last executing test programs: 37m39.445123216s ago: executing program 32 (id=190): mq_open(0x0, 0x40, 0x4a, &(0x7f0000004980)={0x3, 0x3, 0xa579, 0x56c7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000000000000000000000000000ec000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = accept$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r1, 0x0, 0x60) r2 = memfd_create(&(0x7f00000001c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9p}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00$\xad\xf8\x1bvCKgF\xbd\x8a\xa8\xb5\x19~\x05\x8d\xa1C\xd9L\x94\f\x86?\xd2\x97\xcd\xaf\x84x\x82\xd2C\"\xfd\x9e\xddh\xa8J\nT\xd5\x9d\xef\t\xd7\xd8\v\xa4\x96(\xde\xacb\x023y\xaf\xf4\x84$#\xa8l\xd3\xe9\x87\x92\x17Y%\x98\x1c\a!\v\x1d+\x01\xdbl\x8c\x18\x19\xc7\xf6\xcd\x96+\x04\x80\xda<\xe2\xfe\xa0!\xdfl3\v\xea:UQ\x1bSq\xa3\xa9O\x98F4\xa4\xd0\x86FS\xce\xa4\xac\x8b2Jv \xfe\xbe[VQ\xa7\x80S6\xed\xfa\x91J\x17>\xf0n\xd0\xb0.\xf8d\xb7%\xce-\xc2\x02u\xe0\x00j\xa5\x85\xd2\xfb\\\xe6.\x9a\xfdI\xbd\xca\xc4\xc7J\x10\x92\x90v\x89h\xb6)\xf0\x8ae\xe4\x00\xcbr\xce\x0e\xa6\x18\xdd\x16T\xc0\x9f\xa7\xe9\xc5\xcer\x97\x82<:\x11 \xa8\xd5(]i@\xb9\x82\xa7\'\xefT\x01\x06\x18\x93\xdb\xc2\xc4L)\x88\xef\xa7q\x1c\x81\x96\xbc)C\x87\xf9\xec\x04\xd0\xabiC\x886\xd22~\xf5/z*]\xd1^ZNR\x92\xc3\xcd\x14\x0e<\xa6\x8a\xb5w\xe5\x14\x1c\x1b\xa9\xdaM0\x98\xc0\x81\xff\xbeI\x8d\xa7QHyS\x19\xac<\x0f\x18\x8e\xc6\f\x03\xb2\xea+;\xe1\xf3e\xf8\xe7\xb3@\xf1M\x11\x8a\\\xadX1j\x99<\xcfx\xf1\x00d\xf1\xc7\a\xe5GL\xf1/Z\x8e\xe3c*\x91\x97\xd3R\xf7U/y\'8\xa3\xcb\xa0\xc2l\xd5\xd8\xc0u,da\x14\xebD?\x1bH@\xaa2\xcd\xda\xb6\xe7\x03\xeb\xc8\xfe\xf6*\xdc\x9127\xc1\x00\x81\x12\x16\x9c\x0f/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xe1*\xa2c\x12.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xf7\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x1f\x00\x00\x00\x00\x00\x00\x00]\x81\xf3\xf9\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\xa3\xac9&\xe6\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\x1ag\x00\x8eCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9\x1f\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4X,\v\xa5\xca\v|\xe2L\xac\x80\xc7\x11\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\v)\x06B\xf0\x01\x91 )y\xb4\xba\xba\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5\x92\xc3V\x116jY-\x83\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x03\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0s\xa8\x1f(\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9\x00\x00\x00\x00\x00\x00\xba3?Q\x00\x00SDl\xc6\xe0\xc5\xbc\x9c\xe8\x15\xe5kJ\xc2\x8a\x9a7\xff\xd1\r\x96=\x81\xb6\xdb\xf8\x03\x91L\b\xa3\r#\x9cX\xc4\x92\x90[p\xbb]X\rm^}\xa3\xe46(\x9d-\xf8\xf9o\xa9\x13\x00\x00\x00\x00\x00\x00&2\xdfy\xd0\x15\x9d`\x83\xa4\xa6\x14^9]H\xd7/KP\xae\xa8\a.\fHo\xaa\x85@\xae\x8d\xfag\xa5F\xe6\xdf\xc1\x80Sv\x92\x01?\xf6\xad\xe2\xf9A\'\xf49\xb1uo\xc1\x95H\xd6\xdew-;\vR\x15z8\xfe\xcb\xd1]\xe1\xebF\xe8\xe7\x9b\xa81\x8eEp\x99\xd8X\x06\'\xff2\xa8Q\v\x19)\xc35\x03Z0\xfcd5\xb1\x89v?4R,\xd8\x1e\xb3\xfa \x80t\xd8\xc3 \x97A\xef\xc5.\xb1\x02b\xb9\xab\x12@\xa9\x18\x84\xb2\xf6\x16\xb7\xbb\xa4\x89G\b\xc1\n\x04\xbb\a\x14DC#V>\x88\xa09\x8aPU\xf1\xebXn%$\x13\xaa\x80\x86Fb\xc0\\Z\xb3U\x00\xd3\xbb\xbb\xe3\xfe\x9br\xa2\x06\xe63\x1a/(s\xce\xda\x83n-v\x17\xf1D\x8c\xf4x\xc1v\a%\x87\x11\x86\xc92\xb7\x06\xe2\x0e\xb1\xe3KoE#\x88\xdb\xa5\x7fc[\xfd]\r\x87\x94\xf4\x0e47Bo\x8a\xfc\xb9\xcd\xbcK\xc9\x02\x00&\xae*\xa7\xfc\xc6\xf6-T\x1f\xad.\xf0\x00\x00\xf2\xb5\xafq?/\xc0\xec7\xe6>\xa2\x02\xc7x\x98#\xb6\xac\xfd\x86\x91%\x0f\xca><\x02.\xcb3\xfc\ns\xea\xbf&\xae`\x1d\x0f\xd4g\xd7\x81g:u9\xa3\xb2(yK\xcd\xa7\xa1\xc9%\x1b\xee\xd6Ob>\x8c\xde-#W\xfc&-\xd2\xc9\x0eW\xfcV?\x81\x9f+\xdai\xf2\xd1\xb8[\xd0\x95\xa5\x04\xf9~\x93kj\xc3\xe1\xc2\xd8*SZ\xc3\xf9H/\xd7\v\xcb\x99_\x1d\xaan\"\xde\xc2\xc9\xe7>\a]Q\xce\\\xbas\xfcB\xaf\xf5\xb3-\xb95\xb9\f\x1f\xeb\xb3\xaf\xcb\x96\xfe \x81\xc0\xfb\xc7D\xf1)\x1d\xad\xf9V\xd1T\x9d\xb2\xba/\x0e\x17\xf6\xbd3F\x9e<\x1d\xf9\b\xd0\xe3Z\a\n\x14\nzY\xd2/\xe8\xdb\x066am\xad@\xbf\x11h\x9c\xcdQ\xf9\xc7\xd1g\r\x1bb\xc6\xc5\xba!`\xd7\xdcx\x92\'\x7f\xc4\xdf\xaf\x90\x94r\x93\x17\x18\xb8#gS:6\x93s\xcf\vqG', 0x0) bind$unix(r0, &(0x7f00000006c0)=@abs={0x1, 0x0, 0x2}, 0x6e) fallocate(r8, 0x0, 0x0, 0x1) lseek(r8, 0x44, 0x0) 37m3.275468489s ago: executing program 33 (id=318): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xe}, 0xe) sendmmsg$sock(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r0, 0x1) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000022c0)={'vxcan0\x00', 0x0}) sendmmsg$sock(r1, &(0x7f0000005640)=[{{&(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3, 0x3, 0x0, 0x4}}, 0x80, &(0x7f0000002240)=[{&(0x7f00000003c0)="0f2c5c35d2d986c40032ac010c91984c5cc8dbe2de3da982f626bc8a8cd8962adfb26c3c3da57804b90f0208581b9905488d4afd35cd4673fc865eef177be5fa30cc142572445ec679b6d149e8311fcf01622a2fc6aae0be5b735a1f13a244a68cecec2178448f21c7a10936cb40322239d14b453b8a3ed8e257864d782b4326f458274a8e00e85d6b90563810337c7175bf74803e6fdfb30b64a93704eaf8c269039046453d6f78c6649975057659dd70e8b5a171272e2a664ad3bc9e308478254223aa40199e", 0xc7}, {&(0x7f0000000540)="c6e9239a4d78d12810cd559c071ebf1fe15c2f05bb4f347494d95fe8843d479ee2c80bd51f57282409925df8ee37f64b1af454dfdb66f74d29d32cc39d904969ec7c4a793e04912b1f69ec362eb489653595e8e3388ccea8aa06cebbdd078fc91fa480afd84febb57b7cef15ec0ac0d3383bbf31bdf434b9f0016c96fdcfea2516b699d85b28abebfc08a3efcea628d34ac82b0cb648a3fb2654de7f0901424b9b5b0138e7478912b09c090d922f60f892574a5e5da2d3f410", 0xb9}, {&(0x7f0000000600)="602f0cb7537003fef3904c5498c261630e5483c6c9bdc36d766c0d6a122f95d3bba5486b1b9728d5f720ae3df07188509d9e239337b8269bc33ed199adda4e563ffff219560c36c2371cfcdf31c0927ab05cd3f35f896a944a453425a020c38300a6e6db76c27cdea74eb02f3d6cedbf898ed20545156ab813ec2f6a063b8f117c893152600196f6de430abb24ec9c58b75d84accc1e448ce9c809ea5e8a882956a7cc322761a1b6dbdd32da6b6cca527ea69b9d6146698227df306ffe7aa28e7f4f3abd0e2a3fede9838a73fbe78e1036e49a75b09339cba06b550820cee12ab4ced8d5d45659", 0xe7}, {&(0x7f0000000700)="117edd049287020027ffd628339763c7faf54e", 0x13}, {&(0x7f0000000740)="124b3f6301eb73e364a6301df2469b855b5cb66ba76aebe8f9235c61790a07c029880b540fb1efe23d77ce3799d8da75911619a28b2f396c7b830c9b5e69b51872643f2cca02f958befd101cdee8648c2f22577866cf387ae82b742329bfc17bd71bec2a2c6fbce605bf05a8a6de90a3370b0b8f127bad75a01152417683a95d3750", 0x82}, {&(0x7f0000001140)="4a8bc49584d4e40b7762bd3be2d3040fff311b6e03862d6664053bb088164b96efb89104baf019b7b426904816c7ae8e57675d051051c7b4ca554f8fc6447d656c1b89da4f0339025b7390c6769a54b162091a54e1d0b34728aa2ca07f4e87f1fb0c77d0319775710d0410de3d340d6abd39915128bbbb84acc0708f92c947a356d70ce74f7c76713d042f8cd21e789ec01d31d89960211e5fdd98554681cc2140434710a50e58691df9d566525b551c3bbea62ae073f48c7857e377d462b4fe8c6721b40495bd3867774748d25cd284146156fb91f120ea1dcfc5bc3bdaaae969ce2b0a35800ce58b23d0d05be2b6e8efdc3353132917d83cb14b497f7727263b50a4954f4f43b2ffd447fb5be42924a0e54f03661d82bf59cea2bc2efb2a1145c169376ae2b7edf8dfb597847b76d4008402d739e0903a7b3727372ef13d710b360fabb63f8f34a18adedd61cb8993d0252f7509b90a75916cef1af8c8fa554858e85e5e9cf5a0e4816189252c1aa63587f53fd91cf500fa375bb8aa705b6f0b73156e840326274ffe3f162a2f2b8e0dd8ffec17be7bf114cc837ec6902ca2ddae06b4620d5b08ad6f137df0bb325f5a0ce3b366ad2f274b47aea33e2730ab76ff18b93c5f50f91f0059e49fd338dd3224cbe8affae4ab7aea899387365ebdf7f8c6fc2caee46685a22b2172a68115d551c84e6796fa16ed4b4c58dbaff168d8d21aaa224bc3f0b2b243626222025660a7cc28a2ebadac681746ab3b87ae2b1df9a34c1383fb6b24e6fdc513a762fa49c0aa94ab8e0c77af74b6d184afa8e591e78ac2dde2876fca1e6e3343bd04b81e81d620fef7b613deffc22fcfcd46d31f94bab34aedc581d84ea8d2edfcd7fa8763c7ece48b0259a61f31ea9f70c20a5ec78cb030f2d3a9278b7f717f59ffb3d6687925c04bb7f17c9f8e055ba89498a997b24eef51c1d664a493f9181b418facf803e885165584b3d90f92cb77ac2d6cd2dc154adc1f3d2b5b26ecd74c91ede508514175f7e3fdba8f8fecade6778eb43e0b1b65256c22afa9775cb1ffd41edb28d15f5c4dcd43431df871a33ec8c2581d626d5dc0001710c2b19fb430cc2d277efcfa1d17d73c47962917c417208ebe825bd1be60231524b06019080d0cc38d74f4353e336e183be9a2389fbe90cbc874cbe015b874979a7f4412b43b9798c2c43b9decf4bbc3211668eeaa6ae43f09c317267041a9b5e725fa1d13f8f2e7b96e9721d0ccad1f507a0bd6cd180e1dbcf09b32cf9c79fb395bb7b5651645c38f609fc691c12d4fe14ec3ad62bdca0be9e5142f655080587b5b7cefd1e53b65bdd80dbc08fac6524254be8bc213708ae8945761847ab73905156235bfe51de2b56212b63140dc19748614d15d33bb9c61fa77d5449c1f33fbf9a5ba1bd9748567b32a23dae01780ee33273eecdea2b2cde1dd336db8557bb2579ae82cd69e22ce3bd0c91b8ce74b5fbe66f0c6e4dc422d403838596e10f63ca17bc8eafdf452b2896a0acba20c9d00ad43e74f66cb03bc537121e4239af3bb660b14df20d3651d90c332770fce61e2e7d71fc1a5a3706adc6f5de9b0e46e756479ca10adc045e7d6ecba111dee12cd2dd135a5c12410e05dbbaaa4cc37d1054d3f1f7d2f1257dd678547c0db13296ff02d3c640efbd6ab19237ca91830f76d5081066b6776e98dc00612261b635e573d8b4cbd17b85af9788c57aace7c9ea1eb26ac889a0df8edb0803bed87d45d5936ff02a581f07caa421342a905e903a5f4f8932a5ce69104db203721fb8d9cd389ff0162b0711e1c1a021a759bb67c25822d40592e6e4eaad0c9624ac23c0854c2ea6560d9030bf4ab511ba53ac913a786ab3e3c57d2c14b7e81ad303d6bcb86cc8e28af628ba991bea5cf3038c4bb47770af5e72385a62c8db3ce6eb166de10b3d7af53a7e32c837ffe20f27727de2394868c4f8dd3cbef67d78c74c1ec2c059f7c3de2313c7fc743a7aa1a343312c22d47da43b185b284d592fade13e472baa886dfdd0efbdacca9479aff3472aea8b302e177fca6be9ae7b7107165dc520ed63e2c7150a77fada4e67654d0d14b84525a9e45afff72c991995d2457edcc19acc1f4c596b7c9e888e24fd867820db911ec6518ea4580dd4a08a404d654cb5268a25b51f568d077190a8588a15409f84f79d0e69d162ff729d60b143bedf9d0e40def54c9b857e201324edc01fc421eb7f7a94b7ebcb86d0761825b82543e9abb570872f8f434bcc253c5494f7167c52c86a90224e7f35cbce17faf48b8b3ef6fb5f7d389d6528809c12087c42d1835ab9c0485f2cab268534919acdac3869d8a844c702bd0000b27a030fb85b829ce8067673ad783ef09324e734d26d233c0051596410eb54105f6f7761d7906a0d9c5bc6500b174186b8fdbbfaacd96559580d3c3871b6d109b0944a0c056d352b787a04fda32968e55995ff89442e29e79558800606abfe0cf853c3e295c28f31959cb3f24d7ed95306ecfa32bec91f2fde64d507314c1f19900c6b2bd35cec21bd46f0ec2c7def5907d2b31a1ecffac47839c37e89ff80fa7838181d990da8ee4f790968a61c1a607633d20d5b05e55781dba9d2b3cfa67fa81490a884586fa33924f82655889f90fdcfa75c1d7ec44f1c42de85a7442030d5ed6561a65c4dd361caf0e2542d88123526b0be2c4cd81da1f10fcdd88fdbf5db96fee5476ed6a0d48c8c0a443ed1b7e8cd5d06d67503ef55ca917c9c68015adae017eab12e219abcafafcbac7b4e2ceb8c5652883571753b074100ce3ddf79869afce37d1acb9ea1c0c23515ae65c787296b961ad82d9f233c5838016b15dd1fd447a2cc755a5cbc030cbb1e51c44b6617f1b510dcfe29b9f39a94d1fb2ba3e7809cfd89d9a39a6ffc8c44d1ad35bd8511138179a87dc985901e15e69468c9a76f48002723883fea222e1e7e811c2a141e1a6d8c75df43ba6eb562c412baa2fe9b3168757be18676582d38870bcd7b103254ee0dd10d863d6eda078cd2801121a62821615e1e4946b95138670a33a2de469eb92085f94c1430c04d8de99bb8355a0480dde06eb39d2c95c7a9a406bc6bf3cca71a9b5872664513ab89877a9ddd2521e20decf166a7c06ab3bb0b9dcd18f2db1c664c6d18860c2ce8690193ceb8fd84c29559c8dc2f0b4f902d695454be1835ca9fa5749446e697d4e225bf18418a3913e1ad75159599b005a0405ba901f7191a1fffb16aae05771da6727213badd89d9457aea8a85805395ac1381e491a37b39c6ef330ba79c350e0ba2b6f641cf1d18eebed3e6439a8db13f4f89c25f96e88c3e510b1d987a2834ca7c8e147dd7f0a0301ba764e07e50f2d1ad75c19ff8dde02184abbffb4b5f6e7496156d878b5e383afa02bacd2e4b06757c3b97e3e4c046e16c1286830a27db37f804bbeaf65437c6d97438c52d996669a85a01ec07575f96c347f08f36ff49875013bec0fcac410f7a4e91a75e7b79342918786d74813f60c22c0da9765601f7eb4c73ba8e648178b42fcee386ee8105f113c8f579bbb10f7d777add3ec92820095f3febad0d8d2966565920c2f0dc03c3dd97e59e810f98f58cdad027164c7da19b369919e1ca48318a6e1a5dd11388f49f5da00130121eb6f02591d68111d38b9d088f8e96f844828dd4cc69c14aac616a3e1fbd5537f11c4df722abd29f1c552ca996a739b50188adc720953546868eb7f43c7f8d118d2e4561687b1332fe0d416d522ce657c9c52f0bbc7790210bba539a7e9b0cd7d0a8b3985aeb4421aaee35d2f72be4e77a69ac0ca8a128965c441218c9f563e0ad961d3e977a806d89144b48ad2d7fdcdb7849ce48bc6f865554db33e125eaba220cf07bf07166084bc43a3a1e95a5e29d7f1b62c6fabebd1c3b8e2aba59379517620033ffa3c47c6a91a94922fa0a89917e210497630672dc36c5bb33a854182881e8ccae446e8a638e51bacd07709efc8a5c249b4aeac1580b7ea42974365816a55a107a37464a152cb3585b24c3c57bd7832f20e166be8b37d04b20b549269dc926c4cb543eb3605b79abb858c146e56621e390d2a172df780e2ea0afc149a4b2f34bdc97b2dbb908a262c1b648c28c67b8caf1cc00bf567fe1d310dd56bd470cd0c697e1759bd3b2a095699bb3eb96b48f0732e89c837124a09569efb8133875873486d0e5e302ea588ff0ca9593fc550b0dacf87d620b0ee5db317b0d916177383509a81ae41c7ab252bf4f5e15a424c7cd9a3b87eb74875c2e2ededc975ea005ae7ceed5e6b520f769211e910e6e9b9ac561991a2e14b4a395507a59a14ce96eb04b96ac8dc2efe596b7dff953826713801b19bda2b37bf6cf3f4e46e151289805aae15ce2bca48f39329e05af1c36643da758b84c3b28f5b8d216d5d342e352505dea0986c7ea67bbe82e42729cf4125787bc3042774df36f4a39686a4c6231021aa71f2f246abe9748927a098b3f210da9adab3bc058564273f1d857898c8d4a9172edd44ae3886151a7c59b4fc4d19d30693c220d4de0c042ced3a4f7d4aba1a30577b8d8adce473c9394b9abd64ca7d9bc176c61cade94ff8ddc12c241b67378b02b6b6f5c6c380817d2d7668082f4aca9c9269e601520fdbc273ebe57bd22b8de6d22c9aa5a435a03c64700fabcbe5f9585323ac739c16e84ff3e948bca323fe1f69342600d40b2c057351996a7b76cab1d01d29e13d6bc928a1b6082d3040181120966fdb61554d530d4607c9b5ef069ae692e3acf39926a231d011c7a63e17bd522edd47218a2dc90774163f7e9c3645cd5cd8da59b643c467af475b0b09bf64693d0d908c076cac854e49896dc4cf578772aa31ed81b7eea90bed55f9b34eff7c05883a0b17737c7443f1cabbe3c0831690c1b2eb926aade63646699acf16f1c9c8d76e9a9191415b91b29c83c8454884720e6cc6ef70ded497c9f22194f8c87d065043da04b4850688a7b0ca83f897f71eb512f8d055ec519d437571ad62245acd94f057ebca197bde34d6ee00b4561ee477a4fb4330226fecc883f338f3588981c93573a8bf418fb83af89772aad540192283b3ecbc061b8bc51cbb15f878f397c94f0d3261aa82e4028507d4f896c9680b31bd4e4316c8f84761b084dc640538a15a3e048237891a8abd1dc0cfba9e9d79169c2930c8ded60b02433807ff22fc5a3145d6b6d9fd8d20805dbda4998fa0fc798380ebdac298d7c9e41bd99d8251ba9dc4176112df6c7131306f3ed3c22f95e3c82c85d1b0a27817d0998359ef95373d716e7791d6b5776be115921b183ea70e623e2717e521b5c2bd2e3a373acb1df8e14f1710768789dacdbc6fac85828cb56a19213afd9e517c5ae2b1d5dba6573c28124cafa04deb5d48774024442eaca1f584d80569f929eff01f572fe3a8c15b17c57c7bbc2d5193008efa6a1ea62fb2856b85816eb4d4a1302275618c35e0e603356ae97c8493f46786b28ae2da981b5ee8f5d4966860d4b195bacac3630db0675e8ba886d8a41246aadd2f88b1ac3d7027547521d2d72ee01ce039efc49e4e22c92ea419774086790dead71d4bde989d0fff588f06bb51c175cfc42ffe7c5ecfd1d4f921ca618db9eab5c02f66feae37ebb993e2f1341870472c9002a076b66ef6f68d45c7e1f7b306df51b5c86f91f4b432de401e118374a17afb5825ce3315ceebad662fab22878c85c1aae5fc0b79993ec01b64dc838d1bbbebb10dbd98ccde96957def690c601a66c7669d5842cf92c033e5e7b6852c5f690aec1c9d4632", 0x1000}, {&(0x7f0000002140)="961b95adb73667dca2f215884b88a35112861f7228f95777706fea09b739f08c0916649e2428ba6c7f4148d8b65921bb87c0f905", 0x34}], 0x7}}, {{&(0x7f0000002300)=@can={0x1d, r2}, 0x80, &(0x7f00000024c0)=[{&(0x7f0000002380)="e374555d9edac9b0462396e85d52989bbe7b8148942aff845a9fab564cde53dbf16da2a7c0eaf6d862981ad89c60ec2f97a5dcfafd255422d973ee2b5b93bf80d5fe9612d67e70eb0308c209731d427ce3eeef3a0418c074df2d6a6adcba2f6e2d95cf8170961fce70133d27e5e35c2646a3210de0046c8b6cb1d79802fcfb9116ec7d5633f84c86a4c84bcec3d4fc824dfc68b90601f8d3bfd350e99c663d58e084cffb39eb", 0xa6}, {&(0x7f0000002440)="ba6f74967b71bdeec6d76ca60f3064082f4315859b8f6eb878f190ccc9d9dc0e43d84da4d742331a92224d2ca896c467021d3628b260e50f", 0x38}, {&(0x7f0000002480)="18b36e2388faca77", 0x8}], 0x3, &(0x7f0000002500)=[@mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x12235964}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x48}}, {{&(0x7f0000002580)=@in={0x2, 0x4e24, @private=0xa010101}, 0x80, &(0x7f0000005500)=[{&(0x7f0000002600)="2564b5fae0c73a15bad3a716c83fce6f0805db016e65df61b31887a4cc64901622b47fb51fee08ea8357eab796f133b96ef0dd9467f3dae79d64336b194d03ab36eea9c0f949a2e6eddb0bd74b4b483a13c48600897165d50938c196f9e1a772c126c447580b557ebe1491f7e9bba57cf8bbedfda120234b826cbf9e0cafa6a860500bc8c877c62d5a54df84f60821d530861b27eb3ba244b933090343de2f19324fbed02ec6abc055772954c6f560cded5d9ee0f33c1a60d9cb04d81e04b8ac5872b7e2a073b4b9f80108e81772947ee83fafc2ebd819f1a709a6395360800b25ed", 0xe2}, {&(0x7f0000002700)="dd49c9ae1c2c2f4fc773ce201cfbbeb37e4657ea8c6dd5a4ddfe39914246d73f1c754588833a178097790c1291c5556920e0761f562847687d41781d4d44d491acc70a6ac67d0a64ef3f3b35504215c212bbf8699d9edb3c5b43e3ffa7e6e4ce0ed64e3cfa030e35c99326421f4bfc5994081d67367036d7d0a5e7e6691064536563d377b1f8ac8dd143408d9ac3253487a2fb5ab812b64c0c95196a231680bc22f621e295423d0ff7b3ae6a69c3290a455ab51c9459f7456be84f409b62d556596938143ba49f23114e43575a35a22c550d4fe163572ec0516112a485609adb855207de30fefc25a5a980f726358cde23c1b122b1080ae1eb3268cfd2db16ff44b99ec1a34392d1ec983b7a9a83ae1577cb0fa01bc23b60b3cfa21135a1974d2137be497a5937af81ec4111dee71e1a72360768d6afe2ae45ff7c2a49ba77b54e30bde1286fdcb58c063c4395f510870a9fe965d8d891c410cdadc945b1e81c173219e9872f9c3ab71722d90dc1d39e0e940c785ac633ddb4acb98af8192bc493aac2f00f4d3876a63fadedc16b7fca33c616ebff55c5111de866f50c4fe3143d722552446fa8a780c5030a48b87d739609938615005b8a12a3e99d1429bc72ad2b4891286ba5428da5fb13c69bec47bc2e7370d6d19d80cb840f6a1ca28ead82d3cb63725b41ea66cd5acd918301bbfed0d5739dce0baccb4d09d003eefd03a4511b060136fe1202c062eeeaf9c652a28873d1caa786700106cb8b396ab275c0382186ca6f8830c081bd00b01695d36882118a4d53773b672d44b4c9c08891ce2b2f0871bec75443c3e7bbd90ba550cf3fd7c78861c23d36972b297638afedd1d34e059107275938dfedc9c5036467626e1ca5575dd47a39f1a9651fe501f013541c8fb27247ca56c1bf4a504d834ca409ca181956b6b6b71e5dfb3196fc2b913e30dd6909bab550591db6372212f5d035dbc3f11fac04eb63c5abf02c868b4ae5458e892336251e39e508e81083517aca927e015f4375e8748b65242bef51aa8fa62468825e6ec40b12a92d42d616507d2d847529a74e7f7f387de3114023b11fb26ab5dbdd025f7ab873942cf9425d5a6eaf5ff97b6afa5100fd51c05020bbda9cae756aca98bf455d26c0db9707820f1984def930da92d32543604af11a266f6041894a791ce5e8256aea559fab52804ee1107b9fb286ab93b996ef0be9096d017a0a1a32aed67212c6ad244e27b9e0746ac8cc67db29daf0236b5c50869f21b797ff8e0d55667b03874c3eff73271abdf23f94208ccad2eb0804c803d17c62ebf288f60c42bcf362f3f1411e07cb7ba309b5fbcecb82fe236367203f2a27e91f63f38d5a641c0e3dd36cc4ca9420565da055bc00ead1d7c4de2214d516fb3dbba2cb3ad5e9b496624dd0a4f52318c07aa57a2e947c572a001ff91056148876d072f31ed02813838981356184d62c45a6c86b1165f0a64918cc9d509fa66da6eb971b043c080ff665c7993e070d4f2e4b737f13eb951ccfaf7ac84e891ada4d738ce020e396a8eca0b7c66206efebfbe2fd1094f6456aefb92959e85943fd6d864f170f8ea273e99a7db35d41ad727c3fcc21908b34b4a1fd4c315f990e60db673fd950fd285de6dba0390130b908b0ab04eb76ca7483ab2fcc48d4cfce9f56232eb107e96350b18ec513aa18d311542973534a3342dae81dd82ca12fefdb1a813511dd5406aa6fc7e866cc87a198448e76c1c7089455c5745db86db4dde93ce60f129c8757ab9122142ca6617a20c655d5f981f08d08129193e3cdcf8761489ee4af35e3e4d575e138410c062649643ac192a023bc8cd92e7aaebcedcfbc72d32feca23684298c5201dd20a11a700024ecf65e7a247d9b5c8af3898fb19cf553b4f6de82b0a02f79dcbc9f64da9807d1e9b5876e6315e16a84c90685b70f9e6698d9ee9656c022624d56522bb79e6b1de649927989f474e6eb3d047efd880f2bb436ec284a7912c8bd28c8661c1e79604639092a8ffc82293ceb2a1b572868f2344f6493af5da9151a22e780224eed3734a950b9700fe36b24b51f93224112cf348e86f909b4ecaecafd7ac9e8cf4f84490178b97ee19b923345b75227c250dc8e05ce1d6e0f594cc09bb8e1dcf8a62f25a43329512a979927dc2f77dedc0cb8decb05c4ac816a0583d501d49b03055253df7d0165e2f8d8495881362e0f68c82d4fec043fcbc9ac9b3f79500d25191228ecec8c085bed6a7416b2379d572ca3f027cc472ebadfe82d2ee9aca772179bcde28a5ad9dba14e72ed13b3ed50697ac50786b082e69f62a0e64eddb2fdb667d2aa3fde3c9fd8efff9df5f8995d890238eb859b89805a3c80294511cd2bd382aac822814519288d900cb1e34069910640661c9fd27c9c3af09ef21a07530b6603c845aafe9f16d26e027b2b7d8fd43d4f4438f32c59a9611f82f7cc069f80def1c419bbaeabb238df29968929c3378f5e9affa11664bc3ccc3476705ad76e55c804cf43a0193f2595956b8681321cd4e02c8d977a03b85cadd1f502893206800c28ff489e959e42312404f0afb6843a63313484abd4aae03e15e022cf729edf89f557805a043f266509f4573a4a0b2925c5744438997e01961a772c5763ad019c7217594f414c73ccfafe700df010fb4b03c56e2f4ebcda907ff339fd528b2a0c662b433c5b151a105cd31d9924d0e55374e1c307c8f1d9cd1f3f0f699a8276f99665aa1924dce42f09b9f6aec37e8778884ad2227492054930718c7b483b7bbcc8d480b5b3e62103f624a92aa6baa43ff15f9c6a21016329c02d33c9e8acba86e2bdc1e7a140949f2400f45515ca3515dded6334c0737060a890b2a7a3237dc867c48f9d998df828f650cd99c3caa2a42d987fa04a2f59487d168dd46f6a507e31e6fda65e6fdd11cc6517449b013a0e932108fd8a43683fabededc0ff3ace3cdbebb2654767dd26f66807e5204f2ce45812c690b35100c21debd04fe07931ce59efc56ecf33a6dec6925509641c8bcda236c4dbb946d048cece9a74124264dbc9042a512726063211b62149661ab87af96b6a0e0608b05989ade142b337f9d24001e91ff53366ef8056dc66963d729dc5de9464f90d0a1318b56169c65e4c6902e223adc4c205f25ce45fdde4c30183437856665516860751d4d6a7e00d8c4e7ecf9c3b421000011eb9c69053ebe5a50c7d474141ddc0bee436ce1f299874fd375e337d5d4e047c128bd11c39a964e3e507970b3ad37d961a115721a429cd6bead7971eb71d9e5bc4a9931da9acba94b62413574fbf8e5f08996cb6c47af2ff274ed0b3afc32292d63416b1f88e98683b7d0116218333119d67c2df54761731b49cb3e0cfd9e6952da46c036bb45a5e5bf069c9262be177d3c91b8710e429b3ccead45979fc78f44dbf7e50f94ca5950f4daffffb08651b13348594e845a4add279c66e4d2c6eb94de0e72c4edc5dbf468439839ef6c98067adae401398dae4b51f2dd5b16cda051289c35179c1aa4f2f7112716a9e5384e596e2b1680fcf67ae86b5b27b6f27e2db6e6efb78c661012f42d7642c1bde20412e236012c9e47b0bb6976b1e260cc977dbe5919eb010fd470a81a70f629734ee9e071958b5662cb865bd4bf15bd774bbc33bfedb4869beca8641b8201b465f89f7727cc963339c52770bb497e45fb360fcee8280f990cfec8b8291261f24cb2289dcb9d57557002dca1b9ba41aab2a616a0086a9f71a44ca343cfd10282164acba78db6ebc338b455996c738033dadddeb0db7894af3bcd5d5e75f9de23c24e13b7f7d8bc7898181c1b3f767d92f5b831a19a6e4142afdc099097abf4dee8ca41e30c7a580aab6ae0cf309b744d59013bcb6125d9f657c1b79fae71c81b5a8d3acfdd594de9c73535ac2399770d0643a07e048cc218ac8d31894bbbb2cc9b18fbdb121327198a1031962cc98920b5e771d95b99e8566aa599f1b9079283a257fd844abf0eb1a13e06bb8456a1554f4194e7becdd5a38a9a40fcc126177632849916a1c0c6896e88e67c283c9211c64184f88c668af09401999b94d9257a243e92f1c171af5f7c82e1f08e0df2a9c3657f3a6166339593d08c5d5556f22b1c53cb98ba4af7762051c6253f41aae84e50d3fd721882851e9af58b0e587c763454749a1d1327b491b0aa5889623c0741259f8ec770c2330c4ff82d8d47a9beaccc246f96d1cfb46de997379d853a6e31b3011219c7c00de06a618d51a3498bca8592f44c6f786523267f0d373e39476036752fdf7223a74acc1035abd42fd8ce398c09bc88e71cf5d429987e2e82ae6179277e9fffe9031df263d9d00c36213720b255ea951786a1bc98774cdfd532d4cae422abe6c9a3a4a84f2dc23e3bd9a3a8bfb00e4fcacc1e6305ac24882895a3f97b78ce3e26d69c62a66ccee9fa7415d933cb09b8f4c2a14f6b105d8749e211a1fcec0bbc82bf33ed2afc71842765f8ad55e0dfecbca6511a2c610c7b146976c8978b867ed18362d8c5d1b730f600d0ddd80bca185bcc4a361bb0d47c9e67ac44236cc22cbc24b36a68d36afb6478b979c36b1c2ed63245e8f1a1d7def26c64c36c3cca36437401113d6718a01750a8fd6a9ed8f59b08b24603ce00e1d7246999366e6cd11ea4228074f50705620b9583ee7cf88beacbcf56e74fac196715810feb2667fddb86e8ff64c134630d7b68b35c23f8e7fa946e0eb1a46544498f2262ec238bb48b7f58595c36f914eb2fb01f9ac18be9c090e8ea4472c7494b422d5416b43cc05877595fec5157d744c3ae9fc48d9bf547b0f6ddf8c326481aa06b87b28f54e20f6f684b311417e00aec3a0f36379b1a6e33fd3a98bf5322d976b78d9514bea5803730a206fd9723e156fe0fdf494c4cf8300c5944ee1e4942cc5265d654624508ffcde3d1b09a09f6c2a64f35f4ee618c28a7956af6d15da527ee28b424c15fb46a02d2365708c9fa0eb0206c2677c1bc73c5c7366ca8b38865b18cfadca75b7aa993b7c112268d581b78de3353819495b054dce90e67330cb3312502b5fdbacef70bb774649755c813d1b57f820827b24970802702567ed14f3e79c575fbb8e5eafedf8c1347bec00414b5573892f429aea5c7668375325c5b66353f6a33af911b6cf92fe056f712097ba95dd33d23dd4e4b72e85a8fda85b63cc61e548d74f865b36aa7c8cf6c6941c11dedad147c78a12bf0c28de3ed22efa72e21d22e64ce12dc3c686aed8f0c8d1f674d93548971aeaa464e2b75bfb985407988ad77732384a2b2b603d808cd58a58620e00d6717ba4f38f42f37d3ec0864933b41a16110b015d291ec7af8c3add5441994118df615743f3342c22d3370c757abf29549551f5c9ba8ed9daec469338988b4e50327c4dfbf78a59ec4e5045fac3af5803db9491acdb05409cbbbc62cf4802ed4c3fd04d00d695c3389b22ce74df249b85b9bc35aade74fa26dcf8a4c9908ae6b86b1a821029d9cf51ed339ad5b23c419a1a85c3f1acc6d98d73de1df44a237e62e6b50624448dbf9ce0ca30966dfc5d118aac64da0342ccd8d45fe6998fa073c78095664750f1d1d18fb8ba4bd4169619febc10a7837cb92df1ce30f31efadcbff05a6fd20bf3fa428c129d1362b7a53bcf0cafe9697a602ca83682504f71492cf242a62ab75ec4be2b938e0681585c21cc68005804d0c1f42b026079adad65c1fa50dfaae91e51f547f8b2b6a58d83991c536c78b2cca66b3742180a690e83f8d8961689189b736e06b26cf19edeb09f", 0x1000}, {&(0x7f0000003700)="8a17002af85879b53959119670c6660ee85b481a1aee399eee129417e992dffd7065472263d98724d53646a0b64cf618a911a9ff32ac381074775bff9e620555ff214c41a5d3a5c07d0beb558bf520d29182923a0a58a6f16d20", 0x5a}, {&(0x7f0000003780)}, {&(0x7f0000004140)="7e6a8d021c1d1de6888e8d7ed93522b4664a29a9baedc74683f0ee5b022530825f08846dbed1d10410bf5d46d8b4e8198610bacfdff3a73184e9c135d5d0a62a02d010626b6324cd32f09689e310b3c4de6f117708870b02e335974898b24d7851a744548b5248a56ce0529f23abdf270c80e30f932226754397cf94b1a22714a63197f741be18ef268fdbd51bb406f7d15a6a28a2048b49b0954185b63123c141ea551c0043900acfff9eb5211a8422e9cd0a7e69b8dfc3e9ed7428a87cc7c3380723f8a754cb8ee08753adf74bea23f1a49269f59be6fc9f94609b350841bfd237eb83ec784070a900c6ab321bb0014d8a7a3890f618a0842d63ee312087ccae96c22ef5c6ba7639700ef53dfc9e5848132ec69e3fec91c5ac2a1238956acd93db444f86b39191d60dd7a6c71da841ac38d8d65bf16ba7b74c00f7605d77dac54dea4742be109c7ca768231c8bd6ca6e8f90ac423694bb3b2f4ea7148f748ec7203cea4c686da49183a95fc92e1994c8437815e3440d947982766c9ee0bc87ab883a1101625319933d738e840c12f91f9a2bda84545b2b52de3517a42764f0614bbb97d0d886db9922de6d78f8d84d799faf144793d2968c275cbf81891add27ba8efeaa6c19597096533522f85b72ac5758193fa00781346d0becc94ab862d6bd4bfda038b3f066ad185974cc1ecbd86eab598a9ee5310e88b0658c61753b184db5739109ac52f996c3d4b4972e7028f6b1dd1c2f64a988ce87f7881dfa0fbd8f36919f2664c1c80c4ce05f2eae13de3cda77fcbec30608310d7609cd72a762f9797ea900b1e9b2a2a28ced8030095d5787f49fe9af7ebc25a6947574fc5435fc92adca601c1c49c8ad27dc3743dbd8f1caf6d714aef1957fdfab85fab1789d4cb036e7b5481d53d6c84e2087f9439765581a04a994d7035572485f2b3614ca30fc973ea8228e1ce868182758eb425f73c3c41edcda6a11316a7720c67029f4bef43a6690383e77dec7806b60b1275e0ac92221d0e15cf0402b04d84a0d02a3444e99d758902e100f4226a1d04289bd41e6ee012c826385a733ce8b978d60b52d8aab9d1ba9b431ad3dd28010835e0822cc1e2c70cc953f6ebe6b507c5b67774cef5931e8bd4530db7b7f437340ebb450f82c2c8522035629a782e9a1ee804bc9c0c7ef3d2f6d06cedd3f91b9cfbf31dd320a75c2a136171691d3ac744ddea01f867dba5a5fe9eeca1be39014cc446863c231ecb6f2e1c873dbe6bd4704d7b61c4051a969a584fe6c26a7c82d3b5eb076220b28535c006a54ce29ac9862bf9082ad9bd81546107f6c798fd335f6a5a45bdc3fcdd2645dbd6b8f7da89be6b3639b5d102c8c806ceeba9034a5395a386c6cd4d77e7425b1c1ed4b656028e75cb0981ccb8574ea759a63cfb011eb442d9cce1fd2ee3384e20d4526e74e05c1a3d578d8b6c688081c856415acc663e407006541d23f6fb135dc8d6dbe5b9aeeaa199721768b45c93d2c93a4e164acee08becf662ff93969f1b23bc845c9fbd617a9004d9965e07689b16e821c4e076dc6eff7224a66d46f3ef5b63469a006f5e80de650c31321149bccdbeb466adbe476d551fca3ac1f03e7b775c2a4018a248ad39ff562575078bbed15543b146b5be21391933d0f6d6faeb50be22f753bd59d572af4cc0cd93c0fa20ce1bbaadda2bf1717764c84889302352500ee03d08a2ca23708a7a0eaeead256b926cb4ec76bfa42e923524da7d16ecce66152e56b1f8851da3bb8dc7927888893c6ced5a6b7fc208b32174194ceecb0dac2edc48000e5d98665d7b10c1a0ca765e4e403a482016993cf792a1f2194df0db3572378cd9c5f4a0a86277ad2914a30dd91f0dc24cb5e3b942476da2ba7d57987d2c72ae914d0c693d8789677a01f56269160b8593588fee4ec5e844fc31e53d0eb3dc6823f479a2bf650f89a0ec3289b47a2465fe0bd9057c34e0b654098b473bc2c6425bc3c4aa2e8b6a6434c333f506174175d8dacccb22e77a54cee495973ddc03eca7acd458837a3eda757c934a74e945fb077b8a34698ead10542534df8d30f8bb42de9d9431a7e47181cd51099003cf14f3906569f45d92ccb72001514fb3b8c32cdce57f3c9eca5e7c8312752f4369b5616ea829cb0ee9c7fccd56b3e8044f19fb016fa38b36ba29cb5b449c8063d2eea4693ad83430df6d7e0c59f306e926eeacbc74a96883130ee0d3de25806ecd70f94699cc1f1c87296e165f096d01076a72e4d2ae3eb732e33c1d4c07a96871a04b606ddf57710b6b75c028dcb06fd7af5b0c3045b5d7cd04ca604691047198e36888364be12f1745652d59f1e44e68ce7e952c5091c2fe1ee2e7ae6dace8b0ce012b29f3a468f55c17708b78be01ee581ed9276530025e04053d67b2e6454acadb9ece1ebe58ea7dcf2cb0fceb7adf2d09edcb4d488aa349dc2f107a4a68156e9093db404151abcc28f790f50a1a2759e89285c7c045d64eb9cc753c66ba0f9bd6bd6f238faa0d7814876642eb6a18070d8c637535a54bf86a08ae125dc5a70e301378bc2814c9bd5ff05b33a050eeff90dc72e1781e1f8d93ea9ec6a8f25fe593da4fa9ce43012afaaf39f453d720c5f616e95559e6ae00b2f852cbf6c86d872c7a97f323580320ae49ca7ae3f1687ffde4c6ca5b6732ac36eb1f761cebb7f8c5f44827d857c9e652ba3b7c033bfe72a95d28deae59dd4059083b3310f210b483614f6f98fe64b89c3a7f2b991e97411c0d94677b2ed06f5d0cd2f58fca8781b1adc8762b18465a35ea7a7566c3ad6dbe54408e84cee18a6901b564760fe0dd38e3f348822941f85267774c3c10ab7132553e0accabb6df8f5cec960d4b900034b55da8af3b99a5324f63b21969a6b647aa15f39ecd8483f5a7d2da2c30661f8397c0cd03e3b59f1e9ee83c425581e9edcea8aa640c854a8bb1f9ec366f65e18ff545673f0bead6ad953bee7a61b58cc1785a8c4798a27ead0c246838bd8d82349f3fb56442aeabce09ac3bd045e168899c1e2329dd82cf7bf2e54adeb6df0de938bcfafb3bd4b1b890df255f43d964b43a9db1abec65aaba30e0bcebd0acf8b8432947fb36824c57b912a935185c8399550f8e26cae1a1d6e84228930abfe2a189edebd8879a453086e983646679e28de1f37e4df81d10ba7c7c7ee7fea616f5f4a022be9c1447b8c2f39ab3dfde5e736433840b814724df01d52334eddfac9c5b49e372c107cd501bd5aa98fca4afd95b1a8eab0d3f9fe29a014af76333825416c9d44c884b54afa6a4be550b5d6f0d4fe50958a72c92cf2e1933a458c4127dc90ee9fb0fd8ae411ca704075ec94e7315bd06ac1659a4a223d1a2a989fc8c49319ce9365511b705134f10d350c59a0e9714755baf3b19b47d1b09017754127c01584638f39be2c0d726859bccb56fea5c1935181ac8689b57568818bf286c3f04e36bf5ad165f59f42534940b95a20fa298832eaa373544aa840871a29f89fd314932e62aea8feaa063261afc8abdc7685449520a33d0314ffc066f1c5e3fd6d609ccd517df6fcbf6f87fbae67150731ed34f7b9bdd6e50f3f6038cc49362c0c2d4cb837039e35e5f2c6f42cc2ffcba30c2c511423165da23106474207d555da1d245a6f167758a5d10670da5d1f2d695a54da32d12b456650b1ace35e9955201976732999f7ffa467b564450c9f668bcd3da95b1ef680a2eb3b54f975efd03d0bd6c4146bb8cf406d5eb0b503f44375f253ab7bbd8075ed8ed7b403a704831cf651859104f59b89cb95e5f826141e024acbd52bd3e2793bac35df501ad45652fc3594002f076fdd746d0e9cd4beae599902b04972bc36c7e5d5df2218dca414e57fcc6dd55063ef1e5554e530b29251b55731068fa6682d0eb42dcf90a74f583624f8427bcec6011755c49488013797488b5b83bc299a0abb3e44f66de29939d66ce86fee73427629c2b1ce9472db8d050fa9565110fcca188c07901aed185a71c9b4cab8861ebc4a775caee020b37511f1f3ec40222f106dbf866b4bbc7e677b763eab775cb7749ffbefaac945cfa8686a3e87abe7f80cf69b04323fc6552b19f469b9d7f4083dfd84bb1f44737591e5e687a81e69e26f550cd4f3fd2945b003471c3020f88ad039642879ea97e9716d8bdbf86a31f88d1cf5eb62494de0aef0ea7cd2b6c80433abecabbbf50205a23366f6f9aa79299cf79f059e65a951c8183c680164e31d6bc8e30aeb7bc9c6255c4b3ac01f6098359fae6cca265872a7e628d66ac4aba3da956860f9269f4d00fb97b6a4c8f5743b6998d1b72b4c0185ce07e62ce9b1c8dc5e048efe508edcc2c209578be332cdeac6b0ecebc72455e0102372580f5fbb030c7a2bd04be7539daf06fa67f7cb9b1e8ca1692292dd9e2411df5371d33ce19ea8595ded8042fe6bac633fec725c5be6d4d8c838d0e541ece520913225e1cdead3eac7c7320b6961476b189cd035a6394444d6b2e4aa4d92b64055ae1f670fc375d5e722031a929014ed79fd5b666edb81e64787033fc7f2f7e0b575f069d65032713ae801afd9bdec9a459bd9377aef6ef0e6219bd54f1189077b62a269b986eba8440992b91f441bc3a82591dad0ac337cf6b1e00ed6cc76d1ec4fc5bafa63db85a692ee346acd73bb44ba4d3de7500064b88bdd7cf239368fa7e5ac28d2e8a87835b675d9a59a888e4158e91089aea22d26a7daf4a3c2428e772cdc4721dc401b961dae59861b47413a01fe677cc9b73a49cc779b4f99b297596626cdcca2744145e133da64e6bf6d531f9b6d37acdced5fcbc0198cc4c884c32e6fb4d285b996975cabbc7246fc9e86e24322bbd676db8ad2a44a55eb3b0c35c112fee1e0a0a0f3b6e3a82f5f94ba2c95d04e877d72fc4122ee81820e164388f14a12db0ed7718110ccc2e8205d2678515de876ccfb36b37aae56dae3a246541d9fd17578642a002a951167250810af99cc94d91e93b0ac4132e869228b27f3c92e2cab0a106bf6d159d980444852da5671be380769b6f7efe0dee35bb7f08dfb724161833cbc20bd8dd32f25903d79425ed5b5ca87ae169b5fc791bdc6f09fb64c068c4291bd18a261a12a001d7d5e869d748cb18abce5bc7611016c341dbbfebda24212222823606bb4ac3b21693c126baaf9363b4608613d355032ee959a4cc1544995a15beba05aacdc4ede1010a6612daf993696725e81019c827a6ef686320e35b850a2abd6ca07e804f225642d8cae0d6e9209c3868481dc312ef82bffd2b1dd2fd6d0d9c175dced2e6156300b5da5f9bfd7afaa62061ebfdd40fe68ae432bd34aa7b30df57607c8225ebae33443360ab9bd4aecf4d4e2b42d656dbebf00dc584ef47ae2bf6bc5888e0005155f3f8d083ce057e2fa1111cc88350dc8cab0481e6a88949ef99fba8ccff5fd8c5732fd30d08412edbc82dcf4a83d1ba02bac086ca172dbb7b9546f1bad817f1631811ca2cfbf986f08a1486d90e1f9bd143187d85847215fd3e0e0ee752778c8092c94f25276eab3f0ed5dede2bad95ee83b4e93a1ae70fc7e4ad2dfe8b13ffe836d4b02fbc2c7f3c6a4fe6f1edd454cecfd82f9efb4ccb410a8071cd3d3b460e4fdbec7ecf29a6f136209a1aaac4b8b9afb595081bfd7faf760f9689bae8207b76d1a5eaa1d26aca9eaf2a1a5b334749fc0202ba3467efc461e7855ac7bc7e0bbc0ff024a263295a23fdbf2f32e948bf6233526ab5aa101c0acf43248d782038f0d8849db4b35add130fdd3aec198f66f621a8befae6178bfccf9422", 0x1000}, {&(0x7f0000005240)="fba27d0e52882c218a430a3b8b51e37965289356140f381d640dab810bc250713be1e2c44f5019454156bca638f48c37ece8cd68328175ba2427671bcccaf319555188d0cea098e5e62336222efd79922658217676a779bb64928c41b7b44de88b01a4b91abfad477c16669071b1ea07adaaec9d1b3bc871066d0d417d6ae28a0fb2fa43283f20ca7478b6ebc41fc542b1", 0x91}, {&(0x7f0000005300)="7b61a928be6f77e60cb518a1215ff7277474cb94d3d17d41badd56fd07649300d6239c28ba5fc7e6a1b202e9ac9c998dfb3899247d4c916e828b5e0ffac62c09935c9963e0cc436840afca9ed871fcc3c142ea262c809cf8be5c5d61ec502b0d868c75f8e2f0de98584648ede848c574bd181e3a9ed5be56b595bc27d30b41dbd6204b25380a015988fbb14d3f348bafef09f84d54758cee2165fc3df8979a15474311f10d28b9ee1e72439425b08c32c9144c097ef62517171481bab9", 0xbd}, {&(0x7f0000005400)="e355fad2069409f8f222510d57d8d5f3d203cdd1af4ab03e2002e5cf86f976e23d0a37e0fd4f396d0a65d4a9b539cd6680276f16bc1cab72d113e57b684404e03e37ddbb8a0ef7d0afb04bc440123b8008e9a4ed4d5f319108c509b93733e7d4a562591c35b4e326f375ae442724a90ed1252bd3bfc28a8382b3ef7b5806e379aee8ba28c08cfe826cd799e2ed6659eab53a1f1908a1bc9c83259bc12361cc211d6a5909f9ade2e4025a957df89a3645f7ec44d9358d9a008e69ce1f444a4a92b8d234897bd69f8b21b99523d343e538ea3e2274193dafb77fabf5c191bf27b44477406b3b024583cc42da2d8be1ecef67", 0xf1}], 0x8, &(0x7f00000055c0)=[@mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x6}}], 0x48}}], 0x3, 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x9f, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x10, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x3, 0x0, 0x100000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x4000000) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x38, 0x2, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFCTH_TUPLE={0x20, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @NFCTH_TUPLE={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400000008000000080000000c000000", @ANYRES32, @ANYBLOB="fffff0ff000000000500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b70400000000000085000000c300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r8}, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r9 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r10 = dup(r9) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) 37m1.515385312s ago: executing program 34 (id=323): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01080000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d45520000000800024000000001340003006400000074"], 0x104}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f00000001c0), 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/bcdUSB\x00', 0x1, 0x0) write(r2, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) write(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x1, 0x0) write(r4, &(0x7f0000000840)='8\n', 0x2) symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000a40)='dummy_', 0x6) nanosleep(0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x44b, 0x70bd25, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x31}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000005}, 0x48040) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000080)={'wpan4\x00'}) 36m46.193529337s ago: executing program 35 (id=367): prlimit64(0x0, 0x3, &(0x7f0000000140)={0x2, 0x3}, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f0000019380)={'#! ', './file0', [{0x20, '\x15\xe6\x8e\\\xfe\x15^\xca\xbb\x88B\xeb\x90FAv\xdc\xbc\x1eiU\b\xc2D\xdb\xca\x9d\xb4oL\xe92\x7f+\f\x0e\xfd\xceTC\x1f;u\x84E\x04\xe3B19xO\xc2\xd4.Mp\xf4\x80{e\x87\xc4V\xe0\x99\x99\x8b\x93I\x8a\xb3\xce*\x9b\xd0X\aA0S\x02k\xdb\x12\v\x9c\x10nY\x85\x92\xf6\x93\xc4%\x0f\x80.\x8d\x9b\x15\x8e\xf4LWr\x14\x9eKh\x97L\xb4\x03\xe9=\x8e\xff\xf0\xb1al\xb6\xc9\xa1/L\x8c7\xa0\x8eD\x1f,\x93`\xc0h\xacjGx\xb8\x9cv\x99bA\xc5]\b\xf8\xa5\x9b\x1c\xeeKB\xdd\xe8\xbboT\x90\x84k\xae\xb5\xfa\xd9\x0f\xd4T<\x0f\xdb\xec\x05HcN\xae;\x87\x00\x00\x00\x00\b\x92\xa7\xdf\x1dS\x00\x8b\x81\xf4\x84X*\xa6e\x922|FO\v\xa6\x17jG\xe3]'}]}, 0xe4) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000019100)={[&(0x7f0000000200)=' ']}) syz_emit_vhci(&(0x7f0000001940)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_SCAN_PARAM={{0x2}, 0x3}}}, 0x7) 36m24.288096922s ago: executing program 36 (id=437): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r0, 0x0, 0x0) write(r0, &(0x7f0000000180)="3300000008000102030405060101", 0xe) 36m5.203282912s ago: executing program 37 (id=506): r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x408, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x200, 0x248, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x468) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x1) syz_emit_ethernet(0x7a, &(0x7f0000000240)={@random="a5050f0000b5", @random="0000009000", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @empty, {[@rr={0x7, 0x3}, @lsrr={0x83, 0x3, 0x1}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1}, {@empty}, {@remote}, {}, {@dev}]}]}}}}}}}, 0x0) linkat(r1, &(0x7f00000000c0)='./gadget/dummy_udc\x00', r1, &(0x7f0000000100)='./gadget/dummy_udc\x00', 0x1000) write(r0, &(0x7f0000000380)="08000000091703000101d4d63b1b04000001ff0000002a3d6fcee7c39b42058102400000cee8ea1200000000005fc841900037b6c507fcba1d6fb6afd1d9cee6162e79305c7d15c3", 0x48) set_mempolicy(0x3, &(0x7f0000000040)=0xe3, 0x8) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$SNDCTL_SYNTH_INFO(r2, 0xc08c5102, &(0x7f0000000100)={"ec47b1b0b95a9b05dd3bbbbd19b3fd4b4ac1f6472818378bbff59d569fbe", 0xf745, 0x0, 0x0, 0xffff8001, 0x1, 0x6b7, 0x5, 0x0, [0x3, 0x6, 0x2, 0x10, 0x6, 0x6, 0x0, 0x2, 0x3, 0x5, 0x3, 0xff, 0x4, 0xffffffff, 0xffff, 0x3ff, 0x2, 0xd, 0x5]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x80045505, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x47, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, 0x0, 0x8000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r3) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d80)={&(0x7f0000000bc0)={0x1b4, r4, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x45}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x34f13e6f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xa0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7d630c15}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x100, @loopback, 0x1ff}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ipvlan1\x00'}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ip6gre0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1fd8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x41}, 0x20000004) socket$kcm(0x10, 0x2, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0fffff", 0x10, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x27}}, @mcast2, {[], @ni={0x8b, 0x0, 0x0, 0x80, 0xaf07, 0x10001}}}}}}, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x45, 0x0, &(0x7f0000000b80)) 36m0.46395357s ago: executing program 38 (id=518): mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000280)=0x0) sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffff8}, {0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0xb8, 0x11, 0x148, 0xb8, 0x0, 0x188, 0x2a8, 0x2a8, 0x188, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x10, {0x8}}}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'wg2\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x0, 0x4, 0x1, 0x1], 0x0, 0x3}, {0xffffffffffffffff, [0x4, 0x0, 0x0, 0x3, 0x3, 0x4], 0x2, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) 35m39.578349303s ago: executing program 39 (id=592): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) fcntl$setlease(r0, 0x400, 0x1) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x5e, 0x0, &(0x7f0000000100)="b461802305624431ed33730100010446b20aed0200000000010000d5fe00c6a9310b27e0cfa1bd1b9681010191b1621ede21d1a35bee936310009c5b58259a71b07ec6ba7cb67b84a895bd000000003632b69f0eb2062818f298ed60abbc", 0x0, 0xfffff7fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffc}, 0x50) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x6f5e, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0x85) r2 = socket$rxrpc(0x21, 0x2, 0xa) unshare(0x24040400) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, 0x0, &(0x7f0000000440)) fcntl$setstatus(r2, 0x4, 0x400) syz_usb_connect(0x5, 0xffffffffffffffbf, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c) r5 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r5, 0x0) 35m27.985231373s ago: executing program 40 (id=627): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, 0x0, r1, 0x1c, 0x0, 0x2}) 35m23.023076539s ago: executing program 41 (id=638): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000000), &(0x7f0000000080)=@tcp, 0x2}, 0x20) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000780)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xa2377e345cc958a}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r1, @ANYBLOB="d20229bd7000fddbdf250a000000080001007063690011000200303030303a30303a31302e300000000008000300030000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800080001007063690011000200303030303a30303a31302e300000000008000300010000000e0001006e657464657673696d0200000f0002006e657464657673696d30000008005c761054030003000000080001007063690011000200303030303a30303a31302e300000000008000300010000000000"], 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x7a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa008100200086dd60e400ff00403a00fe880000000000000000000000000001fe8000000000000000000000000000aa02009078000000006000000000021100fc02000000000000000000000000000000000000000000000000ffffac14140017c11d58674e624c1a146558aab57fff79c5c33ee8add998073d9b789c33601ff509db5be1c2d07678597691ef0053392d4ca83c89986fd91bc324552dc7b379f69fb23e997d1c0bd548b78b6ec446485c4efb86cc88f0f4c3b71bd5ed69b7e17e454d8b2219873d79dc5a1c"], 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r5, 0x4068aea3, &(0x7f0000000200)={0x8f, 0x0, 0x4}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8937, &(0x7f0000000040)={'bond0\x00', @random="000000008020"}) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x800, 0x7}, {0x0, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}}, 0xe4) r8 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000280)={{0x1, 0x1, 0x18, r9, {0xd13}}, './file0\x00'}) bind$tipc(r10, &(0x7f0000000340)=@name={0x1e, 0x2, 0x3, {{0x0, 0x1}, 0x2}}, 0x10) sendmsg$nl_xfrm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a00"], 0xb8}}, 0x20040014) r11 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_TSC_KHZ_cpu(r11, 0xaea3) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_TSOFF={0x8}]}]}, 0x80}}, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206010800000000000000000100000814000780080012400000000505001500090000000500010006000000050005000a00000005000400000000000900020073797a300000000010000300686173683a69702c6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0xc0d1}, 0x8800) 35m17.308844562s ago: executing program 42 (id=649): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) r1 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x22581) ioctl$CEC_RECEIVE(r1, 0xc0386106, &(0x7f0000000000)={0x0, 0xb, 0x80006, 0x200006, 0x8, 0x1, "260000000000000754439400", 0xa, 0x0, 0x5, 0x2, 0x1, 0xfd, 0x9d}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) 33m37.057666053s ago: executing program 43 (id=1000): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='100000', 0x6) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) memfd_create(0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) syslog(0x3, &(0x7f0000000280)=""/7, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) socket(0xb, 0x4, 0x3) ptrace$poke(0x4, r1, &(0x7f00000011c0), 0xfffffffffffffffe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = userfaultfd(0x80001) r3 = socket(0xa, 0x801, 0x0) getsockopt(r3, 0x29, 0x40, 0x0, &(0x7f0000001ffc)) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b000000000000000000000000000400001f4b22", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 33m19.431722335s ago: executing program 44 (id=1067): connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000000)={0xfffffffffffffc6f, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000002c0)='pvfs2\x00', 0x101c802, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000d40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000a80)={0x44, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 31m2.9478657s ago: executing program 9 (id=1691): socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'veth1_virt_wifi\x00', &(0x7f0000000380)=@ethtool_perm_addr={0x4b, 0x20, "5c83276f6c020086200db0e102ea1d0d85d4bc6900000003000000fbffff325b"}}) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000080)=@arm64) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x28, 0x3f, 0x1, 0x70bd29, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x10}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 31m1.992049306s ago: executing program 9 (id=1695): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r1, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000c1}, 0x20040000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001900)={'vxcan0\x00', 0x0}) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) setsockopt$packet_rx_ring(r6, 0x107, 0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x70bd26, 0x25dfdbfd, {0x2, 0x10, 0x10, 0x0, 0x9, 0x0, 0x0, 0x6, 0x10007}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, @FRA_DST={0x8, 0x1, @empty}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) io_uring_register$IORING_REGISTER_SEND_MSG_RING(r6, 0x1f, &(0x7f0000000280)={0x28, 0x2, 0x0, r6, &(0x7f00000003c0)="47971d02d3cc48153040886bdd065925376f684b95802bd1f10ede0f", 0x1, 0x8, 0x0, 0x0, {0x0, 0x0, r7, 0x3}}, 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="500000001000100026bd70dd2d5e7fccc4fbc770c11029000000000000000000", @ANYRES32=r5, @ANYBLOB="63000000000000002000128008000100736974001400028006000d000500000008000100", @ANYRES32=r9, @ANYBLOB="08000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socket$inet6(0xa, 0x80002, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x82b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x40000) write$tcp_mem(r6, &(0x7f00000056c0)={0x6b8b, 0x20, 0x7, 0x20, 0xfffffffffffffffa}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x1}, 0x50) 31m0.036133873s ago: executing program 9 (id=1703): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r5 = fsopen(&(0x7f00000004c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0xc) symlinkat(&(0x7f0000000000)='.\x00', r6, &(0x7f0000000140)='./file0\x00') 30m59.122543979s ago: executing program 9 (id=1706): socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000080)=@arm64) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x28, 0x3f, 0x1, 0x70bd29, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x10}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 30m59.078574578s ago: executing program 9 (id=1707): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='100000', 0x6) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) memfd_create(0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) syslog(0x3, &(0x7f0000000280)=""/7, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) socket(0xb, 0x4, 0x3) ptrace$poke(0x4, r1, &(0x7f00000011c0), 0xfffffffffffffffe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = userfaultfd(0x80001) r3 = socket(0xa, 0x801, 0x0) getsockopt(r3, 0x29, 0x40, 0x0, &(0x7f0000001ffc)) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="042f01"], 0x4) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b000000000000000000000000000400001f4b22", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) 30m56.195900475s ago: executing program 9 (id=1715): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x58, 0x30, 0xb, 0x0, 0x0, {}, [{0x44, 0x1, [@m_skbedit={0x40, 0x1, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}]}, {0x4}, {0xc, 0xa, {0xe4ffffff}}, {0xc, 0x9, {0xf5}}}}]}]}, 0x58}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0xc0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0, 0xccd21cca, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h'], 0x68}, 0x9}, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x5c, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000202505a1a440000000010109024a000101000000090400401702020000052406000005240000000d240f010000000006000000200624070407000905810340000000000905820210000000000905030240"], 0x0) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xd}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) 30m41.046373188s ago: executing program 45 (id=1715): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x58, 0x30, 0xb, 0x0, 0x0, {}, [{0x44, 0x1, [@m_skbedit={0x40, 0x1, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}]}, {0x4}, {0xc, 0xa, {0xe4ffffff}}, {0xc, 0x9, {0xf5}}}}]}]}, 0x58}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0xc0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0, 0xccd21cca, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h'], 0x68}, 0x9}, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x5c, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000202505a1a440000000010109024a000101000000090400401702020000052406000005240000000d240f010000000006000000200624070407000905810340000000000905820210000000000905030240"], 0x0) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xd}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) 25m25.071564859s ago: executing program 1 (id=2974): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="01000000420000000600000008"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) 25m22.494938312s ago: executing program 1 (id=2984): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r5 = fsopen(&(0x7f00000004c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0xc) symlinkat(&(0x7f0000000000)='.\x00', r6, &(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) readlinkat(r6, &(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f0000000440)=""/171, 0xab) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0) 25m20.385007449s ago: executing program 1 (id=2990): openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0xc0400, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) socket$inet_tcp(0x2, 0x1, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x88}, 0x80) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_add_dev(r2, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2e, 0x1fdd1375bdd2e52f, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000040)=@new_dev={0x1, 0x390, 0x0, 0x0, 0x1000, 0xffffffff, r4, 0x0, 0x1a0}}}, &(0x7f0000000140)=0x0) syz_ublk_setup_queues(r6, r7, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x10, 0x1, 0x3c3, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x14a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x2, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x56f, 0x200, 0x1}}], 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) r8 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x2d, @remote, 0x6}]}, &(0x7f00000007c0)=0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) 25m19.824152422s ago: executing program 1 (id=2993): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a60000000060a0b0400000000000000000200ffff0900010073797a30000000000900020073797a320000000034000480300001800b00010074617267657400002000028008000100534554000c00030000000600000004920800024000000001"], 0xfea1}, 0x1, 0x0, 0x0, 0x4000004}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x82) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, &(0x7f0000000100)="3081bb06092a864886f70d010702a081ad3081aa020101311b300a06082a811ccf55018311300d06096086480165030402010500300b06092a864886f70d010701317b303a0201013014300f310d300b0603550403130454657374020101300a06082a811ccf55018311300d06092a864886f70d0101010500040401020304303d0201013014300f310d300b0603550403130454657374020102300d06096086480165030402010500300d06092a864886f70d0101010500040401020304", 0xbe, r1) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x200, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="02000000040000000100000080bf000000050000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r2, &(0x7f00000040c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x9c2b, 0x10000, 0x0, 0x40055}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x4008810}, 0x40010) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="2100000000000000030000008000100000040000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="75ddddf2b180f1a024cc67aa3e3a3c92e8be32853e7c028fbd47f06f718b2b3ad1306d563f6469934ca69458bf847968908b3b2e19339031b619db11374e15fe876d726fbd9d309bb73c482c164dfb0999e40bce49bfb4be09fac4621922690ab59cfad91209585d596bad01bc0ab7a0ed2e9f6997f22e3501a7de4ac9e003d572026151423ad524bd3b55874356cd0da4f5ad31ceab4453151a2550f897964e4c8a78a9e729daced13cdd978d6759083be3a6e0ec72", @ANYBLOB="00000000000000020000000000000000000000020000000000000000"], 0x50) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0), 0x8) syz_clone(0x4b40100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x4) syz_open_procfs(0x0, 0x0) prlimit64(r3, 0x0, &(0x7f0000000540)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 25m19.411598074s ago: executing program 1 (id=2994): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r2) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'lo\x00', 0x1000}) socket$packet(0x11, 0x3, 0x300) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x4) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) sched_getparam(r3, &(0x7f0000000140)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000000)={0x2c, r6, 0x1, 0x70bd26, 0x25dfdbfc, {0x25}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x4) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r7, &(0x7f0000000240)="653a6d795f726561645f6d7372314a5f2e1ddded220c18", 0x17) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYRES16=r2, @ANYRES16=r2]) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x0, 0x0, 0x28, 0x100, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010101, @private=0xa010101, {[@lsrr={0x83, 0x7, 0x4, [@private=0xa010102]}]}}, {0x0, 0x4000, 0xc, 0x0, @opaque="12345678"}}}}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, 0x0, 0x0, 0x200540c0, &(0x7f00000001c0)={0x11, 0x8, 0x0, 0x1, 0xda, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 25m19.123695433s ago: executing program 1 (id=2996): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x40000) clock_settime(0x1, 0x0) fanotify_init(0x40, 0x0) setns(0xc9, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000140)=0x80000001, 0x4) sendto(r0, 0x0, 0x0, 0x13b1b5f7f8034f52, &(0x7f0000000040)=@phonet={0x23, 0x1, 0x5, 0x6}, 0x80) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0xa8500, 0x97) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x40}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newtaction={0x14, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}, 0x1, 0x0, 0x0, 0xa8c0}, 0x2000a004) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r7, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 25m18.120606673s ago: executing program 46 (id=2996): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x40000) clock_settime(0x1, 0x0) fanotify_init(0x40, 0x0) setns(0xc9, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000140)=0x80000001, 0x4) sendto(r0, 0x0, 0x0, 0x13b1b5f7f8034f52, &(0x7f0000000040)=@phonet={0x23, 0x1, 0x5, 0x6}, 0x80) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0xa8500, 0x97) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x40}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newtaction={0x14, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}, 0x1, 0x0, 0x0, 0xa8c0}, 0x2000a004) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r7, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 12m49.504470681s ago: executing program 2 (id=5243): socket$inet(0x2, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) setxattr$system_posix_acl(0x0, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f00000000c0)={{}, {0x1, 0x4}, [], {0x4, 0x3}, [], {0x10, 0x1}, {0x20, 0x6}}, 0x24, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x30}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 12m48.428129947s ago: executing program 2 (id=5246): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_udp(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) pipe2(&(0x7f0000000080), 0x800) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000009968810524711004f320102030109021b0001000000000904000001ff01320009050d0353"], 0x0) userfaultfd(0x1) socket$packet(0x11, 0x2, 0x300) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 12m44.97937738s ago: executing program 2 (id=5252): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100), &(0x7f0000000000), 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000080)={r0}) bind$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000540)=""/165, 0xa5}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r2, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xffffffff]}, 0x0, 0x8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f0000000000)=0xd0, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff00000007058102400000070502024000000705830308"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x2, 0x0) unshare(0x44040000) ioctl$TCSETS2(r5, 0x402c542b, 0x0) pipe(&(0x7f00000007c0)) write$RDMA_USER_CM_CMD_JOIN_MCAST(r5, &(0x7f0000000340)={0x16, 0x98, 0xfa00, {0x0, 0x4, 0xffffffffffffffff, 0x10, 0x1, @in={0x2, 0x4e24, @local}}}, 0xa0) 12m41.362775336s ago: executing program 2 (id=5260): openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0xc0400, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x88}, 0x80) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_add_dev(r2, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2e, 0x1fdd1375bdd2e52f, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000040)=@new_dev={0x1, 0x390, 0x0, 0x0, 0x1000, 0xffffffff, r4, 0x0, 0x1a0}}}, &(0x7f0000000140)=0x0) syz_ublk_setup_queues(r6, r7, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x10, 0x1, 0x3c3, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x14a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x2, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x56f, 0x200, 0x1}}], 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) r8 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x2d, @remote, 0x6}]}, &(0x7f00000007c0)=0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) 12m39.208168874s ago: executing program 2 (id=5263): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@newtfilter={0x2c, 0x2c, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0xd}, {0x0, 0xffff}, {0x300, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x7}}]}, 0x2c}}, 0x0) write$tun(r0, &(0x7f0000000400)=ANY=[], 0x3a) socket$packet(0x11, 0x3, 0x300) syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/memory/memory9/state\x00', 0x1, 0x0) syz_open_dev$dvb_frontend(0x0, 0x0, 0x882) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) r4 = socket$netlink(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r5 = memfd_create(&(0x7f0000000480)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xcf\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4', 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, 0x0, 0x44860) ftruncate(r5, 0x8800000) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) accept$alg(r7, 0x0, 0x0) 12m37.844826395s ago: executing program 2 (id=5270): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e20, @private=0xa010100}, 0x10) listen(r0, 0x5) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x55fdb4595c3d8036) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @remote, 0x9}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x9584, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, 0x0) 12m22.390403637s ago: executing program 47 (id=5270): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e20, @private=0xa010100}, 0x10) listen(r0, 0x5) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x55fdb4595c3d8036) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @remote, 0x9}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x9584, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, 0x0) 12m3.720731511s ago: executing program 5 (id=5333): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0xffffffffffffffff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x2e, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) socket(0x2, 0x2, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES32=0x0, @ANYBLOB="cfa983afcbf229e0070000000000000000000000006f2bc908000000", @ANYRES8, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b000000000000000008000000000400000000b7", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x50) r5 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r5, 0xda90) io_setup(0x8, &(0x7f0000000600)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000640)={[0x4, 0x1000013, 0x5, 0x800, 0xfffffffffffffffe, 0x8000, 0x101, 0xfffffffffffffffe, 0x2, 0xfffffffffffffffe, 0x1, 0x0, 0xffff, 0x6, 0x1, 0x7], 0x2000, 0x208012}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x8000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x3) 12m2.418980694s ago: executing program 5 (id=5336): socket$inet_mptcp(0x2, 0x1, 0x106) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaa0c0800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b142bc00090ef83804919e1d9fb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d0000b24bdfd9f900000000000000000000bcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1f39cb307b3472eb9cdb042d2643fcb7717bb1e129c0d29b8fc3e4cc2b0b2c5a57df67d544af6"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2006, 0x0, 0x0, 0x0, 0x60}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = syz_open_dev$media(&(0x7f00000000c0), 0xc, 0x80c2) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$MEDIA_REQUEST_IOC_QUEUE(r3, 0x7c80, 0x0) r4 = socket(0x10, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000001080), &(0x7f0000001180)=0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$kcm(0x29, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff730d00000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409eaa988dbc2fee9d313d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb61799257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad0e0e2b45d14ee446b840edaa1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c50ce6a8e9f65de13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae20bf279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522f7dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87915ed063f608dddb03a95b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0fd9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627820d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000c3d51d9a161446b4373e06a9e07f8a000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b4047979379dc15c9056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221f05e6ca8c705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f12fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612aa25d61ce4e2c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008435f39381c2a77c001caae53db7316fa6d48d032ab6831ebb813c85855c7a9ad8140a4b29422fc20d4e75c848984a2e217ec9c2833b8fa9106ee1be2c05103a36fc1126f1aa5284ba7179843b08ecadc199b9038cf6b9ee4e1f321a6a32e03bd987ddfada1f69756651b73a7ed0f7e467081193b2844869"], &(0x7f0000000140)='GPL\x00'}, 0x48) r8 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r8, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={r8, r7}) setsockopt$sock_int(r8, 0x1, 0x5, &(0x7f0000000180)=0x3, 0x4) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000000100)={'wlan0\x00', @multicast}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000080), 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000540)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000440)="871cf11953997865bfa1eea71a22c9f0f06a64802d16c60f4fed75dd79d760ceadddfaeee998e5cc1c93207b223a65af5dbfadd95169d259", 0x38, r6}, 0x68) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r9 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, 0x0) syz_ublk_add_dev(r9, r10, r11, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) select(0x40, &(0x7f0000000400)={0x9, 0x3, 0x80000000, 0x0, 0x7, 0x201}, 0x0, 0x0, 0x0) setitimer(0x2, &(0x7f0000000380)={{0x0, 0x2710}, {0x77359400}}, &(0x7f00000003c0)) 11m59.560892173s ago: executing program 5 (id=5342): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r1, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000c1}, 0x20040000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001900)={'vxcan0\x00'}) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) setsockopt$packet_rx_ring(r5, 0x107, 0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x70bd26, 0x25dfdbfd, {0x2, 0x10, 0x10, 0x0, 0x9, 0x0, 0x0, 0x6, 0x10007}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, @FRA_DST={0x8, 0x1, @empty}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) io_uring_register$IORING_REGISTER_SEND_MSG_RING(r5, 0x1f, &(0x7f0000000280)={0x28, 0x2, 0x0, r5, &(0x7f00000003c0)="47971d02d3cc48153040886bdd065925376f684b95802bd1f10ede0f", 0x1, 0x8, 0x0, 0x0, {0x0, 0x0, r6, 0x3}}, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="500000001000100026bd70dd2d5e7fccc4fbc770c11029000000000000000000", @ANYBLOB="63000000000000002000128008000100736974001400028006000d000500000008000100", @ANYRES32=r8, @ANYBLOB="08000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socket$inet6(0xa, 0x80002, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x82b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x40000) write$tcp_mem(r5, &(0x7f00000056c0)={0x6b8b, 0x20, 0x7, 0x20, 0xfffffffffffffffa}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x1}, 0x50) 11m58.498381978s ago: executing program 5 (id=5345): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}}}}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x1}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r2, &(0x7f0000001180)={0x2020}, 0x2020) mount$nfs(&(0x7f0000000340)=')./.,\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x80000, 0x0) 11m53.837156548s ago: executing program 5 (id=5353): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f00000000c0)={{}, {0x1, 0x4}, [], {0x4, 0x3}, [], {0x10, 0x1}, {0x20, 0x6}}, 0x24, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000880)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 11m51.460964267s ago: executing program 5 (id=5356): r0 = socket$packet(0x11, 0x2, 0x300) socket$can_bcm(0x1d, 0x2, 0x2) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0, @ANYBLOB="16c461786392b66fdbcb3d936fd894979c8386caca14b11c58a74eab4ac1614d18c9e1bb53e10a24f978e62bab75324bd96d2058d7292954757237fdad5b2a06326453b76e2e68240a4a695051912cae6380096d4eeeae"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4bc}, 0x94) (async) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x840, 0x1fb) (async) move_pages(0x0, 0x20000070, &(0x7f0000000080), 0x0, &(0x7f0000000200)=[0x0, 0x0], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) syz_emit_ethernet(0xa2, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd603000bb006c2b00fc020000000000000000000000000000fe8000000000000000000000000000aa0000030000000000000000000064907802000000000000020000000082f63de64f6ce2ee11028289aefdb3449391a823213e6336516748a7949bb108402f65631d661c18460675368a1860929ddeb8f71aa23d391b8fa99e9816af2d040876a663a86d97f46b9665cc18492b"], 0x0) (async) setns(0xc9, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x801, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001300)=@newtfilter={0x8e0, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xffff, 0x10}, {0x3}, {0x7, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x8ac, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x4e3, 0xca0b, 0x2, 0x8003, 0xfffffffc}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xd, 0xb}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_ACT={0x848, 0x2, [@m_nat={0x188, 0x18, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x492f, 0x1, 0x2, 0x6817, 0x9}, @private=0xa010100, @local, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x5, 0x4, 0x1, 0x8}, @empty, @rand_addr=0x64010100, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x9, 0x1, 0x6, 0x5}, @multicast2, @dev={0xac, 0x14, 0x14, 0x43}, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x1, 0x10000000, 0x4322, 0x4}, @dev={0xac, 0x14, 0x14, 0x40}, @rand_addr=0x64010102, 0xffffffff, 0x1}}]}, {0xbd, 0x6, "ef890a53d571c9801a7e449357261db1c4a767c70f2896426fb1ff5a490d01965bcee61961b23e66861c37ccf7ee806fc87924f2c88e15eaaea8c76a7d62fb52b9930b1baf92372bbfe2fe5346877c6973492ef888e7a35d31d089508dfd395dca3205bc215a67b4d3de6160149b1610301b9166139c60c69c2ca99e80c04e32618422271a069be41a51448c0d492248f1d626e24459a7ca7a31d190f8b961f11945e8ef1a2fe184deca31b822c2b150a7d4686a362ac7fe25"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_ctinfo={0x144, 0x1e, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x9, 0x80000000, 0x6, 0xfffffffe, 0x4}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xa3}, @TCA_CTINFO_ACT={0x18, 0x3, {0x7, 0x3, 0x20000000, 0x9, 0x3d85}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x6}, @TCA_CTINFO_ACT={0x18, 0x3, {0x3, 0xffffffff, 0x20000000, 0x2, 0x6}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x400}]}, {0xb5, 0x6, "7506cf1e3f2425de481bcdca1e512ba70d8471c009b0ab56cce9c071e4884faaf4519173c90fe14f8c9c8144da75d2630e021d66dcab4a609637ff9735b742ad685e17b155da99f3fa27a5158ff1a3c25ce1af1a910b63500eb91974645504bb53615aee445bd2e877d80c4e667fd53effc3cba5c8ecf96c32b825f8d90f050b3683273343d769a3e1bd9f0c69b5c8108b72a07264b523e40c1e5fdc9935f0e00f16055843d00eb75173babc43398e9838"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_connmark={0x158, 0x19, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x400, 0x5, 0x4, 0x6}, 0xfffe}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xa536928d, 0x8001, 0x7, 0x8, 0x4}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80, 0x6, 0x6, 0x8, 0x2}, 0x81}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x3b5, 0x0, 0x1, 0xfffffffe}, 0x9}}]}, {0xb5, 0x6, "36c221eae6ac64d013bd76453342fb58f6e15c666b8ceba1e4d5b24e98c6caa6e1557362bba2453a02ae3ed6819e4b8697b577803b830ace33e75f74356e1752718c2df7233682695ba531cb666e8df67be922eb70a13bc16337c1c855b171dc8260ee72b23f90c4da3574ca0e73f53eff470a2a3fd8cea31e3983f6b4fedd6b29046b9befee3f058db2fc6ff2ca2e93992014e92083043f4d3065d0f78933bb1185090eea65627d2c077dd9d0489437bd"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0x14c, 0x1b, 0x0, 0x0, {{0x9}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fff, 0x6, 0x10000000, 0x6fd, 0x32}, 0x16}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7f, 0x7, 0x7, 0x6, 0xeaff}, 0x28}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0xff9, 0x6, 0x7, 0x5}, 0x20}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x5, 0x4, 0x80000000, 0x7a}, 0x30}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffffa, 0x7, 0x5, 0xf, 0x4}, 0x80000015}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x80000001, 0xf, 0x0, 0xffffffc6}, 0x3c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3ff, 0x0, 0x1, 0x7, 0xea}, 0x57}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x9, 0x7, 0xd, 0xcfc}, 0x4f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x4, 0x8, 0xa63}, 0x39}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xe2, 0xc, 0x7, 0xfff, 0x4}, 0x67}}]}, {0x5, 0x6, '%'}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x4}}}}, @m_skbmod={0x98, 0x1a, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x53, 0x6, "a1606c423e690e2a8060a5da4f937204cfae27833a7b2a11522cb73717272bda576437be526505fe539ee39d0160dcf60fa76efd68e1c2e7ed1349e0bb738ba6fc6b2b5266c85da726b66cc4e55091"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ct={0xa0, 0x11, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x40}]}, {0x6d, 0x6, "b9c508668380bc8f667a18721f3e7f24e042ab1159fe6ba0ce6a7b89667be21ae9efb4566f6f94fdb15cd6db57bb041da165220fcf16f0b0cafc8bc49589e578de1a6d54062aad5140ff02d1d46dc3cb2309ef7ed06271c2530be69544c268afebbf6ee68f72ba727b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x104, 0x16, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x9000}, @TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_TC={0x5, 0x6, 0x3}]}, {0xbe, 0x6, "ee2acb63d25f89baf8df5bcfc95e7a677269828e524d9b2bcbba7e125d82a9b64ed8f79ab7d50a6e59229df0299672ca8ea1f8670c425d648affd9326f1a33191736cae8890756243c145cb49ad5ad22da9760461752fb5b5e67d09ecbd4829ea826b3f8fae5cf76e9478d681fd4e9f1498fbf749722c208f886fb2f1e4df9fe8ab51fdb6a4a8209b2ea21ebc20aed94b7a4f69c2a5a213b6c24276101e1def1a791335ba4957df2babf1db9a774d9e45c7f0bf6eb730a738e8e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_police={0x98, 0x8, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x200}, @TCA_POLICE_RATE64={0xc, 0x8, 0x40}, @TCA_POLICE_RESULT={0x8, 0x5, 0x101}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfff}]]}, {0x22, 0x6, "1f8410b1208d544f39d391c67d786cc10360d816aabcaa4a15830d09ad88"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8e0}, 0x1, 0x0, 0x0, 0x40800}, 0x44000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1, 0x0, 0x0, 0x86dd}, 0x4) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000400)=0xc) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000440)={0x26, 0xc2e0d4e, {}, {r9}, 0xc, 0xfffffffffffffff4}) (async) shmctl$SHM_LOCK(0x0, 0xb) 11m35.946803316s ago: executing program 48 (id=5356): r0 = socket$packet(0x11, 0x2, 0x300) socket$can_bcm(0x1d, 0x2, 0x2) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0, @ANYBLOB="16c461786392b66fdbcb3d936fd894979c8386caca14b11c58a74eab4ac1614d18c9e1bb53e10a24f978e62bab75324bd96d2058d7292954757237fdad5b2a06326453b76e2e68240a4a695051912cae6380096d4eeeae"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4bc}, 0x94) (async) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x840, 0x1fb) (async) move_pages(0x0, 0x20000070, &(0x7f0000000080), 0x0, &(0x7f0000000200)=[0x0, 0x0], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) syz_emit_ethernet(0xa2, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd603000bb006c2b00fc020000000000000000000000000000fe8000000000000000000000000000aa0000030000000000000000000064907802000000000000020000000082f63de64f6ce2ee11028289aefdb3449391a823213e6336516748a7949bb108402f65631d661c18460675368a1860929ddeb8f71aa23d391b8fa99e9816af2d040876a663a86d97f46b9665cc18492b"], 0x0) (async) setns(0xc9, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x801, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001300)=@newtfilter={0x8e0, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xffff, 0x10}, {0x3}, {0x7, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x8ac, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x4e3, 0xca0b, 0x2, 0x8003, 0xfffffffc}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xd, 0xb}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_ACT={0x848, 0x2, [@m_nat={0x188, 0x18, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x492f, 0x1, 0x2, 0x6817, 0x9}, @private=0xa010100, @local, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x5, 0x4, 0x1, 0x8}, @empty, @rand_addr=0x64010100, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x9, 0x1, 0x6, 0x5}, @multicast2, @dev={0xac, 0x14, 0x14, 0x43}, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x1, 0x10000000, 0x4322, 0x4}, @dev={0xac, 0x14, 0x14, 0x40}, @rand_addr=0x64010102, 0xffffffff, 0x1}}]}, {0xbd, 0x6, "ef890a53d571c9801a7e449357261db1c4a767c70f2896426fb1ff5a490d01965bcee61961b23e66861c37ccf7ee806fc87924f2c88e15eaaea8c76a7d62fb52b9930b1baf92372bbfe2fe5346877c6973492ef888e7a35d31d089508dfd395dca3205bc215a67b4d3de6160149b1610301b9166139c60c69c2ca99e80c04e32618422271a069be41a51448c0d492248f1d626e24459a7ca7a31d190f8b961f11945e8ef1a2fe184deca31b822c2b150a7d4686a362ac7fe25"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_ctinfo={0x144, 0x1e, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x9, 0x80000000, 0x6, 0xfffffffe, 0x4}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xa3}, @TCA_CTINFO_ACT={0x18, 0x3, {0x7, 0x3, 0x20000000, 0x9, 0x3d85}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x6}, @TCA_CTINFO_ACT={0x18, 0x3, {0x3, 0xffffffff, 0x20000000, 0x2, 0x6}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x400}]}, {0xb5, 0x6, "7506cf1e3f2425de481bcdca1e512ba70d8471c009b0ab56cce9c071e4884faaf4519173c90fe14f8c9c8144da75d2630e021d66dcab4a609637ff9735b742ad685e17b155da99f3fa27a5158ff1a3c25ce1af1a910b63500eb91974645504bb53615aee445bd2e877d80c4e667fd53effc3cba5c8ecf96c32b825f8d90f050b3683273343d769a3e1bd9f0c69b5c8108b72a07264b523e40c1e5fdc9935f0e00f16055843d00eb75173babc43398e9838"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_connmark={0x158, 0x19, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x400, 0x5, 0x4, 0x6}, 0xfffe}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xa536928d, 0x8001, 0x7, 0x8, 0x4}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80, 0x6, 0x6, 0x8, 0x2}, 0x81}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x3b5, 0x0, 0x1, 0xfffffffe}, 0x9}}]}, {0xb5, 0x6, "36c221eae6ac64d013bd76453342fb58f6e15c666b8ceba1e4d5b24e98c6caa6e1557362bba2453a02ae3ed6819e4b8697b577803b830ace33e75f74356e1752718c2df7233682695ba531cb666e8df67be922eb70a13bc16337c1c855b171dc8260ee72b23f90c4da3574ca0e73f53eff470a2a3fd8cea31e3983f6b4fedd6b29046b9befee3f058db2fc6ff2ca2e93992014e92083043f4d3065d0f78933bb1185090eea65627d2c077dd9d0489437bd"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0x14c, 0x1b, 0x0, 0x0, {{0x9}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fff, 0x6, 0x10000000, 0x6fd, 0x32}, 0x16}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7f, 0x7, 0x7, 0x6, 0xeaff}, 0x28}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0xff9, 0x6, 0x7, 0x5}, 0x20}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x5, 0x4, 0x80000000, 0x7a}, 0x30}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffffa, 0x7, 0x5, 0xf, 0x4}, 0x80000015}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x80000001, 0xf, 0x0, 0xffffffc6}, 0x3c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3ff, 0x0, 0x1, 0x7, 0xea}, 0x57}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x9, 0x7, 0xd, 0xcfc}, 0x4f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x4, 0x8, 0xa63}, 0x39}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xe2, 0xc, 0x7, 0xfff, 0x4}, 0x67}}]}, {0x5, 0x6, '%'}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x4}}}}, @m_skbmod={0x98, 0x1a, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x53, 0x6, "a1606c423e690e2a8060a5da4f937204cfae27833a7b2a11522cb73717272bda576437be526505fe539ee39d0160dcf60fa76efd68e1c2e7ed1349e0bb738ba6fc6b2b5266c85da726b66cc4e55091"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ct={0xa0, 0x11, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x40}]}, {0x6d, 0x6, "b9c508668380bc8f667a18721f3e7f24e042ab1159fe6ba0ce6a7b89667be21ae9efb4566f6f94fdb15cd6db57bb041da165220fcf16f0b0cafc8bc49589e578de1a6d54062aad5140ff02d1d46dc3cb2309ef7ed06271c2530be69544c268afebbf6ee68f72ba727b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x104, 0x16, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x9000}, @TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_TC={0x5, 0x6, 0x3}]}, {0xbe, 0x6, "ee2acb63d25f89baf8df5bcfc95e7a677269828e524d9b2bcbba7e125d82a9b64ed8f79ab7d50a6e59229df0299672ca8ea1f8670c425d648affd9326f1a33191736cae8890756243c145cb49ad5ad22da9760461752fb5b5e67d09ecbd4829ea826b3f8fae5cf76e9478d681fd4e9f1498fbf749722c208f886fb2f1e4df9fe8ab51fdb6a4a8209b2ea21ebc20aed94b7a4f69c2a5a213b6c24276101e1def1a791335ba4957df2babf1db9a774d9e45c7f0bf6eb730a738e8e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_police={0x98, 0x8, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x200}, @TCA_POLICE_RATE64={0xc, 0x8, 0x40}, @TCA_POLICE_RESULT={0x8, 0x5, 0x101}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfff}]]}, {0x22, 0x6, "1f8410b1208d544f39d391c67d786cc10360d816aabcaa4a15830d09ad88"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8e0}, 0x1, 0x0, 0x0, 0x40800}, 0x44000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1, 0x0, 0x0, 0x86dd}, 0x4) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000400)=0xc) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000440)={0x26, 0xc2e0d4e, {}, {r9}, 0xc, 0xfffffffffffffff4}) (async) shmctl$SHM_LOCK(0x0, 0xb) 10m59.67695501s ago: executing program 7 (id=5479): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x40880, 0x0) read$FUSE(r3, &(0x7f0000001380)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f00000033c0)={0x2020}, 0x2020) openat$cgroup_freezer_state(r3, &(0x7f00000002c0), 0x2, 0x0) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0400000005000100fe08eef198c50ccf9d870600"/29, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="010000000200"/28], 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0xf, 0x7fff8001}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0xa0d1, 0x50000, 0x3, 0x30b}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0xd, 0x0, r4, 0x100003, 0x1, 0x2, 0x23, 0x1}) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000002a80)={[0x12ec, 0x9, 0x8f3b8, 0x200, 0x100, 0x8001, 0x4002004c4, 0x1000, 0xa, 0x97, 0x9, 0x1, 0x9, 0x2, 0x5, 0x3], 0xeeee7ffb, 0x2c1715}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10m56.788477949s ago: executing program 7 (id=5482): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x70bd26, 0x25dfdbfd, {0x2, 0x10, 0x10, 0x0, 0x9, 0x0, 0x0, 0x6, 0x10007}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, @FRA_DST={0x8, 0x1, @empty}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) io_uring_register$IORING_REGISTER_SEND_MSG_RING(r0, 0x1f, &(0x7f0000000280)={0x28, 0x2, 0x0, r0, &(0x7f00000003c0)="47971d02d3cc48153040886bdd065925376f684b95802bd1f10ede0f", 0x1, 0x8, 0x0, 0x0, {0x0, 0x0, r1, 0x3}}, 0x1) write$tcp_mem(r0, &(0x7f00000056c0)={0x6b8b, 0x20, 0x7, 0x20, 0xfffffffffffffffa}, 0x48) 10m55.17419659s ago: executing program 7 (id=5486): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000004500)={0x14, 0x0, &(0x7f0000004400)=ANY=[@ANYBLOB='\x00\f\'G'], 0x0, 0x0}, 0x0) r1 = getpid() getpid() r2 = syz_open_dev$video(&(0x7f0000000040), 0x80, 0x4000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r3, &(0x7f0000000140), 0x0, 0xc00) socket$nl_netfilter(0x10, 0x3, 0xc) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x2f, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) recvmmsg(r4, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000001f40)=""/4130, 0x1022}, {&(0x7f0000000180)=""/235, 0xeb}, {&(0x7f00000006c0)=""/176, 0xb0}, {&(0x7f00000009c0)=""/182, 0xb6}, {&(0x7f0000000280)=""/70, 0x46}, {&(0x7f0000000a80)=""/272, 0x110}, {&(0x7f0000000140)=""/15, 0xf}], 0x7}, 0x20001008}], 0x1, 0x40, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaa0c0800450000b0000000000011907800000000000000000010f7004e23009c907801000000000000007b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00000000000000000000000000bcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1f39cb307b36ff674d646472eb9cdb042d8643fcbb2c5a57df67d544af6e8da"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x10, &(0x7f0000000080)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x20000000000002f5, &(0x7f00000003c0)=ANY=[@ANYRES64=r2, @ANYRESHEX, @ANYRES64=r1], 0x0, 0x2003, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r5, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0xb}], 0x1, 0x40000021, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r7 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) 10m49.96795878s ago: executing program 7 (id=5498): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x70bd26, 0x25dfdbfd, {0x2, 0x10, 0x10, 0x0, 0x9, 0x0, 0x0, 0x6, 0x10007}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, @FRA_DST={0x8, 0x1, @empty}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) io_uring_register$IORING_REGISTER_SEND_MSG_RING(r0, 0x1f, &(0x7f0000000280)={0x28, 0x2, 0x0, r0, &(0x7f00000003c0)="47971d02d3cc48153040886bdd065925376f684b95802bd1f10ede0f", 0x1, 0x8, 0x0, 0x0, {0x0, 0x0, r1, 0x3}}, 0x1) write$tcp_mem(r0, &(0x7f00000056c0)={0x6b8b, 0x20, 0x7, 0x20, 0xfffffffffffffffa}, 0x48) 10m48.792912374s ago: executing program 7 (id=5500): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f00000001c0)={0x17c04, r2, 0x5000, 0x24000007, 0x2, 0x5}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, r2, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffe}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x702, 0xb, 0x0, &(0x7f0000000380)="e460334470d8d400eb00c1", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f0000000140)='debugfs\x00', 0x1) setresuid(0x0, 0xee00, 0x0) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r4, 0x2, 0x5004) r7 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xffffffffffffffff) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r6, 0x40089413, 0x0) keyctl$read(0x2, r7, &(0x7f00000000c0)=""/4096, 0x1000) 10m47.386606931s ago: executing program 7 (id=5505): socket$inet6(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40000000000035d, 0x20000084) recvmmsg(r1, &(0x7f00000000c0), 0x191d1f8, 0x10042, 0x0) getegid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000840)=ANY=[@ANYRES64], &(0x7f0000000040)='syzkaller\x00', 0x6, 0xab, &(0x7f0000000140)=""/171, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) 10m32.180616073s ago: executing program 49 (id=5505): socket$inet6(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40000000000035d, 0x20000084) recvmmsg(r1, &(0x7f00000000c0), 0x191d1f8, 0x10042, 0x0) getegid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000840)=ANY=[@ANYRES64], &(0x7f0000000040)='syzkaller\x00', 0x6, 0xab, &(0x7f0000000140)=""/171, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) 18.429660142s ago: executing program 4 (id=7008): semctl$GETALL(0x0, 0x0, 0xd, &(0x7f00000002c0)=""/192) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r2, r2) getresgid(&(0x7f00000000c0)=0x0, &(0x7f0000000140), &(0x7f0000000180)) syz_usb_connect(0x3, 0x24, &(0x7f0000001680)={{0x12, 0x1, 0x300, 0xe2, 0x24, 0x2c, 0x8, 0x41e, 0x401d, 0x295c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x7, 0x0, 0x9, "", [{{0x9, 0x4, 0xab, 0x3, 0x0, 0x96, 0xe2, 0x4d}}]}}]}}, &(0x7f0000002040)={0x0, 0x0, 0x0, 0x0, 0x59}) fchown(r1, r2, r3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x140}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000280)={0x20, 0x31, 0x4, "209c8c53"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000140)={0x0, 0x17, 0x5, "07982960f2"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r5) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r5, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x80, r7, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x80}}, 0x4040) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x0) sendmmsg$sock(r1, &(0x7f000000bb40)=[{{0x0, 0x5dc, 0x0}}, {{0x0, 0x0, 0x0}}], 0x802, 0x4000011) 18.266629339s ago: executing program 3 (id=7009): unshare(0x6a060000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001bc0)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000003c00)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000004c00)={{r2, 0x7, 0x5, 0x0, 0x2, 0x7, 0x8000000000000000, 0xfffffff7, 0x9, 0x40, 0x2, 0x9, 0xa, 0x4, 0x7f17}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) open(0x0, 0x149040, 0x0) r3 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x1, 0x2) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f0000000300)={0x1ff, 0x1, 0x0, 0x1, 0x4}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x200000000000000) 13.570501006s ago: executing program 0 (id=7014): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x7fff) 13.473807572s ago: executing program 4 (id=7015): r0 = openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(r0, &(0x7f0000019540)=[{&(0x7f0000001680)='0', 0x1}, {&(0x7f0000019380)="b50a6ba67a", 0x5}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) getresuid(&(0x7f00000001c0), &(0x7f0000000200)=0x0, &(0x7f0000000240)) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000180)=@sr0, r1, &(0x7f0000000280)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x440100, 0x12) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x32, &(0x7f0000000040)="ff02040000", 0x5) write(r2, &(0x7f0000000000)='3', 0x4e) socket(0x2b, 0x805, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='devpts\x00', 0x1, 0x0) 13.027068932s ago: executing program 0 (id=7018): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000900)=0x15) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR}, 0x3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x6a, &(0x7f0000000480)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x3f, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', r2, @fallback=0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000280)="c021", 0x2}, {&(0x7f0000000000)="705d3dc31d08da6e6a8fb3e5474fe978810737d5adb948b6adbfd88f0263d2517c370e95e2fd6b0638098044b4a472f8b30c54da7ca1ee9a16cbbd0e1c069b81", 0x40}, {&(0x7f00000002c0)="fd1efb24527e608270e57ee1ac8dba0398d194b8e66e483c10fae03981ca399c1e4f2d2f3bd97e6969ae6fbf83313394ea28f478f5f633a5e220ff587c658d04afdeb96750de6c52713e26bc699d9448663d1777fb1374cdb514a2a1f96d60a8475ae092983d7d3b4e437566e8766fc21fd934efb280936ddd1fbae01871fe101c95af717a9f7d0eda7151ce6642fecb14afa823dddd6379dbfd9fbb36f673be18e6c37e8cf7728e5b47e377157600694c7a8d4586ad26d7f6fb5e3a0cba0a73adeebe0898811891243c05858fb814807b7a6a", 0xd3}, {&(0x7f00000003c0)="7913b2e258fb31a301d355708130648a", 0x10}], 0x4) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f00000003c0)={0x1, 0x0, 0x9, 0x3, 0x7f, 0x5, 0xc0e}) ioctl(r0, 0x404c4701, &(0x7f0000000a00)="01000000000000000000000001000000010000000a0000000000000040000000400000000100000001") ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000c00)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000c10)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000c20)=0x3f) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000c30)=0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000c40)=0x1c) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000c50)=0x1) 13.019062504s ago: executing program 3 (id=7019): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2713, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 12.688236031s ago: executing program 4 (id=7020): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/devices\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000640)=""/4130, 0x1022, 0x1000000000001) 11.90875776s ago: executing program 3 (id=7021): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = fsopen(&(0x7f0000000200)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='Q\xee\xdaK\xb4P_\xb1\x1b1UK\x83\xc9\x00#B%\xfb\x96\t\xce\xe7\xe2[x\xb1{\xf3E\f\x1d\x11\xdft\xe2>\xa3u\xbd<\x12\xfe\x15\xc6LY\xd6\x03\xdb\xe9XeyV\x85S\xf0S{\xbf\x96\x00\x00\x00\x00D\x1d!-\x02\xa6\xaa\b\x00\xbcL\xad0\xd2\x90\x83\x12Vt3B\x96x\xde\x13\xbc\xc6\xfb_\x03W\xf5\a\xc6r\x95\x12\f1U\xf8\x18Z\xfcRZ\x7f\xe9\xe7A', &(0x7f00000005c0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000c1}, 0x20040000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001900)={'vxcan0\x00', 0x0}) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) setsockopt$packet_rx_ring(r5, 0x107, 0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x70bd26, 0x25dfdbfd, {0x2, 0x10, 0x10, 0x0, 0x9, 0x0, 0x0, 0x6, 0x10007}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, @FRA_DST={0x8, 0x1, @empty}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) io_uring_register$IORING_REGISTER_SEND_MSG_RING(r5, 0x1f, &(0x7f0000000280)={0x28, 0x2, 0x0, r5, &(0x7f00000003c0)="47971d02d3cc48153040886bdd065925376f684b95802bd1f10ede0f", 0x1, 0x8, 0x0, 0x0, {0x0, 0x0, r6, 0x3}}, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="500000001000100026bd70dd2d5e7fccc4fbc770c11029000000000000000000", @ANYRES32=r4, @ANYBLOB="63000000000000002000128008000100736974001400028006000d0005000000080001", @ANYRES32=r8, @ANYBLOB="08000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socket$inet6(0xa, 0x80002, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x82b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x40000) write$tcp_mem(r5, &(0x7f00000056c0)={0x6b8b, 0x20, 0x7, 0x20, 0xfffffffffffffffa}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x1}, 0x50) 9.57068027s ago: executing program 6 (id=7023): openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0xc0400, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x88}, 0x80) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_add_dev(r2, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2e, 0x1fdd1375bdd2e52f, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000040)=@new_dev={0x1, 0x390, 0x0, 0x0, 0x1000, 0xffffffff, r4, 0x0, 0x1a0}}}, &(0x7f0000000140)=0x0) syz_ublk_setup_queues(r6, r7, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x10, 0x1, 0x3c3, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x14a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x2, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x56f, 0x200, 0x1}}], 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) r8 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f00000007c0)=0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) 9.092183323s ago: executing program 4 (id=7024): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x3f) socket$nl_route(0x10, 0x3, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0xff, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x3ff}}}}}}}, 0x0) syz_emit_ethernet(0x50, &(0x7f0000000580)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x1a, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}, {"ce8d24d68260"}}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r2, &(0x7f0000000000), 0x0) syz_pidfd_open(r0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000ac0)=[{&(0x7f0000000240)="f26424190a77da520b7caf6da069e97ab7682c48b72d83973a5657fcbf89d096871438b22bb6bc1f628469383ead46e473223104279fd3f63a005f1d142fe36e4d2af808e6a011dcda4f7ae8eb5c5032b102000000830200e9ffffffffffe8cbb94e695c2d4b6fb61c2d32e12795ea49c2c1dacb679a078341814cac881c6058875a74582cbecaa1c1cd00"/148, 0x94}, {&(0x7f0000000640)="727bca5258bb08d5cbe4b1a4d5788ee4e54f94794b97cb4fef4ed739b6420dcb2406ce23b45895e362240ab278cf79a612e458efdaa5cc81b70001ce103f5c5315f00b41506efca8339363ac7273ca30f2f04efef05b1225dcbb2433fb82532118f776f90945bea406b0cdd4578fa85cd25deb2c3553643e23056701543a62a491347e8fe1f621e0b6457f50bee4ab18e3edbd3edc2d29b8be44f31f4366325cf44d3b2f8a1c7407235d4196fdb671aa6f0173875dd0a994fcde5f4207ade62ddd5709917b44dfec1fbc1051ebf9857e3dca77238705e288cbc16eb746c0e0b94479d733afeb7d37808b1ce00b306d0bccdb68bd548cd200ee22", 0xfa}, {&(0x7f0000000740)="851ea7b70c5c35e35a7a9eb7886630553f75f86f9055baa1c42428c1c5660a78e70ed9ca7ebfdb36232475c2cb91a771a99fd1611e20ada021acb7a0e84e70d380826c3d52612f6beb380fc3821cbd876aecd3269abf5769347893f3912600dcdd029cb618d65c76e2049524e88336f6cb3f5ded7468a7f96129ae043c5644c9aa1817c3561d49dab390232e4ff15803d0b3f2c2c0538583d19f79a53fb5bb1bcb4be860d16ac7b3c016ee6abf12043852ada0412aa9c0ebf69d0eefbb2b3c9318c00d8909f3d789637aeeb4585ec29c6c8535a2027156987bc6b8e56f0a1ac9c64c91fbec37188c707f99f0f70925d2c9571b0f9b7597bc80", 0xf9}, {&(0x7f0000000440)="b83d4762c74fcf3d190208914b216295d291235d85126101fb5ed630c52a897a91d7e019409bc52b202a7696a947ecff58041cab01dbf8a584cc2838646f932b1c5fc388983f891a24e0fbc8", 0x4c}, {&(0x7f0000000980)="3ae1699b1c5c9de2c4f2e154de98aa03b0854f339723645f4ef0ec171371094377a536fb786ac1e8ec4b9122f34132f4e3fb22397903976364bb981c008f448bd30fefcf1343502afc1b45f8efa7354723301e02985f23c9e2cd02a4f47f7ad20c08eb272ee5fc3ed9afd05a23c5e5f3a98ff20e878c74c698b723b2", 0x7c}, {&(0x7f0000000a00)="a4bebd9082cb3b74926a7536282aeda19ef31b59b3fdff1116692192524cb95c7dfd65c0c8fe74de307eb92a1345b6283edee3174d8c05254c694bcbffb43087a4628d4f3bfed472bfd0b1a05fd83bdf1d41f51499d143b3f0b80b8dda1a0fb24a468be3c3da9ebfd890a244b17b783112ad6d0f4add8cba1f717db77c14b69cef1f48fd6af4f5a40b6582e235889aea3b9e10e763213b0355ef", 0x9a}], 0x6) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001080900"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004004400000008001b0000000000"], 0x30}}, 0x0) 8.487704927s ago: executing program 6 (id=7025): fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000005c0)="94868a588ab2711f1bc7ceb55b13e759d7821028a81c9a85c0e64992d7b4c3806ea7a3b6759b4839d8575c471efb862bc4c43f0600f57134f30e25ae45c9ebf2e0abe2d065c8c88c55aeaf5832223379902f9ec936020f512daf5280ef25524dc6db01d8e9bd0be884f80e1d0048744a794ca53f75b509ff0bb6452f2f3e473d5262f027bdae21b6f8af000000cc1a868ef40b494adcb42f97b743ef35c9d10e94f91073a4f772c74fb259f83767be650105b0c5de6277df045da2797dc135051aa259e0025012ff15e339d991130f78df6abfcce8216384af18bb6d8fa9d4fefcdd05b1c45105931796e26d1c0feff8acf5793a728928c1678d8e955fc6118fd61d1cd7aceecae9ef1f5aca5b092c5d9418015650afa127121e00000098a61412c38910b8c2aedf37100b848590caf8af73dd629388e6682f1aa70fba161143bc58e027b662e2e47e7e194fccbaf2fa1d2d566665eb02f9e3e873de625abee4c0e9161c7ebacda949ec46d1744213f8aebf0be7947ef88c0040c6641cb7d9fb562e459609b794c0f11838c1240419bdd208314fd223ffec50900274557da92a4d3dd55a880d330a47991b258195fd4562f5758dbcf387d52fb5357c822230cd486a57c3f69301e5eada4abc5fe5842894767b0dd9098d7af4899d55ad907077bdc2bbcc08c91cc714c1f1eddd5c958dcb6020b8aa2df6bcccfaff69", 0x1fc}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$kcm(0xa, 0x2, 0x0) r1 = fsopen(&(0x7f0000000100)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, &(0x7f00000000c0)='1\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x80041) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2, 0x401d031, 0xffffffffffffffff, 0x0) close(0x3) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/mtdblock0\x00', 0x0, 0x22) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mtdblock0\x00', 0x101042, 0x1ff) sendfile(r3, r2, 0x0, 0x20000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$RTC_AIE_OFF(r2, 0x7002) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r5, 0x0, 0x0, 0x90001) 8.382677698s ago: executing program 0 (id=7026): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) getresuid(&(0x7f00000001c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) socket(0x2b, 0x805, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x1, 0x0) 8.317553008s ago: executing program 3 (id=7027): syz_usb_connect$printer(0x2, 0x0, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001500)=""/184, 0x0, 0xffff1000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x300, @my=0x1}, 0x10) 6.859015512s ago: executing program 8 (id=7028): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r1) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="13a300e2b4050000000000000063c3f6f95792a5239dc2e786f4c8cfbe6ecd242b0a45e9f7bb3002bc2624a9f276dacf2a91bc189ab4b0d57e", @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25310000000500360001000000050035000600000005003300030000000a0001007770616e31000000"], 0x38}}, 0xc094) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x100000) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) mmap$IORING_OFF_SQES(0x0, 0x1, 0x3000002, 0x810, 0xffffffffffffffff, 0x10000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000100)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) getdents64(r4, 0x0, 0x7fff) 6.847361749s ago: executing program 4 (id=7029): unshare(0x6a060000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001bc0)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000003c00)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000004c00)={{r2, 0x7, 0x5, 0x0, 0x2, 0x7, 0x8000000000000000, 0xfffffff7, 0x9, 0x40, 0x2, 0x9, 0xa, 0x4, 0x7f17}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) open(0x0, 0x149040, 0x0) r3 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x1, 0x2) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f0000000300)={0x1ff, 0x1, 0x0, 0x1, 0x4}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x200000000000000) 6.803819216s ago: executing program 6 (id=7030): r0 = openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(r0, &(0x7f0000019540)=[{&(0x7f0000001680)='0', 0x1}, {&(0x7f0000019380)="b50a6ba67a", 0x5}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) getresuid(&(0x7f00000001c0), &(0x7f0000000200)=0x0, &(0x7f0000000240)) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000180)=@sr0, r1, &(0x7f0000000280)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x440100, 0x12) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x32, &(0x7f0000000040)="ff02040000", 0x5) write(r2, &(0x7f0000000000)='3', 0x4e) socket(0x2b, 0x805, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='devpts\x00', 0x1, 0x0) 6.18380342s ago: executing program 8 (id=7031): openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0xc0400, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x88}, 0x80) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_add_dev(r2, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2e, 0x1fdd1375bdd2e52f, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000040)=@new_dev={0x1, 0x390, 0x0, 0x0, 0x1000, 0xffffffff, r4, 0x0, 0x1a0}}}, &(0x7f0000000140)=0x0) syz_ublk_setup_queues(r6, r7, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x10, 0x1, 0x3c3, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x14a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x2, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x56f, 0x200, 0x1}}], 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) r8 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, &(0x7f00000007c0)=0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) 6.158510499s ago: executing program 0 (id=7032): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x2, 0x4) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(0xffffffffffffffff) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, 0x0) sendmsg$nl_route(r2, 0x0, 0x20000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000080) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) connect$inet6(r1, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)={0x30, r4, 0x2d3f7732086afff, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x2, 0x50}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c080}, 0x880) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, 0x0) 5.74178008s ago: executing program 6 (id=7033): openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0xc0400, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) socket$inet_tcp(0x2, 0x1, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x60}, 0x80) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_add_dev(r2, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2e, 0x1fdd1375bdd2e52f, 0x0, r5, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000040)=@new_dev={0x1, 0x390, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1a0}}}, &(0x7f0000000140)=0x0) syz_ublk_setup_queues(r5, r6, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x10, 0x1, 0x3c3, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x14a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x2, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x56f, 0x200, 0x1}}], 0x1, 0x0, 0x0) 5.485674833s ago: executing program 0 (id=7034): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000340)) readv(r3, &(0x7f0000003400)=[{0x0}, {&(0x7f00000003c0)=""/4096, 0x1000}, {0x0, 0xffffffab}, {0x0}, {0x0}], 0x5) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="05ff00"/12, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r8}, &(0x7f00000001c0), &(0x7f0000000280)=r4}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/fcloop/ctl/set_cmd_drop\x00', 0x1, 0x0) write(r9, &(0x7f0000000800)='101', 0x3) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28) 3.902826028s ago: executing program 6 (id=7035): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/devices\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000640)=""/4130, 0x1022, 0x1000000000001) 3.491336064s ago: executing program 8 (id=7036): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af9219a1e18c488e827c1bbec", 0x89}], 0x1}, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xffffff01, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0500f000000000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a010400000000000000000100000008000b40000000000900010073797a300000000014000480100001800a000100726564697200000014000000110001"], 0xcc}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x3f, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @random="429e82211cf8", @void, {@ipv6={0x86dd, @generic={0xa, 0x6, "7abd6a", 0x0, 0x67, 0x1, @private0, @mcast2}}}}, 0x0) 3.360676668s ago: executing program 3 (id=7037): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x101000) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={"70d40e24", 0x7, 0x1, 0x7, 0x7, 0x4, "af017208bd3578dcdab68790328573", "e3c5e4b0", "c3fdb36a", "c3a30f6f", ["1d18e9cb2bd0abdccef7624e", "29cf54db016b09ec4cb12bfe", "1a557950974a587c9b6d8622", "759a23508333705d60d3d2d7"]}) (fail_nth: 1) 3.31745084s ago: executing program 0 (id=7038): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) setsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000000c0)=ANY=[@ANYRESHEX=0x0, @ANYRES8=r0, @ANYRESDEC, @ANYRES64=r1], 0x6) r2 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r2, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) sendmmsg$inet(r2, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000001240)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30ced1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f46097b1ee0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a7f4571e693abebc3c5ff16c8128d92476", 0xdb}, {&(0x7f0000000280)="5b4ea50f20d7212327afde5e7a457cde2dff791c69fbc3", 0x17}, {&(0x7f00000002c0)="851d8a90d516f218f839a7c48edfe734b2490c90a2fbf5be3383f1c9f5be8e55148723ac0258ef4f8af1f5e0b0a86885f018523d60072c7d9c1568700b3abe208fbd5dad2daf18b5150a530d816bf4cc6e43da4f2793611b38009e8c0970268cf5836926fd1223f4f8bec6a4a68b2aaff7af151a661793a04cd9b936da8f53eae22356781c580df817f3168269eaeeae014fa9b1878bd89e2acb4853ffd7b9a06d7f5ff090c605f5d343e6d93c80d747365d21acea325c44fbb87f6271a2d9333e9b9dd1d36dfea61641d34fd54cd2970ac14acdadd04357bdd44bc926d0adef887b2e25c2f435ce79bac1d1f473c3a49a12aa5c5cfa4bfa4fd2470308ed259e62c218aee67006a3ca187c9aa13a806d99b2275341fd6022940537b1cb1fd2389f417ea92c6e77a09a9d09a98c4e2f0912d36b47588ff991aa98c3c650055bacb669aaf68dd4f8a7b43569c9af62e7cee6ba05278fe8642feafa5c436cb13fa45b3cdf750f8956c493acf7c561b12259331a363c74fb5f2947652ced415b0986b673680e8ad7bad823ff84c30681cbe45114510d9aa6f423f212bcdf1c244178ae31474d9f176707e9c481057f72d489372f7daeba51e3ea86895c8eed109566ad19f3957d0df21a671fce2d674c207d8643c85a018834f4e8e3992e6991d815", 0xeb}, {&(0x7f0000001440)="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", 0xb47}, {&(0x7f0000002440)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc6ea12ad1a30e4f7038336f1af1d61b04de988f1755e9b3ba9919b2a4952ceda920a7f0e22dd239d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870291200e428", 0x71}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="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", 0xa9b}], 0x7}}], 0x300, 0x0) socket$alg(0x26, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0xb) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) capset(0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xe) io_uring_setup(0x48e, &(0x7f0000000240)={0x0, 0xed7d, 0x2, 0x2, 0x29d}) 2.707493492s ago: executing program 4 (id=7039): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x7}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xe84, 0x2c, 0x800, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000001, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x1, 0x4, 0x5}, {0x4a7, 0x1ff, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x7, 0xfffffffd, 0x5}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8}, {0x0, 0x5, 0x1437, 0x0, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x0, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x5, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x9, 0x3, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x8, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x8, 0x1, 0x1ff, 0x40}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0xfffffffb, 0xeac}, {0x9, 0x2, 0xd77, 0x8, 0x113, 0x8d3f}, {0x10000, 0xffffffff, 0x4, 0x92a4, 0x9, 0x10}, {0x1a4a13f0, 0x9, 0xe, 0x3, 0xad47, 0x2}, {0x7, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x4, 0x200, 0x9, 0x1, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0xffff, 0x9, 0x44, 0xc, 0x1}, {0x6, 0x10, 0xf, 0x80002, 0x6, 0x44}, {0xf23, 0x3ff, 0x0, 0x4000009, 0xffffffff}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x9, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x400, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x1}, {0x3, 0x7, 0x4, 0x4, 0x1c716ddc, 0x2}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x6, 0x3, 0x2}, {0x62, 0xf4, 0x5, 0x4, 0x4, 0x6f}, {0x5, 0x4, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x2, 0x1000, 0x9, 0x9}, {0xe, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0xe3f6, 0x8, 0xfffffff7, 0x1, 0x6, 0xc}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f1, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x7, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0xb, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x2, 0x9, 0x0, 0x2}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x3, 0x5, 0x3ff, 0x3649}, {0x800007, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc5, 0x3, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffffffff, 0x4, 0xfc, 0x7, 0x6, 0x10}, {0xf, 0xfffffffe, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0x10001, 0x6, 0x1, 0x9, 0xfffffff8}, {0x3, 0xa, 0x7, 0x9, 0x10, 0x1}, {0x5, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x3}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x94, 0x4, 0x40000088}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0x5, 0x7, 0x5, 0x2, 0x1ff, 0x80000001}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x10000007, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x5, 0x3, 0x4, 0x9, 0xfffffffa}, {0x2, 0x3, 0x3, 0x6, 0x800, 0x7}, {0x0, 0x0, 0x3, 0x2, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0xc851, 0x3}, {0x6, 0x731, 0xfffffffc, 0xc, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x0, 0x9, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffffa, 0x1, 0x3, 0x40, 0x2}, {0x1, 0x4, 0x80000000, 0x7ffffffd, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x5a, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0xffffff96, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b4, 0x1, 0x800}, {0x61, 0x29, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x7}, {0x8, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6f}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xb, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xb, 0x10000, 0x1, 0x8000, 0xfffff830}, {0x3, 0x4, 0x2, 0x1, 0x3, 0x2b4}, {0x3cd2dbce, 0x929a, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x9, 0xe65, 0xc5c3, 0x3, 0x1}, {0x4, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0x40ce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0xcf}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0x4}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4}, {}, {0x1}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x1, 0x1}, {0x4}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {}, {}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x81}, 0x800) accept$unix(r1, &(0x7f0000000140), &(0x7f00000001c0)=0x6e) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) unshare(0x22020600) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000080)=@get={0x1, 0x0, 0x8000000000000001}) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r6, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) open(&(0x7f0000000280)='.\x00', 0x0, 0x109) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) 2.649435908s ago: executing program 3 (id=7040): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nvmet/subsystems/test/namespaces/1\x00', 0x49) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/test\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000280), 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80) lseek(r0, 0xf, 0x0) socket$inet6(0xa, 0x2, 0x0) fsopen(&(0x7f0000000080)='nfs\x00', 0x0) fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) socket(0x2, 0x3, 0xff) openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x82000, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_usbip_server_init(0x6) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write(r2, 0x1, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="043e1d", @ANYRES32=r1], 0x22) 734.585439ms ago: executing program 8 (id=7041): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r1) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="13a300e2b4050000000000000063c3f6f95792a5239dc2e786f4c8cfbe6ecd242b0a45e9f7bb3002bc2624a9f276dacf2a91bc189ab4b0d57e", @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25310000000500360001000000050035000600000005003300030000000a0001007770616e31000000"], 0x38}}, 0xc094) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x100000) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) mmap$IORING_OFF_SQES(0x0, 0x1, 0x3000002, 0x810, 0xffffffffffffffff, 0x10000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000100)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x7fff) 365.504181ms ago: executing program 8 (id=7042): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) getresuid(&(0x7f00000001c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) socket(0x2b, 0x805, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x1, 0x0) 0s ago: executing program 8 (id=7043): r0 = openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(r0, &(0x7f0000019540)=[{&(0x7f0000001680)='0', 0x1}, {&(0x7f0000019380)="b50a6ba67a", 0x5}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) getresuid(&(0x7f00000001c0), &(0x7f0000000200)=0x0, &(0x7f0000000240)) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000180)=@sr0, r1, &(0x7f0000000280)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x440100, 0x12) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x32, &(0x7f0000000040)="ff02040000", 0x5) write(r2, &(0x7f0000000000)='3', 0x4e) socket(0x2b, 0x805, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='devpts\x00', 0x1, 0x0) kernel console output (not intermixed with test programs): times 0 [ 2307.258710][ T5120] CPU: 0 UID: 0 PID: 5120 Comm: syz.8.6845 Tainted: G L syzkaller #0 PREEMPT(full) [ 2307.258730][ T5120] Tainted: [L]=SOFTLOCKUP [ 2307.258735][ T5120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 2307.258742][ T5120] Call Trace: [ 2307.258753][ T5120] [ 2307.258758][ T5120] dump_stack_lvl+0x100/0x190 [ 2307.258781][ T5120] should_fail_ex.cold+0x5/0xa [ 2307.258798][ T5120] should_failslab+0xc2/0x120 [ 2307.258814][ T5120] kmem_cache_alloc_noprof+0x92/0x6a0 [ 2307.258828][ T5120] ? alloc_empty_file+0x5b/0x1c0 [ 2307.258847][ T5120] alloc_empty_file+0x5b/0x1c0 [ 2307.258863][ T5120] dentry_open+0x46/0xd0 [ 2307.258877][ T5120] pidfs_alloc_file+0x18e/0x290 [ 2307.258892][ T5120] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 2307.258911][ T5120] pidfd_prepare+0x107/0x1b0 [ 2307.258926][ T5120] __x64_sys_pidfd_open+0x105/0x1a0 [ 2307.258943][ T5120] ? __pfx___x64_sys_pidfd_open+0x10/0x10 [ 2307.258963][ T5120] do_syscall_64+0x123/0x790 [ 2307.258982][ T5120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2307.258994][ T5120] RIP: 0033:0x7ff44319e159 [ 2307.259004][ T5120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2307.259015][ T5120] RSP: 002b:00007ff44412c018 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2 [ 2307.259026][ T5120] RAX: ffffffffffffffda RBX: 00007ff443425fa0 RCX: 00007ff44319e159 [ 2307.259033][ T5120] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000375 [ 2307.259040][ T5120] RBP: 00007ff44323506b R08: 0000000000000000 R09: 0000000000000000 [ 2307.259047][ T5120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2307.259054][ T5120] R13: 00007ff443426038 R14: 00007ff443425fa0 R15: 00007ffd1d12f538 [ 2307.259068][ T5120] [ 2307.632606][T30531] netdevsim netdevsim10 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2307.669512][T16566] usb 1-1: USB disconnect, device number 30 [ 2307.714962][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2307.714990][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2307.715015][T30377] usb 5-1: USB disconnect, device number 60 [ 2308.001792][ T5127] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 2308.873074][ T5129] FAULT_INJECTION: forcing a failure. [ 2308.873074][ T5129] name failslab, interval 1, probability 0, space 0, times 0 [ 2308.873104][ T5129] CPU: 0 UID: 0 PID: 5129 Comm: syz.8.6847 Tainted: G L syzkaller #0 PREEMPT(full) [ 2308.873120][ T5129] Tainted: [L]=SOFTLOCKUP [ 2308.873126][ T5129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 2308.873132][ T5129] Call Trace: [ 2308.873137][ T5129] [ 2308.873142][ T5129] dump_stack_lvl+0x100/0x190 [ 2308.873162][ T5129] should_fail_ex.cold+0x5/0xa [ 2308.873177][ T5129] should_failslab+0xc2/0x120 [ 2308.873192][ T5129] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 2308.873205][ T5129] ? __alloc_skb+0x5b7/0x710 [ 2308.873219][ T5129] ? __alloc_skb+0x140/0x710 [ 2308.873234][ T5129] __alloc_skb+0x140/0x710 [ 2308.873247][ T5129] ? __alloc_skb+0x5b7/0x710 [ 2308.873260][ T5129] ? __pfx___alloc_skb+0x10/0x10 [ 2308.873272][ T5129] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 2308.873285][ T5129] ? sock_has_perm+0x25a/0x2f0 [ 2308.873296][ T5129] ? __pfx_sock_has_perm+0x10/0x10 [ 2308.873308][ T5129] netlink_alloc_large_skb+0x69/0x150 [ 2308.873323][ T5129] netlink_sendmsg+0x680/0xda0 [ 2308.873338][ T5129] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2308.873353][ T5129] ? selinux_socket_sendmsg+0x198/0x2f0 [ 2308.873368][ T5129] ____sys_sendmsg+0xa4d/0xbe0 [ 2308.873384][ T5129] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2308.873398][ T5129] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2308.873419][ T5129] ? lock_acquire+0x1d1/0x380 [ 2308.873431][ T5129] ? get_pid_task+0x2a/0x250 [ 2308.873448][ T5129] ___sys_sendmsg+0x190/0x1e0 [ 2308.873459][ T5129] ? __pfx____sys_sendmsg+0x10/0x10 [ 2308.873470][ T5129] ? get_pid_task+0x106/0x250 [ 2308.873491][ T5129] ? find_held_lock+0x2b/0x80 [ 2308.873515][ T5129] __sys_sendmsg+0x160/0x210 [ 2308.873530][ T5129] ? __pfx___sys_sendmsg+0x10/0x10 [ 2308.873552][ T5129] do_syscall_64+0x123/0x790 [ 2308.873570][ T5129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2308.873582][ T5129] RIP: 0033:0x7ff44319e159 [ 2308.873592][ T5129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2308.873603][ T5129] RSP: 002b:00007ff44410b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2308.873614][ T5129] RAX: ffffffffffffffda RBX: 00007ff443426090 RCX: 00007ff44319e159 [ 2308.873621][ T5129] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 2308.873628][ T5129] RBP: 00007ff44410b090 R08: 0000000000000000 R09: 0000000000000000 [ 2308.873635][ T5129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2308.873642][ T5129] R13: 00007ff443426128 R14: 00007ff443426090 R15: 00007ffd1d12f538 [ 2308.873656][ T5129] [ 2309.359571][ T5134] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 2309.415557][ T5137] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 2309.682831][T30377] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 2309.762560][T16566] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 2309.834364][T30377] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2309.834410][T30377] usb 1-1: New USB device found, idVendor=08ca, idProduct=2016, bcdDevice=f7.ed [ 2309.837016][T30377] usb 1-1: config 4 has an invalid interface number: 4 but max is 0 [ 2309.837040][T30377] usb 1-1: config 4 has no interface number 0 [ 2309.837064][T30377] usb 1-1: config 4 interface 4 has no altsetting 0 [ 2309.838643][T30377] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2309.838656][T30377] usb 1-1: Product: syz [ 2309.838674][T30377] usb 1-1: Manufacturer: syz [ 2309.838682][T30377] usb 1-1: SerialNumber: syz [ 2309.918511][T16566] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2309.918546][T16566] usb 4-1: New USB device found, idVendor=08ca, idProduct=2016, bcdDevice=f7.ed [ 2309.920978][T16566] usb 4-1: config 4 has an invalid interface number: 4 but max is 0 [ 2309.921001][T16566] usb 4-1: config 4 has no interface number 0 [ 2309.921034][T16566] usb 4-1: config 4 interface 4 has no altsetting 0 [ 2309.977232][T16566] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2309.977258][T16566] usb 4-1: Product: syz [ 2309.977267][T16566] usb 4-1: Manufacturer: syz [ 2309.977285][T16566] usb 4-1: SerialNumber: syz [ 2310.198231][T30377] gspca_main: sunplus-2.14.0 probing 08ca:2016 [ 2310.202674][T30377] gspca_sunplus: reg_w_riv err -71 [ 2310.202737][T30377] sunplus 1-1:4.4: probe with driver sunplus failed with error -71 [ 2310.240226][T30377] usb 1-1: USB disconnect, device number 31 [ 2310.622546][ T10] usb 5-1: new full-speed USB device number 61 using dummy_hcd [ 2310.775801][ T10] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2310.779290][ T10] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 2310.779317][ T10] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2310.779347][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2310.779381][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2310.779403][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 2310.779418][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2310.779449][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2310.781378][ T10] usb 5-1: config 0 descriptor?? [ 2310.803050][ T5144] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2311.034527][ T10] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 61 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2311.175004][ T31] audit: type=1400 audit(1790261124.542:20068): avc: denied { read write } for pid=5143 comm="syz.4.6853" name="lp0" dev="devtmpfs" ino=7288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 2311.175056][ T31] audit: type=1400 audit(1790261124.542:20069): avc: denied { open } for pid=5143 comm="syz.4.6853" path="/dev/usb/lp0" dev="devtmpfs" ino=7288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 2311.175092][ C0] usblp0: nonzero read bulk status received: -71 [ 2311.176172][ T10] usb 5-1: USB disconnect, device number 61 [ 2311.239464][ T10] usblp0: removed [ 2312.728410][T30377] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 2312.759322][T16566] gspca_main: sunplus-2.14.0 probing 08ca:2016 [ 2312.761436][T16566] gspca_sunplus: reg_w_riv err -71 [ 2312.761482][T16566] sunplus 4-1:4.4: probe with driver sunplus failed with error -71 [ 2313.076808][T16566] usb 4-1: USB disconnect, device number 54 [ 2313.142422][T30377] usb 1-1: Using ep0 maxpacket: 8 [ 2313.144280][T30377] usb 1-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 2313.148541][T30377] usb 1-1: too many endpoints for config 0 interface 0 altsetting 5: 34, using maximum allowed: 30 [ 2313.148573][T30377] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2313.148587][T30377] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 2313.148613][T30377] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2313.148639][T30377] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2313.249139][T30377] usb 1-1: config 0 descriptor?? [ 2313.608287][ T5153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2313.608595][ T5153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2313.884135][ T5178] FAULT_INJECTION: forcing a failure. [ 2313.884135][ T5178] name failslab, interval 1, probability 0, space 0, times 0 [ 2313.884178][ T5178] CPU: 0 UID: 0 PID: 5178 Comm: syz.3.6860 Tainted: G L syzkaller #0 PREEMPT(full) [ 2313.884202][ T5178] Tainted: [L]=SOFTLOCKUP [ 2313.884207][ T5178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 2313.884214][ T5178] Call Trace: [ 2313.884219][ T5178] [ 2313.884224][ T5178] dump_stack_lvl+0x100/0x190 [ 2313.884245][ T5178] should_fail_ex.cold+0x5/0xa [ 2313.884262][ T5178] should_failslab+0xc2/0x120 [ 2313.884278][ T5178] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 2313.884293][ T5178] ? sock_alloc_inode+0x26/0x2c0 [ 2313.884312][ T5178] ? __pfx_sock_alloc_inode+0x10/0x10 [ 2313.884328][ T5178] sock_alloc_inode+0x26/0x2c0 [ 2313.884344][ T5178] ? __pfx_sock_alloc_inode+0x10/0x10 [ 2313.884360][ T5178] alloc_inode+0x68/0x250 [ 2313.884371][ T5178] sock_alloc+0x44/0x280 [ 2313.884386][ T5178] ? security_socket_create+0x7f/0x250 [ 2313.884398][ T5178] __sock_create+0xc2/0x860 [ 2313.884410][ T5178] __sys_socket+0x14d/0x260 [ 2313.884421][ T5178] ? __pfx___sys_socket+0x10/0x10 [ 2313.884436][ T5178] __x64_sys_socket+0x72/0xb0 [ 2313.884447][ T5178] ? lockdep_hardirqs_on+0x7d/0x110 [ 2313.884464][ T5178] do_syscall_64+0x123/0x790 [ 2313.884481][ T5178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2313.884494][ T5178] RIP: 0033:0x7f1f0719e159 [ 2313.884504][ T5178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2313.884515][ T5178] RSP: 002b:00007f1f080ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2313.884526][ T5178] RAX: ffffffffffffffda RBX: 00007f1f07425fa0 RCX: 00007f1f0719e159 [ 2313.884533][ T5178] RDX: 0000000000000000 RSI: 0000000000000805 RDI: 000000000000002b [ 2313.884540][ T5178] RBP: 00007f1f0723506b R08: 0000000000000000 R09: 0000000000000000 [ 2313.884547][ T5178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2313.884553][ T5178] R13: 00007f1f07426038 R14: 00007f1f07425fa0 R15: 00007fffcbabf1e8 [ 2313.884568][ T5178] [ 2313.884608][ T5178] socket: no more sockets [ 2313.892475][T30377] usbhid 1-1:0.0: can't add hid device: -71 [ 2313.892558][T30377] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2314.040365][T30377] usb 1-1: USB disconnect, device number 32 [ 2314.224978][T16566] usb 9-1: new full-speed USB device number 48 using dummy_hcd [ 2314.499654][T16566] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2314.516746][T16566] usb 9-1: config 1 has an invalid interface number: 128 but max is 1 [ 2314.516772][T16566] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2314.516784][T16566] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2314.516805][T16566] usb 9-1: config 1 has no interface number 0 [ 2314.516822][T16566] usb 9-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2314.517776][ T5183] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 2314.518612][T16566] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2314.518626][T16566] usb 9-1: Product: syz [ 2314.518644][T16566] usb 9-1: Manufacturer: syz [ 2314.518653][T16566] usb 9-1: SerialNumber: syz [ 2315.697877][T16566] cdc_wdm 9-1:1.128: skipping garbage [ 2315.697905][T16566] cdc_wdm 9-1:1.128: probe with driver cdc_wdm failed with error -22 [ 2317.151352][T30377] usb 9-1: USB disconnect, device number 48 [ 2317.422502][T16566] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 2317.541692][ T5201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6867'. [ 2317.578295][T16566] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2317.578331][T16566] usb 5-1: New USB device found, idVendor=08ca, idProduct=2016, bcdDevice=f7.ed [ 2317.579111][T16566] usb 5-1: config 4 has an invalid interface number: 4 but max is 0 [ 2317.579135][T16566] usb 5-1: config 4 has no interface number 0 [ 2317.579150][T16566] usb 5-1: config 4 interface 4 has no altsetting 0 [ 2317.581733][T16566] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2317.581756][T16566] usb 5-1: Product: syz [ 2317.581765][T16566] usb 5-1: Manufacturer: syz [ 2317.581773][T16566] usb 5-1: SerialNumber: syz [ 2317.672598][ T5201] batman_adv: batadv0: Adding interface: syzkaller0 [ 2317.672610][ T5201] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2317.672655][ T5201] batman_adv: batadv0: Interface activated: syzkaller0 [ 2317.738494][ T31] audit: type=1400 audit(1790261131.102:20070): avc: denied { connect } for pid=5200 comm="syz.0.6867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2318.511738][ T5211] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6869'. [ 2319.156084][T16566] gspca_main: sunplus-2.14.0 probing 08ca:2016 [ 2319.158799][T16566] gspca_sunplus: reg_w_riv err -71 [ 2319.158845][T16566] sunplus 5-1:4.4: probe with driver sunplus failed with error -71 [ 2319.364911][ T5210] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6870'. [ 2319.449542][T16566] usb 5-1: USB disconnect, device number 62 [ 2319.463821][ T5200] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 2319.777673][ T5200] batman_adv: batadv0: Removing interface: syzkaller0 [ 2319.956831][ T5204] Bluetooth: hci0: command 0x0406 tx timeout [ 2321.231287][ T31] audit: type=1400 audit(1790261134.572:20071): avc: denied { create } for pid=5215 comm="syz.3.6872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2321.231337][ T31] audit: type=1400 audit(1790261134.592:20072): avc: denied { connect } for pid=5215 comm="syz.3.6872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2321.231369][ T31] audit: type=1400 audit(1790261134.592:20073): avc: denied { write } for pid=5215 comm="syz.3.6872" lport=6731 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2321.505514][ T5221] FAULT_INJECTION: forcing a failure. [ 2321.505514][ T5221] name failslab, interval 1, probability 0, space 0, times 0 [ 2321.505542][ T5221] CPU: 0 UID: 0 PID: 5221 Comm: syz.4.6873 Tainted: G L syzkaller #0 PREEMPT(full) [ 2321.505560][ T5221] Tainted: [L]=SOFTLOCKUP [ 2321.505564][ T5221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 2321.505571][ T5221] Call Trace: [ 2321.505576][ T5221] [ 2321.505581][ T5221] dump_stack_lvl+0x100/0x190 [ 2321.505601][ T5221] should_fail_ex.cold+0x5/0xa [ 2321.505616][ T5221] should_failslab+0xc2/0x120 [ 2321.505633][ T5221] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 2321.505648][ T5221] ? sock_alloc_inode+0x26/0x2c0 [ 2321.505665][ T5221] ? __pfx_sock_alloc_inode+0x10/0x10 [ 2321.505682][ T5221] sock_alloc_inode+0x26/0x2c0 [ 2321.505698][ T5221] ? __pfx_sock_alloc_inode+0x10/0x10 [ 2321.505714][ T5221] alloc_inode+0x68/0x250 [ 2321.505725][ T5221] sock_alloc+0x44/0x280 [ 2321.505739][ T5221] ? security_socket_create+0x7f/0x250 [ 2321.505752][ T5221] __sock_create+0xc2/0x860 [ 2321.505765][ T5221] __sys_socket+0x14d/0x260 [ 2321.505777][ T5221] ? __pfx___sys_socket+0x10/0x10 [ 2321.505792][ T5221] __x64_sys_socket+0x72/0xb0 [ 2321.505803][ T5221] ? lockdep_hardirqs_on+0x7d/0x110 [ 2321.505819][ T5221] do_syscall_64+0x123/0x790 [ 2321.505838][ T5221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2321.505849][ T5221] RIP: 0033:0x7fca8779e159 [ 2321.505859][ T5221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2321.505869][ T5221] RSP: 002b:00007fca8873b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2321.505881][ T5221] RAX: ffffffffffffffda RBX: 00007fca87a25fa0 RCX: 00007fca8779e159 [ 2321.505888][ T5221] RDX: 0000000000000000 RSI: 0000000000000805 RDI: 000000000000002b [ 2321.505896][ T5221] RBP: 00007fca8783506b R08: 0000000000000000 R09: 0000000000000000 [ 2321.505903][ T5221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2321.505910][ T5221] R13: 00007fca87a26038 R14: 00007fca87a25fa0 R15: 00007fffbcd0b9f8 [ 2321.505925][ T5221] [ 2321.505953][ T5221] socket: no more sockets [ 2321.934496][ T31] audit: type=1400 audit(1790261135.302:20074): avc: denied { ioctl } for pid=5231 comm="syz-executor" path="socket:[157941]" dev="sockfs" ino=157941 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2321.935606][ T1523] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2321.941249][ T1523] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2321.973157][ T1523] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2322.005475][ T1523] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2322.006010][ T1523] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2322.067796][ T31] audit: type=1400 audit(1790261135.432:20075): avc: denied { mounton } for pid=5231 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 2322.203984][ T31] audit: type=1400 audit(1790261135.572:20076): avc: denied { connect } for pid=5236 comm="syz.4.6878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2322.238366][ T31] audit: type=1400 audit(1790261135.602:20077): avc: denied { ioctl } for pid=5236 comm="syz.4.6878" path="socket:[158007]" dev="sockfs" ino=158007 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2322.454484][ T5243] netlink: 100 bytes leftover after parsing attributes in process `syz.8.6880'. [ 2322.454535][ T5243] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6880'. [ 2322.542521][ T10] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 2322.574409][T16566] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 2322.696570][ T10] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 2322.700173][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2322.731010][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 2322.731026][ T10] usb 4-1: Product: syz [ 2322.731044][ T10] usb 4-1: Manufacturer: syz [ 2322.742679][T16566] usb 1-1: Using ep0 maxpacket: 8 [ 2322.747364][T16566] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2322.779840][T16566] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 2322.779867][T16566] usb 1-1: config 179 has no interface number 0 [ 2322.779886][T16566] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2322.779911][T16566] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2322.779935][T16566] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2322.779949][T16566] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2322.779973][T16566] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2322.780003][T16566] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2322.812817][T30377] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 2322.894880][ T5240] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 2322.915542][ T10] usb 4-1: selecting invalid altsetting 1 [ 2322.920660][ T10] dvb_ttusb_budget: ttusb_init_controller: error [ 2322.920680][ T10] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 2322.985141][T30377] usb 5-1: Using ep0 maxpacket: 8 [ 2322.987572][T30377] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2322.988657][T30377] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 2322.988681][T30377] usb 5-1: config 179 has no interface number 0 [ 2322.988711][T30377] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2322.988735][T30377] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2322.988787][T30377] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2322.988811][T30377] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2322.988836][T30377] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2322.988866][T30377] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2323.178224][ T5245] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 2323.330889][T30377] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input58 [ 2323.517776][ T5240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2323.518498][ T5240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2323.810655][ T10] DVB: Unable to find symbol cx22700_attach() [ 2324.082550][ T5204] Bluetooth: hci5: command tx timeout [ 2324.118451][T30377] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 2324.118854][ T5825] usb 1-1: USB disconnect, device number 33 [ 2324.118938][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2324.118961][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2324.279452][ T5259] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6881'. [ 2324.300350][ T10] DVB: Unable to find symbol tda10046_attach() [ 2324.300361][ T10] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 2324.342479][T30377] usb 9-1: Using ep0 maxpacket: 16 [ 2324.345031][T30377] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 2324.369014][T30377] usb 9-1: config 0 has an invalid interface number: 41 but max is 0 [ 2324.369079][T30377] usb 9-1: config 0 has no interface number 0 [ 2324.369109][T30377] usb 9-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2324.369133][T30377] usb 9-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 2324.369147][T30377] usb 9-1: config 0 interface 41 has no altsetting 0 [ 2324.373238][ T5259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2324.385858][ T5259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2324.489659][T30377] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2324.489724][T30377] usb 9-1: Product: syz [ 2324.489733][T30377] usb 9-1: Manufacturer: syz [ 2324.489751][T30377] usb 9-1: SerialNumber: syz [ 2324.554584][T30377] usb 9-1: config 0 descriptor?? [ 2324.574192][ T5253] raw-gadget.4 gadget.8: fail, usb_ep_enable returned -22 [ 2324.575132][ T5253] raw-gadget.4 gadget.8: fail, usb_ep_enable returned -22 [ 2324.950476][ T5253] raw-gadget.4 gadget.8: fail, usb_ep_enable returned -22 [ 2324.950562][ T5253] raw-gadget.4 gadget.8: fail, usb_ep_enable returned -22 [ 2325.083660][ T5230] dvb_ttusb_budget: failed urb submission (0: err = -2)! [ 2325.124701][ T5825] usb 5-1: USB disconnect, device number 63 [ 2325.124735][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2325.124760][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2325.176235][ T10] usb 4-1: USB disconnect, device number 55 [ 2325.210947][ T5270] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 2325.552694][T16566] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 2325.608013][T30377] sr9700 9-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 2325.634589][T30377] usb 9-1: USB disconnect, device number 49 [ 2325.706945][T16566] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2325.706989][T16566] usb 1-1: New USB device found, idVendor=08ca, idProduct=2016, bcdDevice=f7.ed [ 2325.730493][T16566] usb 1-1: config 4 has an invalid interface number: 4 but max is 0 [ 2325.730524][T16566] usb 1-1: config 4 has no interface number 0 [ 2325.730549][T16566] usb 1-1: config 4 interface 4 has no altsetting 0 [ 2325.764205][T16566] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2325.764221][T16566] usb 1-1: Product: syz [ 2325.764239][T16566] usb 1-1: Manufacturer: syz [ 2325.764248][T16566] usb 1-1: SerialNumber: syz [ 2326.164091][ T5204] Bluetooth: hci5: command tx timeout [ 2326.547326][T16566] gspca_main: sunplus-2.14.0 probing 08ca:2016 [ 2326.547958][T16566] gspca_sunplus: reg_w_riv err -71 [ 2326.548011][T16566] sunplus 1-1:4.4: probe with driver sunplus failed with error -71 [ 2326.581271][T16566] usb 1-1: USB disconnect, device number 34 [ 2326.864171][ T5231] bridge0: port 1(bridge_slave_0) entered blocking state [ 2326.864267][ T5231] bridge0: port 1(bridge_slave_0) entered disabled state [ 2326.864435][ T5231] bridge_slave_0: entered allmulticast mode [ 2326.870196][ T5231] bridge_slave_0: entered promiscuous mode [ 2326.908333][ T5231] bridge0: port 2(bridge_slave_1) entered blocking state [ 2326.908386][ T5231] bridge0: port 2(bridge_slave_1) entered disabled state [ 2326.908476][ T5231] bridge_slave_1: entered allmulticast mode [ 2326.940690][ T5231] bridge_slave_1: entered promiscuous mode [ 2326.962453][T30377] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 2327.026928][ T5288] FAULT_INJECTION: forcing a failure. [ 2327.026928][ T5288] name failslab, interval 1, probability 0, space 0, times 0 [ 2327.026960][ T5288] CPU: 0 UID: 0 PID: 5288 Comm: syz.0.6887 Tainted: G L syzkaller #0 PREEMPT(full) [ 2327.026977][ T5288] Tainted: [L]=SOFTLOCKUP [ 2327.026984][ T5288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 2327.026991][ T5288] Call Trace: [ 2327.026996][ T5288] [ 2327.027001][ T5288] dump_stack_lvl+0x100/0x190 [ 2327.027023][ T5288] should_fail_ex.cold+0x5/0xa [ 2327.027040][ T5288] should_failslab+0xc2/0x120 [ 2327.027056][ T5288] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 2327.027070][ T5288] ? sock_alloc_inode+0x26/0x2c0 [ 2327.027087][ T5288] ? __pfx_sock_alloc_inode+0x10/0x10 [ 2327.027104][ T5288] sock_alloc_inode+0x26/0x2c0 [ 2327.027119][ T5288] ? __pfx_sock_alloc_inode+0x10/0x10 [ 2327.027136][ T5288] alloc_inode+0x68/0x250 [ 2327.027148][ T5288] sock_alloc+0x44/0x280 [ 2327.027163][ T5288] ? security_socket_create+0x7f/0x250 [ 2327.027175][ T5288] __sock_create+0xc2/0x860 [ 2327.027188][ T5288] __sys_socket+0x14d/0x260 [ 2327.027199][ T5288] ? __pfx___sys_socket+0x10/0x10 [ 2327.027214][ T5288] __x64_sys_socket+0x72/0xb0 [ 2327.027224][ T5288] ? lockdep_hardirqs_on+0x7d/0x110 [ 2327.027241][ T5288] do_syscall_64+0x123/0x790 [ 2327.027259][ T5288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2327.027270][ T5288] RIP: 0033:0x7fbe0e79e159 [ 2327.027280][ T5288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2327.027290][ T5288] RSP: 002b:00007fbe0f60b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2327.027301][ T5288] RAX: ffffffffffffffda RBX: 00007fbe0ea25fa0 RCX: 00007fbe0e79e159 [ 2327.027309][ T5288] RDX: 0000000000000000 RSI: 0000000000000805 RDI: 000000000000002b [ 2327.027316][ T5288] RBP: 00007fbe0e83506b R08: 0000000000000000 R09: 0000000000000000 [ 2327.027323][ T5288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2327.027330][ T5288] R13: 00007fbe0ea26038 R14: 00007fbe0ea25fa0 R15: 00007ffc4ca34278 [ 2327.027345][ T5288] [ 2327.027380][ T5288] socket: no more sockets [ 2327.172689][T30377] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2327.172727][T30377] usb 4-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice= 0.40 [ 2327.322935][T30377] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 129, changing to 11 [ 2327.322965][T30377] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 2327.331715][T30377] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2327.331741][T30377] usb 4-1: Product: syz [ 2327.331750][T30377] usb 4-1: Manufacturer: syz [ 2327.331758][T30377] usb 4-1: SerialNumber: syz [ 2327.408152][ T5283] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2327.499994][ T5231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2327.574497][ T5231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2327.651341][T30377] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2327.682453][ T10] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 2327.764070][ T5231] team0: Port device team_slave_0 added [ 2327.783866][T30377] usb 4-1: USB disconnect, device number 56 [ 2327.833481][ T10] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 2327.836662][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2327.842619][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 2327.842646][ T10] usb 5-1: Product: syz [ 2327.842655][ T10] usb 5-1: Manufacturer: syz [ 2327.899547][ T4930] udevd[4930]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2327.946554][T16566] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 2327.975796][ T10] usb 5-1: selecting invalid altsetting 1 [ 2327.975886][ T10] dvb_ttusb_budget: ttusb_init_controller: error [ 2327.975893][ T10] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 2328.048823][ T5231] team0: Port device team_slave_1 added [ 2328.115852][T16566] usb 1-1: Using ep0 maxpacket: 32 [ 2328.129075][T16566] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2328.129112][T16566] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2328.140401][T16566] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2328.140445][T16566] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2328.140488][T16566] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2328.140512][T16566] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 18123, setting to 1024 [ 2328.216387][T16566] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2328.216414][T16566] usb 1-1: Product: syz [ 2328.216422][T16566] usb 1-1: Manufacturer: syz [ 2328.216440][T16566] usb 1-1: SerialNumber: syz [ 2328.246787][ T5204] Bluetooth: hci5: command tx timeout [ 2328.341139][ T10] DVB: Unable to find symbol cx22700_attach() [ 2328.373843][ T5231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2328.373864][ T5231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2328.373878][ T5231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2328.504169][ T5231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2328.504190][ T5231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2328.504204][ T5231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2328.636111][ T10] DVB: Unable to find symbol tda10046_attach() [ 2328.636123][ T10] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 2328.637860][ T10] usb 5-1: USB disconnect, device number 64 [ 2328.737251][ T31] audit: type=1400 audit(1790261142.092:20078): avc: denied { bind } for pid=5291 comm="syz.0.6888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2328.840730][ T5298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2328.841039][ T5298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2329.141112][T16566] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 2329.141644][T16566] usb 1-1: 0:2 : does not exist [ 2329.237193][ T5231] hsr_slave_0: entered promiscuous mode [ 2329.248841][ T5231] hsr_slave_1: entered promiscuous mode [ 2329.249265][ T5231] debugfs: 'hsr0' already exists in 'hsr' [ 2329.249285][ T5231] Cannot create hsr debugfs directory [ 2329.265161][ T10] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 2329.297684][T16566] usb 1-1: USB disconnect, device number 35 [ 2329.426042][ T10] usb 9-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 2329.427480][ T10] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2329.428648][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 2329.428671][ T10] usb 9-1: Product: syz [ 2329.428680][ T10] usb 9-1: Manufacturer: syz [ 2329.496786][ T4983] udevd[4983]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2329.525250][ T10] usb 9-1: selecting invalid altsetting 1 [ 2329.581694][ T10] dvb_ttusb_budget: ttusb_init_controller: error [ 2329.581706][ T10] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 2329.816231][ T10] DVB: Unable to find symbol cx22700_attach() [ 2329.860362][ T5285] dvb_ttusb_budget: failed urb submission (0: err = -2)! [ 2329.950937][ T5310] netlink: 100 bytes leftover after parsing attributes in process `syz.4.6891'. [ 2329.950976][ T5310] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6891'. [ 2329.976233][ T10] DVB: Unable to find symbol tda10046_attach() [ 2329.976243][ T10] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 2329.979934][ T10] usb 9-1: USB disconnect, device number 50 [ 2330.189007][ T5312] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6892'. [ 2330.265831][ T5313] xt_connbytes: Forcing CT accounting to be enabled [ 2330.323131][ T5204] Bluetooth: hci5: command tx timeout [ 2330.417071][ T2116] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2330.417093][ T2116] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2330.635804][ T5317] netlink: 'syz.0.6893': attribute type 5 has an invalid length. [ 2330.983439][ T5324] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 2331.048862][ T2116] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2331.048893][ T2116] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2331.151249][ T5326] FAULT_INJECTION: forcing a failure. [ 2331.151249][ T5326] name failslab, interval 1, probability 0, space 0, times 0 [ 2331.151285][ T5326] CPU: 0 UID: 0 PID: 5326 Comm: syz.0.6897 Tainted: G L syzkaller #0 PREEMPT(full) [ 2331.151302][ T5326] Tainted: [L]=SOFTLOCKUP [ 2331.151307][ T5326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 2331.151313][ T5326] Call Trace: [ 2331.151318][ T5326] [ 2331.151323][ T5326] dump_stack_lvl+0x100/0x190 [ 2331.151343][ T5326] should_fail_ex.cold+0x5/0xa [ 2331.151361][ T5326] should_failslab+0xc2/0x120 [ 2331.151378][ T5326] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 2331.151391][ T5326] ? sock_alloc_inode+0x26/0x2c0 [ 2331.151409][ T5326] ? __pfx_sock_alloc_inode+0x10/0x10 [ 2331.151428][ T5326] sock_alloc_inode+0x26/0x2c0 [ 2331.151451][ T5326] ? __pfx_sock_alloc_inode+0x10/0x10 [ 2331.151468][ T5326] alloc_inode+0x68/0x250 [ 2331.151480][ T5326] sock_alloc+0x44/0x280 [ 2331.151496][ T5326] ? security_socket_create+0x7f/0x250 [ 2331.151509][ T5326] __sock_create+0xc2/0x860 [ 2331.151523][ T5326] __sys_socket+0x14d/0x260 [ 2331.151535][ T5326] ? __pfx___sys_socket+0x10/0x10 [ 2331.151551][ T5326] __x64_sys_socket+0x72/0xb0 [ 2331.151562][ T5326] ? lockdep_hardirqs_on+0x7d/0x110 [ 2331.151578][ T5326] do_syscall_64+0x123/0x790 [ 2331.151596][ T5326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2331.151608][ T5326] RIP: 0033:0x7fbe0e79e159 [ 2331.151618][ T5326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2331.151628][ T5326] RSP: 002b:00007fbe0f60b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2331.151639][ T5326] RAX: ffffffffffffffda RBX: 00007fbe0ea25fa0 RCX: 00007fbe0e79e159 [ 2331.151647][ T5326] RDX: 0000000000000000 RSI: 0000000000000805 RDI: 000000000000002b [ 2331.151655][ T5326] RBP: 00007fbe0e83506b R08: 0000000000000000 R09: 0000000000000000 [ 2331.151663][ T5326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2331.151670][ T5326] R13: 00007fbe0ea26038 R14: 00007fbe0ea25fa0 R15: 00007ffc4ca34278 [ 2331.151685][ T5326] [ 2331.151721][ T5326] socket: no more sockets [ 2332.776082][ T2116] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2332.776115][ T2116] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2332.909195][ T5339] netlink: 100 bytes leftover after parsing attributes in process `syz.3.6901'. [ 2332.909232][ T5339] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6901'. [ 2332.953017][ T5331] netlink: 'syz.8.6899': attribute type 4 has an invalid length. [ 2332.953768][ T5331] netlink: 'syz.8.6899': attribute type 50 has an invalid length. [ 2333.166119][ T2116] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2333.166150][ T2116] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2333.320382][ T31] audit: type=1400 audit(1790261146.682:20079): avc: denied { watch_mount } for pid=5344 comm="syz.8.6903" path="/292/file1" dev="tmpfs" ino=1661 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2333.358036][ T31] audit: type=1400 audit(1790261146.722:20080): avc: denied { getopt } for pid=5346 comm="syz.0.6904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2333.667142][ T5356] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6903'. [ 2333.667168][ T5356] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6903'. [ 2333.703835][ T5357] FAULT_INJECTION: forcing a failure. [ 2333.703835][ T5357] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2333.703858][ T5357] CPU: 0 UID: 0 PID: 5357 Comm: syz.3.6908 Tainted: G L syzkaller #0 PREEMPT(full) [ 2333.703876][ T5357] Tainted: [L]=SOFTLOCKUP [ 2333.703880][ T5357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 2333.703888][ T5357] Call Trace: [ 2333.703892][ T5357] [ 2333.703898][ T5357] dump_stack_lvl+0x100/0x190 [ 2333.703921][ T5357] should_fail_ex.cold+0x5/0xa [ 2333.703935][ T5357] ? prepare_alloc_pages+0x16d/0x5b0 [ 2333.703953][ T5357] should_fail_alloc_page+0xeb/0x140 [ 2333.703971][ T5357] prepare_alloc_pages+0x1f0/0x5b0 [ 2333.703989][ T5357] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 2333.704003][ T5357] ? lock_acquire+0x1d1/0x380 [ 2333.704016][ T5357] ? is_bpf_text_address+0x25/0x1a0 [ 2333.704032][ T5357] ? find_held_lock+0x2b/0x80 [ 2333.704048][ T5357] ? is_bpf_text_address+0x8a/0x1a0 [ 2333.704062][ T5357] ? is_bpf_text_address+0x8a/0x1a0 [ 2333.704077][ T5357] ? bpf_ksym_find+0x128/0x1c0 [ 2333.704094][ T5357] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2333.704105][ T5357] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2333.704116][ T5357] ? is_bpf_text_address+0x94/0x1a0 [ 2333.704132][ T5357] ? __kernel_text_address+0xd/0x30 [ 2333.704149][ T5357] ? unwind_get_return_address+0x59/0xa0 [ 2333.704166][ T5357] ? arch_stack_walk+0xa6/0xf0 [ 2333.704186][ T5357] ? __pfx_stack_trace_save+0x10/0x10 [ 2333.704197][ T5357] ? stack_depot_save_flags+0x27/0x9f0 [ 2333.704214][ T5357] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2333.704228][ T5357] ? policy_nodemask+0xed/0x4f0 [ 2333.704244][ T5357] alloc_pages_mpol+0x201/0x550 [ 2333.704260][ T5357] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 2333.704279][ T5357] alloc_pages_noprof+0x1a/0x160 [ 2333.704296][ T5357] get_free_pages_noprof+0x10/0xb0 [ 2333.704310][ T5357] __kasan_populate_vmalloc+0xa0/0x210 [ 2333.704327][ T5357] alloc_vmap_area+0x95d/0x2bb0 [ 2333.704345][ T5357] ? kasan_save_track+0x14/0x30 [ 2333.704357][ T5357] ? __kasan_kmalloc+0xaa/0xb0 [ 2333.704370][ T5357] ? __pfx_alloc_vmap_area+0x10/0x10 [ 2333.704384][ T5357] ? __get_vm_area_node+0x124/0x350 [ 2333.704399][ T5357] __get_vm_area_node+0x1ed/0x350 [ 2333.704423][ T5357] __vmalloc_node_range_noprof+0x268/0x1420 [ 2333.704440][ T5357] ? bpf_check+0x17fb/0xa980 [ 2333.704460][ T5357] ? bpf_check+0x17fb/0xa980 [ 2333.704478][ T5357] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2333.704496][ T5357] ? avc_has_perm_noaudit+0x145/0x470 [ 2333.704516][ T5357] ? bpf_check+0x17fb/0xa980 [ 2333.704530][ T5357] __vmalloc_node_noprof+0xad/0xf0 [ 2333.704545][ T5357] ? bpf_check+0x17fb/0xa980 [ 2333.704561][ T5357] __vmalloc_noprof+0xa3/0x120 [ 2333.704576][ T5357] ? __pfx___vmalloc_noprof+0x10/0x10 [ 2333.704593][ T5357] ? bpf_lsm_bpf_prog_load+0x9/0x10 [ 2333.704609][ T5357] ? security_bpf_prog_load+0x10f/0x2f0 [ 2333.704621][ T5357] ? bpf_vlog_init+0x118/0x150 [ 2333.704638][ T5357] bpf_check+0x17fb/0xa980 [ 2333.704653][ T5357] ? __css_rstat_updated+0x1ce/0x590 [ 2333.704666][ T5357] ? __lock_acquire+0x5c0/0x1f40 [ 2333.704678][ T5357] ? __pfx___css_rstat_updated+0x10/0x10 [ 2333.704691][ T5357] ? lockdep_hardirqs_on+0x7d/0x110 [ 2333.704712][ T5357] ? __lock_acquire+0x5c0/0x1f40 [ 2333.704728][ T5357] ? __pfx_bpf_check+0x10/0x10 [ 2333.704743][ T5357] ? lock_acquire+0x1d1/0x380 [ 2333.704754][ T5357] ? bpf_prog_load+0x1a09/0x2a80 [ 2333.704769][ T5357] ? find_held_lock+0x2b/0x80 [ 2333.704785][ T5357] ? bpf_prog_load+0x1a09/0x2a80 [ 2333.704803][ T5357] ? __asan_memset+0x23/0x50 [ 2333.704817][ T5357] ? bpf_prog_load+0x1ac3/0x2a80 [ 2333.704832][ T5357] bpf_prog_load+0x1ac3/0x2a80 [ 2333.704850][ T5357] ? __pfx_bpf_prog_load+0x10/0x10 [ 2333.704877][ T5357] __sys_bpf+0x1f46/0x4a30 [ 2333.704891][ T5357] ? __pfx___sys_bpf+0x10/0x10 [ 2333.704901][ T5357] ? find_held_lock+0x2b/0x80 [ 2333.704916][ T5357] ? futex_wake+0x4ea/0x5e0 [ 2333.704937][ T5357] ? do_vfs_ioctl+0x226/0x13e0 [ 2333.704956][ T5357] ? __x64_sys_futex+0x34f/0x4d0 [ 2333.704971][ T5357] ? __x64_sys_futex+0x358/0x4d0 [ 2333.704987][ T5357] ? xfd_validate_state+0x129/0x190 [ 2333.705002][ T5357] ? __x64_sys_bpf+0xce/0x140 [ 2333.705012][ T5357] __x64_sys_bpf+0xce/0x140 [ 2333.705024][ T5357] ? do_syscall_64+0xae/0x790 [ 2333.705041][ T5357] do_syscall_64+0x123/0x790 [ 2333.705059][ T5357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2333.705070][ T5357] RIP: 0033:0x7f1f0719e159 [ 2333.705080][ T5357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2333.705091][ T5357] RSP: 002b:00007f1f080ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2333.705103][ T5357] RAX: ffffffffffffffda RBX: 00007f1f07425fa0 RCX: 00007f1f0719e159 [ 2333.705110][ T5357] RDX: 0000000000000094 RSI: 00002000000004c0 RDI: 0000000000000005 [ 2333.705117][ T5357] RBP: 00007f1f0723506b R08: 0000000000000000 R09: 0000000000000000 [ 2333.705123][ T5357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2333.705130][ T5357] R13: 00007f1f07426038 R14: 00007f1f07425fa0 R15: 00007fffcbabf1e8 [ 2333.705144][ T5357] [ 2333.705242][ T5357] syz.3.6908: vmalloc error: size 5712, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2333.705295][ T5357] CPU: 0 UID: 0 PID: 5357 Comm: syz.3.6908 Tainted: G L syzkaller #0 PREEMPT(full) [ 2333.705312][ T5357] Tainted: [L]=SOFTLOCKUP [ 2333.705317][ T5357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 2333.705324][ T5357] Call Trace: [ 2333.705328][ T5357] [ 2333.705333][ T5357] dump_stack_lvl+0x100/0x190 [ 2333.705350][ T5357] warn_alloc.cold+0x9e/0xb2 [ 2333.705365][ T5357] ? __pfx_warn_alloc+0x10/0x10 [ 2333.705375][ T5357] ? lockdep_hardirqs_on+0x7d/0x110 [ 2333.705394][ T5357] ? __get_vm_area_node+0x2f0/0x350 [ 2333.705417][ T5357] ? __get_vm_area_node+0x22b/0x350 [ 2333.705434][ T5357] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 2333.705456][ T5357] ? bpf_check+0x17fb/0xa980 [ 2333.705475][ T5357] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2333.705494][ T5357] ? avc_has_perm_noaudit+0x145/0x470 [ 2333.705512][ T5357] ? bpf_check+0x17fb/0xa980 [ 2333.705527][ T5357] __vmalloc_node_noprof+0xad/0xf0 [ 2333.705542][ T5357] ? bpf_check+0x17fb/0xa980 [ 2333.705558][ T5357] __vmalloc_noprof+0xa3/0x120 [ 2333.705573][ T5357] ? __pfx___vmalloc_noprof+0x10/0x10 [ 2333.705590][ T5357] ? bpf_lsm_bpf_prog_load+0x9/0x10 [ 2333.705606][ T5357] ? security_bpf_prog_load+0x10f/0x2f0 [ 2333.705618][ T5357] ? bpf_vlog_init+0x118/0x150 [ 2333.705635][ T5357] bpf_check+0x17fb/0xa980 [ 2333.705650][ T5357] ? __css_rstat_updated+0x1ce/0x590 [ 2333.705663][ T5357] ? __lock_acquire+0x5c0/0x1f40 [ 2333.705675][ T5357] ? __pfx___css_rstat_updated+0x10/0x10 [ 2333.705688][ T5357] ? lockdep_hardirqs_on+0x7d/0x110 [ 2333.705708][ T5357] ? __lock_acquire+0x5c0/0x1f40 [ 2333.705724][ T5357] ? __pfx_bpf_check+0x10/0x10 [ 2333.705738][ T5357] ? lock_acquire+0x1d1/0x380 [ 2333.705750][ T5357] ? bpf_prog_load+0x1a09/0x2a80 [ 2333.705764][ T5357] ? find_held_lock+0x2b/0x80 [ 2333.705779][ T5357] ? bpf_prog_load+0x1a09/0x2a80 [ 2333.705796][ T5357] ? __asan_memset+0x23/0x50 [ 2333.705810][ T5357] ? bpf_prog_load+0x1ac3/0x2a80 [ 2333.705824][ T5357] bpf_prog_load+0x1ac3/0x2a80 [ 2333.705842][ T5357] ? __pfx_bpf_prog_load+0x10/0x10 [ 2333.705868][ T5357] __sys_bpf+0x1f46/0x4a30 [ 2333.705882][ T5357] ? __pfx___sys_bpf+0x10/0x10 [ 2333.705893][ T5357] ? find_held_lock+0x2b/0x80 [ 2333.705907][ T5357] ? futex_wake+0x4ea/0x5e0 [ 2333.705928][ T5357] ? do_vfs_ioctl+0x226/0x13e0 [ 2333.705947][ T5357] ? __x64_sys_futex+0x34f/0x4d0 [ 2333.705962][ T5357] ? __x64_sys_futex+0x358/0x4d0 [ 2333.705978][ T5357] ? xfd_validate_state+0x129/0x190 [ 2333.705992][ T5357] ? __x64_sys_bpf+0xce/0x140 [ 2333.706003][ T5357] __x64_sys_bpf+0xce/0x140 [ 2333.706015][ T5357] ? do_syscall_64+0xae/0x790 [ 2333.706032][ T5357] do_syscall_64+0x123/0x790 [ 2333.706049][ T5357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2333.706061][ T5357] RIP: 0033:0x7f1f0719e159 [ 2333.706070][ T5357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2333.706080][ T5357] RSP: 002b:00007f1f080ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2333.706091][ T5357] RAX: ffffffffffffffda RBX: 00007f1f07425fa0 RCX: 00007f1f0719e159 [ 2333.706098][ T5357] RDX: 0000000000000094 RSI: 00002000000004c0 RDI: 0000000000000005 [ 2333.706105][ T5357] RBP: 00007f1f0723506b R08: 0000000000000000 R09: 0000000000000000 [ 2333.706111][ T5357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2333.706118][ T5357] R13: 00007f1f07426038 R14: 00007f1f07425fa0 R15: 00007fffcbabf1e8 [ 2333.706132][ T5357] [ 2333.744087][ T5357] Mem-Info: [ 2333.744096][ T5357] active_anon:28829 inactive_anon:1 isolated_anon:0 [ 2333.744096][ T5357] active_file:1645 inactive_file:70957 isolated_file:0 [ 2333.744096][ T5357] unevictable:0 dirty:363 writeback:0 [ 2333.744096][ T5357] slab_reclaimable:9727 slab_unreclaimable:110861 [ 2333.744096][ T5357] mapped:35525 shmem:17492 pagetables:1873 [ 2333.744096][ T5357] sec_pagetables:0 bounce:0 [ 2333.744096][ T5357] kernel_misc_reclaimable:0 [ 2333.744096][ T5357] free:1237094 free_pcp:9104 free_cma:0 [ 2333.744142][ T5357] Node 0 active_anon:115316kB inactive_anon:4kB active_file:6580kB inactive_file:283632kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:142100kB dirty:1452kB writeback:0kB shmem:69968kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14048kB pagetables:7368kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 2333.744183][ T5357] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 2333.744221][ T5357] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2333.744269][ T5357] lowmem_reserve[]: 0 2471 2471 2471 2471 [ 2333.744288][ T5357] Node 0 DMA32 free:985040kB boost:0kB min:33992kB low:42488kB high:50984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:115316kB inactive_anon:4kB active_file:6580kB inactive_file:283632kB unevictable:0kB writepending:1452kB zspages:0kB present:3129332kB managed:2530468kB mlocked:0kB bounce:0kB free_pcp:36416kB local_pcp:36416kB free_cma:0kB [ 2333.744335][ T5357] lowmem_reserve[]: 0 0 0 0 0 [ 2333.744352][ T5357] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:68kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2333.744390][ T5357] lowmem_reserve[]: 0 0 0 0 0 [ 2333.744421][ T5357] Node 1 Normal free:3947976kB boost:0kB min:55908kB low:69884kB high:83860kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2333.744468][ T5357] lowmem_reserve[]: 0 0 0 0 0 [ 2333.744485][ T5357] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2333.744576][ T5357] Node 0 DMA32: 4382*4kB (UME) 2219*8kB (UME) 1320*16kB (UME) 1152*32kB (UME) 564*64kB (UME) 463*128kB (UME) 229*256kB (UME) 131*512kB (UME) 59*1024kB (UME) 16*2048kB (UM) 141*4096kB (UM) = 985040kB [ 2333.744699][ T5357] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2333.744766][ T5357] Node 1 Normal: 3*4kB (UM) 3*8kB (UM) 11*16kB (UM) 9*32kB (UM) 14*64kB (UM) 3*128kB (UM) 3*256kB (UM) 4*512kB (UM) 3*1024kB (UM) 4*2048kB (UM) 960*4096kB (UM) = 3948020kB [ 2333.744874][ T5357] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2333.744892][ T5357] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 2333.744901][ T5357] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2333.744909][ T5357] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2333.744926][ T5357] 90091 total pagecache pages [ 2333.744931][ T5357] 1 pages in swap cache [ 2333.744934][ T5357] Free swap = 124992kB [ 2333.744938][ T5357] Total swap = 124996kB [ 2333.744942][ T5357] 2097051 pages RAM [ 2333.744946][ T5357] 0 pages HighMem/MovableOnly [ 2333.744959][ T5357] 432801 pages reserved [ 2333.744963][ T5357] 0 pages cma reserved [ 2335.269849][ T31] audit: type=1400 audit(1790261148.632:20081): avc: denied { create } for pid=5355 comm="syz.4.6906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 2335.309555][ T31] audit: type=1400 audit(1790261148.672:20082): avc: denied { ioctl } for pid=5355 comm="syz.4.6906" path="socket:[158785]" dev="sockfs" ino=158785 ioctlcmd=0x5865 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 2335.382622][ T2120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2335.391025][ T2120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2335.413830][ T31] audit: type=1400 audit(1790261148.782:20083): avc: denied { accept } for pid=5355 comm="syz.4.6906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 2335.444921][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2335.784512][ T31] audit: type=1326 audit(1790261149.152:20084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5370 comm="syz.3.6912" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0719e159 code=0x7ffc0000 [ 2335.784556][ T31] audit: type=1326 audit(1790261149.152:20085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5370 comm="syz.3.6912" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0719e159 code=0x7ffc0000 [ 2335.869132][ T31] audit: type=1326 audit(1790261149.232:20086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5370 comm="syz.3.6912" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f1f0719e159 code=0x7ffc0000 [ 2335.869182][ T31] audit: type=1326 audit(1790261149.232:20087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5370 comm="syz.3.6912" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0719e159 code=0x7ffc0000 [ 2335.869214][ T31] audit: type=1326 audit(1790261149.232:20088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5370 comm="syz.3.6912" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0719e159 code=0x7ffc0000 [ 2335.979396][ T31] audit: type=1326 audit(1790261149.342:20089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5370 comm="syz.3.6912" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f1f0719e159 code=0x7ffc0000 [ 2335.979450][ T31] audit: type=1326 audit(1790261149.342:20090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5370 comm="syz.3.6912" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0719e159 code=0x7ffc0000 [ 2336.072792][ T5374] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 2336.244429][ T5376] trusted_key: encrypted_key: insufficient parameters specified [ 2336.489045][ T5825] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 2336.645155][ T5825] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2336.645193][ T5825] usb 5-1: New USB device found, idVendor=08ca, idProduct=2016, bcdDevice=f7.ed [ 2336.647258][ T5825] usb 5-1: config 4 has an invalid interface number: 4 but max is 0 [ 2336.647283][ T5825] usb 5-1: config 4 has no interface number 0 [ 2336.647308][ T5825] usb 5-1: config 4 interface 4 has no altsetting 0 [ 2336.698273][ T5825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2336.698300][ T5825] usb 5-1: Product: syz [ 2336.698309][ T5825] usb 5-1: Manufacturer: syz [ 2336.698317][ T5825] usb 5-1: SerialNumber: syz [ 2336.839371][ T5384] FAULT_INJECTION: forcing a failure. [ 2336.839371][ T5384] name failslab, interval 1, probability 0, space 0, times 0 [ 2336.839412][ T5384] CPU: 0 UID: 0 PID: 5384 Comm: syz.0.6914 Tainted: G L syzkaller #0 PREEMPT(full) [ 2336.839430][ T5384] Tainted: [L]=SOFTLOCKUP [ 2336.839435][ T5384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 2336.839442][ T5384] Call Trace: [ 2336.839447][ T5384] [ 2336.839451][ T5384] dump_stack_lvl+0x100/0x190 [ 2336.839471][ T5384] should_fail_ex.cold+0x5/0xa [ 2336.839487][ T5384] should_failslab+0xc2/0x120 [ 2336.839503][ T5384] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 2336.839517][ T5384] ? sock_alloc_inode+0x26/0x2c0 [ 2336.839535][ T5384] ? __pfx_sock_alloc_inode+0x10/0x10 [ 2336.839551][ T5384] sock_alloc_inode+0x26/0x2c0 [ 2336.839567][ T5384] ? __pfx_sock_alloc_inode+0x10/0x10 [ 2336.839583][ T5384] alloc_inode+0x68/0x250 [ 2336.839594][ T5384] sock_alloc+0x44/0x280 [ 2336.839608][ T5384] ? security_socket_create+0x7f/0x250 [ 2336.839620][ T5384] __sock_create+0xc2/0x860 [ 2336.839633][ T5384] __sys_socket+0x14d/0x260 [ 2336.839644][ T5384] ? __pfx___sys_socket+0x10/0x10 [ 2336.839660][ T5384] __x64_sys_socket+0x72/0xb0 [ 2336.839670][ T5384] ? lockdep_hardirqs_on+0x7d/0x110 [ 2336.839687][ T5384] do_syscall_64+0x123/0x790 [ 2336.839705][ T5384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2336.839718][ T5384] RIP: 0033:0x7fbe0e79e159 [ 2336.839728][ T5384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2336.839739][ T5384] RSP: 002b:00007fbe0f60b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2336.839751][ T5384] RAX: ffffffffffffffda RBX: 00007fbe0ea25fa0 RCX: 00007fbe0e79e159 [ 2336.839758][ T5384] RDX: 0000000000000000 RSI: 0000000000000805 RDI: 000000000000002b [ 2336.839765][ T5384] RBP: 00007fbe0e83506b R08: 0000000000000000 R09: 0000000000000000 [ 2336.839773][ T5384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2336.839780][ T5384] R13: 00007fbe0ea26038 R14: 00007fbe0ea25fa0 R15: 00007ffc4ca34278 [ 2336.839795][ T5384] [ 2336.839832][ T5384] socket: no more sockets [ 2337.318928][ T5397] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2337.418007][ T2116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2337.436524][ T2116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2337.441319][T17734] smbdirect: ib_dev[syz5] removed [ 2337.470257][ T2116] bond0 (unregistering): Released all slaves [ 2337.496486][ T5204] Bluetooth: hci0: ACL packet for unknown connection handle 232 [ 2337.538315][ T2116] bond1 (unregistering): Released all slaves [ 2337.695460][ T2116] tipc: Disabling bearer [ 2337.696089][ T2116] tipc: Left network mode [ 2337.739049][ T5825] gspca_main: sunplus-2.14.0 probing 08ca:2016 [ 2337.755135][ T5825] gspca_sunplus: reg_w_riv err -71 [ 2337.755196][ T5825] sunplus 5-1:4.4: probe with driver sunplus failed with error -71 [ 2337.757821][ T5825] usb 5-1: USB disconnect, device number 65 [ 2338.278668][ T5418] Invalid source name [ 2339.186906][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 2339.469841][ T5264] 8021q: adding VLAN 0 to HW filter on device eth1 [ 2339.546807][ T5425] tipc: Enabled bearer , priority 0 [ 2339.747496][ T5404] tipc: Disabling bearer [ 2340.260715][ T2116] hsr_slave_0: left promiscuous mode [ 2340.290780][ T2116] hsr_slave_1: left promiscuous mode [ 2340.403562][ T31] kauditd_printk_skb: 17 callbacks suppressed [ 2340.403585][ T31] audit: type=1400 audit(1790261153.762:20108): avc: denied { name_bind } for pid=5434 comm="syz.4.6924" src=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 2340.407910][ T2116] virt_wifi0: left promiscuous mode [ 2340.408080][ T2116] veth1_macvtap: left promiscuous mode [ 2340.408096][ T2116] veth0_macvtap: left promiscuous mode [ 2340.408160][ T2116] veth1_vlan: left promiscuous mode [ 2340.408209][ T2116] veth0_vlan: left promiscuous mode [ 2340.508711][ T31] audit: type=1400 audit(1790261153.872:20109): avc: denied { create } for pid=5434 comm="syz.4.6924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 2342.374676][ T31] audit: type=1400 audit(1790261155.742:20110): avc: denied { mounton } for pid=5450 comm="syz.8.6926" path="/proc/941/task" dev="proc" ino=159205 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 2342.463345][ T31] audit: type=1400 audit(1790261155.822:20111): avc: denied { write } for pid=5436 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2342.646665][ T5204] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 2342.833740][ T31] audit: type=1400 audit(1790261156.202:20112): avc: denied { write } for pid=5469 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2342.914294][ T2116] team0 (unregistering): Port device team_slave_1 removed [ 2342.973863][ T2116] team0 (unregistering): Port device team_slave_0 removed [ 2343.149311][ T5475] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 2343.257812][ T5442] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6925'. [ 2343.467754][ T5825] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 2343.531398][ T5482] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 2343.644099][ T5825] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2343.644146][ T5825] usb 5-1: New USB device found, idVendor=08ca, idProduct=2016, bcdDevice=f7.ed [ 2343.644938][ T5825] usb 5-1: config 4 has an invalid interface number: 4 but max is 0 [ 2343.644951][ T5825] usb 5-1: config 4 has no interface number 0 [ 2343.644976][ T5825] usb 5-1: config 4 interface 4 has no altsetting 0 [ 2343.646523][ T5825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2343.646545][ T5825] usb 5-1: Product: syz [ 2343.646554][ T5825] usb 5-1: Manufacturer: syz [ 2343.646572][ T5825] usb 5-1: SerialNumber: syz [ 2343.822673][ T10] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 2343.975644][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2343.975687][ T10] usb 4-1: New USB device found, idVendor=08ca, idProduct=2016, bcdDevice=f7.ed [ 2343.977910][ T10] usb 4-1: config 4 has an invalid interface number: 4 but max is 0 [ 2343.977933][ T10] usb 4-1: config 4 has no interface number 0 [ 2343.977948][ T10] usb 4-1: config 4 interface 4 has no altsetting 0 [ 2344.001533][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2344.001558][ T10] usb 4-1: Product: syz [ 2344.001567][ T10] usb 4-1: Manufacturer: syz [ 2344.001575][ T10] usb 4-1: SerialNumber: syz [ 2344.438539][ T5490] tipc: Started in network mode [ 2344.438568][ T5490] tipc: Node identity fadf7e4925e1, cluster identity 4711 [ 2344.438698][ T5490] tipc: Enabled bearer , priority 0 [ 2344.766854][ T5488] tipc: Disabling bearer [ 2344.847105][ T5825] gspca_main: sunplus-2.14.0 probing 08ca:2016 [ 2344.865551][ T5825] gspca_sunplus: reg_w_riv err -71 [ 2344.865650][ T5825] sunplus 5-1:4.4: probe with driver sunplus failed with error -71 [ 2344.889115][ T10] gspca_main: sunplus-2.14.0 probing 08ca:2016 [ 2344.890250][ T5825] usb 5-1: USB disconnect, device number 66 [ 2344.914354][ T10] gspca_sunplus: reg_w_riv err -71 [ 2344.914419][ T10] sunplus 4-1:4.4: probe with driver sunplus failed with error -71 [ 2344.972456][ T10] usb 4-1: USB disconnect, device number 57 [ 2345.483963][ T31] audit: type=1400 audit(1790261158.842:20113): avc: denied { bind } for pid=5503 comm="syz.0.6935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2345.654437][ T31] audit: type=1400 audit(1790261159.022:20114): avc: denied { write } for pid=5491 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2346.010826][ T31] audit: type=1400 audit(1790261159.372:20115): avc: denied { write } for pid=5518 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2346.089860][ T5231] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2346.118139][ T5231] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2346.118727][ T5231] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2346.178117][ T5231] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2346.192937][ T5231] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2346.254749][ T5231] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2346.255328][ T5231] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2346.300370][ T5231] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2347.834364][ T5524] FAULT_INJECTION: forcing a failure. [ 2347.834364][ T5524] name failslab, interval 1, probability 0, space 0, times 0 [ 2347.834387][ T5524] CPU: 0 UID: 0 PID: 5524 Comm: syz.8.6939 Tainted: G L syzkaller #0 PREEMPT(full) [ 2347.834402][ T5524] Tainted: [L]=SOFTLOCKUP [ 2347.834406][ T5524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 2347.834413][ T5524] Call Trace: [ 2347.834417][ T5524] [ 2347.834421][ T5524] dump_stack_lvl+0x100/0x190 [ 2347.834442][ T5524] should_fail_ex.cold+0x5/0xa [ 2347.834457][ T5524] should_failslab+0xc2/0x120 [ 2347.834473][ T5524] __kmalloc_cache_noprof+0x91/0x6d0 [ 2347.834491][ T5524] ? serio_queue_event+0x109/0x330 [ 2347.834510][ T5524] serio_queue_event+0x109/0x330 [ 2347.834526][ T5524] serport_ldisc_read+0x326/0x680 [ 2347.834539][ T5524] ? __pfx_serport_ldisc_read+0x10/0x10 [ 2347.834552][ T5524] ? __pfx___might_resched+0x10/0x10 [ 2347.834568][ T5524] tty_read+0x2cf/0x550 [ 2347.834581][ T5524] ? kasan_save_stack+0x30/0x50 [ 2347.834594][ T5524] ? __pfx_tty_read+0x10/0x10 [ 2347.834605][ T5524] ? io_submit_one+0x124/0x1fb0 [ 2347.834622][ T5524] ? do_syscall_64+0x123/0x790 [ 2347.834638][ T5524] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2347.834649][ T5524] ? avc_policy_seqno+0x9/0x20 [ 2347.834667][ T5524] ? bpf_lsm_file_permission+0x9/0x10 [ 2347.834682][ T5524] ? security_file_permission+0x76/0x210 [ 2347.834696][ T5524] ? rw_verify_area+0xce/0x6d0 [ 2347.834715][ T5524] aio_read+0x312/0x4d0 [ 2347.834731][ T5524] ? __pfx_aio_read+0x10/0x10 [ 2347.834756][ T5524] ? __might_fault+0xc5/0x140 [ 2347.834776][ T5524] ? io_submit_one+0x111e/0x1fb0 [ 2347.834793][ T5524] io_submit_one+0x111e/0x1fb0 [ 2347.834811][ T5524] ? __lock_acquire+0x5c0/0x1f40 [ 2347.834826][ T5524] ? __pfx_io_submit_one+0x10/0x10 [ 2347.834844][ T5524] ? lock_acquire+0x1d1/0x380 [ 2347.834858][ T5524] ? __might_fault+0xc5/0x140 [ 2347.834877][ T5524] ? __x64_sys_io_submit+0x1b1/0x3a0 [ 2347.834895][ T5524] __x64_sys_io_submit+0x1b1/0x3a0 [ 2347.834914][ T5524] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 2347.834938][ T5524] do_syscall_64+0x123/0x790 [ 2347.834956][ T5524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2347.834967][ T5524] RIP: 0033:0x7ff44319e159 [ 2347.834977][ T5524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2347.834988][ T5524] RSP: 002b:00007ff44412c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2347.835000][ T5524] RAX: ffffffffffffffda RBX: 00007ff443425fa0 RCX: 00007ff44319e159 [ 2347.835007][ T5524] RDX: 00002000000003c0 RSI: 0000000000000001 RDI: 00007ff44410b000 [ 2347.835014][ T5524] RBP: 00007ff44412c090 R08: 0000000000000000 R09: 0000000000000000 [ 2347.835021][ T5524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2347.835028][ T5524] R13: 00007ff443426038 R14: 00007ff443425fa0 R15: 00007ffd1d12f538 [ 2347.835041][ T5524] [ 2347.835046][ T5524] serio: Not enough memory to queue event 3 [ 2347.835132][ T5524] serio: Serial port ptm0 [ 2348.406349][ T5231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2348.477877][ T5231] 8021q: adding VLAN 0 to HW filter on device team0 [ 2348.504473][T23126] bridge0: port 1(bridge_slave_0) entered blocking state [ 2348.504538][T23126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2348.545727][T23126] bridge0: port 2(bridge_slave_1) entered blocking state [ 2348.545791][T23126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2348.586731][T16566] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 2348.738117][T16566] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 2348.739334][T16566] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2348.739350][T16566] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2348.789026][T16566] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 2348.789052][T16566] usb 5-1: Product: syz [ 2348.789071][T16566] usb 5-1: SerialNumber: syz [ 2348.829884][T16566] usb 5-1: config 0 descriptor?? [ 2349.299892][ T31] audit: type=1400 audit(1790261162.662:20116): avc: denied { read } for pid=5511 comm="syz.4.6937" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 2349.299941][ T31] audit: type=1400 audit(1790261162.662:20117): avc: denied { open } for pid=5511 comm="syz.4.6937" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 2349.384059][ T31] audit: type=1400 audit(1790261162.752:20118): avc: denied { write } for pid=5533 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2349.431511][ T31] audit: type=1400 audit(1790261162.792:20119): avc: denied { ioctl } for pid=5511 comm="syz.4.6937" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 2349.575472][ T10] usb 5-1: USB disconnect, device number 67 [ 2349.819804][ T31] audit: type=1400 audit(1790261163.182:20120): avc: denied { write } for pid=5563 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2349.862634][ T5568] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 2349.953721][ T5571] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 2350.163218][T16566] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 2350.867744][ T5578] input: syz0 as /devices/virtual/input/input59 [ 2350.945589][T30377] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 2350.965203][T16566] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2350.965240][T16566] usb 4-1: New USB device found, idVendor=08ca, idProduct=2016, bcdDevice=f7.ed [ 2350.966134][T16566] usb 4-1: config 4 has an invalid interface number: 4 but max is 0 [ 2350.966157][T16566] usb 4-1: config 4 has no interface number 0 [ 2350.966182][T16566] usb 4-1: config 4 interface 4 has no altsetting 0 [ 2350.968226][T16566] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2350.968250][T16566] usb 4-1: Product: syz [ 2350.968259][T16566] usb 4-1: Manufacturer: syz [ 2350.968277][T16566] usb 4-1: SerialNumber: syz [ 2351.095556][T30377] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2351.095604][T30377] usb 9-1: New USB device found, idVendor=08ca, idProduct=2016, bcdDevice=f7.ed [ 2351.101332][T30377] usb 9-1: config 4 has an invalid interface number: 4 but max is 0 [ 2351.101357][T30377] usb 9-1: config 4 has no interface number 0 [ 2351.101393][T30377] usb 9-1: config 4 interface 4 has no altsetting 0 [ 2351.147555][T30377] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2351.147572][T30377] usb 9-1: Product: syz [ 2351.147590][T30377] usb 9-1: Manufacturer: syz [ 2351.147599][T30377] usb 9-1: SerialNumber: syz [ 2351.424660][ T5231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2351.821694][T16566] gspca_main: sunplus-2.14.0 probing 08ca:2016 [ 2351.840797][T16566] gspca_sunplus: reg_w_riv err -71 [ 2351.840891][T16566] sunplus 4-1:4.4: probe with driver sunplus failed with error -71 [ 2351.864188][T16566] usb 4-1: USB disconnect, device number 58 [ 2351.879329][ T10] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 2351.968220][T30377] gspca_main: sunplus-2.14.0 probing 08ca:2016 [ 2351.969873][T30377] gspca_sunplus: reg_w_riv err -71 [ 2351.969928][T30377] sunplus 9-1:4.4: probe with driver sunplus failed with error -71 [ 2352.010807][T30377] usb 9-1: USB disconnect, device number 51 [ 2352.073682][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 2352.079247][ T10] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 2352.114577][ T10] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 2352.114616][ T10] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 2352.114641][ T10] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2352.114666][ T10] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 2352.185577][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2352.185594][ T10] usb 5-1: Product: syz [ 2352.185612][ T10] usb 5-1: Manufacturer: syz [ 2352.185621][ T10] usb 5-1: SerialNumber: syz [ 2352.229005][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 2352.343981][ T31] audit: type=1400 audit(1790261165.712:20121): avc: denied { write } for pid=5576 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2352.405980][ T10] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input60 [ 2352.493528][ T5593] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 2352.493575][ T5593] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2352.526874][ T10] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 2352.526886][ T10] (id 0x00) [ 2352.605877][ T5602] tipc: Started in network mode [ 2352.605906][ T5602] tipc: Node identity 5678ebd1fa48, cluster identity 4711 [ 2352.606015][ T5602] tipc: Enabled bearer , priority 0 [ 2352.732774][ T10] rc_core: IR keymap rc-imon-pad not found [ 2352.732796][ T10] Registered IR keymap rc-empty [ 2352.732851][ T10] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 2352.732860][ T10] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 2352.784691][ T10] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 2352.785856][ T10] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input61 [ 2352.825397][ T10] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:68> initialized [ 2352.830944][ T31] audit: type=1400 audit(1790261166.192:20122): avc: denied { write } for pid=5608 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2352.879415][ T5601] tipc: Disabling bearer [ 2353.140473][ T5231] veth0_vlan: entered promiscuous mode [ 2353.227221][ T5231] veth1_vlan: entered promiscuous mode [ 2353.368823][ T5231] veth0_macvtap: entered promiscuous mode [ 2353.406359][ T5231] veth1_macvtap: entered promiscuous mode [ 2353.423871][ T31] audit: type=1400 audit(1790261166.792:20123): avc: denied { write } for pid=5612 comm="syz.3.6953" name="tracing_on" dev="tracefs" ino=3488 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 2353.476085][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2353.503566][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2353.529666][T23126] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2353.529828][T23126] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2353.529930][T23126] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2353.530032][T23126] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2353.642993][ T10] usb 9-1: new full-speed USB device number 52 using dummy_hcd [ 2353.796139][ T5618] imon:send_packet: task interrupted [ 2353.796227][ T5618] imon:send_packet: packet tx failed (-512) [ 2353.797024][ T5618] imon:vfd_write: send packet #1 failed [ 2353.797161][ T10] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 2353.844674][ T10] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 2353.844691][ T10] usb 9-1: config 0 has no interface number 0 [ 2353.844720][ T10] usb 9-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 2353.844744][ T10] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2353.844758][ T10] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2353.851302][ T10] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2353.851329][ T10] usb 9-1: Product: syz [ 2353.851338][ T10] usb 9-1: SerialNumber: syz [ 2353.934433][ T10] usb 9-1: config 0 descriptor?? [ 2353.938180][ T10] cm109 9-1:0.8: invalid payload size 0, expected 4 [ 2353.970883][ T10] input: CM109 USB driver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.8/input/input62 [ 2354.204000][T23126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2354.204026][T23126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2354.635015][T23126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2354.635040][T23126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2354.701524][ T31] audit: type=1400 audit(1790261168.062:20124): avc: denied { mounton } for pid=5231 comm="syz-executor" path="/root/syzkaller.VMbGtc/syz-tmp" dev="sda1" ino=2098 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 2354.749197][ T31] audit: type=1400 audit(1790261168.112:20125): avc: denied { mounton } for pid=5231 comm="syz-executor" path="/root/syzkaller.VMbGtc/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 2354.786516][ T31] audit: type=1400 audit(1790261168.152:20126): avc: denied { mounton } for pid=5231 comm="syz-executor" path="/root/syzkaller.VMbGtc/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=160264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 2354.839348][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2354.839524][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2354.839717][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2354.839880][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2354.840045][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2354.840252][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2354.840373][T16566] usb 9-1: USB disconnect, device number 52 [ 2354.840415][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2354.840425][ C0] cm109 9-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 2354.924590][ T31] audit: type=1400 audit(1790261168.292:20127): avc: denied { mounton } for pid=5231 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 2354.925988][ T31] audit: type=1400 audit(1790261168.292:20128): avc: denied { mount } for pid=5231 comm="syz-executor" name="/" dev="gadgetfs" ino=8071 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 2354.999858][ T31] audit: type=1400 audit(1790261168.362:20129): avc: denied { mount } for pid=5231 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 2355.000252][ T31] audit: type=1400 audit(1790261168.362:20130): avc: denied { mounton } for pid=5231 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 2355.000540][T16566] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 2355.239855][ T5825] usb 5-1: USB disconnect, device number 68 [ 2355.513759][T16566] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 2355.665533][T16566] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 2355.666927][T16566] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2355.700683][T16566] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 2355.700711][T16566] usb 1-1: Product: syz [ 2355.700721][T16566] usb 1-1: Manufacturer: syz [ 2355.755472][T16566] usb 1-1: selecting invalid altsetting 1 [ 2355.755564][T16566] dvb_ttusb_budget: ttusb_init_controller: error [ 2355.755571][T16566] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 2355.791577][ T5825] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 2355.996290][ T5825] usb 5-1: Using ep0 maxpacket: 8 [ 2356.020899][ T5825] usb 5-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 2356.918728][ T5825] usb 5-1: too many endpoints for config 0 interface 0 altsetting 5: 34, using maximum allowed: 30 [ 2356.918765][ T5825] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2356.918780][ T5825] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 2356.918805][ T5825] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2356.918832][ T5825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2357.305339][ T5825] usb 5-1: config 0 descriptor?? [ 2358.876680][T16566] DVB: Unable to find symbol cx22700_attach() [ 2358.989975][ T5825] usbhid 5-1:0.0: can't add hid device: -71 [ 2358.990068][ T5825] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2359.020098][ T5825] usb 5-1: USB disconnect, device number 69 [ 2359.137986][T16566] DVB: Unable to find symbol tda10046_attach() [ 2359.137996][T16566] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 2359.139818][T16566] usb 1-1: USB disconnect, device number 36 [ 2359.173727][ T5643] netlink: 'syz.3.6959': attribute type 4 has an invalid length. [ 2359.243673][ T5644] netlink: 'syz.3.6959': attribute type 50 has an invalid length. [ 2359.303148][ T5648] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 2359.777800][ T5658] tipc: Enabled bearer , priority 0 [ 2360.754293][ T5825] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 2360.796846][ T5651] tipc: Disabling bearer [ 2361.074943][ T5825] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2361.074993][ T5825] usb 5-1: New USB device found, idVendor=08ca, idProduct=2016, bcdDevice=f7.ed [ 2361.075752][ T5825] usb 5-1: config 4 has an invalid interface number: 4 but max is 0 [ 2361.075775][ T5825] usb 5-1: config 4 has no interface number 0 [ 2361.075806][ T5825] usb 5-1: config 4 interface 4 has no altsetting 0 [ 2361.077354][ T5825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2361.077377][ T5825] usb 5-1: Product: syz [ 2361.077386][ T5825] usb 5-1: Manufacturer: syz [ 2361.077395][ T5825] usb 5-1: SerialNumber: syz [ 2362.405619][ T5825] gspca_main: sunplus-2.14.0 probing 08ca:2016 [ 2362.408444][ T5825] gspca_sunplus: reg_w_riv err -71 [ 2362.408498][ T5825] sunplus 5-1:4.4: probe with driver sunplus failed with error -71 [ 2362.891440][ T5825] usb 5-1: USB disconnect, device number 70 [ 2362.906775][ T4983] udevd[4983]: setting mode of /dev/bus/usb/005/070 to 020664 failed: No such file or directory [ 2362.906848][ T4983] udevd[4983]: setting owner of /dev/bus/usb/005/070 to uid=0, gid=0 failed: No such file or directory [ 2362.968411][ T31] audit: type=1400 audit(1790261176.332:20131): avc: denied { mounton } for pid=5666 comm="syz.0.6967" path="/215/proc" dev="tmpfs" ino=1225 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2363.015867][ T31] audit: type=1400 audit(1790261176.362:20132): avc: denied { map_create } for pid=5662 comm="syz.6.6965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2363.015909][ T31] audit: type=1400 audit(1790261176.362:20133): avc: denied { bpf } for pid=5662 comm="syz.6.6965" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2363.015939][ T31] audit: type=1400 audit(1790261176.362:20134): avc: denied { map_read map_write } for pid=5662 comm="syz.6.6965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2363.114668][ T31] audit: type=1400 audit(1790261176.482:20135): avc: denied { mount } for pid=5666 comm="syz.0.6967" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 2363.241194][ T31] audit: type=1400 audit(1790261176.602:20136): avc: denied { read write } for pid=5231 comm="syz-executor" name="loop6" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2363.273033][ T31] audit: type=1400 audit(1790261176.642:20137): avc: denied { open } for pid=5231 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2363.273071][ T31] audit: type=1400 audit(1790261176.642:20138): avc: denied { ioctl } for pid=5231 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2363.400272][ T31] audit: type=1400 audit(1790261176.762:20139): avc: denied { unmount } for pid=32326 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 2363.446585][ T31] audit: type=1400 audit(1790261176.812:20140): avc: denied { read } for pid=5674 comm="syz.6.6968" dev="nsfs" ino=4026533846 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2364.803687][ T5675] FAULT_INJECTION: forcing a failure. [ 2364.803687][ T5675] name failslab, interval 1, probability 0, space 0, times 0 [ 2364.803719][ T5675] CPU: 0 UID: 0 PID: 5675 Comm: syz.6.6968 Tainted: G L syzkaller #0 PREEMPT(full) [ 2364.803737][ T5675] Tainted: [L]=SOFTLOCKUP [ 2364.803741][ T5675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 2364.803747][ T5675] Call Trace: [ 2364.803752][ T5675] [ 2364.803756][ T5675] dump_stack_lvl+0x100/0x190 [ 2364.803777][ T5675] should_fail_ex.cold+0x5/0xa [ 2364.803793][ T5675] should_failslab+0xc2/0x120 [ 2364.803809][ T5675] __kmalloc_noprof+0xfc/0x840 [ 2364.803821][ T5675] ? tomoyo_encode2+0xfb/0x3c0 [ 2364.803841][ T5675] tomoyo_encode2+0xfb/0x3c0 [ 2364.803857][ T5675] tomoyo_encode+0x29/0x50 [ 2364.803871][ T5675] tomoyo_realpath_from_path+0x18c/0x690 [ 2364.803888][ T5675] tomoyo_path_number_perm+0x23c/0x580 [ 2364.803900][ T5675] ? tomoyo_path_number_perm+0x22e/0x580 [ 2364.803913][ T5675] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2364.803930][ T5675] ? __lock_acquire+0x5c0/0x1f40 [ 2364.803949][ T5675] ? __fget_files+0x34/0x3d0 [ 2364.803964][ T5675] ? find_held_lock+0x2b/0x80 [ 2364.803984][ T5675] ? hook_file_ioctl_common+0x140/0x440 [ 2364.804003][ T5675] ? __fget_files+0x21f/0x3d0 [ 2364.804020][ T5675] security_file_ioctl+0xd3/0x230 [ 2364.804033][ T5675] __x64_sys_ioctl+0xb7/0x210 [ 2364.804046][ T5675] do_syscall_64+0x123/0x790 [ 2364.804065][ T5675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2364.804077][ T5675] RIP: 0033:0x7f45b6b9e159 [ 2364.804087][ T5675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2364.804097][ T5675] RSP: 002b:00007f45b7a8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2364.804109][ T5675] RAX: ffffffffffffffda RBX: 00007f45b6e25fa0 RCX: 00007f45b6b9e159 [ 2364.804116][ T5675] RDX: 0000200000000680 RSI: 00000000c2604111 RDI: 0000000000000009 [ 2364.804123][ T5675] RBP: 00007f45b7a8f090 R08: 0000000000000000 R09: 0000000000000000 [ 2364.804130][ T5675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2364.804137][ T5675] R13: 00007f45b6e26038 R14: 00007f45b6e25fa0 R15: 00007ffd3f2408c8 [ 2364.804151][ T5675] [ 2364.804192][ T5675] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2365.132787][ T5679] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6969'. [ 2368.172473][ T31] kauditd_printk_skb: 33 callbacks suppressed [ 2368.172497][ T31] audit: type=1400 audit(1790261181.372:20174): avc: denied { mount } for pid=5692 comm="syz.3.6974" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 2368.228275][ T31] audit: type=1400 audit(1790261181.592:20175): avc: denied { ioctl } for pid=5687 comm="syz.4.6973" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2368.490384][ T31] audit: type=1400 audit(1790261181.852:20176): avc: denied { bind } for pid=5692 comm="syz.3.6974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 2368.747474][ T5705] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 2368.840388][ T31] audit: type=1400 audit(1790261182.202:20177): avc: denied { unmount } for pid=32326 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 2368.869140][ T31] audit: type=1400 audit(1790261182.232:20178): avc: denied { watch } for pid=5707 comm="syz.3.6977" path="pipe:[160726]" dev="pipefs" ino=160726 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 2368.901352][ T31] audit: type=1400 audit(1790261182.262:20179): avc: denied { allowed } for pid=5707 comm="syz.3.6977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 2368.930255][ T31] audit: type=1400 audit(1790261182.292:20180): avc: denied { create } for pid=5707 comm="syz.3.6977" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2368.969563][ T31] audit: type=1400 audit(1790261182.332:20181): avc: denied { name_bind } for pid=5704 comm="syz.0.6976" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 2368.996760][ T31] audit: type=1400 audit(1790261182.362:20182): avc: denied { node_bind } for pid=5704 comm="syz.0.6976" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 2369.050306][ T31] audit: type=1400 audit(1790261182.412:20183): avc: denied { module_request } for pid=5707 comm="syz.3.6977" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 2371.237543][ T5708] tipc: Enabled bearer , priority 0 [ 2371.239735][ T5707] tipc: Disabling bearer [ 2372.970962][ T10] tipc: Node number set to 2888887249 [ 2374.403328][ T31] kauditd_printk_skb: 17 callbacks suppressed [ 2374.403350][ T31] audit: type=1400 audit(1790261187.772:20201): avc: denied { mounton } for pid=5725 comm="syz.3.6981" path="/315/file0" dev="tmpfs" ino=1761 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2374.542983][ T31] audit: type=1400 audit(1790261187.912:20202): avc: denied { mount } for pid=5725 comm="syz.3.6981" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 2374.607727][ T31] audit: type=1400 audit(1790261187.972:20203): avc: denied { write } for pid=5734 comm="syz.0.6983" name="virtual_nci" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2374.676869][ T31] audit: type=1400 audit(1790261188.042:20204): avc: denied { create } for pid=5723 comm="syz.8.6980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2374.739470][ T31] audit: type=1400 audit(1790261188.102:20205): avc: denied { mount } for pid=5723 comm="syz.8.6980" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 2374.778467][ T31] audit: type=1400 audit(1790261188.142:20206): avc: denied { create } for pid=5725 comm="syz.3.6981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2374.808605][ T5727] netlink: 'syz.3.6981': attribute type 4 has an invalid length. [ 2374.877320][ T31] audit: type=1400 audit(1790261188.242:20207): avc: denied { unmount } for pid=31495 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 2374.935061][ T31] audit: type=1400 audit(1790261188.292:20208): avc: denied { create } for pid=5725 comm="syz.3.6981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 2374.989949][ T31] audit: type=1400 audit(1790261188.352:20209): avc: denied { remount } for pid=5725 comm="syz.3.6981" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 2374.990971][ T31] audit: type=1400 audit(1790261188.352:20210): avc: denied { create } for pid=5725 comm="syz.3.6981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2375.572393][ T5825] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 2375.725294][ T5825] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 2375.731555][ T5825] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2375.757764][ T5825] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 2375.757789][ T5825] usb 1-1: Product: syz [ 2375.757798][ T5825] usb 1-1: Manufacturer: syz [ 2375.803802][ T5825] usb 1-1: selecting invalid altsetting 1 [ 2375.803898][ T5825] dvb_ttusb_budget: ttusb_init_controller: error [ 2375.803905][ T5825] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 2375.856436][ T5751] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 2376.028929][ T5825] DVB: Unable to find symbol cx22700_attach() [ 2377.474324][ T5825] DVB: Unable to find symbol tda10046_attach() [ 2377.474334][ T5825] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 2377.501371][ T5758] netlink: 348 bytes leftover after parsing attributes in process `syz.3.6988'. [ 2377.749043][ T5742] dvb_ttusb_budget: failed urb submission (0: err = -2)! [ 2377.803634][ T5825] usb 1-1: USB disconnect, device number 37 [ 2378.472935][ T5779] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 2378.631240][ T5782] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 2378.833987][T16566] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 2379.094109][T16566] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2379.094148][T16566] usb 9-1: New USB device found, idVendor=08ca, idProduct=2016, bcdDevice=f7.ed [ 2379.094935][T16566] usb 9-1: config 4 has an invalid interface number: 4 but max is 0 [ 2379.094958][T16566] usb 9-1: config 4 has no interface number 0 [ 2379.094983][T16566] usb 9-1: config 4 interface 4 has no altsetting 0 [ 2379.096592][T16566] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2379.096606][T16566] usb 9-1: Product: syz [ 2379.096631][T16566] usb 9-1: Manufacturer: syz [ 2379.096654][T16566] usb 9-1: SerialNumber: syz [ 2380.068746][ T10] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 2380.385730][T16566] gspca_main: sunplus-2.14.0 probing 08ca:2016 [ 2380.388424][T16566] gspca_sunplus: reg_w_riv err -71 [ 2380.388481][T16566] sunplus 9-1:4.4: probe with driver sunplus failed with error -71 [ 2380.417424][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2380.417459][ T10] usb 1-1: New USB device found, idVendor=08ca, idProduct=2016, bcdDevice=f7.ed [ 2380.418274][ T10] usb 1-1: config 4 has an invalid interface number: 4 but max is 0 [ 2380.418298][ T10] usb 1-1: config 4 has no interface number 0 [ 2380.418321][ T10] usb 1-1: config 4 interface 4 has no altsetting 0 [ 2380.419853][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2380.419875][ T10] usb 1-1: Product: syz [ 2380.419883][ T10] usb 1-1: Manufacturer: syz [ 2380.419902][ T10] usb 1-1: SerialNumber: syz [ 2380.513388][T16566] usb 9-1: USB disconnect, device number 53 [ 2380.748010][ T10] gspca_main: sunplus-2.14.0 probing 08ca:2016 [ 2380.751437][ T10] gspca_sunplus: reg_w_riv err -71 [ 2380.751497][ T10] sunplus 1-1:4.4: probe with driver sunplus failed with error -71 [ 2380.778662][ T31] kauditd_printk_skb: 15 callbacks suppressed [ 2380.778683][ T31] audit: type=1400 audit(1790261194.142:20226): avc: denied { sqpoll } for pid=5792 comm="syz.6.6995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 2380.778798][ T10] usb 1-1: USB disconnect, device number 38 [ 2380.918057][ T31] audit: type=1400 audit(1790261194.282:20227): avc: denied { create } for pid=5794 comm="syz.4.6996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 2380.956009][ T31] audit: type=1400 audit(1790261194.322:20228): avc: denied { ioctl } for pid=5772 comm="syz.3.6991" path="socket:[161138]" dev="sockfs" ino=161138 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2381.006301][ T31] audit: type=1400 audit(1790261194.372:20229): avc: denied { create } for pid=5794 comm="syz.4.6996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 2381.043632][ T31] audit: type=1400 audit(1790261194.412:20230): avc: denied { create } for pid=5794 comm="syz.4.6996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2381.158048][ T31] audit: type=1400 audit(1790261194.522:20231): avc: denied { ioctl } for pid=5792 comm="syz.6.6995" path="socket:[161139]" dev="sockfs" ino=161139 ioctlcmd=0x48f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2381.210037][ T5793] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 2381.519737][ T31] audit: type=1400 audit(1790261194.882:20232): avc: denied { write } for pid=5803 comm="syz.4.6998" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 2381.581277][ T31] audit: type=1400 audit(1790261194.942:20233): avc: denied { write } for pid=5801 comm="syz.8.6997" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2381.613866][ T31] audit: type=1400 audit(1790261194.982:20234): avc: denied { read write } for pid=5803 comm="syz.4.6998" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 2381.615897][ T31] audit: type=1400 audit(1790261194.982:20235): avc: denied { open } for pid=5803 comm="syz.4.6998" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 2382.766361][T16566] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 2383.203927][ T5204] Bluetooth: hci0: command 0x0406 tx timeout [ 2383.204442][T16566] usb 9-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 2383.206295][T16566] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2383.209571][T16566] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 2383.209595][T16566] usb 9-1: Product: syz [ 2383.209604][T16566] usb 9-1: Manufacturer: syz [ 2383.289182][T16566] usb 9-1: selecting invalid altsetting 1 [ 2383.289266][T16566] dvb_ttusb_budget: ttusb_init_controller: error [ 2383.289283][T16566] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 2383.477845][T16566] DVB: Unable to find symbol cx22700_attach() [ 2383.587691][ T5831] dvb_ttusb_budget: failed urb submission (0: err = -2)! [ 2383.744414][T16566] DVB: Unable to find symbol tda10046_attach() [ 2383.744425][T16566] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 2383.776211][T16566] usb 9-1: USB disconnect, device number 54 [ 2383.852359][ T5853] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 2384.162517][ T10] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 2384.312430][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 2384.313154][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2384.316958][ T10] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 2384.316982][ T10] usb 5-1: config 0 has no interface number 0 [ 2384.320297][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2384.320321][ T10] usb 5-1: Product: syz [ 2384.320331][ T10] usb 5-1: Manufacturer: syz [ 2384.320340][ T10] usb 5-1: SerialNumber: syz [ 2384.385441][ T10] usb 5-1: config 0 descriptor?? [ 2385.944576][ T31] kauditd_printk_skb: 14 callbacks suppressed [ 2385.944597][ T31] audit: type=1400 audit(1790261199.312:20250): avc: denied { read write } for pid=5857 comm="syz.6.7012" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2385.944637][ T31] audit: type=1400 audit(1790261199.312:20251): avc: denied { open } for pid=5857 comm="syz.6.7012" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2387.654959][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 2387.654980][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2387.657033][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 2387.657177][ T10] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 2387.738598][ T31] audit: type=1400 audit(1790261201.102:20252): avc: denied { read write } for pid=32326 comm="syz-executor" name="loop4" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2387.740662][ T31] audit: type=1400 audit(1790261201.102:20253): avc: denied { open } for pid=32326 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2387.769196][ T31] audit: type=1400 audit(1790261201.132:20254): avc: denied { ioctl } for pid=32326 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2387.915985][ T10] usb 5-1: USB disconnect, device number 71 [ 2388.180065][ T31] audit: type=1400 audit(1790261201.542:20255): avc: denied { unmount } for pid=30970 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 2388.343682][ T31] audit: type=1400 audit(1790261201.712:20256): avc: denied { mounton } for pid=5870 comm="syz.4.7015" path="/273/proc" dev="tmpfs" ino=1568 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2388.344103][ T31] audit: type=1400 audit(1790261201.712:20257): avc: denied { mount } for pid=5870 comm="syz.4.7015" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 2388.347550][ T31] audit: type=1400 audit(1790261201.712:20258): avc: denied { create } for pid=5873 comm="syz.8.7016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2388.347910][ T31] audit: type=1400 audit(1790261201.712:20259): avc: denied { create } for pid=5870 comm="syz.4.7015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2388.348135][ T5878] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7017'. [ 2388.348161][ T5878] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7017'. [ 2388.920304][ T5879] FAULT_INJECTION: forcing a failure. [ 2388.920304][ T5879] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2388.920351][ T5879] CPU: 0 UID: 0 PID: 5879 Comm: syz.6.7017 Tainted: G L syzkaller #0 PREEMPT(full) [ 2388.920369][ T5879] Tainted: [L]=SOFTLOCKUP [ 2388.920373][ T5879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 2388.920380][ T5879] Call Trace: [ 2388.920384][ T5879] [ 2388.920389][ T5879] dump_stack_lvl+0x100/0x190 [ 2388.920409][ T5879] should_fail_ex.cold+0x5/0xa [ 2388.920426][ T5879] get_futex_key+0xf72/0x14f0 [ 2388.920443][ T5879] ? __pfx_get_futex_key+0x10/0x10 [ 2388.920458][ T5879] ? __mutex_unlock_slowpath+0x35d/0x930 [ 2388.920479][ T5879] futex_wake+0xf4/0x5e0 [ 2388.920492][ T5879] ? __pfx_futex_wake+0x10/0x10 [ 2388.920504][ T5879] ? lock_acquire+0x1d1/0x380 [ 2388.920516][ T5879] ? detach_task_ctx_data+0x83/0x490 [ 2388.920535][ T5879] do_futex+0x2b2/0x440 [ 2388.920551][ T5879] ? __pfx_do_futex+0x10/0x10 [ 2388.920565][ T5879] ? __might_fault+0xc5/0x140 [ 2388.920585][ T5879] mm_exit_exec_release+0x256/0x2f0 [ 2388.920599][ T5879] do_exit+0x707/0x2ae0 [ 2388.920616][ T5879] ? __pfx_do_exit+0x10/0x10 [ 2388.920630][ T5879] ? do_raw_spin_lock+0x128/0x260 [ 2388.920649][ T5879] ? find_held_lock+0x2b/0x80 [ 2388.920664][ T5879] ? get_signal+0x7e0/0x21e0 [ 2388.920678][ T5879] do_group_exit+0xd5/0x2a0 [ 2388.920694][ T5879] get_signal+0x1ec7/0x21e0 [ 2388.920712][ T5879] ? __pfx_get_signal+0x10/0x10 [ 2388.920725][ T5879] ? do_futex+0x190/0x440 [ 2388.920742][ T5879] arch_do_signal_or_restart+0x91/0x7e0 [ 2388.920759][ T5879] ? rcu_is_watching+0x13/0xc0 [ 2388.920774][ T5879] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2388.920799][ T5879] exit_to_user_mode_loop+0x139/0x700 [ 2388.920813][ T5879] ? rcu_is_watching+0x13/0xc0 [ 2388.920829][ T5879] do_syscall_64+0x661/0x790 [ 2388.920847][ T5879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2388.920858][ T5879] RIP: 0033:0x7f45b6b9e159 [ 2388.920867][ T5879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2388.920878][ T5879] RSP: 002b:00007f45b7a6e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2388.920889][ T5879] RAX: fffffffffffffe00 RBX: 00007f45b6e26098 RCX: 00007f45b6b9e159 [ 2388.920897][ T5879] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f45b6e26098 [ 2388.920904][ T5879] RBP: 00007f45b6e26090 R08: 0000000000000000 R09: 0000000000000000 [ 2388.920911][ T5879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2388.920917][ T5879] R13: 00007f45b6e26128 R14: 00007ffd3f2407e0 R15: 00007ffd3f2408c8 [ 2388.920932][ T5879] [ 2389.694010][ T5891] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 2391.022371][ T31] kauditd_printk_skb: 24 callbacks suppressed [ 2391.022385][ T31] audit: type=1400 audit(1790261204.382:20284): avc: denied { read write } for pid=5890 comm="syz.3.7021" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2391.022432][ T31] audit: type=1400 audit(1790261204.382:20285): avc: denied { open } for pid=5890 comm="syz.3.7021" path="/dev/raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2391.022454][ T31] audit: type=1400 audit(1790261204.382:20286): avc: denied { ioctl } for pid=5890 comm="syz.3.7021" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2391.424909][ T31] audit: type=1400 audit(1790261204.792:20287): avc: denied { map_create } for pid=5892 comm="syz.6.7022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2391.424950][ T31] audit: type=1400 audit(1790261204.792:20288): avc: denied { bpf } for pid=5892 comm="syz.6.7022" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2391.424979][ T31] audit: type=1400 audit(1790261204.792:20289): avc: denied { map_read map_write } for pid=5892 comm="syz.6.7022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2391.506600][ T31] audit: type=1400 audit(1790261204.872:20290): avc: denied { ioctl } for pid=5890 comm="syz.3.7021" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2391.634807][ T31] audit: type=1400 audit(1790261205.002:20291): avc: denied { create } for pid=5873 comm="syz.8.7016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2391.670802][ T31] audit: type=1400 audit(1790261205.032:20292): avc: denied { read write } for pid=5231 comm="syz-executor" name="loop6" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2391.708519][ T10] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 2391.728194][ T31] audit: type=1400 audit(1790261205.092:20293): avc: denied { open } for pid=5231 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2391.860342][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2391.860380][ T10] usb 4-1: New USB device found, idVendor=08ca, idProduct=2016, bcdDevice=f7.ed [ 2391.881618][ T10] usb 4-1: config 4 has an invalid interface number: 4 but max is 0 [ 2391.881643][ T10] usb 4-1: config 4 has no interface number 0 [ 2391.881668][ T10] usb 4-1: config 4 interface 4 has no altsetting 0 [ 2391.923944][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2391.923961][ T10] usb 4-1: Product: syz [ 2391.923979][ T10] usb 4-1: Manufacturer: syz [ 2391.923988][ T10] usb 4-1: SerialNumber: syz [ 2392.774206][ T10] gspca_main: sunplus-2.14.0 probing 08ca:2016 [ 2392.791649][ T10] gspca_sunplus: reg_w_riv err -71 [ 2392.791708][ T10] sunplus 4-1:4.4: probe with driver sunplus failed with error -71 [ 2392.813721][ T10] usb 4-1: USB disconnect, device number 59 [ 2394.439103][ T5912] FAULT_INJECTION: forcing a failure. [ 2394.439103][ T5912] name failslab, interval 1, probability 0, space 0, times 0 [ 2394.439136][ T5912] CPU: 0 UID: 0 PID: 5912 Comm: syz.0.7026 Tainted: G L syzkaller #0 PREEMPT(full) [ 2394.439156][ T5912] Tainted: [L]=SOFTLOCKUP [ 2394.439161][ T5912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 2394.439168][ T5912] Call Trace: [ 2394.439173][ T5912] [ 2394.439179][ T5912] dump_stack_lvl+0x100/0x190 [ 2394.439199][ T5912] should_fail_ex.cold+0x5/0xa [ 2394.439215][ T5912] should_failslab+0xc2/0x120 [ 2394.439233][ T5912] __kmalloc_noprof+0xfc/0x840 [ 2394.439246][ T5912] ? __memcg_list_lru_alloc+0x418/0x680 [ 2394.439265][ T5912] __memcg_list_lru_alloc+0x418/0x680 [ 2394.439282][ T5912] ? xa_load+0x149/0x2c0 [ 2394.439296][ T5912] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 2394.439315][ T5912] ? rcu_read_unlock+0x17/0x60 [ 2394.439335][ T5912] memcg_list_lru_alloc+0xd3/0x100 [ 2394.439353][ T5912] __memcg_slab_post_alloc_hook+0x280/0x10c0 [ 2394.439375][ T5912] ? kasan_save_track+0x14/0x30 [ 2394.439390][ T5912] kmem_cache_alloc_lru_noprof+0x4f6/0x6a0 [ 2394.439403][ T5912] ? alloc_inode+0x183/0x250 [ 2394.439416][ T5912] ? __pfx_devpts_fill_super+0x10/0x10 [ 2394.439430][ T5912] alloc_inode+0x183/0x250 [ 2394.439441][ T5912] new_inode+0x22/0x1c0 [ 2394.439451][ T5912] ? rcu_is_watching+0x13/0xc0 [ 2394.439467][ T5912] ? __pfx_devpts_fill_super+0x10/0x10 [ 2394.439480][ T5912] devpts_fill_super+0x197/0x610 [ 2394.439495][ T5912] ? __pfx_devpts_fill_super+0x10/0x10 [ 2394.439509][ T5912] get_tree_nodev+0xdd/0x190 [ 2394.439521][ T5912] vfs_get_tree+0x92/0x320 [ 2394.439544][ T5912] path_mount+0x7d0/0x24c0 [ 2394.439563][ T5912] ? __pfx_path_mount+0x10/0x10 [ 2394.439580][ T5912] ? lockdep_hardirqs_on+0x7d/0x110 [ 2394.439599][ T5912] ? putname+0xb1/0x110 [ 2394.439614][ T5912] ? kmem_cache_free+0x127/0x6c0 [ 2394.439638][ T5912] ? __x64_sys_mount+0x293/0x310 [ 2394.439655][ T5912] __x64_sys_mount+0x293/0x310 [ 2394.439673][ T5912] ? __pfx___x64_sys_mount+0x10/0x10 [ 2394.439694][ T5912] do_syscall_64+0x123/0x790 [ 2394.439712][ T5912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2394.439723][ T5912] RIP: 0033:0x7fbe0e79e159 [ 2394.439733][ T5912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2394.439744][ T5912] RSP: 002b:00007fbe0f60b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2394.439756][ T5912] RAX: ffffffffffffffda RBX: 00007fbe0ea25fa0 RCX: 00007fbe0e79e159 [ 2394.439764][ T5912] RDX: 0000200000000040 RSI: 00002000000000c0 RDI: 0000000000000000 [ 2394.439770][ T5912] RBP: 00007fbe0e83506b R08: 0000000000000000 R09: 0000000000000000 [ 2394.439777][ T5912] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 2394.439784][ T5912] R13: 00007fbe0ea26038 R14: 00007fbe0ea25fa0 R15: 00007ffc4ca34278 [ 2394.439798][ T5912] [ 2395.139777][ T5921] FAULT_INJECTION: forcing a failure. [ 2395.139777][ T5921] name failslab, interval 1, probability 0, space 0, times 0 [ 2395.139811][ T5921] CPU: 0 UID: 0 PID: 5921 Comm: syz.6.7030 Tainted: G L syzkaller #0 PREEMPT(full) [ 2395.139830][ T5921] Tainted: [L]=SOFTLOCKUP [ 2395.139835][ T5921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 2395.139842][ T5921] Call Trace: [ 2395.139847][ T5921] [ 2395.139852][ T5921] dump_stack_lvl+0x100/0x190 [ 2395.139874][ T5921] should_fail_ex.cold+0x5/0xa [ 2395.139891][ T5921] should_failslab+0xc2/0x120 [ 2395.139907][ T5921] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 2395.139921][ T5921] ? sock_alloc_inode+0x26/0x2c0 [ 2395.139939][ T5921] ? __pfx_sock_alloc_inode+0x10/0x10 [ 2395.139956][ T5921] sock_alloc_inode+0x26/0x2c0 [ 2395.139972][ T5921] ? __pfx_sock_alloc_inode+0x10/0x10 [ 2395.139988][ T5921] alloc_inode+0x68/0x250 [ 2395.139999][ T5921] sock_alloc+0x44/0x280 [ 2395.140013][ T5921] ? security_socket_create+0x7f/0x250 [ 2395.140026][ T5921] __sock_create+0xc2/0x860 [ 2395.140040][ T5921] __sys_socket+0x14d/0x260 [ 2395.140052][ T5921] ? __pfx___sys_socket+0x10/0x10 [ 2395.140067][ T5921] __x64_sys_socket+0x72/0xb0 [ 2395.140077][ T5921] ? lockdep_hardirqs_on+0x7d/0x110 [ 2395.140094][ T5921] do_syscall_64+0x123/0x790 [ 2395.140112][ T5921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2395.140123][ T5921] RIP: 0033:0x7f45b6b9e159 [ 2395.140132][ T5921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2395.140143][ T5921] RSP: 002b:00007f45b7a8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2395.140155][ T5921] RAX: ffffffffffffffda RBX: 00007f45b6e25fa0 RCX: 00007f45b6b9e159 [ 2395.140163][ T5921] RDX: 0000000000000000 RSI: 0000000000000805 RDI: 000000000000002b [ 2395.140169][ T5921] RBP: 00007f45b6c3506b R08: 0000000000000000 R09: 0000000000000000 [ 2395.140176][ T5921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2395.140182][ T5921] R13: 00007f45b6e26038 R14: 00007f45b6e25fa0 R15: 00007ffd3f2408c8 [ 2395.140197][ T5921] [ 2395.140248][ T5921] socket: no more sockets [ 2397.150664][ T31] kauditd_printk_skb: 49 callbacks suppressed [ 2397.150678][ T31] audit: type=1400 audit(1790261210.512:20343): avc: denied { write } for pid=5936 comm="syz.0.7034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2397.391117][ T31] audit: type=1400 audit(1790261210.752:20344): avc: denied { prog_load } for pid=5936 comm="syz.0.7034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2397.391158][ T31] audit: type=1400 audit(1790261210.752:20345): avc: denied { prog_run } for pid=5936 comm="syz.0.7034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2397.480468][ T31] audit: type=1400 audit(1790261210.842:20346): avc: denied { mount } for pid=5936 comm="syz.0.7034" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 2397.840819][ T31] audit: type=1400 audit(1790261211.202:20347): avc: denied { create } for pid=5943 comm="syz.8.7036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2397.879148][ T31] audit: type=1400 audit(1790261211.242:20348): avc: denied { unmount } for pid=1521 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 2398.039204][ T31] audit: type=1400 audit(1790261211.402:20349): avc: denied { read } for pid=5946 comm="syz.3.7037" name="cec3" dev="devtmpfs" ino=964 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2398.067556][ T31] audit: type=1400 audit(1790261211.432:20350): avc: denied { open } for pid=5946 comm="syz.3.7037" path="/dev/cec3" dev="devtmpfs" ino=964 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2398.110071][ T31] audit: type=1400 audit(1790261211.472:20351): avc: denied { ioctl } for pid=5943 comm="syz.8.7036" path="socket:[161876]" dev="sockfs" ino=161876 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2398.176929][ T5947] FAULT_INJECTION: forcing a failure. [ 2398.176929][ T5947] name failslab, interval 1, probability 0, space 0, times 0 [ 2398.176961][ T5947] CPU: 0 UID: 0 PID: 5947 Comm: syz.3.7037 Tainted: G L syzkaller #0 PREEMPT(full) [ 2398.176979][ T5947] Tainted: [L]=SOFTLOCKUP [ 2398.176984][ T5947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 2398.176990][ T5947] Call Trace: [ 2398.176995][ T5947] [ 2398.176999][ T5947] dump_stack_lvl+0x100/0x190 [ 2398.177019][ T5947] should_fail_ex.cold+0x5/0xa [ 2398.177035][ T5947] should_failslab+0xc2/0x120 [ 2398.177050][ T5947] __kmalloc_noprof+0xfc/0x840 [ 2398.177062][ T5947] ? rcu_is_watching+0x13/0xc0 [ 2398.177078][ T5947] ? tomoyo_realpath_from_path+0xb6/0x690 [ 2398.177096][ T5947] tomoyo_realpath_from_path+0xb6/0x690 [ 2398.177114][ T5947] tomoyo_path_number_perm+0x23c/0x580 [ 2398.177126][ T5947] ? tomoyo_path_number_perm+0x22e/0x580 [ 2398.177138][ T5947] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2398.177156][ T5947] ? __lock_acquire+0x5c0/0x1f40 [ 2398.177174][ T5947] ? __fget_files+0x34/0x3d0 [ 2398.177189][ T5947] ? find_held_lock+0x2b/0x80 [ 2398.177204][ T5947] ? hook_file_ioctl_common+0x140/0x440 [ 2398.177223][ T5947] ? __fget_files+0x21f/0x3d0 [ 2398.177239][ T5947] security_file_ioctl+0xd3/0x230 [ 2398.177254][ T5947] __x64_sys_ioctl+0xb7/0x210 [ 2398.177267][ T5947] do_syscall_64+0x123/0x790 [ 2398.177285][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2398.177297][ T5947] RIP: 0033:0x7f1f0719e159 [ 2398.177306][ T5947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2398.177317][ T5947] RSP: 002b:00007f1f080ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2398.177329][ T5947] RAX: ffffffffffffffda RBX: 00007f1f07425fa0 RCX: 00007f1f0719e159 [ 2398.177336][ T5947] RDX: 0000200000000040 RSI: 00000000c05c6104 RDI: 0000000000000003 [ 2398.177343][ T5947] RBP: 00007f1f080ea090 R08: 0000000000000000 R09: 0000000000000000 [ 2398.177349][ T5947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2398.177356][ T5947] R13: 00007f1f07426038 R14: 00007f1f07425fa0 R15: 00007fffcbabf1e8 [ 2398.177370][ T5947] [ 2398.177397][ T5947] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2398.490622][ T31] audit: type=1400 audit(1790261211.852:20352): avc: denied { unmount } for pid=32326 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 2398.544915][ T5945] bridge0: port 3(syz_tun) entered blocking state [ 2398.544968][ T5945] bridge0: port 3(syz_tun) entered disabled state [ 2398.545125][ T5945] syz_tun: entered allmulticast mode [ 2398.546233][ T5945] syz_tun: entered promiscuous mode [ 2398.583847][ T5945] bridge0: port 3(syz_tun) entered blocking state [ 2398.584905][ T5945] bridge0: port 3(syz_tun) entered forwarding state [ 2400.099237][ T5955] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 2400.099255][ T5955] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2400.110900][ T5955] vhci_hcd vhci_hcd.0: Device attached [ 2400.403592][ T5825] usb 40-1: SetAddress Request (2) to port 0 [ 2400.403653][ T5825] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 2400.429769][T16566] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 2400.484285][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 2400.574670][T16566] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2400.578723][T16566] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2400.578738][T16566] usb 4-1: Product: syz [ 2400.578756][T16566] usb 4-1: Manufacturer: syz [ 2400.578765][T16566] usb 4-1: SerialNumber: syz [ 2400.894234][T16566] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2407.922926][T16566] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2408.002623][T16566] ath9k_htc: Failed to initialize the device [ 2418.602416][ C0] sched: DL replenish lagged too much [ 2462.977539][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 2479.341956][ T1523] Bluetooth: hci5: command tx timeout [ 2528.881896][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 2535.352134][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 2535.359083][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5950/1:b..l P4969/1:b..l [ 2535.368095][ C0] rcu: (detected by 0, t=10502 jiffies, g=279825, q=584 ncpus=1) [ 2535.375868][ C0] task:udevd state:R running task stack:24088 pid:4969 tgid:4969 ppid:1 task_flags:0x400140 flags:0x00080000 [ 2535.389752][ C0] Call Trace: [ 2535.393015][ C0] [ 2535.395923][ C0] __schedule+0x1259/0x6920 [ 2535.400415][ C0] ? __pfx___schedule+0x10/0x10 [ 2535.405257][ C0] ? irqentry_exit+0x24d/0xa10 [ 2535.410000][ C0] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 2535.416043][ C0] preempt_schedule_notrace+0x57/0xd0 [ 2535.421401][ C0] preempt_schedule_notrace_thunk+0x16/0x30 [ 2535.427272][ C0] rcu_is_watching+0x90/0xc0 [ 2535.431848][ C0] __page_table_check_zero+0x357/0x410 [ 2535.437294][ C0] __free_frozen_pages+0x790/0x10f0 [ 2535.442479][ C0] ? __pfx___free_slab+0x10/0x10 [ 2535.447395][ C0] qlist_free_all+0x47/0xf0 [ 2535.451870][ C0] kasan_quarantine_reduce+0x1a0/0x1f0 [ 2535.457319][ C0] __kasan_kmalloc+0x8a/0xb0 [ 2535.461892][ C0] __kmalloc_noprof+0x32f/0x840 [ 2535.466716][ C0] ? tomoyo_encode2+0xfb/0x3c0 [ 2535.471464][ C0] tomoyo_encode2+0xfb/0x3c0 [ 2535.476029][ C0] tomoyo_encode+0x29/0x50 [ 2535.480417][ C0] tomoyo_realpath_from_path+0x18c/0x690 [ 2535.486034][ C0] tomoyo_path_perm+0x276/0x460 [ 2535.490854][ C0] ? tomoyo_path_perm+0x262/0x460 [ 2535.495851][ C0] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 2535.501194][ C0] ? filename_lookup+0x3bb/0x590 [ 2535.506115][ C0] ? __might_fault+0xc5/0x140 [ 2535.510767][ C0] ? find_held_lock+0x2b/0x80 [ 2535.515429][ C0] ? __might_fault+0xc5/0x140 [ 2535.520081][ C0] ? __might_fault+0xc5/0x140 [ 2535.524734][ C0] security_inode_getattr+0x116/0x280 [ 2535.530078][ C0] vfs_statx+0x11f/0x3f0 [ 2535.534295][ C0] ? __pfx_vfs_statx+0x10/0x10 [ 2535.539035][ C0] ? do_getname+0x191/0x390 [ 2535.543514][ C0] vfs_fstatat+0x77/0xe0 [ 2535.547731][ C0] __do_sys_newfstatat+0x9d/0x120 [ 2535.552732][ C0] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 2535.558361][ C0] do_syscall_64+0x123/0x790 [ 2535.562930][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2535.568803][ C0] RIP: 0033:0x7ff944911b0a [ 2535.573196][ C0] RSP: 002b:00007fffa1483db8 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 2535.581580][ C0] RAX: ffffffffffffffda RBX: 000055ef47578400 RCX: 00007ff944911b0a [ 2535.589520][ C0] RDX: 00007fffa1483dc0 RSI: 000055ef47566296 RDI: 00000000ffffff9c [ 2535.597550][ C0] RBP: 000055ef733b4668 R08: 000000008f96946a R09: 0000000000000001 [ 2535.605492][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2535.613437][ C0] R13: 00007fffa1483dc0 R14: 0000000000000000 R15: 0000000000000000 [ 2535.621386][ C0] [ 2535.624394][ C0] task:syz.0.7038 state:R running task stack:25336 pid:5950 tgid:5949 ppid:1521 task_flags:0x400040 flags:0x00080002 [ 2535.637843][ C0] Call Trace: [ 2535.641098][ C0] [ 2535.644006][ C0] __schedule+0x1259/0x6920 [ 2535.648484][ C0] ? mark_held_locks+0x40/0x70 [ 2535.653226][ C0] ? __pfx___schedule+0x10/0x10 [ 2535.658050][ C0] ? mark_held_locks+0x40/0x70 [ 2535.662788][ C0] preempt_schedule_irq+0x4e/0x90 [ 2535.667787][ C0] irqentry_exit+0x205/0xa10 [ 2535.672363][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2535.678312][ C0] RIP: 0010:__orc_find+0x83/0xf0 [ 2535.683232][ C0] Code: 02 48 01 f2 48 d1 fa 48 8d 5c 95 00 48 89 da 48 c1 ea 03 0f b6 34 0a 48 89 da 83 e2 07 83 c2 03 40 38 f2 7c 05 40 84 f6 75 4b <48> 63 13 48 01 da 49 39 d5 73 af 4c 8d 63 fc 49 39 ec 73 b2 4d 29 [ 2535.702817][ C0] RSP: 0018:ffffc900040eeeb8 EFLAGS: 00000246 [ 2535.708853][ C0] RAX: ffffffff929a793c RBX: ffffffff91d51740 RCX: dffffc0000000000 [ 2535.716808][ C0] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ffffffff91d5172c [ 2535.724749][ C0] RBP: ffffffff91d51740 R08: ffffffff929a79ae R09: 0000000000000007 [ 2535.732777][ C0] R10: 0000000000000200 R11: 00000000000a737f R12: ffffffff91d51740 [ 2535.740733][ C0] R13: ffffffff8b737f5e R14: ffffffff91d5172c R15: ffffffff91d5173c [ 2535.748677][ C0] ? tipc_sendmsg+0x4e/0x70 [ 2535.753167][ C0] ? tipc_sendmsg+0x4e/0x70 [ 2535.757648][ C0] unwind_next_frame+0x2ec/0x2090 [ 2535.762648][ C0] ? tipc_sendmsg+0x4f/0x70 [ 2535.767126][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2535.773250][ C0] arch_stack_walk+0x94/0xf0 [ 2535.777816][ C0] ? tipc_sendmsg+0x4f/0x70 [ 2535.782293][ C0] stack_trace_save+0x8e/0xc0 [ 2535.786941][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 2535.792293][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 2535.797201][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 2535.802110][ C0] save_stack+0x162/0x1e0 [ 2535.806420][ C0] ? __pfx_save_stack+0x10/0x10 [ 2535.811241][ C0] ? __free_frozen_pages+0x79f/0x10f0 [ 2535.816585][ C0] ? qlist_free_all+0x47/0xf0 [ 2535.821241][ C0] ? kasan_quarantine_reduce+0x1a0/0x1f0 [ 2535.826855][ C0] ? __kasan_slab_alloc+0x69/0x90 [ 2535.831851][ C0] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 2535.837890][ C0] ? __alloc_skb+0x140/0x710 [ 2535.842452][ C0] ? tipc_buf_acquire+0x26/0xe0 [ 2535.847274][ C0] ? tipc_msg_build+0x112/0x1100 [ 2535.852184][ C0] ? tipc_sendmcast+0x797/0xba0 [ 2535.857006][ C0] ? __tipc_sendmsg+0x6b9/0x1ab0 [ 2535.861917][ C0] ? tipc_sendmsg+0x4f/0x70 [ 2535.866393][ C0] ? page_ext_put+0x3e/0xd0 [ 2535.870881][ C0] __reset_page_owner+0x84/0x190 [ 2535.875793][ C0] __free_frozen_pages+0x79f/0x10f0 [ 2535.880968][ C0] ? __free_slab+0xd0/0x220 [ 2535.885449][ C0] qlist_free_all+0x47/0xf0 [ 2535.889923][ C0] kasan_quarantine_reduce+0x1a0/0x1f0 [ 2535.895362][ C0] __kasan_slab_alloc+0x69/0x90 [ 2535.900194][ C0] kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 2535.906059][ C0] ? __alloc_skb+0x140/0x710 [ 2535.910625][ C0] __alloc_skb+0x140/0x710 [ 2535.915028][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 2535.919937][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 2535.924845][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 2535.929757][ C0] tipc_buf_acquire+0x26/0xe0 [ 2535.934410][ C0] tipc_msg_build+0x112/0x1100 [ 2535.939153][ C0] ? lock_acquire+0x1d1/0x380 [ 2535.943804][ C0] ? __pfx_tipc_msg_build+0x10/0x10 [ 2535.948980][ C0] ? tipc_nametbl_lookup_mcast_nodes+0x214/0x370 [ 2535.955293][ C0] tipc_sendmcast+0x797/0xba0 [ 2535.959949][ C0] ? __pfx_tipc_sendmcast+0x10/0x10 [ 2535.965136][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 2535.970053][ C0] ? clockevents_program_event+0x23e/0x820 [ 2535.975833][ C0] ? clockevents_program_event+0x23e/0x820 [ 2535.981615][ C0] ? __pfx_woken_wake_function+0x10/0x10 [ 2535.987225][ C0] ? lock_acquire+0x1d1/0x380 [ 2535.991880][ C0] ? avc_has_perm_noaudit+0x56/0x470 [ 2535.997147][ C0] ? avc_has_perm_noaudit+0x145/0x470 [ 2536.002494][ C0] __tipc_sendmsg+0x6b9/0x1ab0 [ 2536.007233][ C0] ? __pfx___tipc_sendmsg+0x10/0x10 [ 2536.012404][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 2536.017322][ C0] ? sock_has_perm+0x25a/0x2f0 [ 2536.022068][ C0] ? __pfx_sock_has_perm+0x10/0x10 [ 2536.027151][ C0] ? lock_acquire+0x1d1/0x380 [ 2536.031804][ C0] ? __local_bh_enable_ip+0xa5/0x120 [ 2536.037062][ C0] tipc_sendmsg+0x4f/0x70 [ 2536.041375][ C0] ____sys_sendmsg+0xa4d/0xbe0 [ 2536.046122][ C0] ? __pfx_tipc_sendmsg+0x10/0x10 [ 2536.051119][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2536.056389][ C0] ? rcu_is_watching+0x13/0xc0 [ 2536.061137][ C0] ? ___sys_sendmsg+0x19d/0x1e0 [ 2536.065955][ C0] ? kfree+0x1e5/0x6d0 [ 2536.070008][ C0] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 2536.076394][ C0] ___sys_sendmsg+0x190/0x1e0 [ 2536.081051][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 2536.086218][ C0] ? do_user_addr_fault+0x7d7/0x12f0 [ 2536.091479][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 2536.096659][ C0] ? __pfx___might_resched+0x10/0x10 [ 2536.101929][ C0] __sys_sendmmsg+0x20c/0x440 [ 2536.106583][ C0] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2536.111766][ C0] ? selinux_netlbl_socket_connect+0x30/0x40 [ 2536.117723][ C0] ? __pfx_do_futex+0x10/0x10 [ 2536.122378][ C0] ? xfd_validate_state+0x129/0x190 [ 2536.127552][ C0] __x64_sys_sendmmsg+0x9c/0x100 [ 2536.132464][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 2536.137638][ C0] do_syscall_64+0x123/0x790 [ 2536.142206][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2536.148069][ C0] RIP: 0033:0x7fbe0e79e159 [ 2536.152453][ C0] RSP: 002b:00007fbe0f60b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2536.160834][ C0] RAX: ffffffffffffffda RBX: 00007fbe0ea25fa0 RCX: 00007fbe0e79e159 [ 2536.168786][ C0] RDX: 0000000000000300 RSI: 0000200000006740 RDI: 0000000000000005 [ 2536.176727][ C0] RBP: 00007fbe0e83506b R08: 0000000000000000 R09: 0000000000000000 [ 2536.184668][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2536.192609][ C0] R13: 00007fbe0ea26038 R14: 00007fbe0ea25fa0 R15: 00007ffc4ca34278 [ 2536.200570][ C0]