last executing test programs: 15m53.670205144s ago: executing program 32 (id=197): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000001100)="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", 0x3e2}, {&(0x7f0000000400)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241070096c1498194a7197b45d74a8532b82037b02c9e6045c361ebf4752154fdfe39867a3236186eff2e437321de2e5f6479b384bd9ba37bcab948be0db1e4631eda95e59fdb9d1172c26347db86cdbbf687b5ae29029fbaf53d0576425e493a2fdf20aa2e298a41e395d7025cbce20e7df7357f5c11035638ee615514da29a9fa215ad9", 0x9f}], 0x2}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xf00}, 0x40) 13m26.776924028s ago: executing program 33 (id=618): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) chmod(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0xf2) r1 = openat$sequencer2(0xffffff9c, &(0x7f0000005e00), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x24) write$vhost_msg_v2(r2, 0x0, 0x0) unshare(0x8040480) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x1, 0x0, 0x8000, 0x3}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) madvise(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0xe) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = fanotify_init(0x20, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, 0xffffffffffffffff, 0x0) readv(r3, &(0x7f0000000380)=[{&(0x7f0000000040)=""/131, 0x83}], 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x44a801, 0x0) ioctl$COMEDI_LOCK(r5, 0x6405) close_range(r4, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) ioctl$SNDCTL_TMR_TEMPO(r1, 0xc0045405, &(0x7f0000000180)=0x157) 13m23.898591171s ago: executing program 34 (id=620): r0 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a00090000000904014cbcda4430000904010101010230000905010960"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, 0x0, &(0x7f0000000c80)={0x84, &(0x7f0000000840)={0x20, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002d80)={0x84, &(0x7f0000000040)={0x40, 0xa, 0x5, "ced9d5fdad"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000900)={0x44, &(0x7f0000000400)=ANY=[@ANYBLOB="0003f100000044"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11m31.859150409s ago: executing program 3 (id=1020): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0)={[0x8000000008]}, 0x8, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = signalfd4(r0, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) read$FUSE(r4, &(0x7f0000003b80)={0x2020}, 0x2020) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r6 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x3, 0x40000) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r6, 0x80845663, 0x0) truncate(&(0x7f0000000300)='./file0\x00', 0x100000005) r7 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101080, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0xfffffffc, 0x5, 0x4, 0x2f, 0xfffffff7, 0x8001, 0xa22, 0xfffffff8, 0x2, 0xfffffffc, 0x8502, 0x5006, 0x1000007, 0x1, 0x10003, 0x801000, 0x7fffffff, 0x1ff, 0x3ff, 0x1001010, 0x1ff, 0x8, 0x3, 0x8001, 0x7, 0x3ff, 0x5, 0x400, 0x3, 0xfffd, 0xa000000]}) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) r8 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000640), &(0x7f0000000140)) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, 0x0, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x4000, 0x255, 0x0, r10}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x27ffffe, 0x4000, 0x8002144, 0x31d, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x0, 0x0, 0x26}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x2, 0x1f0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8202, 0x2, 0x311, 0x0, r8}}], 0x1, &(0x7f0000000340)={0x2e, 0xe, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0x2, 0xe0b, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40448d0}, 0x20048011) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e"], 0x48) 11m30.828253481s ago: executing program 3 (id=1022): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x80840, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'erspan0\x00', 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, &(0x7f0000000080)='size=4G\x00') socket(0xa, 0x3, 0x3a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = fsopen(&(0x7f0000000040)='cramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/machinecheck/machinecheck0/ignore_ce\x00', 0x2, 0x42) write(r4, &(0x7f0000000100)='1\x00', 0x2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x8, 0x0, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x800, 0x1, 0x0) mkdirat(r1, &(0x7f00000001c0)='./file0\x00', 0x109) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20008030) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r5, &(0x7f0000002380)={0x2020}, 0x2020) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) 11m29.110271382s ago: executing program 3 (id=1027): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mydev\x00', 0x1ff) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x2c, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x10b85, 0x49800}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) mount(0x0, &(0x7f0000000200)='./mydev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mydev/ttyS0\x00', 0x2, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x1e) 11m28.944230708s ago: executing program 3 (id=1030): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000280)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r2, r4, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) statx(r5, 0x0, 0x1000, 0xc91802293bb1c2d9, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r8, 0x4008ae9c, &(0x7f0000000200)={0x1, 0x5, 0x9}) r9 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000002380), 0x2, 0x0) ioctl$VIDIOC_S_PARM(r9, 0xc0cc5616, &(0x7f0000002540)={0xd, @raw_data="2535d89b9903d767c07028ae8f158dbee2a595b1447ed73ef79eea4941d4dcfa74373fa78a0e6893dc2444e11d5b542859e80f69eb3c217024944f65a52cd66df1b5e0e9d1f3158a7edf9297b024c93d2d2f4c714af0ad5f52a7f6bf765b1e988b0cee92fad33ad38b2d11d153641f72ef36bac9d97dbb41635f523ff9557fdd496e70b95b21f411bfc83d9bf847162f93568030910e8c10efd0f66ecb45f4926b6bd0181f6d4e5a716a30a050f63d6c73b0b708d7a372d1be4a04bc01c52023f98a6e429e1ca893"}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x293, 0x0, 0x6}]}) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000280)={@multicast, @random="8a6274485194", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x48, 0x11, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, @mcast2, {[], {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x4, 0x3, "7d91b3ccaf4c63521df8f969a9a3ef8377d86e2c440fb055", "8fc99fa615e832d5f00ce4a5807ebb53fbfc8fbe4761a7cfe44dcf957dbdc946"}}}}}}}, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0) 11m27.989919034s ago: executing program 3 (id=1037): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) flock(0xffffffffffffffff, 0x1) flock(0xffffffffffffffff, 0x1) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000000b80)={0x1c, 0x0, &(0x7f0000000600)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000b00)}) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 11m27.58853985s ago: executing program 3 (id=1038): r0 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b24, &(0x7f0000000040)={'wlan0\x00'}) 11m27.343293299s ago: executing program 35 (id=1038): r0 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b24, &(0x7f0000000040)={'wlan0\x00'}) 7m58.586387789s ago: executing program 1 (id=1587): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_setup(0xf00, &(0x7f0000000440)={0x0, 0x5961, 0x10000, 0x2, 0x4d}, &(0x7f0000000540), &(0x7f0000000400), &(0x7f0000000500)) socket(0x1d, 0x2, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x100000000000000) 7m57.216970937s ago: executing program 1 (id=1591): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @func_proto]}}, 0x0, 0x4a}, 0x28) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000000)) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/resume_offset', 0x20001, 0x4) unshare(0x6020400) fdatasync(r3) timer_settime(0x0, 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x9e9d1000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x20000000) 7m56.876899339s ago: executing program 1 (id=1593): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0x5, "baf4fe9872"}, &(0x7f0000000040)=0xd) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x3, 0x40483) ioctl$VIDIOC_DQEVENT(r3, 0x80885659, 0x0) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_fuse_handle_req(r4, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) socket$nl_route(0x10, 0x3, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x3, 0x80, 0x1}, 0x0, &(0x7f0000002080)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x663, 0x7fffffff}, 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x20000, 0x0}, &(0x7f0000000240)="588d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000140)={r1, 0x1}, 0x8) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) sendmsg$inet(r0, 0x0, 0x40000) 7m55.801890632s ago: executing program 1 (id=1598): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180), 0x0, 0xe7, &(0x7f00000001c0)=[{}], 0x8, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0xa0, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x18, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x94) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000300)='./file0\x00', 0x0, 0x8b7840, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)=ANY=[@ANYRESOCT=r1, @ANYRESDEC, @ANYRESDEC=r5, @ANYRES8=r3, @ANYRES32=r4], 0x48) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xa0000004}) 7m55.622657978s ago: executing program 1 (id=1599): r0 = userfaultfd(0x0) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) syz_open_procfs(0x0, &(0x7f0000000380)='net/udplite\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0xff, 0x7fff0003}]}) setreuid(0xffffffffffffffff, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB='subj_role=xfrm0\x00,measure,subj_role=!,obj_user=$,$}+%\\!,wner>\x00'/72, @ANYRESDEC=0x0, @ANYBLOB=',fsuuid=2]024d91-66f3-4e0c-8fb6-bae1dd59,\x00']) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2, 0x80805, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_int(r6, 0x6, 0x5, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r6, &(0x7f0000000240)="b6", 0x1, 0x200080c1, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x1000008}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000000)='cdg', 0x3) shutdown(r6, 0x1) fanotify_mark(0xffffffffffffffff, 0x51, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSLABEL(r2, 0x800452d2, &(0x7f0000000100)) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x0) 7m54.775179754s ago: executing program 1 (id=1602): socket(0x27, 0x3, 0x2) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_usb_connect(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0xa12, 0x5d10, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x81, 0x3, 0x40, 0x1}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x86, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 7m54.415117039s ago: executing program 36 (id=1602): socket(0x27, 0x3, 0x2) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_usb_connect(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0xa12, 0x5d10, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x81, 0x3, 0x40, 0x1}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x86, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 6m22.735673756s ago: executing program 8 (id=1876): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfd000/0x400000)=nil) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r3 = socket(0x1d, 0x2, 0x6) sendfile(r3, r1, &(0x7f00000001c0)=0x1, 0xffffffffffffffff) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x2, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0}]) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}]}, 0x3c}}, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) r7 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x8814) write$proc_mixer(r7, 0x0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) file_setattr(0xffffffffffffffff, 0x0, &(0x7f0000000900)={0x0, 0xd7, 0xb, 0xb, 0x57519be7}, 0xfffffffffffffe7a, 0x1000) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3) syz_kvm_setup_cpu$x86(r9, r2, &(0x7f0000c66000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="66bad104b0f7ee67660f38812d0f01cb660f38819f009000008fc878c37443ef55c744240006000000c74424021ec15d98c7442406000000000f011c24c4e295ba96000000008fc97c80f40fc7a970f3f655d8a1bfffffff", 0x58}], 0x1, 0x4, &(0x7f0000000140), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2000, 0x20) r11 = fanotify_init(0xf00, 0x1000) fanotify_mark(r11, 0x105, 0x10000839, r10, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x400, 0x34) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 6m21.062040651s ago: executing program 8 (id=1882): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00"/62], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000001c0)=r4, 0x4) sendmsg$inet(r6, &(0x7f0000001880)={0x0, 0x0, 0x0}, 0x48c0) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x5}) ioctl$UFFDIO_CONTINUE(r7, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r8 = socket$netlink(0x10, 0x3, 0xf) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x696080, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r9, 0xc008aec1, &(0x7f0000000340)={0x9, 0x0, [{0x4, 0x4, 0x5, 0x25db, 0x4, 0x4, 0x4}, {0xd, 0x3, 0x2, 0x1, 0x6, 0x10000, 0x6}, {0xc0000000, 0x8, 0x1, 0x8, 0x7, 0x0, 0x20000080}, {0x80000007, 0x49, 0x1, 0x9, 0x3, 0x8001, 0x10000}, {0x4, 0x7, 0x6, 0x5, 0x9, 0x40, 0x90}, {0x80000000, 0x0, 0x0, 0x5, 0x1, 0xee77, 0x6}, {0x80000008, 0x6, 0x1, 0x2f22, 0x7f, 0xfffffeff, 0x6}, {0x0, 0x25, 0x0, 0xa, 0xd0ac, 0x7}, {0x40000001, 0x9, 0x4, 0x40, 0xbf4, 0x8, 0x1}]}) r10 = socket(0x2, 0x80805, 0x0) ioctl$sock_inet_SIOCSARP(r10, 0x80108906, 0x0) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_clone(0x80808000, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0xc0000100, 0x0, 0x2066}]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) syz_usb_connect$midi(0x1, 0x3e, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x4752, 0x11, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2c, 0x1, 0x1, 0xfe, 0x10, 0x81, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x0, 0x6, [], [{{0x9, 0x5, 0xa, 0xb, 0x40, 0xf, 0xd7, 0x2, {0x4}}}, {{0x9, 0x5, 0xe, 0x2, 0x7ff, 0x6d, 0x72, 0x4, {0x4}}}]}}}}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x241a1, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="350d0000000000003000128008000100687372002400028008000200", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r12], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 6m17.207235646s ago: executing program 8 (id=1889): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @func_proto]}}, 0x0, 0x4a}, 0x28) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000000)) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/resume_offset', 0x20001, 0x4) unshare(0x6020400) fdatasync(r3) timer_settime(0x0, 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x9e9d1000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x20000000) 6m16.128647131s ago: executing program 8 (id=1892): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x128}, 0x4004004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket(0x10, 0x80002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f00000000c0)='./file0/../file0\x00') mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x2acd0da, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000340)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r4 = dup(r3) syz_ublk_add_dev(r4, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xf7be, 0x40, 0xfffffffa, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000000, 0x94}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f73, 0x2, 0x40040001, 0x1f2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a41, 0x800, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x2f, 0xfc, 0x81, 0x3ab, 0x10, @rand_addr=' \x01\x00', @private2, 0x20, 0x7, 0x5a6, 0xc}}) sendmsg$can_raw(r5, &(0x7f0000000580)={&(0x7f0000000480)={0x1d, r6}, 0x10, &(0x7f0000000540)={&(0x7f00000004c0)=@canfd={{0x3, 0x0, 0x0, 0x1}, 0xb, 0x2, 0x0, 0x0, "56158da3b8b96a02697d5f7fbd673b38273788d8f74fbad105dbb03386fbbe7b567aaf9ec5a701b2c9d0803c548969aab0a1a1f1bb8e6ab4b3290390c5350c1e"}, 0x48}, 0x1, 0x0, 0x0, 0xe001}, 0x200000c4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./proc/net/afs/sysname\x00', &(0x7f0000000600)='debugfs\x00', 0x2010, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/net/afs/sysname\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x401, 0x2}, &(0x7f00000002c0)=0x10) write(r7, &(0x7f0000000280)='.', 0x1) mlock2(&(0x7f00001e7000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 6m14.390372223s ago: executing program 8 (id=1898): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 6m13.264718347s ago: executing program 8 (id=1905): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) io_uring_setup(0x1195, &(0x7f00000005c0)={0x0, 0x2349, 0x20, 0x2, 0x19c, 0x0, r1}) syz_clone3(0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000001000ffff28bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="715a0300231a05003c0012800b00010069703667726500002c00028014f424a8b1000000000000000000000000000000140007000000000000000000000000000000010d"], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x804) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000020000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b0000", @ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_notify(r6, &(0x7f0000000000)={0x0, 0x26, 0x0, @thr={&(0x7f0000000840)="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", &(0x7f0000001100)="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"}}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="2015a2000000941339e399fb0d5301010000e2487f41868d71455aa0e63fe29305a5eb72b5e9140108ef873b9a1382cf011978000011ad7b64a18f147e68dea2fbe048e73c578396e08f304687ce29f74da45053df9dbc0cdca73eb9810591b24f25b98a18d866a7733384eba09127db1f3785764c69f9943e63c8d1f21af5dc3bab5e1f29b0f302f60cb615ed790b5faf9fef85063dfaf3b21bcec5edd105670f1b1b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100015ae4c41096050100f5050100030109021b0001000000000904d60001b5e14500090583"], 0x0) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000002c0)=ANY=[@ANYBLOB="200310"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) syz_usb_control_io$uac2(r7, 0x0, 0x0) read$FUSE(r6, 0x0, 0x0) getpid() r8 = syz_pidfd_open(0x0, 0x0) setns(r8, 0x24020000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) listns(&(0x7f00000010c0)={0x20, 0x0, 0x7}, &(0x7f0000000040)=[0x0], 0xf4240, 0x0) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB="34100000", @ANYRES16=r9, @ANYBLOB="01000000000000000000010000000c000480050003000100000008000200010000000400088008000100ffffffff"], 0x34}}, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES64, @ANYRES16=r9, @ANYBLOB="010028bd7000ffdbdf250300000008000100ffffffff"], 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000) preadv2(r2, &(0x7f00000004c0)=[{&(0x7f00000001c0)=""/107, 0x6b}, {&(0x7f0000000380)=""/82, 0x52}, {&(0x7f0000000400)=""/130, 0x82}], 0x3, 0x9, 0x6, 0x16) 6m12.830660859s ago: executing program 37 (id=1905): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) io_uring_setup(0x1195, &(0x7f00000005c0)={0x0, 0x2349, 0x20, 0x2, 0x19c, 0x0, r1}) syz_clone3(0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000001000ffff28bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="715a0300231a05003c0012800b00010069703667726500002c00028014f424a8b1000000000000000000000000000000140007000000000000000000000000000000010d"], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x804) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000020000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b0000", @ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_notify(r6, &(0x7f0000000000)={0x0, 0x26, 0x0, @thr={&(0x7f0000000840)="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", &(0x7f0000001100)="960f3bf114500c188279b91788a82a5aa3a38d04ce9c6e200a5dcff7dfdca078f41685e9b74bf2efe2b8de5933310b0f3a371274108e90bcbc60fb569bf9e4c5f2e24ae9951f0ea94ea452fb895b6463faa71d7b87034b31471184b0e1b0c9bcaa43c0023dfeca3651dd911f1876d113a555fb3f299e626d6f2fa48ae508c0f0a5fa79e11c4f2c6d796640054824f41d43c40da6c80392d67eeb0548a9cd28cd6a1c6591e4b05ac96c1adb69aa99c64dc86a45c741db65fb01e71d5d7e72d1c4a74db527354c30603328fea2c0a3817454a3f55507973e89d494d80884884f9cb07e73462dadba69d8e4c08906d1b761270165539b93e75011ec13b482c6555259248564bfea19786dc719750c65fb36304a27626be08acc53eabb16f040df77e566f0258f618c792dccc187713e5361b0f0ad7e34ab907d86f108bdef04bd3089b9897e5b5ca28237956e4b75db732941e146d831a9ea3e2ce3e0e06c6f71459fda6274448ba8bd707415237f16246253a8ec9d9a40ef5419b8f8a6c7a6a524ce7f78fd608e3a44fa874765553ae151c0cef775361a90e794d8376aa77e56369dadb1bd2dc7d2c63facec981e3bd8a92739fdd4baab77bb4222a30d57af655453c79d123442e871745c3865334199df939d64057c6f0e5d040c350a1dfe878b8658f6ccba280f3c8a94822979f78ec60aa84854f7ab2d550af9bdf3e8d3c3c3118500bb13264d954fa1e21747a29ebc286cf6807b4979a6e45e819fe2efbdf151263ee1bb39d1d8f9d13306a65713bfc65246f52b40a98e7c78475b8b2796f8736c089963ea89bd7abd3f953fb935b192213cc9babc2da7f241edafdca9fe0a387cd35a283ec16db8e5fa688996ca15e82ddf3010b2acb21b406cf5ff208e1879d991a3e98c2fd20cf8112bd8d3b6e05be0f4898bf14af6a5f6dee35e3affd4340bb88c9444c3df8be6d3c0c60be251deba2838c179f919d8c45dcd49e8f783ece83c3bd385e2c999d442bb8429c20baa4f07c7b096b058a119e61e6ef3313fda0c7e8054a8dd88c445127d2f121cca5093febfd04dff8d2790dd2bf6a1c4f9e3703a2c0451749970e563688daf218b2e574d419779224f7d6dfe608a18664509de942bcdabaaaccfe201424363631295477c4678f9c3a66dd2d9b78ef6f3c43d399874a3e6a982733c014d2d4289befad9c0a42d4b3a9ba98d72c15c940c8fd61885fcb4d3349b6f0cb7f914d8df2e555fdf3f3ab20a145773fbeba9690eaf7bd8526e919d2cd97fdcc8de3453813f092657c54f790ab5c314b5013096034099e55f50e62e73828b144254bfd26340b67ae3e9357e82efc26bc740303750822c402e6dc46937698eeee7dce36d4b4b2bd986d67bc2d9fb81917b09622a4d918b224c6856ebdbaae0e97e3c584f45f20ed182b49be58f7160fbafb9fc8649b97801512c87a2133e391329fb66cf4aec32e044f5d77c0cb7bc14f2bb17f2037453cb6a828380ea97acb5d231a124f8f9e26ee4109bdc09afb904ed1f40caefea6a8c13376f87364e3aeffb52af1dbcfe6c868e8f1fd03bb37b3130ea21f0069b43fa95d3ca7ae08a3c8ba5b963fa5134fbcd9800452d7a18f9f1ac99e9d1c9315593409b780c8b04e68a7aa242bd28d401c1ce7eae3b2ca851c7375306ca4cf5ab11c0bbb0d836847203a9f4bb66479561d6af1a0c13d666c479c31ffdbddd9bbd89d40c27f7eb3ad5bdd451d7fb4c39b00b703e1f701c52aafbe3e6fd7285c424bc7c6f63aa94e5f393bd54dc180aa97280acd85aa1e180a1beccdd7658247afdc65e16f95ec41b5734bc75c5dfd72773a03a13a580bcec0296e172e45e5237d46f1c177aba46a58cffcf77e4dafeaec45b931b1833d88cb093d34025d363d20661ef38b87964cef4cb821c315c953f7e694be3846e155ede171af2f47316a06ea7b293e1946aac98de99bd99427b34f2913b2c4cedca5df73aec30d2ca3f5a138ff966acefd949fbfb33effd4de35f78d2dab9953bb2f8d6bf4209983681660e9a36716458bda0e5531564968f8846cf6cb5ed06eb73e012e5c50588c7f51eade7d263ee41ae45727b73d8f7ddec32fb9dc80fbe320b43aed1a97ebae5aac811027902dc4c4a9c2e72d9173a7eb18feb7c82cbe86e6058faa994edeae058a48ed2d09206cd236d94e4128bafd998daf4e0b094957b4e87871f74edad16620367a10dff7ddcea4adae973c5e02faa7e105a4598d953b5c737070831a1316c89d010c3e906f3deb8752ecf2c906bc571a388168a1d48eac5caa4857fa27a160d41cf95d28698ac4e72071381c23f5f4981b39c8a0fee4b27c08b99b1b09db7cfff5c13bfac37847613c96c8e54cbc321c9f7a09442b69e924de81a74baec374eeb8c094941cb89ede7d212f1265534edec9c2a5542a00c39d1163e37559c2acc41643f8068e675b06cb89f2900dafcf1eb46e81890685aa8361f145caac10f42c63b38411c4a37f1cd2873eb3be2b9ac8adf81283e08f59b6366c5e0e286735da0ab3833a41ff2d35ba49e4f543275ba7a3deddda5dc34e7e6580310498c755663c9ecd88b81b623445b704be8fa4f120ed8e02d70992e9446bed0703766f4ce3a8dcaa9426e39a95bf45ce54aabdade097de81d8ae7748077410b4584b4e5c238029f0fe8e26342f986194b5e7aa289ad7be33b534284afe5537af7e0147734b99dca16445694d82690027d8bae4b7b2a92772cf384c33409e6099261b79dca83b830590da784935ed0044cd14f2cb6b737708eb7562a680402c507643df5a2949f2f0ceaad4ca5186bd3d779d1d01d5e7d908c6d32446ceb58e872f33f340f80e4ad950869b255a36a0e12aa8e208815a0f5cd7ccf430db10f310c22bc49c747c051e680fba8dbef79cb5c6f6acd42c956993e1e180005b821aa2717495023a24da0db1e5422a7635931fbee36bf70f32cd9ab0b97c465f4edda2a3193c2611588dbbd7aba365d0620d60befe9f5df4bbd59b217a2c63353f0e247c5a34f68b1da0fefebad5509648acdbb1f1d8edaa3e896358a3769ea616e74c761c17d0a2bbb7a60183d8d5f9959195b278a93888eff35a46afa1ecbe02ec1a4aff7371c8cee7c7d20d23c3863d9139afd2629415399434ea1f86c4e37e44fa7c6e75c6d864d0af62664a59c7018848746c4877755312a3ffb36d40d31b11c847431a0d07a723c3cc3f2a9573657e63c3db761fe072078ef4ba7fc003dbedec9fee2dc0c141fe9369906bc2be0c401586256aa3664711693868d357af12db020f89a370fa609d7012593c86cbd574aaa01133a3b6a8b65304478fc59c678b6dbbcfe7985ac2c6df5f64289928d68d9150deb3f4c4096b019c570559ac3cc00b8916246968b83f0fed20a7522d7f14036793b5dcaa69eb8b5cc20953b61689a16489473f2a390c121b7415aae46d2ba5cc1b1d38ce20ce9ebf947d1d31d69ca50c11c59cd1658a87813a4a479c03c140c4f89d64199750b06659552b37a6e1f974ee3e96243f2a82c30053a66d4512fad2169710ae969885d39ab138af0eb10649cbef8401420476f958f0efa9d342fa832c0adca63f19f30c08726b33e40ea48f4da81e4b7377a8697cf3a5bd0420ab0182a98944384ada08cc36fc12da5cb669558f93fd6947e0040d3324de5c5042af1c9b8958c379544336900b4c5a5c93eea3622bb2017206d9af7cda0c3d58a606adc868e25a1faeac4394f3aa2bf74fbd257b3870c917c31156e4b45138e2970235fa510ec24c20f17d3102e4481185780ca5f0017467ad609eec7f8959263894d0804671f7d3bccb97ba64e9c21fdecef8412e814bec963a52fa4d8f3f474b939b7fba48b6f0bc01bdad7f769a283daaf9ff2881ca864f7b4ba9eb73d472a3fb4ddbd8c4bda2833639af09cd54819916e9e739cc664c9a19ac60aace4094637ee2f46873f4ac5b26ab45bee295fd8dfa06adc39b8df6fc002fdbf898c51dae86f1d1cd47efa851b7e031d713f1fe9d19775981ee14d7bd3043160dfd9b22d122a1ccf4f7001d3793615e063ff0149795b92993207c9735936ddc0360cace106f54b342adc98076b1497f70b5ea29e884246e89bad0ed793f1816430ffa318d6527c8d17f9232502bf4ae83d73c3af220a5a6e4c19c325e7a2e03fcd858e2c196abb06c98b7d77be4f06478d704b6e1f88c68db0938d72310e420e34b676360bd72fd0537fc5d78ed3fbc968a5f3ac061c804d87287c6edeca91fcafe9a9d9fd160d699926d45d301749f6001fd85e73d328cf611c0cfbdf74bd48376e8fa5da42422b56a8af4fc2e86c9a2816ae5a075348fd5cdfe7c3d8560f2d1c2a3e6b276977ac75aec4e5d55555b139f8ace828cb588060c72626b621b96af2c36ecd0a3a097f81876aaab47e18bc51cae916c9d0235de46fb8706909440f7e972faa7c3a095dfd24a6fa34e05d90fe76f6f4d5e17630eb61561f9e3b4ff2c84d6852b6b3dadb2c205aaf6457604292d5ca09ad2e4bbb64ab772366d6f198cd0378eea1ebc2f0fb83af085950a29405734ecc164f8d7726e1abeb12b61da60a62fbacd8fc0e54b3528d78376b5e7db0f42b7108628ab6dde5fbf7ecfc1f40ddf7ce63cf66c29039acea8b85b1dabf4031010059c8750d81e0a1ab671edf428b938262ab7bd88fefde58d8b45b1b0ce5586c7b945f552a40147113f4f28d458d1c8b6794be4fec89cceba7deb22e0697bfad181bc75cffc91e12bc9990f30dee8123eb9d0589e5cb3af05a895012553f3bdcff3ca9aea546e5500b457b89c5a05a102105f917aa9c2e356adb1d653239dd6f0e4ae6164216dc9466fd319fe61d4f50de63f3fe4baee5e7729ea259c132e83739ea2b4cf8bc799b2eb495b7401b4402dd34cafd9a2b657ff1597bb65597cf4df14a3385f5f7c4f7083f3711d8a0b15555c26183b753bfe91700a9ad2805ad0083ee1fe5aa02c1292169b8d08e7c540c01c385f0a1af010afeb637e55cb3a1a6f06e2ad50eaafdd2d12e65f1a844cf5d1b6b15ce3f99fe575ffb6d666cb3d701a1ea710989237c508ae6f7694fc25b8f7753c330a9a906ec00e7efbcf6eb81c89284140bd715053ac97270afdef04098ab2e2830f5269e7c43d4e386f42cc7df96bfc5d5ea01d736cfce469949c4cfe0b7427ed4054ef63413f4b215b1db4eb518754df6738a84f20dc1ea4b815d77489777c1938cf1dac269bc52e2d9dfca3878aabc745e12d50b9e94570c4b84a0b54174f3abcd7f272450adcc52090a055bccad5728e10ae3d5e8fa9e8a35edc679c92b539082199ebe2be89cc7104f96a62b3638926f19aadf87524f9c76766effb737c9fa11ca5c718d79cafb6263475eba2f0f40544d262471d4a8cfb2602b8f48dc311ad09259052b22d0f9f61b939c736af88cf52144e96915181470cfae83da9ef9c6bcdbb1f488f545741a44eecd98d9dd7a0e8ea5fdd8fd073099edb9e598f846a54583ff91bf7b4d2ff00ff141f273a436b2d5c749e362b3251287ae2a8a129755c4c85ab0eb2bea537ea2304b751698a91519c009280581f8a3cd67b649d7c53a8040762bd1bfeff1e2410b90635ed4c15caa04975bf9af5fd15a02b5d57e33a13f98032f95eea6ac4c8761a0f2eb2299f1b2d03269cb3691f2631b2660c5c402c4103f4eb10560d1c4125dd5c4b04296a65fad05bb5d8883e5609f75091e34844155011d7d2aac10ce5eada8eae384c2b78b668b2523310a16a7662493852da96cb9cc177eec8bfe6682ad1dd97b61261295"}}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="2015a2000000941339e399fb0d5301010000e2487f41868d71455aa0e63fe29305a5eb72b5e9140108ef873b9a1382cf011978000011ad7b64a18f147e68dea2fbe048e73c578396e08f304687ce29f74da45053df9dbc0cdca73eb9810591b24f25b98a18d866a7733384eba09127db1f3785764c69f9943e63c8d1f21af5dc3bab5e1f29b0f302f60cb615ed790b5faf9fef85063dfaf3b21bcec5edd105670f1b1b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100015ae4c41096050100f5050100030109021b0001000000000904d60001b5e14500090583"], 0x0) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000002c0)=ANY=[@ANYBLOB="200310"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) syz_usb_control_io$uac2(r7, 0x0, 0x0) read$FUSE(r6, 0x0, 0x0) getpid() r8 = syz_pidfd_open(0x0, 0x0) setns(r8, 0x24020000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) listns(&(0x7f00000010c0)={0x20, 0x0, 0x7}, &(0x7f0000000040)=[0x0], 0xf4240, 0x0) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB="34100000", @ANYRES16=r9, @ANYBLOB="01000000000000000000010000000c000480050003000100000008000200010000000400088008000100ffffffff"], 0x34}}, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES64, @ANYRES16=r9, @ANYBLOB="010028bd7000ffdbdf250300000008000100ffffffff"], 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000) preadv2(r2, &(0x7f00000004c0)=[{&(0x7f00000001c0)=""/107, 0x6b}, {&(0x7f0000000380)=""/82, 0x52}, {&(0x7f0000000400)=""/130, 0x82}], 0x3, 0x9, 0x6, 0x16) 2m20.002663245s ago: executing program 9 (id=2663): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'veth1_to_bridge\x00', 0x0}) (async, rerun: 64) r4 = socket$igmp(0x2, 0x3, 0x2) (rerun: 64) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000040), 0x4) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000ffff26bd7001fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2d97030058e5050008000a00", @ANYRES32=r1, @ANYBLOB="140024800006e35ed1f80000", @ANYRES32=r3, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2004804}, 0x8000002) (rerun: 64) 2m19.578520226s ago: executing program 9 (id=2664): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000240)=0x6c) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x9000) syz_open_dev$usbfs(0x0, 0x205, 0x420401) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x8001, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) capset(&(0x7f00000001c0)={0x19980330}, &(0x7f0000000080)={0x200006, 0x6, 0x1, 0x9, 0x2, 0x2}) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)="576a7d0e999d954e172e9a0814", 0xd}, {0x0}], 0x2) r2 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000d00)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, '\xfc\xec\xd1\xcb\x9a\x964\xf4\xa2\x89v\x12\x11\fG\\x00#\x00f\xe1>8\x94\x02O\x9b\xfc\xe8\xffTioP6\xfa\x9b#\xc4H\xbf\'\x18\x89\xd1^a\xf6\xccrS\x1d\xd7\xc3\xcb9\x02\x00\x00\x00+\xb5\x81\xbe\xc4\v\xe2?\xa8\xc4\x9f\xd84\xdd\x84\xf7\xe4H\xeb1a=1\xf7\x99\x9a042\x15\xeb\xe1\xa7\x05\x8f\xc4\xc3\xd3da\xef>#\xb92\x82\x06\xbb\x19\xf6\x92\x83\\AU\x17\xbaf\xc7\xb7h\xf8\xd2\"\xce\xc8UB\xe5\xf3\xaa\x05Y\xc0\xe1\xe3\\\xc4K\xc2\x97\xb2\x10\x03\x14m=\xd8z,\x8dSo\x99H\x87Y|)\x82`R\xe1\xe5I\xbf}\x06\xb3\aD\xff\x10\x91\xc8\xc0^f\xc7\xb8jN\x9a8\xab\xc6\x86\xab\xdbWyNd,\x97\xea\xb4(\x97x\x98#\xca\xf0N%X\x01.\xc4M\x9ajWT\xf2\xf7\xbb8\xb2\xcc<]\x06\b\xc4\xd5\xde\xf4\xb5\xdd\x7f\xf2\xf8S}q\xe7\xcdZ\xee\xe5\x9f\x19\x11S\x9fVzv\xf7\x04\xe8\xeb\x10z\xd7qy\x17r\x1bV\xb1\xd8\xdb\x061h\xc6\xfb\x84\b\x1a\xd6\x10\xdd\x95$$\xa1\x91=\xa67\xb6\xd8\x12\x88c\xa1\xbe[\xe4\xe0\xc7G\xca\xe3U\xde\xa9\xafU\x15\x93\xed},\xcaE\xba;\xc7yk\xaf8\xa4*Je\x13J\x88\x8bR2\xc0LV\xc1P\\\xe3\xec\x954\x8e>\xa4\xd80\x97\x963f\xdd\x8e\xc5\xdf\x9a.F\x06\x82\xcfg\xe8\xb6V\x92\x944K9F#\xdc\xf4\"', 0x3a, './file0'}, 0x2b0) chroot(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="c80000001000a54627bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="150c000000000000a000128009000100766c616e000000009000028006000100040000000c0002001c00000010000000280004800c000142addfcb2b2c3477000300010008000000f30000000bfa0100050000000b000003080003800c00010001800000ffff00000c0001000600000001f0ffff0c00010007000000040000000c00010001000100070000001c0004800c000100ff010000060000000c000100000000000a00000008000500", @ANYRES32=r4], 0xc8}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) r5 = syz_usb_connect(0x0, 0x32, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102", @ANYBLOB="f5e592784e2b1a302a9000186f56c8c9b5b3362a047be14ba532f7e2ce0fa7f262cdeb4df9ce6e4bd183382fad31522e6858a230e2fb1a7aa7d02716ca1094c09e6796494bff1a8e7e7696172eded3508db08bf22e4a358db3f932f638d9c22ed17d84c1f601aa77e64958b26f09be1c612f97e548026747866dce0ef26243f12bd14e54bf0d22570c7d6f444beb0014b1498bc7536afb4a73b52815baea05c8c338fa752eb73edc93d9a68e12da92375bf1dc645a6947c36878299d5e88"], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="20c81e0000004d61501d010000100000000000800700000000000038040000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) 2m16.45205747s ago: executing program 9 (id=2676): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x28}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r11, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r12 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r12, 0xc0205648, &(0x7f00000000c0)={0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90d, 0x9c, '\x00', @p_u8=&(0x7f0000000100)=0x6}}) listen(r0, 0xbab8) 2m15.261946092s ago: executing program 9 (id=2681): r0 = socket$packet(0x11, 0x0, 0x300) msgsnd(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000f4a61ba60000a300"/24], 0x8, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@remote, 0x8000000, 0x0, 0x1, 0x1, 0x66}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x8000000, 0x1, 0xfe, 0x3, 0x0, 0x9}, 0x20) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0xfffffffd, 0x3f) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) r4 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000200)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xfa, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xab, 0x20, 0x3, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x0, 0x3, {0x9, 0x21, 0x4, 0x7, 0x1, {0x22, 0x71f}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc, 0x4, 0xf}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x4, 0x0, 0xe5}}]}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0xf, 0x9, 0x9, 0x8, 0x3}, 0x3a, &(0x7f0000000280)={0x5, 0xf, 0x3a, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x3, 0x3, 0x5}, @ssp_cap={0x10, 0x10, 0xa, 0xd1, 0x1, 0x7, 0x0, 0xf, [0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x9, 0x5, 0x40}, @generic={0xa, 0x10, 0x2, "23d3c0f7547423"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x5, 0xdf, 0x81}]}, 0x6, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc07}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x240a}}, {0x9e, &(0x7f0000000340)=@string={0x9e, 0x3, "ed5c1fc75dae3dc2c39b64cc78b16b79fdfd7046b077a4f6df04e992cb133c5fab7fc776a7682e379d88b6e6f1a1f75197ae139a22c5d772a2827063b85bf528f52c086781c2d247bf7d47300d0290d937db090e5f015ef13c1e7b29d8defe770d3df2153355fe53b492c98be48364f121e86461506c46cfa81d78fdb08bfab1325f7f72e07c9e3f82f2db71a38ef91c1609d73357c925eb4aa0d113"}}, {0xdb, &(0x7f0000000400)=@string={0xdb, 0x3, "aec13d40a1b94d7b8886658bfa04fb3966112362285e1fa99b71f2654c5cde9d42d37cf69b4c8335b7bc36ab26e206939d1d312adcc89526026c9279ecd8bbfbd4d075779fb846bcb4979b2738761dcac9b17d15d9b19aa9d90fde860598e12ac1772612791886da73b863ae5e660aadb943cae4fe66da63ff5bfa01c082a51295a40155e163e4ec3708fb1748de6bf0983df916fc4ab473f6416e6a4b2c3f2d2e2e59e97d3bb4903c4163d8ee45b8181c13fd9910a6c53f3b162012786bbdce02fceec95dba4c3eebddc97f0a33d8f3edd12e72a3607ea409"}}, {0x55, &(0x7f0000000500)=@string={0x55, 0x3, "29576a31928e1697c4faad77e1341303dad25d91d9b71c353cb6a41a61af3dbdfe942f72570def37b0e0b1b2a69ede00638a18cecc86c6106334992fffc51fd06ec7f651422c0acbd30c346c0f3710152009a3"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x42a}}]}) syz_usb_control_io$hid(r4, &(0x7f0000000780)={0x24, &(0x7f0000000640)={0x0, 0x22, 0x3f, {0x3f, 0xe, "ec404eb5640cd000c977f7b38615b16a6c2a6d5b4cd02641a7a9bede3f721a99ea9d6576b5a921391ff853d90aa0ceb59d88e288baa67a7bdf6e3b70e5"}}, &(0x7f00000006c0)={0x0, 0x3, 0x24, @string={0x24, 0x3, "d21bf25534a55cddc18c5c9b86bf40b610560079dbba25a7011f1df0274d27a7dbac"}}, &(0x7f0000000700)={0x0, 0x22, 0xd, {[@local=@item_4={0x3, 0x2, 0xb, "4e6989da"}, @global=@item_4={0x3, 0x1, 0x8, "429e4102"}, @local=@item_012={0x2, 0x2, 0x9, "8372"}]}}, &(0x7f0000000740)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x6, 0x1, {0x22, 0x974}}}}, &(0x7f0000000a40)={0x2c, &(0x7f00000007c0)={0x0, 0x16, 0xc7, "c8899a4139df088475216292bd3f4ed7cb0a7c666df196a11dd02dd077bcfedb9855c0e1b91b0fb7e92bf98aaaa2345fe8deb5a37d7711a2b551e40ce89b10d23c02f0d217dd95ed5036cae90608a9a2dc63875e8b7c7e38558d126155d2b40aaf8ab4385540632cf2f290f95650cc60a8b8cd20069d91c3355c8fcac31187be7bf2754a755623046d5abe8eaf9cad0d19fda0654daef2bdce84194b07cb10307a2c53392c15e14374d752388f7797a684d72416f8cf8ad127368661b18f3445c18832211e51f3"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000940)={0x20, 0x1, 0xac, "c222b168e4d5a1a31b6af6795fccc8240226efe8343decb873fe372cc16ccb44208f458e5d9b2af4e08421a81e732da9ec90ff73de93c0333228111fdc873351dfa547c08c41750b28fc1cdac8f945c3273ed48dfa99addaab94f2c8698433851a99b4c0abed9d88d4fa9f907a6dcc3a4271bf199685f810c26e6d6416ba0d0853933908b1e508a7049cd914347177953b5d2febfb2cf062b95ccdd87c117a48b975fc5cf2b8afc9c417c3b2"}, &(0x7f0000000a00)={0x20, 0x3, 0x1, 0x8}}) ppoll(&(0x7f0000000000)=[{r0, 0x2}, {r0, 0x100}, {r1, 0x1010}], 0x3, &(0x7f0000000100)={r2, r3+10000000}, &(0x7f0000000140)={[0xdb68]}, 0x8) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3b, 0x1000, 0x200, 0x770, 0xfffffffc, 0xbabd}, 0x1c) 2m11.396697894s ago: executing program 9 (id=2692): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000100)='./file1\x00') r2 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x1e5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x401, 0xfffffffa, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1705, 0x2046bbf}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) pipe2$9p(&(0x7f0000000000), 0x84800) write$P9_RCREATE(r3, &(0x7f0000000080)={0x18, 0x73, 0x1, {{0x10, 0x0, 0x10000000001}, 0x7}}, 0x18) 2m9.752350144s ago: executing program 9 (id=2697): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl(r2, 0x8914, &(0x7f0000000400)="736c300000000000000000000000000001") mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000580)) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/ttyGS0\x00', 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000d40)={0x14, 0x88, 0xfa00, {r5, 0x30, 0x0, @ib={0x1b, 0x7a, 0x889, {}, 0x1119dff, 0xffffffff80000002, 0xcd41}}}, 0xfffffd74) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, {0xa, 0x4e28, 0x3, @dev={0xfe, 0x80, '\x00', 0x31}, 0x2}, r5, 0x73}}, 0x48) setuid(0xee01) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r6 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000800)=0x6d) 1m54.402260232s ago: executing program 38 (id=2697): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl(r2, 0x8914, &(0x7f0000000400)="736c300000000000000000000000000001") mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000580)) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/ttyGS0\x00', 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000d40)={0x14, 0x88, 0xfa00, {r5, 0x30, 0x0, @ib={0x1b, 0x7a, 0x889, {}, 0x1119dff, 0xffffffff80000002, 0xcd41}}}, 0xfffffd74) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, {0xa, 0x4e28, 0x3, @dev={0xfe, 0x80, '\x00', 0x31}, 0x2}, r5, 0x73}}, 0x48) setuid(0xee01) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r6 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000800)=0x6d) 1m2.705667015s ago: executing program 7 (id=2892): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x40, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x4fa]}}], 0x1c) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x8) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x6a, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000040)={{0x37, 0x8}, 'port1\x00', 0x40, 0x0, 0x6, 0x4, 0xfffffffb, 0x2, 0x1, 0x0, 0x4, 0x4}) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000200)={r0, &(0x7f0000000100)='$\x00', 0x206100, &(0x7f0000000140)={@align=0xfffffffffffffffc, {0x0, 0x3, 0x1, 0xe}}, 0x8, &(0x7f0000000180), &(0x7f00000001c0)=0x3}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r5, 0x3b71, &(0x7f0000000280)={0x20, 0x0, 0x0, 0x1c, 0x1c}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000001540)={{r4, &(0x7f0000000240)='2\x00', 0x42400, &(0x7f0000000280)={@align=0x7, {0x1, 0xb, 0x9b, 0x921}}, 0x0, &(0x7f00000004c0), &(0x7f0000000500)}, {[0x5, 0x5, 0xfffffffd, 0xa]}, 0x200, 0x1000, &(0x7f0000000540)=""/4096}) bind$802154_dgram(r6, &(0x7f00000015c0)={0x24, @short={0x2, 0x0, 0xaaa2}}, 0x14) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r4, 0xc10c5541, &(0x7f0000000380)={0x8, 0x10000, 0x1}) 1m1.6408478s ago: executing program 7 (id=2899): socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20b02, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x841fa2e66efa8cfe) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x1, 0x8, 0xb01, 0x0, 0x0, {0x3, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x400c091}, 0x4) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$uinput_user_dev(r4, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000080)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x924924924924c31, 0x3ec0) readv(r5, &(0x7f00000005c0)=[{&(0x7f00000000c0)=""/175, 0xaf}], 0x1) ioctl$UI_DEV_CREATE(r4, 0x5501) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2181) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r7 = socket$phonet(0x23, 0x2, 0x1) close_range(r7, r7, 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) recvmmsg(r7, &(0x7f000000a540)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x60010100, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 1m1.16589349s ago: executing program 7 (id=2901): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYBLOB="000001001a00130700000000fcdbdf25fc00000000000000000000000000000120010000000000000000000000000001000000004e210002020000001d0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="64010103000000000000000000000000000000fe3200000000000000000000000000000000000000000000000000000006000000000000000100ffffffffffff080000000000000001000000000000000900000000000000ffffff7f0000000040050000000000000400000000000000ffffffffffffff7ffcffffffffffffffe2eb0000000000000200000000000000000000002cbd7008013500000200030050000000000000004c001200726663343130362867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000"], 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x1) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='bbr', 0x3) r6 = semget$private(0x0, 0x6, 0x0) semtimedop(r6, &(0x7f00000003c0)=[{0x0, 0xffff}], 0x1, 0x0) semctl$GETZCNT(r6, 0x0, 0xf, 0x0) sendto$inet(r5, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 1m0.107403888s ago: executing program 7 (id=2904): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='befs\x00', 0x800841, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0xdddd1000) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e04240520"], 0x7) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x40, 0x0, 0x0, 0xbacabbefe60a3201}, 0x9c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r5, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}}, 0x18) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, r1, 0x4, 0x1, 0x3}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000840)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000880)={r2, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0x19, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}}, @ldst={0x3, 0x2, 0xb, 0x0, 0xe, 0xfffffffffffffffe, 0x8}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @tail_call, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffffff01}, @map_fd={0x18, 0x6}]}, &(0x7f0000000700)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x10, '\x00', r4, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0x6, 0x3, 0xfffffffd}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000008c0)=[r6, 0x1, r7, r8], 0x0, 0x10, 0x6}, 0x94) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote, 0x1}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) sendto$inet6(r3, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0xa15f}, 0x1c) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x40000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000738000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000530000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r10 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004"], 0x50) io_uring_enter(r10, 0x2219, 0x7721, 0x16, 0x0, 0x0) 57.098380745s ago: executing program 7 (id=2916): mmap$IORING_OFF_PBUF_RING(0x0, 0xffffff13, 0x2000008, 0x11, 0xffffffffffffffff, 0x8096e97e) fanotify_init(0x10, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x47, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='algo=zstd dict=dict0 level=-', 0x1c) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000040)=@x86={0x84, 0x7, 0x8, 0x0, 0x6, 0xcd, 0x5, 0x40, 0x8, 0x1, 0x1e, 0x6, 0x0, 0x9, 0xd, 0x7, 0x2, 0xdc, 0x58, '\x00', 0x4, 0x45}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x278, 0xffffff7a, 0xffffffff, 0x278, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@empty, @multicast1, 0xff000000, 0xffffff00, 'pimreg\x00', 'ip6gretap0\x00', {}, {}, 0x4, 0x1, 0x10}, 0x6, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x6, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x88, 0x0, {0x4}}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x2, 0x7, [0x2036, 0x3d, 0x1c, 0x22, 0x31, 0x1d, 0x37, 0x2c, 0x14, 0x7, 0x7, 0x34, 0x13, 0x1a, 0x15, 0xa], 0x0, 0x7fff, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x370) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x2, 0x0, 0x4}}, 0x2e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r8 = getpgrp(0x0) sched_setaffinity(r8, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5ce000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r8, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 56.764115345s ago: executing program 7 (id=2918): r0 = socket(0x2, 0x80805, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f00000000c0)={0x7, 'vlan0\x00', {0x9}, 0x4}) get_mempolicy(0xfffffffffffffffe, 0x0, 0xd778, &(0x7f00003ed000/0x1000)=nil, 0x3) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) write$uinput_user_dev(r1, &(0x7f0000000540)={'syz1\x00', {0x6, 0x7fff, 0xb25, 0xb}, 0x6, [0x9, 0x8, 0x5, 0x6, 0x6, 0x3, 0xafc, 0x32, 0x838, 0x9, 0x6ff5, 0x9f5, 0x5, 0x1000000, 0x0, 0x6, 0x8001, 0x6, 0x4a4c, 0x3, 0xfffffffd, 0x9, 0x10, 0x8001, 0x5, 0x2, 0xd4a, 0xffefe87a, 0x1, 0x8, 0x9, 0x9, 0x8, 0x9, 0x0, 0xe, 0xf9c6, 0x3ff, 0x3ff, 0x4, 0xd, 0xff, 0x8, 0x9, 0x80000001, 0x83f5, 0x0, 0x2, 0xfe0, 0x7ff, 0x8, 0x3, 0x4, 0x2, 0xa45, 0x1df, 0xffff, 0x0, 0x2, 0x9, 0x4, 0x901, 0x200, 0x9a0], [0x3, 0x8, 0x6, 0xd, 0x1, 0xad10, 0x6, 0x13a0, 0x86, 0x7fff, 0x101, 0x8, 0x5, 0x1, 0x2, 0xffff, 0x4, 0x4a, 0xf, 0xfffff32a, 0xfffffff7, 0x4c4, 0x400, 0x8007f, 0x10000, 0x7, 0x4, 0x8, 0x30, 0x9, 0x1, 0x3, 0x4c6fbc51, 0x10001, 0xd35, 0xa, 0x63, 0x0, 0x1, 0x200, 0x20, 0x9, 0x0, 0x3ec8d8d2, 0x0, 0x3, 0x3, 0x2, 0x8, 0x6, 0xe51, 0x1, 0x7, 0x8, 0x3, 0x2, 0x0, 0x62, 0x7, 0x6, 0x4, 0x6, 0xfff, 0x4], [0x1, 0x9, 0x6, 0x10000, 0x6, 0x8, 0xffffffff, 0xfd, 0x20, 0x8, 0x9, 0x4, 0x283, 0x2, 0x4d, 0x6, 0x4, 0x3ff, 0x10000, 0x5, 0x40, 0x4, 0x8, 0x0, 0x4, 0x2, 0x80008001, 0x9, 0x1, 0xffff, 0x5, 0x7, 0x1, 0x9, 0x4, 0xfff, 0x3, 0x0, 0x5, 0x80000001, 0x53c2, 0x4, 0x4, 0x3, 0x80, 0x50, 0x3, 0xc, 0x8, 0x5, 0x4, 0x400, 0x3, 0x5, 0x86, 0x6, 0x400000, 0xb, 0x4, 0x0, 0x420, 0xfe6c, 0x2, 0x9], [0x3, 0x9, 0xffffffff, 0x2, 0x66, 0xffff, 0x401, 0x6, 0x8, 0x3, 0x102, 0x4, 0x9, 0x7, 0xce, 0x2, 0x8001, 0x1, 0x7, 0x6, 0x601000, 0x9, 0x5, 0xd, 0x1, 0x446, 0x800, 0x3, 0x0, 0x3, 0x2, 0x375, 0xfffffff1, 0x5, 0x5, 0x4, 0x7fff, 0x4, 0x3a2, 0x3, 0x2005, 0xe, 0xee6, 0x800, 0x7, 0x3, 0x1, 0x7, 0x3, 0x9, 0xc, 0x3, 0x1, 0x1, 0x3, 0x296, 0x6, 0xb, 0xf, 0x4, 0x6, 0x7, 0xd, 0x400]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r1, &(0x7f0000000a40)={'syz1\x00', {0x0, 0x0, 0x6, 0x101}, 0xfffffffd, [0x8, 0x0, 0x0, 0x4, 0x1, 0x0, 0x401, 0x0, 0x4, 0x20008001, 0x2000, 0x5, 0x0, 0x0, 0x3ff, 0x80001, 0x1, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x77, 0x90, 0x801, 0x0, 0x2, 0x20000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x3, 0x0, 0x8, 0x0, 0x0, 0xfffffff9, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x3, 0x0, 0x0, 0xffff1e06, 0x3], [0xfffffffd, 0x3, 0x6, 0x6, 0x0, 0x2, 0x3, 0xff, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9, 0x6189fbd8, 0x0, 0x400000, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x9e2b, 0x72a1, 0xfffffffa, 0x5, 0x7aae62b1, 0x100000, 0x0, 0x40002, 0xffffffff, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x46, 0x0, 0x0, 0x7ff, 0x4, 0xfd5], [0x0, 0xfffffffc, 0x0, 0xd1, 0x0, 0x0, 0x0, 0xfa, 0x0, 0x0, 0x3, 0x7, 0x4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x3, 0x8000000, 0x4, 0x0, 0x0, 0x99, 0xfffffffd, 0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x836, 0x7, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x100000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x4bdf, 0x4a92, 0xf152, 0x0, 0x10004, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9bf, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0xfffffffe, 0x0, 0x5, 0x8, 0x0, 0x735, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xb6, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffd, 0x4]}, 0x45c) 41.725762562s ago: executing program 39 (id=2918): r0 = socket(0x2, 0x80805, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f00000000c0)={0x7, 'vlan0\x00', {0x9}, 0x4}) get_mempolicy(0xfffffffffffffffe, 0x0, 0xd778, &(0x7f00003ed000/0x1000)=nil, 0x3) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) write$uinput_user_dev(r1, &(0x7f0000000540)={'syz1\x00', {0x6, 0x7fff, 0xb25, 0xb}, 0x6, [0x9, 0x8, 0x5, 0x6, 0x6, 0x3, 0xafc, 0x32, 0x838, 0x9, 0x6ff5, 0x9f5, 0x5, 0x1000000, 0x0, 0x6, 0x8001, 0x6, 0x4a4c, 0x3, 0xfffffffd, 0x9, 0x10, 0x8001, 0x5, 0x2, 0xd4a, 0xffefe87a, 0x1, 0x8, 0x9, 0x9, 0x8, 0x9, 0x0, 0xe, 0xf9c6, 0x3ff, 0x3ff, 0x4, 0xd, 0xff, 0x8, 0x9, 0x80000001, 0x83f5, 0x0, 0x2, 0xfe0, 0x7ff, 0x8, 0x3, 0x4, 0x2, 0xa45, 0x1df, 0xffff, 0x0, 0x2, 0x9, 0x4, 0x901, 0x200, 0x9a0], [0x3, 0x8, 0x6, 0xd, 0x1, 0xad10, 0x6, 0x13a0, 0x86, 0x7fff, 0x101, 0x8, 0x5, 0x1, 0x2, 0xffff, 0x4, 0x4a, 0xf, 0xfffff32a, 0xfffffff7, 0x4c4, 0x400, 0x8007f, 0x10000, 0x7, 0x4, 0x8, 0x30, 0x9, 0x1, 0x3, 0x4c6fbc51, 0x10001, 0xd35, 0xa, 0x63, 0x0, 0x1, 0x200, 0x20, 0x9, 0x0, 0x3ec8d8d2, 0x0, 0x3, 0x3, 0x2, 0x8, 0x6, 0xe51, 0x1, 0x7, 0x8, 0x3, 0x2, 0x0, 0x62, 0x7, 0x6, 0x4, 0x6, 0xfff, 0x4], [0x1, 0x9, 0x6, 0x10000, 0x6, 0x8, 0xffffffff, 0xfd, 0x20, 0x8, 0x9, 0x4, 0x283, 0x2, 0x4d, 0x6, 0x4, 0x3ff, 0x10000, 0x5, 0x40, 0x4, 0x8, 0x0, 0x4, 0x2, 0x80008001, 0x9, 0x1, 0xffff, 0x5, 0x7, 0x1, 0x9, 0x4, 0xfff, 0x3, 0x0, 0x5, 0x80000001, 0x53c2, 0x4, 0x4, 0x3, 0x80, 0x50, 0x3, 0xc, 0x8, 0x5, 0x4, 0x400, 0x3, 0x5, 0x86, 0x6, 0x400000, 0xb, 0x4, 0x0, 0x420, 0xfe6c, 0x2, 0x9], [0x3, 0x9, 0xffffffff, 0x2, 0x66, 0xffff, 0x401, 0x6, 0x8, 0x3, 0x102, 0x4, 0x9, 0x7, 0xce, 0x2, 0x8001, 0x1, 0x7, 0x6, 0x601000, 0x9, 0x5, 0xd, 0x1, 0x446, 0x800, 0x3, 0x0, 0x3, 0x2, 0x375, 0xfffffff1, 0x5, 0x5, 0x4, 0x7fff, 0x4, 0x3a2, 0x3, 0x2005, 0xe, 0xee6, 0x800, 0x7, 0x3, 0x1, 0x7, 0x3, 0x9, 0xc, 0x3, 0x1, 0x1, 0x3, 0x296, 0x6, 0xb, 0xf, 0x4, 0x6, 0x7, 0xd, 0x400]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r1, &(0x7f0000000a40)={'syz1\x00', {0x0, 0x0, 0x6, 0x101}, 0xfffffffd, [0x8, 0x0, 0x0, 0x4, 0x1, 0x0, 0x401, 0x0, 0x4, 0x20008001, 0x2000, 0x5, 0x0, 0x0, 0x3ff, 0x80001, 0x1, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x77, 0x90, 0x801, 0x0, 0x2, 0x20000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x3, 0x0, 0x8, 0x0, 0x0, 0xfffffff9, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x3, 0x0, 0x0, 0xffff1e06, 0x3], [0xfffffffd, 0x3, 0x6, 0x6, 0x0, 0x2, 0x3, 0xff, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9, 0x6189fbd8, 0x0, 0x400000, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x9e2b, 0x72a1, 0xfffffffa, 0x5, 0x7aae62b1, 0x100000, 0x0, 0x40002, 0xffffffff, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x46, 0x0, 0x0, 0x7ff, 0x4, 0xfd5], [0x0, 0xfffffffc, 0x0, 0xd1, 0x0, 0x0, 0x0, 0xfa, 0x0, 0x0, 0x3, 0x7, 0x4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x3, 0x8000000, 0x4, 0x0, 0x0, 0x99, 0xfffffffd, 0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x836, 0x7, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x100000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x4bdf, 0x4a92, 0xf152, 0x0, 0x10004, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9bf, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0xfffffffe, 0x0, 0x5, 0x8, 0x0, 0x735, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xb6, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffd, 0x4]}, 0x45c) 17.180295464s ago: executing program 5 (id=3015): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x7fc, 0x40) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x6000, 0x1) mknod$loop(0x0, 0x6000, 0x1) socket$nl_generic(0x10, 0x3, 0x10) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "112000"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x777) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) write(r2, &(0x7f00000003c0)='1', 0x1) 12.836399808s ago: executing program 0 (id=3022): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000300)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r2 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) accept4(r2, &(0x7f0000000100)=@rc={0x1f, @none}, &(0x7f0000000180)=0xffffffef, 0x80800) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x1e5842, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='sys\x00', 0x1ff) mount(0x0, &(0x7f00000007c0)='sys\x00', &(0x7f00000007e0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/devices/platform/vhci_hcd.0/attach\x00', 0x1, 0x0) writev(r4, &(0x7f0000000900)=[{&(0x7f0000000980)='0 ', 0x2}, {&(0x7f00000009a0)='4 ', 0x2}, {&(0x7f00000009c0)='0 3', 0x3}], 0x3) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x145542, 0x40) ftruncate(r5, 0x2007ffd) sendfile(r1, r3, 0x0, 0x1000a3) 11.61322842s ago: executing program 2 (id=3025): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3f9, 0x0, 0x0, 0x2}, 0x10) r1 = socket(0x1e, 0x4, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e04692420"], 0x7) ioctl$sock_x25_SIOCADDRT(r1, 0x890b, &(0x7f0000002040)={@null, 0xa, 'veth1_virt_wifi\x00'}) setgroups(0x2, &(0x7f0000000400)=[0x0, 0x0]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl(r2, 0x3b8e, &(0x7f0000000000)="10") socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) landlock_create_ruleset(&(0x7f0000000000)={0x40, 0x4, 0x2, 0x3f54}, 0x30, 0x2) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={0xffffffffffffffff, 0xc8, 0x3}) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040)=0x18) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f00000000c0)={0xb}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x6, 0x6, 0xf3b8, 0xfffffffffffffffe, 0x1000, 0x400, 0x4002004c4, 0xfffffffffffffffb, 0xfffffffffffffffc, 0x97, 0xa, 0x4a0, 0x3, 0x4, 0x4, 0x5], 0x70000, 0x4692}) ioctl$KVM_RUN(r5, 0xae80, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7fffffff}, 0x0, 0x0) getgroups(0x1, &(0x7f0000000280)=[0xffffffffffffffff]) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x7, 0x0, 0x0, 0x4000000}, 0x10) recvmmsg$unix(r0, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4081, 0xff1}], 0x1}}], 0x1, 0x0, 0x0) 10.313284533s ago: executing program 0 (id=3028): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40440, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x200c8100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x4) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033", 0x65) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfffa) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r4, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007"], 0x84}, 0x1, 0x0, 0x0, 0x20008840}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) 10.260752707s ago: executing program 2 (id=3029): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000007060108e8ff000000000000000000000500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x40844}, 0x0) (fail_nth: 3) 9.278900504s ago: executing program 0 (id=3031): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101001, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) mount(0x0, &(0x7f0000000300)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000800)='./config/usb_gadget/g1\x00', 0x1ff) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000080)="0100000002000000ffffffff0100"/24, 0x18, 0xfffffffffffffffd) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000040)='syz\x00', 0x4) sendto$rxrpc(r1, &(0x7f0000000100)='test\x00', 0x4, 0x0, &(0x7f0000000140)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x1234, @local}}, 0x18) mkdir(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uac2.usb0/c_ssize\x00', 0x1, 0x0) write(r2, &(0x7f0000001000)='2', 0x1) syz_emit_ethernet(0x1218, &(0x7f0000002ec0)={@multicast, @random="d8be17d19221", @void, {@ipv6={0x86dd, @tcp={0xc, 0x6, "1ed996", 0x11e2, 0x6, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[@hopopts={0x67, 0xe, '\x00', [@hao={0xc9, 0x10, @loopback}, @pad1, @generic={0x2, 0x6, "1c11b9f8dca6"}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x40, {0x2, 0xe, 0x5, 0x1ff, [0x8, 0x4, 0x0, 0x2, 0x1f, 0x8, 0x2]}}]}, @srh={0x3b, 0xe, 0x4, 0x7, 0x3b, 0x10, 0xf65, [@private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @private1, @dev={0xfe, 0x80, '\x00', 0x12}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @empty]}, @srh={0x87, 0xe, 0x4, 0x7, 0x6, 0x0, 0x980, [@loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0x25}, @remote]}, @hopopts={0x2, 0x13, '\x00', [@pad1, @hao={0xc9, 0x10, @loopback}, @hao={0xc9, 0x10, @empty}, @calipso={0x7, 0x40, {0x2, 0xe, 0x4, 0xfd6, [0x1, 0x200, 0x10000, 0x2, 0x8000000000000000, 0xd5, 0x4]}}, @enc_lim={0x4, 0x1, 0x5}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @hao={0xc9, 0x10, @mcast2}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1]}, @dstopts={0x3c, 0x1, '\x00', [@pad1, @ra={0x5, 0x2, 0x5}, @pad1]}, @srh={0x0, 0x8, 0x4, 0x4, 0x5, 0x28, 0xa, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1]}, @srh={0x0, 0xe, 0x4, 0x7, 0x7, 0x68, 0x8, [@local, @empty, @mcast2, @remote, @mcast1, @mcast2, @private0]}, @hopopts={0x33, 0x1, '\x00', [@pad1, @ra={0x5, 0x2, 0x7}, @pad1]}, @dstopts={0x5c, 0x1c1, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @generic={0x0, 0xe00, "cf4ba00d43dbda96fba9ef39666a348a11a79f893418154018d50e471c34cd76c1ed70803fa8eaeb54ef8304a77f6a2a4380a8dc8995edba7ba805567265b4ff9028677e8a605955a38cc87e68c7997c8c1fe9adbe390847f362c6c862cb7638bec7dd8fc7150a06fea955b83bbfcf789ba15d0b97a01667e0a4125488c605b860b6631136ced0af37db7676efc1d02ed7f89950b6836db726a4352836509d3c57815c7ca1059bdcd4e3876c0c9101bf68cafa7b33e9f4363460ed1a6fbfe982d7bf7037fd02971c7a991bd804e060b6b1a1d6c407d05a824b63c22dda2b519ac48b307156f66414de0c393e18d3334920b9549ae31a551060ea644a437c93a1c848bd80c8d8c3d847769edfba57e7866dca0366d931895faa2fcd551689ce8ea75ffb582a16762302371055afa808cd00c8d1a0959ab8de54daa48ac309b4de7458ae4eff44188bec9f56c7227a2ee6493b44abb325e4c4d7ac514655e31eee8a9033690e7b49b8de4074297055c5273ae076f7e92b06b3ec69cf5bfb295fc09d1621de9859bfd32bd2f9e48a362398cf1e115bd93500d80d2e23c4e7a9070ef5a318f1aee65943acbf641a44f352cc2cb0db85cb65c36d89ba31f512f22220d42c080cb294b30a5caf275d66db4f9abb6314b3d882c9333d050e171114dfc2c11a655e2f276be8f2c966e5df22d5797340222c34d64726841521210ce2ec1f37e07f80acf165fd638b2d21dabf364258066919792933e158ffa407b65df4c5ccfffa1e391f447bf0eacd7597f7c2116fb7cc60575d1e5ea4ab312f586569d80539c96cb4cfe4ab897ea8a7776a504697411230385f6403bcc0f3309ea932fe32ea4887878dbcdf6dc7e5b7b08a6d30962a1a688223bc618ded87905e3ecc8615ab60b59fd3165ba3706e76db6654a34045f3aa7485143b7c31286b4a3e35b4c0379c9cbb338ba465d6ad8b8c8025942ddf51d72bb62e4ca57288c7e6ba2c10940940a29bd56bc117de726db5e26bbec131379fadc9fc93af6e04b0246b94af511e754a81a832000fb47bfdd9e143b7ba5b6a1ce29cdf928c28f29d357c5f2cfacfbcc431cfb31b090c822eb20da154e9325cb36aa028995e51a59ce0c4420d02c83e671c1046ad7a73d8a9e81713a567a3c401ee94a28fdeb317a8a1e892869ca0282356bb71fd6bdee94a028baf8a9259d3ad870adf4595eec8eb230a0b198e55c2da09fb38ab795aa0ae8886309fc8365021b911ed670e3a1cfc417f19158f9182447ff947be999e423739660ccc4fe64bf65058b26b3548fa31808f44c8fcee94f2ee8c1100dad3f84ae679257ff004e34fc2a0f76250b61c036eab6faf2561485f52746e0d8d199cf91dace266f00a012acda189582ae6396e9615a308d4e20fcff96c9c2766a8538ee6480363cd63794e808280402f327863a6e0ef395bd34d18033bdf8b52f143369087488cddd5558829f43d3cd63b029420d52d7681f13e0e471daa844985af0b77305efd71167c16eae64484b2898be9bec7d9d5bfcc02f3295a7c94594598f6cb766106c7becc5df99de2f6128c00f52defabe76b11d97f9fec0742d0c310a3ab594c6320f86f3b043cdc91ab1e62570c7c4bfc9fc2548a41fd8cde51dcb0b3f4049188cd5cf1d9a19e58ec6acbce9a9ca23f11051953ffc534033ce9deef719bd1d5dc0a0e1fcc52528fcdc1cd0497f418775869398c6add7e7f642a366ecd8ddcdb05da3fcaca830ed6fcfa14aafa37e933f71151c0a1fde4fd2cc8995d15d4eab8e44ec78d83550da719588e149ecd1cfdc39a69ff35820b26e516dcbe05e3cb751d18acaa79cf318884fedab92af1bc98dc961d78f05d95b6541a49a8b7778b93efa7b891ebd843b15af24d35d3770bdfaf1be660febe1de653382d8664cb017e943129e9e48f08ec09bd4be2cd732aa35cd68483fd2dacb9eb0394bbb303cf449419c8c44320c7856593765ff067ed674e2c5e608c4c4be9570483c74a6e1f21b2a063c4431ee48d6b916985519c868b2d28f67f4795139bc3ca5316d1264c2cd16bd9c6da09a479992bb2ca127ca7ea6432cce929c78bfe0928617b8c1d24b8408fba5b457ccbe58e9f4633af4da7f26a975c8449c4cacd709a3c4ce36144b582de5c4810f9b04f3374c3cadea419b3b4d3e2ba7c10670e82ed51d9fb17f39cedc87db9c1d5796e779c33df2db1537b9a7e610cfded3d3e159e9ad3d6d6d32289e797474692e7ede13b54b73ecd1a9468d2b7888a58756b170346dc1c1b7a6fad129535e0803f5d1686b1902d45bb3ad9687e42ec1f6f943efa01827254bbb681322c0cacf26be88f270529db883145c58558d60c61cb4cceeb4282d721c6ead865a8744a7290d09ce0906d861148f5e17fa256ed9d9b78e6b0296050c7fd8d52ecf55378e5770aae50ca4943c0d13397e3445966c711e74a5c3b55756bc90b0b5ca208ed65a41ca9288ab9880869215803e4459c4308a9366b4ffa27b4de2fbfc6883525e81cb7373c68d7e885a055bb9c325c0d44fded3911633566af7af6bdc3f2af0ccfa035d04ff1e8cd148f4c062654e8974055de98ae0a006d098c5855d9492c900bc43a392a48950bbf0acb34daa739452a9013b67a99698c2986fee22f5f3bde98ff8ec4a517e4a938193e091712cbb7eba72473f244b774f9bad8538613f8111ea8f49219b32b732fed984c9eaa1d6a41a8c003d8cfbda0671c20ec7d1743af5012253e1c2016f9e3007606bec5a7336759e408ca67f4388790dc270b6986e6f68aa4363292f6d37b6b5963d76ff381249e630d420b7d4c1204654c5fa888792d4d777bc0bc2cbc62d2183869bc2f54394ffb212df0d427a7291bc2bbc7276380d1733aa0f0a096ae3f0c58b545d0cb3984df818b5239fd34b272c095630d66b2be9618ecdb75b10e9ade298aac1b7798cdaa5d31cb7d06f2ccd0dbc1819a646225e37ddfe1ba4e14fcf7f0b15d93f05bd835d476762bf64f758daa9023b733f67ac3877a45770ea5dc3bd1c5e9dc4b45a6817b167f12fb9dd5060687d0d4a0305a1fc1a6d27168c8745457b49310e54f5dbd922dec8a0246517680e4e6f0b0512f89fb588f0e8abafc84f2a405a19c24bb292884f83d327452ae899cf3a62772c56f6aba5b9439f3c26a45a64d55a6558ac99f37b4054b8f32ec8b8fe31ce5ec0d2e8a126be7067d57c9eba536b5e944791c63bd42934d834dab7de1de07a1e509ebdbb19a76e66f9d0a9b6412b5c5fef9b72463004168943b92f94d09beb5424332304cd495facf68495605eec9d4779908f3534250e17b1aa53acb929a811bb577d2e7eb53856f1425d3bf061edd6d0b5c4fcdd9086e2d44bbbe78e7837b0c1210713d4d5fb196a53029dcec30fc30e3b4d4ebafac27889c9afec474f6abec7a77d16cfe4d268be9db2c5b706814f50ff2cdcba73f7bf521ca2ea0e1231baa8996e8dac2f7490c128651271d2c1b4064e60495c21c3810b9deb452dfe33a9bb280ce3f68a2754bb25cc59b67ab92cf973862ae71cf8ef4cc15f0589e5f744e491de25362283539287f8b36ad4e5e8eac11065ad00c4f239e444602e9e505fb6ab83884d43c774ef9546a4388116ffbca12b643a6d3fd764cc41505ebf8ab50a330eab75ad3bcd4ee9f6968408ae354a650743bca21a8fe35b5a9fe8e68f721ef14c8af7fffb3b493520ff7fae7d3d117d6a5c2bc12fbaf8bd7e19be76a9faee145fc3f6d6fb6ae3a9c700449b3bdffec949bc3774b94630965c68ce952e2bac7fba1b06161bac267c524aae0eb8e7996d7a89dea0540f35bc59caef5d5ca3ad98dd2ae86f65477ec117c8c33d27ef4df5e0c5e06b847bf99bc1674df51229603ec60490cd0c1144b8aa39d2e2b29e11d2e964e52643f4b51b9e4967008dbecee58df341fd998034923ca846884aed10cdc4bcedd656e87afa86372275d9f8d17a86996695ac74ba891e94ca48509c125923d31c106b0cafc82f05ee9b084346a34cc11d7dfc6c0e1926b635a914e361942679fbca662eec0792f4d852677f0823063e022d19effc7215ae0b377ad713d52d20b43cc8201601033edfe9ccdddbdf3884038a28299ba273bf350ad69986605a9fd80d604f24033ea7ac2fef500311ce06f59711bfcad5f6bb456beca7cc3ba4ee30143dcd468a191b745610743f169bf94f16f7455192f84a2ccd342d597285aabb7f4239832ab896410afde9004509b5abeb84fecf0c29803a4db81054ad8d80ff534595eaf494f1793da18a358ef9b959b79f029267e1455fe85feeadfbb2487749aceb9cd77c4aca7832e3868f4b70dc62771810d00cf819e429d04731c3d2bb2a16a80295ce4c830de20bc41f4d2a6d337526327c11d58097b7f1c6dcde33de066d492d6d1ea09c2cfdf9853fb95cac7f1df8b6d4cb0dc9be3b42401898b33ec71f43d440e2343c6b973172976d6a647ba1a7b55ca53bbfe6e9897ef73362e133618cf5ecf2c26ecfcfd0cc951bc04d03daaf291a99c2b05a5539b51a658ab90017050b1575df91c4ddfba908c6acee2b4f76f2777998c9f19331e1a962b7ba6ed1eff2cfaca6c0c6b81231a9468c81b6ea25e35a3afd217cdafcb249f1413a6521b5952b64f825587964901ec883971b0f7c023d4f42f032153ae7b018d859adb6d4ceec22c0a2ac8bfd777b16aaa7dc911bbca4a04f87e25770e967553bdc60ee60a3d2374afd2c0d8a1f1d4654afc74b6b60bccfa13f45abf3eebd842250b1382a41c0c588d60e4676e754c02021778691db6a056528d71a0ec749eca732f36798f33d1bed7393b71cccc6b20f58eb4bd9dce2d5bc8c8d07a98a966a797adf78517fd46283d6c83a203cbbc840e0edaf7f961c93386b73b32174f31f078ab332b6b6cc0f721517c96d5ccb4877b7c2f0137710c371170cabe1d0c6397ad9b64b657805a6597296cf6f012a2d6641d2987d82667ee1a197604e828c491e99e1f60e3911f1d72d10dcde1e7050f6d84c14fc9b8bd6aa54020045a0450cf897c4d855f62b58b39910b6544183a957ff50f30867b7365"}, @padn]}], {{0x4e20, 0x4e20, 0x41424344, 0x41424344, 0x1, 0x0, 0x11, 0x4, 0x3ff, 0x0, 0x800, {[@mptcp=@mp_join={0x1e, 0x3}, @exp_smc={0xfe, 0x6}, @md5sig={0x13, 0x12, "05015c010a065cb549b73199a5f8f27c"}, @sack_perm={0x4, 0x2}, @fastopen={0x22, 0xb, "5c440e74789b14afa7"}, @sack_perm={0x4, 0x2}, @exp_smc={0xfe, 0x6}]}}, {"b8957e9c4dcbc1325ffba781d12fdee9ce40b6fae3c8fe54eb6b9a501753a3414659cebc82a79f3cb673195c56f20b3399d0ca015c846ff600ee121ca0992c9a2f1884f29c44085ed996885249760f6b35829f45de7983a9e3b2be0129a11d7dcfc04f92ca50be4ab37a3ec07fb5b8773a62103591c8f5603cac75eef081df1d94611768e9a7"}}}}}}}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 8.904189728s ago: executing program 2 (id=3032): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x40, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x4fa]}}], 0x1c) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x8) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x6a, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000040)={{0x37, 0x8}, 'port1\x00', 0x40, 0x0, 0x6, 0x4, 0xfffffffb, 0x2, 0x1, 0x0, 0x4, 0x4}) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000200)={r0, &(0x7f0000000100)='$\x00', 0x206100, &(0x7f0000000140)={@align=0xfffffffffffffffc, {0x0, 0x3, 0x1, 0xe}}, 0x8, &(0x7f0000000180), &(0x7f00000001c0)=0x3}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r5, 0x3b71, &(0x7f0000000280)={0x20, 0x0, 0x0, 0x1c, 0x1c}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000001540)={{r4, &(0x7f0000000240)='2\x00', 0x42400, &(0x7f0000000280)={@align=0x7, {0x1, 0xb, 0x9b, 0x921}}, 0x0, &(0x7f00000004c0), &(0x7f0000000500)}, {[0x5, 0x5, 0xfffffffd, 0xa]}, 0x200, 0x1000, &(0x7f0000000540)=""/4096}) bind$802154_dgram(r6, &(0x7f00000015c0)={0x24, @short={0x2, 0x0, 0xaaa2}}, 0x14) 7.453083213s ago: executing program 4 (id=3034): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="b702000024000000bfa30000000000000703000000feffff7a0af0fff8bffffd79a4f0ff00000000b7060000ffffffff2d640500000000006502040001001f000404000001007d60b7030000000000006a0a00fefdff00008500000026000000b7000000000000009500000000000000c743a0c8e3ebbadc20e5a7efcc9ac1467fb2ea80dbcf8df265e1b40e4c8afd5c0c000000008da68076774bbcdb2c769937000090af27db5b56024db96bcbbbd2cb2000ce03000000000000007e357754508535766c80114604a86fe569b05614eab9297eb290a248a120c9c6e39f403ff065fd3052aae80675eeba68562eaeaea5fecf298ca20f274233106eab63ecf772de7b265040b6c50b7420b48a93fe94c756108afcd0b2eb78040000005f02a5a6474ae549070004000000001294fba0ed5020e6474ac921fee1f6d8ad6a80c0947cd6d4a561ced21a0b4a902be6af7ec2d1ba002e57f301000000000000000000000000100000aaf25343063e6581f9e6de14ad72e5ad84309f47f96a576cd20cef7ed951a73ea73d7c7f14e306f1f1d1377e57abb1af00f0077e9d0000b93eb0f2c6f8141e350dc68147e5958128d22d586270f9dba211bfff9c3709c9b134625d3d2369f516a49eeeb1a662c8dfb875bdf5c6ba73cccdfacb202994c40d322717faff03323dce8a34ee0ca2cf61efb4b30000642735d6d482ba98d252f36c54333aab1aa736369392b9067665339820f5f1557b0bf7cc06a5a13c714e0b1a1f000000ff3283076cda3d0b1a2905cfc3d04f1db264b530abcbe44bc405f600807970727fb819afa1907228fa9e83433eedb4ac88d0285594ffb0d14c09d5c77f33702822b02488ea570204c8441ced81cacf945dcb2486c9e3600e916ae6307bd8325a442095bc9a8b0c95905979f34adddbb26f0d24425c8ab9d937d84b521914f92eed3d3e9de82942a952e86b567aff5bc2e3c1fcc00f618363df5d0d181ee8f4b8fd356c9eb365adc037e443820c05c5db16ff07a9cf471e2ebf91ab00a05f88c1cd55f8c81f5eb1f8d615ca27efb2193bb61665a1ce37f30c2efc9c3b5a4a5d95479fac471ba60fbd0e50225563cd37343d09da72472efc2b2877fbab12a891513e5f0763ae06c0610a2869747c143d75007606000000b2310e19ac58bf29d7f178d09a9f634a3ae492f54649589e3692768a0f3a082c5242c8fa7f01e0873c9c5c604108ad85950d8e08465fa1067ea8f383b3e7a7ddf5977d46f4bc38f914b4a496426d8468f9ba618b6b2218b50c8fc9efbce3ba799cf70de7e13be871aa7eb402e2b11f440361e18d4e334bfc6ae54e62e67a0338c756c544189e4519a029674e2a2bbbc7f6600000000000800000e5e30b70b198246d3a62660600000030a0af132e680510811d3ab71af5d98e2d3d928a749e8b9402d14655612bd58fb40b4625cb69bf6cea97b447f2d970d99100000000086000001b881afb2cc500003a73562af4878f75b4c98274eeb666aa1f5fcf91990cf0dcfef9540057b8a3fff2bc02c5941626d2015f414546e87835ba18e91017343e3dc6955fc6b9a25fe2a3dd8bab7f21beccba5493a164c663eceed401737c12c65804712236a9a29a43b1e27e9b6816f2328ea8423121f12b7b35aa721fef26934ccafde573bee5c33ef15309f43cbd5d61aa679a9c402d337ebf57a5eacb569401c1df7b9c45b09743c61d1db37f0000000000020000000000de00d23dd63b7761d7d6818db785d8ba13dc577fe61a68eb365de5661f43d4c789bb117a3d208ae44a38e7868dc32e132124ecf52327631b718b3157e218959156ff8e92b7e92bc275d2c9114547351a0d0f1370d13be0194b6cb68b03000000000000004f153bbc7f52861e4e5df0d19e4e40ac44cfda6f87807e5b5ed7072c04da88afd3d4b79f060e004a0e2f00b9e726ac75d2ac0691314c627e9a8a07bdd607919fd48f01ad6d2f7621d9a75b134f1bc25ed7c33d411a5baa4daa3add16afc502b2b7629541d722e91d631e5ffb9d4beb5aa5a2c4e490a5bd038c1817f0d4652a29353b05b16b3c5cf4538ba310b8cbc221af38ea842d4cb908bcd574f794459fd54b58c6a791e6df625a47bade4ba41ee014184395a479544619f749ff70088b0fd115077f7eff7c5a3315ca604d110df1c54407f191a78d8362e4dc6e1138391c2a65246779bb76c9f1daea4f085f38810edef6dd047937c231cba791a4e7713c5b3b0a0b6ba37db5016e02d114d714459d065a79609fea4efebad04eda001aac0e53dd094827453144fa419ee81823d00a90a9058ba740d2f4125377960604f521df5e325efe395a4e3b7ca8d01a8c1a7265a084e30ad10d412aee8170a7111d62473e7bd8f3d64fb7ebdd32aada331900000000000000000000000084ef49dd020000000000000000000000d9dcb285038ec38d5f4969ed0e98a71ac7bf8159a234833a5241722b2d24aa2fa4965d4eb7966fb27d118b6ef3308627e67d42f1041d5e92da28e0a7724ce715854775cbe06c5166f1dac0745f1373156a536cb6394c2c4473e2050cacf693fdf8e305080000001a901ecd90a5f53b8327a485557bc2a147b036477915e600000000034258ebbb6099b597d17ee2fc97ca850b8580b1337016a40566814594c13052b9d2b0741326825f19a244609ac04a0c29691a7c8f7a78c1a7590a293c561f304533c638ae635f5ce026f7fa034d8cfe0e11831d4829692beab26891ef583cfcb713a4d3a2d8b958c0875d7e4bdcf98802db086ebcbb9d82fa569a18f06facc2ffe1ea9ae4231e1e7a5dd7503faa2de7f898c97788c4b9c61c70ff92abdf7476cc351156d11c0ada7614f315f4c6cca119d16827d4e864f5a7a9b690272a510c451dc07f391309d02e31e53b2bf0b5f86e776b1bcfe6c85ccd7ddf8a9559d58bb5603895f265685f0400000000000000ccec1b0d45a47a89b8237cbbdab14e4ca6dc76b2c41e071b93a065c0f5aa718e1cfab29beea78a6bd9a3114f0f6f03160ec875b92be9a5862627b4bd99db2c08e4636e43f05f33535d5d1f9bb40e1fd8e5125a3d29b31dd94a6744bbc21722222b976089f073a4d3fcafc6d06518cf0c4fc6c8e3da0000000000000000000000007d3b60775243f2143d9f54804b11102cf0e4c641db1ba8bf75e46ab3a8fdece6562e7ebb3e407f3c7504dfa3da3aecbd49af3d1edeea11cc970416fadeedc8423bfdc85041ac4d8243a1130e6f4cb5bbfed9d095e18c98c7d690e4c491a7ddcd5635bc61dbed719ca28e8ca3f1fbbe588913ed057f1d6e34a79f4dc10df54d1993a5bc5f9ef6dbd339ee4b0b5764169f305e284ef82cc23e9366d4bc7eb45c7230b13433e5240657cb8eba33260147be8620b6d98cc48b000000000000000000000000c1ce872b18984f080100000000000000bd3fded92547d41809b398f36749083a147eb09ff1ed601bd36b873d3947fb223da647052528e0466cb917db7800f7c7000b593fca1903991cca1343882e3a1f60044f11c081dae4fc5bcf20efacdd2c577f4bcda2eea6f75a31dc90eebb6135b6fb824052181b0ad8a49ebf03ccf61d7e39bf6b0762d24d19796016301d1415b5110ba9df7f204aedb2a2e4e621c0553d312b309db67192f98ef7800000d629c04e216afc8fc66616bbf304e452373aa927c2ad6f5417f1b9bc322b802c1c42112a92a331cdc113b9ace3ff52ede7a853f9a89002ba070bac2f635a03db3375e5564f1a798bf9c0f8c72725d2eca9b0ec7e453d78ea20eca61530fe574299b393ca144adcb06108dfbb934065a87972739150a8752ac111c4d9062ccb95c54034fbdee131d94dfbaab1854d55665746fb7b47d25e54070b0d14c0a29c57bc4930075e1761913b036d43852c6df9f10e15105b2a18668298a3577943514db0dce953dcec62139ff3f16066efec5d8cbc0600000000007289be5883aab951ea67cf2ff691d05c1ea91dd569ed9897fe8d88a0a6977dc8955be17e8026aff11c61fa5cc76196c14233d597345253baa1537eb6962a3ce1fe5d5ab46938e8fb23fa7047bc59c4345e912585a9adb5fe2ff51b64a326321b594e3f2d339f4090bdae6b30b62064bacbc155d3c930576f506b093ca7c60957bdfdd6536baaa871cf6a603c736b78761e6463b8ac503e219cc3d98f649602ad24d5667368290ee926fba76ee482a201a03efece3b236f4ee2ffcd5d90d92a2f0c5cb2791add8279c491fa48c87f27c2f1e92988a6508c12f6b7755cc48eb10edafca92cb0260c72295a27a24846d3a2334bd60e94c0fd07e5db0a4964a7fc4e89f11a300510776934e87bb3c21394f46954a012b2a3b0760f1bad1dbd6b466e0000000000000000008e5f9004e01fe2b177c5f443d09de4ba8f72d534405f9e7807c864bbca5893376420e38cf47a3660a2ab17b20baa271aa9eaffc19b50f291f51a7cc935023382bd80d7bca313636f3aaa6b788b233097bd545d9bf9715fbf"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe7d}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000004c0)="00f000"/14, 0x0, 0x6500, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.283978252s ago: executing program 6 (id=3035): r0 = syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a100df00008032080b00020903000009040000000e0100000d240100092700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001"], &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x1) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x82, 0x0) preadv(r3, &(0x7f0000000500)=[{&(0x7f0000000080)=""/124, 0x7c}, {0x0}], 0x2, 0xff, 0x1) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000580)=0xa300010) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1c, 0xc, 0x8, 0x8, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2000000}, 0x50) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000000c0)={@private0, 0x0, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000380)={@private2, 0x800, 0x0, 0x1, 0x2, 0x0, 0x100}, 0x20) recvmmsg(r6, &(0x7f0000002040)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2000, 0x0) read$char_usb(r5, &(0x7f0000000000)=""/25, 0x19) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x141d, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bind$pptp(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x2, {0x0, @local}}, 0x1e) sendmsg$netlink(r8, &(0x7f0000006100)={0x0, 0x0, &(0x7f0000005bc0)=[{&(0x7f00000001c0)={0x18, 0x30, 0x10, 0x70bd2c, 0x25dfdbfd, "", [@typed={0x8, 0xe4, 0x0, 0x0, @uid}]}, 0x18}, {&(0x7f0000002080)={0x113c, 0x10, 0x400, 0x70bd28, 0x25dfdbff, "", [@typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}, @typed={0xa6, 0x113, 0x0, 0x0, @binary="9d536b1d32a1683b9e7bb7fdf9a4cdca38eaf2204a53c687350be42c66199aa5e7cec963c71b63748e5847eba309a8b811931052062f658e7cbf5f04cf6339f82f225fc64c137a4df2d3272a7fed1d1714add97f8059ff8c90c98fc1e69234459c476d24765f4105e3b0ae4976da40b7a8f7bc49b16d618645a14cecbeeaf29c8864bca56ba0aeab66c6f63e901011d8b1015b48303ed0ba00ecc817879c0848ebd3"}, @typed={0x8, 0x2d, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0xcd, 0x0, 0x0, @uid}, @nested={0x100c, 0x5b, 0x0, 0x1, [@nested={0x4, 0x9}, @nested={0x4, 0xa4}, @generic="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"]}, @typed={0x8, 0xfe, 0x0, 0x0, @pid}, @nested={0x56, 0xfc, 0x0, 0x1, [@typed={0x8, 0x153, 0x0, 0x0, @fd=r6}, @typed={0x8, 0xf2, 0x0, 0x0, @ipv4=@multicast2}, @generic="c8fa8d3ec5b28fdce964cc6038c8ee7e71b3a2e7236f46a95883c928a5fdbb87620730224bf753bc5035b760b0bfeb80744af90bfa36034d0f30e140b99f", @nested={0x4, 0x4e}]}]}, 0x113c}, {&(0x7f00000031c0)={0x3a0, 0x42, 0x4, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x8, 0x29, 0x0, 0x1, [@typed={0x4, 0xa2}]}, @nested={0x388, 0x13a, 0x0, 0x1, [@generic="756770f3ee27d3b96872221e933d80ba97c3f0116fe83ca1a21f1541ce295919454978296e85da422b474b6a5391ef939841977fef808dd55f21ae012946956b8264972e6978d020779c28d74940cf48ea233d594c087a8d8a9a397738e3c02a73fc91d4e0f9965dab3f43b3ab9869da5731485a077034727a04a7ff9787a660105bcccd056554ffd183feb819b1a6c4527e846c4975c2ccdbb383e9c96c15183ef262a57843ca252b9733e71cdc96df50445c5cf40bc58ac0f41eb34ff157b4ef0b4b0e4ea92cbb032d92", @generic="1af06724f3516c8a1e75c6f4ffb2a04e927b61fc9606ca249be85c2ff2d591ad6ea5cf4c379cb2e79d4a9bad09c1ba5e4470cd8871c254702acb332b2c8dd2f76c1256660ce5baf6cb1b57387a76a24b0120f0547d4d4d2af9964497d83de57a6ce6a71abc5fe59b2e092ac39c921dd431156c37fd1c7d1ce42a72d8f7c71187511cd7750d04d3006a1faac746fcdea80c91c6a1c77347168cbbe9d20c8e5077ee4807b2dfe3f40d2b31c5c9b14b244510ff72a9d674997a3a0c159b4c2519b7b045b2218124420d9541b1665d186b", @typed={0x8, 0x9b, 0x0, 0x0, @uid}, @generic="97e9d919b95d1b06a941e94b42d9960992322378c2fb2bf97558ca07e2f3a2677bcfcb2cc536834eddbcbbadde782a4f22ccfa4eed37ca7fe359c5937f5c25a15f951cacd0ec30a16c2cab7d83fe4ef71ab9a635b9ec07f1ef216dee0172994ef0d9b995bc5e2ebff378871a4567549b1fabce773e3ab809079780583e5efc56a71d614a5a936cfaf15c617073dede9e986d6d3e9207e3081aa7211fc4360ce19b4c2d82e05e3f4936ea3144a20688795d21855c", @generic="7f57a59fbc84ad8e6c3ed5dbe43d393ad907f25e62f5a1f57275ff49142572c36d41a48a9338e70f1c2ad0e622d0ae6d7f50d1fdf991caa8f22f9ebc00c1ae2054482bc2f9bfb37ef8c55e50721cab2ad0a2a792324d3234fcf947f937c5a43a7d021dd8ef0706a2786745ce28620a0c", @generic="f5565009757915ec41af241f74b984d6b5c77097a7f8e2f05ab5dd801de1c1fe7794bbef1df965cba9343f51fbd1ca25be92718d77499ac426f63d2bcc2c5c3a7a4d208b73c8b33c3cf3fa960f1c5aa15f8698846a5979327196d6de2e6a5b8abeeb3ed62c16860c3b1cb6a40d096543b55f8c0ecc0a26da4a2e1e3e9075aefa0741e7fb446ea3e25465d09972abbb85833c6a08a96e23eb356433dd7978e42510c57bb5d1d8c2119a3eafeffbc13b767c12c71adbf5", @typed={0x8, 0x1c, 0x0, 0x0, @pid}]}]}, 0x3a0}, {&(0x7f0000003600)={0x18, 0x17, 0x100, 0x70bd2a, 0x25dfdbfe, "", [@typed={0x8, 0xef, 0x0, 0x0, @pid}]}, 0x18}, {&(0x7f0000005700)={0x290, 0x28, 0x201, 0x70bd29, 0x25dfdbfc, "", [@typed={0x8, 0x117, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @typed={0x8, 0x140, 0x0, 0x0, @uid}, @nested={0x14, 0xa4, 0x0, 0x1, [@typed={0x8, 0xb9, 0x0, 0x0, @uid}, @typed={0x8, 0x146, 0x0, 0x0, @fd=r5}]}, @nested={0x160, 0x6f, 0x0, 0x1, [@generic="78cd2e04bb123ed2a22db2e232d52c0a50a6d26c4fad36c1857d4b", @typed={0xc, 0x14, 0x0, 0x0, @u64}, @nested={0x4, 0xb1}, @generic="1ae32dc8fb26ba148668dd2f1c411e8a8e5338fdfceea23443c69c5825b314e54d7ec839f4e16130c93ec26c4e10673e4aadf29ad8fc6404e3bae2b59bf0942e98dc5cd8d7d8ec9bb6cc31bde342f19118341d238f4e928d2f7507352796ef3162dfe7f9369bb44a4fe1b16920eb2fbcf4", @generic="7a4b29157386683b7f023ee398803deea9e45c7b314941e5d0cf59a65d1263cd1700c9513b2f0a0d894e04af824a78ea67ee455d5f0fc04b20e9aa593d7c72b529ac159073ecd6edcf5d5df2d03a406bbe1d63af288c2e90a62bab1553203e56f4707685dd562d0a5764bf8ab9f990211a689e3706601b45f2c55a3471414de918ba57bf0bdf3da1f795af0bc06ce94ac1c974724b44b71d4d3c1747ea05c0f83fa381369ea008472f3d3e0d9eaeb5ae037b384dc09246d2bf62d60852276cc5"]}, @generic="a47ce96d794730d89af3868816737d0d90c15e8ce28dc8447d1cee5b099007d438cf01edc062f1e1a85021eacabd0ca78b5a4e528294decdcbd3f7d3cd31d2d0dd626b6ce575db667dd2633789a362f962e7dbcd5883ad7841a184c5758294a2ccc17307211edd04adb31ea3c1e291e3efc702a5d89bde726917a89b60cf2795e32c80e6dce22445558714e6b755d560bf95e0f0f8db59607f7eab968968273597963453a98c995e1eec7db18961f3e01edc364f219e4b03861a5bbd0e0f98e20be16f2f8b7fd862219374fcb2601e666171447a0d74d4b4713c704e62905213b261", @generic="097c0b7d76236450823a1d5c478fb3701a045c3a3dbeca0c"]}, 0x290}, {&(0x7f00000059c0)={0x1c0, 0x2f, 0x1, 0x70bd27, 0x25dfdbfe, "", [@generic="01db42b9ab88efff92a2563838ad48f3c35d5426bd5fe084dc94e88623e3c0bb70a7cd1abc88c02f", @typed={0x4, 0x6}, @generic="8dd2d27927b3668a4dcaef13c59f2094909f5d706e6afb9b4ef2d4d79fa22d602de6843dbcfbb0f4d86e39f78f3df347b676a49a277028acbb97eb42e4cd5e80c80b053a49e3796b7d5a30818c651feba140a98477b20661d2a0307cc454427ebb7932f2182064fd7df2367ebfc8b4b0536efdec81035479915ada9fdce700884492356cfa71441fe651e32837c539ad363e502de38069ac75ed6ea36dac378520d9169533ff7121e393c55a4b6fece002b2ea2b713530435f8068ea8700620b09d4c1da19d19d262e59e24696c3c3cf39e01e769861e44e8b4e1c245f22892760", @nested={0x8, 0x12f, 0x0, 0x1, [@nested={0x4}]}, @generic="0a1627567db824ae51b79d95812172ad756c9f9d4d1e8634bc1f9bcd76300c06096c06db43d1a2843eb0ec37bf7a7086e4da5fc6df40c125766c1005b802451565947b514e4614e98f4d7ada0ae673371ca67e6e51f17fda3aa5ef13ad0c4bfbcec685fe0c8c99beb6a700ef11a4443a5a14d9b271c3b6ed65a528cd14f31b5d3dedcd1cd9feb5dddb853af87b123722268f95bb87562e522e7e"]}, 0x1c0}], 0x6, &(0x7f00000005c0)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x30, 0x1, 0x1, [r5, r5, 0xffffffffffffffff, r4, r6, r8, 0xffffffffffffffff, r4]}}, @rights={{0x38, 0x1, 0x1, [r6, r2, r3, 0xffffffffffffffff, r5, r2, r7, 0xffffffffffffffff, r2, r8]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r8, r4, r7, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [r6, 0xffffffffffffffff, r4]}}, @cred={{0x1c}}], 0x150, 0x880}, 0x8004) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)={0x18, 0x6a, 0x1, 0x0, 0x8, "", [@typed={0x8, 0xbc, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x18}], 0x1}, 0x2000c0d0) connect$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0001, 0x0) write$ppp(r10, 0x0, 0x0) 7.094891245s ago: executing program 5 (id=3036): r0 = socket(0x1d, 0x2, 0x6) getsockname$tipc(r0, 0x0, &(0x7f00000003c0)) 6.996701786s ago: executing program 4 (id=3037): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000138)="0000000000000000008000"/21, 0x15) ioctl(r0, 0xc138fd09, &(0x7f0000000000)="0400000000003200000000006e01000038010000010000000000000000000000000000000000000000000000000000006d79706f") 6.963406429s ago: executing program 0 (id=3038): socket$kcm(0x10, 0x2, 0x10) socket$inet6(0xa, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_open_dev$mtd(&(0x7f0000000000), 0x492, 0x20800) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x1000, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000040)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x69e}) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x700, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x80300, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xffffdffe, 0x351}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a75, 0x100, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x66c7e65cbf3e4906, 0x3, 0x250, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 6.908786131s ago: executing program 5 (id=3039): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80, 0xfe}, 'port0\x00', 0x511e36599023629, 0x100c08, 0x1b31, 0x8, 0xffffffff, 0x2, 0x40010, 0x0, 0x1, 0x1}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x0, 0x101000) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x2, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r4, &(0x7f0000000600)="b56511e72c6cba780ce701ed0b2db27a336692892a6491e2488652ff00c468d353d809d5b20d8ee0f9fefa6cd7bd1036ed25f0e37053d291887c707a892884c2b4aa2ebac156ef8288264449eea05c4f51c3bb4355eb108744fe34e5d0e851d51a855854135f04dd5d854459226f090b6f0d6135e8f2824eed7469236cad2251116a381d8cd30bae59c1fe71e028a667cb910d523aa5d7208286755075ee8be937304cca20e234303df72ad4e2bdc71219456229460a7c6a2df61e8b21b4a4941dcba5c257", 0xc5) write$UHID_INPUT(r4, &(0x7f00000014c0)={0x8, {"1774d10ed679a3761698425e02229859f202c5d54bb9aaa84c470671ed39e31fcd1987c3fab368535c1d72f471356277d68201ce587582e0b61c74107f26d9b357fed4393b6676c62cb12bb5104bc87b40120258613657f462d98097b32565f3c6a065c0ecf81581c270d0adccfdd40199844781374e1cee0129091296af79ff67a1f52be0c73043a7bb6860312b9b2d3514d05233defb9e2e9ae218a0731aa015e7f042114d434f4209218e37f80b240526d575cb63f1ca89512cd50e27c21a827328cbae0874b155506fd933a2e59978eaad1c78dbed757e9e0047f5ebd5e9faefad831e5c55100f289794dc5b2116838edc1caef786cead375259a7768ddfd6cf5ed870b7abdcef90350a64c1eb5d6e54de748d6349f7e5bcb0377df4744678e7700911426a8b8540996d54716ecd8cd3a9f8175f23d45f9a1497654d5f2e4dad96b4b34cce3a39eb084bb829e05c82249951f91b432999c302bbe8ae5f79bb8954ed23ad98f87b5c30d079b1b2186db53a3849f9dce0e4d49c04f3025d4b25bc0728ab25ea5d050dc2586bad7ac437d7a5881c06e8b9f3eae66dc2aa48d0edf763daa7c6aa90df3c61fd69cf301090790b608324f4cfcc23acdcbbf9bd7e224c5c33d817cddcd10e86cbbda0de36f52d2389fa84dad6ed1819ee056b9a80d0b81f2a6b4ac50192f87cabf46f5fc88abcfbeb4301632d353aaf091b7828d941cb1c0e1477e5761032a63dadc3c7f51de8429c63b4ad65e975e38f244c6fe40e8fc6c33c4a16deffbe1b0423e584f45023e196d92b5bbc7d1854c3f33e8b0b7c5d3d87f0119380e2d14d6630219dc0e31469c2af0db2d624cab5c276c396f7d1543370ca9d925ac2dc2204de8008517c815e9fa7cd56e53f82ce1d095cd08032f57835ecb14c39fd57c90e39557934cd278a609e2e05a07a791d417f4460d2c30c10e1ef92cc146b1f9ff6b98b2688e2f050c510feba0d6960d31522cec3f6b0f539f85898a6b6409dd179d990fb57026acd9382f505ce06db211d7a369f46d8ea5804502bc7829155794b19a098d095a00b520966e9f49c74111d1f0f0f75b07aff0d388650a63656c9e601269d2eff1740e87206416ec73c08b56570dd496846b4f1a5d76602b6594e173209e5e7cebbab3f9f29bf957d000510eff9ce7ee3fea7fff32f3b6ae414ac311e14550e9a597aec7e76df40b7352bf4ddbd00739041edda795aeaa2665ad51a836120054bb0c8c1d3149477167214a0f952c78039ec8a70e21158db26d8f0238f782a5d54dced90951085abd412ef2e5b9984c7e263dc3eac6c683e8b82c5d56b5fa1e2f65d5d0afd32bc66d76ddb87a41805e11137de7373a9f6366a9a314cc6d5e731abeb2e83f135798a8bdda1c47b36db21140a9278b86c520bdbc8338ccaf5fbd61d7e73750b38e4bb6c77c33bf5617086c8f97ab219b4f6c930fd717aed4f1fa0eebcda82322c561dcae23284e0bfa4bf7a5b4b19ff3fe3137c4e07c55543a7d3778ccfaf757fae541bcf475382cc8ab6a0ede61789652b528efaacfa804fc1583bdfeaea00565c70a5941dc7a947ed97d9b6688f6363edf0735e72d9b8a4b21e5cd2de518e27bfd41749eafa66f3452e941273050ceaf39435327737857d4718a31b83649b3dced6f37a9ce3621a83a7ba9163dea12990677d21781f4ff95a68dc4b268b4c5e428c0941443c98025773362acd28a88f8d7e42fa72b908ac6a816270d78541c98e36b838b83ba99656192624211a343e6e76e154ebdb1af56aa8489f6a30a6be0dcd84f80ab2d02ac7bee22e5f6207d74c4fda0c6d7cc71bea537718bf8bb1d3c2602903139449b046d09528b4331bd8e396bb9b5c0b15db16a72947eecd0f050de9ee9e6b82fcf48a7fbecf911fda3d013fa9941a60f41b9d1f56ac40f07e7259c7c79f17cb0a90c472d33aed227151fc93c76e7a1fee4675edae1a9fda95a5d2b42c7b13d84995ee1b6411c48329f529752d65601c034cdb13ea4051132ecb7f71953b43663053fc2a174b1a7694d6a8b3eb9facbaf8b7281e00357ee255816a489ca91656dc506deaa9c925a0e53600a9e7df5bc89db907a323ffeba03d3c06a4f0569a6c0cd02ca46eede0b9979aa5b40fa85b47b3d4f4aaf614b5b72ab9ea4289d08346759fbc4c0c25dd179d0efc994f4ace7612720dbd1b40395c95c43e24bdb5941295ccfdfb8b558b3234a80a2cfb5a50d96a31e2f1bcc4aba66994626f735d5fd742f0fc2ab2bcc0a73a6210e9b2222a3577f7cba7fd31459c58bef86eb76dd00fc165a16519d05f5aa5753b89c5391a051b2930b22eadbd1f4fc76fc675faf35bde9306ef48fa349f1978b84e033340681bf06966a833c03902d749444574b9e3e88e027b01d057db785a1e0d6b4135c3b6f2ac370a01351bcdf0474d4708675502e64e02d468c4e1454271dda60f82cefb8f6ec9bd871bb4c7a50a17f3d1d9c1bce2e79cb59704f78a31d13cd6678e20ea53e8d0bff1527bf76670982fab8cbe62377baf3c59f256e0bb21686402efd240cf07989832b02975e09b06da9486667869e543e7e868e1eb2242811f306f9cbeff4e606c62dbccfcc3dec265b396fa70c04b0816dddedfe5d70b44c35e387accad9945c91ced6665482f95e1bcd4fb603eb5add65c934d74a40dd37a24ea972babb9197dd85b102e67d5658dd8cd64b661fac6dae2e1d8f7325e2a62d1060836f53a2f3737c843a42662a7ed6eb63c5ca670273539529a760417f3d95fd4adfe86ae582742c1d54dd121e5ac820d3f547a647f72f723a66dc9830fbcc228559c77d3fd1d7443598717f69d58b9e7cc64e9aad2da810b45aaf01b377d54eddc0e97f6d1dc07aa33c30aa2667719cebf73e67d001bd967e6529f195b38dc6684758b557ce4ba3b47d84a03be117b58cc22adbab162bed3965f768982e5355d241f7f0c0943d389a61ef2c633d8b99c7b6deba3bc4e4c1b7366a178ed6bc1fb49ce646b411ccb940998d01a941546a5ad1988faa66ba6338a7562e17ee0af33e76d6dfcd0ed0fb92911b2c9cb880f367f6429a7446f090b90b83893d1c0ddb138959853b68a85894a6d5aa1d287c2a949f9331fedecf7de02a5b51014c917a42e33274e6d597bd6ab586f73ce61a96f9512a0ebc729869c664a895be61ec7882869852c922d3016726edc90f909af1d07e8a3671bf751135cd24066fad1992103bdcd5052059abb0e1df33560ab3637d66b1013f8a234e3238de1170da7addd84b21f1e870151f534d799ed6164a031686bc48d2ae5a89c81894a28a9cd944a535b907777397e739a3b6a8e7d54bef71907071bc2a047ca14d7ef2e9d9b66da86ce56bc62ada0c813d9d63aa899f77f5d804a13a79b0e2275c4ba387e970519e67d212193d91bd0a96a1068bc136616ab5153b1e4b956f1a44b5334e8fbf8abf57fb28a13a64ad6085497faf88556d721f8e0a0699469646f22789e6530c03c75f69279e809d95d444bd44af1d19d12046de9d524caedc84a506642edf34b409b41ccb9689f8597cacd20eee8beec2b3e89644c06750e080da5cc06f3cb10b854fc23d39e52bf95b88335e7536888d67ea92df5868c5835321234e70ebf80e4365c19693a3a640a30f5aec7c490b4ed32ff169e907e25f862fe5aa8a9238cf5cee03ec2ab9e2801239980e78162b560ae3d066351f944c31d8b57a20cd2419b05b0fdd9f8ca4b7a8e1e7955a6b66a264d6d4c56d83c15871ab3f3327284ff7cf5e8d6c7f762d755fac0c7784af9efd13c9337d38451acb23020f4934ef1708b362b5d5cf4b743fc0f9712860ca2977319e1226ed860c2be3caacc8465ba80a0a6856322bc352972fd3f3c0db3acd66d56fef139e48f3d63d3a62c532aa10485807269bac3348316d9fd1931cbfd2acaa5c4e9102872ab16500260f2aec57025c0d6dc1bd68bff597667469e8eb57459b1881c10bf9531c23a6d9349b06b0db60aa6f89a4e0162038ea1850348b72e16f7d647e092c1d7ca55ba5095e58b18dd56b72ba9cbc09598663e8f54b2594194de72475abafdb285d464007ab91a83b91e7c8d5968ecb452e011c0b74e4309180615c3f67c2cad6e086f3686fd5394efd86d8bd45829314a5eb4a0549613b668e7b97600ac9ffe59df44e87046de44432dcd0aaf0c02c446ee9aaf72e80ce989923d4720fd3b8257d3fec5af22737c1e426f9d851c7929d69713e4751d5d39de20f0990bbdcb579f36b778bba4b8c5bdeb78208412005fe7cee40fe86691b8b0d6d3234e74192528622c31022cc3a81f4a574efdb67348b36ae7fd5977059d911da17746b040f06e7bef06accf4ef1ea4f4402041a98f3760d0fb8851b4e7d1124f37b1c653cc9ac53f4e373f694f8c957c390b0801859a19776a83854d2b65766bb03321fdac9a23d3345821fc21195910245e5ad79926a08094b54e242f002634b7213e5c122e76514f9ce76ce2740741f7ffe30e036de63b737fb16b240c6eeef0c1c537d219449b95d497723088548267c229fd5a122f25f2c6ad2fc3ff28133305ca850c5e2d1453dbb4429a8ee3a8f173feb49b611764c536c668c9aca8b8ec575c2310044898a4657fa1dda2ec6f7b8906d9521525ffd30c2b5948a0250224ba4d6beb39008c3785ddad71ceedb34301706b71634bf74b33ea4c436c2006cc5275d7931855d376c6314f8a5431781c3347bd9b3edadb8fcb959a6bb48e9407de69458fcc61c3a62e32720d3fd838dad3f50e852a2aa6d26af70205f9d8e40d3b9232c2ea9a4f86857fec4f7772e43d6dabd1e34400a84d1d338941bc31ead12047bde3ccdd89c53fcbfeff9fba85be6c11447c4b088eb184186a5e41e17bc0011c008aa8b98b44c1c862f8f977d1998d8dce81688d3d80d0fa2b9b7e7f78f80361f525a7586f3d9e68456b55d6f0e8c99495da3a5f392fc8bfe4e42af04fe85936c99b7be80acd351bffa7b723717621d9ff37b5ef829dfdc6ab085c2e83df864306cee0096486e77a1f9d7b7cf5bd157a69a05a12bb735606ac360af2c23542e52880fe9328524d5b121e378319ef2e1a0874fc99842ac8ac04dd6c634b08d81ffd379e9a52573a1721f63a6c009c590e7f43fcbaa2c23c975dfd1a9d1a6dc21587511b4cfdb6f53721940a9f4dd3d8a2c6bdf9890a152e05c9b561518a58a861aae8cb02f1031a121297f6b0820b22d9d6e544adc91216f4a3c011dee24774bfddef418a56c5f0ed57e6f3ce2a76d812a19a9420141eca0ef3d86f552814cb8b2a68b53bb195b2dd2b44f49e93c742db0b2bd637fd247bc28755819a9e122725a6b4409baec607359268eb6cf83fcb674a3771b75b8a7ea0300c16a624333b69bc188c417557356ff7336cde8645f973ad18ee15fc3b34074e1ec58eb00b779a86c7dd7e76872798a12b29b3f446240770999853686f18a624beb6f07f614b413a0cbd954de99a6a79b7c9dbdec41fa172025d9e7d6e82935fc21b4c90bae9b4e9a84478e2289fda091ceacdd02bee2d96fa9d02982191418a9db4115ba049b045ef03dcffc0566d802df6d97dcd90660cd9c3a682bca8a48dd7168ab86074685993571843f74498f1d3a85ab9c63c83450809e86cb1bcf2f341cfd7db56090ad58c34e3a6a98ea65e7b5b439295b0ad6e6e695d88dec93c2ed776df7fc41ef0cec809500d2ce06ac217001748fa337b91f1bccf4d22ee7183e44a573cf95bdbe1e2e10d0c2d52e1992983f84fa1b109eb1495c9d25651510b75a2d5c689b7fe9", 0x1000}}, 0x1006) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0xfff], 0x0, 0x0, 0x1}}, 0x40) readahead(r1, 0x0, 0x8) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r8 = fanotify_init(0x8, 0x400) fanotify_mark(r8, 0x39, 0x1a, r7, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) io_setup(0x4, &(0x7f0000002540)=0x0) io_destroy(r9) fanotify_mark(r3, 0x39, 0x1a, r2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) keyctl$revoke(0x3, 0x0) add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r10, 0xc004743e, 0x110e22fff6) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000004, 0x10010, r10, 0xd841a000) 6.623838916s ago: executing program 4 (id=3040): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)={0x3c, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x3c}}, 0x4) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="04130d05"], 0x7) r4 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x17, 0x12, &(0x7f0000000040)=@raw=[@generic={0x2, 0x2, 0x0, 0xb595, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf7cf}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], &(0x7f0000000100)='GPL\x00', 0xd, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x4, 0x8, 0x5, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)=[0x1], 0x0, 0x10, 0x80}, 0x94) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340), 0x20001, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@fallback=r4, r5, 0x0, 0x0, 0x0, @void, @value=r6}, 0x20) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES8=r4], 0xd) 6.493891652s ago: executing program 5 (id=3041): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40440, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x200c8100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x4) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033", 0x65) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfffa) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r4, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007"], 0x84}, 0x1, 0x0, 0x0, 0x20008840}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) 5.235400376s ago: executing program 5 (id=3042): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40440, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x200c8100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x4) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033", 0x65) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfffa) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, 0x0, 0x0) connect$inet(r4, &(0x7f0000000240)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007"], 0x84}, 0x1, 0x0, 0x0, 0x20008840}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) 4.972178224s ago: executing program 4 (id=3043): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e2400000000000100000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000001c0)=r4, 0x4) sendmsg$inet(r6, &(0x7f0000001880)={0x0, 0x0, 0x0}, 0x48c0) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x5}) ioctl$UFFDIO_CONTINUE(r7, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r8 = socket$netlink(0x10, 0x3, 0xf) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x696080, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r9, 0xc008aec1, &(0x7f0000000340)={0x9, 0x0, [{0x4, 0x4, 0x5, 0x25db, 0x4, 0x4, 0x4}, {0xd, 0x3, 0x2, 0x1, 0x6, 0x10000, 0x6}, {0xc0000000, 0x8, 0x1, 0x8, 0x7, 0x0, 0x20000080}, {0x80000007, 0x49, 0x1, 0x9, 0x3, 0x8001, 0x10000}, {0x4, 0x7, 0x6, 0x5, 0x9, 0x40, 0x90}, {0x80000000, 0x0, 0x0, 0x5, 0x1, 0xee77, 0x6}, {0x80000008, 0x6, 0x1, 0x2f22, 0x7f, 0xfffffeff, 0x6}, {0x0, 0x25, 0x0, 0xa, 0xd0ac, 0x7}, {0x40000001, 0x9, 0x4, 0x40, 0xbf4, 0x8, 0x1}]}) r10 = socket(0x2, 0x80805, 0x0) ioctl$sock_inet_SIOCSARP(r10, 0x80108906, 0x0) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_clone(0x80808000, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0xc0000100, 0x0, 0x2066}]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) syz_usb_connect$midi(0x1, 0x3e, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x4752, 0x11, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2c, 0x1, 0x1, 0xfe, 0x10, 0x81, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x0, 0x6, [], [{{0x9, 0x5, 0xa, 0xb, 0x40, 0xf, 0xd7, 0x2, {0x4}}}, {{0x9, 0x5, 0xe, 0x2, 0x7ff, 0x6d, 0x72, 0x4, {0x4}}}]}}}}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x241a1, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="350d0000000000003000128008000100687372002400028008000200", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r12], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 4.968862533s ago: executing program 0 (id=3044): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./sys\x00', &(0x7f0000000d00)='sysfs\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r0, 0x6db34000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r1, 0x4b48, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/bus/platform/drivers/vimc/unbind\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)="76716d632e007cb782812f5584ac1202f0", 0x11) bpf$BPF_MAP_FREEZE(0x16, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r3 = syz_open_pts(0xffffffffffffffff, 0x2000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x81, 0x9, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0x3) syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000dc0)=ANY=[], 0x114c}}, 0x4000080) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406a053b030000000000010902220001010080320904000001030000000921110100012217000705810340"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022170000000600ff0901a10185020901150026ff00750895098102c0"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000a40)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24048090}, 0x20040000) syz_usb_ep_write(r6, 0x81, 0x2, &(0x7f0000000000)="02c0") close(0x3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) ioctl$TCSETS(r0, 0x8924, 0x0) 4.926251057s ago: executing program 2 (id=3045): socket$nl_generic(0x10, 0x3, 0x10) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x0, 0x0, 0x818a, 0x8, 0x3}, 0x30, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x41, 0x0, 0x0) close(0x3) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f00000000c0)={0x1, 0x0, 0x102, 0x1, {0xffff, 0x401, 0x7, 0x1}}) r2 = socket(0x40000000015, 0x5, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000c1768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES64], 0x0) r4 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) write$P9_RVERSION(r4, &(0x7f0000002200)=ANY=[], 0xfffffcd9) close_range(r3, 0xffffffffffffffff, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="0000000000303e97380e90231bdbdaf6a4bd77eabcd3866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9d00000c0a498396b28c7d1784d04aa38922721cb781608144284d90a72d7d2e3152d201ed78ffb6e711b889cda0346ce9bca2e6e9e46b15980456c43a659f427e3e6e9e16e0de93100734d409ca57c27d3bde66b2791c1b2f7032f3cc02c85c43e8652f13258bd412174ea931f1d39a9830e593761d91c56f637f0e1568ea66a15d9f0eba504ab3eb205fda13d1068e7692f8d00a2d92d2fb48887b6f71c6de43a923bbcaa9e3ac5bd82ac0ec00000000000000000000000000000000e48251271d0ed111d9ed7f4d18ee4aa30240843ed560aeebee209d8c557e60e69e634b37c43235e062634e8f0932582eb91d27c5c81911c5a4d57ea2813573", 0x138}, {&(0x7f0000000d00)="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", 0x319}], 0x2}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x0, 0x400, 0x0, 0x8, 0xf}) close(0x3) 4.022772771s ago: executing program 6 (id=3046): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x0, 0x180) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000180)={"d8a945e3", 0x400, 0x95, 0x9, 0x1000, 0x800, "3ab74a868d7ef427ee096a1b234621", "eec0e929", "e2d8a00c", "8aa092e8", ["9b2f17d761dafb647900b408", "833c4f9004550ed379eb6fdf", "0c50b69ff79d98d45590bcb5", "afdd3ece543753f349ebec4a"]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='6']) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0xf0cb2f4a0c2cfc5d, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000800)={&(0x7f0000000780)=""/117, 0x75, 0x80000000, 0x7ff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="880100001000050000000001000000007f000000000000007f00000100000000f0f3d6d40be295ab00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac14141700000000000000000000000000001234330000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000a00000020000000000000004c00120067656e657269632d67636d2d6165736e69000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000004c001400736861332d323536000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0000000"], 0x188}}, 0x0) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="f4060000", @ANYRESHEX=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=0x0, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c030000", @ANYRES16=r1, @ANYBLOB="00082cbd7000fcdbdf254b00000008000300", @ANYRES32=r5, @ANYBLOB="0c009900040000006a0000000400ec006c0084802000008008000200ffffffff08000200040000000a00010001010101010100002c0000800a000100020202020202000014000680080005004de60000080001000300000008000200040000001c0000800d00010047b114eb54ab3ec2760000000800020005000000040087000400ec0030017d808d00000024f725a7f682c2a3e17aeee5591a447b7436f887489d89d44ae8f8e4917a009a5497b82cee339cd022fee5abd5983221b6b6ecb19bf5d2426c07359a17035c3b49adccb388415dee297825ea2f5ac8a0b63720cde90546de903314864e9c1d9833b378fe815f452bafe4d56633b21cd740a719f5df23c654ec5c0c43f5c548b7ed2f4cc4d766defccc0000009a000200fbc8a70be8747ebf1377504e8716c94de5dcdb554f03edb5e75b4f286ee887e65ba2dcd050d4025974253dc7aa8f9a52c8be3a152c041fc96ffb5351a1d3ba951c6722182e46d1d46d59143dd70fac8d6e5f269fcfdbbd355f60363eb90d8cfaae64c7aa0e7c665847919924ec8e8b0de8a341b0bbb71c9f984251aefe21c4480d1b672a7829f87e6c171fc07ff39c7a1f261d6fe1b100008c002d800a00000001010101010100000a00000002020202020200001800000027a450da8cc76cbfebc6850e3a7d98cf16661dcd0b000000764dcffbacc43d000a00000002020202020200000a00000002020202020200000f0000003fc671df4de185eb2df842000a00000002020202020200000a00000001010101010100000a00000002020202020200003c002c8008000000030000000800000073000000080000000c0000000800000008000000080000000001000008000000bedb000008000000030000000400ff00a00084809c0000805400068008000207000000000800020007000000080002000002000008000000080000000800000004000000080005004c249d010800050002000000080005000500000017fe02000500000008000200030000000a0001000202020202020000080002008100000014000680080005000101000008000000ffff0000080002000500000008000200040000000a0005005050505050500000"], 0x33c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4044000) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYRESDEC=r0, @ANYRES16=r7, @ANYBLOB="010015be4c385af31d4911"], 0x14}, 0x1, 0x0, 0x0, 0x40084}, 0x40000) 2.969914874s ago: executing program 5 (id=3047): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r1, &(0x7f0000000300)=""/172, 0xdc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x7fc, 0x40) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) mknod$loop(0x0, 0x6000, 0x1) mknod$loop(0x0, 0x6000, 0x1) socket$nl_generic(0x10, 0x3, 0x10) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "112000"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x777) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) write(r2, &(0x7f00000003c0)='1', 0x1) 2.580574979s ago: executing program 6 (id=3048): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101001, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) mount(0x0, &(0x7f0000000300)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000800)='./config/usb_gadget/g1\x00', 0x1ff) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000080)="0100000002000000ffffffff0100"/24, 0x18, 0xfffffffffffffffd) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000040)='syz\x00', 0x4) sendto$rxrpc(r1, &(0x7f0000000100)='test\x00', 0x4, 0x0, &(0x7f0000000140)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x1234, @local}}, 0x18) mkdir(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uac2.usb0/c_ssize\x00', 0x1, 0x0) write(r2, &(0x7f0000001000)='2', 0x1) syz_emit_ethernet(0x1218, &(0x7f0000002ec0)={@multicast, @random="d8be17d19221", @void, {@ipv6={0x86dd, @tcp={0xc, 0x6, "1ed996", 0x11e2, 0x6, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[@hopopts={0x67, 0xe, '\x00', [@hao={0xc9, 0x10, @loopback}, @pad1, @generic={0x2, 0x6, "1c11b9f8dca6"}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x40, {0x2, 0xe, 0x5, 0x1ff, [0x8, 0x4, 0x0, 0x2, 0x1f, 0x8, 0x2]}}]}, @srh={0x3b, 0xe, 0x4, 0x7, 0x3b, 0x10, 0xf65, [@private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @private1, @dev={0xfe, 0x80, '\x00', 0x12}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @empty]}, @srh={0x87, 0xe, 0x4, 0x7, 0x6, 0x0, 0x980, [@loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0x25}, @remote]}, @hopopts={0x2, 0x13, '\x00', [@pad1, @hao={0xc9, 0x10, @loopback}, @hao={0xc9, 0x10, @empty}, @calipso={0x7, 0x40, {0x2, 0xe, 0x4, 0xfd6, [0x1, 0x200, 0x10000, 0x2, 0x8000000000000000, 0xd5, 0x4]}}, @enc_lim={0x4, 0x1, 0x5}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @hao={0xc9, 0x10, @mcast2}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1]}, @dstopts={0x3c, 0x1, '\x00', [@pad1, @ra={0x5, 0x2, 0x5}, @pad1]}, @srh={0x0, 0x8, 0x4, 0x4, 0x5, 0x28, 0xa, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1]}, @srh={0x0, 0xe, 0x4, 0x7, 0x7, 0x68, 0x8, [@local, @empty, @mcast2, @remote, @mcast1, @mcast2, @private0]}, @hopopts={0x33, 0x1, '\x00', [@pad1, @ra={0x5, 0x2, 0x7}, @pad1]}, @dstopts={0x5c, 0x1c1, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @generic={0x0, 0xe00, "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"}, @padn]}], {{0x4e20, 0x4e20, 0x41424344, 0x41424344, 0x1, 0x0, 0x11, 0x4, 0x3ff, 0x0, 0x800, {[@mptcp=@mp_join={0x1e, 0x3}, @exp_smc={0xfe, 0x6}, @md5sig={0x13, 0x12, "05015c010a065cb549b73199a5f8f27c"}, @sack_perm={0x4, 0x2}, @fastopen={0x22, 0xb, "5c440e74789b14afa7"}, @sack_perm={0x4, 0x2}, @exp_smc={0xfe, 0x6}]}}, {"b8957e9c4dcbc1325ffba781d12fdee9ce40b6fae3c8fe54eb6b9a501753a3414659cebc82a79f3cb673195c56f20b3399d0ca015c846ff600ee121ca0992c9a2f1884f29c44085ed996885249760f6b35829f45de7983a9e3b2be0129a11d7dcfc04f92ca50be4ab37a3ec07fb5b8773a62103591c8f5603cac75eef081df1d94611768e9a7"}}}}}}}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2.327804364s ago: executing program 6 (id=3049): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000100)={{0x1, 0xdddd1000, 0x10, 0x0, 0x8, 0x2, 0x1, 0x4, 0x0, 0x4, 0x9, 0x10}, {0xcccff001, 0x0, 0xc, 0xfc, 0x0, 0x0, 0x0, 0x1, 0x19, 0x4, 0x0, 0x3}, {0x2000, 0xdddd0000, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xffff1000, 0xe, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4, 0x8}, {0xeeee8000, 0x3000, 0xb, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x38}, {0x5000, 0xd000, 0x0, 0x7, 0xc, 0x0, 0x2, 0x0, 0x4, 0x10, 0x80, 0x1}, {0x3000, 0x100000, 0xb, 0x6, 0x0, 0x0, 0x2, 0x0, 0x10}, {0x8080000, 0x3000, 0x0, 0x1, 0x7f, 0x40, 0x0, 0x1a, 0x26, 0x0, 0xff}, {0x80f0001}, {0x50000}, 0x0, 0x0, 0x1, 0x60, 0x0, 0xdd00, 0x5000, [0xfffffffffffffffc, 0x0, 0x1, 0xfffffffffffffffc]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000005c0)={'bond_slave_0\x00', @multicast}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5ce000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002a80)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x15, 0x301, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x4, 0xf39, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1f7) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000001600)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) lseek(r7, 0xb, 0x3) r8 = dup(r6) syz_ublk_setup_queues(r8, r5, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x5d, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff5, 0x4, 0x0, 0x0}}, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000500)={[0xfffffffffffffff0, 0xdbc, 0xa, 0x60, 0xffffffffffffff35, 0x2, 0x35, 0x7f, 0x9, 0x6, 0xc, 0xffffffff, 0x4628, 0x0, 0x7fffffffffffffff, 0xda], 0xa000, 0x80}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000340)={0x2031}, 0x0) syz_ublk_add_dev(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000000)=@new_dev={0x3, 0x8c0, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x165}}}, &(0x7f00000000c0)) ioctl$UBLK_U_CMD_SET_PARAMS(0xffffffffffffffff, 0xc0207508, &(0x7f00000002c0)={0x0, 0xffff, 0x70, &(0x7f0000000240)={0x70, 0x1, {0x8, 0xa, 0xc, 0x10, 0x5, 0x1, 0x292f, 0xff, 0x8001}, {0x6, 0x2, 0xefb, 0x3, 0x7fff}, {0x6c2, 0xb, 0x71, 0xf}, {0x401, 0xfffffff6, 0x6}}}) ioctl$UBLK_U_CMD_SET_PARAMS(r9, 0xc0207508, &(0x7f00000003c0)={r10, 0xffff, 0x70, &(0x7f0000000340)={0x70, 0x2, {0xa, 0x9, 0xa, 0x8, 0x6, 0x9, 0x871, 0x80000001, 0xfffffffffffffffd}, {0x2, 0x1, 0x6, 0x6, 0xf7}, {0x2, 0x2, 0x6, 0x80}, {0xffffff80, 0x1a, 0xffffffff}}}) 1.763876759s ago: executing program 4 (id=3050): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a07000000000000000000020000000900300000000058000000030a01020000000000000000020000060900010073797a300000000037000300fd02b21edf8b721e23f25f47a7af48fbb07c400f2ffd8d27130601205b56f46dc2de1fa3d7afb2f185d0371736af66032ae4ee00140000001100010000000000000000000000000a0000000000"], 0xa0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000000900010073797a30000000000900030000000000000003000c000240000000000000000114000000110001"], 0x60}}, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x2, 0x0) ioctl$COMEDI_BUFINFO(r2, 0xc02c640e, &(0x7f0000000040)={0x8, 0x6, 0xc73c, 0x4, 0x400, 0x9, 0x2}) (fail_nth: 1) 1.697434306s ago: executing program 0 (id=3051): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40440, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x200c8100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x4) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f93150", 0x64) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000240)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007"], 0x84}, 0x1, 0x0, 0x0, 0x20008840}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 1.689157459s ago: executing program 2 (id=3052): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0xa0000) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xf3f, 0x70bd2b, 0x25dfdbbd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xc}, {}, {0x7, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000300)={0x8}, 0x61) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0081010030620000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="001402000000000008000a00", @ANYRES32=r3, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) rmdir(&(0x7f0000000100)='./file0\x00') ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000300)={{@hyper, 0x800000}, @my=0x1, 0x0, 0x0, 0x2, 0xfffffffffffffffe}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f00000000c0)={{@host, 0xffffffff}, @host, 0x0, 0x0, 0x1, 0x4}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r1, 0x7b1, &(0x7f0000002180)={&(0x7f0000001180)=[0xffff, 0x4, 0x80000001, 0x9, 0x100, 0xf3, 0x2, 0x200, 0x7, 0x3, 0x40, 0x0, 0x10, 0x8, 0x2e, 0x200, 0x70, 0x19d5, 0x81, 0xff, 0x4, 0x5, 0x8, 0x1, 0x3, 0xffff6170, 0x2, 0x9, 0x7, 0x3, 0x101, 0x2, 0x5c3, 0x5, 0xc1, 0x64ae, 0x8, 0x10000, 0xb0, 0x2, 0x3, 0x6c, 0x4, 0x3, 0xf, 0x2000, 0xbfcb, 0x8, 0x5, 0x7c, 0x40, 0x6, 0xb, 0x4, 0x6, 0x4, 0x5, 0x5, 0x3, 0xd369, 0xd34b, 0x9, 0x0, 0xf, 0x8, 0x2, 0x7, 0x0, 0x6, 0xe, 0x6, 0x9, 0x9, 0x2, 0x6d, 0x1, 0x200, 0x8000, 0x8, 0x3, 0x40, 0xffffffff, 0x10000, 0x3, 0xfff, 0x26020, 0x3, 0x800, 0x3, 0xc69c, 0x3ff, 0x6, 0x3, 0x3, 0x2, 0x1, 0x5, 0x7f, 0x3c9168d7, 0x8, 0x9, 0xfffffffb, 0x8, 0x24e9, 0xffffff5e, 0x2, 0x3, 0xee7, 0xffffffff, 0x0, 0x2e, 0x1000, 0x8, 0x0, 0xfffffcdd, 0xfffffffa, 0x9, 0x21a147f1, 0x5, 0x101, 0x0, 0x1, 0x7, 0x4, 0x9, 0x762f, 0x8000, 0x9, 0x2, 0x7, 0x14e40, 0x9, 0x5, 0x9b, 0x5, 0x3ff, 0x4, 0x3, 0x1, 0x9, 0x6, 0x592, 0xf, 0x54, 0x7, 0x3, 0x4, 0x0, 0x0, 0x5, 0x0, 0x2, 0xbc, 0x2, 0x1, 0x3, 0x6, 0x484a3d03, 0x6, 0x10000, 0x9, 0x3, 0x0, 0x5, 0x6, 0x7ff, 0x6, 0xc, 0x6, 0x3, 0x2, 0x6, 0x1, 0x7, 0x2, 0x9, 0x80000000, 0x5c3, 0x7ff, 0xffffff00, 0x7, 0x9, 0x7, 0x3, 0x6a964875, 0x7, 0x5, 0x7f, 0xb, 0x7ff, 0x7fff, 0xe, 0x0, 0x4, 0x9, 0x200, 0x1, 0x10, 0xe57, 0x0, 0x9ac, 0xe, 0x4, 0xa, 0x401, 0x0, 0x401, 0x9, 0x499, 0x80000001, 0x7, 0x5917, 0x2, 0x3, 0x8, 0xc58, 0x50, 0x8, 0xfff, 0x7, 0xc6, 0x290f, 0x7, 0xfffffff0, 0x7, 0x8000, 0x1, 0x4, 0x2, 0x8, 0x3, 0x101, 0x8, 0x1, 0x8, 0x4, 0x2, 0x9, 0x5, 0x2, 0x8, 0x42, 0x2, 0x7, 0x4, 0x2, 0x36a90000, 0x8, 0x2, 0xfffffffd, 0x7, 0x9, 0x6, 0x8, 0x6, 0x1, 0xd172, 0x3, 0x6, 0x0, 0x8, 0x7, 0x1, 0x1, 0xff, 0x4, 0x4, 0x1000, 0x200, 0x0, 0x0, 0x1, 0x9, 0x2, 0x26, 0x236, 0x2, 0x7, 0x2, 0x2ca47b60, 0x7, 0x101, 0x7ff, 0x14, 0x1, 0x0, 0x8, 0x7, 0x2, 0xba8, 0x9, 0x200, 0x3, 0x81, 0x3f, 0x3d823161, 0x799, 0x2, 0xe, 0x40, 0x401, 0xa5, 0x3, 0x9, 0x3000000, 0x1, 0x80000001, 0x5, 0x3, 0x0, 0x9, 0x4, 0x4, 0x7, 0x10001, 0x7, 0x6c67, 0x2, 0x0, 0x1, 0x0, 0x9, 0xff, 0x2, 0xcf0, 0x7, 0x7c, 0x3, 0x8000, 0x3, 0xffffffff, 0x2, 0x4, 0x1, 0x4, 0xa, 0x5, 0x2, 0x6, 0x4, 0xa2ad, 0x2, 0x2, 0xffff5580, 0x8, 0x0, 0x2, 0x3, 0x2, 0x4, 0x7, 0x1, 0x100, 0x7, 0xfffffff9, 0x1, 0xaf3, 0x1, 0x1, 0x8, 0x3, 0xd5, 0x80, 0x4, 0x6, 0x7, 0x5, 0x8, 0x4, 0x3, 0x1ff, 0x0, 0x2, 0x8, 0x7f, 0x7, 0x2, 0x8, 0x1, 0x3, 0x5, 0xe704, 0x2, 0x10000, 0x4, 0x3, 0x5, 0xf80f, 0x2, 0x2, 0x4, 0xf9, 0x6, 0x1, 0xae5, 0x8, 0x8, 0x100, 0x1, 0x7, 0x5, 0x1, 0x80, 0x0, 0x10040000, 0x37, 0x4, 0x4, 0x667d, 0x9, 0xabc, 0xffff, 0x10000000, 0x2, 0x3, 0x2, 0x36, 0xa, 0x6449797a, 0x2, 0x8, 0x0, 0x2, 0xffff, 0x12000000, 0x2, 0x7, 0x1, 0x9, 0x1, 0x9c43, 0xfe58, 0x6, 0x9, 0x1, 0xe, 0x8, 0x4, 0x4b, 0x0, 0x277a6e53, 0x2, 0x9, 0xfff, 0xe, 0x7, 0x1, 0x5, 0x8, 0x200, 0x2, 0x401, 0x3, 0x8, 0x3, 0x101, 0x2e, 0x0, 0x4, 0x0, 0x1000, 0x2, 0x7, 0x30000, 0x70, 0x2, 0x8, 0x4, 0xe4f1, 0x1, 0x6, 0x7, 0x1, 0x1000, 0x8, 0x3, 0x5, 0x5, 0xcf4, 0x4, 0x2, 0x5, 0x0, 0xc, 0xf0, 0xc, 0x0, 0x4, 0x7f, 0x4, 0x9, 0x8, 0x2, 0x80, 0x3, 0x1000, 0x401, 0xec92, 0xfa9, 0x4, 0x4, 0x108, 0x8, 0xf39, 0x9, 0xffff, 0x9, 0xce2, 0x2, 0xa659, 0x5, 0xffffcb76, 0x1, 0x2, 0x7ff, 0x47f, 0x6, 0x4, 0xffffa4f3, 0x11, 0x8000, 0x5, 0x7, 0xfffffffe, 0x1, 0x9, 0x0, 0x0, 0xb, 0x401, 0xfffffff9, 0x551, 0xffffffff, 0x6, 0x630e, 0x7166165c, 0x343f, 0x9, 0xfae3, 0x800, 0x80000000, 0x5, 0x10, 0x9, 0x4, 0x8, 0x9, 0xe, 0x7, 0xfffff5ab, 0x2, 0x1ff, 0x36f7, 0x0, 0x55, 0x100, 0x8, 0x6, 0x1, 0x280, 0x6, 0x9, 0x5, 0xb, 0x7, 0xfffffffa, 0x3ff, 0x5, 0x9f12, 0x6, 0x7, 0x81, 0x80000001, 0x1ff, 0x8, 0x4, 0x2, 0x0, 0x2, 0x0, 0x5, 0x0, 0x1, 0xdd, 0x4, 0x8, 0xfffffff8, 0x5, 0x2, 0xfaa2, 0x9, 0x2, 0x4a, 0xffffffff, 0x7fff, 0x7b32, 0x10001, 0x81, 0x5d4, 0x60, 0x2, 0x153, 0x0, 0xff, 0x2, 0x2, 0x2, 0x7, 0x7, 0x2, 0xfffffffc, 0xff, 0x8000, 0x7, 0x9, 0xda7d, 0x1, 0x7, 0x6, 0x7, 0x1, 0x2, 0x1, 0x7, 0x8, 0x7, 0x3ec, 0x4, 0xd, 0x5, 0xa, 0x80000001, 0x7fffffff, 0xfff, 0xffff, 0x100, 0x4, 0x9cc7, 0x1ee1, 0x4, 0x1, 0x2, 0x6, 0x6a, 0x5, 0x9, 0xff, 0x4, 0x7fffffff, 0x2, 0x72, 0x3ff, 0x0, 0x4, 0x7f, 0x5471235f, 0xfffffff9, 0x10000, 0x10001, 0x0, 0x3, 0x6, 0x4, 0xd87e, 0x1200000, 0x5, 0x4, 0x4, 0x2, 0x3, 0x0, 0x6, 0x8, 0x40, 0x4, 0x4f69, 0x8001, 0xa8, 0x2, 0x3115, 0xb, 0x0, 0x59, 0x2, 0xfffffffa, 0x4, 0x6, 0xe, 0x4, 0x7ff, 0x621, 0xffffffff, 0x10000, 0x7, 0x5, 0x3, 0xc172, 0x7, 0x446, 0x0, 0xba, 0x5, 0x5, 0xffff77e6, 0x2000, 0xd, 0xd, 0x2, 0x2cd3cb3d, 0x79, 0x4, 0x6, 0x2, 0x6, 0x1, 0x400, 0x4f, 0x4, 0x9, 0x8, 0x3, 0x1, 0x400, 0x7, 0x0, 0x8001, 0x592, 0x0, 0x1ff, 0x5, 0x3, 0x6, 0x3, 0x9, 0x1e38, 0x330, 0x3, 0x3, 0x2, 0x9, 0x4, 0x5, 0x7fffffff, 0xac, 0x7, 0x9, 0x5, 0xa7d, 0x11, 0x0, 0x0, 0x1, 0x4, 0x10001, 0x7, 0xdd, 0x1, 0x0, 0x5, 0x4, 0x80, 0x8ce, 0x6, 0xf9, 0x7fffffff, 0xf0, 0x81, 0x8, 0xfffffff7, 0x0, 0x800, 0x5, 0xfffffffb, 0x7, 0x4, 0x2d, 0x1000, 0x900, 0x0, 0x6, 0x7, 0x7, 0x8, 0x4, 0x7, 0x7fff, 0xe, 0x8, 0x101, 0x6, 0x4, 0x3cf, 0x5, 0x10001, 0x5, 0x401, 0x7, 0x1, 0x4, 0x4, 0x8000, 0x0, 0x6, 0x7, 0xd8c, 0x2, 0x8, 0x4, 0x8, 0x6, 0xd, 0x8, 0xfffffff8, 0x8, 0x5, 0xf9, 0x9, 0xf4, 0x8, 0x7, 0x8, 0x3, 0x10001, 0x5, 0x4, 0x7e7, 0x8, 0x8, 0x3, 0x2, 0x32, 0x5, 0x5, 0xda65, 0x1, 0x9, 0x80000000, 0x957, 0x401, 0x7fff, 0x200, 0xfff, 0x9, 0x8, 0x3, 0x2, 0x6, 0x5, 0xa, 0x8, 0x5, 0x3, 0x0, 0x5, 0x7fffffff, 0x5, 0x8, 0x8, 0x2, 0xffffffff, 0x2, 0x9, 0x3ff, 0x5, 0x9, 0x7, 0x400, 0x2, 0x2, 0x3, 0x69, 0x3c, 0x33a, 0x8, 0x8f, 0x5, 0x7a, 0x5, 0x0, 0x6, 0xa, 0x6, 0x3, 0x6, 0x5, 0x0, 0x9, 0x7, 0x99e2, 0x4, 0xf, 0x5, 0x4e, 0x0, 0x80000001, 0x8000, 0x0, 0x9, 0x0, 0x101, 0x6, 0x11e, 0x3, 0x100, 0x8001, 0x5, 0x4, 0xfffffffa, 0x7, 0x7, 0x1, 0x6, 0xcb68, 0x1, 0xc7e, 0x3, 0x1e, 0x7, 0x1, 0x7, 0x2, 0x0, 0x0, 0x7fffffff, 0xfdc, 0x3, 0x7, 0x1, 0x0, 0x4, 0xfffffe01, 0x8, 0x5, 0x7, 0x2d, 0x4, 0x5, 0xfffffffc, 0x5, 0xc, 0x8001, 0xffffff7f, 0x2, 0xafc, 0x7, 0x3, 0x8, 0x969b, 0x659, 0x59f1afba, 0xffffffff, 0x7, 0x0, 0x71d3, 0x5, 0x9, 0x10001, 0x4, 0x3eb5674c, 0x3, 0x496, 0x8ff, 0x81, 0x4, 0xe, 0x6, 0xced4, 0x914e, 0xe78, 0x81, 0x1, 0x8, 0x5, 0x8000, 0x7f, 0x0, 0x6, 0x0, 0x21, 0x3088, 0x1, 0x6, 0xd, 0xffffffff, 0x8, 0x100, 0x6b, 0x8001, 0x3, 0x4, 0x6e3, 0x2, 0x6, 0x100, 0x1000, 0x201, 0x10000, 0x7, 0x3, 0xde6c, 0x4d1, 0x480000, 0x6, 0x6, 0x5, 0x4, 0x7, 0x7, 0x2, 0x2, 0xfffffff4, 0x7fffffff, 0x1, 0x2, 0x8, 0x34, 0x1, 0x401, 0xa241, 0x1, 0xff, 0x6, 0xffff, 0x19], 0x1, 0x400, 0x101}) ioctl$XFS_IOC_START_COMMIT(r5, 0x80585882, &(0x7f00000003c0)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_STATS(r6, 0x80f86406, &(0x7f0000000740)=""/236) close(r1) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2000}, [@NFTA_RULE_USERDATA={0x15, 0x7, 0x1, 0x0, "4ce8f8200ef50a3eb9bbe238c3ebf08672"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000080)={0x8, 0x0, 0x7, 0x0, 0x5}) 1.024328298s ago: executing program 4 (id=3053): memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket(0x11, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000100)=0x1d9, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r7, &(0x7f0000000300)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) bind$xdp(r4, &(0x7f00000002c0)={0x2c, 0x3, r9, 0x7}, 0x10) r10 = dup(r6) syz_ublk_setup_queues(r10, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x0, 0x2000, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r11 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r11}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r13, &(0x7f0000000040)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r12, r14, 0xfffffffffffffc01, 0x0) tee(r12, r14, 0x60000000000, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 469.973898ms ago: executing program 6 (id=3054): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0xd, 0xfffff034}, {0x50, 0x0, 0x5, 0xfffffffd}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) semctl$IPC_INFO(0x0, 0x2, 0x3, &(0x7f0000000000)=""/141) 273.634344ms ago: executing program 2 (id=3055): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x40, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x4fa]}}], 0x1c) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x8) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x6a, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000040)={{0x37, 0x8}, 'port1\x00', 0x40, 0x0, 0x6, 0x4, 0xfffffffb, 0x2, 0x1, 0x0, 0x4, 0x4}) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000200)={r0, &(0x7f0000000100)='$\x00', 0x206100, &(0x7f0000000140)={@align=0xfffffffffffffffc, {0x0, 0x3, 0x1, 0xe}}, 0x8, &(0x7f0000000180), &(0x7f00000001c0)=0x3}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r5, 0x3b71, &(0x7f0000000280)={0x20, 0x0, 0x0, 0x1c, 0x1c}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000001540)={{r4, &(0x7f0000000240)='2\x00', 0x42400, &(0x7f0000000280)={@align=0x7, {0x1, 0xb, 0x9b, 0x921}}, 0x0, &(0x7f00000004c0), &(0x7f0000000500)}, {[0x5, 0x5, 0xfffffffd, 0xa]}, 0x200, 0x1000, &(0x7f0000000540)=""/4096}) bind$802154_dgram(r6, &(0x7f00000015c0)={0x24, @short={0x2, 0x0, 0xaaa2}}, 0x14) 0s ago: executing program 6 (id=3056): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) pselect6(0x40, &(0x7f0000000000)={0x100000001, 0x10000, 0x8000, 0x4, 0x0, 0x3ff, 0xfffffffffffffff8, 0x5}, &(0x7f00000001c0)={0x100000001, 0x5e0, 0xfffffffffffffffd, 0x800, 0x5, 0xfff, 0x100000001, 0x6}, &(0x7f0000000340)={0x5, 0xc805, 0x7, 0x28, 0x8, 0x8, 0x3, 0x1}, &(0x7f00000003c0)={0x0, 0x989680}, &(0x7f0000000440)={&(0x7f0000000400)={[0x88]}, 0x8}) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r2, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x1c) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r6, &(0x7f0000006e80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000004300)={0x50, 0x0, r7, {0x7, 0x29, 0x4, 0x840120, 0x7, 0x909b, 0x40057, 0x1, 0x0, 0x0, 0x2, 0x8}}, 0x50) file_getattr(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x18, 0x100) read$FUSE(r6, &(0x7f0000004540)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): 95 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17924 comm="syz.7.2752" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f41fa93f459 code=0x7fc00000 [ 1004.035840][ T5721] usb 1-1: config 0 has no interface number 0 [ 1004.045964][T10195] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1004.079588][T10195] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1004.134430][ T30] audit: type=1326 audit(1787168812.233:2135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17924 comm="syz.7.2752" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f41fa93f51d code=0x7fc00000 [ 1004.215008][ T5721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.245581][ T5721] usb 1-1: Product: syz [ 1004.271667][ T5721] usb 1-1: Manufacturer: syz [ 1004.297400][ T5721] usb 1-1: SerialNumber: syz [ 1004.322846][ T30] audit: type=1326 audit(1787168812.233:2136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17924 comm="syz.7.2752" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f41fa99e0d9 code=0x7fc00000 [ 1004.376422][ T5721] usb 1-1: config 0 descriptor?? [ 1004.787375][T17954] xt_nfacct: accounting object `' does not exist [ 1005.618812][T17962] tmpfs: Bad value for 'mpol' [ 1005.921919][ T6099] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.062547][ T5721] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected [ 1006.098227][ T5721] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81 [ 1006.132912][ T5721] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1 [ 1006.134542][T10195] Bluetooth: hci2: command tx timeout [ 1006.177332][ T5721] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2 [ 1006.244873][ T5721] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1006.308962][ T5721] usb 1-1: USB disconnect, device number 45 [ 1006.333744][T17971] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17971 comm=syz.7.2759 [ 1006.443663][ T5721] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1007.110653][ T5721] keyspan 1-1:0.133: device disconnected [ 1007.296568][ T6099] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1007.639571][ T6099] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.381528][T10195] Bluetooth: hci2: command tx timeout [ 1008.566699][ T6099] netdevsim netdevsim9 netdevsim0 (unregistering): left allmulticast mode [ 1009.011990][ T6099] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.098767][T18011] syzkaller0: entered promiscuous mode [ 1009.104731][T18011] syzkaller0: entered allmulticast mode [ 1009.362563][T18017] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1009.378143][ T30] audit: type=1400 audit(1787168817.613:2137): avc: denied { write } for pid=18010 comm="syz.6.2768" name="trace_marker" dev="tracefs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1010.453125][ T5599] Bluetooth: hci2: command tx timeout [ 1010.886523][ T6099] bridge_slave_1: left allmulticast mode [ 1010.913242][ T6099] bridge_slave_1: left promiscuous mode [ 1011.013353][T10195] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1011.046448][T18030] FAULT_INJECTION: forcing a failure. [ 1011.046448][T18030] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1011.059698][T18030] CPU: 1 UID: 0 PID: 18030 Comm: syz.0.2771 Tainted: G L syzkaller #0 PREEMPT(full) [ 1011.059726][T18030] Tainted: [L]=SOFTLOCKUP [ 1011.059733][T18030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1011.059744][T18030] Call Trace: [ 1011.059751][T18030] [ 1011.059759][T18030] dump_stack_lvl+0x100/0x190 [ 1011.059786][T18030] should_fail_ex.cold+0x5/0xa [ 1011.059811][T18030] _copy_from_user+0x2e/0xd0 [ 1011.059831][T18030] copy_from_sockptr_offset.constprop.0+0x12c/0x150 [ 1011.059859][T18030] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 1011.059893][T18030] do_sock_getsockopt+0x530/0x6e0 [ 1011.059917][T18030] ? __lock_acquire+0x4c5/0x1ec0 [ 1011.059953][T18030] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1011.059984][T18030] ? find_held_lock+0x2b/0x80 [ 1011.060010][T18030] ? __fget_files+0x21f/0x3d0 [ 1011.060042][T18030] __sys_getsockopt+0x148/0x260 [ 1011.060074][T18030] ? __x64_sys_getsockopt+0xbd/0x160 [ 1011.060094][T18030] __x64_sys_getsockopt+0xbd/0x160 [ 1011.060112][T18030] ? do_syscall_64+0xae/0x790 [ 1011.060130][T18030] ? lockdep_hardirqs_on+0x7d/0x110 [ 1011.060157][T18030] do_syscall_64+0x123/0x790 [ 1011.060177][T18030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.060198][T18030] RIP: 0033:0x7f8c9519e0d9 [ 1011.060214][T18030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1011.060232][T18030] RSP: 002b:00007f8c933f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1011.060251][T18030] RAX: ffffffffffffffda RBX: 00007f8c95426090 RCX: 00007f8c9519e0d9 [ 1011.060264][T18030] RDX: 0000000000000081 RSI: 0000000000000000 RDI: 0000000000000008 [ 1011.060275][T18030] RBP: 00007f8c933f6090 R08: 0000200000000580 R09: 0000000000000000 [ 1011.060287][T18030] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000001 [ 1011.060298][T18030] R13: 00007f8c95426128 R14: 00007f8c95426090 R15: 00007ffdc30e08a8 [ 1011.060327][T18030] [ 1011.765420][ T6099] bridge0: port 2(bridge_slave_1) entered disabled state [ 1011.865737][ T6099] bridge_slave_0: left allmulticast mode [ 1011.897021][ T6099] bridge_slave_0: left promiscuous mode [ 1011.909617][ T6099] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.175941][T18043] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18043 comm=syz.4.2773 [ 1012.182473][ T30] audit: type=1400 audit(1787168820.423:2138): avc: denied { write } for pid=18029 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1012.528376][ T30] audit: type=1400 audit(1787168820.773:2139): avc: denied { write } for pid=18049 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1012.561316][T10195] Bluetooth: hci2: command tx timeout [ 1012.605111][ T6099] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 1012.625388][T18059] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2774'. [ 1013.106257][ T6099] gretap0 (unregistering): left promiscuous mode [ 1013.132188][ T6099] bond0 (unregistering): left promiscuous mode [ 1013.142879][ T6099] bond_slave_0: left promiscuous mode [ 1013.148368][ T6099] bond_slave_1: left promiscuous mode [ 1013.159358][ T6099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1013.172779][ T6099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1013.183208][ T6099] bond0 (unregistering): Released all slaves [ 1013.191960][ T6099] bond1 (unregistering): Released all slaves [ 1013.335825][ T5261] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1013.672735][ T10] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1013.914450][ T10] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1013.942898][ T9] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1014.012020][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1014.050363][T17941] bridge0: port 1(bridge_slave_0) entered blocking state [ 1014.057624][ T10] usb 5-1: config 0 has no interfaces? [ 1014.064180][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.072288][T17941] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.096490][T17941] bridge_slave_0: entered allmulticast mode [ 1014.103600][ T10] usb 5-1: config 0 descriptor?? [ 1014.123326][T17941] bridge_slave_0: entered promiscuous mode [ 1014.147739][T17941] bridge0: port 2(bridge_slave_1) entered blocking state [ 1014.156821][T17941] bridge0: port 2(bridge_slave_1) entered disabled state [ 1014.164920][T17941] bridge_slave_1: entered allmulticast mode [ 1014.171005][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1014.185608][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.199086][T17941] bridge_slave_1: entered promiscuous mode [ 1014.204988][ T9] usb 1-1: Product: syz [ 1014.209137][ T9] usb 1-1: Manufacturer: syz [ 1014.216515][ T9] usb 1-1: SerialNumber: syz [ 1014.262912][T17941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1014.276365][T17941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1014.317072][T17941] team0: Port device team_slave_0 added [ 1014.337268][T17941] team0: Port device team_slave_1 added [ 1014.469157][ T1616] usb 5-1: USB disconnect, device number 87 [ 1014.516282][ T57] Bluetooth: hci1: Frame reassembly failed (-84) [ 1014.525877][ T57] Bluetooth: hci1: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1014.535117][ T6099] hsr_slave_0: left promiscuous mode [ 1014.546078][ T6099] hsr_slave_1: left promiscuous mode [ 1014.554661][ T6099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1014.562235][ T6099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1014.574728][ T6099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1014.582830][ T6099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1014.620808][ T6099] veth1_macvtap: left promiscuous mode [ 1014.630751][ T6099] veth0_macvtap: left promiscuous mode [ 1014.639511][ T6099] veth1_vlan: left promiscuous mode [ 1014.658988][ T6099] veth0_vlan: left promiscuous mode [ 1014.756800][ T30] audit: type=1400 audit(1787168823.003:2140): avc: denied { write } for pid=18091 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1014.877153][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1014.907088][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1014.951879][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1014.995491][ T30] audit: type=1400 audit(1787168823.243:2141): avc: denied { write } for pid=18107 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1015.023551][ T9] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1015.057734][ T9] usb 1-1: USB disconnect, device number 46 [ 1015.160290][ T6099] team0 (unregistering): Port device team_slave_1 removed [ 1015.183725][ T6099] team0 (unregistering): Port device team_slave_0 removed [ 1015.300810][T17941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1015.307961][T17941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1015.336356][T17941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1015.348663][ T5261] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1015.363151][T17941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1015.370728][T17941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1015.397575][T17941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1015.460941][T17941] hsr_slave_0: entered promiscuous mode [ 1015.475575][T17941] hsr_slave_1: entered promiscuous mode [ 1015.477620][ T10] usb 5-1: new low-speed USB device number 88 using dummy_hcd [ 1015.490643][T17941] debugfs: 'hsr0' already exists in 'hsr' [ 1015.504033][T17941] Cannot create hsr debugfs directory [ 1015.644776][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1015.652895][ T10] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 1015.669849][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 64, setting to 8 [ 1015.682104][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xE is Bulk; changing to Interrupt [ 1015.695114][ T10] usb 5-1: string descriptor 0 read error: -22 [ 1015.703868][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.719935][T18110] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1015.727454][T18110] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1015.738700][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1015.804707][ T9] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1015.951980][ T30] audit: type=1400 audit(1787168824.193:2142): avc: denied { write } for pid=18113 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1015.977746][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 1016.003661][ T9] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1016.027490][ T9] usb 1-1: config 0 has no interfaces? [ 1016.036152][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.046325][ T9] usb 1-1: Product: syz [ 1016.051495][ T9] usb 1-1: Manufacturer: syz [ 1016.057197][ T9] usb 1-1: SerialNumber: syz [ 1016.061826][ T30] audit: type=1400 audit(1787168824.303:2143): avc: denied { write } for pid=18128 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1016.099640][ T9] usb 1-1: config 0 descriptor?? [ 1016.105861][T18130] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2784'. [ 1016.154476][ T5261] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1016.342225][ T9] usb 1-1: USB disconnect, device number 47 [ 1016.380360][ T10] usb 5-1: USB disconnect, device number 88 [ 1016.475536][ T30] audit: type=1400 audit(1787168824.723:2144): avc: denied { write } for pid=18132 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1016.520615][T17941] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1016.532777][T10195] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1016.621639][ T30] audit: type=1400 audit(1787168824.863:2145): avc: denied { write } for pid=18143 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1016.644800][T17941] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1016.666767][T17941] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1016.690604][T17941] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1016.723834][T17941] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1016.760281][T17941] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1016.780032][T17941] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1016.814980][T17941] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1016.823321][ T5261] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1017.015154][T18166] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18166 comm=syz.7.2789 [ 1017.059551][T18170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2790'. [ 1017.073190][ T24] usb 7-1: new high-speed USB device number 113 using dummy_hcd [ 1017.207964][T18177] FAULT_INJECTION: forcing a failure. [ 1017.207964][T18177] name failslab, interval 1, probability 0, space 0, times 0 [ 1017.242743][T18177] CPU: 0 UID: 0 PID: 18177 Comm: syz.4.2792 Tainted: G L syzkaller #0 PREEMPT(full) [ 1017.242771][T18177] Tainted: [L]=SOFTLOCKUP [ 1017.242776][T18177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1017.242785][T18177] Call Trace: [ 1017.242791][T18177] [ 1017.242797][T18177] dump_stack_lvl+0x100/0x190 [ 1017.242821][T18177] should_fail_ex.cold+0x5/0xa [ 1017.242840][T18177] should_failslab+0xc2/0x120 [ 1017.242862][T18177] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 1017.242882][T18177] ? __alloc_skb+0x5b7/0x710 [ 1017.242899][T18177] ? __alloc_skb+0x140/0x710 [ 1017.242918][T18177] __alloc_skb+0x140/0x710 [ 1017.242931][T18177] ? __alloc_skb+0x5b7/0x710 [ 1017.242946][T18177] ? __pfx___alloc_skb+0x10/0x10 [ 1017.242967][T18177] netlink_alloc_large_skb+0x69/0x150 [ 1017.242992][T18177] netlink_sendmsg+0x680/0xda0 [ 1017.243018][T18177] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1017.243042][T18177] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1017.243069][T18177] ____sys_sendmsg+0xa4d/0xbe0 [ 1017.243087][T18177] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1017.243111][T18177] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1017.243142][T18177] ___sys_sendmsg+0x190/0x1e0 [ 1017.243165][T18177] ? __pfx____sys_sendmsg+0x10/0x10 [ 1017.243186][T18177] ? get_pid_task+0x106/0x250 [ 1017.243210][T18177] ? find_held_lock+0x2b/0x80 [ 1017.243240][T18177] __sys_sendmsg+0x160/0x210 [ 1017.243257][T18177] ? __pfx___sys_sendmsg+0x10/0x10 [ 1017.243286][T18177] do_syscall_64+0x123/0x790 [ 1017.243303][T18177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.243318][T18177] RIP: 0033:0x7f62d1d9e0d9 [ 1017.243331][T18177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1017.243345][T18177] RSP: 002b:00007f62d2c15028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1017.243360][T18177] RAX: ffffffffffffffda RBX: 00007f62d2025fa0 RCX: 00007f62d1d9e0d9 [ 1017.243370][T18177] RDX: 0000000000000080 RSI: 0000200000000080 RDI: 0000000000000006 [ 1017.243378][T18177] RBP: 00007f62d2c15090 R08: 0000000000000000 R09: 0000000000000000 [ 1017.243387][T18177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1017.243396][T18177] R13: 00007f62d2026038 R14: 00007f62d2025fa0 R15: 00007ffc9922d108 [ 1017.243423][T18177] [ 1017.246510][ T24] usb 7-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 1017.499800][T17941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1017.511657][T17941] 8021q: adding VLAN 0 to HW filter on device team0 [ 1017.545871][T17941] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1017.556750][ T30] audit: type=1400 audit(1787168825.783:2146): avc: denied { write } for pid=18159 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1017.579947][T17941] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1017.610701][T12798] bridge0: port 1(bridge_slave_0) entered blocking state [ 1017.617786][T12798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1017.634322][T12798] bridge0: port 2(bridge_slave_1) entered blocking state [ 1017.641397][T12798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1017.666037][ T30] audit: type=1400 audit(1787168825.913:2147): avc: denied { write } for pid=18181 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1017.723878][ T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1017.759486][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.789197][ T24] usb 7-1: Product: syz [ 1017.815065][ T24] usb 7-1: Manufacturer: syz [ 1017.834584][ T24] usb 7-1: SerialNumber: syz [ 1017.871550][ T24] usb-storage 7-1:1.0: USB Mass Storage device detected [ 1017.915604][ T24] usb-storage 7-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 1018.400024][ T30] audit: type=1400 audit(1787168826.623:2148): avc: denied { write } for pid=18183 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1018.469621][ T30] audit: type=1400 audit(1787168826.713:2149): avc: denied { write } for pid=18205 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1018.472678][ T1616] usb 5-1: new full-speed USB device number 89 using dummy_hcd [ 1018.537764][ T24] usb 7-1: USB disconnect, device number 113 [ 1019.065104][T18209] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2795'. [ 1019.548903][ T29] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1019.644606][ T1616] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 1019.664586][ T1616] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.691441][ T1616] usb 5-1: config 0 descriptor?? [ 1019.717270][ T1616] pwc: Samsung MPC-C10 USB webcam detected. [ 1019.733544][ T29] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1019.759556][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.775647][ T29] usb 1-1: Product: syz [ 1019.792714][ T29] usb 1-1: Manufacturer: syz [ 1019.797365][ T29] usb 1-1: SerialNumber: syz [ 1019.917603][T17941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1019.944533][ T30] audit: type=1400 audit(1787168828.183:2150): avc: denied { write } for pid=18212 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1019.972792][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1020.022382][ T30] audit: type=1400 audit(1787168828.263:2151): avc: denied { read } for pid=18185 comm="syz.4.2793" name="local" dev="configfs" ino=61582 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 1020.022435][ T30] audit: type=1800 audit(1787168828.263:2152): pid=18228 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2793" name="local" dev="configfs" ino=61582 res=0 errno=0 [ 1020.150306][ T30] audit: type=1400 audit(1787168828.393:2153): avc: denied { write } for pid=18230 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1020.259869][ T1616] pwc: send_video_command error -71 [ 1020.275325][ T1616] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1020.306860][ T1616] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 1020.341344][ T1616] usb 5-1: USB disconnect, device number 89 [ 1020.433000][ T24] usb 7-1: new high-speed USB device number 114 using dummy_hcd [ 1020.447487][ T29] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1020.470788][ T29] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1020.488471][T17941] veth0_vlan: entered promiscuous mode [ 1020.489001][ T29] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1020.514460][T17941] veth1_vlan: entered promiscuous mode [ 1020.521608][ T29] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1020.558538][ T29] usb 1-1: USB disconnect, device number 48 [ 1020.587334][T17941] veth0_macvtap: entered promiscuous mode [ 1020.608777][T17941] veth1_macvtap: entered promiscuous mode [ 1020.625564][ T24] usb 7-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 1020.635932][ T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1020.646199][ T24] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1020.657192][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.661574][T17941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1020.697041][T17941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1020.768078][T18252] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1020.862055][T18252] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1021.035447][ T3350] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.333261][T12798] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.463962][ T3350] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.546750][ T3350] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.631360][ T24] usb 7-1: Product: syz [ 1021.635755][ T24] usb 7-1: Manufacturer: syz [ 1021.640372][ T24] usb 7-1: SerialNumber: syz [ 1021.684932][ T30] audit: type=1400 audit(1787168829.933:2154): avc: denied { write } for pid=18239 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1021.925331][T12794] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1021.954249][T18263] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2797'. [ 1021.978079][T12794] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1022.037827][ T30] audit: type=1400 audit(1787168830.283:2155): avc: denied { write } for pid=18267 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1022.095290][ T3350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1022.605481][T18273] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2801'. [ 1023.270187][ T3350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1023.864990][T18277] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2802'. [ 1024.629239][ T30] audit: type=1400 audit(1787168832.843:2156): avc: denied { mount } for pid=18232 comm="syz.6.2797" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 1024.809717][ T24] usb 7-1: USB disconnect, device number 114 [ 1025.090557][ T30] audit: type=1400 audit(1787168833.333:2157): avc: denied { write } for pid=18276 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1025.182746][ T10] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1025.230474][ T30] audit: type=1400 audit(1787168833.473:2158): avc: denied { write } for pid=18295 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1025.353317][ T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1025.384730][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1025.407971][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.446089][ T10] usb 6-1: config 0 descriptor?? [ 1025.466891][ T10] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1025.592770][ T1616] usb 7-1: new high-speed USB device number 115 using dummy_hcd [ 1025.783208][ T1616] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 1026.146516][T18319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1026.259500][T18319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1026.272347][ T30] audit: type=1400 audit(1787168834.483:2159): avc: denied { write } for pid=18299 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1026.594826][ T1616] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1026.617865][ T1616] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1026.629141][ T1616] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1026.647111][ T1616] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1026.676331][ T1616] usb 7-1: Product: syz [ 1026.680625][ T1616] usb 7-1: Manufacturer: syz [ 1026.704723][T18298] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1026.728651][ T1616] garmin_gps 7-1:1.0: Garmin GPS usb/tty converter detected [ 1026.765743][ T1616] usb 7-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 1026.818801][ T30] audit: type=1400 audit(1787168835.063:2160): avc: denied { write } for pid=18322 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1027.087252][T18330] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2806'. [ 1028.720505][ T24] usb 6-1: USB disconnect, device number 23 [ 1028.815550][T18337] FAULT_INJECTION: forcing a failure. [ 1028.815550][T18337] name failslab, interval 1, probability 0, space 0, times 0 [ 1028.841181][ T1616] usb 7-1: USB disconnect, device number 115 [ 1028.846175][T18337] CPU: 0 UID: 0 PID: 18337 Comm: syz.7.2810 Tainted: G L syzkaller #0 PREEMPT(full) [ 1028.846201][T18337] Tainted: [L]=SOFTLOCKUP [ 1028.846207][T18337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1028.846216][T18337] Call Trace: [ 1028.846222][T18337] [ 1028.846229][T18337] dump_stack_lvl+0x100/0x190 [ 1028.846253][T18337] should_fail_ex.cold+0x5/0xa [ 1028.846274][T18337] should_failslab+0xc2/0x120 [ 1028.846298][T18337] __kmalloc_noprof+0xfc/0x820 [ 1028.846321][T18337] ? rcu_is_watching+0x13/0xc0 [ 1028.846337][T18337] ? ioctl_standard_iw_point+0x3e9/0xc90 [ 1028.846366][T18337] ioctl_standard_iw_point+0x3e9/0xc90 [ 1028.846395][T18337] ? __pfx_cfg80211_wext_siwpmksa+0x10/0x10 [ 1028.846419][T18337] ? __pfx_ioctl_standard_iw_point+0x10/0x10 [ 1028.846448][T18337] ? dev_load+0x8e/0x240 [ 1028.846463][T18337] ? full_name_hash+0xbc/0x100 [ 1028.846486][T18337] ? __pfx_cfg80211_wext_siwpmksa+0x10/0x10 [ 1028.846506][T18337] ioctl_standard_call+0x167/0x1d0 [ 1028.846530][T18337] ? __pfx_ioctl_standard_call+0x10/0x10 [ 1028.846552][T18337] ? __pfx_cfg80211_wext_siwpmksa+0x10/0x10 [ 1028.846572][T18337] wext_ioctl_dispatch.constprop.0+0x312/0x3e0 [ 1028.846599][T18337] wext_handle_ioctl+0x105/0x1b0 [ 1028.846623][T18337] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 1028.846648][T18337] ? do_vfs_ioctl+0x226/0x13e0 [ 1028.846665][T18337] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1028.846680][T18337] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 1028.846708][T18337] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1028.846737][T18337] sock_ioctl+0x2d4/0x6b0 [ 1028.846761][T18337] ? __pfx_sock_ioctl+0x10/0x10 [ 1028.846789][T18337] ? selinux_file_ioctl+0x13b/0x290 [ 1028.846812][T18337] ? selinux_file_ioctl+0xb6/0x290 [ 1028.846837][T18337] ? __pfx_sock_ioctl+0x10/0x10 [ 1028.846860][T18337] __x64_sys_ioctl+0x18e/0x210 [ 1028.846879][T18337] do_syscall_64+0x123/0x790 [ 1028.846897][T18337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1028.846914][T18337] RIP: 0033:0x7f41fa99e0d9 [ 1028.846928][T18337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1028.846944][T18337] RSP: 002b:00007f41fb87e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1028.846960][T18337] RAX: ffffffffffffffda RBX: 00007f41fac25fa0 RCX: 00007f41fa99e0d9 [ 1028.846971][T18337] RDX: 0000200000000000 RSI: 0000000000008b36 RDI: 0000000000000004 [ 1028.846980][T18337] RBP: 00007f41fb87e090 R08: 0000000000000000 R09: 0000000000000000 [ 1028.846990][T18337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1028.847000][T18337] R13: 00007f41fac26038 R14: 00007f41fac25fa0 R15: 00007ffd9c370918 [ 1028.847022][T18337] [ 1029.177971][ T1616] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 1029.211076][T18344] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1029.225867][T18344] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1029.242869][T18344] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1029.259931][T18344] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1029.273486][T11898] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1029.334919][ T1616] garmin_gps 7-1:1.0: device disconnected [ 1029.428211][T11898] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1029.440272][T11898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.448409][T11898] usb 5-1: Product: syz [ 1029.452585][T11898] usb 5-1: Manufacturer: syz [ 1029.458749][T11898] usb 5-1: SerialNumber: syz [ 1029.690347][ T30] audit: type=1400 audit(1787168837.933:2161): avc: denied { write } for pid=18329 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1029.692731][ T1616] usb 7-1: new high-speed USB device number 116 using dummy_hcd [ 1029.740910][T18359] netlink: 'syz.5.2815': attribute type 11 has an invalid length. [ 1029.878847][ T1616] usb 7-1: Using ep0 maxpacket: 32 [ 1029.894441][ T1616] usb 7-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1029.931692][ T1616] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.966093][ T30] audit: type=1400 audit(1787168838.203:2162): avc: denied { write } for pid=18363 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1030.005329][ T1616] usb 7-1: config 0 descriptor?? [ 1030.048379][ T1616] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1030.146812][T11898] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1030.151198][T18358] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2816'. [ 1030.467345][T11898] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1030.488822][T18371] fuse: Unknown parameter '&tL' [ 1030.509199][T11898] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1030.595744][T11898] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 1030.696964][T11898] usb 5-1: USB disconnect, device number 90 [ 1031.193143][ T1616] gspca_sunplus: reg_r err -110 [ 1031.207541][ T1616] sunplus 7-1:0.0: probe with driver sunplus failed with error -110 [ 1031.312026][T18388] SELinux: policydb string SE Li does not match my string SE Linux [ 1031.321266][T18388] SELinux: failed to load policy [ 1031.551789][ T10] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1031.733985][ T10] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1031.784809][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.873518][ T30] audit: type=1400 audit(1787168840.123:2163): avc: denied { write } for pid=18372 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1032.137036][ T24] usb 7-1: USB disconnect, device number 116 [ 1032.242987][ T9] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1032.299523][T18406] overlay: filesystem on ./bus not supported as upperdir [ 1032.309540][ T30] audit: type=1400 audit(1787168840.553:2164): avc: denied { write } for pid=18404 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1032.493724][ T9] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 1032.520410][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1032.537455][T18411] netlink: 140 bytes leftover after parsing attributes in process `syz.6.2825'. [ 1032.595433][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.684238][ T9] as10x_usb: device has been detected [ 1032.726678][ T9] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 1032.738166][ T10] cxacru 1-1:1.0: send of cm 0x84 failed (-71) [ 1032.764559][ T10] ATM dev 0: cxacru_atm_start: CHIP_ADSL_LINE_START returned -71 [ 1032.879579][ T10] cxacru 1-1:1.0: send of cm 0x88 failed (-71) [ 1032.896164][ T9] usb 5-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 1032.913115][ T10] ATM dev 0: poll status: error -71 [ 1032.925568][ T10] ATM dev 0: polling disabled, set adsl_state to 'start' or 'poll' to resume [ 1032.981340][ C0] ATM dev 0: usbatm_complete: urb 0xffff88802a66eb00 failed (-71)! [ 1032.989285][ C0] ATM dev 0: usbatm_complete: urb 0xffff88802a66e900 failed (-71)! [ 1032.997195][ C0] ATM dev 0: usbatm_complete: urb 0xffff88802a66e500 failed (-71)! [ 1033.005109][ C0] ATM dev 0: usbatm_complete: urb 0xffff88802a66e000 failed (-71)! [ 1033.123069][ C0] ATM dev 0: usbatm_complete: urb 0xffff88802a66eb00 failed (-71)! [ 1033.131053][ C0] ATM dev 0: usbatm_complete: urb 0xffff88802a66e900 failed (-71)! [ 1033.226769][ T9] as10x_usb: error during firmware upload part1 [ 1033.279572][ T10] usb 1-1: USB disconnect, device number 49 [ 1033.298063][ T9] Registered device Abilis Systems DVB-Titan [ 1033.320778][ T9] usb 5-1: USB disconnect, device number 91 [ 1033.429964][T18420] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2826'. [ 1033.745927][ T9] Unregistered device Abilis Systems DVB-Titan [ 1033.754199][ T9] as10x_usb: device has been disconnected [ 1035.236337][T18437] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2829'. [ 1035.375265][T12796] Bluetooth: hci1: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1035.404423][T12796] Bluetooth: hci1: Frame reassembly failed (-84) [ 1035.832142][T18451] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2831'. [ 1036.336917][T18473] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2838'. [ 1036.827336][T18482] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2841'. [ 1037.242507][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1037.242523][ T30] audit: type=1400 audit(1787168845.483:2168): avc: denied { write } for pid=18464 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1037.334262][T18492] FAULT_INJECTION: forcing a failure. [ 1037.334262][T18492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1037.412975][ T5599] Bluetooth: hci1: command 0x1003 tx timeout [ 1037.426415][T10195] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1037.483718][T18492] CPU: 1 UID: 0 PID: 18492 Comm: syz.7.2844 Tainted: G L syzkaller #0 PREEMPT(full) [ 1037.483746][T18492] Tainted: [L]=SOFTLOCKUP [ 1037.483752][T18492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1037.483762][T18492] Call Trace: [ 1037.483768][T18492] [ 1037.483775][T18492] dump_stack_lvl+0x100/0x190 [ 1037.483801][T18492] should_fail_ex.cold+0x5/0xa [ 1037.483824][T18492] _copy_from_user+0x2e/0xd0 [ 1037.483843][T18492] copy_msghdr_from_user+0x9f/0x4c0 [ 1037.483869][T18492] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1037.483904][T18492] ___sys_sendmsg+0x106/0x1e0 [ 1037.483929][T18492] ? __pfx____sys_sendmsg+0x10/0x10 [ 1037.483953][T18492] ? get_pid_task+0x106/0x250 [ 1037.483978][T18492] ? find_held_lock+0x2b/0x80 [ 1037.484011][T18492] __sys_sendmsg+0x160/0x210 [ 1037.484031][T18492] ? __pfx___sys_sendmsg+0x10/0x10 [ 1037.484062][T18492] do_syscall_64+0x123/0x790 [ 1037.484083][T18492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.484101][T18492] RIP: 0033:0x7f41fa99e0d9 [ 1037.484116][T18492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1037.484133][T18492] RSP: 002b:00007f41fb87e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1037.484150][T18492] RAX: ffffffffffffffda RBX: 00007f41fac25fa0 RCX: 00007f41fa99e0d9 [ 1037.484164][T18492] RDX: 0000000000004884 RSI: 0000200000003d00 RDI: 0000000000000005 [ 1037.484175][T18492] RBP: 00007f41fb87e090 R08: 0000000000000000 R09: 0000000000000000 [ 1037.484186][T18492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1037.484197][T18492] R13: 00007f41fac26038 R14: 00007f41fac25fa0 R15: 00007ffd9c370918 [ 1037.484221][T18492] [ 1038.804377][T18500] netlink: 'syz.4.2846': attribute type 6 has an invalid length. [ 1038.867538][T18501] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18501 comm=syz.0.2839 [ 1039.348435][ T30] audit: type=1400 audit(1787168847.593:2169): avc: denied { write } for pid=18497 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1039.970593][ T5599] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1039.986527][ T5599] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1039.995342][ T5599] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1040.005378][ T5599] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1040.013212][ T5599] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1040.362678][ T9] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1040.655702][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1040.709680][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1040.768001][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1040.832789][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1040.876759][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.936985][ T9] usb 6-1: config 0 descriptor?? [ 1040.978180][ T9] hub 6-1:0.0: USB hub found [ 1041.203230][ T9] hub 6-1:0.0: 1 port detected [ 1041.459467][ T30] audit: type=1400 audit(1787168849.703:2170): avc: denied { write } for pid=18525 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1041.646078][T18543] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 1041.712765][T18543] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2849'. [ 1041.808577][ T30] audit: type=1400 audit(1787168850.053:2171): avc: denied { write } for pid=18551 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1042.055051][T10195] Bluetooth: hci1: command tx timeout [ 1042.205381][ T9] hub 6-1:0.0: activate --> -90 [ 1042.620943][T18558] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4068521576 (4068521576 ns) > initial count (2794446801 ns). Using initial count to start timer. [ 1043.099568][ T30] audit: type=1400 audit(1787168851.343:2172): avc: denied { write } for pid=18553 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1043.265950][ T30] audit: type=1400 audit(1787168851.513:2173): avc: denied { write } for pid=18574 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1043.299025][T18513] bridge0: port 1(bridge_slave_0) entered blocking state [ 1043.308418][T18513] bridge0: port 1(bridge_slave_0) entered disabled state [ 1043.316744][T18513] bridge_slave_0: entered allmulticast mode [ 1043.325245][T18513] bridge_slave_0: entered promiscuous mode [ 1043.343834][T18513] bridge0: port 2(bridge_slave_1) entered blocking state [ 1043.352575][T18513] bridge0: port 2(bridge_slave_1) entered disabled state [ 1043.360125][T18513] bridge_slave_1: entered allmulticast mode [ 1043.369351][ T30] audit: type=1400 audit(1787168851.603:2174): avc: denied { read } for pid=18578 comm="syz.0.2855" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 1043.392904][T18513] bridge_slave_1: entered promiscuous mode [ 1043.472438][ T30] audit: type=1400 audit(1787168851.713:2175): avc: denied { write } for pid=18578 comm="syz.0.2855" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 1043.499913][T18513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1043.528045][T18513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1043.531190][ T9] hub 6-1:0.0: hub_ext_port_status failed (err = -32) [ 1043.627446][ T9] usb 6-1-port1: connect-debounce failed [ 1043.660950][ T9] usb 6-1-port1: cannot disable (err = -32) [ 1043.680830][T18513] team0: Port device team_slave_0 added [ 1043.712189][T18513] team0: Port device team_slave_1 added [ 1043.841937][T18593] sctp: [Deprecated]: syz.6.2858 (pid 18593) Use of int in max_burst socket option deprecated. [ 1043.841937][T18593] Use struct sctp_assoc_value instead [ 1044.132732][T10195] Bluetooth: hci1: command tx timeout [ 1044.218917][T18513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1044.241983][T18513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1044.302756][T18513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1044.329935][T18513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1044.364501][T18513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1044.438644][T18513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1044.563905][T18513] hsr_slave_0: entered promiscuous mode [ 1044.591254][T18513] hsr_slave_1: entered promiscuous mode [ 1044.605813][T18513] debugfs: 'hsr0' already exists in 'hsr' [ 1044.622062][T18513] Cannot create hsr debugfs directory [ 1046.272718][T10195] Bluetooth: hci1: command tx timeout [ 1046.619418][T18513] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.439067][T18621] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2864'. [ 1047.833055][T18513] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.844971][ T9] usb 7-1: new high-speed USB device number 117 using dummy_hcd [ 1048.053215][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 1048.102908][ T9] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1048.146459][T18513] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.148183][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1048.232401][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1048.269826][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1048.310043][ T9] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1048.355888][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1048.394222][T10195] Bluetooth: hci1: command tx timeout [ 1048.428681][ T9] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1048.451741][ T9] usb 7-1: Manufacturer: syz [ 1048.466384][T18513] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.478049][ T9] usb 7-1: config 0 descriptor?? [ 1048.676575][ T30] audit: type=1400 audit(1787168856.923:2176): avc: denied { write } for pid=18622 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1048.802276][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1048.809672][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1048.821709][ T6126] usb 6-1: USB disconnect, device number 24 [ 1049.062645][ T9] rc_core: IR keymap rc-hauppauge not found [ 1049.078482][ T9] Registered IR keymap rc-empty [ 1049.100751][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1049.102314][ T30] audit: type=1400 audit(1787168857.343:2177): avc: denied { write } for pid=18642 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1049.157984][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1049.186914][T18644] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2868'. [ 1049.203709][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1049.246039][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input59 [ 1049.294528][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1049.335630][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1049.366314][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1049.393278][T18513] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1049.403110][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1049.423870][T18513] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1049.433063][T18513] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1049.442955][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1049.456561][T18513] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1049.467215][T18513] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1049.478992][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1049.502718][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1049.523345][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1049.543375][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1049.551921][T18513] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1049.578401][T18513] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1049.593120][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1049.603085][T18513] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1049.634795][ T9] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1049.654404][ T9] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1049.701700][ T9] usb 7-1: USB disconnect, device number 117 [ 1049.748615][T18513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1049.769594][T18513] 8021q: adding VLAN 0 to HW filter on device team0 [ 1049.784322][ T262] bridge0: port 1(bridge_slave_0) entered blocking state [ 1049.791446][ T262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1049.826660][ T262] bridge0: port 2(bridge_slave_1) entered blocking state [ 1049.833811][ T262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1050.331697][T18513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1050.537877][T18687] netlink: 'syz.6.2872': attribute type 83 has an invalid length. [ 1050.986265][T18690] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2874'. [ 1051.716668][T18699] FAULT_INJECTION: forcing a failure. [ 1051.716668][T18699] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1051.774077][T18699] CPU: 1 UID: 0 PID: 18699 Comm: syz.0.2877 Tainted: G L syzkaller #0 PREEMPT(full) [ 1051.774109][T18699] Tainted: [L]=SOFTLOCKUP [ 1051.774115][T18699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1051.774126][T18699] Call Trace: [ 1051.774132][T18699] [ 1051.774139][T18699] dump_stack_lvl+0x100/0x190 [ 1051.774167][T18699] should_fail_ex.cold+0x5/0xa [ 1051.774187][T18699] ? prepare_alloc_pages+0x16d/0x5f0 [ 1051.774216][T18699] should_fail_alloc_page+0xeb/0x140 [ 1051.774245][T18699] prepare_alloc_pages+0x1f0/0x5f0 [ 1051.774276][T18699] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 1051.774299][T18699] ? __kernel_text_address+0xd/0x30 [ 1051.774323][T18699] ? arch_stack_walk+0xa6/0xf0 [ 1051.774343][T18699] ? look_up_lock_class+0x55/0x120 [ 1051.774380][T18699] ? __asan_memcpy+0x3c/0x60 [ 1051.774402][T18699] ? desc_read+0x2e2/0x380 [ 1051.774425][T18699] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1051.774450][T18699] ? desc_read_finalized_seq+0x131/0x1d0 [ 1051.774476][T18699] ? __asan_memcpy+0x3c/0x60 [ 1051.774495][T18699] ? desc_read+0x2e2/0x380 [ 1051.774520][T18699] ? panic_on_this_cpu+0x32/0x40 [ 1051.774548][T18699] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1051.774574][T18699] ? policy_nodemask+0xed/0x4f0 [ 1051.774603][T18699] alloc_pages_mpol+0x1fb/0x540 [ 1051.774631][T18699] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1051.774665][T18699] alloc_pages_noprof+0x1a/0x160 [ 1051.774685][T18699] __pud_alloc+0x3b/0x690 [ 1051.774715][T18699] __handle_mm_fault+0x13ea/0x2a00 [ 1051.774739][T18699] ? mt_find+0x45e/0x8e0 [ 1051.774760][T18699] ? __pfx___handle_mm_fault+0x10/0x10 [ 1051.774778][T18699] ? __pfx_mt_find+0x10/0x10 [ 1051.774811][T18699] ? find_vma+0xbf/0x140 [ 1051.774835][T18699] ? __pfx_find_vma+0x10/0x10 [ 1051.774860][T18699] handle_mm_fault+0x37b/0xa30 [ 1051.774885][T18699] do_user_addr_fault+0x745/0x12f0 [ 1051.774911][T18699] exc_page_fault+0x6f/0xd0 [ 1051.774938][T18699] asm_exc_page_fault+0x26/0x30 [ 1051.774956][T18699] RIP: 0010:__put_user_4+0xd/0x30 [ 1051.774982][T18699] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 [ 1051.774999][T18699] RSP: 0018:ffffc900055b7b78 EFLAGS: 00050206 [ 1051.775016][T18699] RAX: 0000000000000002 RBX: 0000000000000000 RCX: 0000200000000000 [ 1051.775026][T18699] RDX: ffff88802ab00000 RSI: ffffffff825e0931 RDI: ffffffff8c602380 [ 1051.775038][T18699] RBP: ffffc900055b7d18 R08: 0000000000000001 R09: 00000000000001ca [ 1051.775049][T18699] R10: 0000000000000200 R11: 0000000000000000 R12: ffffffff9bbed570 [ 1051.775060][T18699] R13: 0000000000000001 R14: 1ffff92000ab6f76 R15: dffffc0000000000 [ 1051.775079][T18699] ? __might_fault+0x111/0x140 [ 1051.775106][T18699] vt_ioctl+0x13e3/0x3150 [ 1051.775133][T18699] ? __pfx_vt_ioctl+0x10/0x10 [ 1051.775159][T18699] ? tomoyo_init_request_info+0x101/0x370 [ 1051.775185][T18699] ? tomoyo_path_number_perm+0x188/0x580 [ 1051.775219][T18699] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1051.775244][T18699] ? tty_jobctrl_ioctl+0x152/0xce0 [ 1051.775268][T18699] ? __pfx_vt_ioctl+0x10/0x10 [ 1051.775291][T18699] tty_ioctl+0x26a/0x1640 [ 1051.775311][T18699] ? __pfx_tty_ioctl+0x10/0x10 [ 1051.775327][T18699] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 1051.775381][T18699] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1051.775427][T18699] ? selinux_file_ioctl+0x13b/0x290 [ 1051.775452][T18699] ? selinux_file_ioctl+0xb6/0x290 [ 1051.775481][T18699] ? __pfx_tty_ioctl+0x10/0x10 [ 1051.775500][T18699] __x64_sys_ioctl+0x18e/0x210 [ 1051.775522][T18699] do_syscall_64+0x123/0x790 [ 1051.775541][T18699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1051.775559][T18699] RIP: 0033:0x7f8c9519e0d9 [ 1051.775574][T18699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1051.775590][T18699] RSP: 002b:00007f8c95f9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1051.775607][T18699] RAX: ffffffffffffffda RBX: 00007f8c95425fa0 RCX: 00007f8c9519e0d9 [ 1051.775618][T18699] RDX: 0000200000000000 RSI: 0000000000005600 RDI: 0000000000000003 [ 1051.775629][T18699] RBP: 00007f8c95f9e090 R08: 0000000000000000 R09: 0000000000000000 [ 1051.775640][T18699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1051.775650][T18699] R13: 00007f8c95426038 R14: 00007f8c95425fa0 R15: 00007ffdc30e08a8 [ 1051.775675][T18699] [ 1051.792204][T18513] veth0_vlan: entered promiscuous mode [ 1051.839096][T18513] veth1_vlan: entered promiscuous mode [ 1051.919072][T18513] veth0_macvtap: entered promiscuous mode [ 1051.936836][T18513] veth1_macvtap: entered promiscuous mode [ 1052.019510][T18513] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1052.047252][T18513] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1052.154481][ T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.154969][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.155005][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.155023][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.774816][T18703] team0: Port device vlan0 added [ 1052.917031][T12796] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1052.941573][T12796] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1053.044167][T18705] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2875'. [ 1053.155590][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1053.181402][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1054.166746][T11344] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 1054.203755][ T30] audit: type=1400 audit(1787168862.453:2178): avc: denied { execute } for pid=18731 comm="syz.0.2886" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=64050 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1054.243609][ T30] audit: type=1400 audit(1787168862.473:2179): avc: denied { mount } for pid=18731 comm="syz.0.2886" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1054.304546][ T30] audit: type=1400 audit(1787168862.553:2180): avc: denied { unmount } for pid=14218 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1054.361059][T11344] usb 6-1: not running at top speed; connect to a high speed hub [ 1054.379126][T11344] usb 6-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1054.388291][T18739] input: syz1 as /devices/virtual/input/input60 [ 1054.406379][T11344] usb 6-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 1054.428806][T11344] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1054.448084][T11344] usb 6-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 1054.461909][T11344] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.483998][T11344] usb 6-1: config 0 descriptor?? [ 1054.497013][T11344] uvcvideo 6-1:0.0: Found UVC 9.00 device (046d:0825) [ 1054.532876][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1054.557576][ T3350] Bluetooth: hci0: Frame reassembly failed (-84) [ 1054.576783][T18742] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1054.589439][ T30] audit: type=1804 audit(1787168862.833:2181): pid=18742 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.2888" name="/newroot/3/file1" dev="tmpfs" ino=34 res=1 errno=0 [ 1054.802683][ T9] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1054.905641][T11344] uvcvideo 6-1:0.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 1054.916580][ T30] audit: type=1400 audit(1787168863.153:2182): avc: denied { write } for pid=18750 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1054.941401][T11344] uvcvideo 6-1:0.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 48). [ 1054.951528][T11344] uvcvideo 6-1:0.1: Failed to initialize the device (-71). [ 1054.960927][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 1054.984936][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1054.992040][ T30] audit: type=1400 audit(1787168863.233:2183): avc: denied { write } for pid=18762 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1054.995378][T11344] uvcvideo 6-1:0.0: probe with driver uvcvideo failed with error -71 [ 1055.026016][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1055.038768][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1055.052135][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.066797][T11344] usb 6-1: USB disconnect, device number 25 [ 1055.078648][ T9] usb 1-1: probing VID:PID(0424:012C) [ 1055.098308][ T9] usb 1-1: vub300 testing BULK IN EndPoint(0) 81 [ 1055.105680][ T9] usb 1-1: vub300 testing BULK OUT EndPoint(1) 02 [ 1055.112169][ T9] usb 1-1: vub300 testing UNKNOWN EndPoint(2) 83 [ 1055.120303][ T9] usb 1-1: vub300 ignoring EndPoint(2) 83 [ 1055.126245][ T9] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs [ 1055.164064][ T9] vub300 1-1:1.0: probe with driver vub300 failed with error -22 [ 1055.304259][T18749] 0x00000000000a-0x000000000309 : "" [ 1055.345441][T18749] ftl_cs: FTL header corrupt! [ 1055.427924][ T30] audit: type=1400 audit(1787168863.673:2184): avc: denied { write } for pid=18765 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1055.560375][ T30] audit: type=1400 audit(1787168863.803:2185): avc: denied { write } for pid=18784 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1056.117553][T18749] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 1056.142143][T18749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1056.153672][T18749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1056.170031][ T9] usb 1-1: USB disconnect, device number 50 [ 1056.172989][ T30] audit: type=1400 audit(1787168864.423:2186): avc: denied { read } for pid=18803 comm="syz.4.2897" name="mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1056.202904][ T30] audit: type=1400 audit(1787168864.423:2187): avc: denied { open } for pid=18803 comm="syz.4.2897" path="/dev/input/mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1056.203137][T18804] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2897'. [ 1056.612796][T10195] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1057.944641][T18820] netlink: 260 bytes leftover after parsing attributes in process `syz.6.2903'. [ 1058.385675][T18833] befs: (nbd7): unable to read superblock [ 1058.441901][T18838] futex_wake_op: syz.0.2905 tries to shift op by 144; fix this program [ 1058.442497][T10195] Bluetooth: hci4: unexpected event for opcode 0x2005 [ 1059.377464][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1059.377481][ T30] audit: type=1400 audit(1787168867.623:2197): avc: denied { write } for pid=18868 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1060.262667][T11344] usb 7-1: new high-speed USB device number 118 using dummy_hcd [ 1060.853543][T11344] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1060.863867][T11344] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1060.875144][T18891] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2915'. [ 1060.979646][T11344] usb 7-1: config 0 has no interfaces? [ 1060.985312][T11344] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.004975][T11344] usb 7-1: config 0 descriptor?? [ 1061.118678][T18897] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2917'. [ 1062.218855][ T5599] Bluetooth: hci0: command 0x1003 tx timeout [ 1062.229473][T10195] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1062.396147][T18907] FAULT_INJECTION: forcing a failure. [ 1062.396147][T18907] name fail_futex, interval 1, probability 0, space 0, times 1 [ 1062.436379][T18907] CPU: 1 UID: 0 PID: 18907 Comm: syz.5.2921 Tainted: G L syzkaller #0 PREEMPT(full) [ 1062.436408][T18907] Tainted: [L]=SOFTLOCKUP [ 1062.436415][T18907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1062.436424][T18907] Call Trace: [ 1062.436429][T18907] [ 1062.436433][T18907] dump_stack_lvl+0x100/0x190 [ 1062.436457][T18907] should_fail_ex.cold+0x5/0xa [ 1062.436471][T18907] get_futex_key+0x1d0/0x14f0 [ 1062.436489][T18907] ? __pfx_get_futex_key+0x10/0x10 [ 1062.436504][T18907] ? find_held_lock+0x2b/0x80 [ 1062.436516][T18907] ? futex_wake+0x4ea/0x5e0 [ 1062.436531][T18907] futex_wake+0xf4/0x5e0 [ 1062.436544][T18907] ? __pfx_futex_wake+0x10/0x10 [ 1062.436558][T18907] ? rcu_read_lock_any_held+0x6a/0x90 [ 1062.436570][T18907] ? find_held_lock+0x2b/0x80 [ 1062.436580][T18907] ? ksys_write+0x190/0x250 [ 1062.436591][T18907] ? ksys_write+0x190/0x250 [ 1062.436603][T18907] do_futex+0x2b2/0x440 [ 1062.436614][T18907] ? __pfx_do_futex+0x10/0x10 [ 1062.436631][T18907] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1062.436645][T18907] __x64_sys_futex+0x34f/0x4d0 [ 1062.436657][T18907] ? __pfx___x64_sys_futex+0x10/0x10 [ 1062.436673][T18907] do_syscall_64+0x123/0x790 [ 1062.436684][T18907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1062.436696][T18907] RIP: 0033:0x7f7f0979e0d9 [ 1062.436706][T18907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1062.436716][T18907] RSP: 002b:00007f7f0a6d10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1062.436728][T18907] RAX: ffffffffffffffda RBX: 00007f7f09a25fa8 RCX: 00007f7f0979e0d9 [ 1062.436735][T18907] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7f09a25fac [ 1062.436742][T18907] RBP: 00007f7f09a25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 1062.436748][T18907] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1062.436755][T18907] R13: 00007f7f09a26038 R14: 00007ffe2ab16940 R15: 00007ffe2ab16a28 [ 1062.436769][T18907] [ 1062.445581][ T30] audit: type=1400 audit(1787168870.693:2198): avc: denied { write } for pid=18909 comm="syz.4.2922" name="header" dev="configfs" ino=30813 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1062.648934][T18910] Config c/1 of g1 needs at least one function. [ 1062.685959][T18910] udc usbip-vudc.0: failed to start g1: -22 [ 1062.697870][T18910] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 1062.736367][T18910] UDC core: g1: couldn't find an available UDC or it's busy [ 1062.860057][ T30] audit: type=1400 audit(1787168870.853:2199): avc: denied { write } for pid=18909 comm="syz.4.2922" name="uncompressed" dev="configfs" ino=30814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1062.918996][ T30] audit: type=1400 audit(1787168870.863:2200): avc: denied { write } for pid=18909 comm="syz.4.2922" name="ss" dev="configfs" ino=30810 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1062.974708][ T30] audit: type=1400 audit(1787168870.863:2201): avc: denied { write } for pid=18909 comm="syz.4.2922" name="fs" dev="configfs" ino=30809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1063.025056][ T30] audit: type=1400 audit(1787168870.863:2202): avc: denied { write } for pid=18909 comm="syz.4.2922" name="h" dev="configfs" ino=65371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1063.075161][ T30] audit: type=1400 audit(1787168870.863:2203): avc: denied { write } for pid=18909 comm="syz.4.2922" name="h" dev="configfs" ino=65371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1063.145019][ T30] audit: type=1400 audit(1787168870.873:2204): avc: denied { write } for pid=18909 comm="syz.4.2922" name="fs" dev="configfs" ino=30820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1063.201640][T18918] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2924'. [ 1063.206669][ T30] audit: type=1400 audit(1787168870.873:2205): avc: denied { write } for pid=18909 comm="syz.4.2922" name="fs" dev="configfs" ino=30820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1063.267314][T18920] ip_tables: iptables: counters copy to user failed while replacing table [ 1063.274121][ T30] audit: type=1400 audit(1787168870.873:2206): avc: denied { write } for pid=18909 comm="syz.4.2922" name="hs" dev="configfs" ino=30821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1063.737038][ T1616] usb 7-1: USB disconnect, device number 118 [ 1064.989110][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1064.989141][ T30] audit: type=1400 audit(1787168873.233:2212): avc: denied { mounton } for pid=18938 comm="syz.0.2929" path="/proc/710/cgroup" dev="proc" ino=65778 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 1066.113303][T18942] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2930'. [ 1066.189557][T18942] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2930'. [ 1066.309428][ T30] audit: type=1400 audit(1787168874.553:2213): avc: denied { create } for pid=18952 comm="syz.6.2934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1066.394828][ T1616] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1066.485445][ T24] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 1066.575739][ T1616] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1066.589119][ T1616] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1066.615682][ T1616] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1066.650110][ T1616] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.664783][ T24] usb 6-1: not running at top speed; connect to a high speed hub [ 1066.673320][ T1616] usb 1-1: Product: syz [ 1066.685443][ T24] usb 6-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1066.694878][ T1616] usb 1-1: Manufacturer: syz [ 1066.716760][ T1616] usb 1-1: SerialNumber: syz [ 1066.729771][ T24] usb 6-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 1066.791019][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1066.841403][ T24] usb 6-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 1066.884593][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.952084][ T24] usb 6-1: config 0 descriptor?? [ 1067.109930][ T24] uvcvideo 6-1:0.0: Found UVC 9.00 device (046d:0825) [ 1067.145218][ T1616] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1067.277961][ T1616] usb 1-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1067.306906][ T1616] usb 1-1: found format II with max.bitrate = 4, frame size=7372 [ 1067.569413][ T24] uvcvideo 6-1:0.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 1067.604344][ T24] uvcvideo 6-1:0.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 48). [ 1067.637875][ T24] uvcvideo 6-1:0.1: Failed to initialize the device (-71). [ 1067.653248][ T24] uvcvideo 6-1:0.0: probe with driver uvcvideo failed with error -71 [ 1067.688876][ T1616] usb 1-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1067.708719][ T24] usb 6-1: USB disconnect, device number 26 [ 1067.724535][ T1616] usb 1-1: found format II with max.bitrate = 4, frame size=7372 [ 1067.892245][T18950] o2cb: Local heartbeat has not been started. [ 1067.900803][ T30] audit: type=1400 audit(1787168876.133:2214): avc: denied { write } for pid=18949 comm="syz.0.2933" name="/" dev="ocfs2_dlmfs" ino=65425 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1067.904083][T18950] o2cb: Cluster check failed. Fix errors before retrying. [ 1067.933273][T18950] (syz.0.2933,18950,0):user_dlm_register:674 ERROR: status = -22 [ 1067.941041][T18950] (syz.0.2933,18950,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "mydev" [ 1067.961392][ T1616] usb 1-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 1068.043088][ T1616] usb 1-1: USB disconnect, device number 51 [ 1068.087068][T13285] udevd[13285]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1068.142688][ T9] usb 7-1: new high-speed USB device number 119 using dummy_hcd [ 1068.216824][ T5599] Bluetooth: hci0: command 0x1003 tx timeout [ 1068.225049][T10195] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1068.313450][ T9] usb 7-1: device descriptor read/64, error -71 [ 1068.472687][T11898] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1069.028670][ T9] usb 7-1: new high-speed USB device number 120 using dummy_hcd [ 1069.102651][T11898] usb 6-1: Using ep0 maxpacket: 16 [ 1069.110106][T11898] usb 6-1: New USB device found, idVendor=046d, idProduct=c091, bcdDevice= 0.00 [ 1069.121593][T11898] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 242, changing to 11 [ 1069.133011][T11898] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1069.146026][T11898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.160825][T11898] usb 6-1: config 0 descriptor?? [ 1069.243909][ T9] usb 7-1: device descriptor read/64, error -71 [ 1070.418793][ T9] usb usb7-port1: attempt power cycle [ 1070.800613][T11898] hid (null): invalid report_size 29797 [ 1070.834759][T11898] logitech-hidpp-device 0003:046D:C091.001E: unknown main item tag 0x0 [ 1070.854859][T11898] logitech-hidpp-device 0003:046D:C091.001E: unknown main item tag 0x0 [ 1070.875176][T11898] logitech-hidpp-device 0003:046D:C091.001E: unknown main item tag 0x0 [ 1070.901125][T11898] logitech-hidpp-device 0003:046D:C091.001E: unknown main item tag 0x0 [ 1071.207359][ T9] usb 7-1: new high-speed USB device number 121 using dummy_hcd [ 1071.209240][T11898] logitech-hidpp-device 0003:046D:C091.001E: unknown main item tag 0x0 [ 1071.241825][T18967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1071.254992][T11898] logitech-hidpp-device 0003:046D:C091.001E: unknown main item tag 0x0 [ 1071.266560][T11898] logitech-hidpp-device 0003:046D:C091.001E: unknown main item tag 0x0 [ 1071.276705][T18967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1071.286086][T11898] logitech-hidpp-device 0003:046D:C091.001E: unknown main item tag 0x0 [ 1071.296841][T11898] logitech-hidpp-device 0003:046D:C091.001E: unknown main item tag 0x0 [ 1071.309244][T11898] logitech-hidpp-device 0003:046D:C091.001E: unknown main item tag 0x0 [ 1071.325525][T11898] logitech-hidpp-device 0003:046D:C091.001E: invalid report_size 29797 [ 1071.334244][T11898] logitech-hidpp-device 0003:046D:C091.001E: item 0 2 1 7 parsing failed [ 1071.343733][T11898] logitech-hidpp-device 0003:046D:C091.001E: hidpp_probe:parse failed [ 1071.352953][T11898] logitech-hidpp-device 0003:046D:C091.001E: probe with driver logitech-hidpp-device failed with error -22 [ 1071.372840][T11898] usb 6-1: USB disconnect, device number 27 [ 1071.432927][ T9] usb 7-1: device not accepting address 121, error -71 [ 1071.974465][T11898] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1072.142666][T11898] usb 1-1: Using ep0 maxpacket: 16 [ 1072.153124][T11898] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1072.178387][T11898] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1072.193769][T11898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1072.224843][T11898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1072.249288][T11898] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1072.269249][T11898] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1072.283995][T11898] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1072.295913][T12796] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1072.314495][T11898] usb 1-1: Manufacturer: syz [ 1072.322865][ T5794] usb 6-1: new low-speed USB device number 28 using dummy_hcd [ 1072.326480][T11898] usb 1-1: config 0 descriptor?? [ 1072.485142][ T5794] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1072.493014][ T5794] usb 6-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 1072.503354][ T5794] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 64, setting to 8 [ 1072.519367][ T5794] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xE is Bulk; changing to Interrupt [ 1072.542309][ T5794] usb 6-1: string descriptor 0 read error: -22 [ 1072.549388][ T5794] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.561708][T18998] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1072.586656][T18998] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1072.618316][ T5794] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1072.653335][T11898] rc_core: IR keymap rc-hauppauge not found [ 1072.668390][T11898] Registered IR keymap rc-empty [ 1072.678703][T11898] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1072.683069][ T9] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1072.713646][T11898] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1072.753643][T11898] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1072.773980][T11898] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input61 [ 1072.808487][T11898] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1072.852861][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 1072.854110][T11898] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1072.865938][ T9] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1072.876564][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1072.888188][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.893416][T11898] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1072.900212][ T9] usb 5-1: config 0 descriptor?? [ 1072.909755][T19007] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2949'. [ 1072.916216][ T9] iowarrior 5-1:0.0: no interrupt-in endpoint found [ 1072.942756][T11898] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1072.953703][T19007] bond0: entered promiscuous mode [ 1072.968315][T19007] bond_slave_0: entered promiscuous mode [ 1072.972731][T11898] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1072.980782][T19007] bond_slave_1: entered promiscuous mode [ 1072.989441][T19007] gretap0: entered promiscuous mode [ 1072.996031][T19007] debugfs: 'hsr1' already exists in 'hsr' [ 1073.001950][T19007] Cannot create hsr debugfs directory [ 1073.007847][T19007] hsr1: entered promiscuous mode [ 1073.013163][T11898] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1073.035049][T11898] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1073.073177][T11898] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1073.112690][T11898] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1073.133217][T11898] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1073.174297][T11898] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1073.194023][T11898] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1073.220496][T11898] usb 1-1: USB disconnect, device number 52 [ 1073.517001][ T9] usb 6-1: USB disconnect, device number 28 [ 1074.376586][T10195] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1074.383059][ T5599] Bluetooth: hci0: command 0x1003 tx timeout [ 1074.592682][ T1616] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1074.766205][T19021] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 1074.780863][T19021] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 1075.165103][ T1616] usb 6-1: Using ep0 maxpacket: 8 [ 1075.631186][ T9] usb 5-1: USB disconnect, device number 92 [ 1075.645781][ T1616] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1075.655021][ T1616] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1075.702962][ T1616] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1075.733129][ T1616] usb 6-1: SerialNumber: ᠶ谠풏 挲墺䢣 䬾⡡鵩൷ [ 1075.780831][T19027] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2956'. [ 1076.266809][ T1616] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1076.329112][ T1616] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1076.364377][ T1616] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1076.404524][ T1616] usb 6-1: media controller created [ 1076.714880][ T1616] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1076.856507][ T5599] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1076.870761][ T5599] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1076.886939][ T5599] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1076.899334][ T5599] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1076.907069][ T5599] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1077.000674][ T1616] zl10353_read_register: readreg error (reg=127, ret==0) [ 1077.092010][T19042] lo speed is unknown, defaulting to 1000 [ 1077.121978][T19042] lo speed is unknown, defaulting to 1000 [ 1077.278357][ T1616] usb 6-1: USB disconnect, device number 29 [ 1077.330208][T12796] Bluetooth: hci6: Frame reassembly failed (-84) [ 1077.337655][T19042] lo speed is unknown, defaulting to 1000 [ 1077.488608][T12796] Bluetooth: hci6: Frame reassembly failed (-84) [ 1077.498233][T19042] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1077.514152][T19042] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1077.706699][T19042] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1078.278604][T19042] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1078.379075][T19042] lo speed is unknown, defaulting to 1000 [ 1078.393879][T19042] lo speed is unknown, defaulting to 1000 [ 1078.420628][T19042] lo speed is unknown, defaulting to 1000 [ 1078.558223][T19042] lo speed is unknown, defaulting to 1000 [ 1078.589065][T19044] lo speed is unknown, defaulting to 1000 [ 1078.673293][T19071] device-mapper: ioctl: Invalid ioctl structure: uuid @, name , dev 100040f00 [ 1078.915954][T19073] Device name cannot be null; rc = [-22] [ 1078.937765][T10195] Bluetooth: hci0: command tx timeout [ 1079.338473][T14124] Bluetooth: hci6: command 0x1003 tx timeout [ 1079.341960][ T5599] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1079.904786][ T9] usb 7-1: new high-speed USB device number 123 using dummy_hcd [ 1079.927949][T12794] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1079.975488][T12794] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.089204][T19042] lo speed is unknown, defaulting to 1000 [ 1080.096345][ T9] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1080.110094][T19042] lo speed is unknown, defaulting to 1000 [ 1080.125647][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1080.148611][ T9] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1080.182103][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.230920][ T9] usb 7-1: config 0 descriptor?? [ 1080.334796][T12794] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1080.352935][T12794] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.391361][ T30] audit: type=1400 audit(1787168888.633:2215): avc: denied { write } for pid=19083 comm="syz.4.2971" name="c.1" dev="configfs" ino=21011 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1080.415719][ T30] audit: type=1400 audit(1787168888.633:2216): avc: denied { write } for pid=19083 comm="syz.4.2971" name="c.1" dev="configfs" ino=21011 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1080.608296][T12794] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1080.632200][T12794] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.736011][ T5794] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1080.918005][T12794] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1080.942763][ T5794] usb 6-1: Using ep0 maxpacket: 16 [ 1080.950527][T12794] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.969996][ T5794] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1080.993497][ T5794] usb 6-1: config 0 has no interfaces? [ 1081.004980][ T5794] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.013247][ T5599] Bluetooth: hci0: command tx timeout [ 1081.041632][ T5794] usb 6-1: config 0 descriptor?? [ 1081.240837][T19044] bridge0: port 1(bridge_slave_0) entered blocking state [ 1081.256685][ T1616] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1081.279619][T19044] bridge0: port 1(bridge_slave_0) entered disabled state [ 1081.312296][T19044] bridge_slave_0: entered allmulticast mode [ 1081.327427][T19088] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2972'. [ 1081.329421][ T30] audit: type=1400 audit(1787168889.573:2217): avc: denied { write } for pid=19086 comm="syz.5.2972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1081.367587][T19044] bridge_slave_0: entered promiscuous mode [ 1081.384985][T19044] bridge0: port 2(bridge_slave_1) entered blocking state [ 1081.403214][T19044] bridge0: port 2(bridge_slave_1) entered disabled state [ 1081.420206][T19044] bridge_slave_1: entered allmulticast mode [ 1081.433908][T19044] bridge_slave_1: entered promiscuous mode [ 1081.446044][T19105] dummy0: entered allmulticast mode [ 1081.454463][ T1616] usb 1-1: New USB device found, idVendor=0000, idProduct=0102, bcdDevice= 7.02 [ 1081.472903][ T1616] usb 1-1: Dual-Role OTG device on HNP port [ 1081.492007][ T1616] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.534067][ T5794] usb 6-1: USB disconnect, device number 30 [ 1081.582310][T19044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1081.599833][T19044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1081.604327][ T1616] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1082.612460][T19102] dummy0: left allmulticast mode [ 1082.667532][T19044] team0: Port device team_slave_0 added [ 1082.774653][T19044] team0: Port device team_slave_1 added [ 1082.817206][T12794] bridge_slave_1: left allmulticast mode [ 1082.825313][T12794] bridge_slave_1: left promiscuous mode [ 1082.834825][T12794] bridge0: port 2(bridge_slave_1) entered disabled state [ 1082.843719][T19118] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2979'. [ 1082.854912][T12794] bridge_slave_0: left allmulticast mode [ 1082.860641][T12794] bridge_slave_0: left promiscuous mode [ 1082.868465][T12794] bridge0: port 1(bridge_slave_0) entered disabled state [ 1083.387883][T14124] Bluetooth: hci0: command tx timeout [ 1083.532658][ T5794] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1083.577417][T12794] gretap0 (unregistering): left promiscuous mode [ 1083.650115][ T3350] smbdirect: ib_dev[syz1] removed [ 1083.659162][T12794] bond1 (unregistering): (slave vlan2): Releasing active interface [ 1083.689608][T12794] bond0 (unregistering): left promiscuous mode [ 1083.695982][T12794] bond_slave_0: left promiscuous mode [ 1083.701572][T12794] bond_slave_1: left promiscuous mode [ 1083.707791][ T30] audit: type=1400 audit(1787168891.943:2218): avc: denied { setopt } for pid=19114 comm="syz.0.2978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1083.729781][ T30] audit: type=1400 audit(1787168891.973:2219): avc: denied { connect } for pid=19114 comm="syz.0.2978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1083.735641][T12794] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1083.767948][T12794] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1083.779297][T12794] bond0 (unregistering): Released all slaves [ 1083.787784][T19124] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2978'. [ 1083.816126][T12794] bond1 (unregistering): Released all slaves [ 1083.830203][T12794] bond2 (unregistering): Released all slaves [ 1083.869222][T19044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1083.887130][T19044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1083.970692][T19044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1083.995769][T19044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1084.004306][T19044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1084.030771][T19044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1084.262123][T19044] hsr_slave_0: entered promiscuous mode [ 1084.282287][T19044] hsr_slave_1: entered promiscuous mode [ 1084.301578][T19044] debugfs: 'hsr0' already exists in 'hsr' [ 1084.333778][T19044] Cannot create hsr debugfs directory [ 1084.586743][ T10] usb 7-1: USB disconnect, device number 123 [ 1084.852878][ T5599] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1085.057786][ T30] audit: type=1400 audit(1787168893.303:2220): avc: denied { write } for pid=19130 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1085.969769][ T5599] Bluetooth: hci0: command tx timeout [ 1086.098317][T19158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1086.107782][T19158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1086.117489][ T30] audit: type=1400 audit(1787168894.363:2221): avc: denied { write } for pid=19156 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1086.402942][ T30] audit: type=1804 audit(1787168894.523:2222): pid=19161 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.2987" name="file1" dev="ramfs" ino=67093 res=1 errno=0 [ 1086.673588][ T5261] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1086.832715][ T1616] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1086.904510][T12794] hsr_slave_0: left promiscuous mode [ 1086.922102][T12794] hsr_slave_1: left promiscuous mode [ 1086.929945][T12794] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1086.946322][T12794] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1086.965863][T12794] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1086.982853][T12794] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1087.002901][ T1616] usb 5-1: Using ep0 maxpacket: 8 [ 1087.008540][ T1616] usb 5-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 1087.025259][T12794] veth0_macvtap: left promiscuous mode [ 1087.042774][T12794] veth1_vlan: left promiscuous mode [ 1087.051047][T12794] veth0_vlan: left promiscuous mode [ 1087.056574][ T1616] usb 5-1: config 3 has an invalid interface number: 45 but max is 0 [ 1087.064787][ T1616] usb 5-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 1087.081724][ T1616] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1087.111868][ T1616] usb 5-1: config 3 has no interface number 0 [ 1087.127596][ T1616] usb 5-1: config 3 interface 45 altsetting 2 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1087.160546][ T1616] usb 5-1: config 3 interface 45 altsetting 2 endpoint 0xA has invalid wMaxPacketSize 0 [ 1087.183220][ T1616] usb 5-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1087.208442][ T1616] usb 5-1: config 3 interface 45 has no altsetting 0 [ 1087.269723][ T1616] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.277891][ T1616] usb 5-1: Product: syz [ 1087.283231][ T1616] usb 5-1: Manufacturer: syz [ 1087.292717][ T1616] usb 5-1: SerialNumber: syz [ 1087.910915][T19173] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2989'. [ 1088.611116][T12794] team0 (unregistering): Port device vlan0 removed [ 1088.611853][T19164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1088.720985][T19164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1088.729426][T12794] team0 (unregistering): Port device team_slave_1 removed [ 1088.750957][T12794] team0 (unregistering): Port device team_slave_0 removed [ 1088.770310][ T30] audit: type=1400 audit(1787168897.013:2223): avc: denied { getopt } for pid=19168 comm="syz.6.2990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1088.917044][ T1616] usb 5-1: USB disconnect, device number 94 [ 1088.967381][T13285] udevd[13285]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:3.45/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 1090.917860][ T30] audit: type=1400 audit(1787168899.163:2224): avc: denied { write } for pid=19179 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1091.081109][T19044] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1091.130815][ T30] audit: type=1400 audit(1787168899.373:2225): avc: denied { write } for pid=19205 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1091.210159][T19044] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1091.224473][ T5794] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1091.228703][T19044] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1091.279890][T19044] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1091.305243][ T30] audit: type=1400 audit(1787168899.553:2226): avc: denied { mounton } for pid=19207 comm="syz.4.2997" path="/35/file0" dev="tmpfs" ino=212 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 1091.337223][T19044] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1091.354645][T12794] IPVS: stop unused estimator thread 0... [ 1091.382667][T19044] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1091.405140][ T30] audit: type=1400 audit(1787168899.583:2227): avc: denied { write } for pid=1616 comm="kworker/1:2" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=67277 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1091.410636][T19044] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1091.459104][ T5794] usb 6-1: New USB device found, idVendor=084d, idProduct=0003, bcdDevice= 4.9c [ 1091.502956][ T5794] usb 6-1: config 255 has an invalid interface number: 149 but max is 0 [ 1091.513287][ T5794] usb 6-1: config 255 has no interface number 0 [ 1091.532972][ T5794] usb 6-1: config 255 interface 149 has no altsetting 0 [ 1091.553991][T19044] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1091.557014][ T5794] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.585002][ T5261] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1091.595808][ T5794] usb 6-1: Product: syz [ 1092.424762][ T5794] usb 6-1: Manufacturer: syz [ 1092.456354][ T5794] usb 6-1: SerialNumber: syz [ 1092.694841][ T5794] gspca_main: spca500-2.14.0 probing 084d:0003 [ 1092.740847][ T5794] usb 6-1: USB disconnect, device number 31 [ 1092.781358][T19044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1092.838404][T19044] 8021q: adding VLAN 0 to HW filter on device team0 [ 1092.897140][ T6099] bridge0: port 1(bridge_slave_0) entered blocking state [ 1092.904332][ T6099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1092.962506][T12796] bridge0: port 2(bridge_slave_1) entered blocking state [ 1092.969711][T12796] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1093.480127][ T30] audit: type=1400 audit(1787168901.723:2228): avc: denied { write } for pid=19223 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1093.623885][ T1616] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1093.805404][ T1616] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1093.887563][ T1616] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1093.998076][ T1616] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1094.039921][ T1616] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.089050][ T1616] usb 6-1: config 0 descriptor?? [ 1094.109573][ T30] audit: type=1400 audit(1787168902.353:2229): avc: denied { write } for pid=19249 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1094.354329][ T5261] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1094.397016][T19044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1094.507880][T19044] veth0_vlan: entered promiscuous mode [ 1094.545528][T19044] veth1_vlan: entered promiscuous mode [ 1094.601768][T19044] veth0_macvtap: entered promiscuous mode [ 1094.612484][T19044] veth1_macvtap: entered promiscuous mode [ 1094.642655][ T6126] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1094.657051][T19044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1094.680276][T19044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1094.718238][T12796] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1094.793530][ T6126] usb 5-1: device descriptor read/64, error -71 [ 1094.805327][T12794] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.873559][T12794] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.975615][ T6099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1095.006476][ T6099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1095.042826][ T6126] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1095.075175][ T30] audit: type=1400 audit(1787168903.323:2230): avc: denied { write } for pid=19258 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1095.109391][ T3350] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.114409][ T6099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1095.142719][ T6099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1095.154384][ T3350] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.193773][ T6126] usb 5-1: device descriptor read/64, error -71 [ 1095.274664][ T30] audit: type=1400 audit(1787168903.523:2231): avc: denied { write } for pid=19273 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1095.324831][ T6126] usb usb5-port1: attempt power cycle [ 1095.367626][ T5261] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1095.512919][T11898] usb 7-1: new high-speed USB device number 124 using dummy_hcd [ 1095.584170][ T29] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 1095.616817][ T30] audit: type=1400 audit(1787168903.863:2232): avc: denied { write } for pid=19280 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1095.673179][ T6126] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1095.681675][T11898] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1095.698141][T11898] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.706465][T11898] usb 7-1: Product: syz [ 1095.710776][T11898] usb 7-1: Manufacturer: syz [ 1095.714862][ T30] audit: type=1400 audit(1787168903.953:2233): avc: denied { write } for pid=19291 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1095.715922][ T6126] usb 5-1: device descriptor read/8, error -71 [ 1095.745071][ T29] usb 3-1: device descriptor read/64, error -71 [ 1095.751429][T11898] usb 7-1: SerialNumber: syz [ 1095.951243][ T30] audit: type=1400 audit(1787168904.193:2234): avc: denied { write } for pid=19293 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1095.992742][ T29] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 1096.000375][ T6126] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1096.023596][ T6126] usb 5-1: device descriptor read/8, error -71 [ 1096.133081][ T29] usb 3-1: device descriptor read/64, error -71 [ 1096.140024][ T6126] usb usb5-port1: unable to enumerate USB device [ 1096.254713][ T29] usb usb3-port1: attempt power cycle [ 1096.255101][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1096.255113][ T30] audit: type=1400 audit(1787168904.503:2236): avc: denied { write } for pid=19306 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1096.337651][ T30] audit: type=1400 audit(1787168904.583:2237): avc: denied { write } for pid=19317 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1096.388890][T11898] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1096.405264][T11898] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1096.420444][T11898] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1096.434784][T11898] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 1096.450013][T11898] usb 7-1: USB disconnect, device number 124 [ 1096.573925][ T30] audit: type=1400 audit(1787168904.823:2238): avc: denied { write } for pid=19319 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1096.592680][ T29] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 1096.633852][ T29] usb 3-1: device descriptor read/8, error -71 [ 1096.643304][ T30] audit: type=1400 audit(1787168904.893:2239): avc: denied { write } for pid=19330 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1096.773151][T19123] Bluetooth: hci4: command 0x1003 tx timeout [ 1096.784054][ T5599] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1096.819950][T11898] usb 6-1: USB disconnect, device number 32 [ 1096.872825][ T29] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 1096.915983][ T29] usb 3-1: device descriptor read/8, error -71 [ 1096.990852][ T30] audit: type=1400 audit(1787168905.233:2240): avc: denied { write } for pid=19332 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1097.039402][ T29] usb usb3-port1: unable to enumerate USB device [ 1097.109200][ T30] audit: type=1400 audit(1787168905.353:2241): avc: denied { write } for pid=19348 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1100.105147][T19378] tipc: Enabling of bearer rejected, failed to enable media [ 1101.325542][T19391] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3013'. [ 1101.804749][ T30] audit: type=1400 audit(1787168910.043:2242): avc: denied { write } for pid=19362 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1101.878864][T19398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1101.888982][T19398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1102.739099][T19402] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3014'. [ 1102.925965][ T30] audit: type=1400 audit(1787168911.173:2243): avc: denied { write } for pid=19394 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1103.102696][ T9] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1104.113089][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1104.162676][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1104.665425][T19419] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3021'. [ 1105.127743][ T9] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1105.137483][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.147833][ T9] usb 6-1: config 0 descriptor?? [ 1105.650689][ T30] audit: type=1400 audit(1787168913.893:2244): avc: denied { write } for pid=19408 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1105.813384][ T30] audit: type=1400 audit(1787168914.063:2245): avc: denied { write } for pid=19431 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1106.125082][ T29] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1106.283273][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 1106.306019][ T29] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1106.351484][T19454] vhci_hcd vhci_hcd.0: failed to lookup sock [ 1106.352362][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 1106.388399][ T29] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 1106.403546][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1106.414758][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1106.565066][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.584888][ T29] usb 5-1: Product: syz [ 1106.592781][ T29] usb 5-1: Manufacturer: syz [ 1106.613297][ T29] usb 5-1: SerialNumber: syz [ 1106.644020][ T29] usb 5-1: config 0 descriptor?? [ 1106.892520][T19435] FAULT_INJECTION: forcing a failure. [ 1106.892520][T19435] name failslab, interval 1, probability 0, space 0, times 0 [ 1106.905920][ T29] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input63 [ 1106.929033][T19435] CPU: 1 UID: 0 PID: 19435 Comm: syz.4.3017 Tainted: G L syzkaller #0 PREEMPT(full) [ 1106.929064][T19435] Tainted: [L]=SOFTLOCKUP [ 1106.929072][T19435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1106.929083][T19435] Call Trace: [ 1106.929090][T19435] [ 1106.929098][T19435] dump_stack_lvl+0x100/0x190 [ 1106.929127][T19435] should_fail_ex.cold+0x5/0xa [ 1106.929152][T19435] should_failslab+0xc2/0x120 [ 1106.929180][T19435] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1106.929205][T19435] ? do_getname+0x35/0x390 [ 1106.929238][T19435] do_getname+0x35/0x390 [ 1106.929274][T19435] do_sys_openat2+0xc7/0x1e0 [ 1106.929301][T19435] ? __pfx_do_sys_openat2+0x10/0x10 [ 1106.929328][T19435] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1106.929348][T19435] ? __fget_files+0x21f/0x3d0 [ 1106.929376][T19435] __x64_sys_openat+0x12d/0x210 [ 1106.929402][T19435] ? __pfx___x64_sys_openat+0x10/0x10 [ 1106.929425][T19435] ? ksys_write+0x1ac/0x250 [ 1106.929449][T19435] do_syscall_64+0x123/0x790 [ 1106.929465][T19435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1106.929480][T19435] RIP: 0033:0x7faaa655e90e [ 1106.929494][T19435] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1106.929508][T19435] RSP: 002b:00007faaa7512b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1106.929523][T19435] RAX: ffffffffffffffda RBX: 00007faaa75136c0 RCX: 00007faaa655e90e [ 1106.929533][T19435] RDX: 0000000000000000 RSI: 00007faaa7512c00 RDI: ffffffffffffff9c [ 1106.929542][T19435] RBP: 00007faaa7512c00 R08: 0000000000000000 R09: 0000000000000000 [ 1106.929550][T19435] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1106.929559][T19435] R13: 00007faaa6826038 R14: 00007faaa6825fa0 R15: 00007fff2c7ac3e8 [ 1106.929580][T19435] [ 1107.237622][ T29] usb 5-1: USB disconnect, device number 99 [ 1107.252301][ T30] audit: type=1400 audit(1787168915.383:2246): avc: denied { write } for pid=19436 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1107.414773][ T30] audit: type=1400 audit(1787168915.663:2247): avc: denied { write } for pid=19466 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1107.769855][T19485] FAULT_INJECTION: forcing a failure. [ 1107.769855][T19485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1108.243040][T19487] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3028'. [ 1108.712623][T19485] CPU: 0 UID: 0 PID: 19485 Comm: syz.2.3029 Tainted: G L syzkaller #0 PREEMPT(full) [ 1108.712654][T19485] Tainted: [L]=SOFTLOCKUP [ 1108.712661][T19485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1108.712671][T19485] Call Trace: [ 1108.712677][T19485] [ 1108.712685][T19485] dump_stack_lvl+0x100/0x190 [ 1108.712713][T19485] should_fail_ex.cold+0x5/0xa [ 1108.712743][T19485] _copy_from_iter+0x1f4/0x1690 [ 1108.712765][T19485] ? __asan_memset+0x23/0x50 [ 1108.712787][T19485] ? __pfx__copy_from_iter+0x10/0x10 [ 1108.712805][T19485] ? __pfx___alloc_skb+0x10/0x10 [ 1108.712832][T19485] netlink_sendmsg+0x808/0xda0 [ 1108.712863][T19485] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1108.712889][T19485] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1108.712917][T19485] ____sys_sendmsg+0xa4d/0xbe0 [ 1108.712937][T19485] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1108.712963][T19485] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1108.712995][T19485] ___sys_sendmsg+0x190/0x1e0 [ 1108.713019][T19485] ? __pfx____sys_sendmsg+0x10/0x10 [ 1108.713043][T19485] ? get_pid_task+0x106/0x250 [ 1108.713070][T19485] ? find_held_lock+0x2b/0x80 [ 1108.713101][T19485] __sys_sendmsg+0x160/0x210 [ 1108.713121][T19485] ? __pfx___sys_sendmsg+0x10/0x10 [ 1108.713153][T19485] do_syscall_64+0x123/0x790 [ 1108.713172][T19485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.713191][T19485] RIP: 0033:0x7fe21039e0d9 [ 1108.713207][T19485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1108.713224][T19485] RSP: 002b:00007fe211216028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1108.713243][T19485] RAX: ffffffffffffffda RBX: 00007fe210625fa0 RCX: 00007fe21039e0d9 [ 1108.713254][T19485] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 1108.713264][T19485] RBP: 00007fe211216090 R08: 0000000000000000 R09: 0000000000000000 [ 1108.713275][T19485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1108.713285][T19485] R13: 00007fe210626038 R14: 00007fe210625fa0 R15: 00007fff70f50b18 [ 1108.713309][T19485] [ 1108.978521][ T30] audit: type=1400 audit(1787168917.213:2248): avc: denied { write } for pid=19468 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1110.292286][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1110.298836][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1110.308729][ T30] audit: type=1400 audit(1787168918.553:2249): avc: denied { write } for pid=19495 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1110.378008][ T10] usb 6-1: USB disconnect, device number 33 [ 1110.379088][T19500] ip_tables: iptables: counters copy to user failed while replacing table [ 1111.032672][T11898] usb 7-1: new full-speed USB device number 125 using dummy_hcd [ 1111.143860][T19519] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.3276800.0), cmd(9) [ 1111.193478][T11898] usb 7-1: not running at top speed; connect to a high speed hub [ 1111.212969][ T30] audit: type=1400 audit(1787168919.453:2250): avc: denied { watch_mount } for pid=19520 comm="syz.5.3039" path="/49" dev="tmpfs" ino=285 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1111.238622][T11898] usb 7-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1111.273433][T11898] usb 7-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 1111.300155][T11898] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1111.356533][T11898] usb 7-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 1111.398853][T11898] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.408491][T19527] uprobe: syz.5.3039:19527 failed to unregister, leaking uprobe [ 1111.444002][T11898] usb 7-1: config 0 descriptor?? [ 1111.461714][T11898] uvcvideo 7-1:0.0: Found UVC 9.00 device (046d:0825) [ 1112.109236][T19538] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3041'. [ 1112.776836][ T5599] Bluetooth: hci1: Malformed Event: 0x13 [ 1113.069028][ T30] audit: type=1400 audit(1787168921.313:2251): avc: denied { write } for pid=19504 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1113.178409][T11898] uvcvideo 7-1:0.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 1113.205542][ T30] audit: type=1400 audit(1787168921.453:2252): avc: denied { map } for pid=19544 comm="syz.0.3044" path="/dev/ptmx" dev="devtmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 1113.231686][T11898] uvcvideo 7-1:0.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 48). [ 1113.256212][T11898] uvcvideo 7-1:0.1: Failed to initialize the device (-71). [ 1113.273345][T11898] uvcvideo 7-1:0.0: probe with driver uvcvideo failed with error -71 [ 1113.284664][ T30] audit: type=1400 audit(1787168921.493:2253): avc: denied { write } for pid=19550 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1113.328655][T11898] usb 7-1: USB disconnect, device number 125 [ 1113.442669][ T6126] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1113.522703][ T10] usb 5-1: new low-speed USB device number 100 using dummy_hcd [ 1113.614532][ T6126] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1113.649705][ T6126] usb 3-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1113.671684][ T6126] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1113.692821][ T6126] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1113.714429][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1113.718868][ T6126] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1113.739232][ T10] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 1113.742099][ T6126] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1113.759853][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 64, setting to 8 [ 1113.781044][ T6126] usb 3-1: Product: syz [ 1113.787785][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xE is Bulk; changing to Interrupt [ 1113.791075][ T6126] usb 3-1: Manufacturer: syz [ 1113.833043][ T10] usb 5-1: string descriptor 0 read error: -22 [ 1113.834336][ T6126] usb 3-1: SerialNumber: syz [ 1113.843032][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.873164][ T6126] usb 3-1: config 0 descriptor?? [ 1113.886236][T19547] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1113.888664][T19549] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1113.902845][T19547] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1113.938613][ T6126] usb 3-1: selecting invalid altsetting 0 [ 1113.982135][ T30] audit: type=1400 audit(1787168922.223:2254): avc: denied { write } for pid=19554 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1114.590591][T19570] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3042'. [ 1114.969945][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1115.077443][T19573] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3043'. [ 1115.108166][T19573] bond0: entered promiscuous mode [ 1115.120922][T19573] bond_slave_0: entered promiscuous mode [ 1115.147960][T19573] bond_slave_1: entered promiscuous mode [ 1115.214576][T19546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1115.220664][T19573] gretap0: entered promiscuous mode [ 1115.239342][T19546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1115.240192][ T30] audit: type=1400 audit(1787168923.473:2255): avc: denied { write } for pid=19575 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1115.292485][T19573] hsr1: entered promiscuous mode [ 1115.306677][T11898] usb 3-1: USB disconnect, device number 27 [ 1115.456403][ T10] usb 5-1: USB disconnect, device number 100 [ 1115.998225][ T30] audit: type=1400 audit(1787168924.243:2256): avc: denied { write } for pid=19586 comm="syz.6.3049" name="kmsg" dev="proc" ino=4026532047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 1116.155020][ T30] audit: type=1400 audit(1787168924.263:2257): avc: denied { open } for pid=19586 comm="syz.6.3049" path="/467/dev/kmsg" dev="proc" ino=4026532047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 1116.374906][ T30] audit: type=1400 audit(1787168924.623:2258): avc: denied { write } for pid=19579 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1116.513670][T19596] FAULT_INJECTION: forcing a failure. [ 1116.513670][T19596] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1116.570285][T19601] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3052'. [ 1116.609233][T19596] CPU: 1 UID: 0 PID: 19596 Comm: syz.4.3050 Tainted: G L syzkaller #0 PREEMPT(full) [ 1116.609252][T19596] Tainted: [L]=SOFTLOCKUP [ 1116.609256][T19596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1116.609262][T19596] Call Trace: [ 1116.609266][T19596] [ 1116.609271][T19596] dump_stack_lvl+0x100/0x190 [ 1116.609290][T19596] should_fail_ex.cold+0x5/0xa [ 1116.609306][T19596] _copy_from_user+0x2e/0xd0 [ 1116.609318][T19596] comedi_unlocked_ioctl+0x44d/0x3310 [ 1116.609333][T19596] ? tomoyo_path_number_perm+0x188/0x580 [ 1116.609352][T19596] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1116.609369][T19596] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1116.609386][T19596] ? do_vfs_ioctl+0x226/0x13e0 [ 1116.609398][T19596] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1116.609408][T19596] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 1116.609427][T19596] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1116.609454][T19596] ? selinux_file_ioctl+0x13b/0x290 [ 1116.609470][T19596] ? selinux_file_ioctl+0xb6/0x290 [ 1116.609488][T19596] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1116.609502][T19596] __x64_sys_ioctl+0x18e/0x210 [ 1116.609515][T19596] do_syscall_64+0x123/0x790 [ 1116.609528][T19596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.609539][T19596] RIP: 0033:0x7faaa659e0d9 [ 1116.609549][T19596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1116.609560][T19596] RSP: 002b:00007faaa7513028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1116.609571][T19596] RAX: ffffffffffffffda RBX: 00007faaa6825fa0 RCX: 00007faaa659e0d9 [ 1116.609579][T19596] RDX: 0000200000000040 RSI: 00000000c02c640e RDI: 0000000000000005 [ 1116.609585][T19596] RBP: 00007faaa7513090 R08: 0000000000000000 R09: 0000000000000000 [ 1116.609592][T19596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1116.609598][T19596] R13: 00007faaa6826038 R14: 00007faaa6825fa0 R15: 00007fff2c7ac3e8 [ 1116.609613][T19596] [ 1116.849121][ T30] audit: type=1400 audit(1787168925.063:2259): avc: denied { write } for pid=19604 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1116.882130][ T30] audit: type=1326 audit(1787168925.123:2260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19600 comm="syz.2.3052" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21039e0d9 code=0x7ffc0000 [ 1117.592776][ T10] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1117.754290][ T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1117.766767][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1117.785204][ T10] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1117.839622][T19623] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3051'. [ 1117.850746][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.886895][ T10] usb 6-1: config 0 descriptor?? [ 1118.071995][ T6126] [ 1118.074338][ T6126] ============================================ [ 1118.080459][ T6126] WARNING: possible recursive locking detected [ 1118.086579][ T6126] syzkaller #0 Tainted: G L [ 1118.092537][ T6126] -------------------------------------------- [ 1118.098654][ T6126] kworker/1:7/6126 is trying to acquire lock: [ 1118.104689][ T6126] ffff88803354f128 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x230/0x860 [ 1118.114415][ T6126] [ 1118.114415][ T6126] but task is already holding lock: [ 1118.121746][ T6126] ffff888033436128 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x230/0x860 [ 1118.131463][ T6126] [ 1118.131463][ T6126] other info that might help us debug this: [ 1118.139491][ T6126] Possible unsafe locking scenario: [ 1118.139491][ T6126] [ 1118.146909][ T6126] CPU0 [ 1118.150160][ T6126] ---- [ 1118.153410][ T6126] lock(&grp->list_lock); [ 1118.157796][ T6126] lock(&grp->list_lock); [ 1118.162181][ T6126] [ 1118.162181][ T6126] *** DEADLOCK *** [ 1118.162181][ T6126] [ 1118.170294][ T6126] May be due to missing lock nesting notation [ 1118.170294][ T6126] [ 1118.178583][ T6126] locks held by kworker/1:7/6126: 3, last CPU#1: [ 1118.184892][ T6126] #0: ffff88801c04b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 1118.195296][ T6126] #1: ffffc90005a27d08 ((work_completion)(&runtime->event_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 1118.207185][ T6126] #2: ffff888033436128 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x230/0x860 [ 1118.217340][ T6126] [ 1118.217340][ T6126] stack backtrace: [ 1118.223201][ T6126] CPU: 1 UID: 0 PID: 6126 Comm: kworker/1:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 1118.223218][ T6126] Tainted: [L]=SOFTLOCKUP [ 1118.223224][ T6126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1118.223231][ T6126] Workqueue: events snd_rawmidi_input_event_work [ 1118.223249][ T6126] Call Trace: [ 1118.223255][ T6126] [ 1118.223263][ T6126] dump_stack_lvl+0x100/0x190 [ 1118.223284][ T6126] print_deadlock_bug.cold+0xbd/0xca [ 1118.223301][ T6126] __lock_acquire+0x1343/0x1ec0 [ 1118.223318][ T6126] lock_acquire+0x1b9/0x370 [ 1118.223331][ T6126] ? snd_seq_deliver_event+0x230/0x860 [ 1118.223346][ T6126] ? do_raw_read_unlock+0x3f/0x70 [ 1118.223363][ T6126] _raw_read_lock+0x5f/0x70 [ 1118.223377][ T6126] ? snd_seq_deliver_event+0x230/0x860 [ 1118.223391][ T6126] snd_seq_deliver_event+0x230/0x860 [ 1118.223405][ T6126] ? lock_acquire+0x1b9/0x370 [ 1118.223418][ T6126] ? find_held_lock+0x2b/0x80 [ 1118.223429][ T6126] ? __pfx_snd_seq_deliver_event+0x10/0x10 [ 1118.223443][ T6126] ? lockdep_hardirqs_on+0x7d/0x110 [ 1118.223460][ T6126] ? _raw_spin_unlock_irq_enable+0x56/0x90 [ 1118.223475][ T6126] ? client_use_ptr+0xfd/0x4a0 [ 1118.223487][ T6126] snd_seq_kernel_client_dispatch+0x16f/0x1b0 [ 1118.223503][ T6126] queue_broadcast_event.isra.0+0x143/0x1b0 [ 1118.223519][ T6126] ? __pfx_queue_broadcast_event.isra.0+0x10/0x10 [ 1118.223536][ T6126] ? _raw_spin_unlock_irq_enable+0x6c/0x90 [ 1118.223550][ T6126] ? lockdep_hardirqs_on+0x7d/0x110 [ 1118.223566][ T6126] ? _raw_spin_unlock_irq_enable+0x56/0x90 [ 1118.223582][ T6126] snd_seq_control_queue+0x6e9/0xb40 [ 1118.223599][ T6126] ? __pfx_event_input_timer+0x10/0x10 [ 1118.223611][ T6126] __snd_seq_deliver_single_event+0x127/0x1c0 [ 1118.223626][ T6126] snd_seq_deliver_single_event+0x31f/0x8c0 [ 1118.223641][ T6126] ? __pfx_snd_seq_deliver_single_event+0x10/0x10 [ 1118.223658][ T6126] snd_seq_deliver_event+0x44b/0x860 [ 1118.223671][ T6126] ? lock_acquire+0x1b9/0x370 [ 1118.223685][ T6126] ? do_raw_spin_lock+0x128/0x260 [ 1118.223700][ T6126] ? find_held_lock+0x2b/0x80 [ 1118.223710][ T6126] ? __pfx_snd_seq_deliver_event+0x10/0x10 [ 1118.223729][ T6126] ? mark_held_locks+0x40/0x70 [ 1118.223742][ T6126] ? _raw_spin_unlock_irq_enable+0x6c/0x90 [ 1118.223757][ T6126] ? lockdep_hardirqs_on+0x7d/0x110 [ 1118.223772][ T6126] ? _raw_spin_unlock_irq_enable+0x56/0x90 [ 1118.223787][ T6126] ? client_use_ptr+0xfd/0x4a0 [ 1118.223799][ T6126] snd_seq_kernel_client_dispatch+0x16f/0x1b0 [ 1118.223814][ T6126] send_timer_event.isra.0+0x130/0x190 [ 1118.223828][ T6126] ? __pfx_send_timer_event.isra.0+0x10/0x10 [ 1118.223843][ T6126] ? snd_seq_queue_timer_set_tempo+0x18b/0x4e0 [ 1118.223861][ T6126] snd_seq_oss_timer_start+0x1db/0x320 [ 1118.223877][ T6126] ? __pfx_snd_seq_oss_timer_start+0x10/0x10 [ 1118.223893][ T6126] ? _raw_spin_unlock_irq_enable+0x56/0x90 [ 1118.223908][ T6126] ? find_slot+0x15c/0x1b0 [ 1118.223924][ T6126] snd_seq_oss_midi_input+0x467/0xa30 [ 1118.223941][ T6126] ? __pfx_snd_seq_oss_midi_input+0x10/0x10 [ 1118.223961][ T6126] ? find_held_lock+0x2b/0x80 [ 1118.223977][ T6126] ? snd_seq_port_use_ptr+0x128/0x190 [ 1118.223999][ T6126] snd_seq_oss_event_input+0x194/0x250 [ 1118.224016][ T6126] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 1118.224031][ T6126] __snd_seq_deliver_single_event+0x127/0x1c0 [ 1118.224046][ T6126] snd_seq_deliver_single_event+0x31f/0x8c0 [ 1118.224061][ T6126] ? __pfx_snd_seq_deliver_single_event+0x10/0x10 [ 1118.224075][ T6126] ? mark_held_locks+0x40/0x70 [ 1118.224088][ T6126] ? _raw_spin_unlock_irq_enable+0x6c/0x90 [ 1118.224103][ T6126] ? lockdep_hardirqs_on+0x7d/0x110 [ 1118.224119][ T6126] ? _raw_spin_unlock_irq_enable+0x56/0x90 [ 1118.224135][ T6126] snd_seq_deliver_event+0x2c1/0x860 [ 1118.224150][ T6126] ? __pfx_snd_seq_deliver_event+0x10/0x10 [ 1118.224165][ T6126] ? lockdep_hardirqs_on+0x7d/0x110 [ 1118.224181][ T6126] ? _raw_spin_unlock_irq_enable+0x56/0x90 [ 1118.224196][ T6126] ? client_use_ptr+0xfd/0x4a0 [ 1118.224208][ T6126] snd_seq_kernel_client_dispatch+0x16f/0x1b0 [ 1118.224225][ T6126] snd_midi_input_event+0x32f/0x470 [ 1118.224238][ T6126] ? __pfx_snd_midi_input_event+0x10/0x10 [ 1118.224251][ T6126] ? lock_acquire+0x5e/0x370 [ 1118.224273][ T6126] ? __pfx_snd_midi_input_event+0x10/0x10 [ 1118.224288][ T6126] snd_rawmidi_input_event_work+0x61/0x80 [ 1118.224302][ T6126] process_one_work+0xa23/0x1940 [ 1118.224317][ T6126] ? __pfx_process_one_work+0x10/0x10 [ 1118.224331][ T6126] ? __pfx_snd_rawmidi_input_event_work+0x10/0x10 [ 1118.224347][ T6126] worker_thread+0x5ef/0xe50 [ 1118.224360][ T6126] ? __pfx_worker_thread+0x10/0x10 [ 1118.224372][ T6126] ? kthread+0x13a/0x450 [ 1118.224382][ T6126] ? __pfx_worker_thread+0x10/0x10 [ 1118.224394][ T6126] kthread+0x373/0x450 [ 1118.224404][ T6126] ? __pfx_kthread+0x10/0x10 [ 1118.224415][ T6126] ret_from_fork+0x730/0xd60 [ 1118.224430][ T6126] ? __pfx_ret_from_fork+0x10/0x10 [ 1118.224445][ T6126] ? __switch_to+0x800/0x10f0 [ 1118.224456][ T6126] ? __pfx_kthread+0x10/0x10 [ 1118.224466][ T6126] ret_from_fork_asm+0x1a/0x30 [ 1118.224485][ T6126] [ 1119.942088][ T10] usb 6-1: USB disconnect, device number 34 [ 1119.953651][ T30] kauditd_printk_skb: 106 callbacks suppressed [ 1119.953661][ T30] audit: type=1400 audit(1787168928.203:2367): avc: denied { write } for pid=19611 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1120.166852][ T30] audit: type=1400 audit(1787168928.413:2368): avc: denied { write } for pid=19642 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1125.572906][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1127.652642][T19123] Bluetooth: hci2: command 0x0406 tx timeout