call Trace: [ 997.836390][T21564] [ 997.836397][T21564] dump_stack_lvl+0x100/0x190 [ 997.836425][T21564] should_fail_ex.cold+0x5/0xa [ 997.836450][T21564] _copy_to_user+0x32/0xd0 [ 997.836477][T21564] simple_read_from_buffer+0xcb/0x170 [ 997.836499][T21564] proc_fail_nth_read+0x1af/0x230 [ 997.836528][T21564] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 997.836556][T21564] ? rw_verify_area+0xce/0x6d0 [ 997.836581][T21564] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 997.836608][T21564] vfs_read+0x1e4/0xb40 [ 997.836639][T21564] ? __pfx_vfs_read+0x10/0x10 [ 997.836665][T21564] ? __fget_files+0x215/0x3d0 [ 997.836688][T21564] ? __fget_files+0x21f/0x3d0 [ 997.836714][T21564] ksys_read+0x12a/0x250 [ 997.836741][T21564] ? __pfx_ksys_read+0x10/0x10 [ 997.836775][T21564] do_syscall_64+0x115/0x870 [ 997.836797][T21564] ? clear_bhb_loop+0x40/0x90 [ 997.836819][T21564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 997.836838][T21564] RIP: 0033:0x7fa1f995e84e [ 997.836853][T21564] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 997.836869][T21564] RSP: 002b:00007fa1fa882fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 997.836887][T21564] RAX: ffffffffffffffda RBX: 00007fa1fa8836c0 RCX: 00007fa1f995e84e [ 997.836899][T21564] RDX: 000000000000000f RSI: 00007fa1fa8830a0 RDI: 0000000000000004 [ 997.836909][T21564] RBP: 00007fa1fa883090 R08: 0000000000000000 R09: 0000000000000000 [ 997.836920][T21564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 997.836930][T21564] R13: 00007fa1f9c26038 R14: 00007fa1f9c25fa0 R15: 00007ffc34a0d3e8 [ 997.836955][T21564] [ 998.112083][ T30] audit: type=1400 audit(2000000927.300:3233): avc: denied { write } for pid=21530 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 998.282746][T21577] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 998.289291][T21577] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 998.297868][T21577] vhci_hcd vhci_hcd.0: Device attached [ 998.314432][T21582] vhci_hcd: connection closed [ 998.315336][T21251] vhci_hcd vhci_hcd.7: stop threads [ 998.329669][T21251] vhci_hcd vhci_hcd.7: release socket [ 998.343377][T21251] vhci_hcd vhci_hcd.7: disconnect device [ 998.475229][ T30] audit: type=1400 audit(2000000927.740:3234): avc: denied { write } for pid=21585 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 999.241340][T21592] overlayfs: upper fs does not support file handles, falling back to index=off. [ 999.269591][T21592] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 999.795820][T21606] 9p: Bad value for 'wfdno' [ 1000.365375][ T30] audit: type=1400 audit(2000000929.620:3235): avc: denied { write } for pid=21593 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1000.564688][T21631] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1000.571221][T21631] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1000.578688][T21631] vhci_hcd vhci_hcd.0: Device attached [ 1000.598319][T21633] vhci_hcd: connection closed [ 1000.598615][ T36] vhci_hcd vhci_hcd.1: stop threads [ 1000.649352][T21626] fuse: fd is not a fuse device [ 1000.667819][T21626] netlink: 'syz.6.3522': attribute type 10 has an invalid length. [ 1000.677916][ T36] vhci_hcd vhci_hcd.1: release socket [ 1000.699106][T21626] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3522'. [ 1000.728557][ T36] vhci_hcd vhci_hcd.1: disconnect device [ 1000.756153][T21626] dummy0: entered promiscuous mode [ 1000.810846][ T30] audit: type=1400 audit(2000000930.040:3236): avc: denied { write } for pid=21635 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1000.887000][ T7563] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 1000.947021][T21638] overlayfs: failed to resolve './file1': -2 [ 1001.386904][ T30] audit: type=1400 audit(2000000930.650:3237): avc: denied { write } for pid=21644 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1001.489480][ T30] audit: type=1400 audit(2000000930.750:3238): avc: denied { write } for pid=21655 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1001.904844][ T30] audit: type=1400 audit(2000000931.170:3239): avc: denied { write } for pid=21657 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1002.019216][ T30] audit: type=1400 audit(2000000931.280:3240): avc: denied { write } for pid=21668 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1002.991158][ T30] audit: type=1400 audit(2000000932.240:3241): avc: denied { write } for pid=21670 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1003.208758][ T30] audit: type=1400 audit(2000000932.450:3242): avc: denied { write } for pid=21694 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1004.985530][ T7555] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1005.112962][ T7555] usb 7-1: device descriptor read/64, error -71 [ 1005.470814][ T7555] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1010.261386][T21395] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1010.546171][T21730] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1010.552710][T21730] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1010.561721][T21730] vhci_hcd vhci_hcd.0: Device attached [ 1010.740216][T21395] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1010.758002][T21395] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1010.895804][T21731] vhci_hcd: connection closed [ 1010.918711][ T30] audit: type=1400 audit(2000000939.816:3243): avc: denied { write } for pid=21709 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1011.050460][ T6038] vhci_hcd vhci_hcd.5: stop threads [ 1011.066884][ T6038] vhci_hcd vhci_hcd.5: release socket [ 1011.077918][ T6038] vhci_hcd vhci_hcd.5: disconnect device [ 1011.269980][ T5715] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 1011.278104][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 1011.371439][T21749] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=21749 comm=syz.6.3535 [ 1011.411837][ T30] audit: type=1400 audit(2000000940.274:3244): avc: denied { write } for pid=21753 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1011.437622][ T5715] usb 2-1: device descriptor read/64, error -32 [ 1011.617755][T21395] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1011.627351][T21395] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1011.653567][ T30] audit: type=1400 audit(2000000940.489:3245): avc: denied { name_bind } for pid=21758 comm="syz.5.3538" src=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1011.704525][ T5715] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 1011.723370][T21395] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1011.745200][T21395] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1011.778157][T21395] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1011.927079][ T5715] usb 2-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 1011.940019][ T5715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.949859][ T5715] usb 2-1: Product: syz [ 1011.954015][ T5789] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 1011.965583][ T5715] usb 2-1: Manufacturer: syz [ 1011.970381][ T5715] usb 2-1: SerialNumber: syz [ 1011.990011][ T5715] usb 2-1: config 0 descriptor?? [ 1012.024119][ T5715] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 1012.137950][T21395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1012.155538][ T5789] usb 6-1: too many configurations: 24, using maximum allowed: 8 [ 1012.207099][ T5789] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1012.260457][T21395] 8021q: adding VLAN 0 to HW filter on device team0 [ 1012.267919][ T5789] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.261568][ T5789] usb 6-1: Product: syz [ 1013.311066][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1013.318321][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1013.328401][ T5789] usb 6-1: Manufacturer: syz [ 1013.363927][ T5789] usb 6-1: SerialNumber: syz [ 1013.377737][ T30] audit: type=1400 audit(2000000942.108:3246): avc: denied { write } for pid=21756 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1013.686373][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1013.693523][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1013.873648][ T7568] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1014.171654][ T5715] gspca_m5602: Failed to find a sensor [ 1014.188823][ T5715] ALi m5602 2-1:0.0: ALi m5602 webcam failed [ 1014.224206][ T30] audit: type=1400 audit(2000000942.295:3247): avc: denied { write } for pid=21788 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1014.255025][ T5715] usb 2-1: USB disconnect, device number 51 [ 1014.593259][T21794] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3544'. [ 1014.659730][T21798] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3544'. [ 1014.733271][ T7555] usb 6-1: USB disconnect, device number 100 [ 1014.747830][T21794] bridge_slave_1: left allmulticast mode [ 1014.758038][T21800] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21800 comm=syz.6.3544 [ 1014.783924][T21794] bridge_slave_1: left promiscuous mode [ 1014.829315][T21794] bridge0: port 2(bridge_slave_1) entered disabled state [ 1014.952626][T21794] bridge_slave_0: left allmulticast mode [ 1014.965342][T21794] bridge_slave_0: left promiscuous mode [ 1014.983137][T21794] bridge0: port 1(bridge_slave_0) entered disabled state [ 1015.084901][ T30] audit: type=1400 audit(2000000943.707:3248): avc: denied { write } for pid=21791 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1015.227041][ T30] audit: type=1400 audit(2000000943.838:3249): avc: denied { write } for pid=21807 comm="syz.1.3545" name="functions" dev="configfs" ino=10077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1015.397033][ T7568] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1015.436729][ T7568] ath9k_htc: Failed to initialize the device [ 1015.469921][ T30] audit: type=1400 audit(2000000943.960:3250): avc: denied { write } for pid=21818 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1015.648114][ T7555] usb 6-1: ath9k_htc: USB layer deinitialized [ 1016.521017][ T30] audit: type=1400 audit(2000000945.055:3251): avc: denied { watch watch_reads } for pid=21852 comm="syz.6.3554" path="pipe:[84423]" dev="pipefs" ino=84423 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1016.558070][ T7568] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1016.578260][T21395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1016.834667][ T7568] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1016.977509][ T30] audit: type=1400 audit(2000000945.307:3252): avc: denied { write } for pid=21830 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1017.004529][ T7568] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1017.021472][ T7568] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1017.030650][ T7568] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.044184][T21845] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1017.391486][ T7568] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1018.883621][T21395] veth0_vlan: entered promiscuous mode [ 1018.918976][T21395] veth1_vlan: entered promiscuous mode [ 1018.994380][ T30] audit: type=1400 audit(2000000947.290:3253): avc: denied { write } for pid=21866 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1019.054993][T21868] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1019.090647][T21395] veth0_macvtap: entered promiscuous mode [ 1019.121217][T21395] veth1_macvtap: entered promiscuous mode [ 1019.241261][T21395] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1019.290318][T21395] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1019.309153][T21886] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1019.315672][T21886] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1019.328047][T21886] vhci_hcd vhci_hcd.0: Device attached [ 1019.343016][T21006] usb 2-1: USB disconnect, device number 52 [ 1019.411896][T11899] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.424517][T21889] vhci_hcd: connection closed [ 1019.426980][T11983] vhci_hcd vhci_hcd.5: stop threads [ 1019.477542][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.488165][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.515047][T11983] vhci_hcd vhci_hcd.5: release socket [ 1019.523324][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.532498][T11983] vhci_hcd vhci_hcd.5: disconnect device [ 1019.728121][T11899] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1019.740182][T11899] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1019.804490][T21896] Bluetooth: MGMT ver 1.23 [ 1019.809219][T11899] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1019.824311][T11899] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1019.967344][ T7565] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1020.393735][ T7565] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 1020.422664][ T7565] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 1020.448937][ T7565] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 1020.533675][ T7565] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 1020.570551][ T7565] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 64 [ 1020.668522][ T7565] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 1020.695821][T21907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3565'. [ 1020.698892][ T7565] usb 7-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 1020.721552][ T7565] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1020.733009][ T7565] usb 7-1: Product: syz [ 1020.738091][ T7565] usb 7-1: Manufacturer: syz [ 1020.776690][T21894] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1020.808464][ T30] audit: type=1400 audit(2000000949.059:3254): avc: denied { write } for pid=21878 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1020.832589][T21894] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1020.845183][T21894] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1020.866894][T21894] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1020.892582][T21894] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1020.899826][T21894] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1021.113968][ T30] audit: type=1400 audit(2000000949.190:3255): avc: denied { write } for pid=21915 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1021.206924][ T7565] usb 7-1: USB2VGA dongle found at address 45 [ 1021.219810][ T7565] usb 7-1: Allocated 8 output buffers [ 1021.244689][ T7565] usb 7-1: Failed to early initialize device [ 1021.451015][T21894] usb 7-1: Failed to initialize device [ 1021.512712][T21894] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3563'. [ 1021.592033][ T7568] usb 7-1: USB disconnect, device number 45 [ 1023.598115][ T30] audit: type=1400 audit(2000000951.678:3256): avc: denied { write } for pid=21925 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1023.743468][ T30] audit: type=1400 audit(2000000951.809:3257): avc: denied { write } for pid=21971 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1023.853543][T21931] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1023.862537][T12535] Bluetooth: hci0: command 0x0c1a tx timeout [ 1024.074858][ T30] audit: type=1400 audit(2000000952.118:3258): avc: denied { write } for pid=21974 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1024.224304][T21987] FAULT_INJECTION: forcing a failure. [ 1024.224304][T21987] name failslab, interval 1, probability 0, space 0, times 0 [ 1024.241830][T21987] CPU: 1 UID: 0 PID: 21987 Comm: syz.3.3580 Tainted: G L syzkaller #0 PREEMPT(full) [ 1024.241860][T21987] Tainted: [L]=SOFTLOCKUP [ 1024.241866][T21987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1024.241877][T21987] Call Trace: [ 1024.241883][T21987] [ 1024.241890][T21987] dump_stack_lvl+0x100/0x190 [ 1024.241919][T21987] should_fail_ex.cold+0x5/0xa [ 1024.241942][T21987] should_failslab+0xc2/0x120 [ 1024.241972][T21987] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 1024.241994][T21987] ? _raw_spin_unlock+0x28/0x50 [ 1024.242011][T21987] ? __d_alloc+0x35/0xa50 [ 1024.242037][T21987] __d_alloc+0x35/0xa50 [ 1024.242061][T21987] d_alloc+0x4a/0x1e0 [ 1024.242083][T21987] d_alloc_name+0x83/0xb0 [ 1024.242104][T21987] ? __pfx_d_alloc_name+0x10/0x10 [ 1024.242126][T21987] ? d_instantiate+0x8f/0xb0 [ 1024.242150][T21987] simple_fill_super+0x4c3/0x680 [ 1024.242173][T21987] ? nfsd_mkdir+0x455/0x460 [ 1024.242190][T21987] ? __pfx_nfsd_fill_super+0x10/0x10 [ 1024.242208][T21987] nfsd_fill_super+0x98/0x560 [ 1024.242227][T21987] ? __pfx_nfsd_fill_super+0x10/0x10 [ 1024.242245][T21987] get_tree_keyed+0x10e/0x1d0 [ 1024.242274][T21987] vfs_get_tree+0x92/0x320 [ 1024.242298][T21987] path_mount+0x7d0/0x23d0 [ 1024.242325][T21987] ? __pfx_path_mount+0x10/0x10 [ 1024.242346][T21987] ? lockdep_hardirqs_on+0x78/0x100 [ 1024.242370][T21987] ? putname+0xb1/0x110 [ 1024.242387][T21987] ? kmem_cache_free+0x127/0x6b0 [ 1024.242413][T21987] ? __x64_sys_mount+0x293/0x310 [ 1024.242433][T21987] __x64_sys_mount+0x293/0x310 [ 1024.242454][T21987] ? __pfx___x64_sys_mount+0x10/0x10 [ 1024.242482][T21987] do_syscall_64+0x115/0x870 [ 1024.242502][T21987] ? clear_bhb_loop+0x40/0x90 [ 1024.242523][T21987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.242541][T21987] RIP: 0033:0x7fe9e839e019 [ 1024.242557][T21987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1024.242573][T21987] RSP: 002b:00007fe9e923d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1024.242592][T21987] RAX: ffffffffffffffda RBX: 00007fe9e8625fa0 RCX: 00007fe9e839e019 [ 1024.242603][T21987] RDX: 00002000000001c0 RSI: 0000200000000180 RDI: 0000000000000000 [ 1024.242613][T21987] RBP: 00007fe9e923d090 R08: 0000000000000000 R09: 0000000000000000 [ 1024.242623][T21987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1024.242632][T21987] R13: 00007fe9e8626038 R14: 00007fe9e8625fa0 R15: 00007ffce03e2778 [ 1024.242653][T21987] [ 1024.562069][ T30] audit: type=1400 audit(2000000952.567:3259): avc: denied { write } for pid=21989 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1024.808014][T21998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3581'. [ 1024.817732][T21931] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1024.837559][T21931] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1024.866147][T21931] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1024.871992][T21998] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3581'. [ 1024.914305][T21931] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1024.933181][T21931] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1024.967760][T21931] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1024.996763][T21931] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1025.006247][T21931] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1025.312207][T21998] bridge0: port 2(bridge_slave_1) entered disabled state [ 1025.319732][T21998] bridge0: port 1(bridge_slave_0) entered disabled state [ 1025.343127][T22007] FAULT_INJECTION: forcing a failure. [ 1025.343127][T22007] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1025.408758][T22007] CPU: 1 UID: 0 PID: 22007 Comm: syz.1.3582 Tainted: G L syzkaller #0 PREEMPT(full) [ 1025.408787][T22007] Tainted: [L]=SOFTLOCKUP [ 1025.408793][T22007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1025.408803][T22007] Call Trace: [ 1025.408809][T22007] [ 1025.408816][T22007] dump_stack_lvl+0x100/0x190 [ 1025.408842][T22007] should_fail_ex.cold+0x5/0xa [ 1025.408869][T22007] _copy_from_user+0x2e/0xd0 [ 1025.408894][T22007] drm_ioctl+0x520/0xc60 [ 1025.408918][T22007] ? __pfx_drm_getcap+0x10/0x10 [ 1025.408937][T22007] ? __pfx_drm_ioctl+0x10/0x10 [ 1025.408967][T22007] ? selinux_file_ioctl+0x13b/0x290 [ 1025.408993][T22007] ? selinux_file_ioctl+0xb6/0x290 [ 1025.409023][T22007] ? __pfx_drm_ioctl+0x10/0x10 [ 1025.409045][T22007] __x64_sys_ioctl+0x18e/0x210 [ 1025.409072][T22007] do_syscall_64+0x115/0x870 [ 1025.409093][T22007] ? clear_bhb_loop+0x40/0x90 [ 1025.409115][T22007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1025.409133][T22007] RIP: 0033:0x7fba7899e019 [ 1025.409148][T22007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1025.409164][T22007] RSP: 002b:00007fba797a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1025.409183][T22007] RAX: ffffffffffffffda RBX: 00007fba78c25fa0 RCX: 00007fba7899e019 [ 1025.409195][T22007] RDX: 0000200000000080 RSI: 00000000c010640c RDI: 0000000000000003 [ 1025.409206][T22007] RBP: 00007fba797a0090 R08: 0000000000000000 R09: 0000000000000000 [ 1025.409217][T22007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1025.409227][T22007] R13: 00007fba78c26038 R14: 00007fba78c25fa0 R15: 00007fff8468a578 [ 1025.409252][T22007] [ 1025.868460][ T30] audit: type=1400 audit(2000000953.783:3260): avc: denied { write } for pid=21994 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1026.052032][ T30] audit: type=1400 audit(2000000953.970:3261): avc: denied { write } for pid=22012 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1026.085375][T12535] Bluetooth: hci0: command 0x0c1a tx timeout [ 1026.406380][ T5715] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1027.015732][T12535] Bluetooth: hci4: command 0x0c1a tx timeout [ 1027.100928][T12535] Bluetooth: hci7: command 0x0c1a tx timeout [ 1027.903270][ T5715] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1027.943702][ T5715] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1027.981020][T21998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1028.002914][ T5715] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1028.024633][ T5715] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1028.038825][ T5715] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1028.081247][ T5715] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1028.121526][ T5715] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1028.158659][T21998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1028.159889][ T5715] usb 2-1: Product: syz [ 1028.217790][ T5715] usb 2-1: Manufacturer: syz [ 1028.254205][ T5715] cdc_wdm 2-1:1.0: skipping garbage [ 1028.279466][ T5715] cdc_wdm 2-1:1.0: skipping garbage [ 1028.300033][T12535] Bluetooth: hci0: command 0x0c1a tx timeout [ 1028.309753][ T5715] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1028.324416][ T5715] cdc_wdm 2-1:1.0: Unknown control protocol [ 1028.706239][ T30] audit: type=1400 audit(2000000956.449:3262): avc: denied { write } for pid=22021 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1028.854458][ T30] audit: type=1400 audit(2000000956.580:3263): avc: denied { write } for pid=22033 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1028.967024][ T30] audit: type=1400 audit(2000000956.692:3264): avc: denied { read write } for pid=22014 comm="syz.1.3583" name="cdc-wdm0" dev="devtmpfs" ino=4691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 1029.031541][ T30] audit: type=1400 audit(2000000956.692:3265): avc: denied { open } for pid=22014 comm="syz.1.3583" path="/dev/cdc-wdm0" dev="devtmpfs" ino=4691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 1029.125709][ T36] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.272189][T12535] Bluetooth: hci4: command 0x0c1a tx timeout [ 1029.279371][T11983] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.324908][T12535] Bluetooth: hci7: command 0x0c1a tx timeout [ 1029.383133][ T30] audit: type=1400 audit(2000000957.085:3266): avc: denied { read } for pid=22014 comm="syz.1.3583" name="threads" dev="nfsd" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 1029.390681][ T36] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.426550][ T36] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.549706][T22056] tipc: Started in network mode [ 1030.555949][T22056] tipc: Node identity 2007ff, cluster identity 4711 [ 1030.563266][T22056] tipc: Node number set to 2099199 [ 1030.762869][T22057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3588'. [ 1030.797278][T22057] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3588'. [ 1030.874429][ T7570] libceph: connect (1)[c::]:6789 error -101 [ 1030.890759][ T7570] libceph: mon0 (1)[c::]:6789 connect error [ 1030.898222][ T30] audit: type=1400 audit(2000000958.470:3267): avc: denied { write } for pid=22041 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1031.053166][ T5715] libceph: connect (1)[c::]:6789 error -101 [ 1031.065273][ T30] audit: type=1400 audit(2000000958.629:3268): avc: denied { write } for pid=22070 comm="syz.7.3589" name="functions" dev="configfs" ino=10077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1031.099816][ T5715] libceph: mon0 (1)[c::]:6789 connect error [ 1031.109134][ T30] audit: type=1400 audit(2000000958.657:3269): avc: denied { write } for pid=22070 comm="syz.7.3589" name="functions" dev="configfs" ino=10077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1031.198854][ T7570] libceph: connect (1)[c::]:6789 error -101 [ 1031.210377][ T30] audit: type=1400 audit(2000000958.779:3270): avc: denied { write } for pid=22083 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1031.238727][ T7570] libceph: mon0 (1)[c::]:6789 connect error [ 1031.335201][ T7563] libceph: connect (1)[c::]:6789 error -101 [ 1031.383958][ T7563] libceph: mon0 (1)[c::]:6789 connect error [ 1031.463558][T12535] Bluetooth: hci4: command 0x0c1a tx timeout [ 1031.551013][T12535] Bluetooth: hci7: command 0x0c1a tx timeout [ 1031.574831][T22089] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 1031.827222][ T7570] libceph: connect (1)[c::]:6789 error -101 [ 1031.847720][ T7570] libceph: mon0 (1)[c::]:6789 connect error [ 1032.087961][T21006] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1032.096890][ T7563] libceph: connect (1)[c::]:6789 error -101 [ 1032.103477][ T7563] libceph: mon0 (1)[c::]:6789 connect error [ 1032.379862][ T30] audit: type=1400 audit(2000000959.873:3271): avc: denied { write } for pid=22091 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1032.445028][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1032.465295][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1032.479663][ T30] audit: type=1400 audit(2000000959.985:3272): avc: denied { write } for pid=22111 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1032.515090][T21006] usb 4-1: device descriptor read/64, error -71 [ 1032.524236][T22109] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1032.534082][T22113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1032.601067][T22115] input: syz0 as /devices/virtual/input/input64 [ 1032.674630][ T30] audit: type=1400 audit(2000000960.116:3273): avc: denied { map } for pid=22097 comm="syz.6.3594" path="/dev/tty1" dev="devtmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 1032.947851][T21006] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1033.219850][ T7555] libceph: connect (1)[c::]:6789 error -101 [ 1033.239602][ T7555] libceph: mon0 (1)[c::]:6789 connect error [ 1033.263851][ T5715] libceph: connect (1)[c::]:6789 error -101 [ 1033.269940][ T5715] libceph: mon0 (1)[c::]:6789 connect error [ 1033.369941][T21006] usb 4-1: device descriptor read/64, error -71 [ 1033.444805][T22134] syzkaller0: entered promiscuous mode [ 1033.450514][T22134] syzkaller0: entered allmulticast mode [ 1033.458522][T22135] tipc: Started in network mode [ 1033.471835][T22135] tipc: Node identity ae8bbc0851a3, cluster identity 4711 [ 1033.485365][T22135] tipc: Enabled bearer , priority 0 [ 1033.504737][T22135] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3597'. [ 1033.526314][T22137] tipc: Resetting bearer [ 1033.534333][T22132] tipc: Resetting bearer [ 1033.562231][T22132] tipc: Disabling bearer [ 1033.584500][T21006] usb usb4-port1: attempt power cycle [ 1034.125334][T21006] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1034.134212][T22071] ceph: No mds server is up or the cluster is laggy [ 1034.134227][T22075] ceph: No mds server is up or the cluster is laggy [ 1034.188927][T22153] FAULT_INJECTION: forcing a failure. [ 1034.188927][T22153] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1034.232928][T22153] CPU: 0 UID: 0 PID: 22153 Comm: syz.5.3602 Tainted: G L syzkaller #0 PREEMPT(full) [ 1034.232958][T22153] Tainted: [L]=SOFTLOCKUP [ 1034.232964][T22153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1034.232975][T22153] Call Trace: [ 1034.232981][T22153] [ 1034.232990][T22153] dump_stack_lvl+0x100/0x190 [ 1034.233017][T22153] should_fail_ex.cold+0x5/0xa [ 1034.233036][T22153] ? prepare_alloc_pages+0x16d/0x5f0 [ 1034.233064][T22153] should_fail_alloc_page+0xeb/0x140 [ 1034.233089][T22153] prepare_alloc_pages+0x1f0/0x5f0 [ 1034.233118][T22153] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 1034.233141][T22153] ? __pfx_stack_trace_save+0x10/0x10 [ 1034.233162][T22153] ? stack_depot_save_flags+0x27/0x9d0 [ 1034.233192][T22153] ? kasan_save_stack+0x3f/0x50 [ 1034.233212][T22153] ? kasan_save_stack+0x30/0x50 [ 1034.233231][T22153] ? kasan_save_track+0x14/0x30 [ 1034.233250][T22153] ? __kasan_kmalloc+0xaa/0xb0 [ 1034.233269][T22153] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 1034.233297][T22153] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1034.233316][T22153] ? rds_conn_create_outgoing+0x44/0x60 [ 1034.233340][T22153] ? ____sys_sendmsg+0xa4d/0xbe0 [ 1034.233367][T22153] ? __sys_sendmsg+0x160/0x210 [ 1034.233388][T22153] ? do_syscall_64+0x115/0x870 [ 1034.233409][T22153] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1034.233446][T22153] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1034.233468][T22153] ? policy_nodemask+0xed/0x4f0 [ 1034.233495][T22153] alloc_pages_mpol+0x1fb/0x540 [ 1034.233520][T22153] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1034.233542][T22153] ? __kasan_kmalloc+0xaa/0xb0 [ 1034.233563][T22153] ? lockdep_init_map_type+0x5c/0x250 [ 1034.233591][T22153] alloc_pages_noprof+0x1a/0x160 [ 1034.233618][T22153] get_zeroed_page_noprof+0x18/0xb0 [ 1034.233641][T22153] rds_cong_from_addr+0x1ad/0x540 [ 1034.233662][T22153] ? __rds_conn_create+0x1958/0x25a0 [ 1034.233687][T22153] rds_cong_get_maps+0x21/0xe0 [ 1034.233706][T22153] ? __ipv6_addr_type+0xe8/0x2e0 [ 1034.233730][T22153] __rds_conn_create+0xa7e/0x25a0 [ 1034.233762][T22153] ? __pfx___rds_conn_create+0x10/0x10 [ 1034.233784][T22153] ? __kasan_kmalloc+0xaa/0xb0 [ 1034.233805][T22153] ? lockdep_init_map_type+0x5c/0x250 [ 1034.233832][T22153] rds_conn_create_outgoing+0x44/0x60 [ 1034.233864][T22153] rds_sendmsg+0x10da/0x34a0 [ 1034.233893][T22153] ? is_bpf_text_address+0x94/0x1a0 [ 1034.233927][T22153] ? __pfx_rds_sendmsg+0x10/0x10 [ 1034.233967][T22153] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1034.233996][T22153] ? ____sys_sendmsg+0xa4d/0xbe0 [ 1034.234023][T22153] ____sys_sendmsg+0xa4d/0xbe0 [ 1034.234049][T22153] ? __pfx_rds_sendmsg+0x10/0x10 [ 1034.234078][T22153] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1034.234116][T22153] ___sys_sendmsg+0x190/0x1e0 [ 1034.234135][T22153] ? __pfx____sys_sendmsg+0x10/0x10 [ 1034.234151][T22153] ? __lock_acquire+0x49f/0x1a40 [ 1034.234172][T22153] ? get_pid_task+0x106/0x250 [ 1034.234215][T22153] __sys_sendmsg+0x160/0x210 [ 1034.234238][T22153] ? __pfx___sys_sendmsg+0x10/0x10 [ 1034.234273][T22153] do_syscall_64+0x115/0x870 [ 1034.234293][T22153] ? clear_bhb_loop+0x40/0x90 [ 1034.234314][T22153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1034.234333][T22153] RIP: 0033:0x7fa77ff9e019 [ 1034.234348][T22153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1034.234365][T22153] RSP: 002b:00007fa780de5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1034.234382][T22153] RAX: ffffffffffffffda RBX: 00007fa780225fa0 RCX: 00007fa77ff9e019 [ 1034.234394][T22153] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1034.234404][T22153] RBP: 00007fa780de5090 R08: 0000000000000000 R09: 0000000000000000 [ 1034.234414][T22153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1034.234425][T22153] R13: 00007fa780226038 R14: 00007fa780225fa0 R15: 00007ffe9e445828 [ 1034.234449][T22153] [ 1034.747109][T21006] usb 4-1: device descriptor read/8, error -71 [ 1035.023245][T22159] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1035.029794][T22159] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1035.037309][T22159] vhci_hcd vhci_hcd.0: Device attached [ 1035.047318][T22161] vhci_hcd: connection closed [ 1035.048395][ T6042] vhci_hcd vhci_hcd.5: stop threads [ 1035.059182][ T6042] vhci_hcd vhci_hcd.5: release socket [ 1035.106948][ T6042] vhci_hcd vhci_hcd.5: disconnect device [ 1035.668931][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1035.668943][ T30] audit: type=1400 audit(2000000962.970:3277): avc: denied { getattr } for pid=22165 comm="syz.3.3606" path="/7/tracing/uprobe_events" dev="tracefs" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1035.743781][T22164] netdevsim netdevsim7: Direct firmware load for þ failed with error -2 [ 1035.754719][T22164] netdevsim netdevsim7: Falling back to sysfs fallback for: þ [ 1035.767524][ T30] audit: type=1400 audit(2000000962.998:3278): avc: denied { firmware_load } for pid=22163 comm="syz.7.3605" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1035.951789][ T7570] usb 2-1: USB disconnect, device number 53 [ 1035.987864][T22175] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3608'. [ 1036.210830][ T30] audit: type=1400 audit(2000000963.419:3279): avc: denied { view } for pid=22173 comm="syz.6.3608" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1036.327893][T22186] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.3612'. [ 1036.407225][T12535] Bluetooth: hci7: unexpected event for opcode 0x2019 [ 1036.859939][ T7570] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1036.860624][ T7563] usb 4-1: new low-speed USB device number 26 using dummy_hcd [ 1037.054086][ T7570] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1037.055902][ T7563] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 4 [ 1037.074944][ T7570] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1037.092854][T22209] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1037.099381][T22209] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1037.107234][T22209] vhci_hcd vhci_hcd.0: Device attached [ 1037.119865][T22211] vhci_hcd: connection closed [ 1037.121438][ T7570] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 1037.138808][T21251] vhci_hcd vhci_hcd.5: stop threads [ 1037.144097][T21251] vhci_hcd vhci_hcd.5: release socket [ 1037.146091][ T7563] usb 4-1: can't read configurations, error -22 [ 1037.151856][ T7570] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.167783][T21251] vhci_hcd vhci_hcd.5: disconnect device [ 1037.188485][ T7570] as10x_usb: device has been detected [ 1037.213441][ T7570] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 1037.257692][ T7570] usb 2-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 1037.296373][ T7570] as10x_usb: error during firmware upload part1 [ 1037.302942][ T7570] Registered device Abilis Systems DVB-Titan [ 1037.417238][ T7563] usb 4-1: new low-speed USB device number 27 using dummy_hcd [ 1037.478852][T22219] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 1038.293830][ T7563] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 4 [ 1038.302671][ T7563] usb 4-1: can't read configurations, error -22 [ 1038.311515][ T7563] usb usb4-port1: attempt power cycle [ 1038.980315][ T7563] usb 4-1: new low-speed USB device number 28 using dummy_hcd [ 1038.997672][ T30] audit: type=1400 audit(2000000965.870:3280): avc: denied { accept } for pid=22230 comm="syz.5.3629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1039.042866][ T7563] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 4 [ 1039.052701][ T7563] usb 4-1: can't read configurations, error -22 [ 1039.193939][ T7563] usb 4-1: new low-speed USB device number 29 using dummy_hcd [ 1039.227489][ T7563] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 4 [ 1039.237023][ T7563] usb 4-1: can't read configurations, error -22 [ 1039.252336][ T7563] usb usb4-port1: unable to enumerate USB device [ 1039.993589][ T7570] usb 2-1: USB disconnect, device number 54 [ 1040.074254][ T7570] Unregistered device Abilis Systems DVB-Titan [ 1040.080642][ T7570] as10x_usb: device has been disconnected [ 1040.133561][T22243] db_root: cannot open: ./m [ 1040.494269][ T7570] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1040.559267][ T7560] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1040.677763][ T7570] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1040.695277][ T7570] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1040.717210][ T7570] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1040.732520][ T7560] usb 6-1: Using ep0 maxpacket: 8 [ 1040.736749][ T7570] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1040.741168][ T7560] usb 6-1: unable to get BOS descriptor set [ 1040.761077][ T7560] usb 6-1: config 1 interface 0 altsetting 129 bulk endpoint 0x82 has invalid maxpacket 64 [ 1040.762146][ T7570] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1040.773578][ T7560] usb 6-1: config 1 interface 0 altsetting 129 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1040.800416][ T7560] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1040.807091][ T7570] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1040.807119][ T7570] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1040.807139][ T7570] usb 2-1: Product: syz [ 1040.807155][ T7570] usb 2-1: Manufacturer: syz [ 1040.844145][ T7570] cdc_wdm 2-1:1.0: skipping garbage [ 1040.852523][ T7570] cdc_wdm 2-1:1.0: skipping garbage [ 1040.865666][ T7570] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1040.878506][ T7570] cdc_wdm 2-1:1.0: Unknown control protocol [ 1041.059323][ T7560] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1041.070825][ T7560] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.081534][ T7560] usb 6-1: Product: ë©â“ºè„邯瑫ゎ侬얲ᛞ蔤䊀ãƒî¯‰ã·›à«¡ä‚‹é¼‰é¥Ñœâ¾á·€ïœ¹ìˆ„凂ో봗﷤隮頃îºê”¶æ‚‚ä›—í˜ï±æ—¾ç”°ä é¬¦á¹¨á²‘䥑㛂ꄞ訉Ⴐﲌ眺㭒㋓璊í†î™á¹›ê ¶é„胯痦㢨쩩꒙왤摼쫚⃞⢠噤感 [ 1041.108469][ T7560] usb 6-1: Manufacturer: Ð [ 1041.113382][ T7560] usb 6-1: SerialNumber: ì¡ìˆ²ã®–ä­ƒæ ç¦è†›å©’垿♾å®ç”‰ç«›æ‚’記藋ㆊ輟蟔趽칻詑쑫걀或䪲䕃接䦮原듥ℶ廷ྃड़熈穓甛茣䎪䎠ᜫ孋⧘淰êœâ¶¸ã©¦ê½ã㈞퀦驵 [ 1041.149188][T22250] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1041.158196][T22250] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1041.284141][T22256] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1041.290684][T22256] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1041.298926][T22256] vhci_hcd vhci_hcd.0: Device attached [ 1041.319457][T22257] vhci_hcd: connection closed [ 1041.319975][ T6042] vhci_hcd vhci_hcd.3: stop threads [ 1041.342185][ T6042] vhci_hcd vhci_hcd.3: release socket [ 1041.354190][ T6042] vhci_hcd vhci_hcd.3: disconnect device [ 1041.646337][T22268] binder: 22267:22268 ioctl c0306201 0 returned -14 [ 1041.668125][T22268] tipc: Started in network mode [ 1041.679576][T22268] tipc: Node identity 78563412785634122143658721436587, cluster identity 4711 [ 1041.963024][T22272] netlink: 504 bytes leftover after parsing attributes in process `syz.7.3640'. [ 1041.975454][ T30] audit: type=1400 audit(2000000968.845:3281): avc: denied { checkpoint_restore } for pid=22271 comm="syz.7.3640" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1041.998065][T22272] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3640'. [ 1042.014623][ T7570] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 1042.109076][T22277] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3642'. [ 1042.275474][ T7570] usb 7-1: device descriptor read/64, error -71 [ 1043.371979][ T7560] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1043.455369][ T7570] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 1043.513777][ T7560] usb 6-1: USB disconnect, device number 101 [ 1043.619560][T21006] usb 2-1: USB disconnect, device number 55 [ 1043.679701][ T7570] usb 7-1: device descriptor read/64, error -71 [ 1043.808448][ T7570] usb usb7-port1: attempt power cycle [ 1045.030301][T22299] 9p: Bad value for 'rfdno' [ 1045.057788][T22302] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3647'. [ 1045.257793][ T30] audit: type=1400 audit(2000000971.932:3282): avc: denied { write } for pid=22305 comm="syz.6.3650" name="/" dev="configfs" ino=63 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1045.311431][ T30] audit: type=1400 audit(2000000971.932:3283): avc: denied { create } for pid=22305 comm="syz.6.3650" name="core" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 1045.389122][T22308] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1045.395650][T22308] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1045.404326][T22308] vhci_hcd vhci_hcd.0: Device attached [ 1045.422816][T22309] vhci_hcd: connection closed [ 1045.423416][T19794] vhci_hcd vhci_hcd.3: stop threads [ 1045.459570][T19794] vhci_hcd vhci_hcd.3: release socket [ 1045.477086][T19794] vhci_hcd vhci_hcd.3: disconnect device [ 1045.617402][T22313] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3652'. [ 1045.706726][ T30] audit: type=1400 audit(2000000972.325:3284): avc: denied { append } for pid=22314 comm="syz.7.3653" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1045.836330][ T30] audit: type=1400 audit(2000000972.447:3285): avc: denied { read } for pid=22314 comm="syz.7.3653" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1045.861505][ T30] audit: type=1400 audit(2000000972.447:3286): avc: denied { open } for pid=22314 comm="syz.7.3653" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1045.887104][T22315] deleting an unspecified loop device is not supported. [ 1045.887122][ T30] audit: type=1400 audit(2000000972.503:3287): avc: denied { ioctl } for pid=22314 comm="syz.7.3653" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1046.076387][T22322] No buffer was provided with the request [ 1046.572095][ T7568] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1046.603731][ T30] audit: type=1400 audit(2000000973.195:3288): avc: denied { read } for pid=22341 comm="syz.5.3662" path="socket:[86749]" dev="sockfs" ino=86749 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1046.724265][ T30] audit: type=1400 audit(2000000973.223:3289): avc: denied { map } for pid=22341 comm="syz.5.3662" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1046.749277][ T7570] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 1046.778155][ T7568] usb 4-1: config index 0 descriptor too short (expected 65109, got 72) [ 1046.788894][ T30] audit: type=1400 audit(2000000973.223:3290): avc: denied { execute } for pid=22341 comm="syz.5.3662" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1046.798951][ T7568] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1046.926128][ T7568] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.946813][ T7568] usb 4-1: Product: syz [ 1046.952589][ T7570] usb 7-1: Using ep0 maxpacket: 32 [ 1046.961100][ T7570] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1046.986758][ T7568] usb 4-1: Manufacturer: syz [ 1046.994852][ T7570] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1047.008447][ T7568] usb 4-1: SerialNumber: syz [ 1047.019766][ T7570] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1047.090200][T21804] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1047.120299][ T7570] usb 7-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 1047.190762][ T7570] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.394723][ T7570] usb 7-1: Product: syz [ 1047.436672][ T7570] usb 7-1: Manufacturer: syz [ 1047.481883][ T7570] usb 7-1: SerialNumber: syz [ 1047.778637][ T7570] usb 7-1: unit 4 not found! [ 1047.801274][ T7570] usb 7-1: unit 0 not found! [ 1047.835891][ T7568] usb 4-1: USB disconnect, device number 30 [ 1047.888942][T22359] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 1047.895469][T22359] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1047.904488][T22359] vhci_hcd vhci_hcd.0: Device attached [ 1047.923683][T22360] vhci_hcd: connection closed [ 1047.924134][ T6045] vhci_hcd vhci_hcd.7: stop threads [ 1047.943752][ T6045] vhci_hcd vhci_hcd.7: release socket [ 1047.949556][ T6045] vhci_hcd vhci_hcd.7: disconnect device [ 1048.041460][ T7570] usb 7-1: USB disconnect, device number 49 [ 1048.460290][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1048.460321][ T30] audit: type=1400 audit(2000000974.935:3292): avc: denied { compute_member } for pid=22362 comm="syz.3.3667" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1048.578743][T21804] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1048.611490][T21804] ath9k_htc: Failed to initialize the device [ 1048.644887][ T7568] usb 4-1: ath9k_htc: USB layer deinitialized [ 1049.567339][T22392] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1049.573868][T22392] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1049.582861][T22392] vhci_hcd vhci_hcd.0: Device attached [ 1049.598880][T22393] vhci_hcd: connection closed [ 1049.600153][T19794] vhci_hcd vhci_hcd.3: stop threads [ 1049.612731][T19794] vhci_hcd vhci_hcd.3: release socket [ 1049.618847][T19794] vhci_hcd vhci_hcd.3: disconnect device [ 1049.729868][T21804] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1049.906203][T21804] usb 6-1: config index 0 descriptor too short (expected 65109, got 72) [ 1049.932568][T21804] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1049.952558][T21804] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.961390][T21804] usb 6-1: Product: syz [ 1049.967864][T21804] usb 6-1: Manufacturer: syz [ 1049.972490][T21804] usb 6-1: SerialNumber: syz [ 1049.996306][ T7568] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1050.527267][ T7555] usb 6-1: USB disconnect, device number 102 [ 1050.636301][T22426] RGB/YUV Input: ================= START STATUS ================= [ 1050.645109][T22426] RGB/YUV Input: Test Pattern: 75% Colorbar [ 1050.653818][T22426] RGB/YUV Input: Show Information: All [ 1050.661972][T22426] RGB/YUV Input: Vertical Flip: false [ 1050.667533][T22426] RGB/YUV Input: Horizontal Flip: false [ 1050.673575][T22426] RGB/YUV Input: Brightness: 128 [ 1050.678901][T22426] RGB/YUV Input: Contrast: 128 [ 1050.687607][T22426] RGB/YUV Input: Hue: 0 [ 1050.697733][T22426] RGB/YUV Input: Saturation: 128 [ 1050.703481][T22426] RGB/YUV Input: Pixel Rate: 160000000 [ 1050.709099][T22426] RGB/YUV Input: Horizontal Blanking: 800 [ 1050.715664][T22427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3690'. [ 1050.725113][T22427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3690'. [ 1050.739614][T22426] RGB/YUV Input: Vertical Blanking: 3223 [ 1050.740496][T22427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3690'. [ 1050.746785][T22426] RGB/YUV Input: ================== END STATUS ================== [ 1050.842902][T22432] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3692'. [ 1050.892995][ T30] audit: type=1400 audit(2000000977.208:3293): avc: denied { append } for pid=22433 comm="syz.3.3693" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1050.916529][T22434] Cannot find del_set index 0 as target [ 1051.161943][T22444] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1051.168493][T22444] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1051.176164][T22444] vhci_hcd vhci_hcd.0: Device attached [ 1051.253588][ T7568] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1051.564216][ T7560] usb 35-1: new low-speed USB device number 3 using vhci_hcd [ 1051.889917][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1052.023711][T22445] vhci_hcd: connection reset by peer [ 1052.049578][T11897] vhci_hcd vhci_hcd.1: stop threads [ 1052.088082][T11897] vhci_hcd vhci_hcd.1: release socket [ 1052.263452][T22450] input: syz0 as /devices/virtual/input/input65 [ 1052.281419][T11897] vhci_hcd vhci_hcd.1: disconnect device [ 1052.712482][ T7568] ath9k_htc: Failed to initialize the device [ 1052.751504][ T7555] usb 6-1: ath9k_htc: USB layer deinitialized [ 1054.277607][T22459] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3700'. [ 1054.494598][T22474] sctp: [Deprecated]: syz.3.3704 (pid 22474) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1054.494598][T22474] Use struct sctp_sack_info instead [ 1054.708468][ T30] audit: type=1400 audit(2000000980.773:3294): avc: denied { bind } for pid=22483 comm="syz.5.3709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1054.731139][ T30] audit: type=1400 audit(2000000980.801:3295): avc: denied { accept } for pid=22483 comm="syz.5.3709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1054.840146][ T7563] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1054.871315][ T7568] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 1055.010682][ T7563] usb 2-1: device descriptor read/64, error -71 [ 1055.109827][ T7568] usb 7-1: config index 0 descriptor too short (expected 65109, got 72) [ 1055.118371][ T5715] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1055.130523][ T7568] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1055.150607][ T7568] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.161201][ T7568] usb 7-1: Product: syz [ 1055.171424][ T7568] usb 7-1: Manufacturer: syz [ 1055.281035][ T7563] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1055.314117][T22491] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1055.320661][T22491] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1055.332565][T22491] vhci_hcd vhci_hcd.0: Device attached [ 1055.789956][ T5715] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 1055.806345][ T7568] usb 7-1: SerialNumber: syz [ 1055.836825][ T7563] usb 2-1: device descriptor read/64, error -71 [ 1055.870975][ T7565] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 1056.126774][T22492] vhci_hcd: connection closed [ 1056.148213][T21251] vhci_hcd vhci_hcd.3: stop threads [ 1056.164248][ T5715] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 1056.544691][ T7563] usb usb2-port1: attempt power cycle [ 1056.704944][ T7568] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1056.712401][T21251] vhci_hcd vhci_hcd.3: release socket [ 1056.723038][ T5715] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 1056.776423][T21251] vhci_hcd vhci_hcd.3: disconnect device [ 1056.794932][ T5715] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 1056.835425][ T5715] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 64 [ 1056.870971][ T5715] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 1056.907996][ T5715] usb 6-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 1056.931877][ T5715] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1056.956969][ T5715] usb 6-1: Product: syz [ 1056.974446][ T5715] usb 6-1: Manufacturer: syz [ 1057.001954][T22488] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1057.184799][ T7560] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 1057.217650][T22488] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1057.240438][T22488] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1057.255930][ T7563] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1057.258039][T22488] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1057.316864][T21006] usb 7-1: USB disconnect, device number 50 [ 1057.339176][T22488] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1057.339664][ T7563] usb 2-1: device descriptor read/8, error -71 [ 1057.693786][T22488] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1057.774793][ T5715] usb 6-1: USB2VGA dongle found at address 103 [ 1057.799045][ T5715] usb 6-1: Allocated 8 output buffers [ 1057.817802][ T7568] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 1057.820631][ T5715] usb 6-1: Failed to early initialize device [ 1057.864392][ T7568] ath9k_htc: Failed to initialize the device [ 1057.924281][T21006] usb 7-1: ath9k_htc: USB layer deinitialized [ 1058.104127][T22488] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3710'. [ 1058.171469][ T7568] usb 6-1: USB disconnect, device number 103 [ 1058.826427][ T7570] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1058.938868][T22538] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1058.945428][T22538] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1058.955426][T22538] vhci_hcd vhci_hcd.0: Device attached [ 1059.109240][ T7563] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1059.351027][T21006] usb 43-1: new low-speed USB device number 7 using vhci_hcd [ 1059.388862][ T7563] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1059.656151][ T7563] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1059.794127][T22539] vhci_hcd: connection reset by peer [ 1060.154527][ T7570] usb 4-1: Using ep0 maxpacket: 32 [ 1060.225621][ T7563] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1060.352349][ T7570] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1060.354414][T21251] vhci_hcd vhci_hcd.5: stop threads [ 1060.361144][ T7570] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1060.361168][ T7570] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1060.361208][ T7570] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1060.361229][ T7570] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1060.361252][ T7570] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1060.361289][ T7570] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1060.361310][ T7570] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.363845][ T7570] usb 4-1: config 0 descriptor?? [ 1060.519225][ T7563] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1060.519298][T21251] vhci_hcd vhci_hcd.5: release socket [ 1060.540697][ T7563] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.763970][T21251] vhci_hcd vhci_hcd.5: disconnect device [ 1060.770866][ T7563] usb 2-1: config 0 descriptor?? [ 1061.754265][ T7565] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1061.846359][T22510] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1062.071442][T22561] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3726'. [ 1062.125126][ T7570] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 31 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1062.145019][T22563] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3726'. [ 1062.772127][ T7570] usb 4-1: USB disconnect, device number 31 [ 1062.896609][ T7555] usb 2-1: USB disconnect, device number 59 [ 1062.907715][ T7570] usblp0: removed [ 1063.156764][T22575] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1064.753759][T22596] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1064.760311][T22596] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1064.770243][T22596] vhci_hcd vhci_hcd.0: Device attached [ 1065.194130][T21006] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1065.538116][T22597] vhci_hcd: connection closed [ 1065.648269][T21251] vhci_hcd vhci_hcd.1: stop threads [ 1066.147391][T21251] vhci_hcd vhci_hcd.1: release socket [ 1066.322627][T21251] vhci_hcd vhci_hcd.1: disconnect device [ 1066.400743][ T7565] usb 35-1: new low-speed USB device number 4 using vhci_hcd [ 1066.448567][ T7565] usb 35-1: enqueue for inactive port 0 [ 1066.615827][ T7565] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 1071.832921][T22654] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3750'. [ 1072.007655][T22658] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[22659] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[22658] [ 1073.387378][ T5728] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1074.265616][ T5728] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1074.276334][ T5728] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.334791][ T5728] usb 2-1: config 0 descriptor?? [ 1074.377456][ T5728] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1074.397015][T22683] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3759'. [ 1074.658688][ T30] audit: type=1400 audit(2000000999.436:3296): avc: denied { write } for pid=22684 comm="syz.7.3758" name="functions" dev="configfs" ino=10077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1074.727124][T22691] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1074.733669][T22691] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1074.744237][T22691] vhci_hcd vhci_hcd.0: Device attached [ 1075.085326][ T7570] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 1075.300592][ T5789] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 1075.359802][ T5728] gspca_sunplus: reg_w_riv err -71 [ 1075.404621][T22693] vhci_hcd: connection reset by peer [ 1075.439548][ T1123] vhci_hcd vhci_hcd.3: stop threads [ 1075.476465][ T1123] vhci_hcd vhci_hcd.3: release socket [ 1075.502196][ T5789] usb 7-1: Using ep0 maxpacket: 16 [ 1075.538474][ T1123] vhci_hcd vhci_hcd.3: disconnect device [ 1075.567240][ T5789] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1075.648816][ T5789] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1075.734627][ T5789] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1075.888930][ T5789] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1075.965111][ T5728] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 1075.979171][ T5728] usb 2-1: USB disconnect, device number 60 [ 1075.999740][ T5789] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.079259][ T5789] usb 7-1: config 0 descriptor?? [ 1076.367375][T21804] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1076.376633][ T5789] usb 7-1: can't set config #0, error -71 [ 1076.403340][ T5789] usb 7-1: USB disconnect, device number 51 [ 1076.658646][T21804] usb 4-1: config index 0 descriptor too short (expected 65109, got 72) [ 1076.682013][T21804] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1076.714097][T21804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.743515][T21804] usb 4-1: Product: syz [ 1076.845227][T21804] usb 4-1: Manufacturer: syz [ 1076.869382][T21804] usb 4-1: SerialNumber: syz [ 1077.069482][ T5789] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1077.793253][ T7568] usb 4-1: USB disconnect, device number 32 [ 1077.992395][ T7555] usb 7-1: new full-speed USB device number 52 using dummy_hcd [ 1078.327146][ T5789] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1078.374928][ T5789] ath9k_htc: Failed to initialize the device [ 1078.432335][ T7568] usb 4-1: ath9k_htc: USB layer deinitialized [ 1078.489859][ T30] audit: type=1326 audit(2000001003.029:3297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22720 comm="syz.6.3768" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f999e019 code=0x7ffc0000 [ 1078.630777][T22727] wireguard0: entered promiscuous mode [ 1078.685217][T22727] wireguard0: entered allmulticast mode [ 1078.725081][ T30] audit: type=1326 audit(2000001003.029:3299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22720 comm="syz.6.3768" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7fa1f999e019 code=0x7ffc0000 [ 1078.813756][ T7555] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1078.839904][ T30] audit: type=1326 audit(2000001003.029:3300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22720 comm="syz.6.3768" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f999e019 code=0x7ffc0000 [ 1078.873427][ T7555] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1078.891377][ T7555] usb 7-1: can't read configurations, error -71 [ 1078.921651][T22740] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1078.928178][T22740] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1078.935670][T22740] vhci_hcd vhci_hcd.0: Device attached [ 1078.943097][T22742] vhci_hcd: connection closed [ 1078.943310][T11897] vhci_hcd vhci_hcd.3: stop threads [ 1078.947157][ T30] audit: type=1326 audit(2000001003.029:3301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22720 comm="syz.6.3768" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f999e019 code=0x7ffc0000 [ 1078.948009][T11897] vhci_hcd vhci_hcd.3: release socket [ 1078.960544][ T30] audit: type=1326 audit(2000001003.029:3298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22720 comm="syz.6.3768" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f999e019 code=0x7ffc0000 [ 1079.051255][T11897] vhci_hcd vhci_hcd.3: disconnect device [ 1079.122665][ T30] audit: type=1326 audit(2000001003.029:3302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22720 comm="syz.6.3768" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f999e019 code=0x7ffc0000 [ 1079.204378][T22747] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3775'. [ 1079.222724][ T30] audit: type=1326 audit(2000001003.029:3303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22720 comm="syz.6.3768" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f999e019 code=0x7ffc0000 [ 1079.392381][ T30] audit: type=1326 audit(2000001003.029:3304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22720 comm="syz.6.3768" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f999e019 code=0x7ffc0000 [ 1079.497902][ T30] audit: type=1326 audit(2000001003.057:3305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22720 comm="syz.6.3768" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7fa1f999e019 code=0x7ffc0000 [ 1079.973040][ T5728] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1080.154737][ T5728] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 1080.182640][ T5728] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 1080.195052][ T5728] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 1080.223725][ T5728] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 1080.235617][ T5728] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 64 [ 1080.250630][ T5728] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 1080.264995][ T5728] usb 4-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 1080.277402][ T5728] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1080.287698][ T5728] usb 4-1: Product: syz [ 1080.293953][ T5728] usb 4-1: Manufacturer: syz [ 1080.327505][T22765] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1080.338821][T22765] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1080.352148][T22765] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1080.362000][T22765] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1080.374042][T22765] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1080.383339][T22765] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1080.404957][ T5728] usb 4-1: USB2VGA dongle found at address 33 [ 1080.414880][ T5728] usb 4-1: Allocated 8 output buffers [ 1080.418566][ T5789] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1080.427142][ T5728] usb 4-1: Failed to early initialize device [ 1080.536398][ T7570] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1080.600537][ T5789] usb 2-1: Using ep0 maxpacket: 16 [ 1080.614253][ T5789] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1080.628933][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 1080.628949][ T30] audit: type=1400 audit(2000001005.012:3367): avc: denied { create } for pid=22783 comm="syz.5.3785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 1080.649390][T22765] usb 4-1: Failed to initialize device [ 1080.671252][ T5789] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1080.691162][ T5789] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1080.708511][ T5789] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1080.715424][T22765] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3780'. [ 1080.726655][ T5789] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.731537][ T5789] usb 2-1: config 0 descriptor?? [ 1080.785404][ T5728] usb 4-1: USB disconnect, device number 33 [ 1080.831421][ T30] audit: type=1400 audit(2000001005.218:3368): avc: denied { write } for pid=22789 comm="syz.6.3786" name="functions" dev="configfs" ino=10077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1080.929597][T22793] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 1081.198184][ T5789] usbhid 2-1:0.0: can't add hid device: -71 [ 1081.204307][ T5789] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1081.221343][ T5789] usb 2-1: USB disconnect, device number 61 [ 1081.363754][T22798] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3789'. [ 1081.378415][T22798] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22798 comm=syz.5.3789 [ 1081.533848][T22801] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1081.540374][T22801] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1081.548158][T22801] vhci_hcd vhci_hcd.0: Device attached [ 1081.986462][ T7570] usb 39-1: new low-speed USB device number 4 using vhci_hcd [ 1082.399794][T22802] vhci_hcd: connection closed [ 1082.702817][ T36] vhci_hcd vhci_hcd.3: stop threads [ 1083.011292][ T36] vhci_hcd vhci_hcd.3: release socket [ 1083.044459][ T36] vhci_hcd vhci_hcd.3: disconnect device [ 1083.168188][T22811] overlayfs: missing 'lowerdir' [ 1083.696644][ T30] audit: type=1400 audit(2000001007.893:3369): avc: denied { write } for pid=22817 comm="syz.7.3797" name="functions" dev="configfs" ino=10077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1083.769324][ T30] audit: type=1400 audit(2000001007.931:3370): avc: denied { write } for pid=22817 comm="syz.7.3797" name="functions" dev="configfs" ino=10077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1084.085909][T21006] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1084.094893][T22832] wlan0 speed is unknown, defaulting to 1000 [ 1084.118346][T22832] vxcan1 speed is unknown, defaulting to 1000 [ 1084.333658][T21006] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1084.372388][T21006] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1084.404801][T21006] usb 2-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 1084.428405][T21006] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.640911][ T7555] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 1084.714855][ T30] audit: type=1400 audit(2000001008.848:3371): avc: denied { write } for pid=22815 comm="syz.1.3795" name="mass_storage.0" dev="configfs" ino=61994 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1084.860094][T22842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1084.870839][ T7555] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 1085.012653][T22844] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1085.019198][T22844] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1085.042724][T22844] vhci_hcd vhci_hcd.0: Device attached [ 1085.388648][ T7555] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 1085.697631][T21006] ttusb_dec_send_command: command bulk message failed: error -110 [ 1085.821607][T22845] vhci_hcd: connection reset by peer [ 1086.328615][ T7555] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 1086.336741][T17973] vhci_hcd vhci_hcd.3: stop threads [ 1086.338568][ T7555] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 1086.345015][T21006] ttusb-dec 2-1:1.0: probe with driver ttusb-dec failed with error -110 [ 1086.353943][ T7555] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 64 [ 1086.353972][ T7555] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 1086.355496][ T7555] usb 7-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 1086.391867][ T7555] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1086.403261][ T7555] usb 7-1: Product: syz [ 1086.405849][T22842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1086.407582][ T7555] usb 7-1: Manufacturer: syz [ 1086.435550][T22837] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1086.440320][T17973] vhci_hcd vhci_hcd.3: release socket [ 1086.453836][T22837] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1086.469969][T22837] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1086.486022][T22837] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1086.506813][T17973] vhci_hcd vhci_hcd.3: disconnect device [ 1086.531012][T22837] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1086.566592][T22837] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1086.596274][ T7555] usb 7-1: USB2VGA dongle found at address 54 [ 1086.625039][ T7555] usb 7-1: Allocated 8 output buffers [ 1086.662934][ T7555] usb 7-1: Failed to early initialize device [ 1086.816722][T22855] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3806'. [ 1086.825997][T22855] unsupported nlmsg_type 40 [ 1086.887178][T22837] usb 7-1: Failed to initialize device [ 1086.914306][T22837] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3801'. [ 1086.933457][ T7555] usb 7-1: USB disconnect, device number 54 [ 1087.144557][ T30] audit: type=1400 audit(2000001011.130:3372): avc: denied { write } for pid=22860 comm="syz.5.3808" name="functions" dev="configfs" ino=10077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1087.170193][ T30] audit: type=1400 audit(2000001011.130:3373): avc: denied { write } for pid=22860 comm="syz.5.3808" name="functions" dev="configfs" ino=10077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1087.253626][T22862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3807'. [ 1087.287647][T22862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3807'. [ 1087.300660][T22862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3807'. [ 1087.315287][ T6045] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1087.337509][ T6045] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1087.358086][ T6045] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1087.377045][ T6045] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1087.952705][T22870] 0: reclassify loop, rule prio 0, protocol 03 [ 1088.037646][ T30] audit: type=1400 audit(2000001011.954:3374): avc: denied { write } for pid=22872 comm="syz.3.3813" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1088.041146][T21006] usb 2-1: USB disconnect, device number 62 [ 1088.062943][T22873] random: crng reseeded on system resumption [ 1088.285365][ T7565] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 1088.628248][ T7570] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1088.742582][ T7565] usb 6-1: Using ep0 maxpacket: 16 [ 1089.383607][T22884] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 1089.390163][T22884] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1089.399526][T22884] vhci_hcd vhci_hcd.0: Device attached [ 1089.830477][T21006] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 1090.200992][T22885] vhci_hcd: connection reset by peer [ 1090.224910][T19794] vhci_hcd vhci_hcd.6: stop threads [ 1090.285469][T19794] vhci_hcd vhci_hcd.6: release socket [ 1090.327329][T19794] vhci_hcd vhci_hcd.6: disconnect device [ 1090.917969][T22900] CIFS mount error: No usable UNC path provided in device string! [ 1090.917969][T22900] [ 1090.940732][T22900] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1090.971118][T22904] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=22904 comm=syz.3.3820 [ 1091.049749][T22908] netlink: 256 bytes leftover after parsing attributes in process `syz.7.3823'. [ 1091.198564][ T7565] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1091.221889][ T7565] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1091.231713][ T7565] usb 6-1: can't read configurations, error -71 [ 1091.250888][ T7570] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1091.258145][ T7560] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1091.327093][ T30] audit: type=1400 audit(2000001015.041:3375): avc: denied { sys_admin } for pid=22915 comm="syz.7.3826" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1091.446681][ T7560] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 1091.450203][ T7570] usb 2-1: Using ep0 maxpacket: 32 [ 1091.473051][ T7560] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 1091.476377][ T7570] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1091.499697][ T7560] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 1091.512979][ T7570] usb 2-1: config 0 has no interface number 0 [ 1091.515288][ T7560] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 1091.533536][ T7560] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 64 [ 1091.547678][ T7570] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1091.548111][ T7560] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 1091.567962][ T7570] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.567994][ T7570] usb 2-1: Product: syz [ 1091.568010][ T7570] usb 2-1: Manufacturer: syz [ 1091.568024][ T7570] usb 2-1: SerialNumber: syz [ 1091.582294][ T7560] usb 7-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 1091.602726][ T7560] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1091.603531][T22919] netlink: zone id is out of range [ 1091.612851][ T7560] usb 7-1: Product: syz [ 1091.621280][ T30] audit: type=1400 audit(2000001015.293:3376): avc: denied { accept } for pid=22918 comm="syz.7.3827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1091.626661][ T7570] usb 2-1: config 0 descriptor?? [ 1091.647895][ T7560] usb 7-1: Manufacturer: syz [ 1091.652926][T22919] netlink: zone id is out of range [ 1091.661462][T22919] netlink: zone id is out of range [ 1091.672064][T22919] netlink: zone id is out of range [ 1091.684949][T22919] netlink: zone id is out of range [ 1091.692707][ T7570] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1091.706327][T22919] netlink: zone id is out of range [ 1091.717045][T22919] netlink: zone id is out of range [ 1091.727732][T22919] netlink: zone id is out of range [ 1091.738393][T22919] netlink: zone id is out of range [ 1091.752860][T22903] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1091.760120][T22903] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1091.767342][T22903] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1091.797985][T22903] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1091.805236][T22903] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1091.812449][T22903] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1091.823068][T22895] ceph: No mds server is up or the cluster is laggy [ 1091.866093][ T7560] usb 7-1: USB2VGA dongle found at address 55 [ 1091.905105][ T7560] usb 7-1: Allocated 8 output buffers [ 1091.990565][ T7570] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1099.757337][ T7570] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1099.961281][T21006] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 1099.971953][ T7560] usb 7-1: Failed to early initialize device [ 1099.985514][ T7560] usb 7-1: USB disconnect, device number 55 [ 1100.150967][T22933] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 1100.157504][T22933] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1100.166216][T22933] vhci_hcd vhci_hcd.0: Device attached [ 1100.554587][T21006] usb 45-1: device descriptor read/64, error -110 [ 1100.615141][T22936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1100.742748][T22937] vhci_hcd: connection closed [ 1100.750244][ T6045] vhci_hcd vhci_hcd.6: stop threads [ 1100.763360][ T6045] vhci_hcd vhci_hcd.6: release socket [ 1100.771382][ T6045] vhci_hcd vhci_hcd.6: disconnect device [ 1100.811084][T21006] usb 45-1: new low-speed USB device number 3 using vhci_hcd [ 1100.819139][T21006] usb 45-1: enqueue for inactive port 0 [ 1100.896356][T21006] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 1101.307259][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1101.318944][ T7570] usb 2-1: USB disconnect, device number 63 [ 1101.336061][ T7570] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1101.481397][ T7570] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1101.595995][ T30] audit: type=1804 audit(2000001280.644:3377): pid=22952 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.7.3834" name="bus" dev="ramfs" ino=90529 res=1 errno=0 [ 1101.620172][ T7570] quatech2 2-1:0.51: device disconnected [ 1101.649102][T22950] bridge0: port 3(vlan2) entered blocking state [ 1101.678494][T22950] bridge0: port 3(vlan2) entered disabled state [ 1101.716282][T22950] vlan2: entered allmulticast mode [ 1101.862268][T12535] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 1101.887258][T22950] bridge0: entered allmulticast mode [ 1102.110257][T22950] vlan2: left allmulticast mode [ 1102.120394][T22968] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3839'. [ 1102.420871][T22950] bridge0: left allmulticast mode [ 1103.169194][T22977] netlink: 'syz.5.3841': attribute type 13 has an invalid length. [ 1103.178230][T22977] netlink: 'syz.5.3841': attribute type 17 has an invalid length. [ 1103.242362][T22977] net_ratelimit: 1 callbacks suppressed [ 1103.242393][T22977] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 1104.038364][T22998] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1104.044916][T22998] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1104.054626][T22998] vhci_hcd vhci_hcd.0: Device attached [ 1104.172884][ T30] audit: type=1400 audit(2000001282.862:3378): avc: denied { mounton } for pid=22990 comm="syz.6.3845" path="/syzcgroup/net/syz6/cgroup.procs" dev="cgroup" ino=413 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 1104.397257][T21006] usb 43-1: new low-speed USB device number 8 using vhci_hcd [ 1104.820940][T22999] vhci_hcd: connection reset by peer [ 1105.231178][T22946] vhci_hcd vhci_hcd.5: stop threads [ 1105.237058][T22946] vhci_hcd vhci_hcd.5: release socket [ 1105.242684][T22946] vhci_hcd vhci_hcd.5: disconnect device [ 1105.736556][T23009] netlink: 'syz.3.3848': attribute type 1 has an invalid length. [ 1105.771679][T23009] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1105.783220][T23009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3848'. [ 1105.797882][T23009] gretap1: entered promiscuous mode [ 1106.368273][ T30] audit: type=1400 audit(2000001285.109:3379): avc: denied { write } for pid=22991 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1106.418870][T23033] FAULT_INJECTION: forcing a failure. [ 1106.418870][T23033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1106.504264][T23033] CPU: 0 UID: 0 PID: 23033 Comm: syz.7.3853 Tainted: G L syzkaller #0 PREEMPT(full) [ 1106.504296][T23033] Tainted: [L]=SOFTLOCKUP [ 1106.504302][T23033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1106.504312][T23033] Call Trace: [ 1106.504319][T23033] [ 1106.504326][T23033] dump_stack_lvl+0x100/0x190 [ 1106.504353][T23033] should_fail_ex.cold+0x5/0xa [ 1106.504377][T23033] _copy_from_user+0x2e/0xd0 [ 1106.504403][T23033] restore_sigcontext+0xcd/0x6a0 [ 1106.504425][T23033] ? __pfx_restore_sigcontext+0x10/0x10 [ 1106.504463][T23033] ? __pfx_restore_altstack+0x10/0x10 [ 1106.504483][T23033] ? _raw_spin_unlock_irq+0x23/0x50 [ 1106.504502][T23033] ? lockdep_hardirqs_on+0x78/0x100 [ 1106.504531][T23033] __do_sys_rt_sigreturn+0x229/0x2c0 [ 1106.504553][T23033] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 1106.504581][T23033] do_syscall_64+0x115/0x870 [ 1106.504601][T23033] ? clear_bhb_loop+0x40/0x90 [ 1106.504622][T23033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1106.504640][T23033] RIP: 0033:0x7fe64b53f399 [ 1106.504655][T23033] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 1106.504671][T23033] RSP: 002b:00007fe64c445300 EFLAGS: 00000206 ORIG_RAX: 000000000000000f [ 1106.504688][T23033] RAX: ffffffffffffffda RBX: 00007fe64c4466c0 RCX: 00007fe64b53f399 [ 1106.504700][T23033] RDX: 00007fe64c445300 RSI: 00007fe64c445430 RDI: 0000000000000021 [ 1106.504711][T23033] RBP: 00007fe64c446090 R08: 0000000000000000 R09: 0000000000000000 [ 1106.504721][T23033] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 1106.504731][T23033] R13: 00007fe64b826038 R14: 00007fe64b825fa0 R15: 00007fff0223d0d8 [ 1106.504755][T23033] [ 1106.736777][ T30] audit: type=1400 audit(2000001285.408:3380): avc: denied { write } for pid=23038 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1107.119996][ T7568] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1107.340257][ T7568] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1107.396084][ T7568] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1107.485392][ T7568] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1107.574489][ T7570] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 1107.589601][ T7568] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1107.643196][ T7568] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.654254][ T30] audit: type=1400 audit(2000001286.297:3381): avc: denied { write } for pid=23044 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1107.704538][ T7568] usb 2-1: Product: syz [ 1107.714323][ T7568] usb 2-1: Manufacturer: syz [ 1107.725767][ T7568] usb 2-1: SerialNumber: syz [ 1107.755389][ T7568] cdc_mbim 2-1:1.0: MBIM functional descriptor missing [ 1107.777201][ T7568] cdc_mbim 2-1:1.0: bind() failure [ 1107.787771][ T30] audit: type=1400 audit(2000001286.400:3382): avc: denied { write } for pid=23062 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1107.846255][ T7570] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 1107.865229][ T7570] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1107.901308][ T7570] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1107.925461][ T30] audit: type=1400 audit(2000001286.569:3383): avc: denied { create } for pid=23055 comm="syz.7.3857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1107.929789][ T7570] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1108.025048][T23037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3854'. [ 1108.092979][ T7570] usb 4-1: Manufacturer: syz [ 1108.119537][ T7570] usb 4-1: config 0 descriptor?? [ 1108.177404][T23037] hsr_slave_1 (unregistering): left promiscuous mode [ 1108.280660][ T7568] usb 2-1: USB disconnect, device number 64 [ 1108.332262][ T7570] rc_core: IR keymap rc-hauppauge not found [ 1108.346653][ T7570] Registered IR keymap rc-empty [ 1108.392862][ T7570] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1108.407146][T23050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1108.445334][T23050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1108.472550][ T7570] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input66 [ 1108.663470][ T30] audit: type=1400 audit(2000001287.242:3384): avc: denied { write } for pid=23069 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1108.790631][ T30] audit: type=1400 audit(2000001287.336:3385): avc: denied { write } for pid=23090 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1108.847913][ C1] igorplugusb 4-1:0.0: receive overflow, at least 21 lost [ 1108.855566][T23084] rc rc0: two consecutive events of type pulse [ 1109.071621][ T7568] usb 4-1: USB disconnect, device number 34 [ 1109.237355][T23101] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3865'. [ 1109.294055][T23101] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23101 comm=syz.5.3865 [ 1109.406436][T23103] --map-set only usable from mangle table [ 1109.803672][T23112] netlink: 'syz.5.3868': attribute type 2 has an invalid length. [ 1109.813693][T23112] netlink: 'syz.5.3868': attribute type 8 has an invalid length. [ 1109.823579][T23112] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3868'. [ 1109.842553][T23112] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3868'. [ 1109.851650][T23112] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3868'. [ 1109.933654][T21006] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1110.363467][ T7568] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 1110.421381][ T7560] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 1110.598084][ T7568] usb 7-1: Using ep0 maxpacket: 16 [ 1110.605089][ T7568] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1110.616572][ T7568] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1110.631680][ T7568] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1110.777214][ T7568] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1110.787090][ T7568] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.798726][ T7560] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1110.818331][ T7560] usb 2-1: not running at top speed; connect to a high speed hub [ 1110.818377][ T7568] usb 7-1: config 0 descriptor?? [ 1111.553322][ T7560] usb 2-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 1111.564878][ T7560] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.574954][ T7560] usb 2-1: Product: syz [ 1111.579960][ T7560] usb 2-1: Manufacturer: syz [ 1111.588188][ T7560] usb 2-1: SerialNumber: syz [ 1111.742418][T23135] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3875'. [ 1111.778360][T23132] input: syz0 as /devices/virtual/input/input67 [ 1111.863263][ T7560] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1111.893138][ T7560] usb 2-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 1111.902892][ T7560] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1111.977117][ T7560] usb 2-1: USB disconnect, device number 65 [ 1112.056290][T21790] udevd[21790]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1112.301515][ T7568] usbhid 7-1:0.0: can't add hid device: -71 [ 1112.316569][ T7568] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1112.329300][ T7568] usb 7-1: USB disconnect, device number 56 [ 1112.403195][ T5789] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1112.927419][ T5789] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1113.256576][ T5789] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1113.277967][T23150] ucma_write: process 287 (syz.1.3880) changed security contexts after opening file descriptor, this is not allowed. [ 1113.351183][ T5789] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1113.379287][ T31] INFO: task syz.9.3372:20763 blocked for more than 143 seconds. [ 1113.387570][ T31] Tainted: G L syzkaller #0 [ 1113.399512][ T5789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.434395][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1113.454042][ T5789] usb 4-1: Product: syz [ 1113.464655][ T31] task:syz.9.3372 state:D stack:28856 pid:20763 tgid:20759 ppid:12532 task_flags:0x400140 flags:0x00080002 [ 1113.480542][ T5789] usb 4-1: Manufacturer: syz [ 1113.493279][ T5789] usb 4-1: SerialNumber: syz [ 1113.501320][ T31] Call Trace: [ 1113.505950][ T31] [ 1113.509309][ T31] __schedule+0x125c/0x6730 [ 1113.529280][T23153] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1113.548699][ T31] ? __pfx___schedule+0x10/0x10 [ 1113.561042][ T31] ? find_held_lock+0x2b/0x80 [ 1113.580491][ T31] ? schedule+0x225/0x2c0 [ 1113.592712][ T31] schedule+0xdd/0x2c0 [ 1113.602982][ T31] cgroup_lock_and_drain_offline+0x383/0x800 [ 1113.625547][ T31] ? __pfx_cgroup_lock_and_drain_offline+0x10/0x10 [ 1113.654579][ T31] ? rcu_is_watching+0x12/0xc0 [ 1113.659496][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1113.674637][ T31] ? bpf_lsm_capable+0x9/0x10 [ 1113.685533][ T31] ? security_capable+0x80/0x260 [ 1113.697190][ T31] cgroup1_get_tree+0xc2/0x1620 [ 1113.706923][ T31] ? bpf_lsm_capable+0x9/0x10 [ 1113.718684][ T31] ? security_capable+0x80/0x260 [ 1113.743919][ T31] vfs_get_tree+0x92/0x320 [ 1113.751380][T23139] ALSA: mixer_oss: invalid OSS volume '' [ 1113.764745][ T31] path_mount+0x7d0/0x23d0 [ 1113.841058][T23159] qnx4: unable to read the superblock [ 1114.260904][ T31] ? __pfx_path_mount+0x10/0x10 [ 1114.315494][ T31] ? lockdep_hardirqs_on+0x78/0x100 [ 1114.419588][ T31] ? putname+0xb1/0x110 [ 1114.490454][ T31] ? kmem_cache_free+0x127/0x6b0 [ 1114.582331][ T31] ? __x64_sys_mount+0x293/0x310 [ 1114.675124][ T31] __x64_sys_mount+0x293/0x310 [ 1114.757612][ T31] ? __pfx___x64_sys_mount+0x10/0x10 [ 1114.812794][ T31] do_syscall_64+0x115/0x870 [ 1114.881064][ T31] ? clear_bhb_loop+0x40/0x90 [ 1114.921894][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1115.004279][ T31] RIP: 0033:0x7f82cbf9e019 [ 1115.036734][ T31] RSP: 002b:00007f82ccdb2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1115.123005][ T31] RAX: ffffffffffffffda RBX: 00007f82cc225fa0 RCX: 00007f82cbf9e019 [ 1115.200742][ T31] RDX: 00002000000001c0 RSI: 0000200000000100 RDI: 0000000000000000 [ 1115.234460][ T31] RBP: 00007f82cc03500c R08: 0000200000000000 R09: 0000000000000000 [ 1115.266847][ T31] R10: 0000000002010042 R11: 0000000000000246 R12: 0000000000000000 [ 1115.274870][ T31] R13: 00007f82cc226038 R14: 00007f82cc225fa0 R15: 00007fff071fbe78 [ 1115.282855][ T31] [ 1115.342078][ T31] [ 1115.342078][ T31] Showing all locks held in the system: [ 1115.344007][ T5789] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1115.349812][ T31] 2 locks held by kworker/0:1/10: [ 1115.349828][ T31] #0: ffff88801bc0f140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 1115.367047][ T5789] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1115.376958][ T7560] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1115.381249][ T5789] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 1115.396381][ T5789] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 1115.400313][ T7560] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1115.406160][ T5789] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1115.423990][ T5789] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 1115.431871][ T5789] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 1115.443398][ T5789] usb 4-1: failed to enable PITCH for EP 0x82 [ 1115.456121][ T31] #1: ffffc900000f7d08 ((work_completion)(&m->mpeg_thread)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 1115.467643][ T31] 1 lock held by khungtaskd/31: [ 1115.532012][ T31] #0: ffffffff8ebe8200 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1115.542107][ T31] 2 locks held by getty/5359: [ 1115.546784][ T31] #0: ffff8880378a70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1115.556554][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 1115.566691][ T31] 6 locks held by kworker/1:7/5789: [ 1115.571888][ T31] 5 locks held by kworker/u8:26/11981: [ 1115.573284][ T5789] usb 4-1: USB disconnect, device number 35 [ 1115.577360][ T31] 3 locks held by syz.8.3444/21168: [ 1115.577374][ T31] #0: ffff88807a93b430 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1115.597472][ T31] #1: ffff888038042450 (sb_writers#10){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1115.606556][ T31] #2: ffff8880326e4080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1115.694573][ T31] 1 lock held by syz.8.3444/21171: [ 1115.699780][ T31] #0: ffff88807a93b430 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1115.708877][ T31] 5 locks held by syz.7.3881/23147: [ 1115.714070][ T31] #0: ffff888038759a58 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 1115.724608][ T31] #1: ffffffff907daf68 (minors_rwsem){++++}-{4:4}, at: hidraw_disconnect+0x3e/0x60 [ 1115.734031][ T31] #2: ffff8880b843b520 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 1115.813143][ T31] #3: ffffffff8ebe8200 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 1115.822675][ T31] #4: ffff88801bc3c618 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x10f/0x320 [ 1115.833112][ T31] 2 locks held by syz.7.3881/23149: [ 1115.838283][ T31] #0: ffff88807d90c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1115.848007][ T31] #1: ffff88807d90c128 (&tty->atomic_write_lock){+.+.}-{4:4}, at: file_tty_write.isra.0+0x24b/0x890 [ 1115.875732][ T31] 4 locks held by syz.7.3881/23151: [ 1115.881088][ T31] [ 1115.883464][ T31] ============================================= [ 1115.883464][ T31] [ 1115.893646][ T31] NMI backtrace for cpu 1 [ 1115.893661][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1115.893686][ T31] Tainted: [L]=SOFTLOCKUP [ 1115.893693][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1115.893703][ T31] Call Trace: [ 1115.893709][ T31] [ 1115.893717][ T31] dump_stack_lvl+0x100/0x190 [ 1115.893743][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1115.893768][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1115.893792][ T31] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 1115.893824][ T31] sys_info+0x141/0x190 [ 1115.893848][ T31] watchdog+0xcb1/0x1030 [ 1115.893875][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1115.893896][ T31] ? __pfx_watchdog+0x10/0x10 [ 1115.893917][ T31] ? __kthread_parkme+0x18c/0x230 [ 1115.893951][ T31] ? kthread+0x13a/0x450 [ 1115.893967][ T31] ? __pfx_watchdog+0x10/0x10 [ 1115.893985][ T31] kthread+0x370/0x450 [ 1115.894001][ T31] ? __pfx_kthread+0x10/0x10 [ 1115.894019][ T31] ret_from_fork+0x72b/0xd50 [ 1115.894045][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1115.894070][ T31] ? __switch_to+0x800/0x10f0 [ 1115.894088][ T31] ? __pfx_kthread+0x10/0x10 [ 1115.894107][ T31] ret_from_fork_asm+0x1a/0x30 [ 1115.894143][ T31] [ 1115.894149][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1116.030836][ C0] NMI backtrace for cpu 0 [ 1116.030854][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1116.030874][ C0] Tainted: [L]=SOFTLOCKUP [ 1116.030879][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1116.030887][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1116.030909][ C0] Code: 56 8b 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 df 0f 00 fb f4 3c 4a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1116.030923][ C0] RSP: 0018:ffffffff8e807e10 EFLAGS: 00000242 [ 1116.030935][ C0] RAX: 0000000004338aef RBX: ffffffff8e891480 RCX: ffffffff8bbbc2d5 [ 1116.030944][ C0] RDX: 0000000000000000 RSI: ffffffff8e1a80b8 RDI: ffffffff8c402680 [ 1116.030953][ C0] RBP: fffffbfff1d12290 R08: 0000000000000001 R09: ffffed101708678d [ 1116.030962][ C0] R10: ffff8880b8433c6b R11: 0000000000000000 R12: 0000000000000000 [ 1116.030971][ C0] R13: 0000000000000000 R14: 1ffffffff1d00fc6 R15: dffffc0000000000 [ 1116.030980][ C0] FS: 0000000000000000(0000) GS:ffff888123dd8000(0000) knlGS:0000000000000000 [ 1116.030993][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1116.031003][ C0] CR2: 0000001b2ffedff8 CR3: 0000000074bfc000 CR4: 00000000003526f0 [ 1116.031013][ C0] DR0: 0000000000000c45 DR1: 0000000000000000 DR2: 0000000000000000 [ 1116.031021][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1116.031030][ C0] Call Trace: [ 1116.031035][ C0] [ 1116.031040][ C0] default_idle+0x9/0x10 [ 1116.031057][ C0] default_idle_call+0x6c/0xb0 [ 1116.031075][ C0] do_idle+0x3a7/0x5b0 [ 1116.031095][ C0] ? __pfx_do_idle+0x10/0x10 [ 1116.031115][ C0] cpu_startup_entry+0x4f/0x60 [ 1116.031135][ C0] rest_init+0x251/0x260 [ 1116.031153][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1116.031174][ C0] start_kernel+0x48e/0x490 [ 1116.031193][ C0] x86_64_start_reservations+0x24/0x30 [ 1116.031213][ C0] x86_64_start_kernel+0x12b/0x130 [ 1116.031233][ C0] common_startup_64+0x13e/0x158 [ 1116.031259][ C0] [ 1116.274099][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1116.280959][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1116.291610][ T31] Tainted: [L]=SOFTLOCKUP [ 1116.295922][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1116.305954][ T31] Call Trace: [ 1116.309212][ T31] [ 1116.312120][ T31] dump_stack_lvl+0x100/0x190 [ 1116.316779][ T31] vpanic+0x552/0x970 [ 1116.320735][ T31] ? __pfx_vpanic+0x10/0x10 [ 1116.325224][ T31] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 1116.331399][ T31] panic+0xd1/0xe0 [ 1116.335119][ T31] ? __pfx_panic+0x10/0x10 [ 1116.339520][ T31] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 1116.345652][ T31] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 1116.351789][ T31] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 1116.357941][ T31] ? watchdog.cold+0x1ec/0x234 [ 1116.362678][ T31] ? watchdog+0xcc1/0x1030 [ 1116.367070][ T31] watchdog.cold+0x1fd/0x234 [ 1116.371643][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1116.377426][ T31] ? __pfx_watchdog+0x10/0x10 [ 1116.382091][ T31] ? __kthread_parkme+0x18c/0x230 [ 1116.387110][ T31] ? kthread+0x13a/0x450 [ 1116.391334][ T31] ? __pfx_watchdog+0x10/0x10 [ 1116.395993][ T31] kthread+0x370/0x450 [ 1116.400044][ T31] ? __pfx_kthread+0x10/0x10 [ 1116.404617][ T31] ret_from_fork+0x72b/0xd50 [ 1116.409194][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1116.414293][ T31] ? __switch_to+0x800/0x10f0 [ 1116.418950][ T31] ? __pfx_kthread+0x10/0x10 [ 1116.423522][ T31] ret_from_fork_asm+0x1a/0x30 [ 1116.428283][ T31] [ 1116.431417][ T31] Kernel Offset: disabled [ 1116.435729][ T31] Rebooting in 86400 seconds..