last executing test programs: 1m16.9057266s ago: executing program 3 (id=4): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1c) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000380)={0x3, [0x0, 0x0, 0x0]}) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x4, &(0x7f00002d6000/0x3000)=nil, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/webusb/landingPage\x00', 0x1, 0x0) write$FUSE_INIT(r1, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x401, 0x0, 0x76, 0x4, 0x40, 0xc6, 0x0, 0x0, 0x80, 0x401}}, 0x50) socket$inet_tcp(0x2, 0x1, 0x0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000001940)="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", 0x559, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000200)=@keyring={'key_or_keyring:', r4}) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000d00)="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", 0x559, r2) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./sys/kernel/tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/kernel/tracing/dynamic_events\x00', 0x2, 0x0) write(r5, &(0x7f0000000500)='e1my_eprob', 0xa) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f000023a000/0x3000)=nil, 0x3000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000349000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000080)=0x60000000000000, 0x9, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0185648, 0x0) r6 = syz_usb_connect(0x2, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(0xffffffffffffffff, 0x0, 0x0) 1m12.382882565s ago: executing program 3 (id=31): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = userfaultfd(0x80001) openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x6000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x48c}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x5b, &(0x7f0000000300)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a8004000f8ff070006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}, {&(0x7f0000000200)="7de0e437cad0ce6f88e9ea4d4e2806a38eb08c83fb4bdc2a75dce3d93f307319ded5473117c3dedb6518ce68f8f080004c2198cf5081dd897ed39a5f8318bed591aced253c467af4effd912b5d1138eeaddc03b616db9fd15c0a1f5e2c3e690808f60dca826adbee633968d1f107c0561a547b6cb0b75b9be4cce6075b489cc1938001deff48b99492f1f207ce93342bc02fd9f6d96f7df891a32c2ec46b327a4f54bcb8bf62ae5d31e32f0c4c52a0d3e8c261c670a501d0852222a52e27054f9a55fd33991e7a9ab2cf8a36cd4a336185"}]}, 0x40) 1m9.406180162s ago: executing program 1 (id=39): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000040)={0x1, 0x91a0, 0x2208, 0x0, 0xfffffffb, 0x6, "8ba833ab2f88be5c08b65119a91e59a5", 0x7, 0x8, 0x7, 0x7f, 0x7b, 0x0, 0x9}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c40000001900674c28bd700000000000fc000000000000000000000000000001fe88000000000000000000000000010100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="01000000000000000000000000000000000000000000000000000000000000000000000000000000000080a434e2115fd3d8f175eb00000000000000000000000000fcffffffffffffff000000000000000001000000000000000000000004000000fffffffffffffffffdff00000000000000000000000000000a00"], 0xc4}}, 0x4c050) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) r3 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) lseek(r3, 0xffffffffffffffcc, 0x3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480"], 0xb0}}, 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r5, &(0x7f0000002780)={0x2020}, 0x5ecfb203) socket$nl_netfilter(0x10, 0x3, 0xc) write(r3, &(0x7f0000000500)="3c3f3ea0db2d3603c5d209649c9b04c52d544f4d4f594f5f434f4e4649473d300a", 0x21) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, 0x0, 0x0) futex$unlock_pi_list32(&(0x7f0000000140)=0x1, 0x607, 0x3, &(0x7f0000000180), &(0x7f0000000340)=0x2, 0xac8) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) 1m8.634306847s ago: executing program 1 (id=42): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) madvise(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x12) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$sock_int(r2, 0x1, 0x23, &(0x7f0000000300)=0x20, 0x4) recvmmsg(r2, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x40002100, 0x0) write$binfmt_misc(r2, &(0x7f0000000300), 0x6) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x40040, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000080), 0x10) connect$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x0, @hyper=0x300}, 0x10) write(r4, &(0x7f0000000000)='7', 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f00000008c0)=[@in6={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x4}], 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x2, 0x3}}, 0x20) set_mempolicy(0x8000, &(0x7f0000000000)=0x4000000ff9, 0x7f) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'sit0\x00'}) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) syz_usb_connect(0x3, 0x35, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003d55fc8089904a489cd4f010203010902230001020030050904e88001ffa57350082302af1a0201000905055a4d0f4cc860bc3099ab164907979703b180d816f5da5e0cc74a656c87f271c3a81fdde5b0d20222d534f337ea44c6687e03e4329b881681969eae7e76a54b0adb58c4ac75bd2fcd3d8941490c8d2acba464beea07075051844ccc34a8"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0xe8, 0x403, 0x89, 0x7fffffffffffffff, 0x0, 0xffffffffffffffff}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$XFS_IOC_SWAPEXT(r7, 0xc0c0586d, &(0x7f0000000000)={0x0, r7, r7, 0x80000ffffffff, 0x9, '\x00', {0x10, 0x5, 0x7, 0x8, 0x1000, 0x6, 0x3, 0xff, {0x4, 0x7}, {0xa, 0xfffffeff}, {0x3, 0x9}, 0x2, 0x6, 0x7fff, 0xe, 0x2, 0x7, 0x5, 0xb, 0x4, 0x1, '\x00', 0x24, 0x7, 0x8001, 0x78}}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r5) 1m7.044763751s ago: executing program 1 (id=51): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x6, 0xfffffffffffffffe, 0x91}) 1m5.964675372s ago: executing program 1 (id=52): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r1 = syz_usbip_server_init(0x3) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000440)="9a", 0x1) r2 = fanotify_init(0x200, 0x0) mount$afs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB='dyn']) fanotify_mark(r2, 0x1, 0x40000020, r0, &(0x7f00000000c0)='./file0\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000001c0)=0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) syz_usb_connect$uac3(0x3, 0x106, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x499, 0x100d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf4, 0x3, 0x1, 0xb9, 0x20, 0xdd, {0x8, 0xb, 0x2, 0x0, 0x1, 0x7, 0x30, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x46, 0x10001}, [@source_unit={0xc, 0x24, 0xb, 0x6, 0x2, 0x2f98, 0x9, 0x2}, @output_terminal={0x13, 0x24, 0x3, 0x6, 0x302, 0x2, 0x5, 0x1, 0xc, 0x1, 0x1, 0x8}, @multiply_unit={0xb, 0x24, 0xd, 0xa, 0x5, 0x7, 0x2}, @cluster_info_segment={0x6, 0x20, 0x0, 0xaf, 0x2}, @source_unit={0xc, 0x24, 0xb, 0x8, 0x0, 0x7f, 0x0, 0x7ff}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x3, 0x1, 0x4, 0x2, 0x7, 0xd, 0x0, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x9, 0x7, 0x1, {0xa, 0x25, 0x25, 0xa, 0x9, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x5, 0x3d440, 0x401, 0x1001, 0x0, 0x1, 0x7, 0x1}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0x4, 0x0, 0x9, 0x1}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x8, 0x6, 0x8, 0x10}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2, 0xff, 0x5, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x2, 0x5, 0x0, {0xa, 0x25, 0x25, 0x3, 0x1, 0x200}}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x250, 0x1, 0x2, 0xfa, 0x8, 0x6}, 0xf, &(0x7f0000000580)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0xff, 0x20, 0x3}]}, 0x2, [{0xf, &(0x7f00000005c0)=@string={0xf, 0x3, "b710e682693de208c3591d1c04"}}, {0x59, &(0x7f0000000600)=@string={0x59, 0x3, "35b3dab0a96ba06e9599732468dbf424a9a8259acfe7ee1b532233e218276343394323e0362b62fa6715ce411c10e16f3e5f4575b6efe32ce343f30066e57d3e5df4d59fa6df2889883ef5e70b7197c13d889a4317217a"}}]}) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) socket(0x1, 0x803, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r3, &(0x7f00000003c0)='=|', 0x2, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0x800}], 0x1, 0x1, 0x0) 1m2.281652878s ago: executing program 1 (id=63): r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x10001, 0x202000) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES64=r0], 0x50) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r2, &(0x7f0000000500)='p:s/p ./file0:0', 0xf) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x3c, 0x0, 0x8, 0x105, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1e000000}]}]}, 0x3c}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000680)={0x0, 0x4}, 0x8) sendmmsg$inet6(r3, &(0x7f0000001ac0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x2e1, @private1, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000080)="f8", 0x1}], 0x1}}], 0x1, 0x8000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000380), 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001110040001400020010000c000900090073797a3000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) lstat(&(0x7f0000000380)='./cgroup\x00', &(0x7f0000000540)) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x0, 0xfff, 0xf, 0x9}, 0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x48, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0x7ff, @mcast2, 0x5}, @in6={0xa, 0x4e24, 0x8, @mcast2, 0x7}, @in={0x2, 0x4e21, @remote}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000180)={r5, 0x1ff}, 0x8) 1m1.501129168s ago: executing program 1 (id=67): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, 0x0, 0x10000, 0x0) ioctl$KDGKBENT(r0, 0x4b46, 0x0) name_to_handle_at(r0, &(0x7f00000002c0)='./mnt\x00', &(0x7f0000000340)=@FILEID_BTRFS_WITHOUT_PARENT={0x28, 0x4e, {0xee2, 0x2, 0x9, 0x3, 0x40, 0x400}}, &(0x7f0000000380), 0x1600) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800"], 0x0, 0x3c}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) preadv(r2, &(0x7f0000000280)=[{&(0x7f0000000240)=""/33, 0x21}], 0x1, 0xd, 0xf440) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) 1m1.292027389s ago: executing program 32 (id=67): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, 0x0, 0x10000, 0x0) ioctl$KDGKBENT(r0, 0x4b46, 0x0) name_to_handle_at(r0, &(0x7f00000002c0)='./mnt\x00', &(0x7f0000000340)=@FILEID_BTRFS_WITHOUT_PARENT={0x28, 0x4e, {0xee2, 0x2, 0x9, 0x3, 0x40, 0x400}}, &(0x7f0000000380), 0x1600) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800"], 0x0, 0x3c}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) preadv(r2, &(0x7f0000000280)=[{&(0x7f0000000240)=""/33, 0x21}], 0x1, 0xd, 0xf440) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) 56.147267909s ago: executing program 33 (id=31): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = userfaultfd(0x80001) openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x6000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x48c}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x5b, &(0x7f0000000300)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a8004000f8ff070006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}, {&(0x7f0000000200)="7de0e437cad0ce6f88e9ea4d4e2806a38eb08c83fb4bdc2a75dce3d93f307319ded5473117c3dedb6518ce68f8f080004c2198cf5081dd897ed39a5f8318bed591aced253c467af4effd912b5d1138eeaddc03b616db9fd15c0a1f5e2c3e690808f60dca826adbee633968d1f107c0561a547b6cb0b75b9be4cce6075b489cc1938001deff48b99492f1f207ce93342bc02fd9f6d96f7df891a32c2ec46b327a4f54bcb8bf62ae5d31e32f0c4c52a0d3e8c261c670a501d0852222a52e27054f9a55fd33991e7a9ab2cf8a36cd4a336185"}]}, 0x40) 25.074550373s ago: executing program 6 (id=176): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x4e, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/meminfo\x00', 0x0, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x100, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000500)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x200000000000000) 24.848722578s ago: executing program 6 (id=177): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400c1001000010000000000000000000300000a540000000c0a050000000000000000000a0000060900020073097a310000000008000440000000012c000380280000800400018020000b801c0001800b0001006f626a72656600000c0002800800034000000000140000001100010000000000000000000100000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x14, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x2004c180) r2 = accept$alg(r0, 0x0, 0x0) accept4(r2, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r6 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r5) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r6}, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x10003, 0x2, 0x0, 0x1000, &(0x7f000099d000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="c4c255ae6fc726f30f1eff0f21530f0fd99e66bad004ec9ae8a6000059006666660fc68fff000000fb0f20c035000004000f22c0640fc758007000", 0x3b}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r8, 0x0, 0x4, &(0x7f0000000080)="441f0803000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) ioctl$KVM_TDX_INIT_MEM_REGION(r4, 0xc008aeba, &(0x7f00000007c0)={0x3, 0x0, &(0x7f0000000780)={&(0x7f0000a09000/0x3000)=nil, 0xa000, 0x6}}) getsockopt$inet_opts(r8, 0x0, 0x4, 0x0, &(0x7f0000000840)) r9 = timerfd_create(0x8, 0xc0800) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="24000000190001002cbd7000000000000a0020000042"], 0x24}}, 0x4000050) write(r9, &(0x7f0000000000)="20f6d586e54e449ee12142688c731fbc79f23ce925", 0x15) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 22.386450555s ago: executing program 6 (id=189): syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fe857108480b0730644f010203010902120001000000000904"], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x19) ftruncate(r0, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lstat(0x0, 0x0) 18.655984926s ago: executing program 6 (id=199): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="ed5c0b787c69ec014c45cc04dbc0e943902c1415798e329da56dbc604df55463207be8e785a6911cf69b8c6a811f8cada106284deaf5dee2bf1a8a06e4057b108f0ed3880564167ce8b8d7f0419663c30dd8eefb12b0206f211a43175037480ac0e940d414615f7e8eebdc1a7ca4e72b80eeb4b67ea5397d1b0d3c29fbe64f29f141a9"], 0xe8}, 0x1, 0x0, 0x0, 0x90}, 0x8d0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a0000080480ff7f0905811765"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fcntl$setstatus(r0, 0x4, 0x800) read$char_usb(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000280)={0x6cd, 0x2, 0x7, 0x1}, 0x10) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x11, 0x72, 0x80000}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/pppol2tp\x00', 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000600)=[@text32={0x20, &(0x7f0000000100)="0f20e035000010000f22e0b8000000000f23d80f21f835c00000300f23f88fe820960585fd0000b30f01cb650fc7b7006000000f8e73360000670f20660f20d835080000000f22d80f01caf30f2215", 0x4f}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000862c779851ce73689d4b00000000000000010400000020000000050000000100000404000000010000000192444205000000180000003142583d11f597817d860200000408000000130000000200000000000000010000992331ac00200000000076616c00"], 0x0, 0x80}, 0x28) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000010003704000080000000000000000000", @ANYRES32=0x0, @ANYBLOB="c304050000000000200012800b0001006272693374a81ad9e1ccb788ef6a37646765c9793a5d598702cda9231736000010000280"], 0x40}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) 16.067985063s ago: executing program 6 (id=210): openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000900)=0x15) ioctl(r0, 0x404c4701, &(0x7f0000000a00)="01000000000000000000000001000000010000000a0000000000000040000000400000000100000001") ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000c00)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000c10)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000c20)=0x3f) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000c30)=0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000c40)=0x1c) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000c50)=0xf9) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) close(0xffffffffffffffff) socket(0x10, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000037000701f3fffffffedbd72501"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0x8050) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000037000701f2ffffffffdbd72504"], 0x14}, 0x1, 0x0, 0x66020000, 0x48011}, 0x40008090) syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000200)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x644, 0x800e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x10, 0xe0, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x4, 0xaf, 0x30, {0x7, 0x25, 0x1, 0x8, 0x0, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x10, 0x7f, 0x8, {0x7, 0x25, 0x1, 0x8, 0x3, 0x7fff}}}}}}}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x19, 0x0, 0x3, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x444}}, {0x0, 0x0}, {0x16, &(0x7f0000000400)=@string={0x16, 0x3, "03d3ebd8a9a588b01e83f1d2c1d78c5a37005464"}}]}) 15.685808956s ago: executing program 0 (id=212): r0 = fanotify_init(0x40, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000340)=""/175, 0xaf}], 0x1) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000100)=0x730) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040110700090001010203010902200001010080fa0904000002070102000705810200020007050202"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r3, 0x81, 0x0, 0x0) readv(r4, &(0x7f0000000c40)=[{&(0x7f00000008c0)=""/207, 0xcf}], 0x1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r5 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000002c0)='secret\x00\xa0\x95=K4\xe8\xad`W\xd1+\x18\x9a\x99\v\xfa,9\x15M\xee\xe7\xb7d\x9f\x1f\xd8\xa2\x89Y\xf0\xa2;b\x96TkG\x7fh\xd3p}\x19_Z>I\xd4/\xd4\x84\xca\xf7Y\xa1y\'Ujl$J\x1b9\xcf\xben\x93\xa1\xe7c\xed\xfd\xd8p\xea\xbc\x8d\"\xe3\xbaS\xba\xb7Jv\xbas\xd0\xb1\xdf\x17\xc5\x7f|\xc65\v>\xa8n\v\xbe\r\x13\x845\x18\x87\x87q\xe1\x9e{~\x9f\xf7\x1a\xe2L\x1a\xec\xd7\xe2\xd8\x85\x96\x1a\b7\xb7\x99\x1e`\xbaS\xae\xe16\xe6\x1f\xc7\xae\x11H;JK\xb4\xdex\xee\x9e2Z\xe7\x85YQ\\ }\xb3\xae7T\xb9\x83\x11\x06\xff\xac]\x023\xe8.tG\x10\xe5%\x1f\f\xdaD\x94\xe0\x9d\xda\xaf\xe1w\xc8R\x83\x84\xb1\xcc\xedu\f1c\xd4u\x8eH\xbd\x85\xf7\xb8\xcd<`z\xa0P\xeer\xec\xac\xb3\xf08\xe9>\x983d\x88\x19\x1a\x85\xbb\x88\xca0\xdf?k\xb9\xf3k\xb9m\xaf4\x9f\x14H}\x0e\xf3`X\xbf\x99\x98\xfa~g}y\xb1U\xa6\xaf\xf6C\a\xb7\x85):\xf4\xc7P\x81\xae2\xf7d\xfa\xd2}\x92\x83\x9c\xa2c\x1b\x91 +?+\xb7\xae^*b\xb1\x18\x86\x8a\x11\x06B\xa8\xfcmrhzA\xadS\xda\xd5a%Y\xe9\xfb\f\x9f!\xf5\v$\xd8,`At1\xc4\a\x13}\x0e\x88c\xb0\xfc,\xc3\x8a\x171\x13\x1eP84\xd8\x9a\x17\x18\x16\xf7\xe4\x9e\xf0\xf3\x9f2\xc2Q\x89\xd7\xcc\xe8\xac5\x12\xaa\f\x18}#\xb9\xd1/\xed\xdb\xc2R()\x87\x8a6\x05U\xaaS\xd11\x83k\xa6\xb8g\x01Ur{\xa0\x13\xc9O\xbc\xe5:!bv](\xa1\x1b\xe0\xda\xc712h\a\xd3\x85g\x17\v\x87\x8d\x0e\xf7\xf69h\xd1w3\x14Z\xa7\xa1\xf3[\xa5c\x80\xf7\xdc{\xf6\x9f=\x98\\\x88o\x7f\xaf=^\xb9\x9c\xf1\xea\x18\x9d\x1d6*\xe5\x96\x05\xeb>}8\x82\xa8<\xc0\x9b\xe3\xf5\x8fi\xc2\xbat\xf2pK4\xf0q\x11\xb18\x18M\b0\xa4q\xc5Soma:@S\xde\xe0Hu\v\xac\xd9\x9d\x7f\x91\x0eN\r\x80\xd5\xa2\x11\xc8,\x98t\xb7\x01F. \xd52\xdb\xce>\xb6[\xd1#A\x0f\x88\xc2Bn4\x83\xd9\xc8H\a\xc3\xb5\xb1\x7fjQ\xc8\xb6\x91\x1dC\x1b\x85K2H\xa9eh\xc6m', &(0x7f00000007c0)='//+9\xfdAQBv=K9e\xc7;M\x13\x9a-\r\xffS)@\xd1\xde[8?\xc7\xc8\x12\xd0;\xeaA\xee0l\xf9`c\xb9E\xcfv\x9a\x9e\x88\xa9F\xaf\xab\x98\xdcK\x1e\xb1\xdb\xd0\xf2):\xf1\xbdW\xad<\x17\xb7\xf1f]\xd4l?\xa5\xc2 nU\xab\xdc\xd0\xd6\xf6\xb9\x00\x00\x00\x00\x982\x17I\x04*n\xe6xM\xe36\xc4\b\x97\xb2$\xa9\x9a\x19\x05\xf6\x84Mz\xa6\x12n\xb3\xd1%\xa1%D\r^tT\x93\x8b\xc7*\xbe\x1b\x1b\x91\x82\x00\x00\x00\x00\x00\x00\xebo\xf5h\xef\xa1\xdd\xf3\x995\xa2Jl\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcdY\x96\xae\xc3Y\xea2\x92s\xe3Bb\x94\x15V\xb8F\x19=\xaf+\xa9<\xfeA\x91t\xd8\xa2\x8f4\xc7\xb9\x9d\xd6\xc6\x05\x00\x99\xb2\x8e;\x02\xed\xfcuW\xe1\x06\xf3 \x8d\xecy\t\x7f@\x1c!\xb1\x01\x00@Q:G<\xd3\xd7\xa8\xf4\x03m\xb6\xac\xe2\xa6c\x05\xfa\xdb`\x91L$\x8b2\x16\xf0\x8a=\x83\x85\xa0\xed\xcaX\xb4\xb0\xe8\xbf\x95n\xf8\xed>\x82Y\xab\x9b-|\xc7\x00\x00\x00\x00\x00\x00\x00\x00P\xf3\xaa\xa72\xf6\xf0\xe7M)\t\xc8\x82g\xaaR\x0e\x94\xb8b\x19 \f\xf81\xd5\x84\xd4\x17\x1c\x9e\x1a\x99\xf3M\xc0\xc6 \xad&\x03\xa1\xed\xa9\xd7\xe9o;\x1b\xaf\b\xdeU\xed\x04!\x813\xdeR\x92u\xcfi\x907$\xb6P\xf9\x90\xebK0\xce\xb2\xda:\xe3u=\xe8gw\xc6\xf9Y$\x90/3#\xe2\x99\x9d\f\xb0\x1b\x9c\xb8\x89H YE\xb5\xb7\xb4[3J\xf1g#\xab\xfe\'Q\xf6\x83\xa6\xab\xf9\xfb\xd8\x04us\xc7\xf8_\x8f\xd9,\x00\x8d\xcce>^\x98\x8f\xb4\xe6I\x1f\xc1\xfd-\xa6\x93j>\x1f\x0f\x01\x19\xcb\xdc?\xa3r\xa0\xcdv\x12\xb8\x8bB<\x9c\x86\xbe\xdcFN\x19\xa5\f!w\x18x\xad\xdfRQ\x1d\xc1\'\xd4\x16{\xd2\xadDR\xa6Y\xc8\xfe8\xdf\x88\x9c\x8f\x90\xff6{\xc2E;isd\xc9\xfb\xe6\v\xd7\xd6\xff\x115\xbb\x9c\x14\x83V\xe4\x9fd\xd7\x1b\x1a\n\xd8\xc1\xe5\x86\xc6\xfc\xba\xb3\xac\xfb\xb6\xcd\x1a\xbd\xcf\xbaA\xf1\xfe\x82\x88v\xd0\xb1#\x1d\xfed\xb3\xac\xd9\x85\xf6a\xffU&\x15\xb7\xc5\xc4\xe6\xc0\x85\xca,F\xa2\xb3\xa4\xfc\x85\xf0\xca\x8f\xb5\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 15.577388179s ago: executing program 6 (id=213): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x185202, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x458, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r5, 0xc00c6211, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7c, 0x10000, 0x8004, 0x4, 0x4}, 0x0, 0x0, 0x0, 0x0) bind$l2tp6(r4, &(0x7f0000000280)={0xa, 0x0, 0x1000, @local, 0xfffffffc}, 0x20) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc10c5541, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x13, r2, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) 12.357138689s ago: executing program 0 (id=220): mkdir(&(0x7f0000000000)='./dev\x00', 0x1fe) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x9, 0x80000) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x4, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/sda\x00', 0x1c5e42, 0xcb) write$P9_RUNLINKAT(r2, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 11.097442719s ago: executing program 0 (id=222): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0}, 0x50) 10.964252228s ago: executing program 0 (id=224): r0 = syz_open_dev$swradio(&(0x7f0000000540), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000580)={0x5, 0x5, 0x4000009, 0x100, 0x3ff00, 0x2, 0xc}) 10.728685797s ago: executing program 0 (id=226): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80000) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000140), 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r1, 0xc040583f, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x3, 0x2}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r3, 0x10) bind$inet(r3, 0x0, 0x0) fanotify_init(0x200, 0x0) r4 = syz_ublk_setup_io_uring(0x81d, &(0x7f0000000040)={0x0, 0x30b5, 0x100, 0x2, 0x373}, &(0x7f00000005c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = syz_genetlink_get_family_id$smc(&(0x7f0000000400), r10) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, r11, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400d5}, 0x4) r12 = dup(r10) syz_ublk_setup_queues(r12, r9, &(0x7f0000000180)={0x0, 0x1, 0x80, 0xffffffff, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb351, 0x400, 0x3, 0x12e, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x1f0, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587b, 0x40000, 0x2, 0x36b}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r8, '\x00', {0xfff9, 0x5e8, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x6, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) read$msr(r12, &(0x7f0000000600)=""/218, 0xda) r13 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMGET(r13, 0x5415, &(0x7f0000000100)) 7.904444915s ago: executing program 0 (id=229): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000040)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)={0x40, 0x40, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000d80)={0x34, &(0x7f0000000a80)=ANY=[@ANYBLOB="401605"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) r4 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$FAT_IOCTL_GET_VOLUME_ID(r4, 0x80047213, &(0x7f0000000000)) syz_usb_connect$uac2(0x5, 0x9f, &(0x7f0000000580)=ANY=[@ANYBLOB="12010003000000209904541040000102030109028d00030104007f080b0101010a20020904000000010120000924010700061500b20c24030500040a25007f008009040100000102200009040101010102200008240201e60304061024010505000400ecff04050000004409050109000206"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) r5 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x4002, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_usb_connect$uac2(0x2, 0xb7, &(0x7f0000000600)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x16, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa5, 0x3, 0x1, 0x52, 0x0, 0x5c, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x12}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x3ff, 0xc, 0x16, 0xda}, [@extension_unit={0xd, 0x24, 0x9, 0x4, 0x8, 0x6, "f9225ccd6907"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4000, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x4, 0x8, 0x3, {0x8, 0x25, 0x1, 0x1, 0x3, 0x0, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x6b}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x9, 0xff, 0x7, "679255c5473fc8"}, @as_header={0x10, 0x24, 0x1, 0x7, 0x9, 0x3, 0x1, 0x10, 0x6, 0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xbc, 0x0, 0x14, {0x8, 0x25, 0x1, 0x2, 0x30, 0x8, 0x4}}}}}}}}]}}, &(0x7f0000000c40)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x0, 0x5, 0x8, 0xc, 0x58, 0x5}, 0x157, &(0x7f0000000700)={0x5, 0xf, 0x157, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "2789cbe9c65d4684eafd244f7a561bba"}, @ssp_cap={0x1c, 0x10, 0xa, 0x80, 0x4, 0x6176, 0x0, 0x6, [0xff3f00, 0xc00f, 0xc000, 0xff3f00]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x9, 0x2, 0x5}, @generic={0xc3, 0x10, 0x3, "792c33510c03cd6a7775b7cd15ec6af414b3b1c6489485a45e9515702d1e25606c6ebee6aec3d7e0a47ce938c064718968ba72a0260ae3709a11dd810c69ac33141d5ba3fe6bb6cadaf0a132ecf95fd7c78463053a7cac9904ac384b9b51802ebb8c12f8a3715ebdf36306aafe9d8752ebd89b61c6735fc873315a116184c09b23663f479e0b658d42971dd2dd6853cb780230805802f41864db84222b0771b40273389c4276a361857bd72a239a83b8d2c42413c142d4f6e8870bf918f5f843"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0xf6, 0xf9, 0x8}, @generic={0x4b, 0x10, 0xb, "40cf834c772fdf4797e477ccae0805e3b5c99442a0163000c96ce7d9712d3c1154cb842919e960c21100e760b957606e8f2d0633ff7e87cab72edec49d664cf81ea3e826ec5d601a"}]}, 0x6, [{0x6c, &(0x7f0000000880)=@string={0x6c, 0x3, "48564059dc38489dfed80d682204f5eb51233991b888804ec38d6155d6fe999c166534beac930a068615fffe7e48aee76cc9901f4f829bfae54452518fe1fc97299429b3b55ed7c0f32eed3b3aed9451270f0ba83cb930bb058d3581165f213b90121b5b8b5622775a0d"}}, {0xa3, &(0x7f0000000900)=@string={0xa3, 0x3, "a5a44f944f9fcc344e0e45e59a6b640a5bf096a8ee6bde4043473772d11c4ab8d136eb947cd5fe4e407ec42c10df109774d479858e9ac34c633b0b7a16637fbad936548d3699499a550e22ebf183bc821242f8f083da89bd57ce3599451b766cd62a812d64c783035492d843e518735818bd0f08e0362220f97891030f5ec69cc1f720e4e77547f4eb94973e1ec5fb96aa381c89dfe0bb140569fb9b2ec542b74f"}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x1001}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x4001}}, {0xf6, &(0x7f0000000a40)=@string={0xf6, 0x3, "fbca7046235264103cb994a6e30266068edbec8cc27f74fb9ac8b1c5c7dd348bca5ea58f7ca1c05b51b211373ea4d378ce1112eb76c3494a5ce960db61f777c1c221e9294923ddee19ab912414cbd7066a02bc8e784f824e22915a1b4c00033fa8fbcc9a3b1db47dc9d1f8930ed56918e3faae986a7bc79632100e33e2bd179aaa1cee8e37820fdca22b6c577e1bfc011710a261772ba02fb30daa96bc82aef29b2f1158c5500c091195248ec5332673c774c7aefe244110a1f9bd58ddb941cc1208385ee079fc97db5a0df8a14bad4dd153b0739ebb2106c11d3d2e177242d1699e516285b9937f2080abf342c1a9c178eb0c2c"}}, {0xd2, &(0x7f0000000b40)=@string={0xd2, 0x3, "df12fb744abd333fe7ccb9ff8cba7ac5562c045d5966b0f3c64f995f0db227223da1f4603a62d596bce11f8b41073fb2c9a776622e2a2da96e47cc7cda02da14beb39058f7ed29b828ee4b3413c12257c40b65d14c499afb54d971a997e66a4f6f8290beb0e23d3a29af50997fd6974e2110a3ca336dcdcfc74a4f353602f8cf1b61d98fa5fffd4196af0c702a6ff5846e4bfcc834e526a55259a8bef2879d122341cb79b9ab0f1c739cf983ef86ad26c91f2fed6126fe87eacfdd8c135e51efab0188982023bc1cb5e0a6ee416b7883"}}]}) 5.919963342s ago: executing program 2 (id=235): r0 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000540)='\x02A\xbb\xcc\xeb\x14\x16\xe8m\x14oSaW', 0x0) r2 = memfd_create(&(0x7f0000000780)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xe5,\x82\x03\x00\x19\x8d\xff\xff\xff\xff\xb4\x99\x00\x00\x00\x00\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xe7!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7c\x06\x00\x00\x00\x00\x00\x00\x001\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfc^\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11X\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xfc\xbc\xeb[^\xc7\xc0v/\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x1aZ\xd3\xcd\x0e\xba\\\xdb\xf0a\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xed\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x9f\x0f\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKl\xcc\xa4:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xc3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\x12\xc9\xc0\xd2\xf2\xd5\xd9\x9e\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xcb\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S\x00\x00\x00\x00\x00\x00\x00\x84\xc2\bn\xd9CG*2\x88\x8aBi\x85\x18\xff\xf9\x1f`\x9a\x13\x03\xc7\xb05\xc5&\xe7GEU\x12\xda\xc9\x8e{\x02\x1ah\xb7\xbc\xec\"\xa2[&\xde\xa7\x10V\x99\xa3\xb1\\K\x00\x1e\xe0\x14J?\xc2\xe5\xcea5\xce/!\x98\x7f\v\xab\xa7\x8c\xf6u/\xaf\xde0WRz\xb04O\x7f\x02S\x9as\xb3\x17\xe1Fr:\xbaI', 0x6) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x50) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000040)=0xdfe5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00000000c0)=0x2009, 0x4) sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@getqdisc={0x24, 0x26, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xb}, {0xa, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008061}, 0x4048000) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000016000b63d25a8064000000", 0xf}], 0x1}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bec9ff10cd0631016016af02030109021b00010000000009046b00016a93f00009058803", @ANYRESOCT], 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x13, 0x0, 0xff}}) ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40106f52, &(0x7f0000000200)={0x31, &(0x7f0000000080)=[{0x10, '\x00', @data=0x5, 0x6}, {0x2f, '\x00', @buffer={"c451ea6b65438b7f0f0312f9337312d969d50ce97c8757b68a73a94c64bc9424", 0x20}, 0x8000}, {0xd, '\x00', @buffer={"e218dcbc3630e64473f88acc1530a1f06747969346671c1e0491a8381cf77100", 0x20}}, {0x16, '\x00', @st={0x4, [{0x3, @svalue=0x4}, {0x1, @svalue}, {0x3, @uvalue=0x4}, {0x1, @svalue=0xfc}]}, 0xfffffffa}, {0x41, '\x00', @st={0x4, [{0x0, @uvalue=0x3}, {0x0, @uvalue=0x7f}, {0x1, @svalue=0x10000}, {0x1, @uvalue=0xd}]}, 0x8}]}) fallocate(r2, 0x0, 0xb, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) mbind(&(0x7f0000195000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000400)=0xfb, 0x8, 0x3) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x100000f, 0x13, r1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32=r0, @ANYBLOB="9f00000000000000000000000000000000000000da08763b7a5fedd886742d9cd58ee40f85296827f0c76df13f86c829536f76c39e1740aad5b8188bf780a146f1065441b39ae2e3674b23898462298902721ad3144f329b9315f2bfed8ac0ebdec47a6efd0148955c85ddde07ef62bbd4c928da495ab4a836273b3aa0675b52ed73a5ae7b8ba687ef456b4a8842574da787a53d927eba52edf19580037ed57115e045338314cffd617cecf77c2ef8bb98cb49641000"/192, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="01000000030000000100"/28], 0x50) 4.717814794s ago: executing program 4 (id=238): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) close(r2) write$binfmt_misc(r3, &(0x7f0000000140)='N', 0x1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000980)="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", 0x1e8}, {&(0x7f0000000f00)="44900001000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02", 0x3a}], 0x2}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)="3da39b2ad5defd21d90486407e56e26daf1a5c6f937e2b330e7f2a369d4e1d7d075b45ee8b8b533ce21787a34cc98008199ec62730423ed278abd4e2bb8877d253d1c697ecb90b33871b36094c4147ad2fee445105fc4e7c5c81085705792d8826b0ac7cd3b3a9cb56b879719d2f4eb8993d039207f46b2c6a38bbf20456", 0x7e}, {&(0x7f0000000780)="1d603f8414984774e404cec66360f9d4d4892eb91e3c91a2c4020ef536748012bc2f2f78eba95703840dad561da3bf32b3e6e4459419af41b845483434f66105e4192fe71b", 0x45}], 0x2}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) write(r0, &(0x7f0000001e00)="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", 0x2a8) ioctl$XFS_IOC_EXCHANGE_RANGE(r0, 0x40285881, 0x0) 4.47316649s ago: executing program 4 (id=239): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x4000000000003ed4, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) timer_getoverrun(r1) mmap$usbmon(&(0x7f0000008000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0xf000000) 4.322661017s ago: executing program 4 (id=240): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = memfd_create(&(0x7f0000000000)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZe8z\xb0\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x1) unshare(0x20000400) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r5) listen(r1, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r6, 0x2) close(r6) 3.538448979s ago: executing program 5 (id=241): socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) r2 = syz_io_uring_complete(0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f00000007c0)={'gretap0\x00', 0x0, 0x10, 0x8000, 0xea, 0x1, {{0x47, 0x4, 0x3, 0x25, 0x11c, 0x66, 0x0, 0xeb, 0x4, 0x0, @loopback, @empty, {[@cipso={0x86, 0x66, 0x0, [{0x2, 0x9, "f8f36df18bf2c5"}, {0x0, 0xb, "b47598be48078c70f3"}, {0x7, 0x7, "2bca750147"}, {0x1, 0xb, "20b302eb82125ec9c8"}, {0x0, 0x9, "cbd3dd643dc54a"}, {0x5d871402986e2655, 0xf, "b406b7acaf3cafcb3cb3cfbd52"}, {0x2, 0xa, "692bb67f5b8e4080"}, {0x1, 0xc, "f6d95a1898473582bdf7"}, {0x0, 0xc, "a8fe466dbcd4904d83a2"}]}, @timestamp_prespec={0x44, 0x44, 0x7, 0x3, 0x4, [{@dev={0xac, 0x14, 0x14, 0x1e}, 0x3}, {@private=0xa010101, 0x9}, {@multicast1, 0xf}, {@multicast2, 0x9}, {@broadcast, 0x2}, {@remote, 0xffff}, {@multicast1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xf4}]}, @noop, @generic={0x89, 0xd, "7652e5ef9ad4669c9c0d55"}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x2b, 0x9c, [@empty, @multicast1, @loopback, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @remote, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}, @timestamp_prespec={0x44, 0x1c, 0x17, 0x3, 0x0, [{@private=0xa010100, 0x9d}, {@multicast1, 0x3}, {@rand_addr=0x64010102, 0x7}]}, @noop, @noop]}}}}}) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000001c0)=0xc) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x38728a2, &(0x7f0000000140)={[{@uid={'uid', 0x3d, r5}}]}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffe0, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)=@newqdisc={0x24, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000780)={&(0x7f00000000c0), 0xc, &(0x7f0000000740)={&(0x7f0000000600)=@expire={0x134, 0x18, 0x400, 0x70bd27, 0x25dfdbfb, {{{@in6=@local, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0xba, 0xa, 0xa0, 0x0, 0x2c, r3, r5}, {@in6=@mcast1, 0x4d2, 0x2b}, @in6=@empty, {0x7fffffff, 0x9, 0x5f19, 0x6, 0x1, 0x50e, 0x3, 0x2}, {0x3, 0x8, 0x0, 0x21f8f105}, {0x4, 0x2, 0x6}, 0x70bd27, 0x3500, 0xa, 0x5, 0x8, 0x5}, 0xf}, [@policy_type={0xa}, @offload={0xc, 0x1c, {r7}}, @coaddr={0x14, 0xe, @in6=@private1}, @sa_dir={0x5, 0x21, 0x3}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0xc3a2}]}, 0x134}, 0x1, 0x0, 0x0, 0x4008000}, 0x20041000) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000100), 0x4) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000980)={0x2, @sliced={0xa, [0x5, 0x9, 0x7ff, 0x9dca, 0x1a, 0x5, 0x5, 0x9, 0x5, 0x0, 0x2, 0x1, 0x9, 0x7f, 0x1, 0xfffe, 0x101, 0x1, 0x0, 0xc, 0x8, 0x401, 0x5, 0x2, 0x8, 0x2, 0x9, 0x0, 0x23, 0x5, 0x8, 0x0, 0x1, 0x7, 0xa47, 0x5, 0x6, 0x5, 0x4, 0x1, 0x9, 0x0, 0xff, 0x55, 0x8, 0x9, 0x0, 0x10], 0x5f}}) 3.291472s ago: executing program 4 (id=242): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) r1 = syz_open_dev$mtd(&(0x7f0000000040), 0xffffffffffffffff, 0x101000) ioctl$MEMREADOOB(r1, 0xc0104d04, &(0x7f0000000180)={0xffffd6f3, 0xc4, &(0x7f0000000080)="1f07264699c8536cb16bfdf4696afc682c858871bf2a90ee201ff631cb02a1ecb43c889eec708c2406e9c5afddc8e3020f9e42b080e451f4f1e979c65c055850ba58944654bf1205cfa446cfeb189f4691b4172cef1a91030d77d9e1ca87cf358c5f768b46ff27744f369522f7cd14eee01973b938dc33b520d6a53549e1d41290d8908bfb227b864a15a1e8f8ea0d8b62bfbe852f808696c3c140d3f8bb71a1a4d8eb261e31cc82441a01556668c2ce8998390b325f226b39e6b0e168c540bd8cde54c7"}) r2 = socket$inet(0x2, 0x2, 0xf03d) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x39}}, {0x2, 0x4e24, @private=0xa010100}, {0x2, 0x7ff, @dev={0xac, 0x14, 0x14, 0x31}}, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000001c0)='pimreg\x00', 0x101, 0xfffffffffffffffa, 0xff}) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) sendmmsg(r2, &(0x7f00000006c0)=[{{&(0x7f00000002c0)=@ieee802154={0x24, @none={0x0, 0x2}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000340)="d98f375b70e9be8829095a66944d226d57fd91e236d7796eff6743364a201a784fc91fd0524e13c6645254eb88b9021747737105b465ab1f8a1c2a48b1cb8bb0cd52088e805b2ac571fbdd198c9ba3f510b66889939f6ee61593483dea404cfdb663b6c516ec2d51bef955b1552ef5ba7903b3b45a01945ac06232f4bca79a4c62149473d40874e4f8e6c144a282a8837ecf9e7eceda398de8aa58be2bc2d5ce38d213bf6513656b4b61fd7f84493851e1b617fabfa66ef14aa5c9cf1176b0952cce90319fed01cdff1f459bb07633ec89743f527b74f7673bf9", 0xda}, {&(0x7f0000000440)="89c21026fc4d070ff317326560239108ff6c79809c5a4eb4b9cc835df3db53652b81aef6b197701609ad67be751db3df9cc29244438b9f87f5722f4754994887b34353395a9e7e96725f185b6ff4673d34e6ca5517ac21dff191c34749a348dd7233c9734ccbc2bf0cf9f1744a2e2f1755125a9be5f14e1f347256b58b8de026047585bf97869e15f316f92d15babd8c21d56ff48377a5a53060e78a9b2c0ad22bd42a045ad7c64532921f55e2deb93fd14882454c2120d593c6f913796c570863c37c7c39403f22a7c65fac1976da0346c32b35a095e249fd4c719daa8468b86af919b9", 0xe4}, {&(0x7f0000000540)="869efb36cd332b452ed51a0eb4a0259eda6ae8d232acff5e986c7b485dd0a62f3e9b298a4270d889a36c40c834b04d4a118c10d41a94286d10500768b2398bb35411570424b9ddadc1934443cd0a330a660d1737166aa68dd0ff8c274838b1cae8beebe3a59bfccca45967a9cdb8d2c7f012fd77ca8789a66dc426087e92132283fd16b9e0191472fb5141418d1f43ce48e031a7bbbb785ff4b530ebead3416138ddbc9c600ff2212d4871cd82517abc758f611561704c05dea79924381353caf4b8f6c539de86b4c4d4421b9e765f8b2bf0521c", 0xd4}, {&(0x7f0000000640)="9085ca8216d44ddba27b005938f5f192f9f3ac59d332e4c3d4df908ddcf2f457611b4f44798eec66accf76", 0x2b}], 0x4}}], 0x1, 0x4000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x5, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff}, [@map_fd={0x18, 0x8}]}, &(0x7f0000000740)='syzkaller\x00', 0xcfe, 0x3a, &(0x7f0000000780)=""/58, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x1, r0, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x10001}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ac0)={r3, 0x0, 0xad, 0x2b, &(0x7f00000008c0)="bb6d7a9d7c0038f2248f59d7f647ef1cd96e57fbb748752f7673c856aa0d04f0f9587ad5719cab2720d0102fd4a8bd8555d78a39c472ef3be53532bb867c3e0edd276426f89eb66869381e9824e2c7666aaf42e697251dfbc59bfbd7ee570fc482d2b8fd6831186bb983d9c8f58abbf2adb2e382f0be38fc06910cdd2f5ed9a696fd2f056cd929ccf433a083683a4e9e78ba66b9364b67c94469e98e6d486259264bf905a4bc6c33593c711bd0", &(0x7f0000000980)=""/43, 0x9, 0x0, 0x70, 0x41, &(0x7f00000009c0)="1a312ab9afabe89506ba80cc17b0615b8f169fb9e855f9d0d5d533b7c43d80dc1137fc153de0390dc356ba9ec37f4c4ae542b7c9c8686a6997b4b8e44c972f9e3ef265d26ecadd5ef7015b29e2ad42efe02f8c35d93354a62c8b692f0de1bfcd42262ff566ef2d5e59c3663e5788de90", &(0x7f0000000a40)="5b86428db29fecc6fcd43d1a6a63fae7c1232c4c72440ffc454e60cdf0824f08b930d13f5d58235023b6683a2bd6ab3881fec9cb9e82dfcaa4f816830ff03c27d3", 0x6, 0x0, 0xa}, 0x50) ioctl$BTRFS_IOC_SPACE_INFO(r3, 0xc0109414, &(0x7f0000000b40)={0xc0a, 0x0, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$SNDRV_PCM_IOCTL_INFO(0xffffffffffffffff, 0x81204101, &(0x7f0000012c40)) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000012d80), 0x288002, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r4, 0xc0046d00, &(0x7f0000012dc0)=0x9) ioctl$VIDIOC_S_MODULATOR(r0, 0x40445637, &(0x7f0000012e00)={0x8001, "af7edb4c53334c45d412b2c0b6c1ad7854cc7a1f8d9f32bd3a56e3f572bef227", 0x20, 0x3ff, 0x2, 0x2, 0x4}) r5 = dup3(r1, r4, 0x80000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000012ec0), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(r5, &(0x7f0000012f80)={&(0x7f0000012e80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000012f40)={&(0x7f0000012f00)={0x28, r6, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4678, 0x78}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000090}, 0x11) write(r1, &(0x7f0000012fc0)="96d65a06c480672f32ba12e82aa4b13d67149f7df5983b1d142eaaa1bdf4e1717c4bad9a9ae171ce6caea9c5df6825725f74e86ac739fc98ecdf8d52465016936471b7feecced6095ae23fa84de54d12cb9465aff669961848807572c66732496b3551e2fcd8cf6540f5fa69cdcf9db068206c0fc50898731ad5c7f47f426df17676958286b1bab89d95801cbd872083f7f817aca8bbe0ef26d7e121e159e9d4d307024bed", 0xa5) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000013080), &(0x7f00000130c0)=0x4) ioctl$XFS_IOC_FSGROWFSRT(r0, 0x40105870, &(0x7f0000013100)={0x8, 0x2d88}) cachestat(r1, &(0x7f0000013140)={0x1ff, 0x3ff}, &(0x7f0000013180), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000132c0)={0x11, 0x4, &(0x7f00000131c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000013200)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000013240)={0x5, 0x2, 0x9, 0x4}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000013280)=[{0x2, 0x1, 0x8, 0x3}, {0x0, 0x4, 0xc, 0xc}], 0x10, 0xfffffffe}, 0x94) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) syz_usb_connect$cdc_ncm(0x5, 0x7c, &(0x7f0000013380)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6a, 0x2, 0x1, 0x3, 0x10, 0x40, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, 'eX\n'}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x8, 0xfff, 0x6, 0x3}, {0x6, 0x24, 0x1a, 0xfd94, 0xc}, [@acm={0x4, 0x24, 0x2, 0xa}, @dmm={0x7, 0x24, 0x14, 0xe, 0xffff}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x5, 0x54}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0xf9, 0xfa}}, {{0x9, 0x5, 0x3, 0x2, 0x53f4e1e07be06cde, 0xd3, 0x4d, 0x5}}}}}}}]}}, &(0x7f0000013600)={0xa, &(0x7f0000013400)={0xa, 0x6, 0xdc98d1f7c6d95b0d, 0x3a, 0x30, 0x1, 0xff, 0x10}, 0x113, &(0x7f0000013440)={0x5, 0xf, 0x113, 0x5, [@generic={0xde, 0x10, 0x0, "9354a8163a39d40f429d012052453271d8b5d53a248834e8ec184d0c3932c13750bde59ff054b73140b601a6247f21d9d8d8ecea4f8105decc6e2a63a7c5beb2be039ff9bdb9a040f982b1d9b9651868e1caf7db5f0be7d08c116c4f344a01599108a7850ca4e830a87f70673c8df9d7f2fb940dd2fcb9760a8f9c901a23c299ab22dd8409246cc11049a2324f590c2cee681f6e90428471fb9209954a75b426b03302f57badf097224cb1be7014ffa1f752ed7af1de34e60d27156ee2b1edccea0955be8462eae8cd2a0d9684f5a06fb51e7f131d4ef3d93fe5ab"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x7f, 0x8, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0xc, "9d6fdc5380a514c4498e69716b6b0d22"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x9, 0x8, 0x8001}, @wireless={0xb, 0x10, 0x1, 0x4, 0x14, 0x3, 0x6, 0x0, 0x1}]}, 0x2, [{0x4, &(0x7f0000013580)=@lang_id={0x4, 0x3, 0x1c01}}, {0x4, &(0x7f00000135c0)=@lang_id={0x4, 0x3, 0x3c0a}}]}) syz_usbip_server_init(0x1) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000013680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000136c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r7, &(0x7f00000137c0)={&(0x7f0000013640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000013780)={&(0x7f0000013700)={0x44, r8, 0x40, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xd2}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x6}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xce}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x44) sendmsg$NFT_BATCH(r5, &(0x7f0000018d80)={&(0x7f0000013800)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000018d40)={&(0x7f0000013840)={{0x14}, [@NFT_MSG_DELSETELEM={0x4db4, 0xe, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4d70, 0x3, 0x0, 0x1, [{0x744, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x37c, 0xb, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_OP={0x8}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x8}]}}}, {0x278, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x268, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_BITWISE_DATA={0x4c, 0x7, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_BITWISE_MASK={0x8c, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_BITWISE_OP={0x8}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_BITWISE_XOR={0x16c, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe, 0x1, "8eaa42eb9cdf3aad752a"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xe7, 0x1, "d604ab180cb6249c11e523061ad592fb5cc2266f3ef9986ac242558673c4903b9bc3d3e9fdfa2a7829e779c5770b1b9cdf38a75a3e7d1524e4c4ba5f6568d80261689b694529874d3f17ee80b6d98e32688e7fad217490ee53704c19d230836bd1d607b2d5ec6d95893dc8e1e8569cf1546f6afc30d16ed813561e7a87d2d368cccb5c5f79e6cac4f06a00407fc2f9f1636f84873dbbc328ac08807332f1422da4f3d79f86927d4e88b05cb590ef227af09e5a0327607162508a2c823a88342ce4a9d6291572c44ffbedb1632dcbf7d8b9c54da15787a78acd3e599acf10a552c03e9b"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}]}}}, {0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x10}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x10000}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x7f}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x17e59634}]}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x34, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}}, {0x34, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x3}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}]}}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}]}, @NFTA_SET_ELEM_KEY={0x3c4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x71, 0x1, "9169de9c4059aaf0a6375bdfe47c449ff952e688a4db79c944ae4c3035a24cf117146fed6a6ed5c7dfca5edcda188fa3e2a3fdd63e108e28f0a3b56ff89f08e6c8e51650c74802a86e1fc4fd26c93cf6248d3a3659d880ccfcbbaf806cd9ab67ddf0ed39f375e9d07ee85764a4"}, @NFTA_DATA_VALUE={0x71, 0x1, "4c4d84d32a549626c08652e3dde345a14ba2eed74dac45062a8e0f514e3008aa064bdfd334a741104a448f64237ff162ea8cde1059003d01778b8c90bd377c32d0af30406f4ca283985fa2cacf3693f29a9b7d4d54e4f5eaff9c985a1055b6f2df19b3b5ed92d5c8d8b8ee20fa"}, @NFTA_DATA_VALUE={0xe8, 0x1, "226d4e071ce1562ed8a854b443e03460ddc887cb8acfdf4f79108223e971c71abf684ffcb6c54040ee17f218a6995f6805b3711a6a4c221120387698d87805f2642925fa3f3c52b092eb4b1a3ccf5ecdbe5ff46105e61007fc397a0bb96f9b8e0b7bda53d18067d059ce346a3c9ef85115410209eed5a3788a7a925cb83f9b26413c269df18934029079cc3cb019241f757981e598d5dba653f2027d8481134c8763b8a3522e314641ad1d5568735ec771146af90768175c2611b17f8f3556c7e3c237bb54f6fe7348c082a5916df0f0f90862fa5c55c6ed250dafc92f20be9ca9658c93"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xbb, 0x1, "c216f6e95da16bfbdcaec1a91a4fec9b460aeb4ec3a8271236778a5db0b47cbf8c9a4afe5be0c49ad0360f62f16deb93552dc0a805080f3e98dcc7b2dd99200a0f3eea3712077df7a342bc785de8d352e71783cc78e45c1a14ef85eb73cd272c81f3a88e3b291a87f9e75443dfc173ed6b4a35960053c392a27477066d134ace3a2c099233a62fbb6170df342ff62e3253534b9eebb5e80dd693df7de73cc1cfaada26b16fdf85e3dac177f0ba5e00dba7cc15841d157d"}, @NFTA_DATA_VALUE={0xb6, 0x1, "54cb468917bd3e0517b3333751b2d24763800d4676d3fd2768b347c440abb19b62cdad073c1919c2da6b2f2f496dd8f83002992398f676ce78ff7f7d4f3fc36951b2cc03162137af8dd296cd59f4298574a6b512d36caddc3cbb1eb1c9419771f308dabc40096839fc250b34a3c5917a920baa9734eeff423b14247798bedbecc14d3b0c65b0e49277d02afe002bc368a2d961f9263003deac67e6fc56b4d6e2aa0ae573208e1ca5f1ea4f7e3e157f2baf20"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}]}, {0x94, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x83, 0x6, 0x1, 0x0, "13b97d6f7070c36024a663618804a55853425c898f39a72f99cf93099e28c92cf480a14ee1861187363413a679767ba44bbbabdab07add345727528c5cbe7b2b87786706916141f5c7bebfab30ca5b2838ac67344df6efbe3147c0a6ef379c29e3dbd3085df7eba7fc7bed48f3eed59c599b2d1b8469ce58064fce15442dc7"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}]}, {0xd0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x87}, @NFTA_SET_ELEM_EXPR={0x30, 0x7, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x12}]}}}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_USERDATA={0x79, 0x6, 0x1, 0x0, "0a6a9aa38fa5571e55bbcd24345928a7ab4dca495eae872e65d02d65f8f98959123f727b4cc943c38d1bcfd1f65781be419b5e8cb34565fed4fe2c4b979df1b608b2e28c7c0ffd8cad96221efc7ca4f16430cfe6cc31cb3ea4fbeeb498afc03d91c968bad634d8eb8380eba208e2ce307ff6130874"}]}, {0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4792}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x42c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x428, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xea, 0x1, "a792ae0b20497e6009a00f4e11f643565ce8c7e0e4feab47e6d131ed42c42f2f5c2215743b6d6fe49debca6069590dd65571c12eaa0290f8c7a74ee9d838c48c9b1758405106e16009acd6b8b31df0dc31a88f7170658d588fdf421a88ac875a2839cf3f59f2b08a151e1ee333c5997764fe7adbdbcba14d5d40507702c4a4135429dc6b6f5c5df5cb7ded146455576764dfe8f0766749b6a57f3ed51ecfe98d6fd4dc2fb4d7c89d05983a5a57057a5d6ca3f03cafa09c16274c3e5983b9a8c88874d0148ac130c27fdab6a3d56bf85ffbb1f5ffdc59368b66bf03feedc1bde4c92d6fade52a"}, @NFTA_DATA_VALUE={0x7e, 0x1, "76cb71e2fb06930b79c6086d7e90d3f445b7798037da801e2f32651c4ca9929e0fe1840b4ddce0a5fbde7ac620b08f46ea3ad91f2a6546bfcb8bfa26342ec520c2df1eca5d78a67f439374bfb2b32ff8278c7a61307600574f1fe730f20e326afe51085e0ba49e7d26ba98b3f7593e4eaccbb66f525fc0890596"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xcc, 0x1, "8399458acdc02cca29109f210d5397c9cd41d989d14a18e166c88f6f0c936c83ab1335891442181e129781efdeed5c4d34babad5ccd5b90de9081081e5039d1b93962d3d9a48be6ee13875b30084bf818da7f5d30b6d0641cae3a50c57c6a062198e821aae72a4cebd665a4d8b34c92b65b9d27ec61f6d22bb819f33b72e52624ff1cd9d0f76daa945fe8087043d8a53c27ee0dba2e22a4b4ede4aebdaa5432c80ac7113110a42b7b1302bf5d4240f4e62b8ae5139e940cef035a7382aec45e92e4aadee14382f88"}, @NFTA_DATA_VALUE={0xbf, 0x1, "ea2f5b4e51ed643cf4adace592c5c2ebb65d37aff1baafbec7a51aa25307a74f44f02212581a3fa488b0ddfc812d98cefe1ff33c46106afa984ab580aae21ad11f349fd90b07b978c3bdc3f1b8ed0be68c5c55685831c92251fa4170756527c0b05d5fdcbbc4fa84a8a676a177c309679ae4a75cf38a1426c86998fe262f6418c93792f794a71975135fbc3e79c52b02486395e1d1d13f7ac9643696619321bc1cf7c97d6e6a0a24d9ee8562e69922aa03b2b9d58dafad7af736c0"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x89, 0x1, "8cd25fab9c416c3b52e24e928a1e104c789ed90b2f83d7122b474d5bad1ce950b4ed8fad8d0c0a6734dadb425d9a96d0500c5e0997abedb500ea570a3894ba600df6afefddeaad39c9b3b4d48c67ccb23c7b4e001abd56724d02fcf92a7a08a153b3b5eff8ab29b0b98ef58be04dd0d882626845403d705b608619c2cb16a46f6aa21c585b"}]}]}, {0x3dfc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x2350, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x83, 0x1, "f7376c74aa5a846787e03fd042ffde2a29c764edf92f06982ef8ae35214b439f0a84da111dfe1df66e6e3eb3da10c62f122aca0d960cd9b8bc21e09d667b63bded4b8705aaac3d6d41ce7aa59ccdd0060307a899c761b7d437453577c40d48671534e1906ecab436dfbd3813e569caa7fd4de7da989edda2634e7197302607"}, @NFTA_DATA_VALUE={0x1004, 0x1, "b18719d920b87f4b55349344db67963ec826bf364c844050b195c572b9e8e7bdb54953b64390807bc2d50e676f44ac1abcb57695f88c00407102f9c4ae7a25cd7b20d7b1f8bad8a0e5d0fb181db64fb2bead4d3aad2cd493d45f15c08027dcdf3bda2c02032e28486c6da51e217ffda033c56d539da0a12c2d2ed7ea9fa4c6c3010755c9b98dfcc95b2c21649e9460ffbf804dd120df65ffa617a761bcbef89412a51af8ea3627fb4c4d8b03a066ace25d79e75aa5049f46fbcce227dca83878a131b2a64283c7378925666fa72115b4582634a3018f94802adc05d4c2c33e57a120cd4bf7b28036a5963e9a317fd4405df75791ed8bf113731adbe289ca4641ac8c411ca66760c624e8ec2b1418bddc9dd09b12df89cf21fff7ec4a1005b8d7395525f72d8a8d4a2d740829224c11b9c949b8ad7f3d20a5df93a248d0f4d07f7a6852b70133dee38e048c17d4fbf2c4a6864f5a890be51fee417e17026e6a3c426b3b5a441561ae6e16bdb0565077e83e4471d7f0b92e12a076a53ad9818cf45023a25700d76a55e101ba3eb752e042110222121f2cdaffc655569b6c40e713b5af78f9fad098f4f532f8f53295405bfd57e557684597ae140f19a2a80fd14efeb5d517876b090d6c880baa32dbafbb26c4749d2b48d68cbe081d9edc1ccc6f39bfae15e2d2d2935e5405cc38afbc6d5d394ec5f92cd3cb7945a0c375439dd35e5366c5cfa06501daa32c05ac9761521a644962fc43cddb29e1d538b319c369190a116a8c84269cf205faf4f3a9cd198e0d8c6a2ca44e9b92948a3d0ab3badc6dff2975e5922289708791f030aa8d6f5c1ccba029986305eaece579ee9399a44cc0606f1308573b548186597e98ad326201a288df85651244348977993d0d2c3191fab5687135f1e8afde157e869c49a9c6b89ae40117db57dac569b8dd1f5c62e8b41bcdf8ccc0d0c16d7451bcf2a5c103e92625ce646c540af2791c0e757c352a5ae986908e041cba2e3a21a6af05136b0873b82998363b4473aa4ef99eb0c37b8e2e2b281131b8df6cbb333c1c8bf08690cef548d179ab06b6c28b3044ce12783139fc21281f19054940292125fa4c46ae0bc96ee761cdbdcb08ade5100384cc0b8be6c47a560190517d59c8cd1c8f4eae13fa20045078f7dabdb731006e3a5c58831caddaf431d12fbbbcdff418d4c5901600d6a696a34b691bbb76eb3afb9d3871088a5e88edd718fa92ab6f3775e7d23ff9e22a563241cb965f3770e68787f8cf126dd093864c5dacc3aaf7d676e93f7af3881715858af8af0a4f0516b1fb7ebacec3e5a6e0e4f19a64aba1c5e2b2433d26b317ba014ed86fe3bbf83511fd5d2e3c867dd28311ba48c993f7b3c0a7024ba2b5a32f7ac2f407bcae9a0028b6c3094a227e7937f6822bfc2f3cafb3e58eae5a0527d8870f7bd9fc1b50d13a69808b9e8e3cc6aba4fbe857cb8b4226f7d09a7e94d03c2e32a8f14ffa6f23b0225e3577d37c53ead967fde35da136c7f86a36d4bc50395f1e2f2d99253807db3d6391e5ccb463a57ec4126d739e5ea8892152b0f0795439d295a4ff59b2536c3a8b5fb766d88039d05116b31cc9059f45ff35b5d565876ac210cb135514894286525fc41f7f1c5c2d35be402c51fef414f12573610863281089675f7e8765d59f5f240c1512879c177b285997be62337d9ca75232c8cf93c65de02dfe50ed86432257467dee6c3c87a8570890ed5b36b4863db4a199c1070d885386d7c02945bb5d6bbcd8a68bde59d7728e58f743c6e151a80b62fed654fd5f3b081c8b9e9867005ba627c5f799f584cc95efc112d42490a65902fb90d19e1d17f7cd48c16d80e0562a0d98ecf75c6cc997ffff838fb995165f0f0ab7975d83b6f6820d64b25627955fe6ee0818cbd9626ab5b0288e6c0c58dab74560695b414f43b242b1d6dac21e73d80f92598212bec52454fe991a4555ce9ec7a53d04d9fffbc31f4dd2aad1e5f9302c6718bb406993e171a4d8f0994c80c870f81436eaecf0409b8b5a4c970ed34e563a3557cc464653975c2a66b560fbb3acb6d30532369f45d1baff6cefa431b1bab5a7abc0f08b9d35c5d559821b3a70d421ad071e078f797675e22f8499aa8535200e64b94cfe7eae3613843551f4d3ed2c16d608e1c2946fa93f449b1f6bf008deba4697c4e7aae16e51dba5270ebee2c746726567888e24d2103253cc2dd6d57ea28ce7e7abee8109696fcb830cce3c13aeeb64297732ff283a53c3e039dd8941ae1a8980e53232c1494004819b86be751793a5d57dba87eb920ef7aae6177ef1056444981bcff468a9a77441b244153ec5017462b935480421f750bd284af2b17ea502bd5c9cfae7463ce1a5a1496a8b8547e8d98fcbe84de23b827f19352b1576d84857608e9f43147c9f48fe4ca2900ccafccb9ff9a60396b6c56dc7d333e686241ce553684a7000ffa1a57a97392478b776d346a027774b28b8473bb98d304ee2c65e33e0786a89d455f8fbb2e85d3197cc19cb86e383d572a94267065b8a4392ff627980f6a326dcecee5133c09ba41826c5c2379868b17332eba5fd2a1e4feeca6df775e95b87966f076ec697dc8b2be06ebe6b18c6c4c7db885cb35a1a6c865ef3816f75c60a8bfcce4237b3de3f0d56929c70d1ca294a9baaa9617e586a9c603bc53ecd5b0f23b451ade2a84f90227b3c66639062e98afd9f4e4b300c9b32cb0c62b9b9d8beb60eafcd33028a0f025bf93f6a00ac3d6dd2408b8f5282575fa9538f40f477baee945c365f959571b7278b09a240761ed79b12210edffc121f88c1f0f4f7401edc0b940c8e7971eb5f2317a972b51d1bd1e49bd6a7fe51e0b8210ab5b844ff68e575390fabb1a16639cfb69fce6bd3b721e3284651ec1db4fdde136c62e20eea8bd2a4f513bd2e8f75c89ea74b3bf50f15801ea00ce867476408b262f7fc6ec1348e6c5c791fd7266df559e76eebcc8a0b2f198da3e7a5414577deec6ca22b4bfa18cf5c4adf70f175682087f118b50ba6aa67be4b156e24d6d13d3c7edf22a5ce71aa688b29c4cbcf03e8cae911dd8e62efe22783604adc770a272be76cfad2b50e0a6d8a5edff7005b433e62e1f32b8196478d5674b0a49983412c712b4aec42ef6ec74a056a16fd35270d162b8786b2997b73b4519af9b550425afe0be91d92184d57364da5fe878242f738f819386f9934dffe40f716ed1d7fb4a35afc5afc7686e440328499c992b0d59e05273beb658e6e3bc0287aaf9030453e12804f5669e175e9e1f9e8b0c97e0c136678c4b0f9997829f94352ac5b1b06f2bc3bf4b1bbfbb5d930611fbd384e528a6f48967a7bc926e9aa6ebaeccb29395fd974a1e0032bcc7501183d0e5e4264cff0789df43d7fd6b7d42203f1d7e1a17d953f91f795fc9a7ee7ba864a9c9374d4e69096d8ba17a893a978b3953dfa5eb4449873fd6a5ea8bf60ec75bce5c99243ad31c1ad3d6abdc7a5cb6656f3ddb2b429ec7e274fd97f4135b4bdfb2b1fb1fd3b549488ec98cf45a26f067638fa66da723baa3b03465d1b04e1bd75f1b6a6eb60f4731b3166998842e9d7c994e5fbb011b6cf471f6667e18850fa72e65ceab55098692c3c021637c28ae3431c22f0ca15c015d0479bed04d031dfa23a99d286b43058eb698af055e5f4187172ba7204538455cf440528f19ae4a376c4058ebc0fd70cd94c91a2b42b111940c7ee069789d82e0bb38b74d78b10a78aa36bf8a53290968508497cb993b5161c21cba547dddb037099329293e66498cb8f7f2cdc72a4541215350883e62e1f8ffdff8b7142a8c524451690c76bcfe5a8ef24694981cfa4a316f7019065a132ed9bd136346ef82bd97c99b49d389741ce767bcecb693492298f0e2495af598b8f38679e9120e12306335523f90a6d3f095e03e377b7009e9a1d2bcabe66e058c79c1d9d12e532a981259ff0f7683ae9320dd248dda43c37668eadbddc912de97db312ce15003dda599b034c1ca1d987196a29381c519b72ae4cbb503f9ecae730e49598de6fd1c37039c0c13dfae37c9ab36af26b1d8cf4ef04230369e8b1d1c0f678a8e8b969d4836030d1d539c4daacf09d8c0cbfc4c3939922c735ff06c037bae9a90b2681e7ff667e325eb27b66e09a2edf0bbfa18bfd0a115c8cd63910f4e79671e8176755100dcb0e39e505ec57dd4f89fbb9d92241ee6b003a3525bcb1d2288342bd22afa7cee36d02a8a3af903000a127ac0ced6859535188c03b8819b018f8640afb2b27252a8d0b4f36a42723ad3c8521b6badd1ddbe8cd71bd027d04bdb728102bfd09f8c5ea2aabdc9d3e912f604b43a6e0e7ece36796c3ce90dd10c08671c9236487400eeef3904f28149d65100a6a95c6c7f16b49ee8ba74fc013d104ab57fcd675f5aad755205c40d9e68a80f9d2e3edf5d6d2480327d2ad1080ae1b0421edd313566b058cbae223b81de02ef981239610857768945f1d07f6cee168a2ccd4950a2f87269767dfa8fbd18d6f5e3b7e6d508a57d31852caecd99a0c3233901571cf023302f6707aafd4f9755380c02441a1a1b07f394aff45b445e4e712d3e8e4d6cc62438b4bdcb0601ccbceb5d253a7b8f14b9c00b8bebfd15cd5477f02b07d869bebe637ec58071898ddf46b085f0d415c2dae733a6ec5a126ae1e7f2ee7dbfff3aea3539c5666f1a16d0638f7b5ce1400fa5650ccddc93910c764cf446f805d80a0819f2d049d0758df8bf0a55b4df49565a39e4c1bdf617c3bf631eb8d9bf91c1564535ccbb1aec3f748bcabf596f4a0bf683d367824dcf6849d662c7c641294c7c9b03e1004bae2c88bbf40595462c0144897baa360d6cbebf62e365b7c3114d293096de636721f07fdba3e3f82e1c680c6c5624f0f8c906a6bdf2fffefa6104b95cdfbce659f438d7750bf840475f3069deba8423ba64ca25e0cea94a7a1d27386b9fe24ab3651d2f1a6d7967b7ef9939843910b146b4ac6d6f537b9530e3624a94e7c1f9e59ff3be107218dad8897f778bd70fc4ceeae09c60cd35e6f1b0c6b66937926c6a3f1afaad8585128c96bf3e8d9795908381a25afc45ba65c9df86efdfef37c6ef939b1ee10db31d8d9b0d12941dbb51d4d1f504396ebd182721e2270f2d4f042020fb8c118e8a56ab9d505e2d5105e48b56b7a1f59e7a9fe8eba8bea1419d3b7b50c57d0e10d0c6350f6fb5d8c7fceee157a693955e3a5e19470af07d8e7e3b8fd3cdcf560c4fc226d9d5ec11fb1bda64a4324b254b615b5788b9dd5e721a228f61711633ec21cf4c578594fbc9fa8dee64e5e91993d92985ae0f89257ceccfb59867b9bdf2f80a52d193a07e5d6051a7917ba74be7b6ca1ab061f2bff223906e6f8ba241273a40ade66093dfc1968f83965326e721c925dafbc9aeee93720d14663028a8630140010cc8ca5b192bfda0c88d9c27dc13c27f52cae7f34b52aba2504e9db8218035e4ee8946fb5bdb34ecbcf8130f0c159b873c59609159ae2cdb52a13bc4cf5f913dfa0cd96ab609a9269b12e37efffc4a55e6778597f2c7650ea2272b3170eb6beff8910dcb7f2e30cc77c702614508d6ae4f1779b8b911cd547f4065adfb0309a77fa134d54f4c6443439320de1ee5ff63f8201b11dea626c69428ce05e4a4d095637f4db0b60457f1f7bb5778fbb272f888d410a8dcda463c1aeda1ed2f392f5596f298f4dfa2ea2c6457daad23aacb2ba00ac4475cb0c783a811574b2fdfe4d672bcde48e4e32c69750649a5412624a1b2afbd738cb7f083cc6dd822ef721"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xee, 0x1, "2c238ceffde977b2f874ce328d188dffbb15bb0f115fe89b61ed499517d61e63198c61d63733f21526b61dccb469fe43138f08bad858cc41ebf6b67c7420d2679290e91fa477afdc5a0b4a1afc1d4d218fbe0c8b73c2364a8f611df7be174767f04587a38137c32f16b6a9001198d96f9a6d0d209cedb35ecad4c552d29f232d4d24d6251208701a700710ffc5fe668e0e0a797ad2996ec2bf91b82f0b8496a6ccf69650bc40556ade66bac4e57a470c70ecb216b33d628df5cea602a644a7a85fc3f4acdd71ceffd8cce47d32e1f62abae4023114b371d49e5ae82c74a93b8329f4b0960223cb6aa9e5"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x3f, 0x1, "8aa64f84eefe977bb02d553a5c8c95c108cd759171d6e68cd54900687ca4d41c3362ac2af4e1202f06b7760398dc7488880fd3d39d6115c51bd9f8"}, @NFTA_DATA_VALUE={0xdd, 0x1, "2d26c6b7cf648965b2002256e1624a4f68db00357f9e419cc3d17f0ad6e8b475380e0144be637ce4b9635384a8bd91ba2b71a39472297462f60ab040caebf7ca155df393dbf1a3d89112f34eac4ba8c87923bfad2fc96e5488523f9a4f4f6c6fab2bf3a11d947cc92489abf30504407cdc5573fea0dd0ca56146efc798de47617cf6f053905e0da4287fdefd078dd22eeb80d392c6a6ddddb6cca6a148e2a475e3aa53e12fe9dfe373c46303425a6c3c0e55a4d64d025528b3ca93941eee3ee64d2bd69d115106a4f8a5849202cc9439cebade8ca9d6f048f2"}]}, @NFTA_SET_ELEM_KEY_END={0x90, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x6f, 0x1, "377f55e3655046d7208f9a8bd0efff185b41e24c894bf0af935586fc6548c893d4d76c523dc37cd4e8a8b4026d7db6ffd75b92a7b1b733d98f0a9be71a0447197bbe91fdeba679f40cb4b3422860f7683ae42f69caccd4706a05b0663fd7854aa5aa8f2f056687e19a5152"}]}, @NFTA_SET_ELEM_KEY={0x5c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x57, 0x1, "611f2417813162996610f6d33247ed9dc2e4931f79ae7bff064a2395a300d7100b2ce2f0382bf29d6f7d85c75459a4248f07b07fd84e420b50b61bb6ff3fd527e05f64d1f482ba2fad882b2bfec06e22657edd"}]}, @NFTA_SET_ELEM_DATA={0x440, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xd0, 0x1, "08fd0126f7de6892017ec40cf16747fa5a57916f7af935c4c49ff270fd3a292be6b3d70646b08cf870305b2cc06c4c0c9ad0af8857849e1b2b3a322ef2c5cb56c126c7bd9111a2b4cdb6926b531c7f93fed8607e6abccfe20e28d5bde767f0b11fb07d6426cf4ac72e3cfa9ced97b461a911d1803d3c51fb3395ca4faa4b43c3b62ae5ce918a93659e3c190a33f4e10688ddc3fd9ba2f72c710e66529baafe0ed26bf50cccf66a719baacf5a4f160151f1478c51b134d9eda39bbd4c0a05f7e1c04cf7cee803405090025977"}, @NFTA_DATA_VALUE={0xe2, 0x1, "b4fb28a1c765cafee6e52453c727677aaeb43d642de6234ea6bfa7c7e5f8ce5883e1e9594391e7fe9c070d68eebeb578420f04914719d43a385c6bd43375aa05048ef925cae86593446aeace1d13a0fca07314f0dcdf18a6cedb4fe0aeee8eeaf6327383bfe29d467d5d82e81f179f2eef9dc63dd1c9f2c94b843597be71db53299351cbdf5d925a60685c9b0e98dfefb16134fe2c2fe889b9501b231994bcd2481f5690233c3266bc507f52e7fb39caa16c0c0d2b51138ed6ad9c34973373497f6ccaf6d35cf97214855c70b85ddb718677ff0820ae2b4869f8fa4d6131"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xe0, 0x1, "6178fd8f645949db0b943f08e578faeb98687b3bf62eb6965a028cb60ff8c27c5b85dddd3b311b9f814a44a9bff6fe7305cd94f5cf1f896843d1cd9cbe03136c6b93d399aff8beddc84840eafaaecfc1d1eb1f68e922b971f0267a8e2a63c66edc7a2172ba5de0db566751d0a49668ef705f2c5a69c3f1cedbfab68b454e004894d88fcfe289946c8e927cbccc5f82cbe852f8f0aa28578b46bdc972678b585a3a07107e6daba0138bde67a2dc04b6363ceff034cfeb2fd601055060ebff81e265c69c603eae28ee85b356f80b9d668c177d397ce5d6c867202d2a37"}, @NFTA_DATA_VALUE={0xfd, 0x1, "e232c88d7902b440e0dd89771b515bafcaa982a583afb2d1f49d1d707a943d985f265011993ec67371ef08e655ef69b329316952fce599579e45ffc73846e266507e7b47beb9efd16db9a2c510a13057ad7fa5a1fb1a86676e9871e75d7822b90bf923b643d80e02799481b6d16cef4d7c2ddc40dfbd79d056a8d9b9634704e0f0b0af02f7f3a94d914fc19f0ecc736b73463da3c37420c1511feeb736648fe4741c3649db979db649973933dceb3ec64b128ec426dbeaeb1564dce3feb1bb861835c2741b20d7caf26031d866ac83ce59db5dca3dfa73f43a03b174e3a6e89d24ef60fed4b88f512173797fbc532a851c2c847ae18eaad532"}, @NFTA_DATA_VALUE={0x31, 0x1, "838a47a737ea573dcec95ecf2e0cd175a4c4d9052586eb163a9d5195e7528dd7d2afd2c930d1cc19aacb41ff4f"}]}, @NFTA_SET_ELEM_KEY={0x115c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xab, 0x1, "27caadac832c53eaa94704c53aa8d965850e7417cb1963978a9b785941e1f466d879de4c155dc3d037e1279146ed79727986d0409b2fe80b529facf8b7ad5cfae60a0ef8299333e4ecdde186261cea51b9d83c20d3a4fbb07f1be7de669951f53604a147841c6a515148ae78584245be656b1115ec2b3c3224da433cc0b11f696a52079a4d9f487e125ffb0a4da2ee232ad60f12aba5d09ddaef02587be50b4751581cc4f74742"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x17, 0x1, "f44e18fde60e1d4633820bb542f0fed8035919"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_KEY={0x3fc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x92, 0x1, "2d73f9d49ede7bcf575fef6e8ee50490181f9333381b88bd4f3ed6958c14d7ea7e955ecdcbc662c65d14c133d59e4528583ffb2eeb2b8e1c66a51103d8f9061b0eb95462fe8b2b855fbe2d92e43c4f5c4fca961eca9e52313007177d5f081ded9f5b6f68d83e367a15884d787fb867930999a51f48b5f2a98e3aa80c56b29b98f9999a449750558f864cf31747c3"}, @NFTA_DATA_VALUE={0xe1, 0x1, "5b36bb32b2c59f87b30b751b064bc026dbf4c50c6829c6068be824e4b2d3c2175cd79135c775b21fec4190bb81d7464a5c6aa7e39fa20cb3403cf2a6bb71282b0afb4aee358333f52b66c8856729ee5a86178143f7f0c25b44f77dc61067f4161bc33d17af8b5052e2257d85bceb7358bb3f949d32deae89059f8b0c1106e70d8fe4266ab846ccbe7fd8c17d0a8426995a7d8fb6270a5d4b0e3ca1eac2c63fa90d9f9dfa0d052b6d4784f70e0b3a2ac1018f0eb297be33465a9c68642726a9999d2361a8874e9873c34b6e24ec041e1d552a15814cab615385f2ac7620"}, @NFTA_DATA_VALUE={0x9e, 0x1, "17f022898d8a05ab7c9a379656acd0175e234804b46d86a7f0bcda6c860bd3d6be2097d22f802ca338bf93dfb3fd436e062713901bf6bd1ff7b4b90d2f8d948c7b1f1fa0262b84429b803894b9961972233ca3564b9d5c3d6c0a6d434fa637b79cf64afd316ff8dedd5b254cd6cb70e2ecf7ce91c6787d640205ca0361ae39c59f8075b37c3fdf315627d6a8cf5b40756a015099950f3becffb2"}, @NFTA_DATA_VALUE={0xca, 0x1, "d62fab766ab10f1f7310a14e10cde88d7436bb0c5444f4c04192e6c2cfa6290b9d384fa34e75537e1b38a3afb58347302733982ff6dac7942081483f28860c090c88ed722bc1812a96d720fb477818f3b90777bc2759c8db874380385738dee764bf2241ee685cdc2a0b7f524e3ace99f82bb2555f2bcf2d04bc956581823bec7d03344bdcad74a1b5a9113d6b113658357c4d2ab76bd089f20355b1a95150749f0e3f90ef2314aabe532322e66dc40ea2036d971fde93174c352558dc6f89c2005de5b0acfe"}, @NFTA_DATA_VALUE={0xb5, 0x1, "db9ffcc63de8e96144f47a171bd68b03a80d86a295b1975545d1ee996b4dc6f0df5673462ec9467b3e6564c4e429e9ed05a7ed753ddfb46f85d79ff76dd6f86d33bcacd765783b5eb7a7a3b6dbe539cd580c17d6c3f769b037bb0d79276b814149e7276c028efbaae845f3198f832cb9cb79c15ee0b384ea111c584c500cf4a0fa671aaa3cea377678cb4c8e3c9cbf2d8b2b9f82acffd4353bff1a46e60b691a93d4c8940f6e1d6d4f2a0a469ff14b2860"}, @NFTA_DATA_VALUE={0x5b, 0x1, "1f9ce323de393ee657671191ee833c367ba57916d8c8db53aada8e72dee08315c1ee03daf575f7227207d466d1c14a6f9216e2d08aca43d6988eb907dbffc48dfa22258a0fb184cb7c04ad87e7e64861991d33a529b111"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x274, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY_END={0xfc, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xe4, 0x1, "35ff0ce2150b01db1a48146a7349ceb0756cceaf85811100320f98c9ef04ce91892f28b51f0f7ff16fe3ef82adc6ed774177eac7764940662cfc150cee2b60304c1afa4d0858ff73e346a5ee2ef1d9e761a22787eac09edeebd0fa73b914b9670c287a2fbf5cd9ccce39c1bce066cd5f126be3a3a9267f42a101aca81ffffc3e2c4dfa64784460817d0fdd741a9d7770ae623d27a4acb0e8d79a23f2822ce6573f3c1ab6df6138f62f79abe5bcca91e48b5dfb73befa964a9525d35c520007b119ec26f2538ecc47ea4dff409905eb1b933e4791d45ad3c24fdd3cf407ab3734"}]}, @NFTA_SET_ELEM_KEY_END={0x15c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xec, 0x1, "1031b131b712ba6148c7a1589d04da1d1e6c85b566e6ce01164f8b5d45e24e3962c9dc8f34f37fdc4e8c5b732a5431a303812b0a149fd2f19944762ff7e1160252c6946a1446184acb3dc6a6d7ab43dd124a7c0b231844e487a9e7c75a0d1721e829e2f4c80afab0d6bc38aaabfc6d7a6d0700b281293e6a53b0c95055227776f81e5687aee7272d89b5e049701662c6c2752e2bba8c7b3c35fdc56da211c34e7379cc39af52db8806b95eece172f614aa25f9fd5ed1b6d049d08cccb39f515e902e1d41219639b75e6a9c36266d296cafd3e82e4cf6ee7760a87082d99f6834f62321650a9c4f14"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff9}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8f32560}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x30297dab}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x108, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0xa4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'macvlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x594, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0x130, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'vxcan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0xe8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x94000000}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'pimreg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x27c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'hsr0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'xfrm0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'sit0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'dummy0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'vcan0\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3ff}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0xb4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'nicvf0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'ipvlan0\x00'}]}]}]}, @NFT_MSG_DELRULE={0x28, 0x8, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_USERDATA={0x14, 0x7, 0x1, 0x0, "c5cba76bfa88ccac46082ac1b43f57d2"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x54f4}, 0x1, 0x0, 0x0, 0x20000811}, 0x4004000) 2.994475208s ago: executing program 5 (id=243): bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, 0x0, &(0x7f0000000000)=""/3, 0x2}, 0x20) connect$llc(0xffffffffffffffff, &(0x7f0000000240)={0x1a, 0x20, 0x4, 0x4a, 0x2, 0x7, @remote}, 0x10) r0 = socket(0x1e, 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8044000}, 0x1) r2 = dup(r1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, 0x0, &(0x7f00000000c0)) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) timer_create(0x3, &(0x7f00000000c0)={0x0, 0x1d, 0x4, @thr={&(0x7f00000013c0), &(0x7f0000001440)}}, &(0x7f0000000300)=0x0) timer_settime(r3, 0x1, &(0x7f0000000240), &(0x7f0000000280)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000001, 0x30, 0xffffffffffffffff, 0x2000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)=""/156, 0x9c}], 0x1}, 0x8000}], 0x1, 0x2102, 0x0) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) socket$unix(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0e0000001fa58f2f", @ANYRES32, @ANYRES32, @ANYBLOB="f22c64746fa44f6c489c2cddc9ce8e6d480c57032bd8c81c876729ba50f91a3044231829c08d07311eee581b1b4e150e05c56ef7f62fe2e821e5a9e4bd7b683d0be201e9fea9590d843cc1e44436b760f06168f6cf099c9ba66b5ef36221a2055b7e93cf477af82013f533e52e2673b035a8d35a5d83018572b79a4851864abc9641", @ANYRES64=0x0], 0x20) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/filehandle\x00', 0x2, 0x0) syz_usb_connect(0x1, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0xa, 0x43, 0x8, 0x8, 0x6737, 0x1, 0x9180, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8e, 0x5, 0x10, 0x7, "", [{{0x9, 0x4, 0xfb, 0xb, 0x0, 0x82, 0xd2, 0xd2}}]}}]}}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) write(r6, 0x0, 0x0) read$usbmon(r6, 0x0, 0x0) 2.528359636s ago: executing program 5 (id=244): r0 = socket(0x2d, 0x2, 0x0) setsockopt(r0, 0x11d, 0x1, &(0x7f0000000200)="01000000", 0x4) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000500)=@generic={0x2d, "00000000000008011800020000000600"}, 0x33, 0x0}, 0x0) 2.421728777s ago: executing program 5 (id=245): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x8001}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) r7 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="c4000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000100000000a00200087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="001000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000000000000000000000fbffffffffffffff0000000000000000000000000000000000000000000000020400000000000000000000000000004000000000000000000a00100001"], 0xc4}}, 0x2c000010) sendmsg$nl_xfrm(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000140001000000000004000000e000000200000000000000000000000000000000000000000000000000000000000000000fff00000a00200000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00@'], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x987a3a9f32358a4c) ioctl$FE_GET_PROPERTY(r7, 0x80106f53, &(0x7f0000000400)={0x24, &(0x7f0000000580)=[{0x32, '\x00', @st={0x4, [{0x0, @svalue=0x518}, {0x1, @svalue=0x92}, {0x2, @svalue=0x6}, {0x1, @svalue=0x7}]}, 0x87}, {0x4, '\x00', @data=0x2, 0x80000001}, {0x3, '\x00', @data=0x6, 0x6}, {0x3, '\x00', @data=0x6, 0x2}]}) 2.377139308s ago: executing program 4 (id=246): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x40003) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x15, @loopback}, 0x10) listen(r4, 0x5) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'dh\x00'}, {@loopback, 0x15, 0x3, 0x1}}, 0x44) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) write(r6, &(0x7f0000000400)='PASV\r\n', 0x6) r7 = accept4(r4, 0x0, 0x0, 0x0) write(r7, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)', 0x2c) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000600)={0x1, 'lo\x00'}, 0x18) r8 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r8, &(0x7f0000000700)={0x2, 0x1388, @loopback}, 0x10) 1.838159871s ago: executing program 2 (id=247): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x10, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000bc0)={0x0, &(0x7f0000000880)=[@nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control_nat=0x6004, 0x41, 0x5, 0x1}}, @out_dx={0x6a, 0x28, {0xbb18, 0x5, 0x6}}, @in_dx={0x69, 0x20, {0x791e, 0x7}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @wrmsr={0x65, 0x20, {0x908, 0x3}}, @cpuid={0x64, 0x18, {0x8, 0x36f}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @out_dx={0x6a, 0x28, {0x10aa, 0x1, 0xfffffffffffffff3}}, @nested_amd_clgi={0x17f, 0x10}, @wr_crn={0x67, 0x20, {0x4, 0x6}}, @set_irq_handler={0xc8, 0x20, {0x9f, 0x1}}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_load_code={0x12e, 0x6e, {0x0, "c481c1e85e000f01c9f3f33e450f01f8660f38829600000000360f019c0300000000b8010000000f01c148b800700000000000000f23c00f21f83502000a000f23f8470ffb7461f766ba400066b80a0066eff30f1ecd"}}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0xfffffffffffffff9, 0x9, 0x1}}, @set_irq_handler={0xc8, 0x20, {0xe5}}, @uexit={0x0, 0x18, 0x800}, @nested_amd_vmsave={0x183, 0x18}, @code={0xa, 0x5a, {"66baa10066edc4a2519e5fcd66baf80cb8ec5b9a82ef66bafc0c66b8101066efb805000000b91fe8d6be0f01d9430fdf2b66b8c1008ed00f210fb9700900000f32440f01c2430f01c5"}}, @out_dx={0x6a, 0x28, {0xa159, 0x3, 0x2}}, @enable_nested={0x12c, 0x18}, @in_dx={0x69, 0x20, {0x81b7, 0x6}}], 0x338}) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000c00)={0x2, 0x0, [{0xd, 0x7, 0x4, 0x3e22, 0x1}, {0x80000001, 0x401, 0x9, 0x1, 0x752c}]}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x84003, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000001800)={'#! ', './file0', [{0x20, 'cgroep,at\x00\x00\x00\xd5\xcf\a\v\xc4\xa2@zA\x18\xe2H'}, {0x20, '\x00#a\xe2\xa0&E\te\xec\xd4\xd4<\xdf\xb0\xa9k0\x8f~BsZ\x91\x7ft\xdb\xac\x9d\x87\fC\xcf\x9d\x94n\x1fP\x7f2\xb28\x00\x1a\xd2'}], 0xa, "68cefe672e30369f4b1e73fca8e11b70f708f12a6c900128cb9a5440b42a9504984d2db98584ec1626642aaca9670a8eb4dd36e48e7a3da997d6e5999b58e1765fcd7cefde9c59801df5f5e5078a289ab655e36197d229caf4cfe7cc4e5edc2a3e399f565f4a2a651cae1a3ad264f863112d29e6f9ed"}, 0xc8) write$UHID_INPUT(r7, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) r9 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r9, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r9, 0x0) r10 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r10, &(0x7f0000000080)={0x28, 0x0, 0x2710, @local}, 0x10) shutdown(r10, 0x2) close(r10) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000180)=0x9fd) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x9, 0xfff3}, {}, {0x10, 0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x2008c010) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x5, 0xe, 0x0, &(0x7f00000000c0)="469dc2d342e2b7000091000000000bcf48f3ac4e19a56ceb0b42c0", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x22) 1.836059763s ago: executing program 4 (id=248): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x6}, 0x48) bpf$BPF_GET_MAP_INFO(0x4, &(0x7f0000000100)={r0, 0xfffffffffffffea3, &(0x7f0000000080)}, 0x10) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x440007, @dev={0xfe, 0x80, '\x00', 0x25}, 0x8a6}, 0x1c) r2 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8}, 0x1c) r3 = io_uring_setup(0x2a8d, &(0x7f0000000240)={0x0, 0x86a1, 0x2, 0x3, 0x1fb}) setns(0xc9, 0x0) syz_open_dev$loop(&(0x7f00000001c0), 0xf, 0x101) socket$packet(0x11, 0x3, 0x300) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r4, r5, 0x0, 0x0, 0x1, &(0x7f00000003c0)={0x2e, 0x4c, 0x0, r4, 0xc0107520, 0x0, 0x2000000, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x1, 0xdbf, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f0000000200), 0x4) close_range(r3, 0xffffffffffffffff, 0x0) setns(0xc9, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2f, 0x9, 0x70bd25, 0x25dfdbfd, {0x6}, [@typed={0x8, 0xa, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008012}, 0x40814) r8 = syz_open_dev$mtd(&(0x7f0000000000), 0x9, 0x8000) ioctl$MEMGETOOBSEL(r8, 0x80c84d0a, &(0x7f00000002c0)) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x38, 0x44, 0x1, 0x70bd29, 0x25dfdbff, {0x1}, [@nested={0x4, 0x48}, @nested={0x1d, 0x1, 0x0, 0x1, [@generic="c78c42412853ec1e921ede6c39658fb028fcee3547aa485e20"]}]}, 0x38}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) 1.560636458s ago: executing program 2 (id=249): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) 1.485885756s ago: executing program 5 (id=250): socket$netlink(0x10, 0x3, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1a5042, 0x0) mmap(&(0x7f0000442000/0x3000)=nil, 0x3000, 0x100000b, 0xa8011, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000001000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2) close_range(r4, r4, 0x0) 1.373442155s ago: executing program 2 (id=251): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x190) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000180)={0x18, r5, 0x1, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}]}) ioctl$IOMMU_DESTROY$ioas(r4, 0x3b80, &(0x7f0000000d00)={0x8, r5}) write$FUSE_INIT(r0, &(0x7f0000001dc0)={0x50, 0x0, r1, {0x7, 0x2b, 0x3, 0x2f44a002, 0x6}}, 0x50) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x1000, 0x40, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004200)="aa8e9df36226466e888b39901e75023156b5530e75c1e203314842ea78a6048cdec3383c60dcd8fa24f6928f6e02ab1090989c59ae38dceda05af132af4546a298837c63ea70975feb0919d7f7766791d530b90d522b23c58776ac7a4035383c5a0dd90d8b766c96816631f1742a0da0ce6ddd053a05966f6b6ec22dd28a0a2636d07696a307496b0b0d8bb370227dca3c96838e556681409be388f1dfbf500f1aee82b374f4473aecbdb77cf567fece7f8ec733fa91aa92a186f9768d16d0257ef826959fb3a73e4976a019bde8a82e9bb0a0443cbb1ab2c6e8f8748489948710294efb79d70edec2271491bc1cddc9c9d2713cc3063761f2bea07f5577bbe5224302ef23adcc96cb5ecee406c7977c97d7000000006e28198954bba79006fd58b2a2b43047e7f3ead143ccb6b27043d7a7512e9d3bad0138554f4b465ab6d1cec9b40cb301ac6491ee7fcdc0588e53eb2510471de91e3e73c98f0a3cc9929eac63f477a1208a80f8c75d0a1d9edb895d675d036a1863dddea98b18c846ac253b2470324b21eaaa6e69389b91bcd470995cd6835c6fac80d5ca41b66562c910f893124cf0f20dc65d90aa0f9cd1a7c88f755aaf33875d7639ae1b7413834636de57f44302b723646257ee7456bdfee10f2eaf0c05f2cf01a115ed8ac2908827af3d85da2f1bcf53d87ee830dc5e98fcfc1a22e547ce57508f606945a7599d8e1cc0268987cb7b3d00a6bfacea7bd05430255bc8b473a071b83695783944ef856fc89906e0b44a13166309bc8cc1dbae68399e1e8e4a2ea265c1a104dd862563cdaeee2b37e72fbda323cc72360b6d4fad2fd2409397f90422bbe6e9068aaf38e18918736e6357a6caac59ae803ffbe853ff716a388423bbc93bb2d6b1222bb94c96a3bddf421288d47039fa1b73573dbed87e1f6b280f8b045f9be8e0d85f6cf416bfc0f3f4ce988aefa2382cccf39e40b2a1657814b7953d0a0aea45d50d02d66982e5269f1ededd6a9f8f9e212314a4bb5c2f4898278fd3a585c1ff60e435b186c552134e5ddb0f2cc95dac405bc4bd32ccda41b05c6a376070c8ef2d6eb3ea7fce97da8f09440d47dc5faca6271d1ce4f4201b315d1cc3fa1d4cc2baa14e4c57bafb7b5bb2e9e859505360e1738a36100dd6c2fb6610fc0ed88e452148ecd8b73517f69c28f0c979525d21ba4fef353eebb2326f48217c44a322e9f1f08f92af1ff5ee5f2dc563f1a0edb09d0646105be0c46ddc8b71301e68013e863d539af5b3a2b11f770d8c0c086988216602619ec440f98d434add23bc7f54d145260773e53121188ca179832d5c406f2b4a91045edca91232416219fade02bf6ba002352943850294b05d9a142889205e6b69336cecfe8a7cfc88688368d54b475f3915eea851334395f80b41177ed4d17d91880a22c1c0cf33a550e32fbf76505458d07ebccc4e77bafae1700c9997f6fe28452f011e370642f228bbf0e2f3dc05741127f6d73e96c073b26e730ac19cb17dfc63c0ed4b5d53ffd6e312e3e80822c8bbea3cf2914f3f8ee53fb4edde1d4507fa9d7de54eecb75132befab6bf486cb05bc8727dadac49c83bf08d9eb94621b42241f9eb8fd1e6fbf969d932a023760faa62c178b7f0a1d43adbf5c21a35a58d381442ecdfc2dcce2d11e5efae8433b14fc9fc28294ae76eaa95f38ac121f255d9b478c81a1caf5c606c34e6efa80dd3aa77cc4001b9fceebcc77a1efea7bf9f749f62c7a8bd5deb0f70c54ab5daab010cf14b2f1012516dc1639edb2d890638b73559d060be47f594f322efdd40c5945148fe1690585923488910fcb3159006f935f7d184e4b4c404ccb6e2a799cc67aa2b56a13c16e3ad92b85a12060881c1d140708ffece6965f9746ed4eef74d37424e760f4b266c80c93390523eadc65494962bed4efc86a0fead2fe25c9108c5d591770cee92f9ff2d916ba0dedc6551a47ce3a4dbc97043e588b3483f0793786fe9f32f1b79ba3f4c4ccabba52a59861c8024bcdfc8ecb0acc821160b060d5dc24f0ade14d08b56218a32a03f9eba729c02fc6b714bc72b11cc7fe47b51b3a174cfa2d8f5df80a0fd4d1dd2ed36b868b46ee5a8cc72e91b57bd05005b5142b5531650813fb5496af379f9e7b1b73c49c64dead9725af0742a41b770205390791de856715c0138ca22f134911a28d2caf22ef21049d1ba721d278bcf675317c5303cbaf96535414fd92c55d741120200d49729e01e399e4c30fa8da659654196af7991a3d294c775a610f242a56c88d542641036de7eccbd64f9f306a3920596d350637a6409f667110b46c6d85ab94df4d7b0af12318522ba1e745e7de45176789a53213b9b3d23b2599275e4f1858fdb2fd63f8c6f7990235e2fb3c4c8f215715973b60b1e56d1f061b6ff33510d08fa403559cbcc21bd141b41f1e9ab4e163a0f80a918ba13031c483931a9dcdb790ad77fbdf5634662cb75e79d986e4724f64c80203600df7ac9950330431b83777bd968a86be5698b13c37513235ac89a0a1dcb799112a86a2d96b1708e0c5e983756d8243927fc7d42be6ff4c946c0763a9745897726f38b65920363b7c32051bf9e770ab1ec140ff11fc639f36fa760afcfd6ba2f609df8cb0949f26119895b69c8ffd0836a01da1e407ba08f37a1144674f5a71b3499ffcccb21e75f19cdfb33c7eded5fa5c264784a78edc5f6de17da15317a66fea522b6e92a52efa5013797212d816c3229c7dd523e2165f9f042c3b3b16e608a1d87ab9c46c2b291bf547e1f4312913b16e39a714c24ebc5cb4f4f80bb20ce4efdf2921db45b7389fef98bd0e8aa40be16758b0d7755ab631b27c5d49225e84fea63e3f031c665851ef4ed18628b26445da2cad4741800cf72a401ad79a7462657068e0f2ee65eeb86da66890247cb45b31d3ad06ea7500eac5be65528c55bf190b0ec27673b67b36117344097a0dbb9db47a2b5144218002d14cbb98629c2ed35db5cdcf93994e3e3d1a1673ff60ec0d9bae1217ba6f39ae4ac4c9e5a19f85634f3091150c4724aaabe3bd1445cfa33fac93b86c5871ca168a728899e2e0062a596fba22b962764420f1268bb8ae0a894559c488cfce6b71aa8478964d2eef5086b2cee891ca031b6543bb7ba55006621f1d80e17abcba9f9d05fc5e61c6c4a890aba4b205f5570e7866ec4de380420c4758de63ff0f7b1acb0521e45cd9bc54df1a4614c04c524f43e86f58757eddb645bbc56a63de5bb560f56a31796dc344d58e2ff2d3fe5228d87c0439e6353943c92160fb847a172eea37ad0c22de5d1e7cd66730218832c87b73366131e29a1545b26d4c500a9afd75864b460cea1ba33a5dca6e5585e9c78a8ee3361f20e2b79489ed2ef1c935d7deeef6de0d009b72a0751929209b351331c0225c29341f5d476b278061a0a33c1e455815bbb83eebf5f5c3fe97c4b3df32846a094501a157196b6c1db1e05cec4f2dee823ebea7da05f5ee63aee1670128471465ae83defcf26aba78f18544146fcc9305ed5899965edbcf9f677c499a52d984db346c12faf02553338e6553488c29c9f3f4537a9437b5eb7382f95f9e844d27fa0b1ffc48d2b44e383b1fdb567b7f23863e8e10b6210f8031859cea410d52f99b5a8d2f218e7c92e231904b171dc077c636db15087cfb0ca6a2cd09f6b7973627a03ebfb4772daddc8ad7c9e534d8bc58cfc6d1305374b589a2a85c8a3c471c7408712ff5cfd7a50bee627d0417a5667dba71866320857cdb84e071a37e477f1b5ac16bdd464d8bf3ae31860ad19722bea1d85d1a5c09e1ab36dcd6c4bf524ed2137745e3562147081027d7852bee1ccc9563e4ff0ce72affa7002e9a066591ddf31abc4388281d98d2d88fa1c5f22cb60523e72e3d838fc6b0163fe0082ce0d8d59098363a174818113182d40cdb6367cb4a867c5aaa480c95f4a98439a2b58291fedcbfedfc3ebb41fe6b0a12fce36518ea6082fb919cdff23e3b40aa26eac8d634e03fc3a1e0fafe402c875709b15b622f35bfdd233ea8d7989ec38dfa1e5b5688d76c615b5efba62dd7d50be97b92f16c838edecd426e18dd270ddda42121d7ad8d26ec28df29580e6dcd7f968885d1cbc5f573efda890a408b45701bdf5cb2e3c54f8481710145ac1f5bdb1b53a1e9a7efd8a3ad7dad7bd0fa017e080854913beda2ccc95631a5c1da5c5afaa84bcc3f1a7041208fac9e09ef52140f142bed882b8988ea062cc8ecd7fd78fd33aeee8e8d5cc891514e3407fbb171e84e45fa14713e995513e16763424e356032ac81047c8e2bfe05dfecc510b55866d4a8696c91afd7b6b809fcf2e0f8a21834f43149d8e2b5dc5fddacb8ff9341376281e8f7d762fdb61a8e6536529b0d4d3cd8217fdb4f0b8341587737da7f50dbe4e5b7851a25d52066bd0e3ad11aed47ee02bec11d0f125cdee1f505cc5c1223d386b2fda556331cf57d8df433927cf12a5fbff853be266c5a64b6424f7b106931d312f0fd447206d21c1945579915e7e21627c7fc423a813823ce5fa2c6f3114303d0995c5706418a088535c62eda2a60c82b727c31177252f8ea025c16a3676ea0ccec24ea57e68c7e0f1b0e06f78a8ccead63eb4c0ef5c59b1d3a805644f8089e604a5bd3aa4494ff7fca02dd5894a6f02e572edd487af04ace3e37f19074325613d6f7d2af73062607b45a3c9365337a1c5e6bae9702a65f0a1b9ce75e43f6381efd9d610ad37532b62c6ab5957ded77a5d01604f67d7ccaa495266ab7fe161268b9a6156643ab6289fa0be75ac433a0204df164c02d3d0cb1b7bf0acd92ca8ff19b710b0b511820d0500fdf58f598fc611380a0f7dffce7bbc934edc967ba0094a0281750176748a4e2c99684c1c4a40258b0da77a0bfb9a4b808d5932443389f0f346dad998cee519624aeb07ea4446064282b1448bfa2e5ac3393d30b5c3865a8995869f69bab0747cfcbbd2bfd407c82e198da326f36be9a508e12d6d73fb262b37fcd7ff70b372c966b7198a9f2364012ff8127f200c079cb70d550f9483c1bf9fba69ebc961c989a82fc38cffe853e4738f33f1fa42fe7167e4bb79110f237d7e4989d2f6f4bd21905e491e2d4b6ac5a66025c11a93ab1eddcade3c3e78c270eaf6a0a6ed43df6e35bcaea9aa716d547d2136c2388379abf645e3f7cad1cc1fdc92b882729ff92b0612302970bd9ca7e36d76b2eb4d9dfe35116bb7771e448867e57026e622e1e54422b064fdb707fef339aa16fde808f622a7269b77c292c7e85fade6dcde475c2f61d71370209bc0e46ba7c7b71e41df246d283f5574205ca6b4819c63d97193eb084fd6b0c20b956cfc4b45b51fd46b2e034ff0f003179c7539fbc4e888c0633767604ed0f07beb4fe00f5a3b56ad9f3997cb49c7a8b92a719411b20874686a8a5ab462914baa85d016df99796a868af3dfa6ad98ceaaa18af2f2fad2ebf3dee1df8c8863e84ed83d6da5e283ca9cc385e0ded20531f127ff4aa974b91634d8f367154d3e23ebb04571a5a453d1265e873d00d40be7e1eb7e74529822b4c81d742c981a988fb786084cbd1e721358c7a1ea5293aa609773b890a5c9de4d1349588def4232d41fa5d7cfbc3dd130754891c304118a895268555874613e9c89c66bceea609e7ca1a914ea327db1f85a3809098e801289d8ab71997c2ad5bd1f3fd4b3c6b80667ac2b6b23b35018206dbf708284f0e0fac58d0b6d72c0d0034b6ed37b1f9931158f2443f045f65e33084ebc6aac93d8c0e3c1c52878dd3f54b9f88a40821090cdeb3bdbb61f0be16338a2a7ba0f77e9ecd5400b6f809a49eee78346c69e7ab560fcc32f2d19e665bb91fbc00e4c00838a1385d5156d1696f694027a9e6a7ef66933202012caca81c1b3ebe64976a9d000e28a6aae5d6f061c5acf8e4bca00bc5ecc547ab1664cdb2125300130a5a92abc0d36cf911fb3123034e925ea097fde14253dd3de52bf5c8a6bf01436c92dbbf5450a9b7775a981b09eab05406dae83f8ddcf898b1bace4b8487f0b4ec5b5316a9b7e3bcd6da41caa23604b3932ff3daf31bb19e74c687773bb54503f6b3ed74aef1410dc4a9a72fa05b1e120e682a7e7f9b8c7b6836fa9d8f96d16fa17975bc3dd7784f0d621d5a69038b0947d1cb47381c82c6df030fc8033dd66b380d884b12991ef5d5283e552f723aaf791bf3af581423c57b536b91e5a158695b68f7eccfd72fd2af1016e261ec863215d1df0fe756366e56fa86c4495cd9a45e83227af93a5b431c5d33fea2b3d469aab08f57b85b3a14a47d7da8ca74dae34f963cf660057466dac3937ce00060f8db8099178944aa37474a37eaef3b9ca04bd0eb1d03c25887d530cd690625f5829830851a6a58a7b411bc87aa70f26e80514799664e35c44db243d61add5bcaba3695e45e9f1a3cbf8ebdfb87571c44b9dcddc5fd422e94cbeb02bb58abd14e140829e12f7f0c7e3cc1a1bcae8429775e531710bfa504e103b17c20c329f653c015ab514fd6cf162b96d871930de99413e148fa58c1ff262a997c6ed1bc008912c6b864031dc95b5a3ad6aa3521167a62fe771baff828cafaf178539048d2e91a62ee7a50df04062422150347774db320fb535ddd4c03a8cdfc3affd253c200e1d5678ff12eb6f5bd43da636778cd2f8551295f4cbbc902322e491c5c10fee144daeaec4cc2a2f855f5312f4c8cac1155c8d3b93a5fe6a60118a0a9912b16d583582b478e4f05c375247d4cd897c49a8cfd2540833311039d9b121e5d5779d71b206d0d862b95e0eab28005f86ddd6ec514d931a521fc035eaacfd10ec5f97af541cabf08512f6c79e7e0db5217bd14aab6d3e9458018c3e59769bcb689347d7e394b469e9c9d9da2be8fc7a54b1aab301b68c1faf7ba7bfd05b8a313c902ad3733e523fd64739d9af110e39a96f1048fd6a43d13045ec71ff3d1f64a904f3878cb18f58b3b84942331ec05d3372a328a83e8aab828574313964f6f6c5af246faf2c69a95e9ceca77c0fbf303103a2d38ef6da2929a3dbccae5823f82d9a37c989154c8a760df8e7d8589daf1fd69683cadd2c7ac13e285a7661c23913912ee272797e3a0808654fd0b9f74f2fe04cb34167aa630b8aa58efc2586bef8c7c2e354d7c8d08de7d25a80b08bae8d2326d16a15d537d8baffcbbae460ce608ded63a45bdf0caf9dc335aa8d2aac03a62a9c6c62ce7c2caa9a731baa549d1880d3facdb4bee43ae27ccd5a22f143da8e7b4deb5c2a194d450eb5ff6949a950115d4e1d60fc75115346a0aaaf1400a301dcc8a04f9d2762c093f88adac799f6bd5150ca9c7d3ac1f728b88b1b0807a7407ad9b8febd89a801c9845af62bf2fc98aea4835d52871774e72b9fc07d26d55ef163833fd2f5c951ff963f43fcdaf03995cf3f14360b05be587e7a19fb760a944166b1fbd04c0d02bda8ff5d92a23c4e683db1b2823a6b02a16a7bc7963aaeeec43d97a85752fa439544127fb71d8b4fee6a09b966bc4e7be67acca35bfe4acabf18f6e9cc938c1e0af43e11754cbe7b37738019d9a162083f5f1fcdd9299921a349f1e0ee840b19fed4c0b5273d5e71ff5f1f20dbb36c89e1edbbef78de1a6229a2cd22bcf2164a1b567f7c08c6ba78ff2e53bc348dd2ab53b9deffc9cf8726feaf9cb07b4f94d189314da8c0005f3bb031e44c402339588832779790e814c707fdbe0830d53b4d35812f27e7709bee185d6d6d67a65382dcf56d567180a4a74cb05b0f7d0202bf33b88729f2bab7003264a2d67ea93d022baea74d7ca54a0081923a82e56750f22f58bc997ea57afe1bce18405383055745f0c6bfbbc514df76107b3c5d04bfe033dace72bd5bead25e736a0052b6efe7eb1153d1afe9202e227d60e4e38f5f294894d2ef9b89998194492e427442a18506e24ddcc1952354fe0250ad949be08a63b6c0e206ecbac70415c36f1bf78d7068ce8eb804561eab2540c6c984e63d1217de1242ae70a5dd457d7a96f24ad9e8a59c060a2a95e9e04a6a4429f40d47d2770e9d3ece295d748aa30a7bbd2aec570733be7855c3a789d71d94b3c86ccdd3cca3ddcb35a969e8c2d5b17ded6ab8b81b90a4206ac2ff163c04ba9886b5ec6138db5eb6ffc19201f66a1057858e564960de679b2996bb93c8d2b440fde169d1fbb5886fe673639c514c2eb8bca75f79abbb73c4a125e5f4d7d4ccd5c9fc85cedc9fe6f2b2b75ec384fa6ecec37579a70bd29b4c9893badb36e1b33cf61b07ee7d2a5550ac9f23b5fe629297efe94eb8a8c2adce65a61ddae84544fe8f81455e2d053fdf7efde38b92b0b4d3e7ff9d81f5de7d571cb4db7e059cbe1ac2153b22b57b4d45d58fa50d152efa2d85d262238ce4816e40f93b65f53b6646297f69e3dde4ae7c57e9112054cb831eca5716863196db7667674b00be7c83f900c944ea2bc8e8e6b6b335a6e9f63e6f6635f6afc0889355aa4f0b928b90f76e6f03b5d40e9a0cace6243aff4590c0ef255860401b16da288687e890b1921b8ba63860df7aad86279c89d16cc4ad1ef4633639f203724c1958fb3b6a990f555e8df8f494fbdae25b353c14fe524541347c1d7f61c349f55773575fab73df09ebd1c635ad5f93fc8e075093ec3fd8b832e5331e329c2578d1f6f7a0a44838e578fe40db7d11645c2c73e0a438a80085988294d98a4ef4c5faa593dd5a9b0dec12d8a6dfd15cc4503bb2078739f26f9c10d0b1fc2634094cfd2ff6bec88a7513debde5fcabb85fd31df8d97bcfaf247edb89cb056fc52bc06f117a3e1022a57817b9abe1793cf279e163212f501681eb9ef08e39adb9ba80ec3cd45f5ae7afc0c256a3470e8ed3ca41c5502c510f0526eab848ec5a7115a53741cf05846989b9b5fc6d2ad74fb855a852e3fc7234bb0ed8b6937167133925dbeb4313a9895860e761300a0695e03e81c2c1e3fe3f4b8c42c946b010259ffa4c1d345350020cddc8e9697fb83c22fff5190558551584368e7a270f958bc72e2624c3e45bbef318b5134f0419e725945e445993f2f176f0a21f5dba86398529fe5159d57c0d75d64f950763b52935e778b20356615409dcb088514eeba3f811e9ce6ce2bd1ba6ac932bd79f7a518959f99d52acbc2a1d0c02c70b9ea46d662d39c315b36315f4220e5dce293275050a3e6df506d0c1d7786017572cd758ba4995963fa034ecd49cadb42bb1ee280600557ce2e17488e1dd4595b8c7d4f20f420a3a01b6228d764c5069222cc93e2091fd2053f05a50eda7840c13f45c6e2a2fbc0f9de4baefb7b40ea1fb7e9d30fb1fdb8f20eafca0c7c8c61c57dfcb8e2836e8d0ce546e8e37b9fc467e1bbeab314be171573398e0c2fb032049a99acf174a857c019609e83010dda8da078a4311efcaaff62fa908dde87cec4d41078c343eec5a80c42d0146d57e9a14f2b5611be05e3b665728c14ea9536d146926fe1e8d5acf12afca415ef5ad77bdfead7ea087183962592296d3d892c64a0a3b9fc95b50f03df7f4f50f950b43a289af09ca92a01a684e5c649b8da4a3365878273a00afd14b4fa2ddaeea5007f728899ba9f5fc9d1d7893a489e56c5fb152e5f775042f4b3bab6cea9cbf9a2b91647fe3c62d3ae4b5d065460b51d51b6e91f2f4fe90a3775e6312ffc805612fee8c314ee70c92de3feefb3cda56a59ddba83757b0e85cb0ee7ad1ac608a1e6a64656d9f586afc38fd1f6474b521724532d88cd351688db077dc9d229a78f8704b21f85324bf9c697874cac5f709c6701a421ac368edda0ec3a0b90268c449acf753d7e8cab501ae3d7e04788e899ec54a2517545b68fd928fb659349e1692bdeccca648fd13a7602868c44e77ed6fd587538a74adc6acdb1ebd1816af88ece2ca64f2603428a0aa842fe86be6b2b568fd29c23433c9e3f9f0e45bd13beb22ac06eb82ae0eb2b3b328aca4abba5e72a155e2cc82ac92c4697fdb9439511c1144fe2ba36f516fa181f7f8d58af69f87a6c936d1e561fff0509819e65a681aaea445a106f8ff3dfd987e2e24e977281cb85cc5e5eb987da2d17e73dacfd9880bd14ecad13d5705643f926303b389a61fd63139577de263a5fdef1facdac0068a9471fc17ac654e88e0a0d12c8aca1e850b64a88f2382e0cf3a4e3363827a06abc1eeb87216e3447dfbf8c04080ca2fe1a08cc2e2001eb386cf02ac0d3b328bcf1de009d048a03cd955c628971c30a137dc66879cbe938390a8f63251f55e559549dd11969b637876a20bc7c6f5fe2b753923d2f0269f2082206eb2312f40654cc95bb38add159104495018a5aa7b8f5836162de9a03b6981c662f2ee02a168d530a002616c09c4cc26c2a2726711e3e25b4e3acb6dcba25fde78ecede51f01e22a2f79409c77011a599ff57d81e70dbde5fcbdc841f9af0e49e8200cd2d3c73013e0e5608ee1951ac04a111864b545e7bc2434c2474286519feaff4da07324d1b13bb16d1daa1d485bcd5466b82c9622f92664f1153d08c6e644b3d0f5902b4d749895f7763015bf0e2849703ed920a3866a260f22fe40f46c76ca6ca10ae8994505fa613a6b1aec84ee6620c25ca4d002f56ddd21b12eed5132634a3194281283fe5fdac07d2fec091dc0f748fe25c6b08cf8d4ff893e863a43c4c92fba47d86c8dfbbabbdca0cec09f732bc0b8df2a97ee7208e64512249300aa4c44c10d4c4503bd76e7b4e2c9aa2e274166ef103d5c832a760f33b5a0eae4dab922f0fec5adbf409bff956b4ce40e6157d498d46ae053f1ad73655bfb0a3dfac6b96c09bac4d07e6bd7f3ac6337f58cccc631466985f6ad680d21a5fe9a9bde4b6980c689e6e8c7a413b6e3084997c089443ffaca9be80c96ce1d9b6de074b4aecfd2db3b679a2d5cf0523aa14414699d481eace4aa397d818ff4d3e73d82031849c7e4f1f1503b636728637f87cf7a7df5472abfcb7e5d77439e1018dba49a41e1c8e63942fe0d1a426f390e8e225fee14501a34762b8d835ca14d6a3a3d8042724ea9e6b568fe0eb84306397ffa8345935e9be8642e6ffbd96e636fd16cacae5d4b88fd0aa0bfbba8221f68eabc98c67de6f9eab2cca07b096b458bbfdc7f1da0bb845a1a6e19c6da87a958acb1aad0b74d6537e97fb0673a20178cbb963f909839e49ec593ddcfc3046aa54c22e3a54148c440d1f2ba1fa7417572c629e48e6d2e07760a87581971d1edccc03c0e465d4d6321d820b3346fb516c1813585a6a8462124f91428a90ed037f40cd6f23596dc90c03825636e55a061838964213c70104ec0c5909a0c62240e93314f9b67ce8fafa115251282a6ee7a036a861d1af11919dbfa7ceb7b2260e66be6300a536e78ebdf60a6f022574b35205341f3557e409d8ecc0c2304b372605c9284aebe1b92f13051db78210df83873b0496625507cf8e1ee5e90aa66f45be75e388d6e0a021b8af3787ee06cd710719b4d06ca5ba5f87de812a660f939584ea880d3c71bc58135e612431850180ee39b707bd98aff26d2c5e4396b43daefd82b2ec1004978637b8d389cc415d628fea6f66f28664f9409448e68a2d48a0a00", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7ff, {0x5, 0x3, 0xdc, 0x5, 0x2, 0x6, {0x4, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0x7, 0x1, 0x8000, 0x4, r2, r3, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000008e80)="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", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0x4, {0x5, 0x3, 0x40000, 0x4000000000008, 0xfffffffd, 0x6, {0x2, 0x6, 0x8, 0x100000000000, 0x7, 0x81, 0x8, 0x6, 0x2008, 0x8000, 0xe44, r2, r3, 0x805, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x880cc2, 0x20) 628.313717ms ago: executing program 2 (id=252): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/uevent_helper', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000002e40)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="029e9cb2d433f8d9fc944ad0fbb8a9e92ff421", 0x13}], 0x1, 0x0, 0x0, 0x4}}], 0x1, 0x4000000) setsockopt$sock_int(r3, 0x1, 0x54, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000940)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f00000001c0)=0xe8) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, r5, 0x0) getgroups(0x8, &(0x7f0000000680)=[0xee00, 0xffffffffffffffff, 0xee00, 0xee01, 0xffffffffffffffff, 0xee01, 0xee00, 0xee00]) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000500)='./file0\x00', &(0x7f0000000580)='system.posix_acl_access\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000000000002000400", @ANYRES32=r5, @ANYBLOB="040001000000000008000c00", @ANYRES32=r6, @ANYBLOB="08000400", @ANYRES32=r7, @ANYBLOB="10000400000000002000060000000000"], 0x3c, 0x0) read(r3, &(0x7f00000003c0)=""/68, 0x44) sendfile(r1, r1, 0x0, 0x9) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) fcntl$getown(r8, 0x9) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000380)) getpid() sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000ec0)={0x50, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6558}, @NL80211_ATTR_FRAME={0x1e, 0x33, @data_frame={@a_msdu=@type01={{0x0, 0x2, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1}, {0xa76}, @broadcast, @initial, @initial, {0x7, 0x4}, "", @value={0x9, 0x1, 0x1, 0x1, 0x6}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) r12 = getpid() r13 = syz_pidfd_open(r12, 0x0) open_by_handle_at(r13, &(0x7f0000002580)=ANY=[@ANYBLOB='\f\x00'], 0x20002) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r14], 0x1c}}, 0x840) 473.223013ms ago: executing program 5 (id=253): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x41}, 0x10) sendmsg$tipc(r1, 0x0, 0x80) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write$vhost_msg(r2, &(0x7f00000002c0)={0x1, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x44) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)="94", 0x1}, {0x0}], 0x2) openat$ptp0(0xffffff9c, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="090000001400000008000000baab000042000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00o\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB], 0x50) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)={'#! ', '', [{0x20, ')'}]}, 0x6) writev(r4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x44, &(0x7f0000000000)={0x4d, 0x0}, 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 0s ago: executing program 2 (id=254): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0xe00}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) kernel console output (not intermixed with test programs): e permissive=1 [ 74.484904][ T5859] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22'. [ 75.221589][ T9] f81232 2-1:1.150: f81534a converter detected [ 75.252959][ T9] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 75.253005][ T9] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 75.387229][ T9] f81232 2-1:1.85: f81534a converter detected [ 75.394538][ T9] f81534a ttyUSB1: f81232_set_register failed status: -71 [ 75.394576][ T9] f81534a ttyUSB1: probe with driver f81534a failed with error -5 [ 75.414161][ T9] f81232 2-1:1.73: f81534a converter detected [ 75.420751][ T9] f81534a ttyUSB2: f81232_set_register failed status: -71 [ 75.426377][ T9] f81534a ttyUSB2: probe with driver f81534a failed with error -5 [ 75.449319][ T9] f81232 2-1:1.200: f81534a converter detected [ 75.460678][ T5880] capability: warning: `syz.4.26' uses deprecated v2 capabilities in a way that may be insecure [ 75.474882][ T9] f81534a ttyUSB3: f81232_set_register failed status: -71 [ 75.474914][ T9] f81534a ttyUSB3: probe with driver f81534a failed with error -5 [ 75.487347][ T9] usb 2-1: USB disconnect, device number 2 [ 75.537705][ T9] f81232 2-1:1.150: device disconnected [ 75.575657][ T9] f81232 2-1:1.85: device disconnected [ 75.619928][ T9] f81232 2-1:1.73: device disconnected [ 75.637950][ T9] f81232 2-1:1.200: device disconnected [ 75.936729][ T5748] usb 4-1: USB disconnect, device number 2 [ 76.021660][ T1598] cfg80211: failed to load regulatory.db [ 76.033136][ T9] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 76.204388][ T9] usb 2-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 76.220214][ T9] usb 2-1: config 4 has an invalid interface number: 44 but max is 0 [ 76.220249][ T9] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 76.220277][ T9] usb 2-1: config 4 has no interface number 0 [ 76.220310][ T9] usb 2-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 76.245306][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.245329][ T9] usb 2-1: Product: syz [ 76.245343][ T9] usb 2-1: Manufacturer: syz [ 76.245355][ T9] usb 2-1: SerialNumber: syz [ 76.790333][ T9] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 77.042709][ T25] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 77.046671][ T9] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 77.060123][ T9] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 77.076511][ T9] usb 2-1: media controller created [ 77.109137][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 77.286939][ T25] usb 3-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 77.298167][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.298225][ T25] usb 3-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 77.334637][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.334672][ T25] usb 3-1: Product: syz [ 77.334697][ T25] usb 3-1: Manufacturer: syz [ 77.334713][ T25] usb 3-1: SerialNumber: syz [ 77.337378][ T9] DVB: Unable to find symbol dib7000p_attach() [ 77.337389][ T9] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 77.388689][ T25] usb-storage 3-1:1.0: USB Mass Storage device detected [ 77.411758][ T25] usb-storage 3-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 77.422780][ T25] scsi host1: usb-storage 3-1:1.0 [ 77.565911][ T9] rc_core: IR keymap rc-dib0700-rc5 not found [ 77.565950][ T9] Registered IR keymap rc-empty [ 77.567022][ T9] dvb-usb: could not initialize remote control. [ 77.567032][ T9] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 77.598156][ T9] usb 2-1: USB disconnect, device number 3 [ 77.632413][ T5898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.149430][ T5911] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 78.356104][ T50] Bluetooth: hci5: Frame reassembly failed (-84) [ 78.367297][ T5898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.401046][ T10] usb 3-1: USB disconnect, device number 2 [ 78.424389][ T9] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 79.091499][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 79.091534][ T30] audit: type=1400 audit(1788337126.053:281): avc: denied { mount } for pid=5918 comm="syz.1.39" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 79.104412][ T5921] netlink: 12 bytes leftover after parsing attributes in process `syz.1.39'. [ 79.122386][ T30] audit: type=1400 audit(1788337126.063:282): avc: denied { nlmsg_write } for pid=5918 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 79.153276][ T30] audit: type=1400 audit(1788337126.103:283): avc: denied { prog_run } for pid=5918 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 79.209339][ T5924] netlink: 44 bytes leftover after parsing attributes in process `syz.1.39'. [ 79.234716][ T30] audit: type=1400 audit(1788337126.203:284): avc: denied { write } for pid=5919 comm="syz.2.40" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 79.272208][ T5925] jffs2: notice: (5925) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 79.307579][ T30] audit: type=1400 audit(1788337126.273:285): avc: denied { setopt } for pid=5918 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 79.318945][ T5923] bridge_slave_0: left allmulticast mode [ 79.318967][ T5923] bridge_slave_0: left promiscuous mode [ 79.320311][ T5923] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.464736][ T5928] netlink: 'syz.0.38': attribute type 10 has an invalid length. [ 79.535412][ T30] audit: type=1400 audit(1788337126.503:286): avc: denied { validate_trans } for pid=5922 comm="syz.0.38" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 79.614381][ T5923] bridge_slave_1: left allmulticast mode [ 79.614427][ T5923] bridge_slave_1: left promiscuous mode [ 79.614957][ T5923] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.655647][ T5923] bond0: (slave bond_slave_0): Releasing backup interface [ 79.694221][ T5923] bond0: (slave bond_slave_1): Releasing backup interface [ 79.707484][ T5932] netlink: ct_mark mask cannot be 0 [ 79.713553][ T5932] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 79.731978][ T5923] team0: Port device team_slave_0 removed [ 79.739689][ T30] audit: type=1400 audit(1788337126.703:287): avc: denied { unmount } for pid=5599 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 79.770637][ T5923] team0: Port device team_slave_1 removed [ 79.780871][ T5923] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.780914][ T5923] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.822278][ T5923] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.822316][ T5923] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.844483][ T5923] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 79.848566][ T5927] tipc: Started in network mode [ 79.848590][ T5927] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 79.848758][ T5927] tipc: Enabled bearer , priority 0 [ 79.860936][ T5928] syz_tun: entered promiscuous mode [ 79.875343][ T30] audit: type=1400 audit(1788337126.813:288): avc: denied { read write } for pid=5933 comm="syz.1.42" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 79.875382][ T30] audit: type=1400 audit(1788337126.813:289): avc: denied { open } for pid=5933 comm="syz.1.42" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 79.875413][ T30] audit: type=1400 audit(1788337126.833:290): avc: denied { bind } for pid=5933 comm="syz.1.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 79.889444][ T5928] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 79.893353][ T12] tipc: Resetting bearer [ 79.932048][ T5936] Bluetooth: MGMT ver 1.23 [ 79.947231][ T5935] ======================================================= [ 79.947231][ T5935] WARNING: The mand mount option has been deprecated and [ 79.947231][ T5935] and is ignored by this kernel. Remove the mand [ 79.947231][ T5935] option from the mount to silence this warning. [ 79.947231][ T5935] ======================================================= [ 80.025762][ T5937] fuse: Unknown parameter 'groip_id' [ 80.223346][ T5614] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 80.284633][ T5701] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 80.446042][ T5701] usb 2-1: Using ep0 maxpacket: 8 [ 80.447855][ T5701] usb 2-1: unable to get BOS descriptor or descriptor too short [ 80.447887][ T5701] usb 2-1: New USB device found, idVendor=0499, idProduct=89a4, bcdDevice=4f.cd [ 80.448690][ T5701] usb 2-1: config 2 has an invalid interface number: 232 but max is 0 [ 80.448709][ T5701] usb 2-1: config 2 has no interface number 0 [ 80.448737][ T5701] usb 2-1: config 2 interface 232 altsetting 128 endpoint 0x5 has invalid maxpacket 3917, setting to 1024 [ 80.448758][ T5701] usb 2-1: config 2 interface 232 altsetting 128 bulk endpoint 0x5 has invalid maxpacket 1024 [ 80.448778][ T5701] usb 2-1: config 2 interface 232 has no altsetting 0 [ 80.453942][ T5701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.453960][ T5701] usb 2-1: Product: syz [ 80.453971][ T5701] usb 2-1: Manufacturer: syz [ 80.453983][ T5701] usb 2-1: SerialNumber: syz [ 80.500593][ T5935] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 80.841185][ T5953] misc userio: No port type given on /dev/userio [ 80.856389][ T5956] misc userio: Invalid payload size [ 80.860701][ T5954] misc userio: The device must be registered before sending interrupts [ 80.896946][ T5797] tipc: Node number set to 11578026 [ 80.979256][ T5701] usb 2-1: USB disconnect, device number 4 [ 81.025722][ T5624] udevd[5624]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:2.232/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 81.390134][ T5966] 9p: Bad value for 'rfdno' [ 82.362986][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 82.852926][ T5701] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 83.004750][ T5701] usb 5-1: Using ep0 maxpacket: 32 [ 83.010464][ T5701] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 83.022109][ T5701] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.022147][ T5701] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.022188][ T5701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.064826][ T5701] usb 5-1: config 0 descriptor?? [ 83.713462][ T5701] ft260 0003:0403:6030.0001: unknown main item tag 0x0 [ 83.721513][ T5701] ft260 0003:0403:6030.0001: unknown main item tag 0x0 [ 83.819920][ T5991] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 83.819947][ T5991] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 83.838255][ T5991] vhci_hcd vhci_hcd.0: Device attached [ 83.886042][ T5701] ft260 0003:0403:6030.0001: chip code: 0000 0000 [ 84.082924][ T5797] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 84.112918][ T31] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 84.161119][ T5977] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 84.161157][ T5977] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 84.191480][ T5977] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 84.191513][ T5977] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 84.219634][ T5977] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 84.227051][ T5977] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 84.243735][ T5977] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 84.252083][ T5977] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 84.271144][ T5977] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 84.271175][ T5977] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 84.290738][ T31] usb 2-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice= 0.40 [ 84.303878][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.303913][ T31] usb 2-1: Product: syz [ 84.303939][ T31] usb 2-1: Manufacturer: 댵냚殩溠馕⑳⓴ꢩ騥ᯮ≓✘䍣䌹⬶謁ᕧ䇎လ濡弾畅ⳣ䏣ó㹽鿕褨㺈焋솗蠽䎚℗ [ 84.303983][ T31] usb 2-1: SerialNumber: syz [ 84.383564][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 84.390865][ T30] audit: type=1400 audit(1788337131.353:334): avc: denied { create } for pid=5976 comm="syz.4.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 84.411518][ T30] audit: type=1400 audit(1788337131.363:335): avc: denied { bind } for pid=5976 comm="syz.4.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 84.440585][ T30] audit: type=1400 audit(1788337131.403:336): avc: denied { write } for pid=5976 comm="syz.4.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 84.493035][ T5998] FAULT_INJECTION: forcing a failure. [ 84.493035][ T5998] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 84.506659][ T30] audit: type=1400 audit(1788337131.473:337): avc: denied { mount } for pid=5976 comm="syz.4.54" name="/" dev="autofs" ino=9074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 84.532163][ T5998] CPU: 1 UID: 0 PID: 5998 Comm: syz.0.58 Not tainted syzkaller #0 PREEMPT(full) [ 84.532190][ T5998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 84.532202][ T5998] Call Trace: [ 84.532209][ T5998] [ 84.532217][ T5998] dump_stack_lvl+0x100/0x190 [ 84.532251][ T5998] should_fail_ex.cold+0x5/0xa [ 84.532276][ T5998] ? prepare_alloc_pages+0x16d/0x5b0 [ 84.532301][ T5998] should_fail_alloc_page+0xeb/0x140 [ 84.532326][ T5998] prepare_alloc_pages+0x1f0/0x5b0 [ 84.532355][ T5998] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 84.532389][ T5998] ? lock_acquire+0x1d1/0x380 [ 84.532407][ T5998] ? page_table_check_set+0x11d/0x580 [ 84.532431][ T5998] ? find_held_lock+0x2b/0x80 [ 84.532456][ T5998] ? page_table_check_set+0x30f/0x580 [ 84.532478][ T5998] ? page_table_check_set+0x30f/0x580 [ 84.532505][ T5998] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 84.532533][ T5998] ? page_table_check_set+0x31e/0x580 [ 84.532560][ T5998] ? __page_table_check_ptes_set+0x1d5/0x530 [ 84.532586][ T5998] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 84.532613][ T5998] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 84.532640][ T5998] ? xas_find+0x32c/0x8e0 [ 84.532668][ T5998] ? find_held_lock+0x2b/0x80 [ 84.532692][ T5998] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 84.532717][ T5998] ? policy_nodemask+0xed/0x4f0 [ 84.532742][ T5998] alloc_pages_mpol+0x201/0x550 [ 84.532768][ T5998] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 84.532797][ T5998] folio_alloc_mpol_noprof+0x36/0x260 [ 84.532822][ T5998] vma_alloc_folio_noprof+0xed/0x1d0 [ 84.532846][ T5998] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 84.532879][ T5998] do_anonymous_page+0xac9/0x2050 [ 84.532912][ T5998] ? __pfx_do_anonymous_page+0x10/0x10 [ 84.532936][ T5998] ? rcu_read_unlock+0x2d/0xb0 [ 84.532961][ T5998] ? rcu_read_unlock+0x2d/0xb0 [ 84.532986][ T5998] ? __pte_offset_map+0x179/0x310 [ 84.533009][ T5998] __handle_mm_fault+0x1ff3/0x2f60 [ 84.533038][ T5998] ? lock_vma_under_rcu+0x11d/0x590 [ 84.533063][ T5998] ? __pfx___handle_mm_fault+0x10/0x10 [ 84.533098][ T5998] ? lock_vma_under_rcu+0x17c/0x590 [ 84.533138][ T5998] handle_mm_fault+0x363/0xa20 [ 84.533170][ T5998] do_user_addr_fault+0x59c/0x12f0 [ 84.533205][ T5998] exc_page_fault+0x6f/0xd0 [ 84.533225][ T5998] asm_exc_page_fault+0x26/0x30 [ 84.533241][ T5998] RIP: 0033:0x7f062de5f6cb [ 84.533259][ T5998] Code: 00 00 00 48 8d 3d 2d b1 1a 00 48 89 c1 31 c0 e8 0b 2e ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 61 b1 1a 00 48 89 34 24 48 8b 14 24 48 8b [ 84.533275][ T5998] RSP: 002b:00007f062ee8cfa0 EFLAGS: 00010206 [ 84.533304][ T5998] RAX: 0000000000000000 RBX: 00007f062e225fa0 RCX: 0000000000000000 [ 84.533316][ T5998] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000200000000180 [ 84.533326][ T5998] RBP: 00007f062e035024 R08: 0000000000000000 R09: 0000000000000000 [ 84.533337][ T5998] R10: 0000200000000180 R11: 0000000000000000 R12: 0000000000000000 [ 84.533348][ T5998] R13: 00007f062e226038 R14: 00007f062e225fa0 R15: 00007ffd90f59df8 [ 84.533372][ T5998] [ 84.604275][ T30] audit: type=1400 audit(1788337131.553:338): avc: denied { name_bind } for pid=5990 comm="syz.1.52" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 84.604314][ T30] audit: type=1400 audit(1788337131.553:339): avc: denied { node_bind } for pid=5990 comm="syz.1.52" saddr=255.255.255.255 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 84.621749][ T5992] vhci_hcd: connection closed [ 84.632578][ T1398] vhci_hcd vhci_hcd.1: stop threads [ 84.633778][ T1398] vhci_hcd vhci_hcd.1: release socket [ 84.636022][ T1398] vhci_hcd vhci_hcd.1: disconnect device [ 84.702942][ T5701] ft260 0003:0403:6030.0001: failed to retrieve system status [ 84.703338][ T5701] ft260 0003:0403:6030.0001: probe with driver ft260 failed with error -71 [ 84.741471][ T30] audit: type=1400 audit(1788337131.703:340): avc: denied { prog_load } for pid=6001 comm="syz.2.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 84.892667][ T31] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 84.949283][ T31] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 84.969809][ T5701] usb 5-1: USB disconnect, device number 2 [ 84.982014][ T31] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 84.990609][ T31] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 85.011280][ T31] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 85.079469][ T31] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 85.090348][ T31] usb 2-1: USB disconnect, device number 5 [ 85.159857][ T30] audit: type=1400 audit(1788337132.123:341): avc: denied { setopt } for pid=6001 comm="syz.2.59" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 85.159908][ T30] audit: type=1400 audit(1788337132.123:342): avc: denied { connect } for pid=6001 comm="syz.2.59" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 85.176154][ T5624] udevd[5624]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 85.325694][ T6009] netlink: 'syz.0.60': attribute type 10 has an invalid length. [ 85.454045][ T6009] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 86.014723][ T30] audit: type=1400 audit(1788337132.973:343): avc: denied { unmount } for pid=5600 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 86.197733][ T6014] GUP no longer grows the stack in syz.4.61 (6014): 200000006000-20000000a000 (200000002000) [ 86.197787][ T6014] CPU: 0 UID: 0 PID: 6014 Comm: syz.4.61 Not tainted syzkaller #0 PREEMPT(full) [ 86.197807][ T6014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 86.197817][ T6014] Call Trace: [ 86.197823][ T6014] [ 86.197829][ T6014] dump_stack_lvl+0x100/0x190 [ 86.197856][ T6014] gup_vma_lookup.cold+0x83/0x96 [ 86.197881][ T6014] __get_user_pages+0x252/0x2c30 [ 86.197904][ T6014] ? lock_acquire+0x1d1/0x380 [ 86.197921][ T6014] ? mtree_load+0xdc/0xb50 [ 86.197940][ T6014] ? __pfx___get_user_pages+0x10/0x10 [ 86.197955][ T6014] ? mtree_load+0x388/0xb50 [ 86.197972][ T6014] ? mtree_load+0x388/0xb50 [ 86.197998][ T6014] get_user_pages_remote+0x3d2/0xb10 [ 86.198018][ T6014] ? mas_prev_setup.constprop.0+0x980/0x9e0 [ 86.198056][ T6014] ? __pfx_get_user_pages_remote+0x10/0x10 [ 86.198085][ T6014] __access_remote_vm+0x3bb/0x890 [ 86.198112][ T6014] ? __pfx___access_remote_vm+0x10/0x10 [ 86.198128][ T6014] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 86.198156][ T6014] ? proc_pid_cmdline_read+0x31b/0x9a0 [ 86.198176][ T6014] ? proc_pid_cmdline_read+0x4aa/0x9a0 [ 86.198203][ T6014] proc_pid_cmdline_read+0x552/0x9a0 [ 86.198225][ T6014] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 86.198247][ T6014] ? rw_verify_area+0xce/0x6d0 [ 86.198271][ T6014] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 86.198289][ T6014] vfs_readv+0x5d8/0x8d0 [ 86.198317][ T6014] ? __pfx_vfs_readv+0x10/0x10 [ 86.198344][ T6014] ? lock_acquire+0x1d1/0x380 [ 86.198359][ T6014] ? __fget_files+0x34/0x3d0 [ 86.198385][ T6014] ? __fget_files+0x21f/0x3d0 [ 86.198408][ T6014] ? do_preadv+0x1ac/0x270 [ 86.198429][ T6014] do_preadv+0x1ac/0x270 [ 86.198453][ T6014] ? __pfx_do_preadv+0x10/0x10 [ 86.198482][ T6014] do_syscall_64+0x123/0x790 [ 86.198501][ T6014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.198518][ T6014] RIP: 0033:0x7fa20439e159 [ 86.198532][ T6014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.198546][ T6014] RSP: 002b:00007fa205318028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 86.198563][ T6014] RAX: ffffffffffffffda RBX: 00007fa204625fa0 RCX: 00007fa20439e159 [ 86.198573][ T6014] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000004 [ 86.198583][ T6014] RBP: 00007fa204435024 R08: 00000000fffffff9 R09: 0000000000000000 [ 86.198593][ T6014] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 86.198603][ T6014] R13: 00007fa204626038 R14: 00007fa204625fa0 R15: 00007ffe3e45da28 [ 86.198625][ T6014] [ 86.524223][ T6016] batman_adv: batadv0: Adding interface: veth0 [ 86.524251][ T6016] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.524287][ T6016] batman_adv: batadv0: Interface activated: veth0 [ 86.564895][ T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.732929][ T31] usb 1-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 86.747180][ T31] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 86.766365][ T31] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 86.790148][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.790186][ T31] usb 1-1: Product: syz [ 86.790213][ T31] usb 1-1: Manufacturer: syz [ 86.790229][ T31] usb 1-1: SerialNumber: syz [ 86.853257][ T31] ti_usb_3410_5052 1-1:2.0: TI USB 5052 2 port adapter converter detected [ 86.893281][ T31] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 86.912459][ T31] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 86.931722][ T1264] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.196149][ T1264] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.232532][ T6029] warning: `syz.4.70' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 87.320326][ T5614] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.330356][ T5614] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.338553][ T5614] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.351476][ T5614] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.359106][ T5614] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.377033][ T5608] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.385179][ T5608] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.391607][ T1264] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.392404][ T5608] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.416331][ T5608] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.425466][ T5608] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.274875][ T1264] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.759321][ T1264] bridge_slave_1: left allmulticast mode [ 88.766358][ T1264] bridge_slave_1: left promiscuous mode [ 88.776968][ T1264] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.810826][ T1264] bridge_slave_0: left allmulticast mode [ 88.819866][ T1264] bridge_slave_0: left promiscuous mode [ 88.825982][ T1264] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.178908][ T5797] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 89.183733][ T6012] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send start command, -110 [ 89.196722][ T1598] usb 1-1: USB disconnect, device number 2 [ 89.222583][ T1264] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.231522][ T1598] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 89.270923][ T1264] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.273880][ T1598] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 89.274519][ T1598] ti_usb_3410_5052 1-1:2.0: device disconnected [ 89.301317][ T1264] bond0 (unregistering): Released all slaves [ 89.504465][ T5608] Bluetooth: hci0: command tx timeout [ 89.546409][ T30] kauditd_printk_skb: 74 callbacks suppressed [ 89.549215][ T30] audit: type=1400 audit(1788337136.513:418): avc: denied { mount } for pid=6071 comm="syz.2.76" name="/" dev="ramfs" ino=10281 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 89.605803][ T5265] 8021q: adding VLAN 0 to HW filter on device eth1 [ 90.063825][ T30] audit: type=1400 audit(1788337137.023:419): avc: denied { map } for pid=6087 comm="syz.2.79" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 90.115343][ T1264] hsr_slave_0: left promiscuous mode [ 90.121617][ T1264] hsr_slave_1: left promiscuous mode [ 90.122272][ T1264] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.122301][ T1264] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.142968][ T31] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 90.152658][ T1264] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.160195][ T1264] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.182765][ T1264] veth1_macvtap: left promiscuous mode [ 90.183396][ T1264] veth0_macvtap: left promiscuous mode [ 90.183499][ T1264] veth1_vlan: left promiscuous mode [ 90.183570][ T1264] veth0_vlan: left promiscuous mode [ 90.222063][ T30] audit: type=1400 audit(1788337137.183:420): avc: denied { write } for pid=6077 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.303025][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 90.309010][ T31] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 90.320848][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.320889][ T31] usb 1-1: config 0 interface 0 has no altsetting 0 [ 90.343636][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.343668][ T31] usb 1-1: Product: syz [ 90.343693][ T31] usb 1-1: Manufacturer: syz [ 90.343709][ T31] usb 1-1: SerialNumber: syz [ 90.368145][ T31] usb 1-1: config 0 descriptor?? [ 90.442351][ T30] audit: type=1400 audit(1788337137.403:421): avc: denied { write } for pid=6096 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.587940][ T6084] sock: sock_timestamping_bind_phc: sock not bind to device [ 90.602591][ T31] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 90.610930][ T31] imon 1-1:0.0: unable to initialize intf0, err -19 [ 90.617665][ T31] imon:imon_probe: failed to initialize context! [ 90.625114][ T31] imon 1-1:0.0: unable to register, err -19 [ 90.756697][ T1264] team0 (unregistering): Port device team_slave_1 removed [ 90.799640][ T1264] team0 (unregistering): Port device team_slave_0 removed [ 90.928842][ T6084] netlink: 'syz.0.78': attribute type 13 has an invalid length. [ 90.928871][ T6084] netlink: 'syz.0.78': attribute type 17 has an invalid length. [ 91.582858][ T5608] Bluetooth: hci0: command tx timeout [ 91.789785][ T5265] 8021q: adding VLAN 0 to HW filter on device eth2 [ 92.206316][ T30] audit: type=1400 audit(1788337139.173:422): avc: denied { getopt } for pid=6082 comm="syz.0.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 92.265153][ T6084] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 92.911680][ T5614] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 92.923742][ T5614] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 92.932244][ T5614] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 92.940962][ T5614] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 92.941441][ T5614] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 93.007916][ T6121] netlink: 176 bytes leftover after parsing attributes in process `syz.2.83'. [ 93.243315][ T30] audit: type=1400 audit(1788337140.213:423): avc: denied { read write } for pid=6129 comm="syz.2.84" name="uinput" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 93.243375][ T30] audit: type=1400 audit(1788337140.213:424): avc: denied { open } for pid=6129 comm="syz.2.84" path="/dev/uinput" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 93.254180][ T30] audit: type=1400 audit(1788337140.213:425): avc: denied { ioctl } for pid=6129 comm="syz.2.84" path="/dev/uinput" dev="devtmpfs" ino=919 ioctlcmd=0x662c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 93.275134][ T6132] input: syz1 as /devices/virtual/input/input6 [ 93.336921][ T50] IPVS: starting estimator thread 0... [ 93.415759][ T6139] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 93.425276][ T6132] netlink: 20 bytes leftover after parsing attributes in process `syz.2.84'. [ 93.425301][ T6132] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 93.434616][ T6137] IPVS: using max 44 ests per chain, 105600 per kthread [ 93.441979][ T6031] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.442046][ T6031] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.466977][ T6031] bridge_slave_0: entered allmulticast mode [ 93.476244][ T6031] bridge_slave_0: entered promiscuous mode [ 93.480769][ T30] audit: type=1400 audit(1788337140.443:426): avc: denied { write } for pid=6111 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.507534][ T6031] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.514811][ T6031] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.522044][ T6031] bridge_slave_1: entered allmulticast mode [ 93.530853][ T6031] bridge_slave_1: entered promiscuous mode [ 93.676097][ T5608] Bluetooth: hci0: command tx timeout [ 93.738244][ T1264] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.772434][ T6147] syz.4.85 uses obsolete (PF_INET,SOCK_PACKET) [ 93.781264][ T30] audit: type=1400 audit(1788337140.743:427): avc: denied { allowed } for pid=6144 comm="syz.2.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 93.817093][ T1598] usb 1-1: USB disconnect, device number 3 [ 93.944565][ T6031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.958853][ T6031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.085870][ T1264] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.103381][ T5265] 8021q: adding VLAN 0 to HW filter on device eth3 [ 94.117352][ T6031] team0: Port device team_slave_0 added [ 94.125455][ T6031] team0: Port device team_slave_1 added [ 94.180723][ T6031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.180750][ T6031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.180769][ T6031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.181942][ T6031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.181951][ T6031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.181968][ T6031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.281276][ T1264] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.357548][ T6031] hsr_slave_0: entered promiscuous mode [ 94.366159][ T6031] hsr_slave_1: entered promiscuous mode [ 94.373198][ T6031] debugfs: 'hsr0' already exists in 'hsr' [ 94.373223][ T6031] Cannot create hsr debugfs directory [ 94.404094][ T1264] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.022872][ T5608] Bluetooth: hci5: command tx timeout [ 95.149997][ T1264] bridge_slave_1: left allmulticast mode [ 95.150033][ T1264] bridge_slave_1: left promiscuous mode [ 95.150197][ T1264] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.179912][ T1264] bridge_slave_0: left allmulticast mode [ 95.179941][ T1264] bridge_slave_0: left promiscuous mode [ 95.180102][ T1264] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.365459][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 95.365518][ T30] audit: type=1400 audit(1788337142.333:431): avc: denied { write } for pid=6162 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.763009][ T5608] Bluetooth: hci0: command tx timeout [ 95.810571][ T30] audit: type=1400 audit(1788337142.773:432): avc: denied { write } for pid=6184 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.154768][ T6203] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 96.154793][ T6203] CPU: 1 UID: 0 PID: 6203 Comm: syz.2.90 Not tainted syzkaller #0 PREEMPT(full) [ 96.154808][ T6203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 96.154814][ T6203] Call Trace: [ 96.154819][ T6203] [ 96.154824][ T6203] dump_stack_lvl+0x100/0x190 [ 96.154844][ T6203] sysfs_warn_dup.cold+0x1c/0x28 [ 96.154862][ T6203] sysfs_create_dir_ns+0x24b/0x2b0 [ 96.154877][ T6203] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 96.154891][ T6203] ? find_held_lock+0x2b/0x80 [ 96.154906][ T6203] ? kobject_add_internal+0x25f/0x930 [ 96.154921][ T6203] ? kobject_add_internal+0x25f/0x930 [ 96.154939][ T6203] ? class_dir_child_ns_type+0xd/0x60 [ 96.154954][ T6203] kobject_add_internal+0x2c8/0x930 [ 96.154972][ T6203] kobject_add+0x16a/0x1e0 [ 96.154987][ T6203] ? __pfx_kobject_add+0x10/0x10 [ 96.155002][ T6203] ? get_device_parent+0x1b3/0x4c0 [ 96.155014][ T6203] ? kobject_put+0xb9/0x640 [ 96.155031][ T6203] device_add+0x294/0x1970 [ 96.155043][ T6203] ? lockdep_init_map_type+0x5c/0x250 [ 96.155055][ T6203] ? __pfx_device_add+0x10/0x10 [ 96.155066][ T6203] ? lockdep_init_map_type+0x5c/0x250 [ 96.155077][ T6203] ? __init_waitqueue_head+0xca/0x150 [ 96.155093][ T6203] tty_register_device_attr+0x388/0x7f0 [ 96.155111][ T6203] ? lockdep_init_map_type+0x5c/0x250 [ 96.155123][ T6203] ? __pfx_tty_register_device_attr+0x10/0x10 [ 96.155143][ T6203] ? tty_port_init+0x156/0x1c0 [ 96.155155][ T6203] gsm_activate_mux+0x155/0x2a0 [ 96.155167][ T6203] gsmld_ioctl+0xbbc/0x15c0 [ 96.155183][ T6203] ? __pfx_gsmld_ioctl+0x10/0x10 [ 96.155207][ T6203] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 96.155220][ T6203] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 96.155236][ T6203] ? __pfx_gsmld_ioctl+0x10/0x10 [ 96.155248][ T6203] tty_ioctl+0x11b4/0x1640 [ 96.155258][ T6203] ? __pfx_tty_ioctl+0x10/0x10 [ 96.155267][ T6203] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 96.155286][ T6203] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 96.155305][ T6203] ? __fget_files+0x34/0x3d0 [ 96.155325][ T6203] ? selinux_file_ioctl+0x13b/0x290 [ 96.155342][ T6203] ? selinux_file_ioctl+0xb6/0x290 [ 96.155359][ T6203] ? __pfx_tty_ioctl+0x10/0x10 [ 96.155369][ T6203] __x64_sys_ioctl+0x18e/0x210 [ 96.155394][ T6203] do_syscall_64+0x123/0x790 [ 96.155416][ T6203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.155436][ T6203] RIP: 0033:0x7fce9839e159 [ 96.155447][ T6203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.155457][ T6203] RSP: 002b:00007fce991f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 96.155468][ T6203] RAX: ffffffffffffffda RBX: 00007fce98626180 RCX: 00007fce9839e159 [ 96.155476][ T6203] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000006 [ 96.155483][ T6203] RBP: 00007fce98435024 R08: 0000000000000000 R09: 0000000000000000 [ 96.155490][ T6203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.155497][ T6203] R13: 00007fce98626218 R14: 00007fce98626180 R15: 00007ffc60bb1d28 [ 96.155511][ T6203] [ 96.155742][ T6203] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 96.241039][ T6203] binder: 6198:6203 ioctl c018643a 200000000140 returned -22 [ 96.610646][ T30] audit: type=1400 audit(1788337143.433:433): avc: denied { bind } for pid=6198 comm="syz.2.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 96.875994][ T30] audit: type=1400 audit(1788337143.813:434): avc: denied { map } for pid=6199 comm="syz.0.91" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 97.110021][ T5608] Bluetooth: hci5: command tx timeout [ 97.240872][ T1264] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.284955][ T1264] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.322623][ T1264] bond0 (unregistering): Released all slaves [ 97.392739][ T5265] 8021q: adding VLAN 0 to HW filter on device eth4 [ 97.728217][ T30] audit: type=1400 audit(1788337144.693:435): avc: denied { map } for pid=6217 comm="syz.0.93" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 98.214706][ T30] audit: type=1400 audit(1788337145.183:436): avc: denied { listen } for pid=6226 comm="syz.4.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 98.696215][ T30] audit: type=1400 audit(1788337145.663:437): avc: denied { write } for pid=6230 comm="syz.0.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 98.771059][ T1264] hsr_slave_0: left promiscuous mode [ 98.780031][ T1264] hsr_slave_1: left promiscuous mode [ 98.780713][ T1264] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.780741][ T1264] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.842908][ T1264] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.850637][ T1264] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.895360][ T1264] veth1_macvtap: left promiscuous mode [ 98.895406][ T1264] veth0_macvtap: left promiscuous mode [ 98.895516][ T1264] veth1_vlan: left promiscuous mode [ 98.895574][ T1264] veth0_vlan: left promiscuous mode [ 98.923808][ T6249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.98'. [ 98.947652][ T30] audit: type=1400 audit(1788337145.913:438): avc: denied { block_suspend } for pid=6245 comm="syz.0.99" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 99.143060][ T9] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 99.145290][ T30] audit: type=1400 audit(1788337146.113:439): avc: denied { write } for pid=6239 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.182989][ T5608] Bluetooth: hci5: command tx timeout [ 99.212515][ T1264] team0 (unregistering): Port device team_slave_1 removed [ 99.236103][ T1264] team0 (unregistering): Port device team_slave_0 removed [ 99.247054][ T30] audit: type=1400 audit(1788337146.213:440): avc: denied { write } for pid=6261 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.309272][ T9] usb 3-1: New USB device found, idVendor=07fd, idProduct=c104, bcdDevice=ec.c2 [ 99.309325][ T9] usb 3-1: too many configurations: 30, using maximum allowed: 8 [ 99.310656][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 99.310682][ T9] usb 3-1: can't read configurations, error -61 [ 99.362742][ T6119] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.368847][ T6119] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.368945][ T6119] bridge_slave_0: entered allmulticast mode [ 99.370127][ T6119] bridge_slave_0: entered promiscuous mode [ 99.372105][ T6119] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.372168][ T6119] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.372243][ T6119] bridge_slave_1: entered allmulticast mode [ 99.374171][ T6119] bridge_slave_1: entered promiscuous mode [ 99.381015][ T6249] bridge1: entered promiscuous mode [ 99.381031][ T6249] bridge1: entered allmulticast mode [ 99.387476][ T6249] team0: Port device bridge1 added [ 99.387961][ T6250] bridge0: port 3(team0) entered blocking state [ 99.388024][ T6250] bridge0: port 3(team0) entered disabled state [ 99.388472][ T6250] team0: entered allmulticast mode [ 99.388486][ T6250] team_slave_0: entered allmulticast mode [ 99.388508][ T6250] team_slave_1: entered allmulticast mode [ 99.391286][ T6250] team0: entered promiscuous mode [ 99.391300][ T6250] team_slave_0: entered promiscuous mode [ 99.391478][ T6250] team_slave_1: entered promiscuous mode [ 99.395946][ T6250] bridge0: port 3(team0) entered blocking state [ 99.396042][ T6250] bridge0: port 3(team0) entered forwarding state [ 99.436216][ T9] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 99.445929][ T5265] 8021q: adding VLAN 0 to HW filter on device eth5 [ 99.452606][ T6031] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 99.489935][ T6031] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 99.490511][ T6031] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 99.526095][ T6031] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 99.563922][ T6031] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 99.572230][ T6264] fuse: Bad value for 'fd' [ 99.577041][ T6031] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 99.579426][ T6031] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 99.583491][ T9] usb 3-1: New USB device found, idVendor=07fd, idProduct=c104, bcdDevice=ec.c2 [ 99.583520][ T9] usb 3-1: too many configurations: 30, using maximum allowed: 8 [ 99.586621][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 99.586645][ T9] usb 3-1: can't read configurations, error -61 [ 99.586851][ T9] usb usb3-port1: attempt power cycle [ 99.589344][ T6031] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 99.652437][ T6119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.688945][ T6119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.742316][ T6119] team0: Port device team_slave_0 added [ 99.750784][ T6119] team0: Port device team_slave_1 added [ 99.781031][ T6119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.789315][ T6119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.816293][ T6119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.832381][ T6119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.832414][ T6119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.832434][ T6119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.920524][ T6119] hsr_slave_0: entered promiscuous mode [ 99.921237][ T6119] hsr_slave_1: entered promiscuous mode [ 99.921674][ T6119] debugfs: 'hsr0' already exists in 'hsr' [ 99.921688][ T6119] Cannot create hsr debugfs directory [ 99.922956][ T9] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 99.943833][ T9] usb 3-1: New USB device found, idVendor=07fd, idProduct=c104, bcdDevice=ec.c2 [ 99.943864][ T9] usb 3-1: too many configurations: 30, using maximum allowed: 8 [ 99.945015][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 99.945038][ T9] usb 3-1: can't read configurations, error -61 [ 99.975924][ T31] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 100.026856][ T6031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.073193][ T9] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 100.094079][ T9] usb 3-1: New USB device found, idVendor=07fd, idProduct=c104, bcdDevice=ec.c2 [ 100.094128][ T9] usb 3-1: too many configurations: 30, using maximum allowed: 8 [ 100.095311][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 100.095337][ T9] usb 3-1: can't read configurations, error -61 [ 100.095671][ T9] usb usb3-port1: unable to enumerate USB device [ 100.098539][ T6031] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.108073][ T1386] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.108144][ T1386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.118170][ T1264] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.118241][ T1264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.141295][ T31] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 100.172321][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.172345][ T31] usb 1-1: config 0 has no interfaces? [ 100.198110][ T31] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 100.198133][ T31] usb 1-1: Product: syz [ 100.208276][ T31] usb 1-1: config 0 descriptor?? [ 100.349948][ T6119] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 100.368293][ T6119] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.369037][ T6119] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 100.380081][ T6119] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.388197][ T6119] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 100.406840][ T6119] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.409667][ T6119] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 100.418853][ T6119] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.450539][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 100.450583][ T30] audit: type=1400 audit(1788337147.413:445): avc: denied { write } for pid=6292 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.567054][ T6119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.591556][ T5265] 8021q: adding VLAN 0 to HW filter on device eth6 [ 100.599960][ T6119] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.626551][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.626635][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.642520][ T1007] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.642588][ T1007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.817988][ T6311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.818299][ T6311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.981560][ T6031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.263456][ T5608] Bluetooth: hci5: command tx timeout [ 101.338751][ T30] audit: type=1400 audit(1788337148.303:446): avc: denied { write } for pid=6310 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.450388][ T6119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.485927][ T6031] veth0_vlan: entered promiscuous mode [ 101.502656][ T30] audit: type=1400 audit(1788337148.463:447): avc: denied { write } for pid=6342 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.508173][ T6031] veth1_vlan: entered promiscuous mode [ 101.578603][ T6031] veth0_macvtap: entered promiscuous mode [ 101.589091][ T6031] veth1_macvtap: entered promiscuous mode [ 101.618505][ T6031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.631943][ T6031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.646912][ T5265] 8021q: adding VLAN 0 to HW filter on device eth7 [ 101.702970][ T1007] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.703629][ T1007] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.703656][ T1007] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.737143][ T1398] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.858088][ T30] audit: type=1326 audit(1788337148.823:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6351 comm="syz.4.103" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa20439e159 code=0x0 [ 101.904014][ T1264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.904054][ T1264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.980571][ T6359] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 102.103607][ T1007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.103637][ T1007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.166145][ T30] audit: type=1400 audit(1788337149.133:449): avc: denied { mounton } for pid=6031 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 102.180536][ T6119] veth0_vlan: entered promiscuous mode [ 102.215983][ T6119] veth1_vlan: entered promiscuous mode [ 102.305464][ T6119] veth0_macvtap: entered promiscuous mode [ 102.314051][ T30] audit: type=1400 audit(1788337149.273:450): avc: denied { write } for pid=6350 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.327214][ T6119] veth1_macvtap: entered promiscuous mode [ 102.397228][ T6119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.428717][ T6119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.464413][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.474184][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.555652][ T30] audit: type=1400 audit(1788337149.523:451): avc: denied { write } for pid=6376 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.614249][ T1386] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.614304][ T1386] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.719855][ T5265] 8021q: adding VLAN 0 to HW filter on device eth8 [ 102.722651][ T5717] usb 1-1: USB disconnect, device number 4 [ 102.758492][ T1007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.758514][ T1007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.014713][ T30] audit: type=1400 audit(1788337149.983:452): avc: denied { create } for pid=6390 comm="syz.4.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 103.037580][ T30] audit: type=1400 audit(1788337150.003:453): avc: denied { setopt } for pid=6390 comm="syz.4.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 103.066527][ T30] audit: type=1400 audit(1788337150.033:454): avc: denied { accept } for pid=6390 comm="syz.4.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 103.129555][ T1386] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.129589][ T1386] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.090456][ T6403] EXT4-fs (sda1): resizing filesystem from 262144 to 1 blocks [ 104.090482][ T6403] EXT4-fs warning (device sda1): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 105.257022][ T6431] ucma_write: process 6 (syz.6.118) changed security contexts after opening file descriptor, this is not allowed. [ 105.582770][ T6436] binder: 6434:6436 ioctl d000943e 2000000009c0 returned -22 [ 105.624597][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 105.631810][ T30] audit: type=1400 audit(1788337152.593:464): avc: denied { kexec_image_load } for pid=6435 comm="syz.0.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 105.883028][ T30] audit: type=1400 audit(1788337152.813:465): avc: denied { setopt } for pid=6435 comm="syz.0.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 106.290961][ T6444] sock: sock_timestamping_bind_phc: sock not bind to device [ 106.381524][ T6445] netlink: 'syz.5.114': attribute type 13 has an invalid length. [ 106.381552][ T6445] netlink: 'syz.5.114': attribute type 17 has an invalid length. [ 106.555994][ T31] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 106.704076][ T31] usb 6-1: device descriptor read/64, error -71 [ 106.999709][ T31] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 107.007267][ T5797] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 107.095261][ T6468] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 107.141828][ T6468] CPU: 0 UID: 0 PID: 6468 Comm: syz.6.124 Not tainted syzkaller #0 PREEMPT(full) [ 107.141855][ T6468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 107.141866][ T6468] Call Trace: [ 107.141873][ T6468] [ 107.141881][ T6468] dump_stack_lvl+0x100/0x190 [ 107.141913][ T6468] sysfs_warn_dup.cold+0x1c/0x28 [ 107.141940][ T6468] sysfs_create_dir_ns+0x24b/0x2b0 [ 107.141963][ T6468] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 107.141985][ T6468] ? find_held_lock+0x2b/0x80 [ 107.142009][ T6468] ? kobject_add_internal+0x25f/0x930 [ 107.142035][ T6468] ? kobject_add_internal+0x25f/0x930 [ 107.142063][ T6468] ? class_dir_child_ns_type+0xd/0x60 [ 107.142087][ T6468] kobject_add_internal+0x2c8/0x930 [ 107.142117][ T6468] kobject_add+0x16a/0x1e0 [ 107.142144][ T6468] ? __pfx_kobject_add+0x10/0x10 [ 107.142171][ T6468] ? get_device_parent+0x1b3/0x4c0 [ 107.142189][ T6468] ? kobject_put+0xb9/0x640 [ 107.142217][ T6468] device_add+0x294/0x1970 [ 107.142239][ T6468] ? lockdep_init_map_type+0x5c/0x250 [ 107.142259][ T6468] ? __pfx_device_add+0x10/0x10 [ 107.142279][ T6468] ? lockdep_init_map_type+0x5c/0x250 [ 107.142300][ T6468] ? __init_waitqueue_head+0xca/0x150 [ 107.142329][ T6468] tty_register_device_attr+0x388/0x7f0 [ 107.142367][ T6468] ? lockdep_init_map_type+0x5c/0x250 [ 107.142388][ T6468] ? __pfx_tty_register_device_attr+0x10/0x10 [ 107.142425][ T6468] ? tty_port_init+0x156/0x1c0 [ 107.142448][ T6468] gsm_activate_mux+0x155/0x2a0 [ 107.142471][ T6468] gsmld_ioctl+0xbbc/0x15c0 [ 107.142500][ T6468] ? __pfx_gsmld_ioctl+0x10/0x10 [ 107.142542][ T6468] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 107.142564][ T6468] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 107.142595][ T6468] ? __pfx_gsmld_ioctl+0x10/0x10 [ 107.142617][ T6468] tty_ioctl+0x11b4/0x1640 [ 107.142635][ T6468] ? __pfx_tty_ioctl+0x10/0x10 [ 107.142651][ T6468] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 107.142684][ T6468] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 107.142718][ T6468] ? __fget_files+0x34/0x3d0 [ 107.142751][ T6468] ? selinux_file_ioctl+0x13b/0x290 [ 107.142779][ T6468] ? selinux_file_ioctl+0xb6/0x290 [ 107.142807][ T6468] ? __pfx_tty_ioctl+0x10/0x10 [ 107.142825][ T6468] __x64_sys_ioctl+0x18e/0x210 [ 107.142856][ T6468] do_syscall_64+0x123/0x790 [ 107.142880][ T6468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.142899][ T6468] RIP: 0033:0x7f671fd9e159 [ 107.142916][ T6468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.142934][ T6468] RSP: 002b:00007f6720cae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 107.142954][ T6468] RAX: ffffffffffffffda RBX: 00007f6720026180 RCX: 00007f671fd9e159 [ 107.142966][ T6468] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000006 [ 107.142978][ T6468] RBP: 00007f671fe35024 R08: 0000000000000000 R09: 0000000000000000 [ 107.142989][ T6468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.143000][ T6468] R13: 00007f6720026218 R14: 00007f6720026180 R15: 00007ffd66f7c2c8 [ 107.143026][ T6468] [ 107.186616][ T6468] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 107.273316][ T5797] usb 3-1: Using ep0 maxpacket: 8 [ 107.274219][ T5797] usb 3-1: New USB device found, idVendor=10f5, idProduct=0200, bcdDevice= 0.40 [ 107.278079][ T5797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.278098][ T5797] usb 3-1: Product: syz [ 107.278119][ T5797] usb 3-1: Manufacturer: syz [ 107.278132][ T5797] usb 3-1: SerialNumber: syz [ 107.308083][ T6470] binder: 6461:6470 ioctl c018643a 200000000140 returned -22 [ 107.322879][ T31] usb 6-1: device descriptor read/64, error -71 [ 107.443105][ T31] usb usb6-port1: attempt power cycle [ 107.782890][ T31] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 107.803327][ T31] usb 6-1: device descriptor read/8, error -71 [ 108.052908][ T31] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 108.073979][ T31] usb 6-1: device descriptor read/8, error -71 [ 108.183096][ T31] usb usb6-port1: unable to enumerate USB device [ 109.712999][ T5797] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 109.780527][ T5797] usb 3-1: USB disconnect, device number 7 [ 109.928349][ T25] bridge0: entered promiscuous mode [ 110.103422][ T5603] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 110.245193][ T6494] netlink: 68 bytes leftover after parsing attributes in process `syz.4.131'. [ 110.273919][ T6494] netlink: 32 bytes leftover after parsing attributes in process `syz.4.131'. [ 110.283064][ T5603] usb 1-1: Using ep0 maxpacket: 32 [ 110.285098][ T30] audit: type=1400 audit(1788337157.243:466): avc: denied { create } for pid=6485 comm="syz.2.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 110.315571][ T5603] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 110.336668][ T5603] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.336700][ T5603] usb 1-1: Product: syz [ 110.336725][ T5603] usb 1-1: Manufacturer: syz [ 110.336741][ T5603] usb 1-1: SerialNumber: syz [ 110.367767][ T5603] usb 1-1: config 0 descriptor?? [ 110.386542][ T6495] FAULT_INJECTION: forcing a failure. [ 110.386542][ T6495] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 110.386575][ T6495] CPU: 1 UID: 0 PID: 6495 Comm: syz.5.130 Not tainted syzkaller #0 PREEMPT(full) [ 110.386595][ T6495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 110.386604][ T6495] Call Trace: [ 110.386610][ T6495] [ 110.386616][ T6495] dump_stack_lvl+0x100/0x190 [ 110.386642][ T6495] should_fail_ex.cold+0x5/0xa [ 110.386665][ T6495] _copy_from_user+0x2e/0xd0 [ 110.386690][ T6495] rfcomm_dev_ioctl+0x114/0x1db0 [ 110.386716][ T6495] ? bt_sock_ioctl+0x1df/0x580 [ 110.386738][ T6495] ? __pfx_bt_sock_ioctl+0x10/0x10 [ 110.386761][ T6495] ? __pfx_rfcomm_dev_ioctl+0x10/0x10 [ 110.386782][ T6495] ? tomoyo_path_number_perm+0x28f/0x580 [ 110.386815][ T6495] ? tomoyo_path_number_perm+0x188/0x580 [ 110.386841][ T6495] rfcomm_sock_ioctl+0xcc/0xf0 [ 110.386861][ T6495] sock_do_ioctl+0x118/0x280 [ 110.386881][ T6495] ? __pfx_sock_do_ioctl+0x10/0x10 [ 110.386898][ T6495] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 110.386919][ T6495] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 110.386942][ T6495] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 110.386968][ T6495] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 110.386995][ T6495] sock_ioctl+0x599/0x6b0 [ 110.387016][ T6495] ? __pfx_sock_ioctl+0x10/0x10 [ 110.387041][ T6495] ? selinux_file_ioctl+0x13b/0x290 [ 110.387062][ T6495] ? selinux_file_ioctl+0xb6/0x290 [ 110.387087][ T6495] ? __pfx_sock_ioctl+0x10/0x10 [ 110.387107][ T6495] __x64_sys_ioctl+0x18e/0x210 [ 110.387132][ T6495] do_syscall_64+0x123/0x790 [ 110.387151][ T6495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.387167][ T6495] RIP: 0033:0x7f6a9619e159 [ 110.387181][ T6495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.387195][ T6495] RSP: 002b:00007f6a96fd8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 110.387210][ T6495] RAX: ffffffffffffffda RBX: 00007f6a96426090 RCX: 00007f6a9619e159 [ 110.387220][ T6495] RDX: 0000200000000100 RSI: 00000000400452c9 RDI: 0000000000000009 [ 110.387230][ T6495] RBP: 00007f6a96fd8090 R08: 0000000000000000 R09: 0000000000000000 [ 110.387239][ T6495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.387248][ T6495] R13: 00007f6a96426128 R14: 00007f6a96426090 R15: 00007fff86000568 [ 110.387269][ T6495] [ 110.466184][ T5603] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 111.658400][ T5603] gspca_topro: reg_w err -110 [ 111.683462][ T5603] gspca_topro: Sensor soi763a [ 112.129025][ T6511] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 112.129107][ T6511] CPU: 0 UID: 0 PID: 6511 Comm: syz.2.133 Not tainted syzkaller #0 PREEMPT(full) [ 112.129133][ T6511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 112.129145][ T6511] Call Trace: [ 112.129151][ T6511] [ 112.129159][ T6511] dump_stack_lvl+0x100/0x190 [ 112.129193][ T6511] sysfs_warn_dup.cold+0x1c/0x28 [ 112.129224][ T6511] sysfs_create_dir_ns+0x24b/0x2b0 [ 112.129248][ T6511] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 112.129270][ T6511] ? find_held_lock+0x2b/0x80 [ 112.129302][ T6511] ? kobject_add_internal+0x25f/0x930 [ 112.129329][ T6511] ? kobject_add_internal+0x25f/0x930 [ 112.129358][ T6511] ? class_dir_child_ns_type+0xd/0x60 [ 112.129384][ T6511] kobject_add_internal+0x2c8/0x930 [ 112.129417][ T6511] kobject_add+0x16a/0x1e0 [ 112.129445][ T6511] ? __pfx_kobject_add+0x10/0x10 [ 112.129475][ T6511] ? get_device_parent+0x1b3/0x4c0 [ 112.129493][ T6511] ? kobject_put+0xb9/0x640 [ 112.129524][ T6511] device_add+0x294/0x1970 [ 112.129547][ T6511] ? lockdep_init_map_type+0x5c/0x250 [ 112.129568][ T6511] ? __pfx_device_add+0x10/0x10 [ 112.129588][ T6511] ? lockdep_init_map_type+0x5c/0x250 [ 112.129609][ T6511] ? __init_waitqueue_head+0xca/0x150 [ 112.129639][ T6511] tty_register_device_attr+0x388/0x7f0 [ 112.129670][ T6511] ? lockdep_init_map_type+0x5c/0x250 [ 112.129692][ T6511] ? __pfx_tty_register_device_attr+0x10/0x10 [ 112.129732][ T6511] ? tty_port_init+0x156/0x1c0 [ 112.129754][ T6511] gsm_activate_mux+0x155/0x2a0 [ 112.129776][ T6511] gsmld_ioctl+0xbbc/0x15c0 [ 112.129803][ T6511] ? __pfx_gsmld_ioctl+0x10/0x10 [ 112.129827][ T6511] ? lockdep_hardirqs_on+0x7d/0x110 [ 112.129847][ T6511] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 112.129882][ T6511] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 112.129904][ T6511] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 112.129934][ T6511] ? __pfx_gsmld_ioctl+0x10/0x10 [ 112.129955][ T6511] tty_ioctl+0x11b4/0x1640 [ 112.129975][ T6511] ? __pfx_tty_ioctl+0x10/0x10 [ 112.129993][ T6511] ? preempt_schedule_irq+0x79/0x90 [ 112.130015][ T6511] ? irqentry_exit+0x24d/0xa10 [ 112.130036][ T6511] ? lockdep_hardirqs_on+0x7d/0x110 [ 112.130056][ T6511] ? irqentry_exit+0x24d/0xa10 [ 112.130090][ T6511] ? __pfx_tty_ioctl+0x10/0x10 [ 112.130109][ T6511] __x64_sys_ioctl+0x18e/0x210 [ 112.130141][ T6511] do_syscall_64+0x123/0x790 [ 112.130165][ T6511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.130184][ T6511] RIP: 0033:0x7fce9839e159 [ 112.130200][ T6511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.130218][ T6511] RSP: 002b:00007fce991f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 112.130238][ T6511] RAX: ffffffffffffffda RBX: 00007fce98626180 RCX: 00007fce9839e159 [ 112.130250][ T6511] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000005 [ 112.130262][ T6511] RBP: 00007fce98435024 R08: 0000000000000000 R09: 0000000000000000 [ 112.130274][ T6511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.130290][ T6511] R13: 00007fce98626218 R14: 00007fce98626180 R15: 00007ffc60bb1d28 [ 112.130317][ T6511] [ 112.130454][ T6511] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 112.676772][ T30] audit: type=1400 audit(1788337159.623:467): avc: denied { mount } for pid=6477 comm="syz.0.126" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 112.914617][ T983] usb 1-1: USB disconnect, device number 5 [ 113.131768][ T30] audit: type=1326 audit(1788337160.093:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6523 comm="syz.0.137" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062df9e159 code=0x7ffc0000 [ 113.158844][ T30] audit: type=1326 audit(1788337160.093:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6523 comm="syz.0.137" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062df9e159 code=0x7ffc0000 [ 113.158898][ T30] audit: type=1326 audit(1788337160.093:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6523 comm="syz.0.137" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f062df9e159 code=0x7ffc0000 [ 113.158944][ T30] audit: type=1326 audit(1788337160.093:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6523 comm="syz.0.137" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062df9e159 code=0x7ffc0000 [ 113.158985][ T30] audit: type=1326 audit(1788337160.093:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6523 comm="syz.0.137" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062df9e159 code=0x7ffc0000 [ 113.159023][ T30] audit: type=1326 audit(1788337160.093:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6523 comm="syz.0.137" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f062df9e159 code=0x7ffc0000 [ 113.159061][ T30] audit: type=1326 audit(1788337160.093:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6523 comm="syz.0.137" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062df9e159 code=0x7ffc0000 [ 113.159100][ T30] audit: type=1326 audit(1788337160.093:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6523 comm="syz.0.137" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062df9e159 code=0x7ffc0000 [ 113.162886][ T30] audit: type=1326 audit(1788337160.123:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6523 comm="syz.0.137" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f062df5e98e code=0x7ffc0000 [ 113.503283][ T983] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 113.702741][ T983] usb 1-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 113.729850][ T983] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 113.756656][ T983] usb 1-1: string descriptor 0 read error: -22 [ 113.756751][ T983] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.798316][ T983] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 114.210383][ T983] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 114.212079][ T983] usb 1-1: disable ehci-hcd to run US-144 [ 114.222185][ T983] usb 1-1: disable ehci-hcd to run US-144 [ 114.226774][ T983] usb 1-1: disable ehci-hcd to run US-144 [ 114.501501][ T983] usb 1-1: USB disconnect, device number 6 [ 114.548016][ T6556] FAULT_INJECTION: forcing a failure. [ 114.548016][ T6556] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.548060][ T6556] CPU: 1 UID: 60929 PID: 6556 Comm: syz.2.141 Not tainted syzkaller #0 PREEMPT(full) [ 114.548085][ T6556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 114.548097][ T6556] Call Trace: [ 114.548104][ T6556] [ 114.548113][ T6556] dump_stack_lvl+0x100/0x190 [ 114.548146][ T6556] should_fail_ex.cold+0x5/0xa [ 114.548173][ T6556] _copy_from_iter+0x1f4/0x1690 [ 114.548206][ T6556] ? kmalloc_reserve+0xf9/0x350 [ 114.548230][ T6556] ? __asan_memset+0x23/0x50 [ 114.548259][ T6556] ? __pfx__copy_from_iter+0x10/0x10 [ 114.548289][ T6556] ? __alloc_skb+0x4e9/0x710 [ 114.548317][ T6556] ? __pfx___alloc_skb+0x10/0x10 [ 114.548348][ T6556] ? __pfx___schedule+0x10/0x10 [ 114.548366][ T6556] ? skb_put+0x138/0x180 [ 114.548389][ T6556] tipc_msg_build+0x30a/0x1100 [ 114.548408][ T6556] ? irqentry_exit+0x24d/0xa10 [ 114.548425][ T6556] ? irqentry_exit+0x24d/0xa10 [ 114.548442][ T6556] ? __pfx_tipc_msg_build+0x10/0x10 [ 114.548464][ T6556] ? __tipc_sendstream+0x48a/0x10e0 [ 114.548492][ T6556] __tipc_sendstream+0x6a7/0x10e0 [ 114.548526][ T6556] ? __pfx___tipc_sendstream+0x10/0x10 [ 114.548550][ T6556] ? do_raw_spin_lock+0x128/0x260 [ 114.548571][ T6556] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 114.548591][ T6556] ? __pfx_woken_wake_function+0x10/0x10 [ 114.548614][ T6556] ? __local_bh_enable_ip+0xa5/0x120 [ 114.548634][ T6556] tipc_sendstream+0x4f/0x70 [ 114.548659][ T6556] sock_write_iter+0x53a/0x5b0 [ 114.548677][ T6556] ? __pfx_tipc_sendstream+0x10/0x10 [ 114.548702][ T6556] ? __pfx_sock_write_iter+0x10/0x10 [ 114.548727][ T6556] ? bpf_lsm_file_permission+0x9/0x10 [ 114.548753][ T6556] ? security_file_permission+0x76/0x210 [ 114.548771][ T6556] ? rw_verify_area+0xce/0x6d0 [ 114.548798][ T6556] vfs_write+0x6af/0x1050 [ 114.548824][ T6556] ? __pfx_sock_write_iter+0x10/0x10 [ 114.548846][ T6556] ? __pfx_vfs_write+0x10/0x10 [ 114.548870][ T6556] ? find_held_lock+0x2b/0x80 [ 114.548906][ T6556] ksys_write+0x1f8/0x250 [ 114.548920][ T6556] ? __pfx_ksys_write+0x10/0x10 [ 114.548942][ T6556] do_syscall_64+0x123/0x790 [ 114.548962][ T6556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.548979][ T6556] RIP: 0033:0x7fce9839e159 [ 114.548993][ T6556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.549008][ T6556] RSP: 002b:00007fce9923a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 114.549025][ T6556] RAX: ffffffffffffffda RBX: 00007fce98625fa0 RCX: 00007fce9839e159 [ 114.549036][ T6556] RDX: 000000002000011a RSI: 0000200000000340 RDI: 0000000000000004 [ 114.549046][ T6556] RBP: 00007fce98435024 R08: 0000000000000000 R09: 0000000000000000 [ 114.549056][ T6556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.549065][ T6556] R13: 00007fce98626038 R14: 00007fce98625fa0 R15: 00007ffc60bb1d28 [ 114.549087][ T6556] [ 115.034724][ T6571] Cannot find set identified by id 0 to match [ 115.225500][ T6573] syzkaller0: entered promiscuous mode [ 115.225538][ T6573] syzkaller0: entered allmulticast mode [ 115.324693][ T6579] mmap: syz.0.149 (6579) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 115.443959][ T5748] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 115.632980][ T5748] usb 7-1: Using ep0 maxpacket: 32 [ 115.649867][ T5748] usb 7-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 115.661797][ T5748] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 115.661838][ T5748] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 115.661871][ T5748] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 115.661895][ T5748] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 115.715250][ T5748] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.715288][ T5748] usb 7-1: Product: syz [ 115.715317][ T5748] usb 7-1: Manufacturer: syz [ 115.715334][ T5748] usb 7-1: SerialNumber: syz [ 115.740581][ T5748] usb 7-1: config 0 descriptor?? [ 115.747296][ T6577] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 115.765094][ T5748] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input7 [ 116.127640][ T5748] usb 7-1: USB disconnect, device number 2 [ 116.133614][ C0] xpad 7-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 117.092866][ T5603] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 117.163876][ T5748] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 117.333772][ T5748] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 117.343790][ T5603] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 117.355347][ T5748] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.355445][ T5748] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.355476][ T5748] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 117.355500][ T5748] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 117.355554][ T5748] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.426510][ T5603] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.426548][ T5603] usb 7-1: Product: syz [ 117.426576][ T5603] usb 7-1: Manufacturer: syz [ 117.426592][ T5603] usb 7-1: SerialNumber: syz [ 117.458254][ T5748] cxacru 1-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 117.473473][ T5748] cxacru 1-1:1.0: probe with driver cxacru failed with error -22 [ 117.485335][ T5603] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 117.531207][ T5603] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 117.563964][ T5603] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 117.661595][ T6600] xt_hashlimit: Unknown mode mask 6BCC12, kernel too old? [ 117.694190][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 117.694236][ T30] audit: type=1400 audit(1788337164.663:536): avc: denied { ioctl } for pid=6599 comm="syz.0.159" path="socket:[13320]" dev="sockfs" ino=13320 ioctlcmd=0x586b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 117.727642][ T5603] usb 1-1: USB disconnect, device number 7 [ 117.868284][ T6614] futex_wake_op: syz.5.161 tries to shift op by -1; fix this program [ 118.049510][ T30] audit: type=1400 audit(1788337165.003:537): avc: denied { mount } for pid=6612 comm="syz.5.161" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 119.415999][ T30] audit: type=1400 audit(1788337166.383:538): avc: denied { unmount } for pid=6031 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 119.571962][ T6625] netlink: 48 bytes leftover after parsing attributes in process `syz.4.164'. [ 119.597080][ T30] audit: type=1400 audit(1788337166.563:539): avc: denied { node_bind } for pid=6622 comm="syz.0.163" saddr=172.20.20.170 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 119.605816][ T6625] netlink: 48 bytes leftover after parsing attributes in process `syz.4.164'. [ 119.789483][ T30] audit: type=1400 audit(1788337166.753:540): avc: denied { write } for pid=6613 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.960100][ T30] audit: type=1400 audit(1788337166.923:541): avc: denied { write } for pid=6636 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.998578][ T30] audit: type=1400 audit(1788337166.963:542): avc: denied { watch } for pid=6634 comm="syz.4.166" path="/45" dev="tmpfs" ino=271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 120.082476][ T6638] netlink: 'syz.4.166': attribute type 4 has an invalid length. [ 120.082513][ T6638] netlink: 'syz.4.166': attribute type 10 has an invalid length. [ 120.082526][ T6638] netlink: 152 bytes leftover after parsing attributes in process `syz.4.166'. [ 120.201240][ T30] audit: type=1400 audit(1788337167.163:543): avc: denied { write } for pid=6643 comm="syz.0.167" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 120.227430][ T6638] bond0: (slave gre0): refused to change device type [ 120.227461][ T6638] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 120.303015][ T6646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.167'. [ 120.623996][ T6598] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send start command (2), -110 [ 120.647394][ T5603] usb 7-1: USB disconnect, device number 3 [ 120.778369][ T30] audit: type=1400 audit(1788337167.713:544): avc: denied { create } for pid=6634 comm="syz.4.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 121.132491][ T5603] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 121.166228][ T5603] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 121.166955][ T5603] ti_usb_3410_5052 7-1:2.0: device disconnected [ 121.356918][ T6656] netlink: 4 bytes leftover after parsing attributes in process `syz.5.168'. [ 121.435981][ T6656] netlink: 4 bytes leftover after parsing attributes in process `syz.5.168'. [ 121.682278][ T6656] hsr_slave_1 (unregistering): left promiscuous mode [ 121.792918][ T5603] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 121.846269][ T30] audit: type=1400 audit(1788337168.813:545): avc: denied { ioctl } for pid=6634 comm="syz.4.166" path="socket:[13356]" dev="sockfs" ino=13356 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 121.933124][ T5603] usb 1-1: device descriptor read/64, error -71 [ 122.005723][ T6669] netlink: 116 bytes leftover after parsing attributes in process `syz.2.171'. [ 122.173161][ T5603] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 122.303586][ T5603] usb 1-1: device descriptor read/64, error -71 [ 122.415074][ T5603] usb usb1-port1: attempt power cycle [ 123.062253][ T5603] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 123.243929][ T1264] IPVS: starting estimator thread 0... [ 123.244013][ T6694] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 123.261013][ T5603] usb 1-1: device descriptor read/8, error -71 [ 123.343921][ T6695] IPVS: using max 49 ests per chain, 117600 per kthread [ 123.495563][ T5603] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 123.537446][ T5603] usb 1-1: device descriptor read/8, error -71 [ 123.642314][ T6706] netlink: 'syz.4.179': attribute type 11 has an invalid length. [ 123.650855][ T5603] usb usb1-port1: unable to enumerate USB device [ 123.681507][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 123.681553][ T30] audit: type=1400 audit(1788337170.643:551): avc: denied { bind } for pid=6707 comm="syz.6.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 123.707766][ T30] audit: type=1400 audit(1788337170.673:552): avc: denied { write } for pid=6683 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.858907][ T30] audit: type=1400 audit(1788337170.823:553): avc: denied { write } for pid=6716 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.957301][ T30] audit: type=1400 audit(1788337170.923:554): avc: denied { create } for pid=6708 comm="syz.2.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 123.979846][ T30] audit: type=1400 audit(1788337170.943:555): avc: denied { getopt } for pid=6708 comm="syz.2.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 124.032170][ T30] audit: type=1400 audit(1788337170.993:556): avc: denied { write } for pid=6708 comm="syz.2.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 124.074533][ T6719] netlink: 8 bytes leftover after parsing attributes in process `syz.6.177'. [ 124.096573][ T30] audit: type=1400 audit(1788337171.063:557): avc: denied { read } for pid=6708 comm="syz.2.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 124.463783][ T30] audit: type=1400 audit(1788337171.433:558): avc: denied { write } for pid=6728 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.760329][ T6749] netlink: 28 bytes leftover after parsing attributes in process `syz.0.184'. [ 124.814898][ T30] audit: type=1400 audit(1788337171.783:559): avc: denied { write } for pid=6750 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.994497][ T30] audit: type=1400 audit(1788337171.963:560): avc: denied { create } for pid=6755 comm="syz.2.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 125.781534][ T1386] IPVS: starting estimator thread 0... [ 125.828026][ T6745] netlink: 28 bytes leftover after parsing attributes in process `syz.4.183'. [ 125.828071][ T6745] netlink: 28 bytes leftover after parsing attributes in process `syz.4.183'. [ 125.893421][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 125.904991][ T6767] IPVS: using max 76 ests per chain, 182400 per kthread [ 126.303064][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 126.452912][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 126.458894][ T9] usb 7-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 126.471110][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.471147][ T9] usb 7-1: Product: syz [ 126.471164][ T9] usb 7-1: Manufacturer: syz [ 126.471182][ T9] usb 7-1: SerialNumber: syz [ 127.041589][ T9] usb 7-1: config 0 descriptor?? [ 127.167751][ T9] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 127.167799][ T9] pctv452e: pctv452e_power_ctrl: 1 [ 127.167799][ T9] [ 127.167841][ T9] usb 7-1: selecting invalid altsetting 3 [ 127.167855][ T9] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 127.167855][ T9] [ 127.167870][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 127.270174][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.270249][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.292230][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 127.294339][ T9] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 127.294377][ T9] usb 7-1: media controller created [ 127.302279][ T9] dvb-usb: bulk message failed: -22 (8/0) [ 127.302292][ T9] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 127.302324][ T9] dvb-usb: MAC address reading failed. [ 127.376031][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 127.605646][ T9] DVB: Unable to find symbol stb0899_attach() [ 127.605680][ T9] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 127.813294][ T9] rc_core: IR keymap rc-tt-1500 not found [ 127.815034][ T9] Registered IR keymap rc-empty [ 127.835372][ T9] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0 [ 127.856640][ T9] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input8 [ 127.875889][ T9] dvb-usb: schedule remote query interval to 100 msecs. [ 127.875930][ T9] pctv452e: pctv452e_power_ctrl: 0 [ 127.875930][ T9] [ 127.875951][ T9] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 127.987776][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 127.987829][ T9] dvb-usb: error -22 while querying for an remote control event. [ 128.094918][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 128.094947][ T9] dvb-usb: error -22 while querying for an remote control event. [ 128.202903][ T5748] dvb-usb: bulk message failed: -22 (4/0) [ 128.202941][ T5748] dvb-usb: error -22 while querying for an remote control event. [ 129.026713][ T5748] dvb-usb: bulk message failed: -22 (4/0) [ 129.026752][ T5748] dvb-usb: error -22 while querying for an remote control event. [ 129.141185][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 129.141224][ T30] audit: type=1326 audit(1788337176.103:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6812 comm="syz.2.196" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9839e159 code=0x7fc00000 [ 129.187314][ T30] audit: type=1400 audit(1788337176.153:573): avc: denied { read } for pid=6813 comm="syz.0.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 129.188236][ T5748] dvb-usb: bulk message failed: -22 (4/0) [ 129.188256][ T5748] dvb-usb: error -22 while querying for an remote control event. [ 129.233194][ T30] audit: type=1326 audit(1788337176.193:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6812 comm="syz.2.196" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fce9839e159 code=0x7fc00000 [ 129.250075][ T6820] netlink: 40 bytes leftover after parsing attributes in process `syz.0.197'. [ 129.292996][ T5748] dvb-usb: bulk message failed: -22 (4/0) [ 129.293026][ T5748] dvb-usb: error -22 while querying for an remote control event. [ 129.382759][ T6823] xt_hashlimit: size too large, truncated to 1048576 [ 129.389557][ T6824] xt_hashlimit: size too large, truncated to 1048576 [ 129.398937][ T5748] usb 7-1: USB disconnect, device number 4 [ 129.896625][ T5748] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 130.080425][ T30] audit: type=1400 audit(1788337177.043:575): avc: denied { write } for pid=6800 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.121177][ T6838] FAULT_INJECTION: forcing a failure. [ 130.121177][ T6838] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.121216][ T6838] CPU: 1 UID: 0 PID: 6838 Comm: syz.2.202 Not tainted syzkaller #0 PREEMPT(full) [ 130.121239][ T6838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 130.121250][ T6838] Call Trace: [ 130.121257][ T6838] [ 130.121265][ T6838] dump_stack_lvl+0x100/0x190 [ 130.121295][ T6838] should_fail_ex.cold+0x5/0xa [ 130.121320][ T6838] _copy_to_user+0x32/0xd0 [ 130.121349][ T6838] bpf_test_finish.isra.0+0x4db/0x650 [ 130.121375][ T6838] ? skb_copy_bits+0x5cb/0x8d0 [ 130.121401][ T6838] ? __pfx_bpf_test_finish.isra.0+0x10/0x10 [ 130.121430][ T6838] ? eth_type_trans+0x2e3/0x720 [ 130.121458][ T6838] bpf_prog_test_run_skb+0x2481/0x3530 [ 130.121488][ T6838] ? lock_acquire+0x1d1/0x380 [ 130.121519][ T6838] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 130.121547][ T6838] ? fput+0x7c/0x100 [ 130.121571][ T6838] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 130.121596][ T6838] __sys_bpf+0x2265/0x4a30 [ 130.121619][ T6838] ? __pfx___sys_bpf+0x10/0x10 [ 130.121646][ T6838] ? find_held_lock+0x2b/0x80 [ 130.121669][ T6838] ? get_pid_task+0xfc/0x250 [ 130.121692][ T6838] ? get_pid_task+0xfc/0x250 [ 130.121723][ T6838] ? find_held_lock+0x2b/0x80 [ 130.121752][ T6838] ? rcu_read_lock_any_held+0x6a/0x90 [ 130.121777][ T6838] ? find_held_lock+0x2b/0x80 [ 130.121800][ T6838] ? ksys_write+0x190/0x250 [ 130.121815][ T6838] ? ksys_write+0x190/0x250 [ 130.121831][ T6838] ? lock_acquire+0x1d1/0x380 [ 130.121865][ T6838] ? fput+0x7c/0x100 [ 130.121886][ T6838] ? ksys_write+0x1ac/0x250 [ 130.121906][ T6838] ? __x64_sys_bpf+0xce/0x140 [ 130.121922][ T6838] __x64_sys_bpf+0xce/0x140 [ 130.121940][ T6838] ? do_syscall_64+0xae/0x790 [ 130.121962][ T6838] do_syscall_64+0x123/0x790 [ 130.121984][ T6838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.122002][ T6838] RIP: 0033:0x7fce9839e159 [ 130.122017][ T6838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.122034][ T6838] RSP: 002b:00007fce9923a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 130.122052][ T6838] RAX: ffffffffffffffda RBX: 00007fce98625fa0 RCX: 00007fce9839e159 [ 130.122064][ T6838] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 130.122075][ T6838] RBP: 00007fce9923a090 R08: 0000000000000000 R09: 0000000000000000 [ 130.122091][ T6838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.122101][ T6838] R13: 00007fce98626038 R14: 00007fce98625fa0 R15: 00007ffc60bb1d28 [ 130.122126][ T6838] [ 130.251210][ T6846] FAULT_INJECTION: forcing a failure. [ 130.251210][ T6846] name failslab, interval 1, probability 0, space 0, times 1 [ 130.251237][ T6846] CPU: 1 UID: 0 PID: 6846 Comm: syz.0.203 Not tainted syzkaller #0 PREEMPT(full) [ 130.251257][ T6846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 130.251268][ T6846] Call Trace: [ 130.251273][ T6846] [ 130.251280][ T6846] dump_stack_lvl+0x100/0x190 [ 130.251309][ T6846] should_fail_ex.cold+0x5/0xa [ 130.251333][ T6846] should_failslab+0xc2/0x120 [ 130.251354][ T6846] __kmalloc_noprof+0xfc/0x840 [ 130.251372][ T6846] ? asymmetric_key_generate_id+0x7e/0x180 [ 130.251397][ T6846] asymmetric_key_generate_id+0x7e/0x180 [ 130.251420][ T6846] x509_cert_parse+0x5c1/0x910 [ 130.251444][ T6846] x509_key_preparse+0x65/0x9c0 [ 130.251471][ T6846] asymmetric_key_preparse+0xce/0x1d0 [ 130.251491][ T6846] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 130.251513][ T6846] __key_create_or_update+0x463/0xe30 [ 130.251534][ T6846] ? __pfx___key_create_or_update+0x10/0x10 [ 130.251552][ T6846] ? lookup_user_key+0x3f3/0x1300 [ 130.251586][ T6846] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 130.251611][ T6846] ? __pfx_keyring_search_iterator+0x10/0x10 [ 130.251632][ T6846] key_create_or_update+0x42/0x60 [ 130.251651][ T6846] __do_sys_add_key+0x2e8/0x460 [ 130.251673][ T6846] ? __pfx___do_sys_add_key+0x10/0x10 [ 130.251701][ T6846] do_syscall_64+0x123/0x790 [ 130.251722][ T6846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.251739][ T6846] RIP: 0033:0x7f062df9e159 [ 130.251754][ T6846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.251769][ T6846] RSP: 002b:00007f062ee8e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 130.251785][ T6846] RAX: ffffffffffffffda RBX: 00007f062e225fa0 RCX: 00007f062df9e159 [ 130.251796][ T6846] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000040 [ 130.251807][ T6846] RBP: 00007f062e035024 R08: 000000001fdffaea R09: 0000000000000000 [ 130.251817][ T6846] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 130.251827][ T6846] R13: 00007f062e226038 R14: 00007f062e225fa0 R15: 00007ffd90f59df8 [ 130.251849][ T6846] [ 130.311299][ T5603] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 130.352827][ T5748] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 130.893478][ T5603] usb 6-1: New USB device found, idVendor=05ac, idProduct=024f, bcdDevice= 0.00 [ 130.895397][ T5748] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 130.896670][ T5748] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 130.896731][ T5748] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.896747][ T5748] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 130.896779][ T5748] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.897440][ T5603] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.897462][ T5603] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8192, setting to 1024 [ 130.897493][ T5603] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.909900][ T5748] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 130.909922][ T5748] usb 7-1: Product: syz [ 130.909934][ T5748] usb 7-1: Manufacturer: syz [ 130.911774][ T5603] usb 6-1: config 0 descriptor?? [ 130.930751][ T5748] cdc_wdm 7-1:1.0: skipping garbage [ 130.930766][ T5748] cdc_wdm 7-1:1.0: skipping garbage [ 130.938050][ T6850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.205'. [ 130.987815][ T5748] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 130.987837][ T5748] cdc_wdm 7-1:1.0: Unknown control protocol [ 131.158980][ T30] audit: type=1400 audit(1788337178.123:576): avc: denied { write } for pid=6852 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.339807][ T30] audit: type=1400 audit(1788337178.303:577): avc: denied { create } for pid=6856 comm="syz.0.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 131.347711][ T30] audit: type=1400 audit(1788337178.313:578): avc: denied { read write } for pid=6835 comm="syz.6.199" name="cdc-wdm0" dev="devtmpfs" ino=3262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 131.347756][ T30] audit: type=1400 audit(1788337178.313:579): avc: denied { open } for pid=6835 comm="syz.6.199" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 131.442313][ T5603] apple 0003:05AC:024F.0002: invalid report_count 27994 [ 131.442373][ T5603] apple 0003:05AC:024F.0002: item 0 2 1 9 parsing failed [ 131.447936][ T5603] apple 0003:05AC:024F.0002: parse failed [ 131.448024][ T5603] apple 0003:05AC:024F.0002: probe with driver apple failed with error -22 [ 131.473514][ T30] audit: type=1400 audit(1788337178.443:580): avc: denied { ioctl } for pid=6856 comm="syz.0.208" path="socket:[13613]" dev="sockfs" ino=13613 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 131.527353][ T5748] usb 7-1: USB disconnect, device number 5 [ 131.584643][ T6836] netlink: 16 bytes leftover after parsing attributes in process `syz.6.199'. [ 131.722903][ T5603] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 131.795695][ T5748] usb 6-1: USB disconnect, device number 6 [ 131.871398][ T6857] syz_tun: left promiscuous mode [ 131.878624][ T6857] tipc: Resetting bearer [ 131.885340][ T5603] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 131.897339][ T5603] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.897369][ T5603] usb 3-1: Product: syz [ 131.897404][ T5603] usb 3-1: Manufacturer: syz [ 131.897417][ T5603] usb 3-1: SerialNumber: syz [ 131.934466][ T6857] dummy0: left promiscuous mode [ 131.950690][ T30] audit: type=1400 audit(1788337178.903:581): avc: denied { ioctl } for pid=6856 comm="syz.0.208" path="/dev/vhost-net" dev="devtmpfs" ino=1271 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 132.339277][ T5603] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 132.339331][ T5603] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 132.652013][ T6889] netlink: 4 bytes leftover after parsing attributes in process `syz.5.211'. [ 132.915440][ T1264] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.223568][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 133.226552][ T1264] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.374630][ T9] usb 1-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 133.379144][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 133.379168][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 133.383565][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.383584][ T9] usb 1-1: Product: syz [ 133.383596][ T9] usb 1-1: Manufacturer: syz [ 133.383608][ T9] usb 1-1: SerialNumber: syz [ 133.447541][ T1264] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.522817][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 133.563614][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1ca!!! [ 133.987053][ T6905] netlink: 'syz.5.214': attribute type 4 has an invalid length. [ 133.987197][ T6905] netlink: 152 bytes leftover after parsing attributes in process `syz.5.214'. [ 134.016652][ T6905] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 134.302828][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 134.529244][ T9] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 134.639562][ T1264] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.719128][ T5614] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 134.728282][ T5614] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 134.734454][ T5614] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 134.745843][ T5614] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 134.753162][ T5614] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 134.765972][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 134.766006][ T30] audit: type=1400 audit(1788337181.733:585): avc: denied { read write } for pid=6893 comm="syz.0.212" name="lp0" dev="devtmpfs" ino=3269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 134.803148][ T30] audit: type=1400 audit(1788337181.773:586): avc: denied { open } for pid=6893 comm="syz.0.212" path="/dev/usb/lp0" dev="devtmpfs" ino=3269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 135.051915][ T30] audit: type=1400 audit(1788337182.013:587): avc: denied { read } for pid=5265 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 135.141608][ T9] usb 1-1: USB disconnect, device number 12 [ 135.168220][ T9] usblp0: removed [ 135.472142][ T5603] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO [ 135.472211][ T5603] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 135.473162][ T5603] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 135.511898][ T5603] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 135.532683][ T1264] bridge_slave_1: left allmulticast mode [ 135.532716][ T1264] bridge_slave_1: left promiscuous mode [ 135.533473][ T1264] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.575191][ T5603] usb 3-1: USB disconnect, device number 8 [ 135.588452][ T1264] bridge_slave_0: left allmulticast mode [ 135.588493][ T1264] bridge_slave_0: left promiscuous mode [ 135.588655][ T1264] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.794922][ T30] audit: type=1400 audit(1788337182.763:588): avc: denied { write } for pid=6913 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.100809][ T30] audit: type=1400 audit(1788337183.063:589): avc: denied { write } for pid=6931 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.199079][ T30] audit: type=1400 audit(1788337183.163:590): avc: denied { read } for pid=6934 comm="syz.0.220" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 136.222244][ T30] audit: type=1400 audit(1788337183.163:591): avc: denied { open } for pid=6934 comm="syz.0.220" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 136.333169][ T30] audit: type=1400 audit(1788337183.263:592): avc: denied { append } for pid=6934 comm="syz.0.220" name="sda" dev="devtmpfs" ino=870 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 136.847295][ T5614] Bluetooth: hci2: command tx timeout [ 136.899300][ T1264] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.931723][ T1264] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.946501][ T1264] bond0 (unregistering): Released all slaves [ 136.974298][ T5265] 8021q: adding VLAN 0 to HW filter on device eth9 [ 137.038243][ T6935] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 137.063308][ T6935] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 137.115164][ T6935] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 137.139121][ T6935] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 137.147667][ T6935] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 137.198060][ T6935] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 137.503205][ T5748] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 137.668210][ T5748] usb 6-1: not running at top speed; connect to a high speed hub [ 137.668252][ T5748] usb 6-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 137.672007][ T5748] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 137.672029][ T5748] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.672044][ T5748] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 137.672079][ T5748] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.728250][ T5748] uvcvideo 6-1:1.0: probe with driver uvcvideo failed with error -22 [ 138.137814][ T5603] usb 6-1: USB disconnect, device number 7 [ 138.405843][ T30] audit: type=1400 audit(1788337185.353:593): avc: denied { listen } for pid=6973 comm="syz.0.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 138.406024][ T30] audit: type=1400 audit(1788337185.353:594): avc: denied { bind } for pid=6973 comm="syz.0.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 138.664562][ T6980] process 'syz.4.227' launched './file0' with NULL argv: empty string added [ 138.692933][ T5748] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 138.847745][ T5748] usb 3-1: not running at top speed; connect to a high speed hub [ 138.847864][ T5748] usb 3-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 138.874399][ T5748] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 115, changing to 4 [ 138.874522][ T5748] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 138.907416][ T1264] hsr_slave_0: left promiscuous mode [ 138.969651][ T5748] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.969703][ T5748] usb 3-1: Product: 辽ꗃᛜ돢ﱠ턧죏ﳀ∧ꒋ㳮ꩤ옱᪡댻Ή踟᜾Ⅼ㑒鑱ⅸ힃엖횕젍ኯ礬沙ᙾ圽㺱ꈕﰬ鲃붩䔈岬䉑蓍꽯ᒘ鷲⠵핦롄뙱ꈑ愖ⵍ疅덃ۍ체䌕ⷷ뢼犬젝춯揤嫱ᆕ䱪㏏ṏ䏅羃➇Ẹ菦夅䴎骻෉흃븹聢젹볱绞 [ 138.969775][ T5748] usb 3-1: Manufacturer: 猣胲膡汊쥥쭴͈鑘䕷㲙ឧꭝ놞覧ޤᘬڄꀯ⥓餸갛욀觾셌ฃ [ 138.969804][ T5748] usb 3-1: SerialNumber: syz [ 139.072354][ T1264] hsr_slave_1: left promiscuous mode [ 139.104912][ T1264] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.104976][ T1264] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.137820][ T5614] Bluetooth: hci0: command 0x0c1a tx timeout [ 139.189081][ T5614] Bluetooth: hci2: command 0x040f tx timeout [ 139.219865][ T1264] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.219965][ T1264] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.967950][ T1264] veth1_macvtap: left promiscuous mode [ 139.997375][ T1264] veth0_macvtap: left promiscuous mode [ 140.028153][ T1264] veth1_vlan: left promiscuous mode [ 140.033779][ T1264] veth0_vlan: left promiscuous mode [ 140.097417][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 140.097451][ T30] audit: type=1400 audit(1788337187.063:599): avc: denied { write } for pid=6957 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.557784][ T30] audit: type=1400 audit(1788337187.523:600): avc: denied { write } for pid=6995 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.582914][ T5603] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 140.711398][ T1264] team0 (unregistering): Port device team_slave_1 removed [ 140.722837][ T5603] usb 6-1: device descriptor read/64, error -71 [ 140.729803][ T1264] team0 (unregistering): Port device team_slave_0 removed [ 140.772859][ T1598] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 140.823754][ T5265] 8021q: adding VLAN 0 to HW filter on device eth10 [ 140.846678][ T5748] usb 3-1: 1:1: invalid format type 0x1001 is detected, processed as PCM [ 140.855339][ T5748] usb 3-1: 1:1 : sample bitwidth 205 in over sample bytes 0 [ 140.855362][ T5748] usb 3-1: 1:1 : unsupported sample bitwidth 205 in 0 bytes [ 140.883776][ T5748] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 140.891310][ T5748] usb 3-1: unit 5 not found! [ 140.933150][ T1598] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 140.944662][ T1598] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.944711][ T1598] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 140.944746][ T1598] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 140.944770][ T1598] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 140.944805][ T1598] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.965991][ T5603] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 141.075788][ T5748] usb 3-1: USB disconnect, device number 9 [ 141.137215][ T5603] usb 6-1: device descriptor read/64, error -71 [ 141.144368][ T5624] udevd[5624]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 141.183418][ T5614] Bluetooth: hci0: command 0x0c1a tx timeout [ 141.244051][ T5603] usb usb6-port1: attempt power cycle [ 141.263934][ T5614] Bluetooth: hci2: command 0x040f tx timeout [ 141.468159][ T6907] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.476052][ T6907] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.483663][ T6907] bridge_slave_0: entered allmulticast mode [ 141.492331][ T6907] bridge_slave_0: entered promiscuous mode [ 141.502520][ T6907] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.509907][ T6907] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.517458][ T6907] bridge_slave_1: entered allmulticast mode [ 141.525221][ T6907] bridge_slave_1: entered promiscuous mode [ 141.561175][ T6907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.574242][ T6907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.598366][ T5603] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 141.606335][ T30] audit: type=1400 audit(1788337188.563:601): avc: denied { write } for pid=7001 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.631159][ T5603] usb 6-1: device descriptor read/8, error -71 [ 142.293796][ T5603] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 142.407208][ T5603] usb 6-1: device descriptor read/8, error -71 [ 142.429145][ T7031] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 142.468702][ T6907] team0: Port device team_slave_0 added [ 142.479622][ T6907] team0: Port device team_slave_1 added [ 142.510686][ T6907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.518225][ T6907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 142.547202][ T5603] usb usb6-port1: unable to enumerate USB device [ 142.554047][ T6907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.566677][ T6907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.574982][ T6907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 142.600962][ T6907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.602193][ T30] audit: type=1400 audit(1788337189.563:602): avc: denied { write } for pid=7032 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.739403][ T6907] hsr_slave_0: entered promiscuous mode [ 142.748006][ T6907] hsr_slave_1: entered promiscuous mode [ 142.748523][ T6907] debugfs: 'hsr0' already exists in 'hsr' [ 142.748538][ T6907] Cannot create hsr debugfs directory [ 142.783916][ T5265] 8021q: adding VLAN 0 to HW filter on device eth11 [ 143.204680][ T1598] [drm] Initialized gud 1.0.0 for 1-1:1.0 on minor 1 [ 143.245120][ T30] audit: type=1400 audit(1788337190.213:603): avc: denied { write } for pid=7041 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.268930][ T5614] Bluetooth: hci0: command 0x0c1a tx timeout [ 143.284558][ T30] audit: type=1400 audit(1788337190.253:604): avc: denied { ioctl } for pid=6996 comm="syz.0.229" path="socket:[14286]" dev="sockfs" ino=14286 ioctlcmd=0x7213 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 143.312332][ T7033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.312689][ T7033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.552797][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 143.555234][ T5614] Bluetooth: hci2: command 0x040f tx timeout [ 143.576878][ T7033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.577303][ T7033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.687132][ T30] audit: type=1400 audit(1788337190.653:605): avc: denied { write } for pid=7053 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.780841][ T30] audit: type=1400 audit(1788337190.743:606): avc: denied { name_bind } for pid=7054 comm="syz.4.238" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 144.243088][ T6907] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 144.254965][ T6907] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 144.256024][ T6907] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 144.266165][ T6907] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 144.267196][ T6907] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 144.491436][ T30] audit: type=1400 audit(1788337191.453:607): avc: denied { write } for pid=7060 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.654184][ T5797] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 144.689703][ T6907] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 144.698331][ T6907] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 144.721358][ T6907] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 144.799105][ T30] audit: type=1400 audit(1788337191.763:608): avc: denied { write } for pid=7085 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.814105][ T5797] usb 3-1: Using ep0 maxpacket: 16 [ 144.814988][ T5797] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 144.815811][ T5797] usb 3-1: config 0 has an invalid interface number: 107 but max is 0 [ 144.815830][ T5797] usb 3-1: config 0 has no interface number 0 [ 144.815858][ T5797] usb 3-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 55, changing to 9 [ 144.815878][ T5797] usb 3-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 8496, setting to 1024 [ 144.820308][ T5797] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 144.820328][ T5797] usb 3-1: Product: syz [ 144.820340][ T5797] usb 3-1: Manufacturer: syz [ 144.820351][ T5797] usb 3-1: SerialNumber: syz [ 144.841183][ T5797] usb 3-1: config 0 descriptor?? [ 144.859808][ T5797] keyspan 3-1:0.107: Keyspan 4 port adapter converter detected [ 144.860014][ T5797] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 81 [ 144.884233][ T5797] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 1 [ 144.921313][ T5797] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 144.926763][ T5797] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 2 [ 144.933338][ T5797] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 144.941526][ T5797] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 4 [ 145.059316][ T5797] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 145.065420][ T5797] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 6 [ 145.077545][ T5797] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 145.098180][ T6907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.127955][ T6907] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.161160][ T30] audit: type=1400 audit(1788337192.123:609): avc: denied { execute } for pid=7056 comm="syz.2.235" path=2F6D656D66643A01FDAE2E2BA68CB63F32193994532C7C783F55655BBDE1210333BC2723FF179B25F35B642006202864656C6574656429 dev="hugetlbfs" ino=14732 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 145.166877][ T1427] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.166961][ T1427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.180792][ T1427] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.180867][ T1427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.289173][ T6907] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 145.299717][ T6907] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 145.367785][ T983] usb 3-1: USB disconnect, device number 10 [ 145.395769][ T983] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 145.406132][ T983] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 145.418287][ T983] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 145.433422][ T983] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 145.433989][ T983] keyspan 3-1:0.107: device disconnected [ 145.582838][ T5614] Bluetooth: hci2: command 0x040f tx timeout [ 145.600499][ T1264] tipc: Subscription rejected, illegal request [ 145.849910][ T30] audit: type=1400 audit(1788337192.813:610): avc: denied { write } for pid=7096 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.880730][ T30] audit: type=1400 audit(1788337192.843:611): avc: denied { setopt } for pid=7117 comm="syz.5.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 145.881209][ T30] audit: type=1400 audit(1788337192.843:612): avc: denied { write } for pid=7117 comm="syz.5.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 146.502024][ T7126] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 146.508272][ T1290] IPVS: starting estimator thread 0... [ 146.575843][ T30] audit: type=1400 audit(1788337193.543:613): avc: denied { write } for pid=7121 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.603138][ T7127] IPVS: using max 70 ests per chain, 168000 per kthread [ 146.621681][ T7128] syzkaller0: entered promiscuous mode [ 146.621720][ T7128] syzkaller0: entered allmulticast mode [ 146.679261][ T7128] netlink: 104 bytes leftover after parsing attributes in process `syz.5.245'. [ 146.741441][ T6907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.090416][ T30] audit: type=1400 audit(1788337194.053:614): avc: denied { mount } for pid=7146 comm="syz.2.251" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 147.665927][ T5614] Bluetooth: hci2: command 0x040f tx timeout [ 147.697164][ T30] audit: type=1400 audit(1788337194.663:615): avc: denied { write } for pid=7133 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.728662][ T30] audit: type=1400 audit(1788337194.693:616): avc: denied { unmount } for pid=5602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 147.915567][ T6907] veth0_vlan: entered promiscuous mode [ 147.946611][ T6907] veth1_vlan: entered promiscuous mode [ 147.955890][ T30] audit: type=1400 audit(1788337194.913:617): avc: denied { getopt } for pid=7163 comm="syz.2.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 148.049043][ T6907] veth0_macvtap: entered promiscuous mode [ 148.155719][ T30] audit: type=1400 audit(1788337195.123:618): avc: denied { write } for pid=7162 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.155752][ T7164] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 148.162153][ T6907] veth1_macvtap: entered promiscuous mode [ 148.215110][ T6907] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.232409][ T6907] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.263523][ T6507] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.263582][ T6507] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.263609][ T6507] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.263633][ T6507] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.449633][ T1598] ================================================================== [ 148.449648][ T1598] BUG: KASAN: slab-use-after-free in fbcon_prepare_logo+0x94e/0xc60 [ 148.449677][ T1598] Read of size 256 at addr ffff888058e1c760 by task kworker/0:2/1598 [ 148.449694][ T1598] [ 148.449703][ T1598] CPU: 0 UID: 0 PID: 1598 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 148.449723][ T1598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 148.449737][ T1598] Workqueue: usb_hub_wq hub_event [ 148.449761][ T1598] Call Trace: [ 148.449768][ T1598] [ 148.449775][ T1598] dump_stack_lvl+0x100/0x190 [ 148.449803][ T1598] print_report+0x13d/0x4b0 [ 148.449831][ T1598] ? __virt_addr_valid+0x239/0x430 [ 148.449851][ T1598] ? fbcon_prepare_logo+0x94e/0xc60 [ 148.449872][ T1598] kasan_report+0xdf/0x1c0 [ 148.449894][ T1598] ? fbcon_prepare_logo+0x94e/0xc60 [ 148.449917][ T1598] kasan_check_range+0x10f/0x1e0 [ 148.449938][ T1598] __asan_memcpy+0x23/0x60 [ 148.449960][ T1598] fbcon_prepare_logo+0x94e/0xc60 [ 148.449981][ T1598] fbcon_init+0x1065/0x1830 [ 148.450002][ T1598] visual_init+0x320/0x620 [ 148.450023][ T1598] do_bind_con_driver.isra.0+0x636/0x9c0 [ 148.450053][ T1598] do_take_over_console+0x501/0x5d0 [ 148.450077][ T1598] do_fbcon_takeover+0xe9/0x210 [ 148.450094][ T1598] fbcon_fb_registered+0x364/0x4b0 [ 148.450114][ T1598] do_register_framebuffer+0x503/0x870 [ 148.450136][ T1598] ? __pfx_do_register_framebuffer+0x10/0x10 [ 148.450159][ T1598] ? find_held_lock+0x2b/0x80 [ 148.450187][ T1598] register_framebuffer+0x23/0x40 [ 148.450208][ T1598] __drm_fb_helper_initial_config_and_unlock+0xf3b/0x17f0 [ 148.450240][ T1598] ? __pfx___drm_fb_helper_initial_config_and_unlock+0x10/0x10 [ 148.450265][ T1598] drm_fb_helper_initial_config+0x44/0x60 [ 148.450282][ T1598] drm_fbdev_client_hotplug+0x19e/0x220 [ 148.450299][ T1598] ? __pfx_drm_fbdev_client_hotplug+0x10/0x10 [ 148.450314][ T1598] drm_client_register+0x197/0x280 [ 148.450336][ T1598] drm_fbdev_client_setup+0x155/0x480 [ 148.450354][ T1598] drm_client_setup+0x160/0x1a0 [ 148.450390][ T1598] gud_probe+0x1835/0x1c20 [ 148.450414][ T1598] ? __pfx_gud_probe+0x10/0x10 [ 148.450431][ T1598] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 148.450451][ T1598] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 148.450471][ T1598] ? __pm_runtime_set_status+0x13c/0x970 [ 148.450493][ T1598] usb_probe_interface+0x386/0x9b0 [ 148.450520][ T1598] ? __pfx_usb_probe_interface+0x10/0x10 [ 148.450544][ T1598] ? kernfs_put+0x3f/0x60 [ 148.450571][ T1598] ? sysfs_create_link+0x68/0xc0 [ 148.450594][ T1598] ? __pfx_usb_probe_interface+0x10/0x10 [ 148.450617][ T1598] really_probe+0x241/0xa60 [ 148.450644][ T1598] __driver_probe_device+0x210/0x460 [ 148.450667][ T1598] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 148.450685][ T1598] driver_probe_device+0x4a/0x140 [ 148.450715][ T1598] __device_attach_driver+0x1df/0x320 [ 148.450733][ T1598] ? __pfx___device_attach_driver+0x10/0x10 [ 148.450750][ T1598] bus_for_each_drv+0x159/0x1e0 [ 148.450775][ T1598] ? __pfx_bus_for_each_drv+0x10/0x10 [ 148.450799][ T1598] ? lockdep_hardirqs_on+0x7d/0x110 [ 148.450818][ T1598] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 148.450838][ T1598] __device_attach+0x1e4/0x4d0 [ 148.450855][ T1598] ? __pfx___device_attach+0x10/0x10 [ 148.450872][ T1598] ? do_raw_spin_unlock+0x145/0x1e0 [ 148.450895][ T1598] device_initial_probe+0xaf/0xd0 [ 148.450913][ T1598] bus_probe_device+0x64/0x160 [ 148.450938][ T1598] device_add+0x121d/0x1970 [ 148.450955][ T1598] ? __pfx_device_add+0x10/0x10 [ 148.450972][ T1598] ? mark_held_locks+0x40/0x70 [ 148.450987][ T1598] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 148.451006][ T1598] usb_set_configuration+0xd97/0x1c60 [ 148.451032][ T1598] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 148.451059][ T1598] usb_generic_driver_probe+0xa1/0xe0 [ 148.451085][ T1598] usb_probe_device+0xef/0x400 [ 148.451105][ T1598] ? __pfx_usb_probe_device+0x10/0x10 [ 148.451127][ T1598] really_probe+0x241/0xa60 [ 148.451154][ T1598] __driver_probe_device+0x210/0x460 [ 148.451178][ T1598] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 148.451195][ T1598] driver_probe_device+0x4a/0x140 [ 148.451219][ T1598] __device_attach_driver+0x1df/0x320 [ 148.451237][ T1598] ? __pfx___device_attach_driver+0x10/0x10 [ 148.451255][ T1598] bus_for_each_drv+0x159/0x1e0 [ 148.451278][ T1598] ? __pfx_bus_for_each_drv+0x10/0x10 [ 148.451299][ T1598] ? lockdep_hardirqs_on+0x7d/0x110 [ 148.451317][ T1598] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 148.451334][ T1598] __device_attach+0x1e4/0x4d0 [ 148.451350][ T1598] ? __pfx___device_attach+0x10/0x10 [ 148.451369][ T1598] ? do_raw_spin_unlock+0x145/0x1e0 [ 148.451402][ T1598] device_initial_probe+0xaf/0xd0 [ 148.451420][ T1598] bus_probe_device+0x64/0x160 [ 148.451445][ T1598] device_add+0x121d/0x1970 [ 148.451465][ T1598] ? __pfx_device_add+0x10/0x10 [ 148.451482][ T1598] ? usb_detect_static_quirks+0x335/0x3e0 [ 148.451504][ T1598] usb_new_device.part.0+0xcc2/0x1686 [ 148.451529][ T1598] ? do_raw_spin_lock+0x128/0x260 [ 148.451550][ T1598] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 148.451575][ T1598] ? mark_held_locks+0x40/0x70 [ 148.451593][ T1598] hub_event.cold+0x1e3/0xe90 [ 148.451625][ T1598] ? __pfx_hub_event+0x10/0x10 [ 148.451644][ T1598] ? mark_lock+0xea0/0x1020 [ 148.451662][ T1598] ? lock_acquire+0x1d1/0x380 [ 148.451680][ T1598] ? process_one_work+0xa2c/0x1b10 [ 148.451705][ T1598] ? process_one_work+0x906/0x1b10 [ 148.451731][ T1598] ? process_one_work+0x906/0x1b10 [ 148.451760][ T1598] process_one_work+0xac7/0x1b10 [ 148.451789][ T1598] ? __pfx_process_one_work+0x10/0x10 [ 148.451816][ T1598] ? lock_acquire+0x1d1/0x380 [ 148.451836][ T1598] ? __pfx_hub_event+0x10/0x10 [ 148.451856][ T1598] worker_thread+0x5ef/0xe50 [ 148.451883][ T1598] ? __pfx_worker_thread+0x10/0x10 [ 148.451909][ T1598] ? kthread+0x13a/0x450 [ 148.451933][ T1598] ? __pfx_worker_thread+0x10/0x10 [ 148.451959][ T1598] kthread+0x373/0x450 [ 148.451982][ T1598] ? __pfx_kthread+0x10/0x10 [ 148.452007][ T1598] ret_from_fork+0x730/0xd60 [ 148.452026][ T1598] ? __pfx_ret_from_fork+0x10/0x10 [ 148.452046][ T1598] ? __switch_to+0x800/0x10f0 [ 148.452071][ T1598] ? __pfx_kthread+0x10/0x10 [ 148.452095][ T1598] ret_from_fork_asm+0x1a/0x30 [ 148.452120][ T1598] [ 148.452127][ T1598] [ 148.452131][ T1598] Allocated by task 6775: [ 148.452140][ T1598] kasan_save_stack+0x30/0x50 [ 148.452158][ T1598] kasan_save_track+0x14/0x30 [ 148.452175][ T1598] __kasan_slab_alloc+0x89/0x90 [ 148.452193][ T1598] kmem_cache_alloc_noprof+0x269/0x6a0 [ 148.452209][ T1598] taskstats_exit+0x6d3/0xca0 [ 148.452226][ T1598] do_exit+0x65c/0x2ae0 [ 148.452246][ T1598] do_group_exit+0xd5/0x2a0 [ 148.452267][ T1598] get_signal+0x1ec7/0x21e0 [ 148.452284][ T1598] arch_do_signal_or_restart+0x91/0x7e0 [ 148.452308][ T1598] exit_to_user_mode_loop+0x139/0x700 [ 148.452327][ T1598] do_syscall_64+0x661/0x790 [ 148.452345][ T1598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.452362][ T1598] [ 148.452366][ T1598] Freed by task 6812: [ 148.452374][ T1598] kasan_save_stack+0x30/0x50 [ 148.452396][ T1598] kasan_save_track+0x14/0x30 [ 148.452413][ T1598] kasan_save_free_info+0x3b/0x70 [ 148.452436][ T1598] __kasan_slab_free+0x5f/0x80 [ 148.452454][ T1598] kmem_cache_free+0x127/0x6c0 [ 148.452479][ T1598] __put_task_struct+0x2e1/0x590 [ 148.452495][ T1598] rcu_core+0x5f0/0x1260 [ 148.452514][ T1598] handle_softirqs+0x1e6/0x9d0 [ 148.452529][ T1598] __irq_exit_rcu+0x194/0x210 [ 148.452543][ T1598] irq_exit_rcu+0x9/0x30 [ 148.452557][ T1598] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 148.452572][ T1598] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 148.452588][ T1598] [ 148.452591][ T1598] The buggy address belongs to the object at ffff888058e1c660 [ 148.452591][ T1598] which belongs to the cache taskstats of size 688 [ 148.452606][ T1598] The buggy address is located 256 bytes inside of [ 148.452606][ T1598] freed 688-byte region [ffff888058e1c660, ffff888058e1c910) [ 148.452638][ T1598] [ 148.452643][ T1598] The buggy address belongs to the physical page: [ 148.452651][ T1598] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888058e1c330 pfn:0x58e1c [ 148.452667][ T1598] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 148.452682][ T1598] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 148.452699][ T1598] page_type: f5(slab) [ 148.452716][ T1598] raw: 00fff00000000240 ffff88801eac3780 ffffea0000a04d10 ffff88801e6ef948 [ 148.452733][ T1598] raw: ffff888058e1c330 000000020014000d 00000000f5000000 0000000000000000 [ 148.452750][ T1598] head: 00fff00000000240 ffff88801eac3780 ffffea0000a04d10 ffff88801e6ef948 [ 148.452767][ T1598] head: ffff888058e1c330 000000020014000d 00000000f5000000 0000000000000000 [ 148.452780][ T1598] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 148.452794][ T1598] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 148.452804][ T1598] page dumped because: kasan: bad access detected [ 148.452811][ T1598] page_owner tracks the page as allocated [ 148.452817][ T1598] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6708, tgid 6708 (syz.2.178), ts 124684509815 [ 148.452844][ T1598] post_alloc_hook+0xfd/0x120 [ 148.452867][ T1598] get_page_from_freelist+0x110d/0x35d0 [ 148.452888][ T1598] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 148.452913][ T1598] new_slab+0xa9/0x6e0 [ 148.452934][ T1598] refill_objects+0xe3/0x410 [ 148.452956][ T1598] __pcs_replace_empty_main+0x35e/0x650 [ 148.452979][ T1598] kmem_cache_alloc_noprof+0x4c4/0x6a0 [ 148.452993][ T1598] taskstats_exit+0x6d3/0xca0 [ 148.453008][ T1598] do_exit+0x65c/0x2ae0 [ 148.453027][ T1598] do_group_exit+0xd5/0x2a0 [ 148.453046][ T1598] __x64_sys_exit_group+0x3e/0x50 [ 148.453064][ T1598] x64_sys_call+0x1567/0x1570 [ 148.453079][ T1598] do_syscall_64+0x123/0x790 [ 148.453095][ T1598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.453111][ T1598] page last free pid 6708 tgid 6708 ts 124684266158 stack trace: [ 148.453122][ T1598] __free_frozen_pages+0x79f/0x10f0 [ 148.453141][ T1598] device_release+0xd2/0x270 [ 148.453158][ T1598] kobject_put+0x1f7/0x640 [ 148.453174][ T1598] netdev_run_todo+0xa10/0x1600 [ 148.453189][ T1598] tun_chr_close+0xea/0x220 [ 148.453212][ T1598] __fput+0x3ff/0xb50 [ 148.453231][ T1598] task_work_run+0x150/0x240 [ 148.453253][ T1598] exit_to_user_mode_loop+0x1d8/0x700 [ 148.453271][ T1598] do_syscall_64+0x661/0x790 [ 148.453288][ T1598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.453304][ T1598] [ 148.453308][ T1598] Memory state around the buggy address: [ 148.453317][ T1598] ffff888058e1c600: fc fc fc fc fc fc fc fc fc fc fc fc fa fb fb fb [ 148.453329][ T1598] ffff888058e1c680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 148.453343][ T1598] >ffff888058e1c700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 148.453353][ T1598] ^ [ 148.453363][ T1598] ffff888058e1c780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 148.453374][ T1598] ffff888058e1c800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 148.453388][ T1598] ================================================================== [ 148.635128][ T1386] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.635145][ T1386] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.639052][ T6907] ieee80211 phy19: Selected rate control algorithm 'minstrel_ht' [ 148.698251][ T1598] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 149.556602][ T1598] CPU: 0 UID: 0 PID: 1598 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 149.565948][ T1598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 149.575988][ T1598] Workqueue: usb_hub_wq hub_event [ 149.580997][ T1598] Call Trace: [ 149.584253][ T1598] [ 149.587161][ T1598] dump_stack_lvl+0x100/0x190 [ 149.591817][ T1598] vpanic+0x553/0x970 [ 149.595772][ T1598] ? __pfx_vpanic+0x10/0x10 [ 149.600250][ T1598] ? fbcon_prepare_logo+0x94e/0xc60 [ 149.605420][ T1598] panic+0xd1/0xe0 [ 149.609113][ T1598] ? __pfx_panic+0x10/0x10 [ 149.613500][ T1598] ? fbcon_prepare_logo+0x94e/0xc60 [ 149.618673][ T1598] ? preempt_schedule_common+0x3c/0xb0 [ 149.624106][ T1598] check_panic_on_warn.cold+0x19/0x34 [ 149.629447][ T1598] end_report.part.0+0x3a/0x90 [ 149.634187][ T1598] kasan_report.cold+0xe/0x18 [ 149.638840][ T1598] ? fbcon_prepare_logo+0x94e/0xc60 [ 149.644024][ T1598] kasan_check_range+0x10f/0x1e0 [ 149.648944][ T1598] __asan_memcpy+0x23/0x60 [ 149.653337][ T1598] fbcon_prepare_logo+0x94e/0xc60 [ 149.658338][ T1598] fbcon_init+0x1065/0x1830 [ 149.662821][ T1598] visual_init+0x320/0x620 [ 149.667236][ T1598] do_bind_con_driver.isra.0+0x636/0x9c0 [ 149.672850][ T1598] do_take_over_console+0x501/0x5d0 [ 149.678027][ T1598] do_fbcon_takeover+0xe9/0x210 [ 149.682850][ T1598] fbcon_fb_registered+0x364/0x4b0 [ 149.687939][ T1598] do_register_framebuffer+0x503/0x870 [ 149.693370][ T1598] ? __pfx_do_register_framebuffer+0x10/0x10 [ 149.699326][ T1598] ? find_held_lock+0x2b/0x80 [ 149.703980][ T1598] register_framebuffer+0x23/0x40 [ 149.708978][ T1598] __drm_fb_helper_initial_config_and_unlock+0xf3b/0x17f0 [ 149.716062][ T1598] ? __pfx___drm_fb_helper_initial_config_and_unlock+0x10/0x10 [ 149.723582][ T1598] drm_fb_helper_initial_config+0x44/0x60 [ 149.729273][ T1598] drm_fbdev_client_hotplug+0x19e/0x220 [ 149.734790][ T1598] ? __pfx_drm_fbdev_client_hotplug+0x10/0x10 [ 149.740829][ T1598] drm_client_register+0x197/0x280 [ 149.745915][ T1598] drm_fbdev_client_setup+0x155/0x480 [ 149.751261][ T1598] drm_client_setup+0x160/0x1a0 [ 149.756092][ T1598] gud_probe+0x1835/0x1c20 [ 149.760492][ T1598] ? __pfx_gud_probe+0x10/0x10 [ 149.765226][ T1598] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 149.771014][ T1598] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 149.776790][ T1598] ? __pm_runtime_set_status+0x13c/0x970 [ 149.782395][ T1598] usb_probe_interface+0x386/0x9b0 [ 149.787489][ T1598] ? __pfx_usb_probe_interface+0x10/0x10 [ 149.793107][ T1598] ? kernfs_put+0x3f/0x60 [ 149.797415][ T1598] ? sysfs_create_link+0x68/0xc0 [ 149.802325][ T1598] ? __pfx_usb_probe_interface+0x10/0x10 [ 149.807930][ T1598] really_probe+0x241/0xa60 [ 149.812419][ T1598] __driver_probe_device+0x210/0x460 [ 149.817682][ T1598] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 149.823459][ T1598] driver_probe_device+0x4a/0x140 [ 149.828461][ T1598] __device_attach_driver+0x1df/0x320 [ 149.833805][ T1598] ? __pfx___device_attach_driver+0x10/0x10 [ 149.839681][ T1598] bus_for_each_drv+0x159/0x1e0 [ 149.844512][ T1598] ? __pfx_bus_for_each_drv+0x10/0x10 [ 149.849883][ T1598] ? lockdep_hardirqs_on+0x7d/0x110 [ 149.855054][ T1598] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 149.860831][ T1598] __device_attach+0x1e4/0x4d0 [ 149.865567][ T1598] ? __pfx___device_attach+0x10/0x10 [ 149.870822][ T1598] ? do_raw_spin_unlock+0x145/0x1e0 [ 149.875995][ T1598] device_initial_probe+0xaf/0xd0 [ 149.880993][ T1598] bus_probe_device+0x64/0x160 [ 149.885742][ T1598] device_add+0x121d/0x1970 [ 149.890236][ T1598] ? __pfx_device_add+0x10/0x10 [ 149.895074][ T1598] ? mark_held_locks+0x40/0x70 [ 149.899823][ T1598] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 149.905616][ T1598] usb_set_configuration+0xd97/0x1c60 [ 149.910979][ T1598] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 149.917022][ T1598] usb_generic_driver_probe+0xa1/0xe0 [ 149.922373][ T1598] usb_probe_device+0xef/0x400 [ 149.927111][ T1598] ? __pfx_usb_probe_device+0x10/0x10 [ 149.932458][ T1598] really_probe+0x241/0xa60 [ 149.936952][ T1598] __driver_probe_device+0x210/0x460 [ 149.942224][ T1598] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 149.948002][ T1598] driver_probe_device+0x4a/0x140 [ 149.953007][ T1598] __device_attach_driver+0x1df/0x320 [ 149.958351][ T1598] ? __pfx___device_attach_driver+0x10/0x10 [ 149.964223][ T1598] bus_for_each_drv+0x159/0x1e0 [ 149.969050][ T1598] ? __pfx_bus_for_each_drv+0x10/0x10 [ 149.974399][ T1598] ? lockdep_hardirqs_on+0x7d/0x110 [ 149.979579][ T1598] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 149.985356][ T1598] __device_attach+0x1e4/0x4d0 [ 149.990090][ T1598] ? __pfx___device_attach+0x10/0x10 [ 149.995344][ T1598] ? do_raw_spin_unlock+0x145/0x1e0 [ 150.000525][ T1598] device_initial_probe+0xaf/0xd0 [ 150.005528][ T1598] bus_probe_device+0x64/0x160 [ 150.010269][ T1598] device_add+0x121d/0x1970 [ 150.014754][ T1598] ? __pfx_device_add+0x10/0x10 [ 150.019584][ T1598] ? usb_detect_static_quirks+0x335/0x3e0 [ 150.025285][ T1598] usb_new_device.part.0+0xcc2/0x1686 [ 150.030634][ T1598] ? do_raw_spin_lock+0x128/0x260 [ 150.035631][ T1598] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 150.041413][ T1598] ? mark_held_locks+0x40/0x70 [ 150.046157][ T1598] hub_event.cold+0x1e3/0xe90 [ 150.050816][ T1598] ? __pfx_hub_event+0x10/0x10 [ 150.055554][ T1598] ? mark_lock+0xea0/0x1020 [ 150.060038][ T1598] ? lock_acquire+0x1d1/0x380 [ 150.064693][ T1598] ? process_one_work+0xa2c/0x1b10 [ 150.069791][ T1598] ? process_one_work+0x906/0x1b10 [ 150.074878][ T1598] ? process_one_work+0x906/0x1b10 [ 150.079971][ T1598] process_one_work+0xac7/0x1b10 [ 150.084890][ T1598] ? __pfx_process_one_work+0x10/0x10 [ 150.090318][ T1598] ? lock_acquire+0x1d1/0x380 [ 150.094986][ T1598] ? __pfx_hub_event+0x10/0x10 [ 150.099731][ T1598] worker_thread+0x5ef/0xe50 [ 150.104301][ T1598] ? __pfx_worker_thread+0x10/0x10 [ 150.109390][ T1598] ? kthread+0x13a/0x450 [ 150.113609][ T1598] ? __pfx_worker_thread+0x10/0x10 [ 150.118701][ T1598] kthread+0x373/0x450 [ 150.122748][ T1598] ? __pfx_kthread+0x10/0x10 [ 150.127320][ T1598] ret_from_fork+0x730/0xd60 [ 150.131885][ T1598] ? __pfx_ret_from_fork+0x10/0x10 [ 150.136969][ T1598] ? __switch_to+0x800/0x10f0 [ 150.141622][ T1598] ? __pfx_kthread+0x10/0x10 [ 150.146189][ T1598] ret_from_fork_asm+0x1a/0x30 [ 150.150928][ T1598] [ 150.154119][ T1598] Kernel Offset: disabled [ 150.158420][ T1598] Rebooting in 86400 seconds..