last executing test programs: 13m23.574218844s ago: executing program 2 (id=648): syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x800) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000000)={'vlan0\x00', @multicast}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r2, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f00000001c0)={0x7, r2, 0x1}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_buf(r4, 0x1, 0x38, 0x0, &(0x7f0000000a40)) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000000) r5 = dup(r2) shutdown(r5, 0x1) r6 = socket$vsock_stream(0x28, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r7, 0x107, 0x9, 0x0, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x3c, &(0x7f0000000000)={0x0, 0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0xffffffffffffffe0}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) r8 = syz_io_uring_setup(0x2b06, &(0x7f0000000040)={0x0, 0x3d26, 0x800, 0x0, 0x100000}, &(0x7f0000ffd000), &(0x7f0000ffe000), &(0x7f0000000180)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x56c5, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000380)={0x90, 0x0, 0x0, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, {0x0, 0x0, 0x3, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x90) io_uring_register$IORING_REGISTER_FILES(r8, 0x14, &(0x7f00000003c0), 0x2) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(r5, 0x7c80, 0x0) socketpair(0x8, 0x2, 0x1ff, &(0x7f0000000100)) 13m21.458658137s ago: executing program 2 (id=655): socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x28, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000d400000000000000526c000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000850000006b0000004783300004000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000b7080000000000007b8af8ff00000000b708000000040005008af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0xca, &(0x7f0000000300)=""/202, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0x8, 0x3, 0x77}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f00000004c0)=[{0x4, 0x4, 0x7, 0x9}, {0x2, 0x4, 0x9, 0x9}, {0x4, 0x5, 0x9, 0x2}, {0x5, 0x2, 0x10, 0x3}], 0x10, 0x10000}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000006c0)={@ifindex, 0x12, 0x1, 0x6, &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000600)=[0x0, 0x0], &(0x7f0000000640)=[0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0]}, 0x40) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x800, 0x4) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r3 = epoll_create(0x10) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000080) read$char_usb(r1, &(0x7f0000000500)=""/238, 0xee) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x538, 0xffffffff, 0x398, 0xe8, 0x398, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xff000000, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x270, 0x2b0, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0xe, 0x6, 0x5, 0x9, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 0x4000, 0x11}}, @common=@rt={{0x138}, {0x401, [0xfffffffe], 0x1, 0x2, 0x3, [@remote, @empty, @remote, @remote, @remote, @mcast1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, @rand_addr=' \x01\x00', @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}], 0x9}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x1, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) r5 = getpid() prlimit64(r5, 0xe, 0x0, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) 13m19.735800489s ago: executing program 2 (id=661): r0 = syz_open_dev$dvb_frontend(&(0x7f00000001c0), 0x0, 0x109000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010028bd7200fedbdf250b0000f646159efb4a850ebd4f0b88c8000400068004000180"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044044) ioctl$FE_READ_SIGNAL_STRENGTH(r0, 0x80026f47, &(0x7f0000000200)) r3 = open(0x0, 0x66842, 0x90) syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_GET_SREGS2(r4, 0x8140aecc, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x1000, 0x1000}, 0x20) r5 = add_key$user(&(0x7f0000000380), &(0x7f0000000080), &(0x7f0000000000)="15", 0x1, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r6, r6}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) 13m18.382651253s ago: executing program 2 (id=666): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 13m17.977640684s ago: executing program 2 (id=668): r0 = socket(0x40000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x401, 0x0, &(0x7f00000001c0)=0x33) (async) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd"], 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000040) r1 = socket$inet_sctp(0x2, 0x1, 0x84) mount(0x0, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x0, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x3}, {}, {0x4, 0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x7, 0x1, {0x0, 0x3}}, @TCA_U32_SEL={0x24, 0x5, {0x9, 0x6, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x1, 0x4000001, 0x206, 0x6}]}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x94}, 0x24040084) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000540)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000040)={0x7, 0x8200, 0x0, 0x8, r5}, &(0x7f0000000280)=0x10) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x80580, 0x0) (async) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000f40)={0x1000008, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r9, 0xffffffffffffffff}) close_range(r6, r7, 0x0) ppoll(&(0x7f0000000000)=[{r6, 0x2000}, {r10, 0x42}], 0x2, 0x0, 0x0, 0x0) (async) r11 = socket$inet6(0xa, 0x1, 0x0) close_range(r11, 0xffffffffffffffff, 0x0) (async) r12 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc3400000000001090224000100007f0009040000010301010009210008000122010009058103"], 0x0) (async) ioctl$XFS_IOC_FSGEOMETRY_V4(0xffffffffffffffff, 0x8070587c, 0x0) syz_usb_control_io$hid(r12, &(0x7f0000000300)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="400a20000000200d1d"], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(r12, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000480)=ANY=[@ANYBLOB="200f00002000"], 0x0, 0x0, 0x0, 0x0}) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0x6c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x5, 0x30000009, 0xa5f, 0x8}, @private=0xa010100, @loopback, 0xff000000, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r14 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) write$cgroup_pid(r14, &(0x7f0000000000), 0x12) (async) r15 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$vhost_msg_v2(r15, &(0x7f0000001640)={0x2, 0x0, {&(0x7f00000005c0)=""/4096, 0x1000, 0x0, 0x3, 0x2}}, 0x48) 13m17.153555302s ago: executing program 2 (id=671): socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x28, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000d400000000000000526c000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000850000006b0000004783300004000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000b7080000000000007b8af8ff00000000b708000000040005008af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0xca, &(0x7f0000000300)=""/202, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0x8, 0x3, 0x77}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f00000004c0)=[{0x4, 0x4, 0x7, 0x9}, {0x2, 0x4, 0x9, 0x9}, {0x4, 0x5, 0x9, 0x2}, {0x5, 0x2, 0x10, 0x3}], 0x10, 0x10000}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000006c0)={@ifindex, 0x12, 0x1, 0x6, &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000600)=[0x0, 0x0], &(0x7f0000000640)=[0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0]}, 0x40) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x800, 0x4) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r3 = epoll_create(0x10) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000080) read$char_usb(r1, &(0x7f0000000500)=""/238, 0xee) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x538, 0xffffffff, 0x398, 0xe8, 0x398, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xff000000, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x270, 0x2b0, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0xe, 0x6, 0x5, 0x9, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 0x4000, 0x11}}, @common=@rt={{0x138}, {0x401, [0xfffffffe], 0x1, 0x2, 0x3, [@remote, @empty, @remote, @remote, @remote, @mcast1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, @rand_addr=' \x01\x00', @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}], 0x9}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x1, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) r5 = getpid() prlimit64(r5, 0xe, 0x0, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) 13m15.305934884s ago: executing program 32 (id=671): socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x28, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000d400000000000000526c000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000850000006b0000004783300004000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000b7080000000000007b8af8ff00000000b708000000040005008af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0xca, &(0x7f0000000300)=""/202, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0x8, 0x3, 0x77}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f00000004c0)=[{0x4, 0x4, 0x7, 0x9}, {0x2, 0x4, 0x9, 0x9}, {0x4, 0x5, 0x9, 0x2}, {0x5, 0x2, 0x10, 0x3}], 0x10, 0x10000}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000006c0)={@ifindex, 0x12, 0x1, 0x6, &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000600)=[0x0, 0x0], &(0x7f0000000640)=[0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0]}, 0x40) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x800, 0x4) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r3 = epoll_create(0x10) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000080) read$char_usb(r1, &(0x7f0000000500)=""/238, 0xee) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x538, 0xffffffff, 0x398, 0xe8, 0x398, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xff000000, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x270, 0x2b0, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0xe, 0x6, 0x5, 0x9, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 0x4000, 0x11}}, @common=@rt={{0x138}, {0x401, [0xfffffffe], 0x1, 0x2, 0x3, [@remote, @empty, @remote, @remote, @remote, @mcast1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, @rand_addr=' \x01\x00', @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}], 0x9}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x1, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) r5 = getpid() prlimit64(r5, 0xe, 0x0, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) 4m15.706394145s ago: executing program 3 (id=2182): prctl$PR_SCHED_CORE(0x41, 0x3, 0x0, 0x0, 0x0) r0 = getpid() getpgid(r0) socket$nl_generic(0x10, 0x3, 0x10) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x1}, &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x1408009, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'syz_tun\x00'}) openat$mixer(0xffffffffffffff9c, 0x0, 0x20200, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000200)={0x540, 0x0, r4}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000200)={0x2020}, 0x2020) sched_setattr(0x0, &(0x7f0000000180)={0x47, 0x5, 0x8, 0x5, 0x0, 0x9, 0x0, 0x57c73f3a, 0xfa11, 0xffffffff}, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0xb1, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0500000406010100000000000000000001000700ab0b0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) 4m14.58837973s ago: executing program 3 (id=2185): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x909046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20000, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0xa, 0x0, 0x7fffffff}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, r1) preadv(0xffffffffffffffff, 0x0, 0x0, 0x36, 0xffffffff) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xffffffff, @remote}}}, 0x108) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@dellink={0x20, 0x11, 0x101}, 0x20}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x28080, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) read$FUSE(r5, 0x0, 0x0) write$FUSE_INIT(r5, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x27, 0x4, 0x1001a, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r5, 0x0, 0x0, 0x0) rename(0x0, &(0x7f0000000140)='./file0/../file0/file0\x00') r6 = dup2(r4, r0) close_range(r6, 0xffffffffffffffff, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000340)={0x1d, r8, 0x2, {0x0, 0xff, 0x6}, 0xfe}, 0x18) 4m13.603785729s ago: executing program 3 (id=2188): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00007db000/0x400000)=nil) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000080)={0x1, {0x5, 0x3, 0xbe2, 0x399b}}) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) splice(r3, 0x0, r4, 0x0, 0xa85, 0xf) r8 = accept4(r2, 0x0, 0x0, 0x80800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/69, 0x45}], 0x1}, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0xee01, &(0x7f0000000240)={0xfffffffffffffffb, 0x3, 0xb41c, 0x7, 0x3, 0x3, 0x1, 0x9, 0x21b}) r9 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x2, 0x1}, 0x8) 4m10.624202058s ago: executing program 3 (id=2192): openat(0xffffffffffffffff, &(0x7f0000000340)='./cgroup.cpu/cgroup.procs\x00', 0x82, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000205f14120200000000000109022400010000600009040180020300000009210604000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x0}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) 4m6.275431535s ago: executing program 3 (id=2202): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000180)={0x4, "d4009373965ede98b92c7d8ae1e860074cbe402c70f9f8cea47f513f24b08e93", 0x3, 0x3, 0x0, 0xf900, 0x4000800, 0x8}) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f0000000180)=0x6121, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x7, @private0, 0x10001}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, r3, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f00000063c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5fff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895469bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04f416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be00", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0xd8, 0xb, 0xfffffffffffffff9, [{{0x0, 0x2, 0x2, 0x100, 0x8002, 0x8, {0x6, 0x9, 0x2, 0x80000000000008ff, 0x3, 0x0, 0x7fffffff, 0x58, 0x3, 0x8000, 0x9, r4, r5, 0x1, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0xfa, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x00\x00'}}]}, 0x0, 0x0, 0x0}) getdents(r6, &(0x7f0000000340)=""/151, 0x97) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r8, 0x8912, 0x0) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r9, &(0x7f0000000040)={0x0, 0x8, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x10}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) r10 = fanotify_init(0x2, 0x101000) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r10, 0x101, 0x8000031, r11, 0x0) r12 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x1a0) r13 = fanotify_init(0x40, 0x80000) fanotify_mark(r13, 0x105, 0x40001032, r12, 0x0) close(r13) epoll_create(0x90a8) ioctl$AUTOFS_IOC_PROTOVER(r7, 0x80049363, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r9, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x57, 0x1405, 0x8, 0x70bd2a, 0x25dfdbfb, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000080}, 0x801) 4m5.905328255s ago: executing program 3 (id=2203): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000007880)=""/102400, 0x19000) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000880)={{r0, &(0x7f0000000000)='fuse\x00', 0x101000, &(0x7f0000000040)={@align=0x3, {0x2, 0x4, 0x7ff, 0x6}}, 0x3, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000240)=0x6}, 0x3, &(0x7f0000000800)=[{0x3, 0x100, &(0x7f0000000500)='syz1\x00', &(0x7f0000000540)="ae450950fd05d39976dae1a75f55c54e07b451858fd275b2510d648703709c67182dcc282c3adf4273ca4b4886c7dc04dd8e456c22768e88cc970f28dac3c98a8c50c2f8155627041c6e7bbf205a85cab47e1c89f1ec3310cfc44193b8f7f7f4af0a86b275b357063783d7ff96684d734dcbdfed057691d9964b6183903081a1bf75aa8670d79f061b05ce71d4018e32d7c3326a", 0x94, 0x20}, {0x2, 0x40, &(0x7f0000000600)='/dev/cpu/#/msr\x00', &(0x7f0000000640)="5059905c7cc6721fc066e11394dc51562e2193dd27eb79f76315cdcc148f9c650abe56866ee64b41e391bd9878e1d76302d5966a3b0d6dcc37bc57c72c87df7770d61697b72c16d5b706b80e734d323e194282b4a5c2df9b4f2a4b30e87dbd95a961d23f614d64c3f372f7d559785b3be75ab34f37cccfc2f1f9533de779e43a65a6726edc2125e41f9d5d53274557c754663179cf678cb98658dafbbcb27414c7a6bfcfb4f16d27f9b2d6", 0xab}, {0x2, 0xe08a, &(0x7f0000000700)='^\x00', &(0x7f0000000740)="b68b8e0bf205c8375dc19fd7e5a81a54fd271fe36df776d45a662e63102a45aac86f677e37a1b7a20cac2b1c6c19e89d2b8668c623fe94bc5bed464fd86a49a94058e856b1a6d09cb7299e86c3190be309fb731bb4d5d874e7cbd7fd79d6df37ef6bc7062910dfef613e10c856ebc87a29c8072b4d7e3ffb53ad42b35e17483650f9a25e6f99e28c6d910872ce4f366d1cb8eec5c59267cb57acb3a5fed4226be806d1a0cdb8ba1c84184b45e89aa7c899148ec5af54b4e64271", 0xba, 0x38}]}) ioctl$BLKRRPART(r3, 0x125f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) getresgid(0x0, 0x0, 0x0) setfsgid(0x0) setfsgid(0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001180)={r4, 0x0, 0x0}, 0x1c) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lstat(&(0x7f0000000200)='./file0\x00', 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000002f00090073cc72e16accbe0a040000002a00"], 0x40}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 3m50.772712459s ago: executing program 33 (id=2203): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000007880)=""/102400, 0x19000) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000880)={{r0, &(0x7f0000000000)='fuse\x00', 0x101000, &(0x7f0000000040)={@align=0x3, {0x2, 0x4, 0x7ff, 0x6}}, 0x3, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000240)=0x6}, 0x3, &(0x7f0000000800)=[{0x3, 0x100, &(0x7f0000000500)='syz1\x00', &(0x7f0000000540)="ae450950fd05d39976dae1a75f55c54e07b451858fd275b2510d648703709c67182dcc282c3adf4273ca4b4886c7dc04dd8e456c22768e88cc970f28dac3c98a8c50c2f8155627041c6e7bbf205a85cab47e1c89f1ec3310cfc44193b8f7f7f4af0a86b275b357063783d7ff96684d734dcbdfed057691d9964b6183903081a1bf75aa8670d79f061b05ce71d4018e32d7c3326a", 0x94, 0x20}, {0x2, 0x40, &(0x7f0000000600)='/dev/cpu/#/msr\x00', &(0x7f0000000640)="5059905c7cc6721fc066e11394dc51562e2193dd27eb79f76315cdcc148f9c650abe56866ee64b41e391bd9878e1d76302d5966a3b0d6dcc37bc57c72c87df7770d61697b72c16d5b706b80e734d323e194282b4a5c2df9b4f2a4b30e87dbd95a961d23f614d64c3f372f7d559785b3be75ab34f37cccfc2f1f9533de779e43a65a6726edc2125e41f9d5d53274557c754663179cf678cb98658dafbbcb27414c7a6bfcfb4f16d27f9b2d6", 0xab}, {0x2, 0xe08a, &(0x7f0000000700)='^\x00', &(0x7f0000000740)="b68b8e0bf205c8375dc19fd7e5a81a54fd271fe36df776d45a662e63102a45aac86f677e37a1b7a20cac2b1c6c19e89d2b8668c623fe94bc5bed464fd86a49a94058e856b1a6d09cb7299e86c3190be309fb731bb4d5d874e7cbd7fd79d6df37ef6bc7062910dfef613e10c856ebc87a29c8072b4d7e3ffb53ad42b35e17483650f9a25e6f99e28c6d910872ce4f366d1cb8eec5c59267cb57acb3a5fed4226be806d1a0cdb8ba1c84184b45e89aa7c899148ec5af54b4e64271", 0xba, 0x38}]}) ioctl$BLKRRPART(r3, 0x125f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) getresgid(0x0, 0x0, 0x0) setfsgid(0x0) setfsgid(0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001180)={r4, 0x0, 0x0}, 0x1c) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lstat(&(0x7f0000000200)='./file0\x00', 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000002f00090073cc72e16accbe0a040000002a00"], 0x40}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 3m49.924959809s ago: executing program 4 (id=2251): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, 0x4, 0x6, 0x401, 0x2000000, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}}, 0x20000804) 3m49.605687776s ago: executing program 4 (id=2252): rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x7) wait4(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=r0], 0x10}, 0x1, 0x0, 0x0, 0xc080}, 0x20000010) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) ioctl$SW_SYNC_IOC_INC(r6, 0x40045701, &(0x7f0000000100)=0x9) r7 = creat(0x0, 0x0) write$FUSE_INIT(r7, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r7, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000030000"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x200000000000026f, 0x1}}, 0x40) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x100000002) sendmmsg(r1, &(0x7f0000001c00), 0x400000000000159, 0x40840) r9 = socket(0xa, 0x3, 0x3a) getsockopt$sock_linger(r9, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) socket$nl_route(0x10, 0x3, 0x0) 3m45.789589124s ago: executing program 4 (id=2256): prctl$PR_SCHED_CORE(0x41, 0x3, 0x0, 0x0, 0x0) r0 = getpid() getpgid(r0) socket$nl_generic(0x10, 0x3, 0x10) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x1408009, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'syz_tun\x00'}) syz_open_dev$audion(&(0x7f00000001c0), 0x6, 0x20c001) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000200)={0x540}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) 3m45.577750382s ago: executing program 4 (id=2258): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(0xffffffffffffffff, 0x8000000000000000) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r5, 0x80984120, &(0x7f0000000340)) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x34, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x10}, {}, {0x4, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x40014) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r10) sendmsg$IEEE802154_ADD_IFACE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, r11, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000000}, 0x40044) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_coalesce={0x19, 0x0, 0xfffffffd, 0x800, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x8080, 0x800, 0x0, 0x440000, 0x0, 0x0, 0x400000, 0x0, 0xfffffffd, 0x20000, 0x0, 0x7}}) connect$inet(r12, 0x0, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x20, 0xfffe, 0x832}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x11c}}, 0x24000000) 3m44.47609357s ago: executing program 4 (id=2260): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f00000004c0)={r1, 0x0, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={r2}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x635e, 0x5, 0xffffffff, 0x10000}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffdc3, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x12}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close_range(r3, 0xffffffffffffffff, 0x0) 3m44.080707844s ago: executing program 4 (id=2262): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) file_setattr(r1, 0x0, 0x0, 0x0, 0x1000) ioctl$SNDCTL_DSP_GETIPTR(r1, 0x800c5011, &(0x7f0000000100)) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000500)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000002100), 0x3808c20, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYRESHEX=r2, @ANYRESDEC=r0, @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000008480)={{}, {0x1, 0x5}, [], {0x4, 0x2}, [], {}, {0x20, 0x4}}, 0x24, 0x3) 3m28.934876475s ago: executing program 34 (id=2262): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) file_setattr(r1, 0x0, 0x0, 0x0, 0x1000) ioctl$SNDCTL_DSP_GETIPTR(r1, 0x800c5011, &(0x7f0000000100)) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000500)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000002100), 0x3808c20, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYRESHEX=r2, @ANYRESDEC=r0, @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000008480)={{}, {0x1, 0x5}, [], {0x4, 0x2}, [], {}, {0x20, 0x4}}, 0x24, 0x3) 2m43.539399738s ago: executing program 7 (id=2420): r0 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a010100000000000000000100ffff0900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000005f000000060a010400000000000000000100000024000480200001800700010072740000140002800800014000000014080002400000000308000b40000000000900010073797a30"], 0xd4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000300)={0x7fffffff, 0xfc}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x74) shmat(0x0, &(0x7f0000ffb000/0x3000)=nil, 0x2000) sendmsg$kcm(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c00000022008102e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000001700)="0c74c75350f4a590e15c61", 0xb}], 0x2, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYRES8=r1], 0xc0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000040)="d7888530a45a9ef827", 0x9}, {0x0}], 0x2) 2m43.172137439s ago: executing program 7 (id=2422): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYRESHEX, @ANYRESDEC=0x0]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a", 0xd5}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79ac"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef2860", 0x5c}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579", 0x16}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f", 0x7e}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ff", 0x93}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$vcsa(&(0x7f0000000280), 0x3ff, 0x689c1e0c043b1181) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x1600000000000000) 2m42.087053938s ago: executing program 7 (id=2425): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=r2, @ANYBLOB="020000000000010024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 2m41.858099695s ago: executing program 7 (id=2427): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}]}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000002, 0x42031, 0xffffffffffffffff, 0x500000000000000) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000004180)=0x12, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x87) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000f5b3c2a03fce410000000000850000007b0000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone3(&(0x7f0000001900)={0x254001100, &(0x7f0000000140), &(0x7f00000003c0), &(0x7f0000000400)=0x0, {0x11}, &(0x7f00000004c0)=""/124, 0x7c, &(0x7f00000008c0)=""/4096, &(0x7f00000018c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x6, {r2}}, 0x58) move_pages(r5, 0xa, &(0x7f0000001980)=[&(0x7f0000c89000/0x1000)=nil, &(0x7f0000cfc000/0x3000)=nil, &(0x7f0000e18000/0x4000)=nil, &(0x7f0000acc000/0x3000)=nil, &(0x7f0000d6a000/0x3000)=nil, &(0x7f0000c14000/0x1000)=nil, &(0x7f000088e000/0x2000)=nil, &(0x7f0000def000/0x1000)=nil, &(0x7f0000e88000/0x1000)=nil, &(0x7f00008df000/0x2000)=nil], &(0x7f0000001a00)=[0x6], &(0x7f0000001a40)=[0x0, 0x0], 0x4) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) r6 = getpgrp(0x0) ioprio_get$pid(0x207e1e73da1d2d72, r6) recvmmsg(0xffffffffffffffff, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) socket$inet6(0x10, 0x3, 0x0) r7 = socket(0x2d, 0x2, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r7, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x28, 0x3f7, 0xb14, 0x70bd28, 0x25dfdbfd, {0x7, 0x7, './file1', './file1'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="30e0ff20296e1b59af8cd773895081df6b1d3e83ffe17e7cb9aaab59dc67c71eb379dd13914960e13e83c6d2856fea9c779a08e35004c20466d2c139070d18b6a9b0b39c89374060", @ANYBLOB="0305000000000200080025000100000009001bfc9cb13adf47968d782c368c3eca57873ac21ff42c904e4b832384af552c42", @ANYRESOCT=r0], 0x30}, 0x1, 0x0, 0x0, 0x2004c851}, 0x4000000) 2m40.772783689s ago: executing program 7 (id=2429): openat$random(0xffffffffffffff9c, 0x0, 0x101080, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) eventfd2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c000000020601010000000000000000000000000900020073797a300000000005000100060000000500050000000000050004000000000014000780080011400000000005001500288537350d000300686173"], 0x5c}}, 0x4005800) r4 = socket$netlink(0x10, 0x3, 0x2) syz_open_dev$ptys(0xc, 0x3, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef", 0x11) recvmsg(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000280), 0x4eb36, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000007c0)={0x1, 0x2, 0x1, 0x0, 0x8}) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000140)=0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000080)={0xe0000000, 0x2, 0x2, 0x0, 0x6}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040b0b08c900c8f275d237cb96f2"], 0xe) 2m39.267267036s ago: executing program 7 (id=2438): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="19"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x2000860) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = syz_open_dev$vivid(&(0x7f00000001c0), 0x3, 0x2) close_range(r0, r1, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x7939, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x2f) unshare(0x2c020400) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xccde, 0xc000, 0x1, 0x2be}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r4 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r4, r4, 0x21) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000000)={0x3, 0x9a090a, 0x1}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m23.897274991s ago: executing program 35 (id=2438): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="19"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x2000860) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = syz_open_dev$vivid(&(0x7f00000001c0), 0x3, 0x2) close_range(r0, r1, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x7939, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x2f) unshare(0x2c020400) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xccde, 0xc000, 0x1, 0x2be}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r4 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r4, r4, 0x21) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000000)={0x3, 0x9a090a, 0x1}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 14.751073146s ago: executing program 8 (id=2862): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r2, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x48840, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback, 0x8001}, 0x1c) (fail_nth: 5) 13.915120005s ago: executing program 1 (id=2866): syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009398f20d812010079de01ec020109021b"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0xe}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000019380), 0x801, 0x0) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000019300)={0xfffffffb, 0x6, 0x3, 0x0, 0x4}) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) r3 = epoll_create(0x7) r4 = epoll_create1(0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt(r5, 0x0, 0x4, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r8 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000180)={r6, r7}) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000019340)={0x1}) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r9, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r9, 0x5412, &(0x7f00000000c0)=0x8) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000180)=0xef) sendmmsg$inet(r8, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)}, {&(0x7f0000000400)="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", 0x1c8}], 0x2}}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f00000001c0)="c61f", 0x2}], 0x1}}], 0x2, 0x40) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000180)) socket$kcm(0x2, 0xa, 0x2) preadv(r1, 0x0, 0x0, 0x48, 0x7) read$char_usb(r0, &(0x7f0000000000)=""/172, 0xac) 13.789718901s ago: executing program 8 (id=2867): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x20000040) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x40) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000002300)={&(0x7f0000000580)=[{0x4, 0x4601, 0x0, 0x0}, {0x3, 0x10, 0x0, 0x0}, {0xfbff, 0x210, 0x0, &(0x7f00000001c0)}], 0x3}) sendmmsg$alg(r2, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) 10.637805728s ago: executing program 0 (id=2871): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000280)={0x20, 0x0, 0x0, 0xdeadbeef, 0x8, 0x62}) (fail_nth: 2) 10.513751394s ago: executing program 1 (id=2872): r0 = syz_usbip_server_init(0x3) r1 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00}, 0x100) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x138, 0x2b8, 0x25c, 0x0, 0x7, 0x200, 0x3a8, 0x3a8, 0x200, 0x3a8, 0x7fffffe, 0x0, {[{{@uncond, 0x16c, 0xf8, 0x138, 0xa010000, {}, [@common=@ipv6header={{0x28}, {0x1, 0x40}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7, 0x5, 0x7, 0x0, 0x9, 0x9, 0x4, 0x6]}}}, {{@ipv6={@mcast2, @private2, [0xffffff00, 0xffffff00, 0xff000000], [0xff, 0xffffffff, 0xff, 0xff], 'veth0_to_bond\x00', 'vlan0\x00', {}, {}, 0x89, 0x8, 0x6, 0x3}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, 0x0, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000000), &(0x7f0000000040)=@md5={0x1, "8457e8c7a3640f89e537bff30e4d9e76"}, 0x11, 0x3) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000001c0)={{0xffffffffffffffff, &(0x7f0000000080)='security.evm\x00', 0x0, &(0x7f00000000c0)={@_ha_fsid={[0xf0000000, 0x1000]}, {0x84f, 0x9, 0x6, 0x9}}, 0x0, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x1}, {[0x6, 0xfffffffb, 0x3]}, 0x4, 0xe, &(0x7f0000000180)=""/14}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r3 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r3, &(0x7f0000000740), 0xff67) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, 0x0, 0x8000) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) r6 = io_uring_setup(0xaac, &(0x7f0000000300)={0x0, 0xbfffeffb, 0x1, 0x0, 0x225}) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) r8 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000140)={0x90000001}) ioctl$FS_IOC_GETFLAGS(r7, 0x5437, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x2300000000000000, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 10.442528072s ago: executing program 8 (id=2873): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000140)={@empty, @empty, 0x0, "1c6804d4a58b85e13e66ab6fafd10df8ab973be71cc99e43030305633956c3c4", 0xfffffc00, 0x9, 0xfffff536, 0xde5}, 0x3c) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {}, 0xfe}, 0x6) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0x0, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000080) r3 = socket(0x10, 0x3, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x8000) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="400006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x3}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048890}, 0xc000) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) syz_usb_connect$uac3(0x2, 0x0, 0x0, 0x0) 10.106337676s ago: executing program 5 (id=2874): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) sendmmsg$inet6(r3, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}, 0x18020000}, {{0x0, 0x0, &(0x7f0000000480)}, 0x1000000}], 0x56, 0x10) 9.152082868s ago: executing program 5 (id=2876): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='sched\x00') timerfd_settime(r1, 0x2, &(0x7f0000000240)={{}, {0x0, 0x989680}}, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000640)={{r0, &(0x7f0000000000)='+\x00', 0x444180, &(0x7f00000000c0)={@align=0x7, {0x5, 0x0, 0x9, 0x6}}, 0xb, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000180)=0x3}, 0x4, &(0x7f00000005c0)=[{0x2, 0x3, &(0x7f00000001c0)='\xff!:^{-$[.$\xf9\x00', &(0x7f0000000200)="bfff488c0ed2499bd6d5c764004dcfa98409efc3868b29106cee54a84e6339e5136c9c917ddf0c385253f7ac961678c1420a85b02a97db47ae4588b70ca00432411423165a19ca33fdaea60498ed07da25dfd9b2a11f9ddfa1bf23f9d5ae585605cecf13f0d94e86e9cbdcc9f7c62af112431cdcf95b1a7b523f8a47a412c520a84a480aa0cd43cc5ee1ed593a88bae6bcdde49bc82e98c32510547375c9be879d45807b85c9efdd0a173c3ab53eab79a01ae197844b8e15eca258d624125aa78280c60e6c9bca1639c2a0313c85e8b784f0ad4c10eca11f41b8ec948ae4619cc7401cbb", 0xe4, 0x8}, {0x3, 0x3, &(0x7f0000000300)='\x00', &(0x7f0000000340)="41a1c43d6f8d3fda729a3f80c8a658e0f0028e26d88d8739a8aef686932ef15550ef64e75254c3e46501820dc2318de8d825daa3e163fa3f3a3d066f5551ea8493963f45380f8c3d1f9d720f0fe029ca8dff15a4761ee5c6fd0e9b3277b30ecebe6d5cb488ac00a648015dba3761bdb1b1bc7b701f9dd1a4bd09", 0x7a, 0x10}, {0x3, 0x7, &(0x7f00000003c0)='&$]\x00', &(0x7f0000000400)="474e774c7ed22851c77f1ef0f5cdb4043a569e9e558835b7d40dc76fa3c54a1d21062a005ccce751e7923d001cc593837d7ddcd73a0932d8cbaecadd465c901b4a2a3b07cbb25ca0a0f0407a65d05c6d467d56adb1826f0a5babd06648d53699b222732cb88d9e1763f96014ba749924608bafb92953bf1ccb732464cf8c4e9c7e7c61367df850fc2319ab245fc0a237e069245235ff936d9eb65142d168bbfc0a8ef86c80a39d03e9920a622bf72fa39965963b49d27bb3ee9b31257f3c74b341ac154dd0d1ee19bf9ebe175eabbd0ee4bf86", 0xd3, 0x28}, {0x1, 0x2, &(0x7f0000000500)='/^+:{%{$\x00', &(0x7f0000000540)="2a263f9240f61d920355f65da99016b2d0d7f8cc170bf7cff293deedf7bd3b3529f5dbcee376c8f9ca19ec35f7044ee2b6b22eb18a032a0ed7d79f5a7738f1b65c72", 0x42, 0x2a}]}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000006c0)=r2, 0x4) 9.117254802s ago: executing program 0 (id=2877): r0 = socket(0x400000010, 0x3, 0x0) write(r0, &(0x7f0000000200)="fc0000001400073eac093a00090007000aab0820080000000400e293210001c00000000006000000010000000900060000000eff8656aaa79bffffffff0000002db4040000000000006f1a272fdf0d11512fd633d4400007f60eb86b00000016fde0600c2e7302ade01720d7d5bbc91a3e2e80772c05f70c9ddef2fe082038f4f8b29d3ef3d92883170efdffffff3ae4f50504000000000040d815b2ccd243f295edbabc7c3f1a5f4e023dd16b176e83df150c3b8829a1ad0a4f410000", 0xbd) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x3, 0x0, 0x2, 0x0, {0xa, 0x0, 0x8, @mcast2, 0x13fff}}}, 0x32) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) move_pages(0xffffffffffffffff, 0x1, &(0x7f00000001c0)=[&(0x7f0000f78000/0x2000)=nil], &(0x7f0000000000)=[0x7ff, 0x9b, 0x101, 0x8], 0x0, 0x3) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x400) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000002c0)={0xffff, 0x5, {}, {0xee00}, 0xcb, 0x2}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x5}}, {@cache_readahead}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}]}}) prctl$PR_SET_MM(0x35, 0x2, &(0x7f0000f77000/0x4000)=nil) syz_emit_ethernet(0x46, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r1], 0x0) 8.981204127s ago: executing program 6 (id=2878): sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x10820, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@metacopy_on}], [], 0x2c}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r1, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in=@broadcast, 0x0, 0x9, 0x0, 0x0, 0xa, 0x120, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4000000000000000}}, {{@in6=@mcast2, 0x604d3, 0x2b}, 0x0, @in=@empty}}, 0xe8) recvmmsg(r3, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r2, r1, 0x0, 0x578410eb) writev(0xffffffffffffffff, &(0x7f0000019440)=[{0x0}], 0x1) 8.157308239s ago: executing program 0 (id=2879): r0 = socket$kcm(0x21, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x80000000000008, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$NBD_DISCONNECT(r3, 0xab08) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x60}, 0x1, 0x0, 0x0, 0x40080a5}, 0x20008040) syz_open_procfs$pagemap(r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000680)={@remote, @loopback}, &(0x7f0000000840)=0xc) io_setup(0x8, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x42440, 0x0) preadv(r6, &(0x7f00000006c0)=[{0x0}, {&(0x7f0000000400)=""/97, 0x61}], 0x2, 0x5b8, 0xfffffffd) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io(r7, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000840)=ANY=[@ANYBLOB="20160e0020e95af8d0076b38dd210ed6cfb51356"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) recvmmsg(r0, &(0x7f0000005180)=[{{0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000180)=""/193, 0xc1}}, {{&(0x7f0000000280)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000300)=""/22, 0x16}, {&(0x7f0000000340)=""/122, 0x7a}, {&(0x7f0000001500)=""/238, 0xee}, {&(0x7f0000001600)=""/17, 0x11}, {&(0x7f0000001640)=""/242, 0xf2}, {&(0x7f0000001740)=""/171, 0xab}, {&(0x7f0000001800)=""/153, 0x99}, {&(0x7f00000018c0)=""/225, 0xe1}, {0x0}], 0x9}, 0x8}, {{&(0x7f0000001b80)=@rc={0x1f, @fixed}, 0x8c, &(0x7f0000003380)=[{&(0x7f0000000500)=""/204, 0xcc}, {&(0x7f0000000600)=""/111, 0x6f}, {&(0x7f0000000700)=""/166, 0xa6}, {&(0x7f00000007c0)=""/96, 0x60}, {&(0x7f0000002380)=""/4080, 0xff0}], 0x5, &(0x7f0000001e40)=""/84, 0x54}, 0x6}, {{&(0x7f0000001ec0)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000005480)=[{&(0x7f0000001f40)=""/8, 0x8}, {&(0x7f0000001f80)=""/43, 0x2b}, {&(0x7f0000000d00)=""/254, 0xfe}, {&(0x7f00000020c0)=""/54, 0x36}, {&(0x7f00000000c0)=""/24, 0x18}, {&(0x7f00000003c0)=""/61, 0x3d}, {&(0x7f0000000ac0)=""/61, 0x3d}, {&(0x7f0000005340)=""/209, 0xd1}, {&(0x7f0000005440)=""/45, 0x2d}], 0x9, &(0x7f0000000a80)=""/59, 0xfffffffffffffdf9}, 0x401}, {{&(0x7f0000000f00)=@tipc, 0x80, &(0x7f0000002300)=[{&(0x7f0000002200)=""/1, 0x1}, {&(0x7f0000002240)=""/172, 0xac}], 0x2, &(0x7f0000002340)=""/53, 0x35}, 0x7fd}, {{&(0x7f0000000c00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000005000)=[{&(0x7f0000003a80)=""/32, 0x20}, {&(0x7f0000000e00)=""/251, 0xfb}, {&(0x7f0000003bc0)=""/253, 0xfd}, {&(0x7f0000000880)=""/227, 0xe3}, {&(0x7f0000003dc0)=""/127, 0x7f}, {&(0x7f0000003e40)=""/190, 0xbe}, {&(0x7f0000000980)=""/177, 0xb1}, {&(0x7f0000003fc0)=""/4096, 0x1000}], 0x8, &(0x7f00000050c0)=""/173, 0xad}, 0xffffffff}], 0x6, 0x40002002, 0x0) 8.131604955s ago: executing program 5 (id=2880): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2=0xe0000001}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0xaa}}}}}, 0x0) (fail_nth: 4) 8.016233388s ago: executing program 5 (id=2881): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_DBG_G_REGISTER(r1, 0xc0385650, &(0x7f0000000040)={{0x1, @name="1c16715b9d49b50feb2affb8b59acae90221670087dbcd950fe6a995c108bb64"}, 0x8, 0x0, 0x6}) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000000)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x40}, @exit], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x80) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x0) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/177, 0xb1}], 0x1) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f00000000c0)) accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000000100)={0x7, 0x400}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) migrate_pages(0x0, 0x3, &(0x7f00000001c0)=0x7f, &(0x7f0000000300)=0xa) 7.712575437s ago: executing program 1 (id=2882): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xffffffffffffff9b) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2=0xe0000001}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0xaa}}}}}, 0x0) 7.434317846s ago: executing program 1 (id=2883): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x800, 0x51) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f00000006c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7f}, [@call={0x85, 0x0, 0x0, 0x2d}]}, &(0x7f0000000680)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x3, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x2}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000001a00)=[{&(0x7f0000001ac0)="fec4ad8132ffbcc737ba664bb49b50432d715265d66a28aa8c201b4fac7d60665715444e25da82f4dc2247b887f845a5853b11c009c7f3f2f6d6398a0edb03521c5de65108f7d34623b80ca239d8775bb35a92e4250a30ceb9cf0f3d32dbd77a18c7dcb32b4253e60f2fd97eab46357b31adbf19e690990a286f9c0ef198bb192c8ad9bef0ee57752ea11b3ec801", 0x8e}, {&(0x7f0000000640)="53ce7d08f047205a5d100334bf5ec2f79e42e5", 0x13}, {&(0x7f0000000700)="d02454ea11eb04a270f05cedfd0c21c61d19790503d15c4110c670c82887925a62bcf130fe299343300aeb70d1f20d748e079f1430f6b53f733dca2254e2212bfd88ef25597e5aaa8c887f20129d5cc9c7602856ccfab0261f32bc5d88052f638253d5ff227f459280a66d1edc3cafd7b863b7e94832d835e6c7e4118b64932e137fff403502008f51ccd2da4e9fb9cda564e5ec4a4473a3af5d88012c327b1b7193499e71822f333f1eaa01c1ab2b99bf88f3330be706910b2b613ed91cb5d8599af1d0bd18588e", 0xc8}, {&(0x7f0000000800)="3accdb58b08ff5b862c4d7fd253dba3c3c9d65b1e36a2c1133e1b2c49f84eb4d2779999fd05dc74abfcba8e691ee6c75a4d7cf75361b611943ff5fed62d45ffe9f12b3e5756dd8d6", 0x48}, {&(0x7f0000000880)="638a1f925358a47d674c6a2d620a9605589357fb253858e3b7112452252f", 0x1e}, {&(0x7f00000008c0)="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", 0x1000}, {&(0x7f00000018c0)="8ac5dc16b72e55a6ef761e7c38cd60797628755b8c988c3eaafc9a4ff84a0a5251ef953580c0abe0a133fcbd6536923375b670215e8edacde8848af2018a1084415cb1dd60c5623d8388336941bee10e8aabaf4c310d1bbbd98ddfb3d83387c7f452d7179f6472a4f111dfa6e80b3b0999b8fbeaa0f46c2f65ad60785b8101230349e874ca3866e925b6b220f35bb46d9ced84d5082c4d6a2e53a3b5fea4d2301cd947223dafe1cc7a9a6d2f267f36b8d557104d", 0xb4}, {&(0x7f0000001980)="1adcafd3b9086229", 0x8}, {&(0x7f00000019c0)="83661bc6", 0x4}], 0x9) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat$nullb(0xffffff9c, &(0x7f0000000080), 0x200, 0x0) openat$userio(0xffffffffffffff9c, 0x0, 0x22242, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000440)='./file0\x00', &(0x7f0000000100), &(0x7f00000004c0)=@v2={0x2000000, [{0x0, 0x4}, {0x5, 0x5}]}, 0x14, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x18) socket$phonet_pipe(0x23, 0x5, 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000340)=0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x1) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_GET_TSC_KHZ_vm(r5, 0xaea3) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) 7.061079217s ago: executing program 6 (id=2884): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000007880)=""/102400, 0x19000) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000880)={{r0, &(0x7f0000000000)='fuse\x00', 0x101000, &(0x7f0000000040)={@align=0x3, {0x2, 0x4, 0x7ff, 0x6}}, 0x3, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000240)=0x6}, 0x4, &(0x7f0000000800)=[{0x7, 0xfffffffb, &(0x7f0000000380)='\x00', &(0x7f00000004c0)='<', 0x1, 0x1a}, {0x3, 0x100, &(0x7f0000000500)='syz1\x00', &(0x7f0000000540)="ae450950fd05d39976dae1a75f55c54e07b451858fd275b2510d648703709c67182dcc282c3adf4273ca4b4886c7dc04dd8e456c22768e88cc970f28dac3c98a8c50c2f8155627041c6e7bbf205a85cab47e1c89f1ec3310cfc44193b8f7f7f4af0a86b275b357063783d7ff96684d734dcbdfed057691d9964b6183903081a1bf75aa8670d79f061b05ce71d4018e32d7c3326a", 0x94, 0x20}, {0x2, 0x40, &(0x7f0000000600)='/dev/cpu/#/msr\x00', &(0x7f0000000640)="5059905c7cc6721fc066e11394dc51562e2193dd27eb79f76315cdcc148f9c650abe56866ee64b41e391bd9878e1d76302d5966a3b0d6dcc37bc57c72c87df7770d61697b72c16d5b706b80e734d323e194282b4a5c2df9b4f2a4b30e87dbd95a961d23f614d64c3f372f7d559785b3be75ab34f37cccfc2f1f9533de779e43a65a6726edc2125e41f9d5d53274557c754663179cf678cb98658dafbbcb27414c7a6bfcfb4f16d27f9b2d6", 0xab}, {0x2, 0xe08a, &(0x7f0000000700)='^\x00', &(0x7f0000000740)="b68b8e0bf205c8375dc19fd7e5a81a54fd271fe36df776d45a662e63102a45aac86f677e37a1b7a20cac2b1c6c19e89d2b8668c623fe94bc5bed464fd86a49a94058e856b1a6d09cb7299e86c3190be309fb731bb4d5d874e7cbd7fd79d6df37ef6bc7062910dfef613e10c856ebc87a29c8072b4d7e3ffb53ad42b35e17483650f9a25e6f99e28c6d910872ce4f366d1cb8eec5c59267cb57acb3a5fed4226be806d1a0cdb8ba1c84184b45e89aa7c899148ec5af54b4e64271", 0xba, 0x38}]}) ioctl$BLKRRPART(r3, 0x125f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) getresgid(0x0, 0x0, 0x0) setfsgid(0x0) setfsgid(0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001180)={r4, 0x0, 0x0}, 0x1c) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[]) lstat(&(0x7f0000000200)='./file0\x00', 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 5.634357525s ago: executing program 6 (id=2885): socket$inet6_sctp(0xa, 0x1, 0x84) fsopen(&(0x7f0000000280)='cifs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xc2100) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x88282, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x1ff, 0x7a, 0x0, 0x8000, 0x6, 0x3}, 0x0, &(0x7f0000000080)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x12, 0x80000003}, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000100), r1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5.428930941s ago: executing program 8 (id=2886): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) r1 = openat(0xffffffffffffff9c, 0x0, 0x60840, 0x8) io_submit(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1a, &(0x7f00000005c0)=""/49, &(0x7f0000000600)=0x31) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r3 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x92\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1116, 0x5) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) r4 = open_tree(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0) r5 = socket$alg(0x26, 0x5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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", @ANYRES8=r3, @ANYRESOCT=r0], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x2}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r6, 0x0, 0xe, 0xfffffffffffffead, &(0x7f0000000080)="3a173357f297c605804ab3828443", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r5) r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) writev(r7, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) write$char_usb(r7, &(0x7f00000001c0)="64e9", 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000540)={r1, r7}, 0xc) mount_setattr(r4, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0xb, 0x2}, 0x20) syz_genetlink_get_family_id$SEG6(&(0x7f0000000fc0), 0xffffffffffffffff) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x22643) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x4}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0x3927}, @TCA_FQ_QUANTUM={0x8, 0x2, 0x7000000}]}}]}, 0x48}}, 0x20008894) r10 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_INSN(r10, 0x8028640c, &(0x7f00000000c0)={0x6000004, 0x0, 0x0, 0x1, 0x7}) 4.867385781s ago: executing program 1 (id=2887): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f00000004c0)={r1, 0x0, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={r2}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x635e, 0x5, 0xffffffff, 0x10000}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close_range(r3, 0xffffffffffffffff, 0x0) 4.865082971s ago: executing program 8 (id=2888): r0 = socket$inet6(0xa, 0x0, 0x10000081) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x4000000000000eb3, 0x684902) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7526}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x16, 0x11, &(0x7f0000000040)=ANY=[@ANYBLOB="18050000080000000000000000000000850000007b000000b7080000000000007b8af8ff00000000b7080000010400007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, 0x0, 0x42, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xf0ffff}, 0x50) writev(r0, &(0x7f0000002e80)=[{&(0x7f0000003500)}], 0x1) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x24044884) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={0x0, 0x58}}, 0x40408c4) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x700, 0x0) 3.038844459s ago: executing program 8 (id=2889): pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000200)="00008f2f", 0x4, 0x40050, &(0x7f00000000c0)={0x11, 0x8100, r6, 0x1, 0x84, 0x6, @multicast}, 0x14) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r10 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x240002, 0x1e8}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r11, r12, r13, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x4, 0x90d, 0x0, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x1a4}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r10, r15, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x3, 0xb2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31c, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x2, 0x1, 0x2000008, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x902c4, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x400, 0x0, 0x400216, 0x0, r10}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r14, '\x00', {0x3, 0xc8b, 0x0, 0x0}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0) r16 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000580)={'netdevsim0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r9, r17, 0x25, 0x4, @void}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'gretap0\x00', &(0x7f00000002c0)={'sit0\x00', 0x0, 0x7800, 0x80, 0x3, 0x3ae6013e, {{0x1e, 0x4, 0x1, 0x6, 0x78, 0x68, 0x0, 0x7f, 0x4, 0x0, @private=0xa010100, @multicast2, {[@ssrr={0x89, 0x1b, 0x72, [@broadcast, @broadcast, @empty, @loopback, @private=0xa010100, @local]}, @generic={0x82, 0x2}, @lsrr={0x83, 0x13, 0x13, [@loopback, @multicast1, @private=0xa010101, @loopback]}, @noop, @generic={0x82, 0x10, "d5876c9d409ec73fa0136f927175"}, @end, @timestamp_prespec={0x44, 0xc, 0xa3, 0x3, 0x5, [{@empty, 0xe76}]}, @lsrr={0x83, 0xf, 0x32, [@broadcast, @loopback, @broadcast]}, @ra={0x94, 0x4}]}}}}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f00000003c0)={0x1ac, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0xc010) r19 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r19, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r19, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x5c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r20, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x4}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x5, 0x5, 0x800, 0x1, 0x1aa2, 0xc}}, {0x4}}]}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r21 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r21, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) 2.99574691s ago: executing program 5 (id=2890): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0, 0xfc}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$video(0x0, 0x7, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x80580, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000080)={0x6, "abacd2110800170063377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) r6 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000100)) r7 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r7, 0x80045017, 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) close_range(r3, r5, 0x0) r8 = socket$inet6(0xa, 0x1, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000093c0)=@deltfilter={0x2eb8, 0x2d, 0x400, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe0}, {0xa, 0x3}, {0x6, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x7}}, @filter_kind_options=@f_basic={{0xa}, {0x2e80, 0x2, [@TCA_BASIC_ACT={0x2e7c, 0x3, [@m_skbedit={0x84, 0x0, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x4, 0x6, 0x2, 0x3}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffff}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x40}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x9}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xd, 0x10}}]}, {0xd, 0x6, "a00f6c0a1a300b43d6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_nat={0xc8, 0x12, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x7, 0x2, 0xeb1, 0x1}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xfffffff8, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x4, 0xffffffffffffffff, 0x10, 0x5}, @empty, @rand_addr=0x64010101, 0x0, 0x3}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffffffff, 0x6, 0x5, 0x100, 0xe9}, @remote, @local}}]}, {0x25, 0x6, "17a16fd19550b83696f9163949364946a374312d113f4d7d563d5075d3a477304c"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_ife={0xf8, 0x19, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x1, 0xfffffffa, 0x5}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0xea7, 0xfffffffffffffff9, 0xa, 0xc}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_SMAC={0xa}, @TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0xae9c, 0x1, 0x81, 0x4}, 0x1}}]}, {0x55, 0x6, "1ee868ef8aeffbdb4688e12d0164ecc0e94b9f3e051e0acade5f1f68473c6e507642a9e35cb16c8cced3d5efcd3200997b16d681cf1f1b88606574afd4edc89b1f2038806c7019ab79065db83371c7c3c4"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_pedit={0x2c34, 0x8, 0x0, 0x0, {{0xa}, {0x2c08, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0xffff, 0x80000001, 0x10000000, 0x9, 0x1}, 0xff, 0x8, [{0x38952188, 0xc, 0x800, 0x1, 0x5, 0x4}]}, [{0x9, 0x8, 0x10000, 0x6, 0x1, 0x9}, {0x9, 0x2, 0x2, 0x19b, 0x5, 0x8001}, {0x7fe0000, 0x5, 0x2, 0xfffffffe, 0x9, 0x100}, {0x9, 0x23a0, 0xfffffff5, 0x2, 0xfffffff5, 0x5}, {0x31a4, 0x6bdda5e0, 0x4, 0x3ff, 0x1, 0x5}, {0x2, 0x9, 0x7, 0x1, 0x4, 0x3}, {0xfffffff6, 0x3, 0x2, 0x6, 0xffff1762, 0xdd}, {0x4, 0x2, 0x4, 0x8, 0x0, 0x3}, {0x1, 0x1ff, 0x8001, 0x0, 0x2e, 0x5}, {0x37c, 0x4, 0x7, 0x0, 0x300, 0x3}, {0x6, 0x0, 0x1, 0x4d2, 0x2, 0x6}, {0x80000001, 0x9, 0x8, 0x3, 0x7, 0x10000}, {0x9, 0x605, 0xffffffff, 0xf4a, 0x9, 0x4}, {0x8, 0x6, 0x0, 0x9, 0x8, 0x100}, {0x18, 0x6, 0x1, 0x5, 0x4, 0x8}, {0x8de, 0xfffffffb, 0x7fffffff, 0x2, 0xc49, 0xfffffff8}, {0x4, 0xe, 0xfffffc01, 0xfffffff8, 0x9db1, 0x7}, {0x8, 0x8, 0xd1, 0x9, 0xfffffffd, 0xfff}, {0x9, 0x8, 0x5, 0x80, 0x2, 0x401}, {0x1000, 0x7, 0xee, 0x9, 0x16, 0x2}, {0x4, 0x80000001, 0xc43, 0xca2, 0xfffffff8, 0x9}, {0x3, 0x9, 0x51, 0x9, 0x4, 0x6}, {0xd, 0xfffff77f, 0x100, 0xff, 0x8, 0x7ca7}, {0xacda, 0x81, 0xd10, 0x9, 0x7, 0x9f9}, {0xa, 0x100, 0xe52a482d, 0x5, 0x6, 0x1}, {0x29e2, 0x80000000, 0x1, 0x8, 0xfff, 0xd6}, {0x4, 0x8, 0x7, 0x3ff, 0xe, 0x7f}, {0xc7d, 0x6, 0x7, 0x6, 0x0, 0x5}, {0x0, 0xd, 0x9, 0x0, 0x9}, {0xc34a, 0x6, 0x1db, 0xff}, {0x7, 0x0, 0xffff92b0, 0x7, 0x5, 0x1}, {0x2, 0x401, 0x8, 0x7, 0x5, 0x3}, {0x10001, 0x5c9, 0x3, 0x8, 0x1, 0x8}, {0x1, 0x4, 0x0, 0x5, 0x9, 0x5}, {0x0, 0x1, 0x0, 0x1, 0x5, 0x873}, {0x10011, 0x4, 0x3, 0x28aea28f, 0x8f, 0x960}, {0x674, 0x4, 0x7, 0x2f6d158c, 0x9, 0x35}, {0xf0c0, 0x5, 0x5, 0x6, 0x2, 0x4}, {0x2, 0x0, 0x8, 0x2858fbb, 0x9179, 0x1}, {0x4, 0x1, 0x80000000, 0x57, 0x2a, 0x8}, {0x5, 0x79, 0x7fff, 0x6, 0x4, 0xfffff000}, {0x6, 0x3, 0x33c, 0x5, 0x4, 0x3}, {0x6, 0x9, 0x101, 0xbb15, 0x401, 0x3d8}, {0x5b, 0x0, 0x33, 0xb, 0x34, 0xff}, {0x5, 0x8, 0x5b, 0x401, 0x2, 0x5c}, {0x6, 0xfffffffd, 0x7, 0x0, 0xde9, 0x80}, {0x87, 0x9, 0x9, 0x5, 0x3, 0x634}, {0x10001, 0x7fff, 0x0, 0x0, 0x14f4, 0x7}, {0x4, 0x3, 0x5b7, 0x4, 0x7e7f0037, 0x566a}, {0x1, 0x7f, 0x8, 0xdd5, 0xe35, 0xac}, {0x5, 0x6, 0x3cf, 0x3, 0x6, 0x400}, {0x7, 0x1, 0x26c00, 0x80000001, 0x5, 0x5}, {0x297791bf, 0x5, 0x9, 0x7, 0x0, 0x7}, {0x7, 0x5, 0xa, 0x4, 0x4, 0x986a}, {0x200, 0xee, 0x401, 0x6, 0x6, 0x6}, {0x4, 0x0, 0x5, 0x7, 0x7fffffff, 0x3}, {0x7, 0x10001, 0x10001, 0x86, 0x7, 0xfffffff7}, {0x3, 0x6, 0xcc1, 0x0, 0x2, 0x2}, {0x5, 0x3, 0x10001, 0x92, 0x0, 0x1}, {0x7, 0x2, 0xfffffff2, 0xffffffff, 0x2, 0x2}, {0x7fffffff, 0xa619, 0x81, 0x2, 0x100, 0x7}, {0x4, 0x8000, 0x52b, 0x8, 0x9241, 0x1}, {0x3, 0xb, 0x4, 0x80, 0x7fffffff, 0xfff}, {0x6, 0x1ff, 0x7, 0x1, 0xffffffff, 0x22944000}, {0x8, 0xc, 0xb, 0x3ff, 0x5, 0x3}, {0x0, 0x8, 0x7, 0x0, 0xfffffff8, 0x8}, {0xfffffc01, 0x6, 0x10000, 0xfffffe00, 0x3ff, 0x7ff}, {0xfae2, 0x6, 0x81, 0x0, 0x5, 0x3}, {0x9c, 0x6, 0x81, 0x9, 0x2, 0x5}, {0x3, 0x8, 0xaa97, 0x7, 0x7, 0xfffffffa}, {0x101, 0x3, 0x69, 0x1001, 0x0, 0x7}, {0x7d32fd1c, 0x3, 0xfffffffa, 0xfc12, 0x0, 0x3}, {0x1ff, 0x9, 0x6, 0xd581, 0x85, 0xc}, {0xffff, 0x7, 0x2, 0x6, 0x9, 0x7}, {0x6, 0x69dd, 0x0, 0x800, 0x20, 0x1}, {0x198, 0x0, 0x5, 0x4, 0x4e, 0xe}, {0x2, 0x400, 0x7, 0x6, 0x2, 0x8}, {0xa, 0x4, 0x81, 0xffffff53, 0x3, 0x10001}, {0x6, 0xf8f, 0x6, 0x7, 0x3, 0x51}, {0x8, 0xd7, 0x7cb, 0x1, 0xf, 0x6}, {0x80000001, 0x7, 0x0, 0x1, 0x8573, 0x78}, {0x8, 0x100, 0xa8c, 0x5, 0x4, 0xa}, {0x2, 0x2, 0xc, 0xfffffffc, 0x88, 0x1}, {0x7c, 0xfffffff7, 0xf, 0x4, 0xff, 0x8000}, {0xffff, 0x607, 0x400, 0x9, 0x1, 0x75}, {0xffff, 0x0, 0x5, 0x1, 0x5b, 0x7}, {0x6df, 0x1000, 0x101, 0x80, 0x7, 0x3}, {0x3, 0x3, 0x0, 0x38, 0x6, 0xe}, {0x4, 0x8, 0x6, 0x3}, {0x6, 0x6, 0x9, 0x10000000, 0x6, 0x1}, {0x4, 0x8, 0x8, 0x1, 0x6}, {0x2a6, 0x4053, 0x7f, 0x0, 0x9c6, 0x3}, {0x0, 0x400, 0x2, 0x800, 0x200, 0x7}, {0x7fff, 0x2, 0x2, 0x2, 0x8001, 0x80000001}, {0x8000, 0xbba0, 0x2, 0x2, 0x67, 0x40}, {0x5, 0x4, 0x6, 0xe8, 0x6, 0x800}, {0x6, 0xfffffffa, 0x4, 0x3b60, 0xbb, 0x14000000}, {0x9, 0x0, 0x4, 0x52e5, 0x3, 0xe}, {0x80000000, 0xffffffff, 0x2066, 0x9, 0x5, 0x9}, {0x6, 0x8, 0x7, 0x1000000, 0x6, 0x5743}, {0x8001, 0x7fff, 0x4, 0x71, 0x7f, 0x8}, {0xbd, 0x6, 0x252e, 0xb, 0x1000, 0x7}, {0xa170, 0x6, 0x80000001, 0x7, 0x10, 0xdd65}, {0x8, 0x8000, 0x1, 0x0, 0x5}, {0xfffffffd, 0x9, 0x5, 0x1, 0xe67, 0xfff}, {0x9, 0x2e3c, 0x8, 0x8001, 0x9, 0x7}, {0x100000, 0x9, 0x5, 0x0, 0x8, 0x9}, {0x9, 0x3, 0x3, 0x3, 0x9, 0x232d03ea}, {0x7, 0x3, 0x2, 0x0, 0x6ba, 0x1}, {0x9, 0xb, 0x0, 0x0, 0x9c, 0x7}, {0x7f, 0x8, 0x8, 0xeca3, 0x3, 0x4}, {0x101, 0x5, 0x7fffffff, 0x40, 0xf6c4, 0x4}, {0x7, 0x5, 0x8, 0x6, 0x2, 0x3}, {0xe0dd, 0x408, 0x7ff, 0x1, 0x5}, {0x2, 0x504, 0x6, 0x2, 0x3, 0x2}, {0x7, 0x5, 0x1, 0x30, 0x1, 0x80000000}, {0xcba, 0x3, 0xffffff00, 0x7, 0x8, 0x7}, {0x2, 0x9, 0xfffffffc, 0x9, 0x6, 0xfff}, {0x8000, 0xffe8, 0xffffffe7, 0x7fff, 0x8, 0xfff}, {0xb, 0x2, 0x7, 0x9e1, 0xfffffffe, 0x1}, {0x1, 0x2, 0x46, 0xd0d, 0xc, 0x8e9}, {0x192c, 0x5, 0x81, 0x6, 0x5, 0x80000000}, {0x2, 0x8, 0x4, 0x1, 0x6, 0x2}, {0x8, 0x3, 0xa, 0x80000001, 0x4, 0x6}, {0x7ff, 0x8, 0x0, 0x6, 0x0, 0xc}, {0x401, 0xd, 0x8, 0x3ff, 0x5}, {0x410237b4, 0x1, 0x7ff, 0x4, 0x8, 0x10000}, {0x5, 0x9, 0x5, 0x7, 0x1, 0x1}], [{0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0xb}, {0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x2}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x3}, {0x3}, {0x4}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x1}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x5}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x5}, {0x4}, {0x2}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {}, {0x6}, {0x5, 0x1}, {}, {0x5}, {0x1}, {0x3, 0x1}, {0x1eebfa374e9b39d1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {}, {0x5}, {0x3}, {0x3}, {0x6}, {0x2}, {}, {0x4}, {0x6}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4}]}}, @TCA_PEDIT_KEYS_EX={0xc8, 0x5, 0x0, 0x1, [{0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x3}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0xfffffbff, 0x5, 0x5, 0x0, 0x1}, 0xf, 0x9, [{0x6, 0x8000, 0x6, 0x7fff, 0x1, 0xb}, {0x4, 0x1, 0x9, 0xb852, 0xfffff0d7, 0x1}]}, [{0x6, 0x9, 0x8, 0x3, 0xa, 0x5}, {0x4, 0x2, 0x2, 0x8, 0x6, 0xfffffffd}, {0xfffffff9, 0x6, 0x4, 0x7, 0x7, 0x22}, {0xb, 0x1000, 0x1000, 0x400, 0x1, 0x23e8}, {0x10, 0xa6e, 0x1, 0x1, 0x5, 0x800}, {0xc, 0x3, 0xfffffffa, 0x101, 0x5, 0x2}, {0xfffffffa, 0x586, 0x8, 0x10001, 0x101, 0x80000000}, {0x7b5, 0x9, 0x41ca, 0x8001, 0xc, 0x7}, {0x20000000, 0x3, 0xbe, 0x800, 0x8, 0x6}, {0x4, 0x800, 0x2, 0x1, 0x5, 0x5}, {0x1, 0x4, 0x2, 0x3, 0x614c, 0x54}, {0x9, 0x7c14, 0x13, 0x3, 0x2, 0x80000001}, {0xf, 0x2d2, 0x80000001, 0x6, 0x9, 0x2}, {0x7, 0x7b, 0x2, 0x1, 0x9}, {0xb, 0x81, 0x1f7c, 0x3, 0x9, 0xfa9}, {0x8, 0x5a0, 0x29, 0x9, 0x6, 0x80}, {0x2, 0x5cbc, 0x400, 0x2, 0x3, 0x7}, {0x400, 0x1ff, 0x6, 0x10000, 0xe000, 0x1534}, {0x800, 0x200, 0x4, 0x4, 0x6b, 0xf}, {0xd, 0x6, 0xbc8a, 0x7, 0x1, 0x2}, {0x7f, 0xc, 0x1, 0x515a, 0x6, 0x7}, {0x7, 0xe0, 0xfd, 0xe672, 0x4, 0x9}, {0x9, 0x5, 0xbb7d, 0x8000}, {0x9, 0x87f, 0x9, 0x9}, {0x1, 0x20000000, 0x5, 0x3, 0x1000000, 0x7c}, {0x2, 0xd, 0x7, 0x10, 0x4, 0x4}, {0x7, 0x0, 0x83b, 0x6, 0x8, 0x6}, {0x1, 0x5, 0xef, 0xfb90, 0x2, 0xff}, {0x4, 0x7, 0x8, 0x4, 0x1, 0xfffffffe}, {0x7c5, 0xa02, 0x2, 0x1, 0x4, 0x9f}, {0x7fffffff, 0x5, 0x0, 0x1, 0x8, 0xffff9e42}, {0x8001, 0xfffffff7, 0xa, 0x7fff, 0x800, 0x800}, {0x5, 0x9, 0xb41, 0x5, 0x9}, {0x8, 0x4, 0x7, 0x2, 0x5cc, 0x1}, {0x9, 0x8, 0x84, 0x5, 0x3, 0x594}, {0x2, 0x7, 0x1, 0x1, 0x40, 0x1}, {0x5, 0x3b, 0x6, 0xc133, 0x0, 0x18b3}, {0x2, 0x3, 0x6, 0x10000, 0xfffffff9, 0x7}, {0x3, 0xcb8, 0x1, 0x81, 0xd, 0x4}, {0x6, 0x99c8, 0x3, 0x7, 0x3, 0xb91}, {0x43d7, 0x3be, 0x2, 0x78, 0xffffffff, 0xf}, {0x5, 0x9, 0x9, 0x6b, 0x7f, 0x20000000}, {0x7, 0x2, 0xfffffbff, 0x9, 0x7, 0x2}, {0x96a2, 0x5, 0x8, 0xf, 0x5, 0x4}, {0x4, 0x5, 0x4, 0x0, 0x8, 0x8}, {0x200, 0x435d, 0x400, 0x81, 0x9, 0x79}, {0x0, 0x8, 0x4, 0x6, 0x9, 0x8001}, {0x1ff, 0x5, 0x9, 0x2, 0x7fff, 0x9161843a}, {0x4d, 0x7f, 0x2, 0x3, 0x0, 0x200}, {0xf, 0x3, 0x3, 0x2, 0x6, 0x10001}, {0x7, 0x8, 0xe728, 0xacb, 0x400, 0x8}, {0xfffffffa, 0x1, 0x80000001, 0x217d, 0x7, 0x599}, {0x3, 0x10, 0x0, 0xa5, 0x400}, {0x2, 0x9a, 0x6, 0x3, 0x4, 0x7}, {0xb, 0xfffffff3, 0xbd, 0xb1, 0x5, 0x4}, {0x823, 0x0, 0xce, 0xfffffff7, 0x1, 0x9}, {0x3, 0x8, 0x6, 0x4ac, 0x6, 0x4}, {0x400, 0x7, 0xfffffffe, 0x6, 0x0, 0xfffffffc}, {0x3, 0x2, 0x8, 0xffff, 0x8}, {0x0, 0x0, 0x2000000, 0x9, 0xa, 0x8}, {0x800, 0x8, 0x2, 0x121, 0x1000, 0xfffffff7}, {0x81, 0x92, 0x4, 0x6, 0xffff02d0, 0x7}, {0x100, 0x0, 0xb, 0x2, 0x53f}, {0x8, 0x1ff, 0xe5b, 0x2, 0x4, 0x4}, {0x400, 0x9, 0x6, 0x7, 0x2, 0x7fff}, {0x2, 0xa, 0x9, 0x7, 0x3}, {0x4, 0x1, 0x3, 0xf7, 0x4, 0x1ff}, {0x6, 0x0, 0x41, 0x5, 0xfffff800, 0x2}, {0x3, 0xd, 0x5, 0x5, 0x6, 0x5}, {0x5, 0x3, 0x4, 0x9de7, 0x10, 0xfff}, {0x9, 0xb04, 0x4, 0xf4, 0x3, 0x9}, {0x4, 0xfffffffa, 0x8, 0x5, 0x4, 0xf}, {0x9, 0x1, 0x7fff, 0x0, 0x6, 0x2}, {0x4, 0x6, 0x8, 0x3, 0x2, 0x1}, {0x6, 0x7fffffff, 0x7, 0xc5, 0x7, 0x2}, {0x8, 0xffffffa0, 0x8, 0x10001, 0x8, 0x800}, {0x71d, 0x3, 0x3, 0x8, 0x401, 0x2}, {0x9, 0x2, 0x2, 0xc, 0x3, 0x400}, {0x2f78, 0x50, 0xb0, 0x6e8, 0x5d, 0x8}, {0x8, 0x7, 0x8, 0x7, 0x40, 0x1000}, {0x3, 0x8001, 0x0, 0x2, 0x8001}, {0x0, 0x0, 0x1ff, 0x9f8, 0x4, 0xffffffff}, {0x7fffffff, 0xf9f, 0x4, 0x9, 0x5, 0xa5}, {0x32521048, 0xa, 0xfffffffd, 0x1, 0x4, 0x1}, {0x2000, 0x4ff, 0xb7b, 0xe02, 0x9, 0x2}, {0x8, 0x5, 0x5, 0x7, 0x0, 0x7}, {0x1, 0xc, 0x8, 0x43, 0xfffffff9, 0x80040}, {0xb, 0xb, 0xd, 0x5, 0x19, 0x1}, {0x2, 0xb9, 0x8, 0x3, 0x1ea2, 0xe4b}, {0x0, 0x3, 0x9, 0x0, 0x7, 0xf3}, {0x0, 0x2, 0x0, 0x5, 0x81, 0x6}, {0x7, 0x8, 0x6, 0x91f2, 0x8001, 0xe7c4}, {0x69f6836a, 0x4, 0xffff, 0xf108, 0x4, 0x1}, {0x7, 0xff, 0x4, 0x5, 0x7ff, 0x5}, {0xfff, 0xd3a, 0x7, 0x0, 0x32c2, 0x3}, {0x0, 0x7, 0x1, 0xff, 0x3, 0x1ec7}, {0x8, 0x3, 0x7, 0x10001, 0x5, 0xb7c3}, {0x1, 0x5, 0x1, 0xfe7f, 0x2, 0x8}, {0x5, 0x4, 0x7, 0x7ff, 0x0, 0x4}, {0xfffffff6, 0x3d, 0x6, 0x6eaf, 0x37f, 0x9}, {0x4, 0x0, 0x1000, 0x2, 0x5, 0xfffff328}, {0xfffffffc, 0x5, 0x3, 0x8, 0x3, 0x8}, {0x6, 0x0, 0x1, 0x7, 0x8, 0x1}, {0x7, 0x9, 0xa7, 0x2, 0x0, 0xf}, {0x5, 0x7, 0x3, 0x2, 0x2}, {0x8, 0x4, 0x2, 0x5, 0xe27, 0x4}, {0x5, 0x800, 0x3ee1, 0x3, 0x5, 0x8}, {0x40, 0x7, 0xf, 0x0, 0x1, 0x4}, {0x0, 0x4000000, 0x1, 0x1, 0x28, 0x5}, {0x10001, 0x6, 0x4, 0xec, 0x3, 0xd}, {0x0, 0x9, 0x1, 0x3, 0x2f78, 0x7}, {0x7, 0x400, 0x8, 0x7ff, 0x0, 0x8}, {0x1, 0x1, 0x8, 0x6, 0x1, 0x9}, {0x4, 0xa91, 0x6, 0x7, 0xf6, 0x7}, {0x8, 0x40, 0x82a, 0x64f, 0x2, 0x100}, {0x8, 0x5c, 0x6, 0x9, 0xfffffffd, 0xa3}, {0x8, 0x3, 0x401, 0x678, 0x8, 0xff}, {0x1, 0x4, 0x9, 0x0, 0x2b, 0x4}, {0xfff, 0x4, 0x8, 0x3, 0x2, 0x7}, {0x2, 0x9, 0x401, 0x6, 0x101, 0x1}, {0x793, 0x8, 0x33, 0x8000, 0x6909efb1, 0x95}, {0xfffffff7, 0xd0b, 0x5, 0x661800, 0x0, 0x1}, {0x1000, 0xffff, 0x4, 0x6055, 0x8, 0x2}, {0x2, 0xb, 0x7, 0x7, 0xe, 0x8000}, {0x10, 0xfffffff9, 0x2, 0x7, 0x80000001, 0x3}, {0xa, 0xfffffffb, 0x8, 0x7, 0x1, 0x3}, {0xfffff57d, 0x7f, 0xb, 0x5, 0x9, 0x49df}, {0x6, 0x4, 0x4, 0xe, 0x14b2, 0x6}], [{0x2}, {0x1}, {0x8, 0x1}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x5}, {0x2}, {}, {0x4}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x5}, {}, {0x2}, {0x5}, {0x4}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x7}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {}, {0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x5}, {0x2}, {0x1}, {0x5}, {0x5, 0x1}, {}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0xf}, {}, {0x1}, {0x4}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x5}, {0x2}, {0x5}, {0x2}, {0x2, 0x1}, {0x4}, {0x2}, {0x2}, {0x0, 0x1}, {}, {0x2}, {0x7, 0x1}, {0x6, 0x1}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x4}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xeb0, 0x4, {{{0x9, 0x0, 0x1, 0x3, 0x8}, 0xb, 0x6, [{0x6, 0x9, 0xe709, 0x1, 0x400, 0x1}, {0x8, 0x6b, 0x6, 0x8, 0xd1e4, 0x9}, {0xffffffff, 0x8, 0x65a8, 0x7, 0x8, 0x2}, {0x9, 0x3, 0x7f, 0x0, 0x245d, 0x8}, {0x5, 0x5, 0x7ff, 0x2, 0xfffff66f, 0x400}, {0x4, 0xfc13, 0x6, 0x0, 0x3ff, 0x80}]}, [{0x5, 0x7b, 0x5, 0x0, 0x6}, {0x8, 0x8a2, 0x8001, 0x4, 0x3, 0x9}, {0x7f, 0x0, 0xd09b, 0x2, 0x0, 0x9f5}, {0x9, 0x79e, 0x7ff, 0x63b979c4, 0x8, 0xfff}, {0xcf, 0x8f1d, 0x80, 0x294f, 0x7, 0xa2e}, {0x2, 0x6, 0x1, 0x8fdf, 0x71a, 0xfffffff8}, {0x0, 0xfffff801, 0x3, 0xff, 0xffff, 0x2ef0}, {0x3, 0x2, 0x4, 0x0, 0x3, 0xa7b}, {0x49, 0x6, 0xde77, 0xffffffff, 0x40, 0x527}, {0x0, 0x6, 0x100, 0x8343, 0x7fff, 0x6}, {0x9, 0x4, 0x4, 0x7, 0x3, 0x6}, {0xc, 0xe605, 0x3, 0x1, 0x1, 0x9}, {0x2, 0x9, 0x6, 0x6, 0x0, 0x4a93}, {0x5, 0x5, 0x401, 0x7ff, 0x6, 0x7f}, {0x6, 0x215, 0x1, 0x7, 0xfffffffc, 0x5}, {0x9, 0x2, 0x1, 0x9, 0x5, 0x22}, {0x8, 0x1, 0x4, 0x0, 0xc00}, {0x90, 0x4, 0x7, 0x5, 0xc37, 0x7}, {0x6, 0x10000, 0x9, 0x0, 0x3, 0x9c}, {0xe3, 0x3ff, 0x4, 0x3, 0x9, 0x9}, {0x100, 0x1, 0xffff, 0x8, 0x1, 0x6c}, {0x4, 0x1, 0x3, 0x8001, 0x0, 0xfffffff8}, {0x80, 0xa, 0x40, 0x5, 0xfffffffe, 0x1}, {0x8, 0xfffffffd, 0xf, 0x3, 0x3, 0x800005}, {0x2, 0x1, 0x80000000, 0x4, 0x4, 0x4}, {0x5, 0x4, 0x8000, 0x4, 0x80000001, 0xfffffff8}, {0x66, 0xff, 0x9, 0x3, 0x5e04, 0x10001}, {0x7, 0x6, 0xfffffffc, 0x8, 0x3b, 0x9}, {0xb, 0x1, 0x400, 0x6, 0xfc95, 0x1}, {0x3, 0xcc, 0x3, 0x7f, 0x6, 0x9}, {0x7, 0x7f, 0x5, 0x74c, 0x79, 0x5}, {0x3, 0x6, 0x6, 0xccc, 0x5, 0xa3}, {0x0, 0x7b2f, 0x10, 0x1ff, 0xe2, 0x10000}, {0x0, 0xfffffffd, 0x5, 0x8, 0x4, 0x1}, {0xffffffff, 0x0, 0x4, 0x1a, 0x9, 0x1f92}, {0x10000, 0x10, 0xf, 0x10000, 0x6, 0x3}, {0x7, 0x5, 0x4, 0x7fff, 0xfab, 0x6}, {0xff, 0x5, 0x1, 0xb, 0x7, 0xfb6}, {0x1, 0x4, 0xfca, 0x3, 0x8, 0x8}, {0x10000, 0x5e9, 0x8, 0x0, 0x101, 0x7}, {0x163, 0x2e, 0x1, 0x5, 0x8191, 0x7cec}, {0x6, 0x9, 0xb, 0x39b, 0x8, 0xd5c2}, {0x5, 0x85, 0xfff, 0x81, 0x4, 0x3}, {0x3, 0x400, 0x6, 0x7ff, 0x80000000, 0xac0}, {0x8, 0xfffffe01, 0x1, 0xffff, 0xfffffff9, 0x2}, {0x200, 0x7fff, 0x80000000, 0x6, 0x66be, 0x6}, {0xfffffffc, 0x3, 0xf, 0x37, 0x7, 0x3}, {0x4, 0xb, 0x0, 0x4, 0x4, 0x9}, {0x8, 0xa, 0x3, 0x8, 0x7, 0x222c}, {0x9, 0x4, 0x0, 0xc, 0x4, 0x6}, {0xe, 0x1ff, 0xfff, 0x5, 0x4}, {0x6, 0x3, 0xfd59, 0xc06, 0x2, 0x932}, {0x4, 0x2, 0x5, 0x0, 0xa, 0x5}, {0x7, 0x2, 0x9, 0x9fd, 0x401, 0x8}, {0x3, 0xfffff000, 0x3, 0xda4000, 0x5, 0x80f1}, {0x1000, 0x4, 0xb142, 0x0, 0x9, 0x7}, {0x1, 0x94e, 0x4, 0xffff12c9, 0x9, 0x400}, {0x0, 0x5357, 0x3, 0x1, 0x4, 0x40}, {0x0, 0x800000, 0xa, 0x2, 0x2, 0x1000}, {0x584, 0x4, 0x5, 0xfffffffb, 0x7de76d1e, 0xfffffff7}, {0x0, 0x9, 0x5, 0xff, 0xdab, 0xfffffffa}, {0x1b31, 0x6, 0x100, 0x6, 0xe1f4, 0x94b}, {0x8, 0x8, 0x5, 0x101, 0x1, 0x800}, {0x3, 0x7, 0x6, 0x510, 0x5, 0x2}, {0x10001, 0x6, 0x9, 0x0, 0x5, 0x100}, {0x7, 0x1, 0x5cd3, 0x1, 0x9, 0x5}, {0xda, 0x441865f2, 0xe, 0x80000000, 0xffff, 0x3}, {0x1, 0x2, 0x5, 0x2, 0x80000001, 0xb}, {0x7f, 0x9d, 0x80000001, 0x7fff, 0x8000, 0x3}, {0x4, 0xca000, 0x101, 0x0, 0xffff, 0x7}, {0x7, 0x100000, 0x93, 0x1, 0x1, 0x6}, {0x200, 0x2, 0x5, 0x163f9acb, 0x101, 0x7}, {0x401, 0x1, 0x8000, 0xe, 0x1000}, {0x80, 0x101, 0x771, 0xffff, 0x3, 0xf}, {0x4, 0xfffffffc, 0x8, 0x101, 0x2, 0x4}, {0x9, 0x40, 0x6, 0x4, 0xfff, 0x8}, {0x5, 0x1, 0x4, 0x5, 0x40, 0x81}, {0x7fff, 0x7, 0x1, 0x6, 0x1ff, 0x866}, {0x5, 0xfff, 0x4, 0xc997, 0x0, 0x8}, {0x2, 0x9, 0x0, 0xaa, 0x9, 0x1}, {0x2, 0x1, 0x9, 0x4, 0xa00000, 0x3}, {0x0, 0x5, 0x3, 0xc, 0x9, 0xec5}, {0x1, 0x10, 0x4, 0x100, 0x8, 0x9}, {0x9, 0x7, 0x3, 0x7fffffff, 0x7, 0x6}, {0x7fffffff, 0x6, 0x101, 0xfffffff4, 0x10001, 0x7}, {0xae, 0x13, 0x0, 0x8, 0x400, 0x9}, {0x6, 0x3, 0x10000, 0x5c0, 0x80, 0x8}, {0x3, 0x3, 0xc, 0xe, 0xfffffff8, 0x800}, {0x9, 0x8, 0xd, 0x7, 0x1, 0x3}, {0xe, 0x5, 0x8, 0x774d, 0x10000, 0x8}, {0xed, 0x0, 0x5, 0x5, 0x9, 0x37375057}, {0xffdf, 0x5, 0x6, 0x2, 0xe, 0x101}, {0x7ff, 0x7fff, 0x2, 0x80000000, 0x35f, 0x4}, {0x4, 0x0, 0x10000, 0x5, 0x5, 0xee63}, {0x1, 0x0, 0x7, 0x5, 0x8c6, 0x7}, {0x6, 0xeb0, 0x1, 0xfffff001, 0x5, 0x1}, {0x800, 0x1, 0xe8, 0x9, 0x7, 0x6}, {0x3, 0xe, 0x78a5, 0x0, 0x60b89413, 0x4}, {0x8, 0xe, 0xffff2882, 0xa666, 0x3, 0x7}, {0x42, 0xffff, 0x4, 0x2, 0x3, 0x1000}, {0x2, 0x2bfc, 0xb7, 0x6, 0x9, 0x5}, {0x8260, 0x1, 0x1, 0x0, 0x3, 0xffff0000}, {0x0, 0xf5, 0x9, 0x2, 0x7, 0x5}, {0x10000, 0x480000, 0x3, 0x3, 0xa0000, 0xd}, {0x1000, 0x9, 0x12e, 0x101, 0x4}, {0x9, 0x5, 0x3ff, 0x65e, 0x8, 0x6}, {0x2, 0x8, 0x0, 0x9, 0x7, 0x5}, {0x6, 0x1, 0xfffffffe, 0xd5b, 0x5, 0x3}, {0x80000001, 0x2679e7b6, 0x1, 0xf, 0x4, 0x8}, {0x869, 0x6, 0x2, 0x4, 0x2, 0xf}, {0x8, 0x0, 0x5, 0x4, 0x581, 0x7}, {0x6, 0x1fe, 0x1000, 0x4, 0x35714a8e, 0x8ba}, {0x4, 0x96b, 0x3, 0xfff, 0x3ff, 0x4}, {0x10001, 0xe6, 0x7ff, 0x2, 0x7, 0xfffffff7}, {0x2, 0x7, 0xf8, 0x2, 0x6, 0x5}, {0x4, 0x800, 0x7, 0x7, 0xfffffffe, 0xf}, {0x0, 0x1, 0xc0e, 0x2, 0xc57}, {0x7ff, 0x6, 0x3, 0xd1c5, 0x6, 0x796}, {0x966f, 0x5, 0x9, 0x0, 0x53}, {0x4, 0x4, 0x7, 0x6, 0xbc42, 0x7fff}, {0x5, 0xfffffff9, 0x3, 0x64, 0x800, 0xe}, {0x6, 0xc00000, 0xfff, 0x2, 0x80}, {0xfffffeff, 0x7, 0x3, 0x5, 0x5, 0x100}, {0xff, 0x2, 0xfffffffa, 0x57d0bd35, 0x6, 0x2bfc248f}, {0xf, 0x8, 0x1ff, 0x400, 0x5}, {0x1, 0x40, 0x9, 0x80, 0xcd, 0xdc5}, {0x3, 0x6, 0x4, 0x6, 0x6, 0x9}, {0x0, 0x2d, 0x8b4, 0x9, 0x4, 0x3}], [{0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x7, 0x1}, {0x4, 0x1}, {0x4}, {0x3}, {0x4}, {0x1, 0x1}, {0x4}, {0x2}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x5}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x6, 0x51f1aed017d5064c}, {0x4}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x5}, {0x3}, {0x4, 0x1}, {0x5}, {}, {0x1}, {0x2, 0x1}, {}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x1}, {0x1}, {0x5}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x5}, {0x3}, {0x4}, {0x4}, {0x3, 0x1}, {0x2}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {}, {0x5}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x4}, {}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x5}, {0x6}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x3, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x2eb8}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() 2.868839325s ago: executing program 6 (id=2891): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) fcntl$getflags(r1, 0x3) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x88a00, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$cuse(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x79, 0xfffffffffffffffc, 0x8000, 0x34, 0x10001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, 0x0, 0x20000000) syz_genetlink_get_family_id$fou(&(0x7f0000000080), r3) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x3, 0x7fff7ffe}]}) close_range(r4, 0xffffffffffffffff, 0x0) 2.063189609s ago: executing program 0 (id=2892): newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080), 0x800) 1.904602241s ago: executing program 5 (id=2893): syz_open_procfs(0x0, &(0x7f0000000380)='timerslack_ns\x00') r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) r1 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000200)={0x53, 0xfffffffffffffffb, 0x6, 0x10, @buffer={0x0, 0xd6, &(0x7f0000000440)=""/214}, &(0x7f0000000000)="885e6bd88220", 0x0, 0xe, 0x13, 0x1, 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000140)='#E', 0x0}, 0x50) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0xc, 0x800000ac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r4, 0x1, &(0x7f0000001300)=[0x0]) r5 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000180), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r5, 0x11, &(0x7f0000000500)='n', 0x1) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r5, 0x13, 0x0, 0x2) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB], 0xec) recvmmsg$unix(r2, &(0x7f0000006200), 0x0, 0x0, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) connect$nfc_raw(r3, &(0x7f00000001c0)={0x27, r7, 0xffffffffffffffff, 0x3}, 0x10) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r8, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x301000, 0x8}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r8, 0x4020aed2, 0x0) r9 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) close(r9) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) 1.777613805s ago: executing program 0 (id=2894): openat$random(0xffffffffffffff9c, 0x0, 0x101080, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) eventfd2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c000000020601010000000000000000000000000900020073797a300000000005000100060000000500050000000000050004000000000014000780080011400000000005001500288537350d000300686173683a6d6163"], 0x5c}}, 0x4005800) r4 = socket$netlink(0x10, 0x3, 0x2) syz_open_dev$ptys(0xc, 0x3, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7", 0xf) recvmsg(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000280), 0x4eb36, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000007c0)={0x1, 0x2, 0x1, 0x0, 0x8}) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000140)=0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000080)={0xe0000000, 0x2, 0x2, 0x0, 0x6}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040b0b08c900c8f275d237cb96f2"], 0xe) 1.516014574s ago: executing program 6 (id=2895): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000007880)=""/102400, 0x19000) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000880)={{r0, &(0x7f0000000000)='fuse\x00', 0x101000, &(0x7f0000000040)={@align=0x3, {0x2, 0x4, 0x7ff, 0x6}}, 0x3, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000240)=0x6}, 0x4, &(0x7f0000000800)=[{0x7, 0xfffffffb, &(0x7f0000000380)='\x00', &(0x7f00000004c0)='<', 0x1, 0x1a}, {0x3, 0x100, &(0x7f0000000500)='syz1\x00', &(0x7f0000000540)="ae450950fd05d39976dae1a75f55c54e07b451858fd275b2510d648703709c67182dcc282c3adf4273ca4b4886c7dc04dd8e456c22768e88cc970f28dac3c98a8c50c2f8155627041c6e7bbf205a85cab47e1c89f1ec3310cfc44193b8f7f7f4af0a86b275b357063783d7ff96684d734dcbdfed057691d9964b6183903081a1bf75aa8670d79f061b05ce71d4018e32d7c3326a", 0x94, 0x20}, {0x2, 0x40, &(0x7f0000000600)='/dev/cpu/#/msr\x00', &(0x7f0000000640)="5059905c7cc6721fc066e11394dc51562e2193dd27eb79f76315cdcc148f9c650abe56866ee64b41e391bd9878e1d76302d5966a3b0d6dcc37bc57c72c87df7770d61697b72c16d5b706b80e734d323e194282b4a5c2df9b4f2a4b30e87dbd95a961d23f614d64c3f372f7d559785b3be75ab34f37cccfc2f1f9533de779e43a65a6726edc2125e41f9d5d53274557c754663179cf678cb98658dafbbcb27414c7a6bfcfb4f16d27f9b2d6", 0xab}, {0x2, 0xe08a, &(0x7f0000000700)='^\x00', &(0x7f0000000740)="b68b8e0bf205c8375dc19fd7e5a81a54fd271fe36df776d45a662e63102a45aac86f677e37a1b7a20cac2b1c6c19e89d2b8668c623fe94bc5bed464fd86a49a94058e856b1a6d09cb7299e86c3190be309fb731bb4d5d874e7cbd7fd79d6df37ef6bc7062910dfef613e10c856ebc87a29c8072b4d7e3ffb53ad42b35e17483650f9a25e6f99e28c6d910872ce4f366d1cb8eec5c59267cb57acb3a5fed4226be806d1a0cdb8ba1c84184b45e89aa7c899148ec5af54b4e64271", 0xba, 0x38}]}) ioctl$BLKRRPART(r3, 0x125f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) getresgid(0x0, 0x0, 0x0) setfsgid(0x0) setfsgid(0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001180)={r4, 0x0, 0x0}, 0x1c) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[]) lstat(&(0x7f0000000200)='./file0\x00', 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 630.869294ms ago: executing program 0 (id=2896): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.state\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x37, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0xffffff9e, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x18000000, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x4, 0x6, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x480}}}]}]}]}]}], {0x14, 0x10}}, 0xe4}}, 0x0) getpid() r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b5, &(0x7f0000006680)) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) write$RDMA_USER_CM_CMD_CONNECT(r4, &(0x7f00000004c0)={0x6, 0x118, 0xfa00, {{0xd16, 0x2, "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", 0x7, 0x3b, 0x7, 0x0, 0x7, 0x5, 0x3, 0x1}}}, 0x120) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x15, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x8000) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000680)='net/rt_acct\x00') preadv(r7, 0x0, 0x0, 0xfffffff7, 0xfffff001) socket$key(0xf, 0x3, 0x2) 29.376619ms ago: executing program 1 (id=2897): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="05000000e4ef1f00810000007f00000001afbf59436321b2c69a09e13a9e5aa7c3473a919f98d813c27eb5c8b4", @ANYRESOCT, @ANYRES8=0x0], 0x48) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000480)={0x81, 0x0, 0x1}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_open_dev$loop(0x0, 0xf01c, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000001000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) vmsplice(r2, &(0x7f00000005c0)=[{&(0x7f0000000100)='p', 0x1}, {&(0x7f00000003c0)="d04a86f54bb0ba3cecf3b662c92133d5df2e953ede046b6a40e68c2f353b2b254361b9eb7c8c5124323ea5609d0cb59630eecb5ffe6db7ab800700d29ab855ab9287cd9536b9cccce497501655f79346cd52250e45d6014554c7dc8ec0d09f2064b6e095842cfa41a677012e15ab28f0976e0b", 0x73}, {&(0x7f0000000680)="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", 0x20c}, {&(0x7f0000000540)="3ed623c5f325552e9a9ef9e1df954cba467f7d511ecb61e358d96d79695372653a1e1e51d0dc8ead987945748158acdc7239fa9d61413ae9e3a9814b73629179385037f5a2b8c0d13e849e34b8cacca5fe258bc0b3a214588a6de36b80c129524d8861e8a8240bda5412a5683a7c63ee3a557e252e4e905da7619cd182b48a95", 0x80}], 0x4, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x2e0, 0x1b8, 0x43, 0xa0, 0x1b8, 0x98, 0x248, 0x178, 0x178, 0x248, 0x178, 0x49, 0x0, {[{{@ip={@local, @multicast2, 0xff000000, 0xff, 'syz_tun\x00', 'geneve1\x00', {0xff}, {0xff}, 0x88, 0x2, 0x3d}, 0x12a, 0x198, 0x1b8, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@cluster={{0x30}, {0x10, 0x2, 0x6, 0x1}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x340) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x88) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x109801, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, 0x0}, 0x20) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0x9, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7f, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_IRQ_LINE_STATUS(r8, 0xc008ae67, &(0x7f0000000000)={0x8, 0xfffffff8}) ioctl$BTRFS_IOC_QUOTA_RESCAN(r6, 0x4040942c, &(0x7f0000000100)={0x0, 0x5, [0x7fd, 0x2, 0xf9d1, 0x80000001, 0x5, 0x25]}) ioctl$KVM_CAP_MAX_VCPU_ID(r6, 0x4068aea3, &(0x7f00000002c0)={0x80, 0x0, 0x100000000000}) dup2(r6, r6) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000040)={'\x00', 0x9, 0x8, 0x8003, 0xffffffffffffffff, 0x13}) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) r11 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$6lowpan_control(r11, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 0', 0x1b) ioctl$FS_IOC_RESVSP(r7, 0x40305828, 0x0) setsockopt(r10, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) 0s ago: executing program 6 (id=2898): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) r1 = openat(0xffffffffffffff9c, 0x0, 0x60840, 0x8) io_submit(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1a, &(0x7f00000005c0)=""/49, &(0x7f0000000600)=0x31) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r3 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x92\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1116, 0x5) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) r4 = open_tree(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0) r5 = socket$alg(0x26, 0x5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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", @ANYRES8=r3, @ANYRESOCT=r0], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x2}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r6, 0x0, 0xe, 0xfffffffffffffead, &(0x7f0000000080)="3a173357f297c605804ab3828443", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r5) r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) writev(r7, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) write$char_usb(r7, &(0x7f00000001c0)="64e9", 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000540)={r1, r7}, 0xc) mount_setattr(r4, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0xb, 0x2}, 0x20) syz_genetlink_get_family_id$SEG6(&(0x7f0000000fc0), 0xffffffffffffffff) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x22643) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x4}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0x3927}, @TCA_FQ_QUANTUM={0x8, 0x2, 0x7000000}]}}]}, 0x48}}, 0x20008894) r10 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_INSN(r10, 0x8028640c, &(0x7f00000000c0)={0x6000004, 0x0, 0x0, 0x1, 0x7}) kernel console output (not intermixed with test programs): =1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 977.198138][T13335] usb 9-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 977.223183][T13335] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.280061][T13335] usb 9-1: config 0 descriptor?? [ 977.306875][T13335] gspca_main: sq930x-2.14.0 probing 041e:403c [ 977.831306][T10038] net_ratelimit: 23 callbacks suppressed [ 977.831506][T10038] bond5: (slave bridge1): failed to get link speed/duplex [ 977.947481][T15863] xt_l2tp: invalid flags combination: c [ 978.036266][T10038] bond5: (slave bridge1): failed to get link speed/duplex [ 978.038834][T15863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 978.050552][T13335] gspca_sq930x: ucbus_write failed -110 [ 978.129443][T15863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 978.192279][T14358] Bluetooth: hci5: command 0x0c1a tx timeout [ 978.200379][T13335] sq930x 9-1:0.0: probe with driver sq930x failed with error -110 [ 978.347630][T10036] bond5: (slave bridge1): failed to get link speed/duplex [ 978.361379][T14358] Bluetooth: hci6: command 0x0c1a tx timeout [ 978.501745][T10036] bond5: (slave bridge1): failed to get link speed/duplex [ 978.711356][T13335] usb 2-1: new low-speed USB device number 91 using dummy_hcd [ 978.921419][T10036] bond5: (slave bridge1): failed to get link speed/duplex [ 978.945113][ T9414] usb 9-1: USB disconnect, device number 3 [ 978.983649][T13335] usb 2-1: unable to get BOS descriptor or descriptor too short [ 979.071562][ T29] audit: type=1400 audit(1783209611.060:1116): avc: denied { write } for pid=15879 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 979.108552][ T46] bond5: (slave bridge1): failed to get link speed/duplex [ 979.320758][ T46] bond5: (slave bridge1): failed to get link speed/duplex [ 979.392413][ T29] audit: type=1400 audit(1783209611.380:1117): avc: denied { write } for pid=15902 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 979.424932][T13335] usb 2-1: config 8 has an invalid interface number: 109 but max is 0 [ 979.433117][T13335] usb 2-1: config 8 has no interface number 0 [ 979.449297][T13335] usb 2-1: config 8 interface 109 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 8 [ 979.467474][T13335] usb 2-1: config 8 interface 109 altsetting 0 endpoint 0x8E has invalid maxpacket 19095, setting to 8 [ 979.501877][T13335] usb 2-1: config 8 interface 109 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 979.543961][ T46] bond5: (slave bridge1): failed to get link speed/duplex [ 979.751838][T10034] bond5: (slave bridge1): failed to get link speed/duplex [ 979.860391][T13335] usb 2-1: string descriptor 0 read error: -22 [ 979.872426][T13335] usb 2-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=d4.29 [ 979.889647][T10034] bond5: (slave bridge1): failed to get link speed/duplex [ 979.906664][T13335] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.971191][T15893] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 980.018770][T13335] metro_usb 2-1:8.109: Metrologic USB to Serial converter detected [ 980.094362][T13335] usb 2-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 980.225811][T13675] usb 6-1: USB disconnect, device number 65 [ 980.306860][ T9414] usb 2-1: USB disconnect, device number 91 [ 980.380586][T15920] netlink: 'syz.0.2595': attribute type 1 has an invalid length. [ 980.404503][ T9414] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 980.432710][ T9414] metro_usb 2-1:8.109: device disconnected [ 981.058216][T15927] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2596'. [ 981.158797][T15931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2595'. [ 981.190621][T15920] 8021q: adding VLAN 0 to HW filter on device bond8 [ 981.314519][ T29] audit: type=1400 audit(1783209613.310:1118): avc: denied { write } for pid=15907 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 981.392022][T15925] vlan3: entered allmulticast mode [ 981.440407][T15925] bond8: entered allmulticast mode [ 981.461741][ T5718] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 981.494417][ T29] audit: type=1400 audit(1783209613.490:1119): avc: denied { write } for pid=15938 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 981.642855][ T5718] usb 9-1: Using ep0 maxpacket: 16 [ 981.784807][ T5718] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 981.884766][ T5718] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 981.898810][ T5718] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 981.908485][ T5718] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 981.986591][ T5718] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 982.009102][ T29] audit: type=1400 audit(1783209614.000:1120): avc: denied { mounton } for pid=15939 comm="syz.6.2598" path="/76/file0" dev="tmpfs" ino=420 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 982.082826][ T5718] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 982.093702][ T5718] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 982.103867][ T5718] usb 9-1: Manufacturer: syz [ 982.333289][ T5718] usb 9-1: config 0 descriptor?? [ 983.168864][ T35] net_ratelimit: 12 callbacks suppressed [ 983.168884][ T35] bond5: (slave bridge1): failed to get link speed/duplex [ 983.343139][ T35] bond5: (slave bridge1): failed to get link speed/duplex [ 983.531268][ T7001] bond5: (slave bridge1): failed to get link speed/duplex [ 983.691941][T10034] bond5: (slave bridge1): failed to get link speed/duplex [ 983.718669][T15973] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 983.750686][T15978] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2603'. [ 984.287575][ T29] audit: type=1400 audit(1783209616.280:1121): avc: denied { write } for pid=15952 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 984.561760][ T7001] bond5: (slave bridge1): failed to get link speed/duplex [ 984.630201][T15986] syzkaller0: entered promiscuous mode [ 984.680387][T15986] syzkaller0: entered allmulticast mode [ 984.805854][ T29] audit: type=1400 audit(1783209616.800:1122): avc: denied { write } for pid=15987 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 984.844727][T15983] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2605'. [ 984.921798][ T13] bond5: (slave bridge1): failed to get link speed/duplex [ 985.051579][ T13] bond5: (slave bridge1): failed to get link speed/duplex [ 985.197130][T10034] bond5: (slave bridge1): failed to get link speed/duplex [ 985.312411][T10034] bond5: (slave bridge1): failed to get link speed/duplex [ 985.441706][T10034] bond5: (slave bridge1): failed to get link speed/duplex [ 985.581311][ T5718] rc_core: IR keymap rc-hauppauge not found [ 985.590843][ T5718] Registered IR keymap rc-empty [ 985.600545][ T5718] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 985.633101][T13335] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 985.641402][ T5718] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 985.673146][ T5718] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 985.719000][ T5718] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input56 [ 985.763436][ T5718] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 985.814322][ T5718] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 985.822157][T13335] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 985.833859][T13335] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 985.845329][T13335] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 985.855518][ T5718] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 985.872486][T13335] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 985.886143][T13335] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 985.903262][T13335] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 985.913898][ T5718] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 985.921775][T13335] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 985.931339][T13335] usb 7-1: Product: syz [ 985.935825][T13335] usb 7-1: Manufacturer: syz [ 985.951338][ T5718] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 985.959790][T13335] cdc_wdm 7-1:1.0: skipping garbage [ 985.966773][T13335] cdc_wdm 7-1:1.0: skipping garbage [ 985.977764][T13335] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 985.984460][ T5718] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 985.993736][T13335] cdc_wdm 7-1:1.0: Unknown control protocol [ 986.011991][ T5718] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 986.032572][ T5718] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 986.061537][ T5718] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 986.102123][ T5718] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 986.147117][ T5718] mceusb 9-1:0.0: Registered with mce emulator interface version 1 [ 986.156764][ T5718] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 986.182781][ T5718] usb 9-1: USB disconnect, device number 4 [ 986.420004][T15967] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 986.964806][ T5718] usb 6-1: new low-speed USB device number 66 using dummy_hcd [ 987.254857][ T9414] usb 7-1: USB disconnect, device number 9 [ 987.269499][ T5718] usb 6-1: unable to get BOS descriptor or descriptor too short [ 987.297123][ T5718] usb 6-1: config 8 has an invalid interface number: 109 but max is 0 [ 987.307083][ T5718] usb 6-1: config 8 has no interface number 0 [ 987.338274][ T5718] usb 6-1: config 8 interface 109 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 8 [ 987.352298][ T5718] usb 6-1: config 8 interface 109 altsetting 0 endpoint 0x8E has invalid maxpacket 19095, setting to 8 [ 987.401761][T13675] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 987.402667][ T5718] usb 6-1: config 8 interface 109 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 987.726990][ T5718] usb 6-1: string descriptor 0 read error: -22 [ 987.739463][ T5718] usb 6-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=d4.29 [ 987.753800][ T5718] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.895453][T16003] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 988.001347][ T9414] usb 1-1: new full-speed USB device number 87 using dummy_hcd [ 988.260661][T13675] usb 9-1: unable to get BOS descriptor or descriptor too short [ 988.271729][T10038] net_ratelimit: 20 callbacks suppressed [ 988.271742][T10038] bond5: (slave bridge1): failed to get link speed/duplex [ 988.288253][ T5718] metro_usb 6-1:8.109: Metrologic USB to Serial converter detected [ 988.302046][T13675] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 988.311817][ T5718] usb 6-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 988.312335][T13675] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 988.335287][T13675] usb 9-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 988.367244][T13675] usb 9-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 988.419634][T13675] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 988.438753][T10034] bond5: (slave bridge1): failed to get link speed/duplex [ 988.484736][T13675] usb 9-1: config 1 interface 1 has no altsetting 0 [ 988.512985][T13675] usb 9-1: string descriptor 0 read error: -22 [ 988.520088][T16026] FAULT_INJECTION: forcing a failure. [ 988.520088][T16026] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 988.522131][T13675] usb 9-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 988.561843][T16026] CPU: 0 UID: 0 PID: 16026 Comm: syz.6.2617 Tainted: G L syzkaller #0 PREEMPT(full) [ 988.561876][T16026] Tainted: [L]=SOFTLOCKUP [ 988.561883][T16026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 988.561896][T16026] Call Trace: [ 988.561904][T16026] [ 988.561912][T16026] dump_stack_lvl+0x100/0x190 [ 988.561941][T16026] should_fail_ex.cold+0x5/0xa [ 988.561968][T16026] _copy_from_user+0x2e/0xd0 [ 988.561991][T16026] do_ipv6_setsockopt+0x73d/0x44a0 [ 988.562027][T16026] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 988.562058][T16026] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 988.562079][T16026] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 988.562105][T16026] ? avc_has_perm_noaudit+0x145/0x3b0 [ 988.562129][T16026] ? avc_has_perm+0x135/0x1e0 [ 988.562150][T16026] ? __pfx_avc_has_perm+0x10/0x10 [ 988.562174][T16026] ? get_pid_task+0x106/0x250 [ 988.562208][T16026] ? sock_has_perm+0x25a/0x2f0 [ 988.562232][T16026] ? __pfx_sock_has_perm+0x10/0x10 [ 988.562261][T16026] ? ipv6_setsockopt+0xcb/0x170 [ 988.562289][T16026] ipv6_setsockopt+0xcb/0x170 [ 988.562321][T16026] rawv6_setsockopt+0xee/0x5a0 [ 988.562349][T16026] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 988.562378][T16026] ? selinux_socket_setsockopt+0x6a/0x80 [ 988.562401][T16026] ? sock_common_setsockopt+0x2e/0xf0 [ 988.562426][T16026] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 988.562452][T16026] do_sock_setsockopt+0xf3/0x1d0 [ 988.562480][T16026] __sys_setsockopt+0x195/0x220 [ 988.562516][T16026] __x64_sys_setsockopt+0xbd/0x160 [ 988.562552][T16026] ? do_syscall_64+0x90/0x870 [ 988.562580][T16026] ? lockdep_hardirqs_on+0x78/0x100 [ 988.562607][T16026] do_syscall_64+0x115/0x870 [ 988.562634][T16026] ? clear_bhb_loop+0x40/0x90 [ 988.562660][T16026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.562682][T16026] RIP: 0033:0x7f2fceb9de59 [ 988.562700][T16026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 988.562720][T16026] RSP: 002b:00007f2fcf9ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 988.562741][T16026] RAX: ffffffffffffffda RBX: 00007f2fcee25fa0 RCX: 00007f2fceb9de59 [ 988.562755][T16026] RDX: 0000000000000001 RSI: 0000000000000029 RDI: 0000000000000003 [ 988.562768][T16026] RBP: 00007f2fcf9ac090 R08: 0000000000000004 R09: 0000000000000000 [ 988.562781][T16026] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000001 [ 988.562795][T16026] R13: 00007f2fcee26038 R14: 00007f2fcee25fa0 R15: 00007ffee2c549d8 [ 988.562824][T16026] [ 988.577343][T13675] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.651248][T10034] bond5: (slave bridge1): failed to get link speed/duplex [ 988.721461][T16030] vivid-002: disconnect [ 988.897840][ T29] audit: type=1400 audit(1783209620.890:1123): avc: denied { node_bind } for pid=16029 comm="syz.6.2618" saddr=fe80::bb src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 988.904323][ T24] usb 6-1: USB disconnect, device number 66 [ 988.962296][ T29] audit: type=1400 audit(1783209620.960:1124): avc: denied { read } for pid=16029 comm="syz.6.2618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 988.967295][ T24] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 989.010474][ T24] metro_usb 6-1:8.109: device disconnected [ 989.101031][T10034] bond5: (slave bridge1): failed to get link speed/duplex [ 989.127505][ T29] audit: type=1400 audit(1783209621.100:1125): avc: denied { setopt } for pid=16029 comm="syz.6.2618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 989.151324][T13335] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 989.166260][T16013] netlink: 'syz.8.2612': attribute type 21 has an invalid length. [ 989.176615][T16013] netlink: 'syz.8.2612': attribute type 1 has an invalid length. [ 989.185167][T16013] netlink: 144 bytes leftover after parsing attributes in process `syz.8.2612'. [ 989.206599][T13675] usb 9-1: 2:0: failed to get current value for ch 0 (-32) [ 989.294831][T10038] bond5: (slave bridge1): failed to get link speed/duplex [ 989.402308][T13335] usb 2-1: device descriptor read/64, error -71 [ 989.458218][T16035] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2619'. [ 989.476053][ T9414] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 989.483802][ T9414] usb 1-1: can't read configurations, error -71 [ 989.490567][T16035] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2619'. [ 989.500383][T16035] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2619'. [ 989.510332][ T7001] bond5: (slave bridge1): failed to get link speed/duplex [ 989.626659][ T7001] bond5: (slave bridge1): failed to get link speed/duplex [ 989.750610][T13675] usb 9-1: 2:0: cannot get min/max values for control 2 (id 2) [ 989.759718][T13675] usb 9-1: Warning! Unlikely big volume step count (=23188), linear volume or wrong cval->res? [ 989.770945][T13675] usb 9-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/23188/1 [ 989.813013][T13675] usb 9-1: 2:0: cannot get min/max values for control 2 (id 2) [ 989.834944][T13335] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 990.261981][ T46] bond5: (slave bridge1): failed to get link speed/duplex [ 990.276216][T13675] usb 9-1: 2:0: cannot get min/max values for control 2 (id 2) [ 990.293654][T13335] usb 2-1: device descriptor read/64, error -71 [ 990.305196][T13675] usb 9-1: USB disconnect, device number 5 [ 990.381230][ T46] bond5: (slave bridge1): failed to get link speed/duplex [ 990.584800][ T7001] bond5: (slave bridge1): failed to get link speed/duplex [ 990.594109][T13335] usb usb2-port1: attempt power cycle [ 990.621505][ T29] audit: type=1400 audit(1783209622.610:1126): avc: denied { cmd } for pid=16044 comm="iou-wrk-16045" path="/dev/ublk-control" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 991.051275][T13335] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 991.115337][T13335] usb 2-1: device descriptor read/8, error -71 [ 992.242223][T13335] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 992.370842][T16030] vivid-002: reconnect [ 992.385889][T13335] usb 2-1: device descriptor read/8, error -71 [ 992.441353][T13675] usb 1-1: new full-speed USB device number 89 using dummy_hcd [ 992.450934][T16070] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2630'. [ 992.493660][T16070] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2630'. [ 992.506470][T16070] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2630'. [ 992.630888][T13335] usb usb2-port1: unable to enumerate USB device [ 992.674823][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.705537][T13675] usb 1-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 0.40 [ 992.735486][T13675] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.784647][T13675] usb 1-1: Product: syz [ 992.801306][T13675] usb 1-1: Manufacturer: syz [ 992.812681][T13675] usb 1-1: SerialNumber: syz [ 992.856933][T10040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 992.876366][T10040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 992.944736][T16078] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2632'. [ 993.032249][ T29] audit: type=1400 audit(1783209625.030:1127): avc: denied { unmount } for pid=5612 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 994.067581][ T35] net_ratelimit: 13 callbacks suppressed [ 994.067614][ T35] bond5: (slave bridge1): failed to get link speed/duplex [ 994.579784][T13675] usb 1-1: 1:1 : unsupported format bits 0x2004 [ 994.590898][T13675] usb 1-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 994.742081][ T46] bond5: (slave bridge1): failed to get link speed/duplex [ 994.826572][T13675] usb 1-1: failed to enable PITCH for EP 0x1 [ 994.861423][ T35] bond5: (slave bridge1): failed to get link speed/duplex [ 994.882496][T13675] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 994.903473][T13675] usb 1-1: unit 2 not found! [ 994.911970][T13675] usb 1-1: unit 64 not found! [ 994.982486][ T35] bond5: (slave bridge1): failed to get link speed/duplex [ 995.122424][T10034] bond5: (slave bridge1): failed to get link speed/duplex [ 995.380745][T10034] bond5: (slave bridge1): failed to get link speed/duplex [ 995.554253][ T9414] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 995.628325][T13675] usb 1-1: USB disconnect, device number 89 [ 995.642751][ T46] bond5: (slave bridge1): failed to get link speed/duplex [ 995.733335][ T9414] usb 2-1: Using ep0 maxpacket: 32 [ 995.763980][T10034] bond5: (slave bridge1): failed to get link speed/duplex [ 995.783603][ T9414] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 995.833588][ T9414] usb 2-1: config 0 has no interface number 0 [ 995.874660][ T9414] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 995.935219][ T9414] usb 2-1: config 0 interface 89 has no altsetting 0 [ 995.981629][T10038] bond5: (slave bridge1): failed to get link speed/duplex [ 996.008088][ T9414] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 996.062893][ T9414] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.091400][ T9414] usb 2-1: Product: syz [ 996.123743][ T9414] usb 2-1: Manufacturer: syz [ 996.140306][ T9414] usb 2-1: SerialNumber: syz [ 996.152457][ T13] bond5: (slave bridge1): failed to get link speed/duplex [ 996.185920][ T9414] usb 2-1: config 0 descriptor?? [ 996.276215][ T9414] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 996.488050][ T9414] em28xx 2-1:0.89: Video interface 89 found: [ 997.113561][ T9414] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 997.159076][T16140] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2650'. [ 997.461437][T13675] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 998.002601][T13675] usb 6-1: Using ep0 maxpacket: 8 [ 998.502963][T13675] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 999.397825][ T7001] net_ratelimit: 19 callbacks suppressed [ 999.397845][ T7001] bond5: (slave bridge1): failed to get link speed/duplex [ 999.493062][T13675] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.609779][T16147] FAULT_INJECTION: forcing a failure. [ 999.609779][T16147] name failslab, interval 1, probability 0, space 0, times 0 [ 999.620155][T13675] usb 6-1: Product: syz [ 999.624584][T16147] CPU: 0 UID: 0 PID: 16147 Comm: syz.0.2652 Tainted: G L syzkaller #0 PREEMPT(full) [ 999.624616][T16147] Tainted: [L]=SOFTLOCKUP [ 999.624624][T16147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 999.624636][T16147] Call Trace: [ 999.624643][T16147] [ 999.624651][T16147] dump_stack_lvl+0x100/0x190 [ 999.624681][T16147] should_fail_ex.cold+0x5/0xa [ 999.624707][T16147] should_failslab+0xc2/0x120 [ 999.624730][T16147] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 999.624754][T16147] ? __alloc_skb+0x140/0x710 [ 999.624788][T16147] __alloc_skb+0x140/0x710 [ 999.624816][T16147] ? __pfx___alloc_skb+0x10/0x10 [ 999.624845][T16147] ? find_held_lock+0x2b/0x80 [ 999.624872][T16147] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 999.624892][T16147] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 999.624916][T16147] tcp_stream_alloc_skb+0x34/0x660 [ 999.624949][T16147] tcp_sendmsg_locked+0x13b2/0x44d0 [ 999.624978][T16147] ? __lock_acquire+0x49f/0x1a40 [ 999.625009][T16147] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 999.625033][T16147] ? do_raw_spin_lock+0x128/0x260 [ 999.625059][T16147] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 999.625091][T16147] ? __local_bh_enable_ip+0x9e/0x120 [ 999.625118][T16147] tcp_sendmsg+0x2e/0x50 [ 999.625142][T16147] ? __pfx_tcp_sendmsg+0x10/0x10 [ 999.625163][T16147] inet_sendmsg+0xb9/0x140 [ 999.625183][T16147] ____sys_sendmsg+0x9c9/0xbe0 [ 999.625206][T16147] ? __pfx_inet_sendmsg+0x10/0x10 [ 999.625229][T16147] ? __pfx_____sys_sendmsg+0x10/0x10 [ 999.625267][T16147] ___sys_sendmsg+0x190/0x1e0 [ 999.625294][T16147] ? __pfx____sys_sendmsg+0x10/0x10 [ 999.625317][T16147] ? __lock_acquire+0x49f/0x1a40 [ 999.625339][T16147] ? get_pid_task+0x106/0x250 [ 999.625399][T16147] __sys_sendmsg+0x160/0x210 [ 999.625419][T16147] ? __pfx___sys_sendmsg+0x10/0x10 [ 999.625455][T16147] do_syscall_64+0x115/0x870 [ 999.625482][T16147] ? clear_bhb_loop+0x40/0x90 [ 999.625507][T16147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 999.625527][T16147] RIP: 0033:0x7f76fad9de59 [ 999.625545][T16147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 999.625565][T16147] RSP: 002b:00007f76fbd0a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 999.625584][T16147] RAX: ffffffffffffffda RBX: 00007f76fb026090 RCX: 00007f76fad9de59 [ 999.625598][T16147] RDX: 000000000000d007 RSI: 00002000000015c0 RDI: 0000000000000008 [ 999.625610][T16147] RBP: 00007f76fbd0a090 R08: 0000000000000000 R09: 0000000000000000 [ 999.625623][T16147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 999.625635][T16147] R13: 00007f76fb026128 R14: 00007f76fb026090 R15: 00007ffcb6f437a8 [ 999.625665][T16147] [ 1000.074339][ T12] bond5: (slave bridge1): failed to get link speed/duplex [ 1000.160595][ T9414] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1000.196712][T10038] bond5: (slave bridge1): failed to get link speed/duplex [ 1000.224946][ T9414] em28xx 2-1:0.89: board has no eeprom [ 1000.247572][T13675] usb 6-1: Manufacturer: syz [ 1000.274236][T13675] usb 6-1: SerialNumber: syz [ 1000.321503][ T9414] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 1000.321526][ T7001] bond5: (slave bridge1): failed to get link speed/duplex [ 1000.372345][T13675] usb 6-1: config 0 descriptor?? [ 1000.462977][ T6301] bond5: (slave bridge1): failed to get link speed/duplex [ 1000.721003][T13675] usb 6-1: can't set config #0, error -71 [ 1000.741014][ T9414] em28xx 2-1:0.89: analog set to bulk mode. [ 1000.772635][T13675] usb 6-1: USB disconnect, device number 67 [ 1000.824290][ T13] bond5: (slave bridge1): failed to get link speed/duplex [ 1000.825785][ T24] em28xx 2-1:0.89: Registering V4L2 extension [ 1000.856895][ T9414] usb 2-1: USB disconnect, device number 96 [ 1000.904187][ T9414] em28xx 2-1:0.89: Disconnecting em28xx [ 1001.100421][T10036] bond5: (slave bridge1): failed to get link speed/duplex [ 1001.819588][ T24] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 1001.873453][ T24] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 1001.907351][ T24] em28xx 2-1:0.89: No AC97 audio processor [ 1001.912124][T16171] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2659'. [ 1001.972558][ T24] usb 2-1: Decoder not found [ 1001.979628][ T24] em28xx 2-1:0.89: failed to create media graph [ 1001.992262][ T24] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 1001.995627][T16172] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2659'. [ 1002.057046][ T24] em28xx 2-1:0.89: Registering snapshot button... [ 1002.059427][T16172] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2659'. [ 1002.072311][ T24] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input57 [ 1002.100750][ T12] bond5: (slave bridge1): failed to get link speed/duplex [ 1002.118389][ T24] em28xx 2-1:0.89: Remote control support is not available for this card. [ 1002.195831][ T9414] em28xx 2-1:0.89: Closing input extension [ 1002.224737][T10036] bond5: (slave bridge1): failed to get link speed/duplex [ 1002.234401][ T9414] em28xx 2-1:0.89: Deregistering snapshot button [ 1002.432855][ T12] bond5: (slave bridge1): failed to get link speed/duplex [ 1002.866009][ T9414] em28xx 2-1:0.89: Freeing device [ 1003.293707][T13677] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1003.751485][T13677] usb 7-1: Using ep0 maxpacket: 8 [ 1003.775721][T13677] usb 7-1: config 2 has an invalid interface number: 237 but max is 0 [ 1003.788257][T13677] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1003.857299][T13677] usb 7-1: config 2 has no interface number 0 [ 1003.870842][T13677] usb 7-1: too many endpoints for config 2 interface 237 altsetting 128: 144, using maximum allowed: 30 [ 1003.882327][T13677] usb 7-1: config 2 interface 237 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 1003.895906][T13677] usb 7-1: config 2 interface 237 has no altsetting 0 [ 1004.001274][ T24] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1004.181885][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 1004.207320][ T5615] block nbd1: Receive control failed (result -32) [ 1004.221312][ T5624] block nbd1: Receive control failed (result -32) [ 1004.227801][T14358] block nbd1: Receive control failed (result -32) [ 1004.234740][ T24] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 1004.272576][ T24] usb 1-1: config 0 has no interface number 0 [ 1004.308613][T13677] usb 7-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1004.308891][ T24] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1004.323335][T13677] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.349026][T13677] usb 7-1: Product: syz [ 1004.353699][T13677] usb 7-1: Manufacturer: syz [ 1004.358723][T13677] usb 7-1: SerialNumber: syz [ 1004.365164][ T24] usb 1-1: config 0 interface 89 has no altsetting 0 [ 1004.393667][T16196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2666'. [ 1004.402610][T16196] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2666'. [ 1004.404479][ T24] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1004.425770][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.437994][ T24] usb 1-1: Product: syz [ 1004.599963][T16199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2666'. [ 1004.607134][ T35] net_ratelimit: 8 callbacks suppressed [ 1004.607154][ T35] bond5: (slave bridge1): failed to get link speed/duplex [ 1004.623140][ T24] usb 1-1: Manufacturer: syz [ 1004.627866][ T24] usb 1-1: SerialNumber: syz [ 1004.628142][T16199] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2666'. [ 1004.643700][ T24] usb 1-1: config 0 descriptor?? [ 1004.663703][T13677] ch9200 7-1:2.237: probe with driver ch9200 failed with error -22 [ 1004.683912][ T24] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1004.775955][ T24] em28xx 1-1:0.89: Video interface 89 found: [ 1004.787093][T10038] bond5: (slave bridge1): failed to get link speed/duplex [ 1004.881871][T13677] usb 7-1: USB disconnect, device number 10 [ 1004.921984][ T35] bond5: (slave bridge1): failed to get link speed/duplex [ 1005.042987][T10038] bond5: (slave bridge1): failed to get link speed/duplex [ 1005.192354][ T46] bond5: (slave bridge1): failed to get link speed/duplex [ 1005.266960][ T24] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 1005.312567][ T46] bond5: (slave bridge1): failed to get link speed/duplex [ 1005.331878][T13675] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1005.433816][T10038] bond5: (slave bridge1): failed to get link speed/duplex [ 1005.471809][T13675] usb 6-1: device descriptor read/64, error -71 [ 1005.563538][ T35] bond5: (slave bridge1): failed to get link speed/duplex [ 1005.682632][ T35] bond5: (slave bridge1): failed to get link speed/duplex [ 1005.712373][T13675] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1005.892806][T10038] bond5: (slave bridge1): failed to get link speed/duplex [ 1005.992953][ T24] em28xx 1-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 1006.003096][T13675] usb 6-1: device descriptor read/64, error -71 [ 1006.009904][ T24] em28xx 1-1:0.89: board has no eeprom [ 1006.195922][ T29] audit: type=1400 audit(1783209638.190:1128): avc: denied { accept } for pid=16220 comm="syz.6.2675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1006.400546][T13675] usb usb6-port1: attempt power cycle [ 1006.411401][ T24] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 1006.441399][ T24] em28xx 1-1:0.89: analog set to bulk mode. [ 1006.465728][ T5731] em28xx 1-1:0.89: Registering V4L2 extension [ 1006.480958][ T24] usb 1-1: USB disconnect, device number 90 [ 1006.510224][ T24] em28xx 1-1:0.89: Disconnecting em28xx [ 1006.682865][ T5731] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 1006.707602][ T5731] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 1006.723232][ T5731] em28xx 1-1:0.89: No AC97 audio processor [ 1006.730639][T16229] bridge0: port 2(bridge_slave_1) entered blocking state [ 1006.737841][T16229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1006.759032][ T5731] usb 1-1: Decoder not found [ 1006.771233][T13675] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1006.783116][ T5731] em28xx 1-1:0.89: failed to create media graph [ 1006.820467][ T5731] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 1006.841458][T13675] usb 6-1: device descriptor read/8, error -71 [ 1006.872571][ T5731] em28xx 1-1:0.89: Registering snapshot button... [ 1006.896982][ T5731] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input58 [ 1006.999838][ T5731] em28xx 1-1:0.89: Remote control support is not available for this card. [ 1007.061539][ T24] em28xx 1-1:0.89: Closing input extension [ 1007.082439][ T24] em28xx 1-1:0.89: Deregistering snapshot button [ 1007.101945][T13675] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1007.152626][T13675] usb 6-1: device descriptor read/8, error -71 [ 1007.202338][ T29] audit: type=1400 audit(1783209639.190:1129): avc: denied { validate_trans } for pid=16232 comm="syz.6.2677" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1007.219824][T16237] netlink: 'syz.0.2678': attribute type 50 has an invalid length. [ 1007.250844][T16237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2678'. [ 1007.302398][T13675] usb usb6-port1: unable to enumerate USB device [ 1007.345688][ T24] em28xx 1-1:0.89: Freeing device [ 1007.533496][T16244] 9p: Bad value for 'rfdno' [ 1007.676119][T16244] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 1007.689266][ T5718] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1007.813624][ T24] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1007.902977][T16244] bridge1: left promiscuous mode [ 1008.022717][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 1008.137364][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1008.223420][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1008.451597][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1008.477213][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1008.500583][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1008.587383][ T24] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1008.623316][T16255] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 1008.655405][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.696727][ T24] usb 1-1: Product: syz [ 1008.701005][ T24] usb 1-1: Manufacturer: syz [ 1008.706907][ T24] usb 1-1: SerialNumber: syz [ 1008.735463][ T24] usb 1-1: config 0 descriptor?? [ 1008.776125][ T5718] usb 9-1: Using ep0 maxpacket: 32 [ 1008.802403][ T5718] usb 9-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1008.823436][ T5718] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1008.844086][ T5718] usb 9-1: config 0 descriptor?? [ 1008.856236][ T5718] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1008.955165][T16237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2678'. [ 1009.048546][T16264] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2685'. [ 1009.070021][T16261] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 1009.141882][ T12] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1009.156103][T16264] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2685'. [ 1009.169675][ T12] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1009.185889][T16237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2678'. [ 1009.185890][T16264] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2685'. [ 1009.235466][ T12] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1009.251531][ T12] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1009.363394][T16263] omfs: Invalid superblock (0) [ 1009.502912][T16275] geneve2: entered promiscuous mode [ 1009.792466][ T24] iforce 1-1:0.0: usb_submit_urb failed: -110 [ 1009.833598][ T24] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 1009.852224][ T29] audit: type=1400 audit(1783209641.850:1130): avc: denied { shutdown } for pid=16274 comm="syz.6.2687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1009.887655][ T24] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 1009.910720][ T24] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 1009.938724][T13675] usb 9-1: USB disconnect, device number 6 [ 1009.961950][ T24] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 1010.000206][ T24] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 1010.011253][ T12] net_ratelimit: 17 callbacks suppressed [ 1010.011285][ T12] bond5: (slave bridge1): failed to get link speed/duplex [ 1010.040897][ T24] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1010.072559][ T24] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1010.096811][ T24] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1010.115812][ T24] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1010.150169][ T24] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1010.169996][ T24] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1010.196811][ T24] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1010.210856][ T24] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1010.217491][ T24] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1010.224299][ T24] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1010.230832][ T24] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1010.237611][ T24] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1010.244668][ T24] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1010.244796][ T12] bond5: (slave bridge1): failed to get link speed/duplex [ 1010.250994][ T24] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1010.279655][ T24] input input59: Timeout waiting for response from device. [ 1010.341593][ T24] usb 1-1: USB disconnect, device number 91 [ 1010.456092][T16285] trusted_key: encrypted_key: insufficient parameters specified [ 1010.475177][ T35] bond5: (slave bridge1): failed to get link speed/duplex [ 1010.591618][ T5718] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1010.618520][T10036] bond5: (slave bridge1): failed to get link speed/duplex [ 1011.019422][ T12] bond5: (slave bridge1): failed to get link speed/duplex [ 1011.029634][ T5718] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1011.058446][ T5718] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1011.083018][ T5718] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1011.116173][ T5718] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.149279][ T5718] usb 6-1: config 0 descriptor?? [ 1011.155664][ T6301] bond5: (slave bridge1): failed to get link speed/duplex [ 1011.291371][T10036] bond5: (slave bridge1): failed to get link speed/duplex [ 1011.419486][T16298] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 1011.437327][ T46] bond5: (slave bridge1): failed to get link speed/duplex [ 1011.543848][T10036] bond5: (slave bridge1): failed to get link speed/duplex [ 1011.613744][ T5718] pyra 0003:1E7D:2CF6.001A: unbalanced delimiter at end of report description [ 1011.681341][ T7001] bond5: (slave bridge1): failed to get link speed/duplex [ 1011.714012][ T5718] pyra 0003:1E7D:2CF6.001A: parse failed [ 1011.734970][ T5718] pyra 0003:1E7D:2CF6.001A: probe with driver pyra failed with error -22 [ 1011.772708][ T29] audit: type=1400 audit(1783209643.770:1131): avc: denied { getopt } for pid=16295 comm="syz.1.2695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1011.793226][T16299] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2695'. [ 1011.818070][T16281] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2689'. [ 1011.825462][T16299] ip6gre2: entered promiscuous mode [ 1012.247565][T16299] ip6gre2: entered allmulticast mode [ 1012.249377][ T5731] usb 6-1: USB disconnect, device number 72 [ 1014.346473][T16345] hub 8-0:1.0: USB hub found [ 1014.353488][T16345] hub 8-0:1.0: 1 port detected [ 1014.667243][ T24] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1015.103025][ T13] net_ratelimit: 17 callbacks suppressed [ 1015.103060][ T13] bond5: (slave bridge1): failed to get link speed/duplex [ 1015.333157][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 1015.357397][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1015.380231][T16356] lo: entered allmulticast mode [ 1015.389013][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1015.398956][T16356] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1015.417572][ T24] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1015.435694][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1015.440709][ T6301] bond5: (slave bridge1): failed to get link speed/duplex [ 1015.444938][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.460309][ T24] usb 2-1: Product: syz [ 1015.464516][ T24] usb 2-1: Manufacturer: syz [ 1015.469104][ T24] usb 2-1: SerialNumber: syz [ 1015.489495][ T24] cdc_ncm 2-1:1.0: skipping garbage [ 1015.500943][ T24] cdc_ncm 2-1:1.0: skipping garbage [ 1015.506516][ T24] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 1015.513731][ T24] cdc_ncm 2-1:1.0: bind() failure [ 1015.672749][ T6301] bond5: (slave bridge1): failed to get link speed/duplex [ 1015.783175][ T13] bond5: (slave bridge1): failed to get link speed/duplex [ 1015.825182][ T29] audit: type=1400 audit(1783209647.820:1132): avc: denied { write } for pid=16357 comm="syz.6.2712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1015.902754][ T6301] bond5: (slave bridge1): failed to get link speed/duplex [ 1015.941196][ T29] audit: type=1800 audit(1783209647.930:1133): pid=16361 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.2713" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1015.988167][ T29] audit: type=1800 audit(1783209647.960:1134): pid=16361 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.2713" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1016.273766][ T35] bond5: (slave bridge1): failed to get link speed/duplex [ 1016.423049][ T46] bond5: (slave bridge1): failed to get link speed/duplex [ 1016.572574][ T13] bond5: (slave bridge1): failed to get link speed/duplex [ 1016.824736][ T6301] bond5: (slave bridge1): failed to get link speed/duplex [ 1017.023384][T16384] tipc: Enabled bearer , priority 0 [ 1017.041159][T16384] syzkaller0: entered promiscuous mode [ 1017.249480][T16384] syzkaller0: entered allmulticast mode [ 1017.352506][T13335] usb 2-1: USB disconnect, device number 97 [ 1017.461537][T16384] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2719'. [ 1017.653148][T16383] tipc: Resetting bearer [ 1017.865737][T16383] tipc: Disabling bearer [ 1017.915558][T16402] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2726'. [ 1019.719432][T16428] tipc: Enabled bearer , priority 0 [ 1019.729080][T16428] syzkaller0: entered promiscuous mode [ 1019.735357][T16428] syzkaller0: entered allmulticast mode [ 1019.771926][T16428] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2733'. [ 1019.815474][T16428] tipc: Resetting bearer [ 1019.861063][T16427] tipc: Resetting bearer [ 1019.956568][T16434] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=16434 comm=syz.8.2736 [ 1019.988841][T16427] tipc: Disabling bearer [ 1020.004262][ T29] audit: type=1400 audit(1783209652.000:1135): avc: denied { append } for pid=16433 comm="syz.8.2736" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1020.050478][T16439] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2739'. [ 1020.060410][T16439] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2739'. [ 1020.069372][T16439] netlink: 'syz.1.2739': attribute type 1 has an invalid length. [ 1020.120350][ T35] net_ratelimit: 10 callbacks suppressed [ 1020.120369][ T35] bond5: (slave bridge1): failed to get link speed/duplex [ 1020.535724][ T46] bond5: (slave bridge1): failed to get link speed/duplex [ 1020.651374][ T5718] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1020.664180][T10040] bond5: (slave bridge1): failed to get link speed/duplex [ 1020.791682][ T35] bond5: (slave bridge1): failed to get link speed/duplex [ 1020.849875][ T5718] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1020.903683][ T29] audit: type=1400 audit(1783209652.900:1136): avc: denied { listen } for pid=16454 comm="syz.5.2744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1020.908149][ T5718] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1020.998831][ T6301] bond5: (slave bridge1): failed to get link speed/duplex [ 1021.039512][ T5718] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1021.075045][ T5718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.085487][ T5718] usb 2-1: config 0 descriptor?? [ 1021.168853][ T12] bond5: (slave bridge1): failed to get link speed/duplex [ 1021.279481][T16465] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1021.287191][ T46] bond5: (slave bridge1): failed to get link speed/duplex [ 1021.321235][ T24] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1021.411890][ T46] bond5: (slave bridge1): failed to get link speed/duplex [ 1021.481485][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 1021.503734][ T24] usb 7-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1021.529557][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.538017][ T46] bond5: (slave bridge1): failed to get link speed/duplex [ 1021.579713][ T24] usb 7-1: config 0 descriptor?? [ 1021.598185][ T24] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1021.651235][ T46] bond5: (slave bridge1): failed to get link speed/duplex [ 1021.919474][T16472] block nbd0: shutting down sockets [ 1022.471329][T16462] syzkaller0: entered promiscuous mode [ 1022.489354][ T5718] usbhid 2-1:0.0: can't add hid device: -71 [ 1022.491440][T16462] syzkaller0: entered allmulticast mode [ 1022.495366][ T5718] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1022.545793][ T5718] usb 2-1: USB disconnect, device number 98 [ 1023.049610][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1023.077073][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.151371][ T5711] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1023.165842][ T24] gspca_nw80x: reg_w err -110 [ 1023.175830][ T24] nw80x 7-1:0.0: probe with driver nw80x failed with error -110 [ 1023.335728][ T24] usb 7-1: USB disconnect, device number 11 [ 1023.343119][ T5711] usb 1-1: Using ep0 maxpacket: 32 [ 1023.389229][ T5711] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 1023.436045][ T5711] usb 1-1: config 0 has no interface number 0 [ 1023.444491][ T5711] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1023.464600][ T5711] usb 1-1: config 0 interface 89 has no altsetting 0 [ 1023.474660][ T5711] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1023.477927][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1023.508760][ T5711] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.524566][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.544774][ T5711] usb 1-1: Product: syz [ 1023.560218][ T5711] usb 1-1: Manufacturer: syz [ 1023.569530][ T5711] usb 1-1: SerialNumber: syz [ 1023.586459][T16489] tipc: Enabled bearer , priority 0 [ 1023.595321][ T5711] usb 1-1: config 0 descriptor?? [ 1023.608730][T16489] syzkaller0: entered promiscuous mode [ 1023.617761][ T5711] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1023.628840][T16489] syzkaller0: entered allmulticast mode [ 1023.636547][ T5711] em28xx 1-1:0.89: Video interface 89 found: [ 1023.688863][ T35] bond0: (slave netdevsim1): Releasing backup interface [ 1023.703122][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1023.724716][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.747945][T16489] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2753'. [ 1023.767756][T16489] tipc: Resetting bearer [ 1023.779697][T16491] syzkaller0: entered promiscuous mode [ 1023.790018][T16491] syzkaller0: entered allmulticast mode [ 1023.807196][T16488] tipc: Resetting bearer [ 1023.848545][T16488] tipc: Disabling bearer [ 1023.958922][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1024.012170][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.255282][ T5711] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 1024.297576][T16505] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16505 comm=syz.6.2760 [ 1024.369055][T16506] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2760'. [ 1024.391283][T13675] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1024.405172][T16506] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2760'. [ 1024.504257][ T35] bridge_slave_1: left allmulticast mode [ 1024.512061][ T35] bridge_slave_1: left promiscuous mode [ 1024.517905][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1024.701264][T13675] usb 9-1: Using ep0 maxpacket: 32 [ 1024.708014][T13675] usb 9-1: config 0 has an invalid interface number: 89 but max is 0 [ 1024.717216][T13675] usb 9-1: config 0 has no interface number 0 [ 1024.730061][T13675] usb 9-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1024.741465][T13675] usb 9-1: config 0 interface 89 has no altsetting 0 [ 1024.765920][T13675] usb 9-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1024.798029][T13675] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.861237][T13675] usb 9-1: Product: syz [ 1024.877788][T13675] usb 9-1: Manufacturer: syz [ 1024.899659][T13675] usb 9-1: SerialNumber: syz [ 1025.003198][ T5711] em28xx 1-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=126) [ 1025.014993][T13675] usb 9-1: config 0 descriptor?? [ 1025.584624][ T5711] em28xx 1-1:0.89: board has no eeprom [ 1025.608676][T13675] em28xx 9-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1025.812887][T13675] em28xx 9-1:0.89: Video interface 89 found: [ 1025.909092][ T5711] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 1025.936023][ T5711] em28xx 1-1:0.89: analog set to bulk mode. [ 1025.949137][ T5731] em28xx 1-1:0.89: Registering V4L2 extension [ 1025.993929][ T5711] usb 1-1: USB disconnect, device number 92 [ 1026.012070][ T5711] em28xx 1-1:0.89: Disconnecting em28xx [ 1026.193274][ T5731] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 1026.201563][ T9] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1026.219265][ T5731] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 1026.246791][ T5731] em28xx 1-1:0.89: No AC97 audio processor [ 1026.288501][ T5731] usb 1-1: Decoder not found [ 1026.308406][ T5731] em28xx 1-1:0.89: failed to create media graph [ 1026.349892][T13675] em28xx 9-1:0.89: unknown em28xx chip ID (0) [ 1026.361534][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1026.369719][ T5731] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 1026.383035][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1026.386498][ T12] smc: removing ib device syz1 [ 1026.426842][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1026.427000][ T5731] em28xx 1-1:0.89: Registering snapshot button... [ 1026.462274][ T9] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1026.473093][ T5731] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input60 [ 1026.483932][ T9] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1026.483989][ T9] usb 6-1: Product: syz [ 1026.484019][ T9] usb 6-1: Manufacturer: syz [ 1026.484051][ T9] usb 6-1: SerialNumber: syz [ 1026.525511][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1026.545990][ T5731] em28xx 1-1:0.89: Remote control support is not available for this card. [ 1026.556104][ T5711] em28xx 1-1:0.89: Closing input extension [ 1026.563521][ T5711] em28xx 1-1:0.89: Deregistering snapshot button [ 1026.576475][ T35] bond0 (unregistering): Released all slaves [ 1026.595006][ T9] usb 6-1: config 0 descriptor?? [ 1026.616134][ T35] bond1 (unregistering): Released all slaves [ 1026.667684][T16525] tipc: Enabled bearer , priority 0 [ 1026.719103][ T46] net_ratelimit: 8 callbacks suppressed [ 1026.719121][ T46] bond5: (slave bridge1): failed to get link speed/duplex [ 1026.737062][T16526] syzkaller0: entered promiscuous mode [ 1026.748259][T16526] syzkaller0: entered allmulticast mode [ 1026.757871][ T5711] em28xx 1-1:0.89: Freeing device [ 1026.769953][T16524] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2765'. [ 1026.794248][T16523] tipc: Resetting bearer [ 1026.807665][T16522] tipc: Resetting bearer [ 1026.825381][ T9] hub 6-1:0.0: bad descriptor, ignoring hub [ 1026.905436][ T9] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1027.005000][ T12] smbdirect: ib_dev[syz1] removed [ 1027.070976][T16522] tipc: Disabling bearer [ 1027.102044][T13675] em28xx 9-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 1027.140840][T13675] em28xx 9-1:0.89: board has no eeprom [ 1027.209635][ T6301] bond5: (slave bridge1): failed to get link speed/duplex [ 1027.227507][T13675] em28xx 9-1:0.89: Identified as Terratec Grabby (card=67) [ 1027.247036][T13675] em28xx 9-1:0.89: analog set to bulk mode. [ 1027.263119][ T24] em28xx 9-1:0.89: Registering V4L2 extension [ 1027.296590][T13675] usb 9-1: USB disconnect, device number 7 [ 1027.320198][ T9] usb 6-1: USB disconnect, device number 73 [ 1027.329585][ T6301] bond5: (slave bridge1): failed to get link speed/duplex [ 1027.409477][T13675] em28xx 9-1:0.89: Disconnecting em28xx [ 1027.453073][T10040] bond5: (slave bridge1): failed to get link speed/duplex [ 1027.592245][T10040] bond5: (slave bridge1): failed to get link speed/duplex [ 1027.608279][ T24] em28xx 9-1:0.89: Config register raw data: 0xffffffed [ 1027.632379][ T24] em28xx 9-1:0.89: AC97 chip type couldn't be determined [ 1027.664056][ T24] em28xx 9-1:0.89: No AC97 audio processor [ 1027.739970][ T7001] bond5: (slave bridge1): failed to get link speed/duplex [ 1027.766152][ T24] usb 9-1: Decoder not found [ 1027.788687][ T24] em28xx 9-1:0.89: failed to create media graph [ 1027.848284][ T24] em28xx 9-1:0.89: V4L2 device video103 deregistered [ 1027.866641][ T6301] bond5: (slave bridge1): failed to get link speed/duplex [ 1027.923717][ T29] audit: type=1400 audit(1783209659.920:1137): avc: denied { write } for pid=16532 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1027.988641][T13677] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1028.023907][ T6301] bond5: (slave bridge1): failed to get link speed/duplex [ 1028.025235][ T24] em28xx 9-1:0.89: Registering snapshot button... [ 1028.213448][ T24] input: em28xx snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.89/input/input61 [ 1028.227703][T10040] bond5: (slave bridge1): failed to get link speed/duplex [ 1028.242022][T13677] usb 1-1: device descriptor read/64, error -71 [ 1028.293832][ T24] em28xx 9-1:0.89: Remote control support is not available for this card. [ 1028.361872][T13675] em28xx 9-1:0.89: Closing input extension [ 1028.368063][T13675] em28xx 9-1:0.89: Deregistering snapshot button [ 1028.383569][ T6301] bond5: (slave bridge1): failed to get link speed/duplex [ 1028.394020][T16557] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16557 comm=syz.1.2770 [ 1028.413405][ T29] audit: type=1400 audit(1783209660.410:1138): avc: denied { write } for pid=16553 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1028.445953][T16557] netlink: 'syz.1.2770': attribute type 1 has an invalid length. [ 1028.697621][T16557] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1028.706293][ T5271] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1028.746824][T13677] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1029.016153][T16570] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2773'. [ 1029.025979][T16570] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2773'. [ 1029.142837][T16572] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2773'. [ 1029.152437][T16572] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2773'. [ 1029.575397][T13675] em28xx 9-1:0.89: Freeing device [ 1029.590926][T16572] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2773'. [ 1029.599933][T16572] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2773'. [ 1029.657008][T16575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2774'. [ 1029.676936][T16575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2774'. [ 1029.698426][ T6301] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1029.702367][T13677] usb 1-1: device descriptor read/64, error -71 [ 1029.750232][ T6301] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1029.787666][ T6301] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1029.828734][ T6301] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1029.902297][T13677] usb usb1-port1: attempt power cycle [ 1030.274022][T13677] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1030.417253][T13677] usb 1-1: device descriptor read/8, error -71 [ 1030.478640][T16586] overlayfs: missing 'workdir' [ 1030.681408][T13677] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1030.721836][T13677] usb 1-1: device descriptor read/8, error -71 [ 1030.744080][T16596] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2778'. [ 1030.861963][T13677] usb usb1-port1: unable to enumerate USB device [ 1031.087450][T16596] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1031.447424][ T29] audit: type=1400 audit(1783209663.440:1139): avc: denied { write } for pid=16568 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1031.484791][ T5731] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1031.725702][ T5731] usb 1-1: Using ep0 maxpacket: 32 [ 1031.755766][ T5731] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 1031.791295][T13677] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1031.793939][ T5731] usb 1-1: config 0 has no interface number 0 [ 1031.862101][ T5731] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1031.948809][ T5731] usb 1-1: config 0 interface 89 has no altsetting 0 [ 1032.107185][T13677] usb 2-1: Using ep0 maxpacket: 16 [ 1032.110468][ T5731] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1032.188062][ T5731] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.220434][T16625] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2781'. [ 1032.257580][ T5731] usb 1-1: Product: syz [ 1032.285008][ T5731] usb 1-1: Manufacturer: syz [ 1032.330449][ T5731] usb 1-1: SerialNumber: syz [ 1032.338752][ T29] audit: type=1400 audit(1783209664.320:1140): avc: denied { write } for pid=16623 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1032.399075][ T5731] usb 1-1: config 0 descriptor?? [ 1032.452507][T10034] net_ratelimit: 8 callbacks suppressed [ 1032.452563][T10034] bond5: (slave bridge1): failed to get link speed/duplex [ 1032.589301][ T5731] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1032.661382][ T13] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1032.693059][ T5731] em28xx 1-1:0.89: Video interface 89 found: [ 1032.811593][ T13] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1032.988417][ T13] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1033.023320][ T5271] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1033.040645][T16634] tipc: Enabled bearer , priority 0 [ 1033.101259][ T13] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1033.134160][T16634] tipc: Disabling bearer [ 1033.270657][ T13] bond5: (slave bridge1): failed to get link speed/duplex [ 1033.310453][ T5731] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 1033.452106][ T13] bond5: (slave bridge1): failed to get link speed/duplex [ 1033.602366][ T13] bond5: (slave bridge1): failed to get link speed/duplex [ 1033.721270][T10036] bond5: (slave bridge1): failed to get link speed/duplex [ 1033.733275][ T24] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1033.812193][T16641] netlink: 'syz.5.2784': attribute type 10 has an invalid length. [ 1033.896139][ T13] bond5: (slave bridge1): failed to get link speed/duplex [ 1033.983268][T16641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1034.002238][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 1034.010934][ T5731] em28xx 1-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 1034.048966][ T24] usb 9-1: config 0 has an invalid interface number: 20 but max is 0 [ 1034.068160][ T5731] em28xx 1-1:0.89: board has no eeprom [ 1034.077903][ T24] usb 9-1: config 0 has no interface number 0 [ 1034.114736][ T24] usb 9-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1034.152825][ T5731] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 1034.164399][T16641] batadv0: entered promiscuous mode [ 1034.183181][ T24] usb 9-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1034.199642][ T5731] em28xx 1-1:0.89: analog set to bulk mode. [ 1034.205516][T16641] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1034.216619][ T5711] em28xx 1-1:0.89: Registering V4L2 extension [ 1034.237789][ T24] usb 9-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1034.249288][T16643] bond0 (unregistering): left promiscuous mode [ 1034.283084][T16643] bond_slave_0: left promiscuous mode [ 1034.289902][T16643] bond_slave_1: left promiscuous mode [ 1034.309244][T16643] bridge0: left promiscuous mode [ 1034.323431][ T5731] usb 1-1: USB disconnect, device number 97 [ 1034.337140][ T24] usb 9-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 1034.357932][T16643] batadv0: left promiscuous mode [ 1034.363463][ T5711] em28xx 1-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 1034.386792][ T5731] em28xx 1-1:0.89: Disconnecting em28xx [ 1034.405460][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.415558][T16643] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1034.488852][ T24] usb 9-1: Product: syz [ 1034.505711][T16643] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1034.527591][ T5711] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 1034.557001][ T24] usb 9-1: Manufacturer: syz [ 1034.650549][ T24] usb 9-1: SerialNumber: syz [ 1034.657267][ T5711] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 1034.736655][ T5711] em28xx 1-1:0.89: No AC97 audio processor [ 1034.755355][T16643] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1034.756537][ T24] usb 9-1: config 0 descriptor?? [ 1034.847542][T16638] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1034.908725][T16643] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1034.919019][ T5711] usb 1-1: Decoder not found [ 1034.971047][T16643] bond0 (unregistering): Released all slaves [ 1035.024804][ T5711] em28xx 1-1:0.89: failed to create media graph [ 1035.058617][ T35] tipc: Disabling bearer [ 1035.071081][ T29] audit: type=1400 audit(1783209667.070:1141): avc: denied { write } for pid=16640 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1035.103260][ T5711] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 1035.148949][ T35] tipc: Left network mode [ 1035.186201][ T5711] em28xx 1-1:0.89: Registering snapshot button... [ 1035.254864][ T46] bond5: (slave bridge1): failed to get link speed/duplex [ 1035.287266][ T5711] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input62 [ 1035.332423][ T24] usb-storage 9-1:0.20: USB Mass Storage device detected [ 1035.375623][ T5711] em28xx 1-1:0.89: Remote control support is not available for this card. [ 1035.452445][ T46] bond5: (slave bridge1): failed to get link speed/duplex [ 1035.494300][ T5731] em28xx 1-1:0.89: Closing input extension [ 1035.550727][ T5731] em28xx 1-1:0.89: Deregistering snapshot button [ 1035.620084][ T24] usb-storage 9-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 1035.659949][T10036] bond5: (slave bridge1): failed to get link speed/duplex [ 1035.672738][ T29] audit: type=1400 audit(1783209667.670:1142): avc: denied { write } for pid=16660 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1035.700955][ T24] scsi host1: usb-storage 9-1:0.20 [ 1035.834857][ T24] usb 9-1: USB disconnect, device number 8 [ 1035.854545][ T5731] em28xx 1-1:0.89: Freeing device [ 1035.901809][ T5711] usb 6-1: new full-speed USB device number 74 using dummy_hcd [ 1036.315044][ T5711] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1036.351558][ T7001] bond5: (slave bridge1): failed to get link speed/duplex [ 1036.389194][ T5711] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1036.448746][ T5711] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1036.549415][ T5711] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1036.578115][ T5271] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1036.596985][ T5711] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1036.692997][ T5711] usb 6-1: Product: syz [ 1036.735083][ T5711] usb 6-1: Manufacturer: syz [ 1036.753727][ T5711] usb 6-1: SerialNumber: syz [ 1036.782994][ T5711] usb 6-1: config 0 descriptor?? [ 1036.837940][T13677] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1036.877615][ T5711] usb 6-1: selecting invalid altsetting 0 [ 1036.908933][T13677] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1036.973255][T13677] usb 2-1: can't read configurations, error -71 [ 1037.119307][T16688] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1037.304439][T16692] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1037.682018][T10040] net_ratelimit: 5 callbacks suppressed [ 1037.682038][T10040] bond5: (slave bridge1): failed to get link speed/duplex [ 1038.263398][T16691] snd-usb-audio 6-1:0.0: Runtime PM usage count underflow! [ 1038.346501][ T5711] usb 6-1: USB disconnect, device number 74 [ 1038.391819][T10036] bond5: (slave bridge1): failed to get link speed/duplex [ 1038.561262][ T29] audit: type=1400 audit(1783209670.560:1143): avc: denied { setopt } for pid=16697 comm="syz.6.2792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1038.731267][ T46] bond5: (slave bridge1): failed to get link speed/duplex [ 1039.042425][ T46] bond5: (slave bridge1): failed to get link speed/duplex [ 1039.283729][ T29] audit: type=1400 audit(1783209671.230:1144): avc: denied { write } for pid=16686 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1039.333476][ T7001] bond5: (slave bridge1): failed to get link speed/duplex [ 1039.462744][T10038] bond5: (slave bridge1): failed to get link speed/duplex [ 1039.694402][ T7001] bond5: (slave bridge1): failed to get link speed/duplex [ 1039.799055][ T29] audit: type=1400 audit(1783209671.760:1145): avc: denied { write } for pid=16721 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1039.861870][ T46] bond5: (slave bridge1): failed to get link speed/duplex [ 1040.208548][T10038] bond5: (slave bridge1): failed to get link speed/duplex [ 1040.361747][ T5271] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1040.392374][ T7001] bond5: (slave bridge1): failed to get link speed/duplex [ 1041.166378][T16733] netlink: 'syz.8.2801': attribute type 1 has an invalid length. [ 1041.387819][T16733] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1041.524571][T16735] vlan2: entered allmulticast mode [ 1041.535039][T16735] bond1: entered allmulticast mode [ 1041.788994][T16736] bond1: (slave geneve2): making interface the new active one [ 1041.999757][T16736] geneve2: entered allmulticast mode [ 1042.104326][T16736] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1042.604268][ T5731] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1043.089110][ T5731] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1043.124998][T16761] netlink: 'syz.8.2808': attribute type 2 has an invalid length. [ 1043.133644][ T5731] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1043.147255][ T5731] usb 6-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.08 [ 1043.312879][ T35] hsr_slave_0: left promiscuous mode [ 1043.318918][ T5731] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.516638][ T35] hsr_slave_1: left promiscuous mode [ 1043.570850][ T35] veth0_macvtap: left promiscuous mode [ 1043.577523][ T35] veth1_vlan: left promiscuous mode [ 1043.579268][ T5731] usb 6-1: config 0 descriptor?? [ 1043.605958][ T35] veth0_vlan: left promiscuous mode [ 1043.625232][ T5731] usbhid 6-1:0.0: fixing wrong optional hid class descriptors count [ 1043.640571][ T5731] usbhid 6-1:0.0: can't add hid device: -22 [ 1043.647318][ T5731] usbhid 6-1:0.0: probe with driver usbhid failed with error -22 [ 1043.841346][ T24] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 1043.854288][T16755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1043.880921][T16755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1044.012553][ T24] usb 9-1: not running at top speed; connect to a high speed hub [ 1044.029496][ T24] usb 9-1: config 1 interface 0 altsetting 49 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1044.048682][ T24] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1044.063608][ T24] usb 9-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 1044.072909][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.081036][ T24] usb 9-1: Product: syz [ 1044.089309][ T24] usb 9-1: Manufacturer: syz [ 1044.096302][ T24] usb 9-1: SerialNumber: syz [ 1044.354989][ T24] usbhid 9-1:1.0: can't add hid device: -71 [ 1044.363449][ T24] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 1044.396169][ T24] usb 9-1: USB disconnect, device number 9 [ 1044.515245][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1044.528992][ T35] team0 (unregistering): Port device team_slave_0 removed [ 1044.924957][ T46] net_ratelimit: 7 callbacks suppressed [ 1044.924974][ T46] bond5: (slave bridge1): failed to get link speed/duplex [ 1044.966941][ T24] usb 6-1: USB disconnect, device number 75 [ 1045.143949][T10036] bond5: (slave bridge1): failed to get link speed/duplex [ 1045.324854][T10036] bond5: (slave bridge1): failed to get link speed/duplex [ 1045.381808][ T29] audit: type=1326 audit(1783209677.300:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16777 comm="syz.8.2811" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfa6f9de59 code=0x7ffc0000 [ 1045.522314][T10034] bond5: (slave bridge1): failed to get link speed/duplex [ 1045.681555][ T29] audit: type=1326 audit(1783209677.330:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16777 comm="syz.8.2811" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfa6f9de59 code=0x7ffc0000 [ 1045.860917][T10034] bond5: (slave bridge1): failed to get link speed/duplex [ 1045.903633][ T29] audit: type=1326 audit(1783209677.330:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16777 comm="syz.8.2811" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfa6f9de59 code=0x7ffc0000 [ 1046.005248][ T29] audit: type=1326 audit(1783209677.310:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16777 comm="syz.8.2811" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfa6f9de59 code=0x7ffc0000 [ 1046.047393][ T29] audit: type=1326 audit(1783209677.330:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16777 comm="syz.8.2811" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7fbfa6f9de59 code=0x7ffc0000 [ 1046.090180][ T29] audit: type=1326 audit(1783209677.330:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16777 comm="syz.8.2811" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfa6f9de59 code=0x7ffc0000 [ 1046.192065][ T29] audit: type=1326 audit(1783209677.330:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16777 comm="syz.8.2811" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfa6f9de59 code=0x7ffc0000 [ 1046.218673][ T29] audit: type=1326 audit(1783209677.330:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16777 comm="syz.8.2811" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfa6f9de59 code=0x7ffc0000 [ 1046.275178][T16797] tipc: Started in network mode [ 1046.280081][T16797] tipc: Node identity 3242f8f07a52, cluster identity 4711 [ 1046.287665][T16797] tipc: Enabled bearer , priority 0 [ 1046.294518][ T29] audit: type=1326 audit(1783209677.330:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16777 comm="syz.8.2811" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfa6f9de59 code=0x7ffc0000 [ 1046.322762][T16797] syzkaller0: entered promiscuous mode [ 1046.328344][T16797] syzkaller0: entered allmulticast mode [ 1046.330716][ T29] audit: type=1326 audit(1783209677.330:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16777 comm="syz.8.2811" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fbfa6f9de59 code=0x7ffc0000 [ 1046.382825][T16797] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2815'. [ 1046.392581][T13335] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1046.425615][T16797] tipc: Resetting bearer [ 1046.448844][T16796] tipc: Resetting bearer [ 1046.567221][T16808] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1047.279211][T16796] tipc: Disabling bearer [ 1047.452019][T13335] usb 1-1: Using ep0 maxpacket: 16 [ 1047.535900][T13335] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1047.578943][T13335] usb 1-1: config 6 has an invalid interface number: 149 but max is 0 [ 1047.629068][T13335] usb 1-1: config 6 has no interface number 0 [ 1047.656406][ T5718] tipc: Node number set to 1209071856 [ 1047.675179][T13335] usb 1-1: config 6 interface 149 altsetting 0 endpoint 0x6 has an invalid bInterval 240, changing to 11 [ 1047.746621][T10036] bond5: (slave bridge1): failed to get link speed/duplex [ 1047.807448][T16819] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2819'. [ 1047.816457][T16819] netlink: 'syz.6.2819': attribute type 1 has an invalid length. [ 1047.825240][T16819] lo: left allmulticast mode [ 1047.850090][T16819] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1047.872957][ T13] bond5: (slave bridge1): failed to get link speed/duplex [ 1047.991263][ T5740] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1047.999056][ T13] bond5: (slave bridge1): failed to get link speed/duplex [ 1048.143689][ T3261] bond5: (slave bridge1): failed to get link speed/duplex [ 1048.186102][ T5740] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1048.197192][ T5740] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1048.213105][ T5740] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1048.232532][ T5740] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1048.259754][ T5740] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1048.273931][ T5740] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1048.289087][ T5740] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1048.305854][ T5740] usb 2-1: Product: syz [ 1048.316032][ T5740] usb 2-1: Manufacturer: syz [ 1048.364819][ T5740] cdc_wdm 2-1:1.0: skipping garbage [ 1048.382938][ T5740] cdc_wdm 2-1:1.0: skipping garbage [ 1048.419212][ T5740] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1048.450300][T13335] usb 1-1: string descriptor 0 read error: -71 [ 1048.459056][ T5740] cdc_wdm 2-1:1.0: Unknown control protocol [ 1048.460687][T13335] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=28.0e [ 1048.530680][T13335] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.663915][T13335] usb 1-1: can't set config #6, error -71 [ 1048.710216][T13335] usb 1-1: USB disconnect, device number 98 [ 1049.824734][T16854] netlink: 184 bytes leftover after parsing attributes in process `syz.6.2824'. [ 1050.073194][ T3261] net_ratelimit: 9 callbacks suppressed [ 1050.073239][ T3261] bond5: (slave bridge1): failed to get link speed/duplex [ 1050.346316][ T13] bond5: (slave bridge1): failed to get link speed/duplex [ 1050.571034][ T3261] bond5: (slave bridge1): failed to get link speed/duplex [ 1050.709664][ T29] kauditd_printk_skb: 207 callbacks suppressed [ 1050.709682][ T29] audit: type=1400 audit(1783209682.700:1363): avc: denied { write } for pid=16833 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1050.765297][ T12] bond5: (slave bridge1): failed to get link speed/duplex [ 1050.912537][ T5711] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1050.921954][ T3261] bond5: (slave bridge1): failed to get link speed/duplex [ 1051.011546][ T5731] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1051.051268][ T3261] bond5: (slave bridge1): failed to get link speed/duplex [ 1051.070839][ T29] audit: type=1400 audit(1783209683.060:1364): avc: denied { write } for pid=16869 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1051.111604][ T5711] usb 9-1: Using ep0 maxpacket: 32 [ 1051.144868][ T5711] usb 9-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1051.171314][ T3261] bond5: (slave bridge1): failed to get link speed/duplex [ 1051.198964][ T5711] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.208128][ T5731] usb 6-1: Using ep0 maxpacket: 32 [ 1051.227981][ T5731] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 1051.254313][ T5711] usb 9-1: Product: syz [ 1051.266978][ T5731] usb 6-1: config 0 has no interface number 0 [ 1051.280176][ T5711] usb 9-1: Manufacturer: syz [ 1051.307217][ T5731] usb 6-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1051.322615][ T12] bond5: (slave bridge1): failed to get link speed/duplex [ 1051.336669][ T5711] usb 9-1: SerialNumber: syz [ 1051.415540][ T5731] usb 6-1: config 0 interface 89 has no altsetting 0 [ 1051.526125][ T5711] usb 9-1: config 0 descriptor?? [ 1051.538696][ T3261] bond5: (slave bridge1): failed to get link speed/duplex [ 1051.618904][ T5731] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1051.795125][ T35] bond5: (slave bridge1): failed to get link speed/duplex [ 1051.802945][ T5731] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.802974][ T5731] usb 6-1: Product: syz [ 1051.802992][ T5731] usb 6-1: Manufacturer: syz [ 1051.803029][ T5731] usb 6-1: SerialNumber: syz [ 1051.859858][ T5731] usb 6-1: config 0 descriptor?? [ 1051.866230][ T5711] RobotFuzz Open Source InterFace, OSIF 9-1:0.0: version d4.15 found at bus 009 address 010 [ 1051.904580][ T5731] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1051.928481][ T5731] em28xx 6-1:0.89: Video interface 89 found: [ 1052.044263][ T5711] usb 2-1: USB disconnect, device number 101 [ 1052.206190][ T29] audit: type=1400 audit(1783209684.200:1365): avc: denied { write } for pid=16882 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1052.614866][ T5731] em28xx 6-1:0.89: unknown em28xx chip ID (0) [ 1052.759956][T16894] kernel read not supported for file /file1 (pid: 16894 comm: syz.6.2830) [ 1052.769088][ T29] audit: type=1800 audit(1783209684.770:1366): pid=16894 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.2830" name="file1" dev="mqueue" ino=66427 res=0 errno=0 [ 1052.823606][ T29] audit: type=1400 audit(1783209684.810:1367): avc: denied { write } for pid=16902 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1053.052407][T13335] usb 9-1: USB disconnect, device number 10 [ 1053.435420][ T5731] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1053.489292][ T5731] em28xx 6-1:0.89: board has no eeprom [ 1053.585784][ T5731] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67) [ 1053.615627][ T5731] em28xx 6-1:0.89: analog set to bulk mode. [ 1053.650959][ T5711] em28xx 6-1:0.89: Registering V4L2 extension [ 1053.682727][ T5731] usb 6-1: USB disconnect, device number 76 [ 1053.733032][ T5731] em28xx 6-1:0.89: Disconnecting em28xx [ 1053.863417][T16912] Bluetooth: MGMT ver 1.23 [ 1053.915123][ T5711] em28xx 6-1:0.89: Config register raw data: 0xffffffed [ 1053.950820][ T5711] em28xx 6-1:0.89: AC97 chip type couldn't be determined [ 1054.000044][ T5711] em28xx 6-1:0.89: No AC97 audio processor [ 1054.038562][ T5711] usb 6-1: Decoder not found [ 1054.073929][ T5711] em28xx 6-1:0.89: failed to create media graph [ 1054.113265][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.121432][ T5711] em28xx 6-1:0.89: V4L2 device video103 deregistered [ 1054.185439][ T5711] em28xx 6-1:0.89: Registering snapshot button... [ 1054.284626][ T5711] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input63 [ 1054.304965][ T29] audit: type=1400 audit(1783209686.280:1368): avc: denied { write } for pid=16921 comm="syz.6.2834" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1054.305009][ T29] audit: type=1400 audit(1783209686.300:1369): avc: denied { ioctl } for pid=16921 comm="syz.6.2834" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1054.342733][ T5711] em28xx 6-1:0.89: Remote control support is not available for this card. [ 1054.342775][ T5731] em28xx 6-1:0.89: Closing input extension [ 1054.342801][ T5731] em28xx 6-1:0.89: Deregistering snapshot button [ 1054.644889][ T5731] em28xx 6-1:0.89: Freeing device [ 1055.115733][ T29] audit: type=1400 audit(1783209687.100:1370): avc: denied { write } for pid=16908 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1055.123893][T10040] net_ratelimit: 20 callbacks suppressed [ 1055.123904][T10040] bond5: (slave bridge1): failed to get link speed/duplex [ 1055.318513][T10038] bond5: (slave bridge1): failed to get link speed/duplex [ 1055.428237][ T12] bond5: (slave bridge1): failed to get link speed/duplex [ 1055.531471][ T12] bond5: (slave bridge1): failed to get link speed/duplex [ 1055.643073][T10040] bond5: (slave bridge1): failed to get link speed/duplex [ 1055.686396][ T29] audit: type=1400 audit(1783209687.680:1371): avc: denied { write } for pid=16943 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1055.726155][T16951] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=251 sclass=netlink_route_socket pid=16951 comm=syz.1.2838 [ 1055.753668][T10038] bond5: (slave bridge1): failed to get link speed/duplex [ 1055.894639][T10040] bond5: (slave bridge1): failed to get link speed/duplex [ 1056.052231][ T12] bond5: (slave bridge1): failed to get link speed/duplex [ 1056.611908][T10040] bond5: (slave bridge1): failed to get link speed/duplex [ 1056.849820][T10040] bond5: (slave bridge1): failed to get link speed/duplex [ 1056.951325][ T5731] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1057.069016][T16972] vivid-000: kernel_thread() failed [ 1057.448350][T16978] xt_hashlimit: size too large, truncated to 1048576 [ 1057.465392][ T5731] usb 6-1: Using ep0 maxpacket: 32 [ 1057.500173][ T5731] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 1057.533229][ T5731] usb 6-1: config 0 has no interface number 0 [ 1057.539506][T16981] FAULT_INJECTION: forcing a failure. [ 1057.539506][T16981] name failslab, interval 1, probability 0, space 0, times 0 [ 1057.572057][ T5731] usb 6-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1057.631050][ T5731] usb 6-1: config 0 interface 89 has no altsetting 0 [ 1057.685016][ T5731] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1057.715350][ T5731] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.719501][T16981] CPU: 0 UID: 0 PID: 16981 Comm: syz.0.2845 Tainted: G L syzkaller #0 PREEMPT(full) [ 1057.719535][T16981] Tainted: [L]=SOFTLOCKUP [ 1057.719543][T16981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1057.719556][T16981] Call Trace: [ 1057.719563][T16981] [ 1057.719571][T16981] dump_stack_lvl+0x100/0x190 [ 1057.719601][T16981] should_fail_ex.cold+0x5/0xa [ 1057.719629][T16981] should_failslab+0xc2/0x120 [ 1057.719652][T16981] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1057.719671][T16981] ? net_generic+0xea/0x2a0 [ 1057.719701][T16981] ? __nf_conntrack_alloc+0xb7/0x5e0 [ 1057.719726][T16981] __nf_conntrack_alloc+0xb7/0x5e0 [ 1057.719750][T16981] init_conntrack.isra.0+0xf51/0x1380 [ 1057.719775][T16981] ? __pfx_init_conntrack.isra.0+0x10/0x10 [ 1057.719805][T16981] ? ip6t_do_table+0xc1d/0x1c90 [ 1057.719838][T16981] nf_conntrack_in+0xe70/0x1690 [ 1057.719867][T16981] ? irqentry_exit+0x212/0xa00 [ 1057.719895][T16981] ? __pfx_nf_conntrack_in+0x10/0x10 [ 1057.719924][T16981] ? nf_hook_slow+0x125/0x220 [ 1057.719955][T16981] nf_hook_slow+0xbf/0x220 [ 1057.719983][T16981] __ip6_local_out+0x4c0/0xaf0 [ 1057.720005][T16981] ? __pfx___ip6_local_out+0x10/0x10 [ 1057.720030][T16981] ? __pfx_dst_output+0x10/0x10 [ 1057.720058][T16981] ip6_local_out+0x2a/0x1f0 [ 1057.720081][T16981] ip6_send_skb+0x112/0x430 [ 1057.720104][T16981] ip6_push_pending_frames+0x3b/0x50 [ 1057.720125][T16981] icmpv6_push_pending_frames+0x2c1/0x450 [ 1057.720159][T16981] ping_v6_sendmsg+0x116c/0x1600 [ 1057.720195][T16981] ? __pfx_ping_v6_sendmsg+0x10/0x10 [ 1057.720239][T16981] ? reacquire_held_locks+0xce/0x1e0 [ 1057.720262][T16981] ? release_sock+0x21/0x280 [ 1057.720286][T16981] ? inet_autobind+0x145/0x1a0 [ 1057.720320][T16981] ? lockdep_hardirqs_on+0x78/0x100 [ 1057.720345][T16981] ? inet_autobind+0x145/0x1a0 [ 1057.720374][T16981] ? __local_bh_enable_ip+0x9e/0x120 [ 1057.720400][T16981] ? inet_autobind+0x14a/0x1a0 [ 1057.720425][T16981] ? __pfx_ping_v6_sendmsg+0x10/0x10 [ 1057.720457][T16981] inet_sendmsg+0x11c/0x140 [ 1057.720479][T16981] __sys_sendto+0x453/0x4e0 [ 1057.720505][T16981] ? __pfx_inet_sendmsg+0x10/0x10 [ 1057.720526][T16981] ? __pfx___sys_sendto+0x10/0x10 [ 1057.720563][T16981] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1057.720603][T16981] ? ksys_write+0x1ac/0x250 [ 1057.720629][T16981] ? __pfx_ksys_write+0x10/0x10 [ 1057.720660][T16981] __x64_sys_sendto+0xe0/0x1c0 [ 1057.720688][T16981] ? do_syscall_64+0x90/0x870 [ 1057.720714][T16981] ? lockdep_hardirqs_on+0x78/0x100 [ 1057.720741][T16981] do_syscall_64+0x115/0x870 [ 1057.720766][T16981] ? clear_bhb_loop+0x40/0x90 [ 1057.720792][T16981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1057.720812][T16981] RIP: 0033:0x7f76fad9de59 [ 1057.720830][T16981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1057.720850][T16981] RSP: 002b:00007f76fbd0a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1057.720870][T16981] RAX: ffffffffffffffda RBX: 00007f76fb026090 RCX: 00007f76fad9de59 [ 1057.720884][T16981] RDX: 0000000000000008 RSI: 0000200000000000 RDI: 0000000000000005 [ 1057.720897][T16981] RBP: 00007f76fbd0a090 R08: 0000200000001100 R09: 000000000000001c [ 1057.720910][T16981] R10: 0000000000048840 R11: 0000000000000246 R12: 0000000000000001 [ 1057.720922][T16981] R13: 00007f76fb026128 R14: 00007f76fb026090 R15: 00007ffcb6f437a8 [ 1057.720952][T16981] [ 1058.187150][ T29] audit: type=1400 audit(1783209690.170:1372): avc: denied { write } for pid=16962 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1058.249648][ T5731] usb 6-1: Product: syz [ 1058.254230][ T5731] usb 6-1: Manufacturer: syz [ 1058.258905][ T5731] usb 6-1: SerialNumber: syz [ 1058.278789][ T5731] usb 6-1: config 0 descriptor?? [ 1058.444727][ T5731] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1058.478076][T16992] xt_hashlimit: size too large, truncated to 1048576 [ 1058.486903][ T5731] em28xx 6-1:0.89: Video interface 89 found: [ 1058.523090][ T29] audit: type=1400 audit(1783209690.520:1373): avc: denied { read } for pid=16989 comm="syz.0.2846" name="/" dev="configfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1058.596226][ T29] audit: type=1400 audit(1783209690.520:1374): avc: denied { read open } for pid=16989 comm="syz.0.2846" path="/" dev="configfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1058.717791][ T29] audit: type=1400 audit(1783209690.670:1375): avc: denied { write } for pid=16993 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1059.002653][ T5731] em28xx 6-1:0.89: unknown em28xx chip ID (0) [ 1059.418431][ T5718] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1059.426127][ T5731] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1059.482407][T13335] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1059.675762][ T5731] em28xx 6-1:0.89: board has no eeprom [ 1059.751203][ T5731] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67) [ 1059.758964][ T5731] em28xx 6-1:0.89: analog set to bulk mode. [ 1059.767017][ T24] em28xx 6-1:0.89: Registering V4L2 extension [ 1059.771994][ T5718] usb 1-1: Using ep0 maxpacket: 32 [ 1059.794811][ T5731] usb 6-1: USB disconnect, device number 77 [ 1059.798096][ T5718] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1059.817908][T17008] xt_hashlimit: size too large, truncated to 1048576 [ 1059.821271][ T5718] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1059.840511][T13335] usb 2-1: Using ep0 maxpacket: 32 [ 1059.848467][ T5731] em28xx 6-1:0.89: Disconnecting em28xx [ 1059.877680][ T24] em28xx 6-1:0.89: Config register raw data: 0xffffffed [ 1059.887488][ T5718] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1059.904028][ T24] em28xx 6-1:0.89: AC97 chip type couldn't be determined [ 1059.919658][ T24] em28xx 6-1:0.89: No AC97 audio processor [ 1059.946903][ T24] usb 6-1: Decoder not found [ 1059.961378][ T24] em28xx 6-1:0.89: failed to create media graph [ 1059.971939][ T24] em28xx 6-1:0.89: V4L2 device video103 deregistered [ 1059.996493][ T24] em28xx 6-1:0.89: Registering snapshot button... [ 1060.015178][ T24] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input65 [ 1060.032786][ T24] em28xx 6-1:0.89: Remote control support is not available for this card. [ 1060.049344][ T5731] em28xx 6-1:0.89: Closing input extension [ 1060.055692][ T5731] em28xx 6-1:0.89: Deregistering snapshot button [ 1060.056326][ T5718] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1060.075291][T13335] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 1060.086007][T13335] usb 2-1: config 0 has no interface number 0 [ 1060.100003][T13335] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1060.110950][T13677] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1060.119042][ T5718] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.129590][ T5718] usb 1-1: Product: syz [ 1060.136605][T13335] usb 2-1: config 0 interface 89 has no altsetting 0 [ 1060.143652][ T5718] usb 1-1: Manufacturer: syz [ 1060.148359][ T5718] usb 1-1: SerialNumber: syz [ 1060.160892][ T5718] usb 1-1: config 0 descriptor?? [ 1060.187106][ T5731] em28xx 6-1:0.89: Freeing device [ 1060.242054][ T12] net_ratelimit: 18 callbacks suppressed [ 1060.242068][ T12] bond5: (slave bridge1): failed to get link speed/duplex [ 1060.358281][T13335] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1060.693980][T13677] usb 9-1: Using ep0 maxpacket: 32 [ 1060.855723][T17017] xt_ecn: cannot match TCP bits for non-tcp packets [ 1061.861798][ T5718] gs_usb 1-1:0.0: Couldn't get device config: (err=-110) [ 1061.869237][T13335] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.881315][ T5718] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -110 [ 1061.889951][T13335] usb 2-1: Product: syz [ 1061.901512][T13335] usb 2-1: Manufacturer: syz [ 1061.908454][T13335] usb 2-1: SerialNumber: syz [ 1061.924953][T13335] usb 2-1: config 0 descriptor?? [ 1061.960868][T17002] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1062.036842][ T5718] usb 1-1: USB disconnect, device number 99 [ 1062.049386][T13335] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1062.063248][ T12] bond5: (slave bridge1): failed to get link speed/duplex [ 1062.082125][T13677] usb 9-1: config 0 has an invalid interface number: 89 but max is 0 [ 1062.115752][T13335] em28xx 2-1:0.89: Video interface 89 found: [ 1062.124521][T13677] usb 9-1: config 0 has no interface number 0 [ 1062.133725][T13677] usb 9-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1062.146556][T13677] usb 9-1: config 0 interface 89 has no altsetting 0 [ 1062.319499][ T13] bond5: (slave bridge1): failed to get link speed/duplex [ 1062.349931][T13677] usb 9-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1062.498429][T13677] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.608402][ T35] bond5: (slave bridge1): failed to get link speed/duplex [ 1062.616824][T13677] usb 9-1: Product: syz [ 1062.625925][ T5731] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1062.628910][T13677] usb 9-1: Manufacturer: syz [ 1062.663330][T13677] usb 9-1: SerialNumber: syz [ 1062.673700][T13335] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 1062.687277][T13677] usb 9-1: config 0 descriptor?? [ 1062.746590][T13677] em28xx 9-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1062.751753][ T12] bond5: (slave bridge1): failed to get link speed/duplex [ 1062.773699][T13677] em28xx 9-1:0.89: Video interface 89 found: [ 1062.793328][ T5731] usb 6-1: Using ep0 maxpacket: 32 [ 1062.830406][ T5731] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 1062.868345][ T5731] usb 6-1: config 0 has no interface number 0 [ 1062.881692][ T13] bond5: (slave bridge1): failed to get link speed/duplex [ 1062.905697][ T5731] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1062.908681][T17036] syzkaller1: entered promiscuous mode [ 1062.938868][T17039] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2858'. [ 1062.948258][T17036] syzkaller1: entered allmulticast mode [ 1062.960821][ T5731] usb 6-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1062.983788][ T5740] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 1063.017335][ T5731] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1063.051822][ T5731] usb 6-1: config 0 interface 196 has no altsetting 0 [ 1063.073084][T17042] xt_NFQUEUE: number of total queues is 0 [ 1063.087921][T13335] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1063.097311][T13335] em28xx 2-1:0.89: board has no eeprom [ 1063.104583][ T35] bond5: (slave bridge1): failed to get link speed/duplex [ 1063.113478][T13677] em28xx 9-1:0.89: unknown em28xx chip ID (0) [ 1063.140874][ T5731] usb 6-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1063.151958][ T5731] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.169898][ T5731] usb 6-1: Product: syz [ 1063.180638][ T5731] usb 6-1: Manufacturer: syz [ 1063.192029][ T5731] usb 6-1: SerialNumber: syz [ 1063.192259][T13335] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 1063.233314][T13677] em28xx 9-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1063.238222][ T5740] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1063.254414][T13335] em28xx 2-1:0.89: analog set to bulk mode. [ 1063.268179][T10038] bond5: (slave bridge1): failed to get link speed/duplex [ 1063.277287][T13677] em28xx 9-1:0.89: board has no eeprom [ 1063.282432][ T5731] usb 6-1: config 0 descriptor?? [ 1063.298689][ T5718] em28xx 2-1:0.89: Registering V4L2 extension [ 1063.308090][ T5731] usb 6-1: can't set config #0, error -71 [ 1063.330334][ T5740] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1063.340012][T13335] usb 2-1: USB disconnect, device number 102 [ 1063.382084][T13677] em28xx 9-1:0.89: Identified as Terratec Grabby (card=67) [ 1063.388031][ T5731] usb 6-1: USB disconnect, device number 78 [ 1063.410552][T13335] em28xx 2-1:0.89: Disconnecting em28xx [ 1063.420625][ T5740] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 1063.443782][T13677] em28xx 9-1:0.89: analog set to bulk mode. [ 1063.474509][ T5718] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 1063.489127][ T5740] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1063.497691][T17053] xt_hashlimit: size too large, truncated to 1048576 [ 1063.514811][ T5718] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 1063.539731][ T5740] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1063.553435][ T5718] em28xx 2-1:0.89: No AC97 audio processor [ 1063.562221][T13677] usb 9-1: USB disconnect, device number 11 [ 1063.585282][ T5718] usb 2-1: Decoder not found [ 1063.593083][T13677] em28xx 9-1:0.89: Disconnecting em28xx [ 1063.596687][ T5740] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.608603][ T5718] em28xx 2-1:0.89: failed to create media graph [ 1063.614865][ T5718] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 1063.625028][T17054] FAULT_INJECTION: forcing a failure. [ 1063.625028][T17054] name failslab, interval 1, probability 0, space 0, times 0 [ 1063.654262][ T5740] usb 7-1: Product: syz [ 1063.675146][T10038] bond5: (slave bridge1): failed to get link speed/duplex [ 1063.688019][ T5718] em28xx 2-1:0.89: Registering snapshot button... [ 1063.694730][ T5740] usb 7-1: Manufacturer: syz [ 1063.695630][ T5718] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input66 [ 1063.723323][T17054] CPU: 0 UID: 0 PID: 17054 Comm: syz.8.2862 Tainted: G L syzkaller #0 PREEMPT(full) [ 1063.723356][T17054] Tainted: [L]=SOFTLOCKUP [ 1063.723364][T17054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1063.723376][T17054] Call Trace: [ 1063.723383][T17054] [ 1063.723392][T17054] dump_stack_lvl+0x100/0x190 [ 1063.723430][T17054] should_fail_ex.cold+0x5/0xa [ 1063.723458][T17054] should_failslab+0xc2/0x120 [ 1063.723482][T17054] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1063.723501][T17054] ? net_generic+0xea/0x2a0 [ 1063.723533][T17054] ? __nf_conntrack_alloc+0xb7/0x5e0 [ 1063.723560][T17054] __nf_conntrack_alloc+0xb7/0x5e0 [ 1063.723585][T17054] init_conntrack.isra.0+0xf51/0x1380 [ 1063.723608][T17054] ? __nf_conntrack_find_get+0xa0d/0xd00 [ 1063.723630][T17054] ? __pfx_init_conntrack.isra.0+0x10/0x10 [ 1063.723660][T17054] ? ip6t_do_table+0xc1d/0x1c90 [ 1063.723695][T17054] nf_conntrack_in+0xe70/0x1690 [ 1063.723728][T17054] ? __pfx_nf_conntrack_in+0x10/0x10 [ 1063.723749][T17054] ? __flow_hash_from_keys+0xa2/0x4f0 [ 1063.723792][T17054] nf_hook_slow+0xbf/0x220 [ 1063.723823][T17054] __ip6_local_out+0x4c0/0xaf0 [ 1063.723847][T17054] ? __pfx___ip6_local_out+0x10/0x10 [ 1063.723870][T17054] ? __pfx_dst_output+0x10/0x10 [ 1063.723896][T17054] ip6_local_out+0x2a/0x1f0 [ 1063.723918][T17054] ip6_send_skb+0x112/0x430 [ 1063.723942][T17054] ip6_push_pending_frames+0x3b/0x50 [ 1063.723963][T17054] icmpv6_push_pending_frames+0x2c1/0x450 [ 1063.723999][T17054] ping_v6_sendmsg+0x116c/0x1600 [ 1063.724039][T17054] ? __pfx_ping_v6_sendmsg+0x10/0x10 [ 1063.724084][T17054] ? reacquire_held_locks+0xce/0x1e0 [ 1063.724107][T17054] ? release_sock+0x21/0x280 [ 1063.724130][T17054] ? inet_autobind+0x145/0x1a0 [ 1063.724166][T17054] ? lockdep_hardirqs_on+0x78/0x100 [ 1063.724193][T17054] ? inet_autobind+0x145/0x1a0 [ 1063.724217][T17054] ? __local_bh_enable_ip+0x9e/0x120 [ 1063.724241][T17054] ? inet_autobind+0x14a/0x1a0 [ 1063.724264][T17054] ? __pfx_ping_v6_sendmsg+0x10/0x10 [ 1063.724295][T17054] inet_sendmsg+0x11c/0x140 [ 1063.724314][T17054] __sys_sendto+0x453/0x4e0 [ 1063.724340][T17054] ? __pfx_inet_sendmsg+0x10/0x10 [ 1063.724360][T17054] ? __pfx___sys_sendto+0x10/0x10 [ 1063.724403][T17054] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1063.724441][T17054] ? ksys_write+0x1ac/0x250 [ 1063.724466][T17054] ? __pfx_ksys_write+0x10/0x10 [ 1063.724495][T17054] __x64_sys_sendto+0xe0/0x1c0 [ 1063.724522][T17054] ? do_syscall_64+0x90/0x870 [ 1063.724553][T17054] ? lockdep_hardirqs_on+0x78/0x100 [ 1063.724583][T17054] do_syscall_64+0x115/0x870 [ 1063.724613][T17054] ? clear_bhb_loop+0x40/0x90 [ 1063.724642][T17054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.724667][T17054] RIP: 0033:0x7fbfa6f9de59 [ 1063.724688][T17054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1063.724710][T17054] RSP: 002b:00007fbfa7eb3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1063.724734][T17054] RAX: ffffffffffffffda RBX: 00007fbfa7226090 RCX: 00007fbfa6f9de59 [ 1063.724751][T17054] RDX: 0000000000000008 RSI: 0000200000000000 RDI: 0000000000000005 [ 1063.724765][T17054] RBP: 00007fbfa7eb3090 R08: 0000200000001100 R09: 000000000000001c [ 1063.724781][T17054] R10: 0000000000048840 R11: 0000000000000246 R12: 0000000000000001 [ 1063.724794][T17054] R13: 00007fbfa7226128 R14: 00007fbfa7226090 R15: 00007fffa4f71028 [ 1063.724822][T17054] [ 1063.725434][ T5718] em28xx 2-1:0.89: Remote control support is not available for this card. [ 1063.733802][ T5740] usb 7-1: SerialNumber: syz [ 1063.805264][T13676] em28xx 9-1:0.89: Registering V4L2 extension [ 1063.852851][ T29] audit: type=1400 audit(1783209695.830:1376): avc: denied { write } for pid=17025 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1063.975370][ T13] bond5: (slave bridge1): failed to get link speed/duplex [ 1064.133573][T13676] em28xx 9-1:0.89: Config register raw data: 0xffffffed [ 1064.140552][T13676] em28xx 9-1:0.89: AC97 chip type couldn't be determined [ 1064.147031][T17026] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1064.180914][ T5740] cdc_mbim 7-1:1.0: skipping garbage [ 1064.211919][T13676] em28xx 9-1:0.89: No AC97 audio processor [ 1064.290443][T13676] usb 9-1: Decoder not found [ 1064.295064][T13676] em28xx 9-1:0.89: failed to create media graph [ 1064.338112][T13676] em28xx 9-1:0.89: V4L2 device video103 deregistered [ 1064.360790][T13676] em28xx 9-1:0.89: Registering snapshot button... [ 1064.379597][T13676] input: em28xx snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.89/input/input67 [ 1064.392067][T17026] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1064.423027][T17026] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1064.473823][ T29] audit: type=1400 audit(1783209696.340:1377): avc: denied { write } for pid=17070 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1064.496640][T13676] em28xx 9-1:0.89: Remote control support is not available for this card. [ 1064.505204][T13335] em28xx 2-1:0.89: Closing input extension [ 1064.511092][T13335] em28xx 2-1:0.89: Deregistering snapshot button [ 1064.967640][T13677] em28xx 9-1:0.89: Closing input extension [ 1064.987049][T13677] em28xx 9-1:0.89: Deregistering snapshot button [ 1065.027145][T13335] em28xx 2-1:0.89: Freeing device [ 1065.271507][ T13] net_ratelimit: 2 callbacks suppressed [ 1065.271574][ T13] bond5: (slave bridge1): failed to get link speed/duplex [ 1065.272661][T17026] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1065.508915][T13335] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1065.535097][T13677] em28xx 9-1:0.89: Freeing device [ 1065.566418][T17026] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1065.609516][ T5740] cdc_mbim 7-1:1.0: setting tx_max = 32 [ 1065.629719][ T5740] cdc_mbim 7-1:1.0: cdc-wdm0: USB WDM device [ 1065.829573][T13335] usb 2-1: Using ep0 maxpacket: 32 [ 1065.905579][ T5740] wwan wwan0: port wwan0mbim0 attached [ 1066.057018][T17094] No control pipe specified [ 1066.905962][T13335] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1066.917195][T13335] usb 2-1: config 0 has no interfaces? [ 1066.930143][T13335] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1066.940038][T13677] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1067.367565][T13335] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1067.375772][T13335] usb 2-1: Product: syz [ 1067.384841][T13335] usb 2-1: Manufacturer: syz [ 1067.389443][T13335] usb 2-1: SerialNumber: syz [ 1067.414670][T13335] usb 2-1: config 0 descriptor?? [ 1067.469099][ T5740] cdc_mbim 7-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.6-1, CDC MBIM, 36:d2:27:bd:09:9d [ 1067.487947][T10034] bond5: (slave bridge1): failed to get link speed/duplex [ 1067.519706][T17028] ip6erspan0: entered allmulticast mode [ 1067.592272][T13335] usb 2-1: can't set config #0, error -71 [ 1067.614940][T13335] usb 2-1: USB disconnect, device number 103 [ 1067.622957][ T7001] bond5: (slave bridge1): failed to get link speed/duplex [ 1067.645329][T17101] FAULT_INJECTION: forcing a failure. [ 1067.645329][T17101] name failslab, interval 1, probability 0, space 0, times 0 [ 1067.696314][T17101] CPU: 0 UID: 0 PID: 17101 Comm: syz.0.2871 Tainted: G L syzkaller #0 PREEMPT(full) [ 1067.696347][T17101] Tainted: [L]=SOFTLOCKUP [ 1067.696355][T17101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1067.696367][T17101] Call Trace: [ 1067.696375][T17101] [ 1067.696383][T17101] dump_stack_lvl+0x100/0x190 [ 1067.696415][T17101] should_fail_ex.cold+0x5/0xa [ 1067.696441][T17101] should_failslab+0xc2/0x120 [ 1067.696466][T17101] __kmalloc_noprof+0xfc/0x820 [ 1067.696488][T17101] ? tomoyo_encode2+0xfb/0x3c0 [ 1067.696522][T17101] tomoyo_encode2+0xfb/0x3c0 [ 1067.696553][T17101] tomoyo_encode+0x29/0x50 [ 1067.696579][T17101] tomoyo_realpath_from_path+0x18c/0x690 [ 1067.696615][T17101] tomoyo_path_number_perm+0x23c/0x580 [ 1067.696640][T17101] ? tomoyo_path_number_perm+0x22e/0x580 [ 1067.696673][T17101] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1067.696728][T17101] ? find_held_lock+0x2b/0x80 [ 1067.696756][T17101] ? __fget_files+0x215/0x3d0 [ 1067.696785][T17101] ? hook_file_ioctl_common+0x140/0x440 [ 1067.696815][T17101] ? __fget_files+0x215/0x3d0 [ 1067.696849][T17101] ? __fget_files+0x21f/0x3d0 [ 1067.696884][T17101] security_file_ioctl+0xd3/0x230 [ 1067.696912][T17101] __x64_sys_ioctl+0xb7/0x210 [ 1067.696941][T17101] do_syscall_64+0x115/0x870 [ 1067.696967][T17101] ? clear_bhb_loop+0x40/0x90 [ 1067.696993][T17101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.697015][T17101] RIP: 0033:0x7f76fad9de59 [ 1067.697033][T17101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1067.697053][T17101] RSP: 002b:00007f76fbd2b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1067.697073][T17101] RAX: ffffffffffffffda RBX: 00007f76fb025fa0 RCX: 00007f76fad9de59 [ 1067.697088][T17101] RDX: 0000200000000280 RSI: 0000000000003b8d RDI: 0000000000000003 [ 1067.697101][T17101] RBP: 00007f76fbd2b090 R08: 0000000000000000 R09: 0000000000000000 [ 1067.697114][T17101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1067.697127][T17101] R13: 00007f76fb026038 R14: 00007f76fb025fa0 R15: 00007ffcb6f437a8 [ 1067.697156][T17101] [ 1067.697174][T17101] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1067.864407][ T3261] bond5: (slave bridge1): failed to get link speed/duplex [ 1067.974386][ T13] bond5: (slave bridge1): failed to get link speed/duplex [ 1067.994687][ T9] usb 7-1: USB disconnect, device number 12 [ 1068.004008][ T9] cdc_mbim 7-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.6-1, CDC MBIM [ 1068.164341][T17108] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1068.170854][T17108] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1068.190875][T17108] vhci_hcd vhci_hcd.0: Device attached [ 1068.932238][T10034] bond5: (slave bridge1): failed to get link speed/duplex [ 1068.979980][ T9] wwan wwan0: port wwan0mbim0 disconnected [ 1069.082358][ T29] audit: type=1400 audit(1783209701.060:1378): avc: denied { write } for pid=17084 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1069.102178][ T7001] bond5: (slave bridge1): failed to get link speed/duplex [ 1069.209003][T13676] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 1069.216991][T13677] usb 9-1: device descriptor read/64, error -71 [ 1069.371566][ T7001] bond5: (slave bridge1): failed to get link speed/duplex [ 1069.506114][ T3261] bond5: (slave bridge1): failed to get link speed/duplex [ 1069.621335][T13677] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1069.631687][ T13] bond5: (slave bridge1): failed to get link speed/duplex [ 1069.662102][T17109] vhci_hcd: connection reset by peer [ 1069.672653][ T3261] vhci_hcd vhci_hcd.1: stop threads [ 1069.686537][ T29] audit: type=1400 audit(1783209701.680:1379): avc: denied { write } for pid=17129 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1069.688577][ T3261] vhci_hcd vhci_hcd.1: release socket [ 1069.790283][ T3261] vhci_hcd vhci_hcd.1: disconnect device [ 1069.939612][T17139] FAULT_INJECTION: forcing a failure. [ 1069.939612][T17139] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1070.000547][T17139] CPU: 0 UID: 0 PID: 17139 Comm: syz.5.2880 Tainted: G L syzkaller #0 PREEMPT(full) [ 1070.000582][T17139] Tainted: [L]=SOFTLOCKUP [ 1070.000590][T17139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1070.000601][T17139] Call Trace: [ 1070.000608][T17139] [ 1070.000617][T17139] dump_stack_lvl+0x100/0x190 [ 1070.000645][T17139] should_fail_ex.cold+0x5/0xa [ 1070.000670][T17139] _copy_to_user+0x32/0xd0 [ 1070.000695][T17139] simple_read_from_buffer+0xcb/0x170 [ 1070.000719][T17139] proc_fail_nth_read+0x1af/0x230 [ 1070.000736][T17139] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1070.000752][T17139] ? rw_verify_area+0xce/0x6d0 [ 1070.000766][T17139] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1070.000781][T17139] vfs_read+0x1e4/0xb40 [ 1070.000798][T17139] ? __pfx_vfs_read+0x10/0x10 [ 1070.000813][T17139] ? __fget_files+0x215/0x3d0 [ 1070.000833][T17139] ? __fget_files+0x21f/0x3d0 [ 1070.000854][T17139] ksys_read+0x12a/0x250 [ 1070.000868][T17139] ? __pfx_ksys_read+0x10/0x10 [ 1070.000888][T17139] do_syscall_64+0x115/0x870 [ 1070.000907][T17139] ? clear_bhb_loop+0x40/0x90 [ 1070.000921][T17139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1070.000933][T17139] RIP: 0033:0x7f3d27f5e68e [ 1070.000944][T17139] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1070.000956][T17139] RSP: 002b:00007f3d28e7ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1070.000967][T17139] RAX: ffffffffffffffda RBX: 00007f3d28e806c0 RCX: 00007f3d27f5e68e [ 1070.000975][T17139] RDX: 000000000000000f RSI: 00007f3d28e800a0 RDI: 0000000000000004 [ 1070.000982][T17139] RBP: 00007f3d28e80090 R08: 0000000000000000 R09: 0000000000000000 [ 1070.000989][T17139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1070.000996][T17139] R13: 00007f3d28226038 R14: 00007f3d28225fa0 R15: 00007fff8d30fd28 [ 1070.001012][T17139] [ 1070.298783][ T13] net_ratelimit: 3 callbacks suppressed [ 1070.298802][ T13] bond5: (slave bridge1): failed to get link speed/duplex [ 1070.342238][T13677] usb 9-1: Using ep0 maxpacket: 8 [ 1070.471448][ T3261] bond5: (slave bridge1): failed to get link speed/duplex [ 1070.484439][T13677] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1070.507343][T13677] usb 9-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1070.517473][T13677] usb 9-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1070.527030][T13677] usb 9-1: Product: syz [ 1070.531457][T13677] usb 9-1: Manufacturer: syz [ 1070.536246][T13677] usb 9-1: SerialNumber: syz [ 1070.602786][ T3261] bond5: (slave bridge1): failed to get link speed/duplex [ 1070.753766][ T3261] bond5: (slave bridge1): failed to get link speed/duplex [ 1070.766742][T13677] usb 9-1: Handspring Visor / Palm OS: No valid connect info available [ 1070.780887][T13677] usb 9-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1070.812221][T13677] usb 9-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1070.849936][T13677] usb 9-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1070.891265][ T13] bond5: (slave bridge1): failed to get link speed/duplex [ 1070.943529][ T29] audit: type=1400 audit(1783209702.930:1380): avc: denied { write } for pid=17135 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1071.077325][ T12] bond5: (slave bridge1): failed to get link speed/duplex [ 1071.137500][ T9414] usb 6-1: new full-speed USB device number 79 using dummy_hcd [ 1071.350653][T13677] usb 9-1: palm_os_3_probe - error -110 getting bytes available request [ 1071.367822][T13677] visor 9-1:1.0: Handspring Visor / Palm OS converter detected [ 1071.425696][T13677] usb 9-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1071.441579][T13677] usb 9-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1071.457765][T13677] usb 9-1: USB disconnect, device number 13 [ 1071.473902][T13677] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1071.488916][T13677] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1071.501282][ T3261] bond5: (slave bridge1): failed to get link speed/duplex [ 1071.501490][T13677] visor 9-1:1.0: device disconnected [ 1071.651504][ T24] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1071.896328][ T9414] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1071.912902][ T3261] bond5: (slave bridge1): failed to get link speed/duplex [ 1071.946048][ T9414] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.971272][ T9414] usb 6-1: Product: syz [ 1071.979549][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1071.997394][ T9414] usb 6-1: Manufacturer: syz [ 1072.041195][ T29] audit: type=1400 audit(1783209704.020:1381): avc: denied { write } for pid=17166 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1072.063939][ T9414] usb 6-1: SerialNumber: syz [ 1072.070554][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1072.082574][ T24] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1072.092559][ T9414] usb 6-1: config 0 descriptor?? [ 1072.110200][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.145840][ T24] usb 1-1: config 0 descriptor?? [ 1072.152372][ T12] bond5: (slave bridge1): failed to get link speed/duplex [ 1072.389945][T10036] bond5: (slave bridge1): failed to get link speed/duplex [ 1072.536232][ T29] audit: type=1400 audit(1783209704.530:1382): avc: denied { write } for pid=17171 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1072.652008][ T24] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 1072.767836][ T24] cp2112 0003:10C4:EA90.001B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 1072.862311][ T9414] dvb_usb_rtl28xxu 6-1:0.0: chip type detection failed -71 [ 1073.070948][ T9414] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1073.147846][ T24] cp2112 0003:10C4:EA90.001B: Part Number: 0x82 Device Version: 0xFE [ 1073.200987][ T9414] usb 6-1: USB disconnect, device number 79 [ 1073.228979][ T24] cp2112 0003:10C4:EA90.001B: error requesting SMBus config [ 1073.343800][ T24] cp2112 0003:10C4:EA90.001B: probe with driver cp2112 failed with error -5 [ 1073.429481][ T29] audit: type=1400 audit(1783209705.420:1383): avc: denied { read } for pid=17136 comm="syz.0.2879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1074.469197][T13676] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 1074.924111][ T29] audit: type=1400 audit(1783209705.460:1384): avc: denied { write } for pid=17190 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1075.168282][T17195] tipc: Enabled bearer , priority 0 [ 1075.196901][ T5711] usb 1-1: USB disconnect, device number 100 [ 1075.333518][ T13] net_ratelimit: 11 callbacks suppressed [ 1075.333537][ T13] bond5: (slave bridge1): failed to get link speed/duplex [ 1075.391857][T17205] syzkaller0: entered promiscuous mode [ 1075.397356][T17205] syzkaller0: entered allmulticast mode [ 1075.641591][T17205] tipc: Resetting bearer [ 1075.673817][ T12] bond5: (slave bridge1): failed to get link speed/duplex [ 1075.923767][T17191] tipc: Resetting bearer [ 1076.082102][T17191] tipc: Disabling bearer [ 1076.141213][T10034] bond5: (slave bridge1): failed to get link speed/duplex [ 1076.533298][ T29] audit: type=1400 audit(1783209708.430:1385): avc: denied { append } for pid=17219 comm="syz.5.2893" name="demux0" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1076.581230][ T12] bond5: (slave bridge1): failed to get link speed/duplex [ 1076.644654][T17199] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2889'. [ 1077.305058][T17229] vivid-000: kernel_thread() failed [ 1077.721918][T17199] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2889'. [ 1077.803161][T10040] bond5: (slave bridge1): failed to get link speed/duplex [ 1077.975567][T10040] bond5: (slave bridge1): failed to get link speed/duplex [ 1078.119748][T17241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2896'. [ 1078.159433][ T13] bond5: (slave bridge1): failed to get link speed/duplex [ 1183.091113][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1183.098090][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P14357/1:b..l [ 1183.106703][ C1] rcu: (detected by 1, t=10502 jiffies, g=116981, q=219 ncpus=2) [ 1183.114508][ C1] task:syz-executor state:R running task stack:23320 pid:14357 tgid:14357 ppid:14352 task_flags:0x400140 flags:0x00080000 [ 1183.129064][ C1] Call Trace: [ 1183.132342][ C1] [ 1183.135271][ C1] __schedule+0x125c/0x6730 [ 1183.139778][ C1] ? rcu_is_watching+0x12/0xc0 [ 1183.144543][ C1] ? trace_sched_exit_tp+0x120/0x160 [ 1183.149847][ C1] ? __pfx___schedule+0x10/0x10 [ 1183.154696][ C1] ? mark_held_locks+0x40/0x70 [ 1183.159456][ C1] preempt_schedule_irq+0x50/0x90 [ 1183.164480][ C1] irqentry_exit+0x205/0xa00 [ 1183.169072][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1183.175046][ C1] RIP: 0010:__orc_find+0x60/0xf0 [ 1183.179985][ C1] Code: 89 ff 48 89 fd eb 0c 48 8d 6b 04 49 89 df 49 39 ec 72 4e 4c 89 e2 48 29 ea 48 89 d6 48 c1 ea 3f 48 c1 fe 02 48 01 f2 48 d1 fa <48> 8d 5c 95 00 48 89 da 48 c1 ea 03 0f b6 34 0a 48 89 da 83 e2 07 [ 1183.199586][ C1] RSP: 0018:ffffc90004706c50 EFLAGS: 00000203 [ 1183.205647][ C1] RAX: ffffffff91d1d5b8 RBX: 0000000000000001 RCX: dffffc0000000000 [ 1183.213608][ C1] RDX: 0000000000000007 RSI: 000000000000000f RDI: ffffffff91443ec4 [ 1183.221570][ C1] RBP: ffffffff91443ec4 R08: ffffffff91d1d618 R09: 0000000000000007 [ 1183.229532][ C1] R10: 0000000000000200 R11: 00000000000168bb R12: ffffffff91443f00 [ 1183.237498][ C1] R13: ffffffff8268bbfc R14: ffffffff91443ec4 R15: ffffffff91443ec4 [ 1183.245465][ C1] ? __vmalloc_node_noprof+0xac/0xf0 [ 1183.250763][ C1] ? __vmalloc_node_noprof+0xac/0xf0 [ 1183.256045][ C1] unwind_next_frame+0x2ec/0x2090 [ 1183.261074][ C1] ? __vmalloc_node_noprof+0xad/0xf0 [ 1183.266359][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1183.272517][ C1] arch_stack_walk+0x94/0xf0 [ 1183.277112][ C1] ? __vmalloc_node_noprof+0xad/0xf0 [ 1183.282399][ C1] stack_trace_save+0x8e/0xc0 [ 1183.287080][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1183.292460][ C1] save_stack+0x162/0x1e0 [ 1183.296784][ C1] ? __pfx_save_stack+0x10/0x10 [ 1183.301627][ C1] ? irqentry_exit+0x24d/0xa00 [ 1183.306391][ C1] ? post_alloc_hook+0xfd/0x120 [ 1183.311240][ C1] ? get_page_from_freelist+0xf48/0x3530 [ 1183.316874][ C1] ? __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 1183.322941][ C1] ? alloc_pages_bulk_noprof+0x5de/0x13c0 [ 1183.328660][ C1] ? __kasan_populate_vmalloc+0xf0/0x210 [ 1183.334304][ C1] ? alloc_vmap_area+0x95d/0x2bb0 [ 1183.339320][ C1] ? __get_vm_area_node+0x1ca/0x330 [ 1183.344512][ C1] ? __vmalloc_node_range_noprof+0x228/0x1630 [ 1183.350578][ C1] ? __vmalloc_node_noprof+0xad/0xf0 [ 1183.355874][ C1] __set_page_owner+0x8c/0x540 [ 1183.360643][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 1183.366022][ C1] post_alloc_hook+0xfd/0x120 [ 1183.370700][ C1] get_page_from_freelist+0xf48/0x3530 [ 1183.376183][ C1] ? __pfx_get_page_from_freelist+0x10/0x10 [ 1183.382080][ C1] ? prepare_alloc_pages+0x1f0/0x5f0 [ 1183.387366][ C1] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 1183.393269][ C1] ? mark_held_locks+0x40/0x70 [ 1183.398025][ C1] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 1183.403918][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 1183.409115][ C1] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 1183.415009][ C1] ? rcu_is_watching+0x12/0xc0 [ 1183.419773][ C1] ? trace_sched_exit_tp+0x120/0x160 [ 1183.425059][ C1] ? __schedule+0x126e/0x6730 [ 1183.429733][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1183.436086][ C1] ? irqentry_exit+0x24d/0xa00 [ 1183.440849][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 1183.446046][ C1] ? irqentry_exit+0x24d/0xa00 [ 1183.450812][ C1] alloc_pages_bulk_noprof+0x5de/0x13c0 [ 1183.456365][ C1] ? trace_mm_page_alloc+0x35/0x1c0 [ 1183.461562][ C1] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1183.467561][ C1] __kasan_populate_vmalloc+0xf0/0x210 [ 1183.473029][ C1] alloc_vmap_area+0x95d/0x2bb0 [ 1183.477885][ C1] ? kasan_save_track+0x14/0x30 [ 1183.482727][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 1183.487486][ C1] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1183.492768][ C1] ? __get_vm_area_node+0x101/0x330 [ 1183.497966][ C1] __get_vm_area_node+0x1ca/0x330 [ 1183.502999][ C1] __vmalloc_node_range_noprof+0x228/0x1630 [ 1183.508894][ C1] ? do_arpt_get_ctl+0x75f/0xad0 [ 1183.513826][ C1] ? trace_contention_end+0x126/0x160 [ 1183.519196][ C1] ? xt_find_table_lock+0x5a/0x520 [ 1183.524310][ C1] ? __lock_acquire+0x49f/0x1a40 [ 1183.529242][ C1] ? do_arpt_get_ctl+0x75f/0xad0 [ 1183.534176][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1183.539201][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 1183.544401][ C1] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1183.550731][ C1] ? net_generic+0xea/0x2a0 [ 1183.555235][ C1] ? net_generic+0xea/0x2a0 [ 1183.559749][ C1] ? do_arpt_get_ctl+0x75f/0xad0 [ 1183.564680][ C1] __vmalloc_node_noprof+0xad/0xf0 [ 1183.569789][ C1] ? do_arpt_get_ctl+0x75f/0xad0 [ 1183.574724][ C1] do_arpt_get_ctl+0x75f/0xad0 [ 1183.579488][ C1] ? __pfx_do_arpt_get_ctl+0x10/0x10 [ 1183.584766][ C1] ? __lock_acquire+0x49f/0x1a40 [ 1183.589696][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1183.595690][ C1] ? nf_sockopt_find.isra.0+0x222/0x290 [ 1183.601243][ C1] nf_getsockopt+0x7c/0xe0 [ 1183.605662][ C1] ip_getsockopt+0x192/0x1e0 [ 1183.610245][ C1] ? __pfx_ip_getsockopt+0x10/0x10 [ 1183.615351][ C1] ? _copy_from_user+0x59/0xd0 [ 1183.620111][ C1] ? copy_from_sockptr_offset.constprop.0+0xe2/0x150 [ 1183.626788][ C1] tcp_getsockopt+0xa1/0x110 [ 1183.631376][ C1] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1183.637267][ C1] do_sock_getsockopt+0x50a/0x6e0 [ 1183.642286][ C1] ? trace_kmem_cache_alloc+0xdd/0x100 [ 1183.647746][ C1] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1183.653289][ C1] ? errseq_sample+0x51/0x70 [ 1183.657899][ C1] __sys_getsockopt+0x148/0x260 [ 1183.662753][ C1] ? xfd_validate_state+0x129/0x190 [ 1183.667953][ C1] ? __x64_sys_getsockopt+0xbd/0x160 [ 1183.673242][ C1] __x64_sys_getsockopt+0xbd/0x160 [ 1183.678356][ C1] ? do_syscall_64+0x90/0x870 [ 1183.683031][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 1183.688228][ C1] do_syscall_64+0x115/0x870 [ 1183.692820][ C1] ? clear_bhb_loop+0x40/0x90 [ 1183.697497][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1183.703383][ C1] RIP: 0033:0x7f2fceb9f62a [ 1183.707790][ C1] RSP: 002b:00007ffee2c54678 EFLAGS: 00000212 ORIG_RAX: 0000000000000037 [ 1183.716193][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f2fceb9f62a [ 1183.724154][ C1] RDX: 0000000000000061 RSI: 0000000000000000 RDI: 0000000000000003 [ 1183.732114][ C1] RBP: 00007ffee2c546e0 R08: 00007ffee2c5468c R09: 0000000000000000 [ 1183.740072][ C1] R10: 00007ffee2c546e0 R11: 0000000000000212 R12: 00007ffee2c5468c [ 1183.748031][ C1] R13: 00007f2fcec348bd R14: 00000000001071f5 R15: 00007ffee2c54dd0 [ 1183.756011][ C1] [ 1183.759031][ C1] rcu: rcu_preempt kthread starved for 10496 jiffies! g116981 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1183.770313][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1183.780265][ C1] rcu: RCU grace-period kthread stack dump: [ 1183.786134][ C1] task:rcu_preempt state:R running task stack:27592 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1183.799617][ C1] Call Trace: [ 1183.802883][ C1] [ 1183.805804][ C1] __schedule+0x125c/0x6730 [ 1183.810326][ C1] ? __pfx___schedule+0x10/0x10 [ 1183.815172][ C1] ? find_held_lock+0x2b/0x80 [ 1183.819850][ C1] ? schedule+0x225/0x2c0 [ 1183.824179][ C1] schedule+0xdd/0x2c0 [ 1183.828247][ C1] schedule_timeout+0x127/0x280 [ 1183.833092][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1183.838461][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1183.843761][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1183.849564][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 1183.855020][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 1183.859780][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1183.865061][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 1183.869995][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 1183.875193][ C1] rcu_gp_kthread+0x179/0x230 [ 1183.879863][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1183.885051][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1183.890855][ C1] ? __kthread_parkme+0x18c/0x230 [ 1183.895881][ C1] ? kthread+0x13a/0x450 [ 1183.900121][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1183.905310][ C1] kthread+0x370/0x450 [ 1183.909379][ C1] ? __pfx_kthread+0x10/0x10 [ 1183.913974][ C1] ret_from_fork+0x72b/0xd50 [ 1183.918569][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1183.923679][ C1] ? __switch_to+0x800/0x10f0 [ 1183.928358][ C1] ? __pfx_kthread+0x10/0x10 [ 1183.932951][ C1] ret_from_fork_asm+0x1a/0x30 [ 1183.937736][ C1] [ 1183.940744][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1183.947056][ C1] CPU: 1 UID: 0 PID: 10040 Comm: kworker/u8:15 Tainted: G L syzkaller #0 PREEMPT(full) [ 1183.958242][ C1] Tainted: [L]=SOFTLOCKUP [ 1183.962550][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1183.972606][ C1] Workqueue: events_unbound toggle_allocation_gate [ 1183.979107][ C1] RIP: 0010:smp_call_function_many_cond+0x58e/0x16c0 [ 1183.985780][ C1] Code: 00 fc ff df 48 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 e8 b9 95 0c 00 f3 90 41 0f b6 45 00 <41> 38 c4 7c 08 84 c0 0f 85 2c 0f 00 00 8b 45 08 31 ff 83 e0 01 41 [ 1184.005379][ C1] RSP: 0018:ffffc900036cf878 EFLAGS: 00000293 [ 1184.011437][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81fd3b0d [ 1184.019397][ C1] RDX: ffff88807d8f2540 RSI: ffffffff81fd3ae7 RDI: ffff88807d8f2540 [ 1184.027358][ C1] RBP: ffff8880b8443680 R08: 0000000000000005 R09: 0000000000000000 [ 1184.035322][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 1184.043280][ C1] R13: ffffed10170886d1 R14: 0000000000000001 R15: ffff8880b853c880 [ 1184.051240][ C1] FS: 0000000000000000(0000) GS:ffff888123eec000(0000) knlGS:0000000000000000 [ 1184.060163][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1184.066737][ C1] CR2: 000000110c35fac6 CR3: 000000000e992000 CR4: 00000000003526f0 [ 1184.074701][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1184.082660][ C1] DR3: 00000000ffff000c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1184.090618][ C1] Call Trace: [ 1184.093886][ C1] [ 1184.096812][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 1184.101849][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1184.108170][ C1] ? __pfx_text_poke_memcpy+0x10/0x10 [ 1184.113546][ C1] ? __pfx___text_poke+0x10/0x10 [ 1184.118487][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 1184.123512][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 1184.128617][ C1] ? __kmalloc_cache_node_noprof+0xab/0x6c0 [ 1184.134502][ C1] smp_text_poke_batch_finish+0x337/0xc60 [ 1184.140217][ C1] ? __kmalloc_cache_node_noprof+0xab/0x6c0 [ 1184.146104][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 1184.152341][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 1184.158572][ C1] ? find_held_lock+0x2b/0x80 [ 1184.163257][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 1184.169228][ C1] jump_label_update+0x37a/0x550 [ 1184.174161][ C1] static_key_enable_cpuslocked+0x1bc/0x270 [ 1184.180047][ C1] static_key_enable+0x1a/0x20 [ 1184.184803][ C1] toggle_allocation_gate+0xfe/0x2d0 [ 1184.190083][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1184.195977][ C1] ? rcu_is_watching+0x12/0xc0 [ 1184.200743][ C1] process_one_work+0xa23/0x1940 [ 1184.205685][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1184.211056][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1184.216948][ C1] worker_thread+0x5ef/0xe50 [ 1184.221542][ C1] ? kthread+0x13a/0x450 [ 1184.225785][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1184.230887][ C1] kthread+0x370/0x450 [ 1184.234962][ C1] ? __pfx_kthread+0x10/0x10 [ 1184.239554][ C1] ret_from_fork+0x72b/0xd50 [ 1184.244149][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1184.249272][ C1] ? __switch_to+0x800/0x10f0 [ 1184.253952][ C1] ? __pfx_kthread+0x10/0x10 [ 1184.258544][ C1] ret_from_fork_asm+0x1a/0x30 [ 1184.263324][ C1]