last executing test programs: 10.503551763s ago: executing program 1 (id=5997): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0xfffffffc, 0xb, 0x6, 0xfffffffc, 0x7d, "db8f2d2b3b7596160c6981acf8805944823a7f"}) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0x5eaa) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x2c754362, 0x4, 0x9, 0xd, 0x9, "0100000000e409878000000040000000000018"}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x80000, 0x8000000, 0x2, 0x9, "00000000000700000000fffe00"}) r1 = syz_open_pts(r0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r2, &(0x7f0000000280)="7325fa173c3aba1f28468848a30f776ff8e5065b9441b50af0cdb300b6e7ce2f24eb5cef29c97190b38d528709fbc727e8d2cb571bd56062dbe1c505a7728c94f5a235b2beac35c183a49318ec813aabbe215d51cc823a522460ec7434c268e143ba1489db0ab01f7f639058c9a7ab9322fa985ee06516e34fde341a86b8e68775f5ada1a51ecff42b15f4d5abc4e0463760a5ae849a9c51582c07e0ec18fbdef34f41026cb8bafc49", 0xa9, 0x20049800, &(0x7f0000000340)={0xa, 0x4e23, 0x0, @local, 0x2}, 0x1c) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000240)=0x1) setns(0xc9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r3, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) read(r3, &(0x7f0000000b00), 0x100) read(r3, &(0x7f0000000d00), 0x100) read(r3, &(0x7f0000000f00), 0x100) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) write(r4, &(0x7f0000000700)="010000000705810240000007058102000200", 0x12) write(r3, &(0x7f0000000a00), 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 8.950309635s ago: executing program 1 (id=6007): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, 0x0, 0x10) 7.784873172s ago: executing program 1 (id=6009): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000c9edde43849f63000000000079104800000000006104000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet(0x2, 0x3, 0x9) sendmsg$inet(r3, &(0x7f0000002380)={&(0x7f00000002c0)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@ip_retopts={{0x14, 0x0, 0x34, {[@generic={0x7, 0x2}]}}}], 0x18}, 0x4040000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) write$sndseq(0xffffffffffffffff, &(0x7f0000000140)=[{0x5, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2b, 0x10000, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x2, 0x0, 0xa, 0x20}, {0x8, 0x10, 0x100000002, 0x0, 0xffe, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x6e6bc0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e0000002000000000000e200000000000000000000000000000000000000000000000000000000000a00"], 0xb8}}, 0x2c000010) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000100)={0xa4, 0x0}, 0x8) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = dup(r9) write$UHID_INPUT(r10, &(0x7f0000002b40)={0xe, {"a2e3ad099b0d09f91b5f2f0987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f323063090810e0879b0f0a75e70a9b334d959b669a240d5b0af3988f7ef31952010afde8d178708c523c921b1b5b07070d075b0936cd3b78130daa61d8e81a3f00005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397273ce1766769f0c91c00305d3f46635eb016d5b1dda98e2d739be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b7638354a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc3609aa24b7d520c829d095083bba2987a67399eac430d145d546a40b9f6ff14ac488ec130bb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b2860d1b3cff57d8b6d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a4f0492d48604675fde2b34cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827955e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb9754fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94e7475cb74642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd72ea4998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5ff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c58b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b50517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864af090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d885b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1a85ae7e69fd1a47a284f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cef8473b53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b344340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cccf8a97406bb5a68a1f0c4549820a73c8859dde0712ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcb7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c2e14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ec00000000000000b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a52830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec685f068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000e00f96f06817fb903729a7fb6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x942}}, 0x1006) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x6b, &(0x7f0000000280)=[{}, {}], 0x10, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xfa, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={@map=r10, 0xffffffffffffffff, 0x7, 0x202c, 0x3f, @void, @void, @value=r8}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r11, 0x0, 0xe, 0x0, &(0x7f0000000040)="e097566f5bec64466cf0925782dd", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$inet(r2, 0x0, 0x0) recvfrom(r1, 0x0, 0x0, 0x2080, 0x0, 0x0) 6.802980099s ago: executing program 2 (id=6015): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x19, 0x0, &(0x7f0000000280)) socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) writev(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r1, &(0x7f00000001c0)="64e9", 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) setns(0xc9, 0x0) r2 = socket(0x2d, 0x2, 0x0) setsockopt(r2, 0x11d, 0x1, &(0x7f0000000200)="01000000", 0x4) sendmsg(r2, &(0x7f0000000400)={&(0x7f0000000500)=@generic={0x2d, "00000000000008011800020000000600"}, 0x80, 0x0}, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x2000, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280), &(0x7f00000005c0)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x44, 0x2c, 0xd27, 0x10, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x5, 0x7, 0x1, 0xfffb, 0x8, 0x5, 0xffff, 0x5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0xc004) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="640000001000010429bd700000000000e0000000", @ANYRES32=r3, @ANYBLOB="00010000316f0600300012800b00010067656e657665000020000280080011"], 0x64}}, 0x20000000) syslog(0x2, &(0x7f0000000bc0)=""/27, 0x1b) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) 6.596808375s ago: executing program 1 (id=6016): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7a4d205fd632f830272d3a78302205252b9ae7d8be5638396a0fa0583974f3f28302280b7b4d3c9e13d74dbc7b9e8718956dd5f", 0x5d}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5faf093fd548fca4f3a6e7391c8acfda620b96e71569873", 0x3f}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2", 0x6e}, {&(0x7f0000000440)}], 0x4, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) accept4(r1, &(0x7f0000000500)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f0000000600)=0x80, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 6.30816287s ago: executing program 1 (id=6017): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100049e053732c4171e7206de0102030109021200010000000009040000000206"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="000509000000280834df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x26aba000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ptrace$PTRACE_SETSIGMASK(0x420b, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cgroups\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000002, 0xe, 0x0, &(0x7f0000000280)="ff47c9f7b974a600000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000000)=r7, 0x4) sendmsg$NFT_MSG_GETFLOWTABLE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400fffffffffffffffd0000000000002c000003"], 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) 5.09142394s ago: executing program 2 (id=6020): ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) 4.911296814s ago: executing program 2 (id=6021): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) recvmmsg(r0, &(0x7f00000064c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001500)=""/4112, 0x1010}, {&(0x7f0000000080)=""/82, 0x52}], 0x2}, 0x400000}], 0x1, 0x20000, 0x0) 4.552267551s ago: executing program 2 (id=6023): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0xfffffffc, 0xb, 0x6, 0xfffffffc, 0x7d, "db8f2d2b3b7596160c6981acf8805944823a7f"}) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0x5eaa) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x2c754362, 0x4, 0x9, 0xd, 0x9, "0100000000e409878000000040000000000018"}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x80000, 0x8000000, 0x2, 0x9, "00000000000700000000fffe00"}) r1 = syz_open_pts(r0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r2, &(0x7f0000000280)="7325fa173c3aba1f28468848a30f776ff8e5065b9441b50af0cdb300b6e7ce2f24eb5cef29c97190b38d528709fbc727e8d2cb571bd56062dbe1c505a7728c94f5a235b2beac35c183a49318ec813aabbe215d51cc823a522460ec7434c268e143ba1489db0ab01f7f639058c9a7ab9322fa985ee06516e34fde341a86b8e68775f5ada1a51ecff42b15f4d5abc4e0463760a5ae849a9c51582c07e0ec18fbdef34f41026cb8bafc49", 0xa9, 0x20049800, &(0x7f0000000340)={0xa, 0x4e23, 0x0, @local, 0x2}, 0x1c) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000240)=0x1) setns(0xc9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r3, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) read(r3, &(0x7f0000000b00), 0x100) read(r3, &(0x7f0000000d00), 0x100) read(r3, &(0x7f0000000f00), 0x100) write(0xffffffffffffffff, &(0x7f0000000700)="010000000705810240000007058102000200", 0x12) write(r3, &(0x7f0000000a00), 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = syz_usb_connect$hid(0x3, 0x3f, 0x0, 0x0) socket(0xf, 0x6, 0x3) syz_usb_control_io$hid(r6, 0x0, 0x0) 4.495435352s ago: executing program 4 (id=6025): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0xa8740, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000580)=@raw=[@ringbuf_query, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xb}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x3}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000003900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8c4}, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000050}, 0x2000c8d1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f0000000140)) close(r2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000080)={0x1f, @none}, 0x8) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000100), &(0x7f0000001200)=0x4) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) 4.252980037s ago: executing program 4 (id=6026): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000080)={0x0, 0x1}) (async) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd86) r1 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) socketpair(0x2, 0x4, 0xff, &(0x7f0000000340)) (async, rerun: 32) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001200000008000800000000000800090000000100180001801400020076657468305f746f5f626f6e640000000800090000000000080006"], 0x4c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14) (async) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000080)={0x50, 0x0, r5, {0x7, 0x29, 0xb, 0xffffffff9080edc4, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) (async, rerun: 64) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 64) syz_fuse_handle_req(r4, &(0x7f00000063c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895ca9bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)={0xb0, 0x0, 0xfffffffffffffff9, [{{0x4, 0x0, 0x800, 0x200000000003, 0x0, 0x96, {0x6, 0xfffffffffffffffd, 0x4ee, 0x10000000000008, 0x8000, 0x3, 0x7, 0x9, 0x5, 0x1000, 0x2, 0x0, r6, 0x5, 0x1}}, {0x4, 0x0, 0x2, 0x9, 'fd'}}]}, 0x0, 0x0, 0x0}) (async) setfsgid(r6) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r8, 0x1, 0x70bd2a, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd7000fbdbdf2505000000200001800d0001007564703a73797a32000000000c000280080004"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f0000000880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f00000003c0)={0x460, r8, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3879}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_LINK={0x9c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbe7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}]}, @TIPC_NLA_MEDIA={0x100, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x542}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff5}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5569}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_LINK={0x110, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe4f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x660f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3b8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf995}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}]}, @TIPC_NLA_BEARER={0xd8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x5, @mcast2, 0x6}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7, @mcast1, 0xc}}, {0x14, 0x2, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x10}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'sit0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}]}, 0x460}, 0x1, 0x0, 0x0, 0x91}, 0x4000) 4.187433627s ago: executing program 0 (id=6027): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7a4d205fd632f830272d3a78302205252b9ae7d8be5638396a0fa0583974f3f28302280b7b4d3c9e13d74dbc7b9e8718956dd5f", 0x5d}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5faf093fd548fca4f3a6e7391c8acfda620b96e71569873", 0x3f}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2", 0x6e}, {&(0x7f0000000440)}], 0x4, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) accept4(r1, &(0x7f0000000500)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f0000000600)=0x80, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.8465783s ago: executing program 0 (id=6028): r0 = socket$nl_route(0x10, 0x3, 0x0) capget(&(0x7f0000000200)={0x20071026}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040) 3.73446784s ago: executing program 4 (id=6029): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781e", 0x6}], 0x1}}], 0x1, 0x0) 3.563972227s ago: executing program 4 (id=6030): syz_usb_connect(0x2, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005c3f6b200304a4bc23d7010203010902120001000000000904d4"], 0x0) r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000001c000000bca30000000000002403000020feffff620a00fef8ffffff71a400fe00000000bf03000000000000e5000600000000002604fdffff02000015010000033800001d13fcff000000007a0a00fe0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x1a}, 0x48) r3 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000020c0), 0x2000413, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r4, &(0x7f000000bb40)="de98ee653502c564abeb97fc678bde22efebcf99c2d89952950acc703a3c6268a54c8b1bd1ee165c82980cd315b55a070dc41deeb2d4c1842d936a0bcde5fd7ed6031fdd9cb58ebfe8261528f097f309813b5722c24a1af8e6bc6ddaef7e85d2659690154bc5e6ee73c3fe7176509ad7b30e1098fc9873db91d3c1816825e710374de8d40693578b598922d9c523cfff93a630f121251d17ad40bce021d7fd57945fe2a186618a40b5f3995a9f0ceaa3e22b57e4f68e53fffeb5474fb83afaf5cde6b0aaf5cf0313ede442ddf1df6c280921e43d80dddfd005969272e1719b37fd8f749fcde83f8201826b4cf5b1c1da394568aa7d8833dd11309f46422b0152ede5ab29b17bc1ae80147346155b20a98d6fc2650bec3fe73327c45cad1b38f7c983cd070556a8f8ed5d58e1052f6436fad905099d18fb3e62c2c36a1c2209a94c820e30e5234e77be3beb4cd183015d281e7bf39cdcf0f1e541211c75d64a49b55ba4c2c444bef36d98df66bea814bab91ed65386d6a491a6295c24dbaf752a5e7a856e0dfe46a6f9e718ca3919c6f8978b0fd65c9e389114e5afd8e9e2a575b854463b63f46d08795f0f1d0d48d6d610fd74e9238de32ee3fa2ffef550336341803c083ac1d749be6c5440bbe4bd3bc3015bcde2b4e2160ba266d281a9641f74d9348fb6fa8550d1e8a8362999452e40b75c412cfa77ab8e1aaf1a9e83c855ec9b7ada38690f0d2e59f67a1f3babbcda8011595ea720816c24726b833beaca0a9d11e7b99373601d27d18c9e29940503d3a12149fdc4fe0065c3d023d6e7712eb853df19f2b4b886e08d61629288ff16c2597d7fae5bfc8b41f92fc325ffe0f61683b1f661409bdd7c3d88a854f8393484f4669b5d9654fd3a0819a32110b9064539a7419c332629b3fc71da35b783ef7c693842ce83733a63f2e6af37989cfcb768ab8cea5d21b82a0e9f6fdcec26b0107708867dec54c4e739fe9b931b3c6da013bfae097c57f1e16ba54f9028e672511938a0ad9d681d7feebc65a2f5f588abd66261393f3ba02d7b2cf650a9f7c6a4ca55b4d41132908dc9c90e26f0da8e2259e3a2b63b2d9e27754e278827ab80438070698c690ec375a9aeb4193079a28a2a062961ba0e65af01644af063f3ebefda92c4986379f7b099b2fd3960929578736f09887fc5816cb1b982e5b121b79662d1674dd0c6e82627cf8c63e576e5c1eb0af9415ddc10ff880e8ae3ce8c4fb87b8f9d364974c2a1d8eba4e04bc2bc018bfabc435683b2551c0e4908570b930c4fd7c03ddb95e9ec1d1994e3df0305fdac4e5b914641ae25b0c469b194c0bb78ab04887cdc4262da468475b926a18254d23b4c44705aeca34ef8a7b04dd55a43f39996529a23804e054655c5ba8661f7c02737e7539650364928d62b9b8d80988232009acb54214f06640e9bc6614c0ce02e4a22dc8b91a0aad711e4fd01d7020b7c7185e41e27ce266b9f5aec682cbd4bba3240d6277b17b564937254f37afe580cba0b78c6b0cc81830eaf10d7cc1f7e918d49e935629fe6c24b4368a04af1b99f6981340ee031874f3d4b3a9ebc31719b3b775bfe1fdfa0460a3820bff6f61b49b11ac2ca00836a0c4a74aed92a619f34231196669b942e761538e64f965d23d4f7814256e876263fe5307985c4e6eb69c974f66276764e80ab1de3f5c55e7b2cfdb78dd183a85473e968918ad73f29a266c818b9bf9f62eed86df25b2577bb6d98e3996e94f5bdf119b869541a94eb3536c979c3d77cc0df7c0c48a902ca2f03f5ba5a8ef9431cf95f6fc89744e8440e1d5ebb837e30ef7541fbc27672c31566ac3676a173cb9e466a2d206ba1ebc2b985eddcd6ff937375fbc8415eba46f5ec68cfa9f3a669d41b078867dd9f5160ba4572d170b345ccb3b1b7a6d77c977533659f7c7ac22c68f5e93c1df6c2a3d45b55a4afd3355680aed864f6bbe13da2da28a4851f73c88e555f3bb1c34a21fc45ab6c28287902e8b5fcae6899c804f364cd878a8d1734462bb075cb7bc709cc2c5d7747c4c29a2fa9259752301c26b852b7993adf889d45dbe39094c9b7b168756e5b939ed10bb6df57b8f5e14352cfc7d8b03cda5b978b06cf2430af5db17177b1ef664bc4b00307f970c4fc606a6bab72125f62b0f59655c35b104da7af188a953cfc09b3aa0785abf330830fefedcc8bf9a11d5dc4b5642f679d45cb44fe61ab1d906345c1c345f6b8027bae9585580c20115d2504d9c83ab54ea2557b6d2dd3bc65fa29f091aa46a215e77621836154104e6969fa9107139a19f2e45cc6bf55422a0e1a6d037ad9e63df5f9cd2045e13ac2d6a15bc12008c4cd23782df7d41bfecc0037292d22c7b42f2cc1a22db7502332d9f4fa85f7640c8635b9469681adb6bcec2dfdf6926f1815156d80a835ae918527f549ea6df45f350f618dc1f3ca139759be28e35013034f8bbfd3fa1a8f302594213c18015305911f42e287f2d86f17d76f8a0ea03fb574c60c808669f9f4454fc2eaf0e93873f688e34bd3341f6874d5d8fe754172a751d6ab23dc1642220e7fb1071df0ee3c7e07c338915494a3b360bdc0b38ed221c2c2bc86b29744448b255802b3ddfe600c1d0f9acabb2185e4e9dae5e456d5825f516c857f63e72e4a5f3d45eaf11a0e3a5ad0ba30a0bf0f94cc99586fd202d6118bb6f9c272f6cbe39dd9b8b36ea7fa51dfe0bb87a633be11c14f5ed1bce8492387696e195fa3c5f172690b4434aa2e91ce7d225d73b1983d2605ec725aae0ae402cd2f79fc202a307f1896f3dfcf8c0fd8b841dcfeda5d65bb7d76f7c2d2eb1b164c0368e9984f320a224d7d438bc5c699acbc18a587b7589e960af114afbc9f59243646557962fc2e0cb5b5bf160a313bcfd9ade3e140b808e9f19415808aa312ae9c9e8bcd5a47fc721eda59d10670088714984a71d5c0df8b68e675a8e31ec15a92ff6a04d17e0ef849c782b302d11f742efe6486ab904fd65c0aac4ec25c6d877b453dce80e894de703aa8b1e5d00701850f149fe437fd0944cb95e54a924a49bd86bb9a602cf2904fbd9e399f1cdcd0b45b6d8f872e285f9dfeaa26aa760074651393c6451b36c643dd0b7236ec7803d69cec1b09bf1b63fbb68ad7c01507f00083b184ff01a62096f386f4c8fdc85e93eecf3f4b384aec1c10ccc60d8109a6d887bd389c3406163f9600879f0e944443d783e8644f69344f6f44f7bbf1883cda7369c9b9904d991c01552135f158a0bbb7f40c354f292c034824d82c209ebc770f5b756768ae51d45f8875b59904a07090689e65b40625566eed5d209130db812f287b966ae21ba46a3a7a3a0360a4e284d8d91ba9ed9806ea063827c8dda0fa98f758cbfa523ac645421f444a40b95bb065a64256c19354b1ad5002bb7b2add9b5236ad64e9052734b9d263515683db121b5e4dc1eab244dd8fc0fc62d962834ba0b21aad872b127afc0a33c7869a3f213519aa2ef51bab9ab28ed18859fd8239841a6668fc614dedd099121ae6c220a143c119cb9bff9068f65d0554b4c12105e59a22e91203a08ab8c718ec62c42d7ebb7b495e9e1be8fb7e4aab2777025da37b48d9d7b97578841a73898a6eab994e250106e096390c77b0600537be881ab7d81e3cb468bf1fe318b1e804d8df9875e9b8da22e6244997317391cce608085a28b8d070d654a29afab324ba3eecf427b6dfd43501ec0db919f71a932897eb37fe3bd64ab5a34ec60011696298b74ddd7a3710d3e444cedcc5cdc357f9dd58e67dc0ed3fc8df6dad82b3c00b4290c3280c28f78df052ec9cdd9df025abe8834616eddd5bb93379c69092911cd60761e7d14b426a83e335bfc8bf67a14e01df7cefb6023f0c6556534b975ed889de0d96d968526372402ce3d21a2c5c64a449dc3ba4ee0b5ceabc2fa29679e225681c8e946dc94b48af024bb1633e1860c7d8c14500967f24e2f8f46db537232a4e9f4abf8408f53bb52b035bdb89917a6f2f4bd22403ad002c2d936b785ecd965177e9f6235787a185d0eca92532f1aab16756ae86ece13925ba4a1fd08125102ae08c428d073aa426c4e792b5a4acf618605df1707021ce1eed62da4ee87334e34edf43338a0076b8ec739e2c31071e10c6a853e19fbf25b8a356527a67c8f7696dc184e374f4641f4e5b0aa345f1e6c4bfeba3a392d9a994bc271717a051c98d6c5b1f3296caf4c01d80ffb75b6fbdd0a0583f9d4695a44a2878df0c09a85aaab14522320cc3d2611603a34e52da03677a60cc87cc3c689975e5b5366c82e040b6643b8865d8bea0c84cef9ff85245a8b4bc41af1a50775b29fe55e42ac4b29fe80ddaf02e8c9bd07cab823f3d9021ac88236525ec045688a2fc9c6df66f549b10720cebf09ead919524f071cd128fb7575c84190c698b420f89b3c11195b5d83022d1f7e48afc21203995caf8f9286dcd5bd51b65c1af1caadf5a1b3f12579066855ff851075adb959dc3e086a7fb4e9a27fe80e8f3c0959b042486310ae7b785b0612e0385e36f50d4cae3474dd000c3957955534b4907b9480e2e5d83dedbeb76cb78d893c5b64dd51e31abc8e8b4c56b96f67c4b6e43861d91681af3270aae1a8f50712bd97326ee46a2640285b2902f051071d5a3400e99b76459956ac6908688c314bd8e54365383a65b186a6386cc5218e41e0b386759de81bccf5aa68f8608831a9d33ad1af2bdbd8579c5921cd8c3dd2f3bf1f123c742e118c76e2f43618bb7885e44826b7417c9ca5a139d774c16fbf74c8969c038ba6a54f27bab46ecc94d6455188d8dc1edf1da715c8d9976226877096df4158eeecced2248c7b88de0dd11a076db1f06bae4adba8286dc39aa62a55233886e011622ae1cf97238914a55078a78908145295777dbbc4e0d34364e0f3daa9eba6fa54c085777b18c0523818ff8710dee4bfeb3db549c3f38dde73b99a7b1b219282407a4e0ab3794089e21f6f2045ab6254ac3703903edb302fb2f0f97e47cca7969ad6b5b6cf27314137a04d5f4f29c193cfc5540592ab1342a1a9cbd514a7b4d6b23f724a5d7bfa6ffe8e3d9de29b8661139f179a0fafecf234f19bee75c25faffc765e02377d83e0ad0a0029c08f5c71595bc1b2fe88f0fe958f3f1f8ba6821ab834cab9bc902b2d47bd4b5ed52b5b0d7b3bc999b2f68879be39ddcb0428ce3a617b68c11459b746651f413d9e9a098cd2b5c0fcfd0ea1db2cde1672818d7bc73b053015692f9e9259a0153e3c9ac5e73e3343dd350cfbcaa57be93cc881a35063aec2db4ed71df2b1bd90b5ecbd84f399d4530c5450d622188423e151cec49673dc633e503c497d53843f4824750dc09abae9f2f465e92888715b6879f5edbab7bcd58f0899e1430ffb5f3063450945cb0fb3b5c3088ed6966c54dddae3aab489a80341b45a17cac02ae62749f209a7e16ecdfd86b43569c7b34511c65474acf2b2c18834e158e20957bf2320e4a6b9d63caea93b3a7dd4f7ba54443aba1ac2b6f2b27e1bf6f17d3fd1582462e0debc7069bb70e219654cbb99adfed54ab94329382163f2ab6710bb581d189cb3449a02c917c1f2d1d5f51958ce605fdb0e37ae5f3cb3f123276d43b2c26ea948dee863e0b679ecddf0fe41ce78bbca30167c9c7d6b0e9193c98090facd7205a490727e1ac49bb4d639348a32546007459c61c27bf8df87dd2ed3f3228b8193422a72d15f848bac13c6ffa7b8a767cf04866feb7c7a81267d7a8e890128d4709e4873223578aa7febdd562403c6092c0a3f6e0650772ede935ab6ef95e375bcbfa395e23ef1d73532388b845a95f158dc845a123f798176c73e177926d39abd38a910d40653006375110be2f2c5f6efc87b31908be36dd07c8ba5853519a37dfc4dea981af855293f49a3270bb67cdc17b780fbf2a418fcec8953dae927909a6bbbdce230d23113efad9c02474682dafc63311050cb4f3f86c282ff29728eefac5c678360122b4ce221bcec82d24e053b63972d2e9a631a180b48bb8d2d4de7254d91a856071df51a1d87ca7eb5d19ac3def1fdd6ebd8f57c2c9e43cb6ff2fa00d27f279368f5ee29a84ba219a51d1f0f1965781164edbb3aa6209fbce6d40284fbb4a33f59bf9e1248100a623de16613eebc11f510b7718dde9f13b4c9b2b6a10dd932696cdb7fa4b5733b0377453471462762457d42038ebf8c0fb392ca7656ad1f050c326de75fffc698c48f5d809ae360ddb9856b9a54b811073233294bf91e46414441b6665f432201da12e49718b0d7929b6cbcbf310a09ce0d22f07ee5cfa8ffb9f03acd224641171ffafdf50f18be8fa3c907226cc1a6f3b16a776781a6396dbf09f689ad6bba4d537dad490a6f036a45ee3e224e6f519e44b7352ee3e7d3f0d89f8c7c8f54b6d2698c0298a07866c9d9ca09c96c2ac8efd7974294df6dd1bb0598debadb6135e7123bbfddf84870de54476a291586fc0e64784e65fdf78d462e8b51cbac38e7ff1878b11418f188220e3deb5367a2d90ad7d44395f6965cc6d680c59daac268c16814d1085302d0453b48e4a8ae78b8a5b6951a875ef42776f6d11955da7e5734a72b61cefcc6889b8f8d58db51ee78d7b1a8ffebd90e15a64654054767aaec24dd3b5f338b572496c8731049c10622b7f54fdfa43aaea316946291fee7bc9e64640e8bccf33fd1e8693b67020b49cf77faaaa8269e2fecc4e2b43c8c3378a4a9b9b85a4fe2c346c5512cda631542e0ff5706eba996f4f72e629b076d6be1966d44b1835ce664e3c6a4f18c68f5e32f900a0a167e547d5aa79c0aede966f83d00366a623ef8107e328654c8558d5e606f69a12b6c2a6fcbe0e08f945c4ad2738ed0b28d79c98514abe0819569c6e4f4751c665fd651aaa9ee392c330560ef6d57c0a97f0764f88433b2bf7641ba391634316b0ee1dac23a63be21270e50ea1ac24ac3b429a0b46c38dbd48c540bfb1e141b8b3df6caa179c7e54f2b7b1371e8eb05a30f13da95200ab70dc58325f6bea0ee9fe1f04154998df393f2b4ff4431363f3a7450fa5210e883d67620ae63cc41f72e74e26a0244de1ac722b6f1c1d293f7483b331a0efda65a4e4e9144547fe6dce2f4535e29048b07079329b63754bb124b9e046a6e97929b1f4a387765bf93804530791c9f649db6efbebebf46fa4f9af7ff2587130d0e70a32d4aab1dfbee6aadd1f3e5317e3d4c8cde75b1479bc3dd16ea35db3dca11cf1eb1d2bbac60b83605e171619d85fd4b6d0e24be8db76df12efef05eb87473b832e59f3039df44ef034e5e7546b399cc817a41b2f020286ff139072a5b909ebb185a3c955cf88f4a9929b2112e0a9ab43da0288ce3ea268ccc9f46f852d387f5d0a2831dfc8cb0bf593905ba376c069b8c9b70558ec826c5bf9835031199c4c6d84c913da7e9e7db49c1d34511d917b9ad3c40af0598737d58fd61b8f2adc46b73a284957a99943cf73414412fa5440a5f85b63c20794d122c267fba72bfcd0e2741642fd8ff5a0ae1ffd8b30d852c053d0e31f505ca13a21c0223a8ee77cdd92de1b9f87ebee4ea332e9d4573d7efb2ad3f50c35fb7a596c4edb4b72bf6df5a16ffe3c8a236f2cab8c0712ac26c2cbcc68c1dc45209b579c952c7d645642aeed7d60407ee2dc168179d536da950108e962c5c976d3a05bf5142466ee38939ee94e707a0135f99c99b5d6376f63c711e4f64950f08dbc931c812f34735d9eb1c5997770d8159068cdca2e0f192311ca438d613728b544d6a3e50ae0e4e6b1eb611ce55a96bb2f991d49173073d8547f5ede69d8b587a34bb8f637297a15ab4fc45f1384bbd19b3feab5fb81322ba831386eeb6067e55af374c1b1eb9613a6c41dfe2bbbcfad157dd042c67c44400b350f0dc40a8611f2e947f32ea3ac3f609027b5dbc95b157c13216fe7c35edcc82950bd4e38bcb02b63d2576489c331a222e013e73b5333694889b184bedbbb6fdd6fd40a62b1d5d494e68cd2aefc264f74bf70ef38373e599faaa326f574ae32b1aad86854af22db8c9673d14666aa7c0c3bbe0d76a835ba4b391552777ed20c5c6cd0aa84f3be73ca0a3c128914107fb8fc02220317fb111cf13398480cd3325582a7e55f4c4ef5a258bcd01a97615e95f89c8064d41d04340b88cd5f4b1d827a030637145d98422facadbbbce97dc3060402a7bfa73d7b4dde53184a0923c0ee29c6e8e2c35e396808df2481af6aab053b619fcb2833f14f87051c5461567c5f8dd40383a7521971775493f896e18c78bad8219f88258ea686652780c03ebafb63ecbfcb23e24d52a2f88a77ed3b2280637807a5e155f4fad7149b76841772471a3b77aa42e8058c0af1ac2be9d88b5152851708f1a77582b3e31702864ee6a244a38f3f95d9797a60cddeb5ddf08cc48fc677f03f9e717ebe7f472883e5a6a7df31ca4272228f26991460c537ebc8aecb6a0c34a763eb1f57124fbfafd6db4c21bedf6723b252aeb21eb1fd9f4f811fd3e2e764422964761b2ef3aaaf986a48f7be66f6387578f9492feebc97dfbc6bc97380394a5635dbe582e52a1fb18ea8fc4e53974c63d198cf0d878ba8a8d58688a037c0f753c7073337ef3da4c134ef939c98c8806d09943591e6013a1342de7c722f993fd7eb36ba8e8407d1ea60eb5724b0d6262c70469dbd8ea1956b8d7f5a77707a9cbe2137079e7abda3966c5bee4fd86e8a3c4969bc88ff328a2adc8f4546f647575866d5ced16df06bf40d9a5f178f9d19e490bd76e187c441e7de0e571f6cea5512ec9bea48903d91a519dc82defe34a06b0244d623090b5a250786bbc66c1e76db6b18d81ed33c81a7c93782d5cdbe0a7cf7d1ab29c04be6ff4a9bbc10f716a67d52fd52d91425abd2002cf83c3797861db5fbeaec745a552ca4a50604340f2cf2c1b10e9ba76c8ea43b283c73f774f8be213f17f70cf93b9f6a8bab1f516a935e80c3cc6756945edafd572e6e00840eedf61fc40351869f03562d8c13006de585a1141c02f1311fbc8e45e4b3878c32810698e4764a6e8495f165eefee35714a1794f9ab50897c5565ab745425933d9d6272a172c1f2a274f9ca7bc8e1b01a27b8bd06fd9dc61880789696348c99e9a70c9dd2a62ca04d1f86dc87380b618c2a78b16229d614702fce242fa17ea90cda2648f9375bf7e78b4267d558983e08a9566d95871998d23cc6d22c23370ae067b677609844abc140df81cbd9addbf657fffaab5c22c479acca18f3e4b508cf01ff7b2ca308ff116389790f26f2c7635f89c747a5bc66f61de575653069349a89fd7e3dd785266b7bccf16eb8b4a8a86751de60d33e17d64f6e4e0f9d13a16d243ad7364114db7ad011f094c4debf20a39e35e7eeb440bbe8811db2857b965edd1e2675ceb1bc9a1691f123dedb341962fbbe539485d2241b0409adce2587d035187a0dd5a62076ac4eb5c3e2f4455569b6eac0fc16155da1774cbe505dc92e2087585a7846bae699bef32e3c5ec2356dd4433ed29d4b03ff7b38f7b3cb96b92874eefda6c2e0e326214e40f14cc2ef80e1cd3fe226257a423b8ff5bb368b87ac7066c5136487775b5b122a858334c37f6a3f53d758c3c866e2e79daf9aeab36a59eddbae2fa5b6d20973014196ef0a4cde1373c7297833e6f1e46828f4a42eebd829dd4f17999abe285218ed5dc6007b21bceb588a213b29dbb1ab1a79b41a12df26fe35f0cf6a310c9e50cf10d71ad5960626e4efec211032ec4ae52512001362ba4108d86eb774d2d4d0364cbb1dae68f03a774e328c2dc09899ee80c05ac2a8e3ba905b0b3b7a08a3df20b505901123e7dc0a15db48d09c84189ca4345c23c2010c12cc35287fad30211cab9631e148a7c1e8bfab61ced30e098d1c3cf7b6a7fbd8288dfdc48044d0d47c17f129f6b5d751af1984d395ab1b08ccca3e7309a89a8a36dfc3fb82d2a4269bffc32571438d04a7b98137b46ae1fea1bd9ea64f99e2f0c5f12ed84886b10bbd511993b0447036c4e57b9dae6d5bdad6aa3f2d12e62471194e43111613b8b6944c2baf1f539ea14dd76c356bfef7e3d4b6fb91f6d321a796a4bce5a4c6a5caaf0f3eccd914dea21ae909be7ba486075ff6139e7e351fdd7e98013ba51ff0248852398c734f245ffd7fde8cacfa4805496ad7350b1c96d7bf9da9be492f2f414e973937ac9109b6e8b8315aa9b81840f2c21239caf85a28f0e590bb6ad12148e75bd4d7ea69a9ffb053781db98d5fb5aca30a734017be7683a559c203c006ecd4b135afe3650b906e0aa208c889f2af09f3f8263260c3bd07cf8021124b6f0e0d021f9839e47996905c3d7562df810484552de3bcc9ae054b62a01af6a7991e4d63f30c7a92d8b58e01052e53818e64d7540a3208af321709a5d891ceecae5d27a999b00ed01616a73ec8854ca61973ed1fd3d82f8628b215c55eb7908e297d77098a7b0c362709005a7d13c89c54556589b2a926c6e08cc1c0afebc7eeb5d7ae4ef0507c91b8e706e6dbf83d898819192c812554ad1c6377871a8ca50f1325630f7b5266b807ef61d0c8d399fada49cb02a14c16d39f4fa7b81272573808e761c9dce7cfd12f4f18dd06b0ee471c166e095bf84aa4aaa2d82f1afcf09e5d960257c0a8dc404225b4b62187829c59e57da50bf848d72fabfb69362c117c6913541f84095a2a4ccdd2d30860cd96640bb2315e435a4af08c62c584ad129300adb02a871f3c548b96c4f6c47efdf4a1163a8a5ba9b4766b01437bc5957324660a8cd87df0f7e000d1309e896e3ce9f57b17562c9368a95a4cf66b3a5b57f0cca563b045452bbc8ad07b96fd0322728ccb3b05bfda14ef36ecfa2f32c5aa899811a67f2d62ed970db5723d6e4e4913c98c81ed6c03469112c23549f7e20be6401c6544db9078f34e6a4ad3cc868bace2e7ec6ea17225986f9e941ec67d9a3fc57958f9df8a60f585aa38b1769e26ed3f68dd85685b2cefae9dd72a18abc0de6b94689785df377ef4a812a6abc7f738a396f0e99ccbc5731801c36e746ab6b1dda88ca6ecb899528e18543cb3dfd439cd5be566594f01a4533da3638e6331fedf5b67870938ad044aa0dfdae33e3a6258ad40baadd726eacb1f3c1eb8d83ef4e185d7603a4f1eb006d90bf5849e2f65d37ffe750eb061bbad08a0c0cfabb9abf7f27d36ee5687d23feaa923e09d2ae905410a9193f21ed9b1d6331bb1f3babb90da2f2e023a6ceda4b4fe0f5d864738ee7f65a0b136021fbe076b4adf2d3af760e1361bad7ae35cb7ca010ddf4488255a2d3c492d0b26a1a5643f998b5d04a52a59f176d9bda85c916ff901329f09fe953b030b92f6415172489d3e8cdcb4eda7dde5d4fcd5d6a584a312563558e784b0f9bcea7c53d26c3f2d3350c70a5e06a67c4c0373dd6279e29c320e6580fba8ab2df3039c289235c066af1b07dd112f25b25e292020f36c1aba246cba4e054d64b38f53ed57a712dffad7d3dc97f86af511638a2779107fc55da63b6498ea5f3ae36883163e5bf2324211a61a9889278f828e58daae797fdba9218d322da7aa23db7a48a00", 0x2000, &(0x7f00000001c0)={&(0x7f0000000000)={0x50, 0x0, 0x8000000000203, {0x7, 0x29, 0xcf940281, 0xa00010, 0x1, 0x1a76, 0x4, 0x1801, 0x0, 0x0, 0x2, 0x2000009e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000480)={0x2a, 0x4, 0x0, {0x1, 0xffff, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r5 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@assoc={0x10, 0x117, 0x4, 0x10}, @op={0x10, 0x117, 0x3, 0x1}], 0x20, 0x40040}], 0x1, 0x8040) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000001bc0)=[{{&(0x7f00000010c0)=@x25, 0x0, &(0x7f00000011c0)=[{&(0x7f0000001140)="3bc8e717fe87"}, {&(0x7f0000001180)="24b57c7d0d1859af794f6ad47a6dd0074d0dc5fb6d7edd54b7beb1b9cefc51772762b6d1"}], 0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="00000000000000000600000003000000ba5c101b2b5be0695f9c2b409110e88f131078121d68977dd9560e958f09966c536fa2e4ad4fa429fe93c8752ce6d55bec9c761976b255e9c581de814429c9480da00d0000000000"]}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001c80)="d32d842a39d25edde0a78418dbf6c889206b705929b9ed3689d281ca4c17f3fe6b079adc310b53e8b5646c56dbe14077cad0f43eba3fb58f8708a7d8b1b56aa4aefd5447e0033585bf56402fcf09bd486ee9507f6421c1adee507875142e4b6838e0b90e2721816248fad2815e989f7b9b0116b1337275e91ede85318986dd38ecfe1d82ee511c833313e85ede780d92e39c3abf767a1ecaef533a1418ff66e04c291ecade1f64c99029451a08b938a32fcb21c358f30b15668a033eeb308948bbcd84f50e3260b0852378ccde1b4a2e1776b84daae04ede07366a619a7b8a97a420af741cf4718057e998f66731dae60655f9a60d"}], 0x0, &(0x7f0000001440)=[{0x0, 0x0, 0x0, "b100fab03f3992ca81c2f085b36e20c3a5f1bc1c028d0f6ce1f23f45f102df519a261e7104104aa6db66795cedb9ba8df817e661987ba9557142cf36150c4fc3ff882f722938262c22c52396b8101b50a81a4a3c49cc2c66efab7f0845b9d3d61ac2419b60b172712e6e2e65a39a6f43a68cbc4e1d1e91347691313abe9545ff941858be790123"}, {0x0, 0x101, 0x2a}, {0x0, 0x1, 0x4, "6ae82117bed8cae12a7d5c577ba0f33fea7871ccbbb8705bc04611d3624f29f7a907c9c14377d1064438c3fdb1f3d306bad311e9a3dce75d9c5be836621bf928f218feb65027d92bdc0c62a3df72ce32fc68e7e8114d5edd45a133737bc53b607b098a6a4e642d11df80be3cb212b771a0720923dcf55d07bff62f2128b47fa708e3785257d1"}, {0xfffffffffffffdd9, 0x10e, 0x4, "1447dfff99d1cd2fd758df1acec1cc523b0a4b7dd167fa417f101e7031ba86c21e684fdb9284e53a3074ee143ac3ab99af35400625985755a27ba5b55980f97515c121e4e0bdae193d062a2fe027fc62f51196a65d5eb13d5d2fd9b777d44d6ed39289baf02874ead4e28c93b95672709effb455e2d4b499c22a27537ba9e135900054758761bc7831cea75beb43951f26c0d35d6931d1e70e1530d65441d06e21734fd7615177035f570d3dd0de78fd408d31eec94a60003893237256ce8b5251ab05353f23a9a377"}, {0x0, 0x109, 0x7, "b9b5b827e1ab3e4cba791bbabe19f1570b05c295ea62ebb066ff52a4a78fe232368dd6c9b377901104ff0b2aa42540a84a40cc7557a36c4d5e08f036c8424893a34e8d70f75bb6cfd87e86ae7f349bd958a80d3d5f3254f378c913a51a4fd643c41ecdfaf5b004bf771aba73db32c2419be5640f5d"}, {0x0, 0x119, 0x6, "52c2"}, {0x0, 0x115, 0x4, "820aae8cbef72de6b2a11b86aee95abd979211e96252ad10010452b750"}, {0x0, 0x10b, 0x3e6, "d3d283ee9a09671b17b622c26eeaa2fd168a51e7308e6967601a"}]}}, {{&(0x7f0000001880)=@l2tp={0x2, 0x0, @multicast1, 0x3}, 0x0, &(0x7f0000001a00)=[{&(0x7f0000001900)="3020ca792793743770af6d8f22815f8e9045a4f3aab2b8bebefc55f53b73c3c30d0a05d321d44b7b010226f723d5d577870ed17afbcafa44fa68446380e57b0291c35e503e85929c56beb621d2638d4b6bca8fd2e8bf001693893af71709e0f54d19d3264d2e1837"}, {&(0x7f0000001980)="5b70d71eda8fa670e9efc0e37320f13053871018ce99c9ea3829cb7912440c65193b1cc9f645344a8414fc1c1e65846680fd32c532038ef9e2f19f43ca3dee6886433466f518cf819a1742feaf51758f50c068ffdb168700773d0523d2d50c7007c30c722596ce9d8221fe153f1662e9beb8ccf5cd68f774c1fc6bde7354ccf9"}], 0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"]}}], 0x8000026, 0x4b55) setsockopt$inet_int(r1, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000000)=0xffffff16, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r6) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x4c, r7, 0x1, 0x0, 0x0, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}}]}, 0x4c}}, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x40, &(0x7f0000000340)=0xf, 0x4) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000100)={0x20, 0x10}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x4}}) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x0, 0x24, 0x67, {0x67, 0x24, "2673fb44a757c741258b3bcb31d48cc6cc25fe3c051dc953887ae64b4d321484627650a8f818d2b620e1d84e3906a9a75f0bab9ba1f41ed5f580383d39d19460f785b39f8e39c2301309fcc1fd34b45939caa906bb8e2d6bd19e11c9a4c8a96bac974a1866"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3001}}, &(0x7f00000000c0)=ANY=[@ANYBLOB="000f0b00625680bc9c57a6f28e21540000"], &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0xfa, 0x8, 0x6, 0x80, "75bdf2d6", "6b5012a6"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x19, 0x7, 0x1, 0x1, 0x2, 0x58}}}, &(0x7f0000000880)={0x84, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xd2}, &(0x7f0000000500)={0x0, 0x8, 0x1}, &(0x7f0000000540)={0x20, 0x0, 0x4}, &(0x7f0000000580)=ANY=[@ANYBLOB="20004e600e7d3d6b7232"], &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x44c3}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000640)={0x40, 0xb, 0x2, "a5b2"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x101}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000700)={0x40, 0x17, 0x6, @local}, &(0x7f0000000740)={0x40, 0x19, 0x2, "a543"}, &(0x7f0000000780)={0x40, 0x1a, 0x2}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0xf1}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0x5}}) 3.344020064s ago: executing program 0 (id=6031): syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) eventfd(0xfffffff9) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019c80)=""/102384, 0x18ff0) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) connect$rxrpc(r1, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="140000000400000004"], 0x50) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) 3.151580056s ago: executing program 1 (id=6032): mkdir(&(0x7f0000000540)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace/events/mac80211/enable\x00', &(0x7f0000000600)='tracefs\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) write$P9_RREADLINK(r3, &(0x7f0000000040)={0x10, 0x17, 0x2, {0xffffffffffffffc1, './file0'}}, 0xfffffdab) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x8000000a, 0x1}, 0x1c) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad7, 0x10000, 0x3}, &(0x7f0000000040), &(0x7f0000000280), &(0x7f0000000000)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000040)={0xfffffeff}) close(r6) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r9, @ANYBLOB="dc196c174c0f622e019df2d7fcc0c6e67e55dd353e5b54dbb5c89c1e1f4a22120475c8cdd9a545554eab5c90c9583f399da9afac43bb3186c0baf3fa64ff2c4c70f0c0ea424307be53"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000100), 0x4) 3.144732613s ago: executing program 3 (id=6033): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000500)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000003c0)={0x0, 0x6, 0x6, 0x4}, &(0x7f0000000400)=0x10) 2.993457837s ago: executing program 3 (id=6034): munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) personality(0x87bf5ac905ea0f7f) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r0, 0x9, &(0x7f0000000180)=[&(0x7f0000005000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000fed000/0xb000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff3000/0x4000)=nil], 0x0, &(0x7f0000000080)=[0x0, 0x0], 0x2) brk(0x200000ffc000) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0xfffffffd, @rand_addr=' \x01\x00', 0x4000004}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) sendto$inet6(r1, &(0x7f0000000040)="05287273", 0x4, 0x4048000, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r3, 0x3ba0, &(0x7f0000000b80)={0x48}) syz_open_dev$ndb(&(0x7f0000000200), 0x0, 0x80000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0xe256610c62001369}, 0x600000c0) socket(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) recvfrom(r1, &(0x7f0000001a80)=""/4050, 0xfd2, 0x0, 0x0, 0x0) 2.345442369s ago: executing program 0 (id=6035): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14}}, 0x64}}, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) (async) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) (async) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) (async) fchdir(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80) open_tree(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x89901) (async) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x89901) syz_open_dev$MSR(&(0x7f0000000040), 0x8, 0x0) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) close(r5) rmdir(&(0x7f0000000640)='./file0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1e, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000005600000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) 2.049019707s ago: executing program 3 (id=6036): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0xa8740, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000580)=@raw=[@ringbuf_query, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xb}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x3}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000003900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8c4}, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000050}, 0x2000c8d1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f0000000140)) close(r2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000080)={0x1f, @none}, 0x8) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000100), &(0x7f0000001200)=0x4) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) 1.703607886s ago: executing program 0 (id=6037): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x19, 0x0, &(0x7f0000000280)) socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) writev(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r1, &(0x7f00000001c0)="64e9", 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, &(0x7f0000000700)=[0x2], 0x0, 0x0, 0x1}}, 0x40) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) setns(0xc9, 0x0) r3 = socket(0x2d, 0x2, 0x0) setsockopt(r3, 0x11d, 0x1, &(0x7f0000000200)="01000000", 0x4) sendmsg(r3, &(0x7f0000000400)={&(0x7f0000000500)=@generic={0x2d, "00000000000008011800020000000600"}, 0x80, 0x0}, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x2000, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280), &(0x7f00000005c0)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x44, 0x2c, 0xd27, 0x10, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x5, 0x7, 0x1, 0xfffb, 0x8, 0x5, 0xffff, 0x5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0xc004) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="640000001000010429bd700000000000e0000000", @ANYRES32=r4, @ANYBLOB="00010000316f0600300012800b00010067656e657665000020000280080011"], 0x64}}, 0x20000000) syslog(0x2, &(0x7f0000000bc0)=""/27, 0x1b) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) 1.685933017s ago: executing program 3 (id=6038): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7a4d205fd632f830272d3a78302205252b9ae7d8be5638396a0fa0583974f3f28302280b7b4d3c9e13d74dbc7b9e8718956dd5f", 0x5d}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5faf093fd548fca4f3a6e7391c8acfda620b96e71569873", 0x3f}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2", 0x6e}, {&(0x7f0000000440)}], 0x4, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) accept4(r1, &(0x7f0000000500)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f0000000600)=0x80, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.622811783s ago: executing program 4 (id=6039): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x58, r0, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x58}}, 0x0) 1.507395062s ago: executing program 3 (id=6040): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x1) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) readv(r1, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e) mremap(&(0x7f00008cc000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f000046d000/0x2000)=nil) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x6e, 0x2) r7 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r7, r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x1, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x200, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1d3, 0x0, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x2367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r8, 0x3b82, &(0x7f0000000180)={0x18, r9, 0x3, 0x0, &(0x7f0000002b00)=[{0xfffffffffffffffe, 0xffffffffffffffff}, {0x80000000, 0xfffffffff7fffffa}, {0x4, 0x2bc892a5}]}) lseek(0xffffffffffffffff, 0x38, 0x0) 1.322974538s ago: executing program 2 (id=6041): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x0, 0x82a, 0x0, 0x81, 0x7}) io_setup(0x2, &(0x7f0000000000)) r3 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) add_key$keyring(&(0x7f0000000280), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, r3) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_ZONE={0x6}]}, 0x1c}}, 0x0) 1.054032693s ago: executing program 0 (id=6042): r0 = openat$sndseq(0xffffff9c, &(0x7f0000000040), 0x100000) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000580)={0xf, 0x0, 0x9}) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0xcf, 0xfffffffb, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xfffffff8}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x8, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1038, 0x12c2, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x3, "", [{{0x9, 0x4, 0x0, 0xb, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xc259, 0xf8, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0xfd, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x80800) setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x39) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) 206.868101ms ago: executing program 4 (id=6043): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00002dc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f00009c6000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x665a, &(0x7f0000000040)={0x0, 0x4d86, 0xc000, 0x8, 0xc1}) syz_io_uring_setup(0x16b, &(0x7f0000000000)={0x0, 0x0, 0x13090}, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x2, @empty}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='6L\x00\x00'], 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f00000001c0)=']-\x00', &(0x7f0000000200)='./file0\x00', r1) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = gettid() rt_sigtimedwait(&(0x7f0000000000)={[0xde7f]}, 0x0, 0x0, 0x8) tkill(r3, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x6) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000100)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x24) 59.494616ms ago: executing program 2 (id=6044): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = userfaultfd(0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f00000000c0)={0x0, 0x5a4}, 0x8) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='0\x00', 0x1) write(r4, &(0x7f0000000400)='1\x00', 0x1) write$FUSE_POLL(r3, &(0x7f0000000040)={0x18, 0xfffffffffffffff5, 0x0, {0x6}}, 0x18) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_POISON(r1, 0xc020aa08, &(0x7f0000000380)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}}) 0s ago: executing program 3 (id=6045): syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) fsopen(&(0x7f0000000100)='erofs\x00', 0x1) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019c80)=""/102384, 0x18ff0) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) connect$rxrpc(r1, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="140000000400000004"], 0x50) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) kernel console output (not intermixed with test programs): 570][T25055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1575.174095][T25055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1575.181263][T25055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1575.216593][T25055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1575.244381][T21595] Bluetooth: hci3: command tx timeout [ 1575.256597][T25138] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5669'. [ 1575.295495][T25055] hsr_slave_0: entered promiscuous mode [ 1575.302862][T25055] hsr_slave_1: entered promiscuous mode [ 1575.309700][T25055] debugfs: 'hsr0' already exists in 'hsr' [ 1575.316395][T25055] Cannot create hsr debugfs directory [ 1575.491821][T25145] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5671'. [ 1575.530675][T25145] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5671'. [ 1575.620411][T25150] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5673'. [ 1575.657959][T25150] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5673'. [ 1575.760445][T25055] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1576.135715][T25055] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1576.248757][T25170] netlink: 15 bytes leftover after parsing attributes in process `syz.2.5681'. [ 1576.371342][T25055] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1576.583572][ T5729] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1576.651515][T25055] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1576.694933][T25185] netlink: 'syz.2.5685': attribute type 1 has an invalid length. [ 1576.763926][ T5729] usb 4-1: Using ep0 maxpacket: 16 [ 1576.785405][ T5729] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1576.802032][T25185] bond15: entered promiscuous mode [ 1576.823908][T25185] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1576.833479][ T5729] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1576.877106][ T5729] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1576.948346][T25185] bond15: (slave bridge26): making interface the new active one [ 1576.960585][ T5729] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1576.989058][T25185] bridge26: entered promiscuous mode [ 1576.999023][ T5729] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1577.018822][T25185] bond15: (slave bridge26): Enslaving as an active interface with an up link [ 1577.048246][ T5729] usb 4-1: config 0 descriptor?? [ 1577.254401][T25191] netlink: 'syz.2.5686': attribute type 1 has an invalid length. [ 1577.325662][T21595] Bluetooth: hci3: command tx timeout [ 1577.382386][T25191] bond16: entered promiscuous mode [ 1577.466264][T25191] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1577.659341][T25195] bond16: (slave bridge27): making interface the new active one [ 1577.725893][T25195] bridge27: entered promiscuous mode [ 1577.759146][T25195] bond16: (slave bridge27): Enslaving as an active interface with an up link [ 1578.119033][ T29] audit: type=1400 audit(1785810009.146:3141): avc: denied { map } for pid=25198 comm="syz.2.5687" path="socket:[88655]" dev="sockfs" ino=88655 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1578.316111][ T29] audit: type=1400 audit(1785810009.146:3142): avc: denied { read } for pid=25198 comm="syz.2.5687" path="socket:[88655]" dev="sockfs" ino=88655 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1578.470051][T21595] Bluetooth: hci0: unexpected event for opcode 0x0c03 [ 1578.481915][T21595] Bluetooth: Wrong link type (-22) [ 1578.511974][T25055] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1578.552779][T25055] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1578.591071][T25055] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1578.621547][T25174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1578.649260][T25055] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1578.673221][T25174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1578.688719][T25055] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1578.734120][T25055] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1578.777563][ T5729] usbhid 4-1:0.0: can't add hid device: -71 [ 1578.788137][ T5729] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1578.797970][T25055] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1578.841488][ T5729] usb 4-1: USB disconnect, device number 44 [ 1578.854526][T25055] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1579.080625][T25055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1579.144003][T25224] gadgetfs: Unknown parameter 'uid' [ 1579.149453][T25055] 8021q: adding VLAN 0 to HW filter on device team0 [ 1579.176291][T25224] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1579.187579][T21096] bridge0: port 1(bridge_slave_0) entered blocking state [ 1579.194898][T21096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1579.379729][T21096] bridge0: port 2(bridge_slave_1) entered blocking state [ 1579.387015][T21096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1579.409840][T21595] Bluetooth: hci3: command tx timeout [ 1580.901075][T25249] openvswitch: netlink: IP tunnel attribute has 5377 unknown bytes. [ 1581.385162][ T29] audit: type=1400 audit(1785810012.416:3143): avc: denied { read write } for pid=25257 comm="syz.1.5700" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1581.484716][T21595] Bluetooth: hci3: command tx timeout [ 1581.531926][ T29] audit: type=1400 audit(1785810012.446:3144): avc: denied { open } for pid=25257 comm="syz.1.5700" path="/dev/uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1581.591284][T25263] FAULT_INJECTION: forcing a failure. [ 1581.591284][T25263] name failslab, interval 1, probability 0, space 0, times 0 [ 1581.759146][T25263] CPU: 0 UID: 0 PID: 25263 Comm: syz.1.5700 Tainted: G S syzkaller #0 PREEMPT(full) [ 1581.759171][T25263] Tainted: [S]=CPU_OUT_OF_SPEC [ 1581.759175][T25263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1581.759182][T25263] Call Trace: [ 1581.759187][T25263] [ 1581.759193][T25263] dump_stack_lvl+0x100/0x190 [ 1581.759214][T25263] should_fail_ex.cold+0x5/0xa [ 1581.759230][T25263] should_failslab+0xc2/0x120 [ 1581.759246][T25263] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1581.759260][T25263] ? do_getname+0x35/0x390 [ 1581.759277][T25263] do_getname+0x35/0x390 [ 1581.759293][T25263] do_sys_openat2+0xc7/0x1e0 [ 1581.759308][T25263] ? __pfx_do_sys_openat2+0x10/0x10 [ 1581.759323][T25263] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1581.759338][T25263] ? __fget_files+0x21f/0x3d0 [ 1581.759353][T25263] __x64_sys_openat+0x12d/0x210 [ 1581.759374][T25263] ? __pfx___x64_sys_openat+0x10/0x10 [ 1581.759388][T25263] ? ksys_write+0x1ac/0x250 [ 1581.759403][T25263] do_syscall_64+0x115/0x870 [ 1581.759417][T25263] ? clear_bhb_loop+0x40/0x90 [ 1581.759430][T25263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1581.759442][T25263] RIP: 0033:0x7f93ecb9e019 [ 1581.759453][T25263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1581.759464][T25263] RSP: 002b:00007f93ed99d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1581.759475][T25263] RAX: ffffffffffffffda RBX: 00007f93ece26180 RCX: 00007f93ecb9e019 [ 1581.759483][T25263] RDX: 0000000000000008 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1581.759490][T25263] RBP: 00007f93ed99d090 R08: 0000000000000000 R09: 0000000000000000 [ 1581.759496][T25263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1581.759503][T25263] R13: 00007f93ece26218 R14: 00007f93ece26180 R15: 00007ffd0ccdd588 [ 1581.759517][T25263] [ 1582.110626][T25274] FAULT_INJECTION: forcing a failure. [ 1582.110626][T25274] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1582.123850][T25274] CPU: 0 UID: 0 PID: 25274 Comm: syz.3.5702 Tainted: G S syzkaller #0 PREEMPT(full) [ 1582.123871][T25274] Tainted: [S]=CPU_OUT_OF_SPEC [ 1582.123875][T25274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1582.123882][T25274] Call Trace: [ 1582.123886][T25274] [ 1582.123891][T25274] dump_stack_lvl+0x100/0x190 [ 1582.123909][T25274] should_fail_ex.cold+0x5/0xa [ 1582.123923][T25274] _copy_to_user+0x32/0xd0 [ 1582.123940][T25274] simple_read_from_buffer+0xcb/0x170 [ 1582.123954][T25274] proc_fail_nth_read+0x1af/0x230 [ 1582.123972][T25274] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1582.123989][T25274] ? rw_verify_area+0xce/0x6d0 [ 1582.124005][T25274] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1582.124021][T25274] vfs_read+0x1e4/0xb40 [ 1582.124044][T25274] ? __pfx_vfs_read+0x10/0x10 [ 1582.124060][T25274] ? __fget_files+0x215/0x3d0 [ 1582.124074][T25274] ? __fget_files+0x21f/0x3d0 [ 1582.124089][T25274] ksys_read+0x12a/0x250 [ 1582.124105][T25274] ? __pfx_ksys_read+0x10/0x10 [ 1582.124126][T25274] do_syscall_64+0x115/0x870 [ 1582.124140][T25274] ? clear_bhb_loop+0x40/0x90 [ 1582.124153][T25274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1582.124165][T25274] RIP: 0033:0x7f803915e84e [ 1582.124175][T25274] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1582.124186][T25274] RSP: 002b:00007f803a11afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1582.124197][T25274] RAX: ffffffffffffffda RBX: 00007f803a11b6c0 RCX: 00007f803915e84e [ 1582.124203][T25274] RDX: 000000000000000f RSI: 00007f803a11b0a0 RDI: 0000000000000005 [ 1582.124210][T25274] RBP: 00007f803a11b090 R08: 0000000000000000 R09: 0000000000000000 [ 1582.124216][T25274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1582.124222][T25274] R13: 00007f8039426128 R14: 00007f8039426090 R15: 00007ffdd5e491e8 [ 1582.124236][T25274] [ 1582.668511][T25055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1582.763232][T25055] veth0_vlan: entered promiscuous mode [ 1582.801034][T25055] veth1_vlan: entered promiscuous mode [ 1582.879045][T25055] veth0_macvtap: entered promiscuous mode [ 1582.905985][T25055] veth1_macvtap: entered promiscuous mode [ 1582.954515][T25055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1583.097080][T25055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1583.110238][T25293] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5710'. [ 1583.141470][T21595] Bluetooth: hci4: unexpected event for opcode 0x0c03 [ 1583.175406][T25293] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5710'. [ 1583.197270][T25295] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1583.323740][T21101] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1583.395101][T21101] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1583.456557][T21101] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1583.487354][T25306] tmpfs: Bad value for 'mpol' [ 1583.612468][T21088] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1583.632070][T21101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1583.685136][T21101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1584.524155][T21088] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1584.617839][T21088] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1584.676709][ T29] audit: type=1400 audit(1785810015.706:3145): avc: denied { mount } for pid=25320 comm="syz.4.5716" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1584.721028][T21088] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1584.743309][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1584.758710][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1584.801223][T21088] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1584.868070][ T29] audit: type=1400 audit(1785810015.886:3146): avc: denied { mounton } for pid=25055 comm="syz-executor" path="/root/syzkaller.6ZHbiF/syz-tmp" dev="sda1" ino=2058 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1585.050599][ T29] audit: type=1400 audit(1785810015.886:3147): avc: denied { mounton } for pid=25055 comm="syz-executor" path="/root/syzkaller.6ZHbiF/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1585.203718][ T29] audit: type=1400 audit(1785810015.886:3148): avc: denied { mounton } for pid=25055 comm="syz-executor" path="/root/syzkaller.6ZHbiF/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=89723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1585.358639][ T29] audit: type=1400 audit(1785810015.946:3149): avc: denied { mounton } for pid=25055 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1585.457580][ T29] audit: type=1400 audit(1785810015.956:3150): avc: denied { mount } for pid=25055 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1585.550605][ T29] audit: type=1400 audit(1785810015.956:3151): avc: denied { mounton } for pid=25055 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1585.651251][ T29] audit: type=1400 audit(1785810016.676:3152): avc: denied { unmount } for pid=14695 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1586.357716][T25341] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5722'. [ 1586.415385][ T5621] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1586.429930][ T5621] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1586.442892][ T5621] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1586.455591][ T5621] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1586.466586][ T5621] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1586.521927][T25341] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5722'. [ 1588.887672][T21595] Bluetooth: hci5: command tx timeout [ 1590.246198][ T29] audit: type=1400 audit(1785810021.266:3153): avc: denied { read } for pid=25364 comm="syz.3.5726" name="rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1590.309649][T25363] block nbd0: not configured, cannot reconfigure [ 1590.437296][ T29] audit: type=1400 audit(1785810021.276:3154): avc: denied { open } for pid=25364 comm="syz.3.5726" path="/dev/rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1591.420943][T21595] Bluetooth: hci5: command tx timeout [ 1591.664597][ T29] audit: type=1400 audit(1785810021.276:3155): avc: denied { ioctl } for pid=25364 comm="syz.3.5726" path="/dev/rtc0" dev="devtmpfs" ino=922 ioctlcmd=0x7014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1592.171206][T25391] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 1593.376731][T25398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5732'. [ 1593.388534][T25398] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5732'. [ 1593.483928][T21595] Bluetooth: hci5: command tx timeout [ 1593.996238][T25408] gadgetfs: bound to dummy_udc driver [ 1594.374702][T21088] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1594.583379][T21088] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1594.905793][T25418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1594.985557][T25418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1595.079247][ T29] audit: type=1400 audit(1785810025.096:3156): avc: denied { map } for pid=25417 comm="syz.0.5735" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1595.195867][T21088] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1595.273611][T21088] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1595.532541][T21088] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1595.554024][T25424] gadgetfs: bound to dummy_udc driver [ 1595.566685][T21595] Bluetooth: hci5: command tx timeout [ 1595.597964][T21088] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1595.847181][T21088] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1595.868233][T21088] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1595.915216][T25342] bridge0: port 1(bridge_slave_0) entered blocking state [ 1595.924574][T25342] bridge0: port 1(bridge_slave_0) entered disabled state [ 1595.949146][T25342] bridge_slave_0: entered allmulticast mode [ 1595.969795][T25342] bridge_slave_0: entered promiscuous mode [ 1596.000644][T25342] bridge0: port 2(bridge_slave_1) entered blocking state [ 1596.027139][T25342] bridge0: port 2(bridge_slave_1) entered disabled state [ 1596.051584][T25342] bridge_slave_1: entered allmulticast mode [ 1596.075202][T25342] bridge_slave_1: entered promiscuous mode [ 1596.186618][T25342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1596.227294][T25342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1596.357753][ T29] audit: type=1400 audit(1785810026.386:3157): avc: denied { search } for pid=5275 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1596.381706][T25342] team0: Port device team_slave_0 added [ 1596.396927][T25342] team0: Port device team_slave_1 added [ 1596.402977][T25444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5741'. [ 1596.427613][T25444] netlink: 'syz.0.5741': attribute type 9 has an invalid length. [ 1596.440771][ T29] audit: type=1400 audit(1785810026.416:3158): avc: denied { search } for pid=5275 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1596.524185][ T29] audit: type=1400 audit(1785810026.416:3159): avc: denied { search } for pid=5275 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1596.595858][ T29] audit: type=1400 audit(1785810026.416:3160): avc: denied { read } for pid=5275 comm="dhcpcd" name="n55" dev="tmpfs" ino=11435 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1596.746193][ T29] audit: type=1400 audit(1785810026.416:3161): avc: denied { open } for pid=5275 comm="dhcpcd" path="/run/udev/data/n55" dev="tmpfs" ino=11435 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1596.782333][T25342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1596.823045][T25342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1596.926786][ T29] audit: type=1400 audit(1785810026.416:3162): avc: denied { getattr } for pid=5275 comm="dhcpcd" path="/run/udev/data/n55" dev="tmpfs" ino=11435 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1597.008527][T25342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1597.067967][ T29] audit: type=1400 audit(1785810026.706:3163): avc: denied { read } for pid=25448 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1597.103366][T25342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1597.141163][T25342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1597.216663][ T29] audit: type=1400 audit(1785810026.706:3164): avc: denied { read open } for pid=25448 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1597.261560][T25468] netlink: 15 bytes leftover after parsing attributes in process `syz.4.5745'. [ 1597.275176][T25342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1597.316868][T21088] bridge_slave_1: left allmulticast mode [ 1597.326300][T21088] bridge_slave_1: left promiscuous mode [ 1597.337866][ T29] audit: type=1400 audit(1785810026.706:3165): avc: denied { getattr } for pid=25448 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1597.377118][T21088] bridge0: port 2(bridge_slave_1) entered disabled state [ 1597.467857][ T29] audit: type=1400 audit(1785810027.466:3166): avc: denied { write } for pid=25447 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1598.136983][T21088] bond5 (unregistering): (slave bridge11): Releasing backup interface [ 1598.147937][T21088] bridge11 (unregistering): left promiscuous mode [ 1598.168649][T21088] bond8 (unregistering): (slave bridge16): Releasing backup interface [ 1598.181505][T21088] bridge16 (unregistering): left promiscuous mode [ 1598.197843][T21088] bond10 (unregistering): (slave bridge18): Releasing backup interface [ 1598.207947][T21088] bridge18 (unregistering): left promiscuous mode [ 1598.221654][T21088] bond11 (unregistering): (slave bridge19): Releasing backup interface [ 1598.230523][T21088] bridge19 (unregistering): left promiscuous mode [ 1598.241520][T21088] bond12 (unregistering): (slave bridge20): Releasing backup interface [ 1598.250229][T21088] bridge20 (unregistering): left promiscuous mode [ 1598.263684][T21088] bond13 (unregistering): (slave bridge22): Releasing backup interface [ 1598.272193][T21088] bridge22 (unregistering): left promiscuous mode [ 1598.287731][T21088] bond14 (unregistering): (slave bridge23): Releasing backup interface [ 1598.297130][T21088] bridge23 (unregistering): left promiscuous mode [ 1598.314069][T21088] bond15 (unregistering): (slave bridge26): Releasing backup interface [ 1598.322636][T21088] bridge26 (unregistering): left promiscuous mode [ 1598.335635][T21088] bond16 (unregistering): (slave bridge27): Releasing backup interface [ 1598.344352][T21088] bridge27 (unregistering): left promiscuous mode [ 1598.357465][T21088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1598.369679][T21088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1598.380990][T21088] bond0 (unregistering): Released all slaves [ 1598.392662][T21088] bond1 (unregistering): Released all slaves [ 1598.405792][T21088] bond2 (unregistering): Released all slaves [ 1598.434866][T21088] bond3 (unregistering): Released all slaves [ 1598.483013][T21088] bond4 (unregistering): Released all slaves [ 1598.518037][T21088] bond5 (unregistering): Released all slaves [ 1598.546580][T21088] bond6 (unregistering): Released all slaves [ 1598.572521][T21088] bond7 (unregistering): Released all slaves [ 1598.601601][T21088] bond8 (unregistering): Released all slaves [ 1598.615307][T21088] bond9 (unregistering): Released all slaves [ 1598.628647][T21088] bond10 (unregistering): Released all slaves [ 1598.644756][T21088] bond11 (unregistering): Released all slaves [ 1598.658165][T21088] bond12 (unregistering): Released all slaves [ 1598.672423][T21088] bond13 (unregistering): Released all slaves [ 1598.691463][T21088] bond14 (unregistering): Released all slaves [ 1598.706750][T21088] bond15 (unregistering): Released all slaves [ 1598.722515][T21088] bond16 (unregistering): Released all slaves [ 1598.772193][ T5275] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1598.823612][T16391] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1598.971727][T25342] hsr_slave_0: entered promiscuous mode [ 1599.016887][T25342] hsr_slave_1: entered promiscuous mode [ 1599.034297][T16391] usb 2-1: Using ep0 maxpacket: 16 [ 1599.055418][T25488] gadgetfs: bound to dummy_udc driver [ 1599.070401][T16391] usb 2-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1599.082320][T25342] debugfs: 'hsr0' already exists in 'hsr' [ 1599.117175][T25342] Cannot create hsr debugfs directory [ 1599.136918][T21088] IPVS: stopping backup sync thread 24344 ... [ 1599.152046][T16391] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1599.185264][T16391] usb 2-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 1599.242279][T16391] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1599.299002][T16391] usb 2-1: config 0 descriptor?? [ 1599.314572][T21096] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1599.874096][T21096] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1600.153567][T21096] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1600.206454][T21096] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1600.309939][T16391] usbhid 2-1:0.0: can't add hid device: -71 [ 1600.365142][T16391] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1600.441480][T16391] usb 2-1: USB disconnect, device number 58 [ 1600.477893][T21088] hsr_slave_0: left promiscuous mode [ 1600.531711][T21088] hsr_slave_1: left promiscuous mode [ 1600.590130][T21088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1600.647001][T21088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1600.698426][T21088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1600.768422][T21088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1600.821475][T21088] veth1_macvtap: left promiscuous mode [ 1600.862210][T21088] veth0_macvtap: left promiscuous mode [ 1600.894864][T21088] veth1_vlan: left promiscuous mode [ 1600.932952][T21088] veth0_vlan: left promiscuous mode [ 1601.145276][T25531] netlink: 15 bytes leftover after parsing attributes in process `syz.1.5757'. [ 1601.870260][T21088] team0 (unregistering): Port device team_slave_1 removed [ 1601.925957][T21088] team0 (unregistering): Port device team_slave_0 removed [ 1602.259639][ T5275] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1602.570730][T25543] netlink: 15 bytes leftover after parsing attributes in process `syz.1.5759'. [ 1603.242492][T25550] FAULT_INJECTION: forcing a failure. [ 1603.242492][T25550] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1603.340280][T25550] CPU: 0 UID: 0 PID: 25550 Comm: syz.3.5760 Tainted: G S syzkaller #0 PREEMPT(full) [ 1603.340301][T25550] Tainted: [S]=CPU_OUT_OF_SPEC [ 1603.340305][T25550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1603.340312][T25550] Call Trace: [ 1603.340317][T25550] [ 1603.340322][T25550] dump_stack_lvl+0x100/0x190 [ 1603.340341][T25550] should_fail_ex.cold+0x5/0xa [ 1603.340356][T25550] _copy_from_user+0x2e/0xd0 [ 1603.340373][T25550] __sys_bpf+0x2f5/0x4e80 [ 1603.340389][T25550] ? __pfx___sys_bpf+0x10/0x10 [ 1603.340400][T25550] ? find_held_lock+0x2b/0x80 [ 1603.340410][T25550] ? get_pid_task+0xfc/0x250 [ 1603.340420][T25550] ? get_pid_task+0xfc/0x250 [ 1603.340434][T25550] ? find_held_lock+0x2b/0x80 [ 1603.340446][T25550] ? rcu_read_lock_any_held+0x6a/0xa0 [ 1603.340458][T25550] ? find_held_lock+0x2b/0x80 [ 1603.340468][T25550] ? ksys_write+0x190/0x250 [ 1603.340478][T25550] ? ksys_write+0x190/0x250 [ 1603.340497][T25550] ? fput+0x79/0x100 [ 1603.340512][T25550] ? __x64_sys_bpf+0xce/0x140 [ 1603.340523][T25550] __x64_sys_bpf+0xce/0x140 [ 1603.340535][T25550] ? do_syscall_64+0x90/0x870 [ 1603.340550][T25550] do_syscall_64+0x115/0x870 [ 1603.340562][T25550] ? clear_bhb_loop+0x40/0x90 [ 1603.340576][T25550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1603.340587][T25550] RIP: 0033:0x7f803919e019 [ 1603.340598][T25550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1603.340608][T25550] RSP: 002b:00007f803a13c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1603.340620][T25550] RAX: ffffffffffffffda RBX: 00007f8039425fa0 RCX: 00007f803919e019 [ 1603.340627][T25550] RDX: 000000000000007f RSI: 0000200000000d80 RDI: 000000000000000a [ 1603.340633][T25550] RBP: 00007f803a13c090 R08: 0000000000000000 R09: 0000000000000000 [ 1603.340640][T25550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1603.340646][T25550] R13: 00007f8039426038 R14: 00007f8039425fa0 R15: 00007ffdd5e491e8 [ 1603.340660][T25550] [ 1605.870936][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 1605.870952][ T29] audit: type=1400 audit(1785810035.866:3178): avc: denied { write } for pid=25546 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1606.146014][T25581] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1606.152647][T25581] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1606.238894][ T29] audit: type=1400 audit(1785810036.266:3179): avc: denied { write } for pid=25580 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1606.452357][T25581] vhci_hcd vhci_hcd.0: Device attached [ 1606.723783][ T5729] usb 40-1: SetAddress Request (55) to port 0 [ 1606.730365][ T5729] usb 40-1: new SuperSpeed USB device number 55 using vhci_hcd [ 1606.794152][ T29] audit: type=1400 audit(1785810036.806:3180): avc: denied { read write } for pid=25592 comm="syz.1.5769" name="sg0" dev="devtmpfs" ino=789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1606.848416][T25595] netlink: 'syz.1.5769': attribute type 1 has an invalid length. [ 1606.926379][T25591] 9p: Bad value for 'rfdno' [ 1606.965982][ T29] audit: type=1400 audit(1785810036.806:3181): avc: denied { open } for pid=25592 comm="syz.1.5769" path="/dev/sg0" dev="devtmpfs" ino=789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1607.025468][T25595] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1607.152474][ T29] audit: type=1400 audit(1785810036.916:3182): avc: denied { bind } for pid=25590 comm="syz.4.5768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1607.228621][T25600] bond8: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 1607.253297][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.265112][ T1315] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 1607.278026][ T1315] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 1607.291642][ T1315] aoe: packet could not be sent on ipvlan2. consider increasing tx_queue_len [ 1607.311235][T25600] bond8: entered allmulticast mode [ 1607.357989][ T29] audit: type=1400 audit(1785810036.916:3183): avc: denied { node_bind } for pid=25590 comm="syz.4.5768" saddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1607.415194][T25601] bond8: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1607.431810][T25582] vhci_hcd: connection reset by peer [ 1607.477434][T21088] vhci_hcd vhci_hcd.3: stop threads [ 1607.510266][T21088] vhci_hcd vhci_hcd.3: release socket [ 1607.548746][ T29] audit: type=1400 audit(1785810037.116:3184): avc: denied { ioctl } for pid=25592 comm="syz.1.5769" path="/dev/sg0" dev="devtmpfs" ino=789 ioctlcmd=0x2286 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1607.576683][T21088] vhci_hcd vhci_hcd.3: disconnect device [ 1607.582928][T25342] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1607.657347][T25342] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1607.731605][T25342] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1607.821449][T25342] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1607.889159][T25342] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1607.898095][T25342] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1607.901966][T25342] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1607.919167][T25342] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1608.001802][ T29] audit: type=1400 audit(1785810038.026:3185): avc: denied { write } for pid=25599 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1608.302952][T25342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1608.337994][T25342] 8021q: adding VLAN 0 to HW filter on device team0 [ 1608.339654][ T29] audit: type=1400 audit(1785810038.366:3186): avc: denied { write } for pid=25631 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1608.352074][ T128] bridge0: port 1(bridge_slave_0) entered blocking state [ 1608.352177][ T128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1608.357258][ T128] bridge0: port 2(bridge_slave_1) entered blocking state [ 1608.357314][ T128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1608.583830][T25629] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5771'. [ 1608.585878][T25629] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5771'. [ 1609.204690][T23416] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1609.232155][T25521] Set syz1 is full, maxelem 65536 reached [ 1609.354457][T23416] usb 4-1: Using ep0 maxpacket: 16 [ 1609.359684][T23416] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1609.359713][T23416] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1609.359727][T23416] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1609.359754][T23416] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1609.359767][T23416] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1609.361072][T23416] usb 4-1: config 0 descriptor?? [ 1609.547160][ T29] audit: type=1400 audit(1785810039.576:3187): avc: denied { write } for pid=25637 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1609.736776][T25342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1609.862414][T25342] veth0_vlan: entered promiscuous mode [ 1609.880644][T25342] veth1_vlan: entered promiscuous mode [ 1609.943380][T23416] usbhid 4-1:0.0: can't add hid device: -71 [ 1609.944162][T23416] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1609.952291][T23416] usb 4-1: USB disconnect, device number 45 [ 1609.994019][T25342] veth0_macvtap: entered promiscuous mode [ 1610.010964][T25342] veth1_macvtap: entered promiscuous mode [ 1610.081419][T25342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1610.096541][T25342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1610.164970][T21087] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1610.165642][T21087] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1610.165682][T21087] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1610.165701][T21087] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1610.347434][ T128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1610.347452][ T128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1610.424303][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1610.424320][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1610.793010][T25682] netlink: 15 bytes leftover after parsing attributes in process `syz.3.5776'. [ 1610.875081][T25687] FAULT_INJECTION: forcing a failure. [ 1610.875081][T25687] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1610.875108][T25687] CPU: 0 UID: 0 PID: 25687 Comm: syz.2.5777 Tainted: G S syzkaller #0 PREEMPT(full) [ 1610.875126][T25687] Tainted: [S]=CPU_OUT_OF_SPEC [ 1610.875130][T25687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1610.875137][T25687] Call Trace: [ 1610.875141][T25687] [ 1610.875146][T25687] dump_stack_lvl+0x100/0x190 [ 1610.875167][T25687] should_fail_ex.cold+0x5/0xa [ 1610.875183][T25687] _copy_from_user+0x2e/0xd0 [ 1610.875201][T25687] copy_msghdr_from_user+0x9f/0x4c0 [ 1610.875214][T25687] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1610.875233][T25687] ___sys_sendmsg+0x106/0x1e0 [ 1610.875246][T25687] ? __pfx____sys_sendmsg+0x10/0x10 [ 1610.875256][T25687] ? __lock_acquire+0x49f/0x1a40 [ 1610.875272][T25687] ? get_pid_task+0x106/0x250 [ 1610.875299][T25687] __sys_sendmsg+0x160/0x210 [ 1610.875315][T25687] ? __pfx___sys_sendmsg+0x10/0x10 [ 1610.875338][T25687] do_syscall_64+0x115/0x870 [ 1610.875352][T25687] ? clear_bhb_loop+0x40/0x90 [ 1610.875366][T25687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1610.875378][T25687] RIP: 0033:0x7f952379e019 [ 1610.875390][T25687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1610.875402][T25687] RSP: 002b:00007f9524599028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1610.875414][T25687] RAX: ffffffffffffffda RBX: 00007f9523a26090 RCX: 00007f952379e019 [ 1610.875422][T25687] RDX: 0000000004000000 RSI: 0000200000000780 RDI: 0000000000000003 [ 1610.875429][T25687] RBP: 00007f9524599090 R08: 0000000000000000 R09: 0000000000000000 [ 1610.875436][T25687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1610.875442][T25687] R13: 00007f9523a26128 R14: 00007f9523a26090 R15: 00007fff001be628 [ 1610.875458][T25687] [ 1610.902036][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1610.902048][ T29] audit: type=1400 audit(1785810040.926:3189): avc: denied { write } for pid=25663 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1611.044652][ T29] audit: type=1400 audit(1785810041.076:3190): avc: denied { write } for pid=25694 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1611.605506][ T29] audit: type=1400 audit(1785810041.636:3191): avc: denied { write } for pid=25700 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1611.800513][ T29] audit: type=1400 audit(1785810041.826:3192): avc: denied { write } for pid=25713 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1611.981095][ T5729] usb 40-1: device descriptor read/8, error -110 [ 1612.773453][T25719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5782'. [ 1612.774846][T25719] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5782'. [ 1613.032027][T25724] block nbd0: not configured, cannot reconfigure [ 1613.065385][ T5729] usb usb40-port1: attempt power cycle [ 1613.320889][ T5621] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1613.326218][ T5621] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1613.326936][ T5621] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1613.327319][ T5621] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1613.327567][ T5621] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1613.624348][ T5729] usb usb40-port1: unable to enumerate USB device [ 1613.816970][ T29] audit: type=1400 audit(1785810042.846:3193): avc: denied { cmd } for pid=25745 comm="iou-wrk-25747" path="socket:[91901]" dev="sockfs" ino=91901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1613.920932][T25755] netlink: 'syz.1.5792': attribute type 1 has an invalid length. [ 1613.963907][ T29] audit: type=1400 audit(1785810042.936:3194): avc: denied { mounton } for pid=25745 comm="syz.3.5791" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1614.022813][T25755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5792'. [ 1614.100830][T25755] netlink: 'syz.1.5792': attribute type 9 has an invalid length. [ 1614.476916][T25767] netlink: 'syz.1.5794': attribute type 1 has an invalid length. [ 1614.622395][T25767] bond9: entered promiscuous mode [ 1614.648313][T25767] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1614.678825][T25775] gadgetfs: bound to dummy_udc driver [ 1614.716644][T25776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5794'. [ 1614.788920][T25776] netlink: 'syz.1.5794': attribute type 9 has an invalid length. [ 1615.152095][ T5621] Bluetooth: Wrong link type (-22) [ 1615.220820][T25791] netlink: 'syz.1.5799': attribute type 1 has an invalid length. [ 1615.359248][T25791] bond10: entered promiscuous mode [ 1615.370074][T25797] netlink: 15 bytes leftover after parsing attributes in process `syz.3.5800'. [ 1615.382746][T25791] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1615.403944][ T5621] Bluetooth: hci0: command tx timeout [ 1615.431912][T25798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5799'. [ 1615.489879][T25798] netlink: 'syz.1.5799': attribute type 9 has an invalid length. [ 1615.728653][T25735] bridge0: port 1(bridge_slave_0) entered blocking state [ 1615.764177][T25735] bridge0: port 1(bridge_slave_0) entered disabled state [ 1615.783625][T16391] usb 4-1: new low-speed USB device number 46 using dummy_hcd [ 1615.805409][T25735] bridge_slave_0: entered allmulticast mode [ 1615.826572][T25735] bridge_slave_0: entered promiscuous mode [ 1615.970489][T16391] usb 4-1: config 0 interface 0 altsetting 129 endpoint 0x81 has invalid maxpacket 12352, setting to 8 [ 1616.025068][T16391] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1616.050878][ T29] audit: type=1400 audit(1785810045.076:3195): avc: denied { setopt } for pid=25809 comm="syz.0.5803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1616.071606][T16391] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 1616.084819][T25735] bridge0: port 2(bridge_slave_1) entered blocking state [ 1616.099259][T25735] bridge0: port 2(bridge_slave_1) entered disabled state [ 1616.109199][T16391] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1616.120987][T25735] bridge_slave_1: entered allmulticast mode [ 1616.130316][T16391] usb 4-1: config 0 descriptor?? [ 1616.141191][T25735] bridge_slave_1: entered promiscuous mode [ 1616.154015][T25802] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1616.306683][ T29] audit: type=1400 audit(1785810045.336:3196): avc: denied { mount } for pid=25812 comm="syz.0.5804" name="/" dev="ramfs" ino=92225 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1616.416378][T25735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1616.431398][ T29] audit: type=1400 audit(1785810045.386:3197): avc: denied { read append } for pid=25812 comm="syz.0.5804" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1616.529786][ T29] audit: type=1400 audit(1785810045.386:3198): avc: denied { open } for pid=25812 comm="syz.0.5804" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1616.607315][T16391] hid_parser_main: 3 callbacks suppressed [ 1616.607331][T16391] ryos 0003:1E7D:3138.000B: unknown main item tag 0x0 [ 1616.641115][T25735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1616.654172][T25814] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1616.668255][T25814] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1616.684784][T16391] ryos 0003:1E7D:3138.000B: unknown main item tag 0x0 [ 1616.722755][T16391] ryos 0003:1E7D:3138.000B: unknown main item tag 0x0 [ 1616.737218][T25814] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1616.766162][T16391] ryos 0003:1E7D:3138.000B: unknown main item tag 0x0 [ 1616.780714][T25814] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1616.801867][T25735] team0: Port device team_slave_0 added [ 1616.819660][T16391] ryos 0003:1E7D:3138.000B: unknown main item tag 0x0 [ 1616.831513][T25814] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1616.859735][T16391] ryos 0003:1E7D:3138.000B: unknown main item tag 0x0 [ 1616.873744][T25814] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1616.887691][T25735] team0: Port device team_slave_1 added [ 1616.913269][T16391] ryos 0003:1E7D:3138.000B: unknown main item tag 0x0 [ 1616.971828][T16391] ryos 0003:1E7D:3138.000B: unknown main item tag 0x0 [ 1617.018395][T25814] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1617.028666][T16391] ryos 0003:1E7D:3138.000B: unknown main item tag 0x0 [ 1617.036427][T25735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1617.056531][T25814] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1617.071719][T16391] ryos 0003:1E7D:3138.000B: unknown main item tag 0x0 [ 1617.081612][T25735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1617.112787][T25814] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1617.138479][T16391] ryos 0003:1E7D:3138.000B: hidraw0: USB HID v10.02 Device [HID 1e7d:3138] on usb-dummy_hcd.3-1/input0 [ 1617.156287][T25814] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1617.181954][T25814] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1617.200151][T16391] usb 4-1: USB disconnect, device number 46 [ 1617.209574][T25814] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1617.222303][T25735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1617.275161][T25814] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1617.302688][T25817] fido_id[25817]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1617.446236][ T29] audit: type=1400 audit(1785810046.476:3199): avc: denied { read write } for pid=25812 comm="syz.0.5804" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1617.487974][T25814] syz.0.5804: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1617.605509][T25814] CPU: 0 UID: 0 PID: 25814 Comm: syz.0.5804 Tainted: G S syzkaller #0 PREEMPT(full) [ 1617.605534][T25814] Tainted: [S]=CPU_OUT_OF_SPEC [ 1617.605542][T25814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1617.605550][T25814] Call Trace: [ 1617.605557][T25814] [ 1617.605565][T25814] dump_stack_lvl+0x100/0x190 [ 1617.605587][T25814] warn_alloc.cold+0x94/0xa8 [ 1617.605601][T25814] ? __pfx_warn_alloc+0x10/0x10 [ 1617.605616][T25814] ? register_lock_class+0x40/0x560 [ 1617.605634][T25814] ? kasan_save_stack+0x3f/0x50 [ 1617.605651][T25814] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 1617.605674][T25814] ? xskq_create+0x52/0x1d0 [ 1617.605690][T25814] ? xsk_setsockopt+0x743/0xab0 [ 1617.605703][T25814] ? do_sock_setsockopt+0xf3/0x1d0 [ 1617.605725][T25814] ? __sys_setsockopt+0x195/0x220 [ 1617.605739][T25814] ? __x64_sys_setsockopt+0xbd/0x160 [ 1617.605753][T25814] ? do_syscall_64+0x115/0x870 [ 1617.605769][T25814] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1617.605787][T25814] ? xskq_create+0xfb/0x1d0 [ 1617.605800][T25814] __vmalloc_node_range_noprof+0x136c/0x1630 [ 1617.605826][T25814] ? xskq_create+0xfb/0x1d0 [ 1617.605852][T25814] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1617.605874][T25814] ? kasan_save_track+0x14/0x30 [ 1617.605890][T25814] ? __kasan_kmalloc+0xaa/0xb0 [ 1617.605907][T25814] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 1617.605928][T25814] ? xskq_create+0xfb/0x1d0 [ 1617.605943][T25814] vmalloc_user_noprof+0x9e/0xe0 [ 1617.605963][T25814] ? xskq_create+0xfb/0x1d0 [ 1617.605977][T25814] xskq_create+0xfb/0x1d0 [ 1617.605993][T25814] xsk_setsockopt+0x743/0xab0 [ 1617.606008][T25814] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1617.606021][T25814] ? find_held_lock+0x2b/0x80 [ 1617.606031][T25814] ? __fget_files+0x215/0x3d0 [ 1617.606046][T25814] ? selinux_socket_setsockopt+0x6a/0x80 [ 1617.606066][T25814] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1617.606079][T25814] do_sock_setsockopt+0xf3/0x1d0 [ 1617.606099][T25814] __sys_setsockopt+0x195/0x220 [ 1617.606117][T25814] __x64_sys_setsockopt+0xbd/0x160 [ 1617.606132][T25814] ? do_syscall_64+0x90/0x870 [ 1617.606146][T25814] ? lockdep_hardirqs_on+0x78/0x100 [ 1617.606161][T25814] do_syscall_64+0x115/0x870 [ 1617.606175][T25814] ? clear_bhb_loop+0x40/0x90 [ 1617.606190][T25814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1617.606203][T25814] RIP: 0033:0x7f38dff9e019 [ 1617.606215][T25814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1617.606227][T25814] RSP: 002b:00007f38e0dcf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1617.606240][T25814] RAX: ffffffffffffffda RBX: 00007f38e0225fa0 RCX: 00007f38dff9e019 [ 1617.606248][T25814] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000d [ 1617.606255][T25814] RBP: 00007f38e003500c R08: 0000000000000029 R09: 0000000000000000 [ 1617.606262][T25814] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1617.606269][T25814] R13: 00007f38e0226038 R14: 00007f38e0225fa0 R15: 00007ffd403c5718 [ 1617.606285][T25814] [ 1617.606299][T25814] Mem-Info: [ 1617.920988][T25735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1617.962060][T25735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1619.005016][ T5621] Bluetooth: hci1: command 0x0406 tx timeout [ 1619.011089][ T5621] Bluetooth: hci2: command 0x0406 tx timeout [ 1619.017360][ T5621] Bluetooth: hci3: command 0x0c1a tx timeout [ 1619.038344][T25735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1619.068510][T25822] syz.3.5805 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1619.122288][T25735] hsr_slave_0: entered promiscuous mode [ 1619.136797][T25735] hsr_slave_1: entered promiscuous mode [ 1619.197889][T25826] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5807'. [ 1619.234179][T21595] Bluetooth: hci5: command 0x0c1a tx timeout [ 1619.263082][T21595] Bluetooth: hci0: command 0x040f tx timeout [ 1619.854221][T21101] bridge_slave_1: left allmulticast mode [ 1619.866566][T21101] bridge_slave_1: left promiscuous mode [ 1619.903969][T21101] bridge0: port 2(bridge_slave_1) entered disabled state [ 1620.039090][T21101] bridge_slave_0: left allmulticast mode [ 1620.780204][T25851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5811'. [ 1620.791041][T25851] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5811'. [ 1620.813329][T21101] bridge_slave_0: left promiscuous mode [ 1620.846328][T21101] bridge0: port 1(bridge_slave_0) entered disabled state [ 1621.050964][T25814] active_anon:17214 inactive_anon:0 isolated_anon:0 [ 1621.050964][T25814] active_file:1765 inactive_file:59668 isolated_file:0 [ 1621.050964][T25814] unevictable:769 dirty:333 writeback:0 [ 1621.050964][T25814] slab_reclaimable:13225 slab_unreclaimable:128435 [ 1621.050964][T25814] mapped:34962 shmem:9285 pagetables:1379 [ 1621.050964][T25814] sec_pagetables:0 bounce:0 [ 1621.050964][T25814] kernel_misc_reclaimable:0 [ 1621.050964][T25814] free:1255144 free_pcp:4925 free_cma:0 [ 1621.114168][T21595] Bluetooth: hci3: command 0x0c1a tx timeout [ 1621.122807][T21595] Bluetooth: hci2: command 0x0406 tx timeout [ 1621.131428][T21595] Bluetooth: hci1: command 0x0406 tx timeout [ 1621.202209][ T29] audit: type=1400 audit(1785810049.226:3200): avc: denied { ioctl } for pid=25849 comm="syz.2.5812" path="socket:[92668]" dev="sockfs" ino=92668 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1621.231924][T25853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5812'. [ 1621.263479][ T50] Bluetooth: hci5: command 0x0c1a tx timeout [ 1621.329310][ T50] Bluetooth: hci0: command 0x040f tx timeout [ 1621.368411][T25814] Node 0 active_anon:68908kB inactive_anon:0kB active_file:7060kB inactive_file:238324kB unevictable:1540kB isolated(anon):0kB isolated(file):0kB mapped:139756kB dirty:1332kB writeback:0kB shmem:35604kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:4096kB kernel_stack:14624kB pagetables:5276kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1621.545297][T25814] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:348kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:92kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1621.676167][ T29] audit: type=1400 audit(1785810049.696:3201): avc: denied { write } for pid=25846 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1621.731621][T25814] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1621.860901][T21101] bond6 (unregistering): (slave bridge16): Releasing backup interface [ 1621.893090][ T29] audit: type=1400 audit(1785810049.916:3202): avc: denied { write } for pid=25866 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1621.923457][T25814] lowmem_reserve[]: 0 2472 2473 2473 2473 [ 1621.930904][T21101] bridge16 (unregistering): left promiscuous mode [ 1621.952537][T25814] Node 0 DMA32 free:1068596kB boost:0kB min:34012kB low:42512kB high:51012kB reserved_highatomic:0KB free_highatomic:0KB active_anon:68788kB inactive_anon:0kB active_file:7060kB inactive_file:238324kB unevictable:1540kB writepending:1376kB zspages:0kB present:3129332kB managed:2532144kB mlocked:0kB bounce:0kB free_pcp:25424kB local_pcp:25424kB free_cma:0kB [ 1622.025392][T21101] bond7 (unregistering): (slave bridge18): Releasing backup interface [ 1622.058319][T21101] bridge18 (unregistering): left promiscuous mode [ 1622.092773][T21101] bond8 (unregistering): (slave bridge19): Releasing backup interface [ 1622.121558][T25814] lowmem_reserve[]: 0 0 0 [ 1622.123893][T21101] bridge19 (unregistering): left promiscuous mode [ 1622.142682][T25814] 0 0 [ 1622.147401][T25814] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:376kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1622.201171][T21101] bond9 (unregistering): (slave bridge22): Releasing backup interface [ 1622.230920][T21101] bridge22 (unregistering): left promiscuous mode [ 1622.252865][T25814] lowmem_reserve[]: 0 0 0 0 0 [ 1622.272974][T25814] Node 1 Normal free:3936616kB boost:0kB min:55880kB low:69848kB high:83816kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:348kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1622.331649][T21101] bond10 (unregistering): (slave bridge27): Releasing backup interface [ 1622.349420][T21101] bridge27 (unregistering): left promiscuous mode [ 1622.416648][T25814] lowmem_reserve[]: 0 0 0 0 0 [ 1622.427474][ T29] audit: type=1400 audit(1785810050.456:3203): avc: denied { read write } for pid=25868 comm="syz.3.5813" name="uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1622.453280][T25814] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1622.483271][T21101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1622.503249][T25814] Node 0 DMA32: 3526*4kB (UME) 4141*8kB (UME) 3477*16kB (UME) 2622*32kB (UME) 1385*64kB (UME) 769*128kB (UME) 235*256kB (UME) 78*512kB (UME) 33*1024kB (UME) 5*2048kB (ME) 134*4096kB (UM) = 1066832kB [ 1622.525689][ T29] audit: type=1400 audit(1785810050.506:3204): avc: denied { open } for pid=25868 comm="syz.3.5813" path="/dev/uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1622.550769][T21101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1622.574546][T21101] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1622.585763][T25814] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1622.608307][T21101] bond0 (unregistering): Released all slaves [ 1622.621774][T25814] Node 1 Normal: 6*4kB (UM) 4*8kB (M) 9*16kB (UM) 11*32kB (UM) 11*64kB (UM) 1*128kB (M) 4*256kB (UM) 4*512kB (UM) 2*1024kB (M) 3*2048kB (UM) 958*4096kB (M) = 3936616kB [ 1622.639877][T21101] bond1 (unregistering): Released all slaves [ 1622.664509][T21101] bond2 (unregistering): Released all slaves [ 1622.680794][T25814] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1622.700518][T21101] bond3 (unregistering): Released all slaves [ 1622.714222][T25814] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1622.735308][T21101] bond4 (unregistering): Released all slaves [ 1622.742955][T25814] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1622.775044][T21101] bond5 (unregistering): Released all slaves [ 1622.781113][T25814] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1622.801170][ T29] audit: type=1400 audit(1785810050.826:3205): avc: denied { create } for pid=25868 comm="syz.3.5813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1622.826274][T25814] 73584 total pagecache pages [ 1622.836334][T21101] bond6 (unregistering): Released all slaves [ 1622.848750][T25814] 0 pages in swap cache [ 1622.857692][T25814] Free swap = 124996kB [ 1622.872320][T21101] bond7 (unregistering): Released all slaves [ 1622.879858][T25814] Total swap = 124996kB [ 1622.889560][T25814] 2097051 pages RAM [ 1622.895751][ T29] audit: type=1400 audit(1785810050.856:3206): avc: denied { write } for pid=25868 comm="syz.3.5813" path="socket:[92681]" dev="sockfs" ino=92681 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1622.933274][T25814] 0 pages HighMem/MovableOnly [ 1622.949758][T25814] 432306 pages reserved [ 1622.955684][T21101] bond8 (unregistering): Released all slaves [ 1622.966656][T25814] 0 pages cma reserved [ 1622.991270][T21101] bond9 (unregistering): Released all slaves [ 1623.009223][ T29] audit: type=1400 audit(1785810050.996:3207): avc: denied { associate } for pid=25868 comm="syz.3.5813" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1623.074704][T21101] bond10 (unregistering): Released all slaves [ 1623.138063][T25853] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1623.164145][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 1623.260770][T25853] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1623.282818][T25877] FAULT_INJECTION: forcing a failure. [ 1623.282818][T25877] name failslab, interval 1, probability 0, space 0, times 0 [ 1623.295975][T25877] CPU: 0 UID: 0 PID: 25877 Comm: syz.1.5815 Tainted: G S syzkaller #0 PREEMPT(full) [ 1623.295996][T25877] Tainted: [S]=CPU_OUT_OF_SPEC [ 1623.296001][T25877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1623.296007][T25877] Call Trace: [ 1623.296012][T25877] [ 1623.296016][T25877] dump_stack_lvl+0x100/0x190 [ 1623.296036][T25877] should_fail_ex.cold+0x5/0xa [ 1623.296050][T25877] should_failslab+0xc2/0x120 [ 1623.296065][T25877] __kmalloc_cache_noprof+0x91/0x6c0 [ 1623.296084][T25877] ? ceph_get_tree+0x188/0x1fd0 [ 1623.296101][T25877] ceph_get_tree+0x188/0x1fd0 [ 1623.296114][T25877] ? bpf_lsm_capable+0x9/0x10 [ 1623.296126][T25877] ? security_capable+0x80/0x260 [ 1623.296142][T25877] vfs_get_tree+0x92/0x320 [ 1623.296159][T25877] vfs_cmd_create+0xd7/0x2a0 [ 1623.296176][T25877] __do_sys_fsconfig+0x55a/0xcb0 [ 1623.296193][T25877] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 1623.296209][T25877] ? fput+0x79/0x100 [ 1623.296227][T25877] do_syscall_64+0x115/0x870 [ 1623.296241][T25877] ? clear_bhb_loop+0x40/0x90 [ 1623.296256][T25877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1623.296267][T25877] RIP: 0033:0x7f93ecb9e019 [ 1623.296278][T25877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1623.296289][T25877] RSP: 002b:00007f93ed9df028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1623.296300][T25877] RAX: ffffffffffffffda RBX: 00007f93ece25fa0 RCX: 00007f93ecb9e019 [ 1623.296308][T25877] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1623.296314][T25877] RBP: 00007f93ed9df090 R08: 0000000000000000 R09: 0000000000000000 [ 1623.296321][T25877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1623.296327][T25877] R13: 00007f93ece26038 R14: 00007f93ece25fa0 R15: 00007ffd0ccdd588 [ 1623.296342][T25877] [ 1623.521597][ T5275] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1623.634528][ T50] Bluetooth: hci5: command 0x0c1a tx timeout [ 1623.640638][ T50] Bluetooth: hci0: command 0x040f tx timeout [ 1623.655568][T25888] netlink: 'syz.3.5817': attribute type 1 has an invalid length. [ 1625.696881][T25882] ceph: No mds server is up or the cluster is laggy [ 1625.708408][ T5729] libceph: connect (1)[c::]:6789 error -101 [ 1625.745871][ T5729] libceph: mon0 (1)[c::]:6789 connect error [ 1625.797474][T21595] Bluetooth: hci0: command 0x040f tx timeout [ 1625.839684][T25888] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1625.999964][T25904] openvswitch: netlink: nsh attr 1 has unexpected len 16 expected 8 [ 1626.024831][T25891] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1626.073722][ T29] audit: type=1400 audit(1785810054.086:3208): avc: denied { append } for pid=25903 comm="syz.2.5820" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1626.103816][T25893] bond6: entered promiscuous mode [ 1626.130992][T25893] bond6: entered allmulticast mode [ 1626.378051][ T29] audit: type=1400 audit(1785810054.406:3209): avc: denied { setopt } for pid=25910 comm="syz.1.5821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1626.520629][T21101] hsr_slave_0: left promiscuous mode [ 1626.532636][ T29] audit: type=1400 audit(1785810054.436:3210): avc: denied { append } for pid=25903 comm="syz.2.5820" name="sg0" dev="devtmpfs" ino=789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1626.570996][T21101] hsr_slave_1: left promiscuous mode [ 1626.600161][T21101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1626.644541][T21101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1626.786033][ T29] audit: type=1400 audit(1785810054.816:3211): avc: denied { write } for pid=25899 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1627.200159][ T29] audit: type=1400 audit(1785810055.226:3212): avc: denied { write } for pid=25921 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1627.459898][T21101] team0 (unregistering): Port device team_slave_1 removed [ 1627.521305][T21101] team0 (unregistering): Port device team_slave_0 removed [ 1627.821298][ T5275] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1627.886047][T21595] Bluetooth: hci0: command 0x040f tx timeout [ 1628.734653][T21101] IPVS: stop unused estimator thread 0... [ 1628.926779][ T29] audit: type=1400 audit(1785810056.956:3213): avc: denied { write } for pid=25950 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1629.310665][ T29] audit: type=1400 audit(1785810057.336:3214): avc: denied { write } for pid=25978 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1629.773686][ T5729] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1629.963987][ T5729] usb 3-1: Using ep0 maxpacket: 32 [ 1630.003089][ T5729] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1630.067751][ T5729] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1630.109020][ T5729] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1630.127954][T25976] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1630.159718][ T5729] usb 3-1: Product: syz [ 1630.198491][ T5729] usb 3-1: Manufacturer: syz [ 1630.229508][ T5729] usb 3-1: SerialNumber: syz [ 1630.248087][T25985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5835'. [ 1630.268036][ T5729] usb 3-1: config 0 descriptor?? [ 1630.290915][T25981] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1630.317749][ T5729] hub 3-1:0.0: bad descriptor, ignoring hub [ 1630.344677][ T5729] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1630.368120][ T29] audit: type=1400 audit(1785810058.396:3215): avc: denied { map } for pid=25975 comm="syz.3.5835" path="socket:[93400]" dev="sockfs" ino=93400 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1630.428581][T25735] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1630.479737][T25735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1630.494453][T16391] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1630.508715][ T29] audit: type=1400 audit(1785810058.396:3216): avc: denied { read } for pid=25975 comm="syz.3.5835" path="socket:[93400]" dev="sockfs" ino=93400 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1630.537336][T25735] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1630.581686][T25735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1630.615118][T25735] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1630.632216][ T29] audit: type=1400 audit(1785810058.486:3217): avc: denied { write } for pid=25983 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1630.678884][T25735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1630.695343][T16391] usb 2-1: Using ep0 maxpacket: 32 [ 1630.720359][T25735] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1630.730959][T16391] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1630.769533][T16391] usb 2-1: can't read configurations, error -61 [ 1630.796523][ T29] audit: type=1400 audit(1785810058.726:3218): avc: denied { write } for pid=26001 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1630.819895][T25735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1630.933931][T14079] usb 3-1: USB disconnect, device number 6 [ 1630.964233][T16391] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1631.143579][T16391] usb 2-1: Using ep0 maxpacket: 32 [ 1631.161958][T16391] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1631.175999][T25735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1631.196544][T16391] usb 2-1: can't read configurations, error -61 [ 1631.232673][T16391] usb usb2-port1: attempt power cycle [ 1631.261315][T25735] 8021q: adding VLAN 0 to HW filter on device team0 [ 1631.299103][T21101] bridge0: port 1(bridge_slave_0) entered blocking state [ 1631.306733][T21101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1631.384352][T21101] bridge0: port 2(bridge_slave_1) entered blocking state [ 1631.391559][T21101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1631.614391][T16391] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1631.639835][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 1631.639851][ T29] audit: type=1400 audit(1785810059.666:3227): avc: denied { write } for pid=26010 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1631.707774][T16391] usb 2-1: Using ep0 maxpacket: 32 [ 1631.751828][T16391] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1631.788322][T16391] usb 2-1: can't read configurations, error -61 [ 1631.891989][ T29] audit: type=1400 audit(1785810059.916:3228): avc: denied { write } for pid=26031 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1631.956374][T26036] gadgetfs: bound to dummy_udc driver [ 1631.983768][T16391] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1632.035089][T26035] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1632.055095][T16391] usb 2-1: Using ep0 maxpacket: 32 [ 1632.085532][T16391] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1632.107863][T26042] kvm: kvm [26034]: vcpu0, guest rIP: 0x58ad29489c2a7d0a Unhandled WRMSR(0x4000006d) = 0x6 [ 1632.130848][T16391] usb 2-1: can't read configurations, error -61 [ 1632.162222][T16391] usb usb2-port1: unable to enumerate USB device [ 1632.570832][T26060] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1632.577579][T26060] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1632.741885][T26067] block nbd3: not configured, cannot reconfigure [ 1632.776766][T26060] vhci_hcd vhci_hcd.0: Device attached [ 1632.841433][T25735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1632.931725][ T29] audit: type=1400 audit(1785810060.956:3229): avc: denied { write } for pid=26046 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1633.043718][T16391] usb 38-1: SetAddress Request (10) to port 0 [ 1633.067190][T16391] usb 38-1: new SuperSpeed USB device number 10 using vhci_hcd [ 1633.207347][T26061] vhci_hcd: connection reset by peer [ 1633.223014][ T29] audit: type=1400 audit(1785810061.246:3230): avc: denied { write } for pid=26083 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1633.284539][T21096] vhci_hcd vhci_hcd.2: stop threads [ 1633.334860][T21096] vhci_hcd vhci_hcd.2: release socket [ 1633.388445][T21096] vhci_hcd vhci_hcd.2: disconnect device [ 1633.673462][T14493] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1633.764229][T25735] veth0_vlan: entered promiscuous mode [ 1633.800026][T25735] veth1_vlan: entered promiscuous mode [ 1633.865679][T14493] usb 2-1: Using ep0 maxpacket: 16 [ 1633.892295][T25735] veth0_macvtap: entered promiscuous mode [ 1633.913202][T14493] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1633.955493][T25735] veth1_macvtap: entered promiscuous mode [ 1633.978939][T14493] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1634.040595][T14493] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1634.077055][T25735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1634.116497][T14493] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1634.138670][T25735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1634.169884][T14493] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1634.242075][T14493] usb 2-1: config 0 descriptor?? [ 1634.272488][ T1124] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1634.321683][ T29] audit: type=1400 audit(1785810062.336:3231): avc: denied { write } for pid=26091 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1634.404794][T21087] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1634.460859][T21087] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1634.664125][ T128] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1634.717723][ T29] audit: type=1400 audit(1785810062.746:3232): avc: denied { write } for pid=26108 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1634.767540][ T128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1634.826450][ T128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1634.898861][ T29] audit: type=1400 audit(1785810062.816:3233): avc: denied { read } for pid=26111 comm="syz.2.5851" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1634.983126][T21087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1635.059505][T21087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1635.240436][ T29] audit: type=1400 audit(1785810062.816:3234): avc: denied { open } for pid=26111 comm="syz.2.5851" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1636.265159][T14493] usbhid 2-1:0.0: can't add hid device: -71 [ 1636.337179][T14493] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1636.402418][T14493] usb 2-1: USB disconnect, device number 63 [ 1636.542682][T26132] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5785'. [ 1636.586178][T26131] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1636.615989][T26134] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5857'. [ 1636.628614][T26138] FAULT_INJECTION: forcing a failure. [ 1636.628614][T26138] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1636.650391][T26131] kvm: kvm [26130]: vcpu0, guest rIP: 0x58ad29489c2a7d0a Unhandled WRMSR(0x4000006d) = 0x6 [ 1636.663246][ T29] audit: type=1400 audit(1785810064.696:3235): avc: denied { bind } for pid=26133 comm="syz.3.5857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1636.700229][T26138] CPU: 0 UID: 0 PID: 26138 Comm: syz.2.5858 Tainted: G S syzkaller #0 PREEMPT(full) [ 1636.700257][T26138] Tainted: [S]=CPU_OUT_OF_SPEC [ 1636.700261][T26138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1636.700268][T26138] Call Trace: [ 1636.700272][T26138] [ 1636.700278][T26138] dump_stack_lvl+0x100/0x190 [ 1636.700297][T26138] should_fail_ex.cold+0x5/0xa [ 1636.700314][T26138] _copy_from_user+0x2e/0xd0 [ 1636.700335][T26138] copy_from_sockptr_offset.constprop.0+0x12c/0x150 [ 1636.700355][T26138] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 1636.700377][T26138] do_sock_getsockopt+0x530/0x6e0 [ 1636.700393][T26138] ? __lock_acquire+0x49f/0x1a40 [ 1636.700412][T26138] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1636.700429][T26138] ? rcu_read_lock_any_held+0x6a/0xa0 [ 1636.700443][T26138] ? find_held_lock+0x2b/0x80 [ 1636.700457][T26138] ? __fget_files+0x21f/0x3d0 [ 1636.700473][T26138] __sys_getsockopt+0x148/0x260 [ 1636.700491][T26138] ? __x64_sys_getsockopt+0xbd/0x160 [ 1636.700504][T26138] __x64_sys_getsockopt+0xbd/0x160 [ 1636.700517][T26138] ? do_syscall_64+0x90/0x870 [ 1636.700531][T26138] ? lockdep_hardirqs_on+0x78/0x100 [ 1636.700544][T26138] do_syscall_64+0x115/0x870 [ 1636.700557][T26138] ? clear_bhb_loop+0x40/0x90 [ 1636.700571][T26138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1636.700583][T26138] RIP: 0033:0x7f952379e019 [ 1636.700593][T26138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1636.700603][T26138] RSP: 002b:00007f95245ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1636.700615][T26138] RAX: ffffffffffffffda RBX: 00007f9523a25fa0 RCX: 00007f952379e019 [ 1636.700623][T26138] RDX: 0000000000000006 RSI: 0000000000000084 RDI: 0000000000000003 [ 1636.700629][T26138] RBP: 00007f95245ba090 R08: 00002000000103c0 R09: 0000000000000000 [ 1636.700635][T26138] R10: 0000200000010300 R11: 0000000000000246 R12: 0000000000000001 [ 1636.700642][T26138] R13: 00007f9523a26038 R14: 00007f9523a25fa0 R15: 00007fff001be628 [ 1636.700656][T26138] [ 1637.238555][T26149] FAULT_INJECTION: forcing a failure. [ 1637.238555][T26149] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1637.252821][ T29] audit: type=1400 audit(1785810065.266:3236): avc: denied { read } for pid=26148 comm="syz.4.5863" name="host_addr" dev="configfs" ino=94568 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 1637.309854][T26147] netlink: 15 bytes leftover after parsing attributes in process `syz.1.5862'. [ 1637.366955][ T29] audit: type=1800 audit(1785810065.266:3237): pid=26149 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.5863" name="host_addr" dev="configfs" ino=94568 res=0 errno=0 [ 1637.391026][T26149] CPU: 0 UID: 0 PID: 26149 Comm: syz.4.5863 Tainted: G S syzkaller #0 PREEMPT(full) [ 1637.391049][T26149] Tainted: [S]=CPU_OUT_OF_SPEC [ 1637.391054][T26149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1637.391062][T26149] Call Trace: [ 1637.391067][T26149] [ 1637.391073][T26149] dump_stack_lvl+0x100/0x190 [ 1637.391095][T26149] should_fail_ex.cold+0x5/0xa [ 1637.391111][T26149] _copy_from_iter+0x1f4/0x1690 [ 1637.391130][T26149] ? __lock_acquire+0x49f/0x1a40 [ 1637.391147][T26149] ? __pfx__copy_from_iter+0x10/0x10 [ 1637.391172][T26149] configfs_write_iter+0xb3/0x4e0 [ 1637.391190][T26149] vfs_write+0x6ac/0x1050 [ 1637.391209][T26149] ? __pfx_configfs_write_iter+0x10/0x10 [ 1637.391224][T26149] ? __pfx_vfs_write+0x10/0x10 [ 1637.391250][T26149] ksys_write+0x12a/0x250 [ 1637.391292][T26149] ? __pfx_ksys_write+0x10/0x10 [ 1637.391307][T26149] do_syscall_64+0x115/0x870 [ 1637.391322][T26149] ? clear_bhb_loop+0x40/0x90 [ 1637.391336][T26149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1637.391348][T26149] RIP: 0033:0x7f1a4d99e019 [ 1637.391358][T26149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1637.391369][T26149] RSP: 002b:00007f1a4bbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1637.391381][T26149] RAX: ffffffffffffffda RBX: 00007f1a4dc25fa0 RCX: 00007f1a4d99e019 [ 1637.391389][T26149] RDX: 000000000000000d RSI: 0000200000000600 RDI: 0000000000000003 [ 1637.391396][T26149] RBP: 00007f1a4bbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1637.391402][T26149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1637.391409][T26149] R13: 00007f1a4dc26038 R14: 00007f1a4dc25fa0 R15: 00007fffd62c6df8 [ 1637.391424][T26149] [ 1637.808405][ T29] audit: type=1400 audit(1785810065.356:3238): avc: denied { ioctl } for pid=26150 comm="syz.0.5859" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1637.901394][T26157] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1637.908052][T26157] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1638.061193][T21595] Bluetooth: hci0: unexpected event for opcode 0x0004 [ 1638.081715][T26157] vhci_hcd vhci_hcd.0: Device attached [ 1638.189206][T26158] vhci_hcd: connection closed [ 1638.222648][T21096] vhci_hcd vhci_hcd.2: stop threads [ 1638.295628][T21096] vhci_hcd vhci_hcd.2: release socket [ 1638.348893][T21096] vhci_hcd vhci_hcd.2: disconnect device [ 1638.358916][T16391] usb 38-1: device descriptor read/8, error -110 [ 1638.376679][ T29] audit: type=1400 audit(1785810066.406:3239): avc: denied { write } for pid=26171 comm="syz.0.5868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1638.480881][T21595] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 1638.596548][T26179] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1638.659210][T26183] kvm: kvm [26178]: vcpu0, guest rIP: 0x58ad29489c2a7d0a Unhandled WRMSR(0x4000006d) = 0x6 [ 1638.824000][T16391] usb usb38-port1: attempt power cycle [ 1639.553341][ T29] audit: type=1400 audit(1785810067.576:3240): avc: denied { read } for pid=26184 comm="syz.3.5872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1639.574229][T26185] FAULT_INJECTION: forcing a failure. [ 1639.574229][T26185] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1639.587438][T26185] CPU: 0 UID: 0 PID: 26185 Comm: syz.3.5872 Tainted: G S syzkaller #0 PREEMPT(full) [ 1639.587458][T26185] Tainted: [S]=CPU_OUT_OF_SPEC [ 1639.587462][T26185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1639.587469][T26185] Call Trace: [ 1639.587474][T26185] [ 1639.587478][T26185] dump_stack_lvl+0x100/0x190 [ 1639.587498][T26185] should_fail_ex.cold+0x5/0xa [ 1639.587513][T26185] _copy_from_user+0x2e/0xd0 [ 1639.587530][T26185] do_pages_stat+0x210/0x850 [ 1639.587548][T26185] ? __lock_acquire+0x49f/0x1a40 [ 1639.587565][T26185] ? __pfx_do_pages_stat+0x10/0x10 [ 1639.587581][T26185] ? __lock_acquire+0x49f/0x1a40 [ 1639.587603][T26185] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1639.587618][T26185] ? lockdep_hardirqs_on+0x78/0x100 [ 1639.587632][T26185] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1639.587646][T26185] kernel_move_pages+0xff8/0x1530 [ 1639.587665][T26185] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1639.587682][T26185] ? __pfx_kernel_move_pages+0x10/0x10 [ 1639.587699][T26185] ? __fget_files+0x21f/0x3d0 [ 1639.587713][T26185] ? fput+0x79/0x100 [ 1639.587727][T26185] ? ksys_write+0x1ac/0x250 [ 1639.587737][T26185] ? __pfx_ksys_write+0x10/0x10 [ 1639.587749][T26185] __x64_sys_move_pages+0xe0/0x1c0 [ 1639.587765][T26185] ? do_syscall_64+0x90/0x870 [ 1639.587779][T26185] ? lockdep_hardirqs_on+0x78/0x100 [ 1639.587792][T26185] do_syscall_64+0x115/0x870 [ 1639.587805][T26185] ? clear_bhb_loop+0x40/0x90 [ 1639.587819][T26185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1639.587830][T26185] RIP: 0033:0x7f803919e019 [ 1639.587840][T26185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1639.587851][T26185] RSP: 002b:00007f803a13c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 1639.587863][T26185] RAX: ffffffffffffffda RBX: 00007f8039425fa0 RCX: 00007f803919e019 [ 1639.587870][T26185] RDX: 0000200000000080 RSI: 0000000000001efe RDI: 0000000000000000 [ 1639.587877][T26185] RBP: 00007f803a13c090 R08: 0000200000000040 R09: 0000000000000000 [ 1639.587883][T26185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1639.587890][T26185] R13: 00007f8039426038 R14: 00007f8039425fa0 R15: 00007ffdd5e491e8 [ 1639.587903][T26185] [ 1639.989133][T16391] usb usb38-port1: unable to enumerate USB device [ 1640.284031][T25665] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1640.454325][T25665] usb 3-1: Using ep0 maxpacket: 8 [ 1641.453482][T26195] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5876'. [ 1641.464587][T26195] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5876'. [ 1641.811091][T26198] netlink: 15 bytes leftover after parsing attributes in process `syz.0.5877'. [ 1641.846005][T25665] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1641.868559][T25665] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1641.891666][T25665] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1641.940060][T26201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5878'. [ 1642.027276][T25665] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1642.781226][T26201] bridge_slave_1: left allmulticast mode [ 1642.790322][T25665] usb 3-1: Product: syz [ 1642.794639][T26201] bridge_slave_1: left promiscuous mode [ 1642.800533][T25665] usb 3-1: Manufacturer: syz [ 1642.805571][T26201] bridge0: port 2(bridge_slave_1) entered disabled state [ 1642.813183][T25665] usb 3-1: SerialNumber: syz [ 1642.987596][T25665] usb 3-1: unit 4 not found! [ 1643.058411][T26201] bridge_slave_0: left allmulticast mode [ 1643.092078][T21595] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 1643.107814][T26209] Bluetooth: MGMT ver 1.23 [ 1643.136436][T26201] bridge_slave_0: left promiscuous mode [ 1643.180528][T26200] binder: 26199:26200 ioctl c0045005 200000000080 returned -22 [ 1643.189340][ T29] audit: type=1400 audit(1785810070.206:3241): avc: denied { ioctl } for pid=26199 comm="syz.0.5878" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x5005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1643.228802][T26201] bridge0: port 1(bridge_slave_0) entered disabled state [ 1643.451002][ T29] audit: type=1400 audit(1785810070.486:3242): avc: denied { read } for pid=26216 comm="syz.1.5884" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1643.537812][T26218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5884'. [ 1643.548069][T26218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5884'. [ 1643.557138][T26218] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 1643.611764][ T29] audit: type=1400 audit(1785810070.486:3243): avc: denied { open } for pid=26216 comm="syz.1.5884" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1643.787570][T25665] usb 3-1: USB disconnect, device number 7 [ 1644.426861][T26235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5889'. [ 1644.844213][T25665] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1644.999025][T25665] usb 3-1: Using ep0 maxpacket: 32 [ 1645.027303][T25665] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1645.065884][T25665] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1645.114033][T25665] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 1645.155771][T25665] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1645.209976][T25665] usb 3-1: config 0 descriptor?? [ 1645.400203][T26248] gadgetfs: bound to dummy_udc driver [ 1645.446137][T26221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1645.521475][T26221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1645.553268][T21595] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 1645.799191][T25665] hid_parser_main: 30 callbacks suppressed [ 1645.799207][T25665] koneplus 0003:1E7D:2D51.000C: unknown main item tag 0x0 [ 1645.872372][T25665] koneplus 0003:1E7D:2D51.000C: unknown main item tag 0x0 [ 1645.922637][T25665] koneplus 0003:1E7D:2D51.000C: item fetching failed at offset 2/5 [ 1645.968561][T25665] koneplus 0003:1E7D:2D51.000C: parse failed [ 1646.012610][T25665] koneplus 0003:1E7D:2D51.000C: probe with driver koneplus failed with error -22 [ 1646.229258][T26265] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1646.573462][T16391] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1646.728798][T26270] block2mtd: error: cannot open device #! [ 1646.753090][T16391] usb 2-1: Using ep0 maxpacket: 16 [ 1646.769397][T16391] usb 2-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1646.783159][ T29] audit: type=1400 audit(1785810073.816:3244): avc: denied { ioctl } for pid=26269 comm="syz.0.5899" path="socket:[95042]" dev="sockfs" ino=95042 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1646.814267][T16391] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1646.847294][T16391] usb 2-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 1646.882122][T16391] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1646.892516][ T29] audit: type=1400 audit(1785810073.816:3245): avc: denied { bind } for pid=26269 comm="syz.0.5899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1646.945565][T16391] usb 2-1: config 0 descriptor?? [ 1647.061088][T14493] usb 3-1: USB disconnect, device number 8 [ 1647.730305][T26281] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5903'. [ 1647.771729][T16391] usbhid 2-1:0.0: can't add hid device: -71 [ 1647.781983][T26164] Set syz1 is full, maxelem 65536 reached [ 1647.792430][T16391] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1647.930429][T16391] usb 2-1: USB disconnect, device number 64 [ 1648.060353][T21595] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 1649.063192][T26300] 9p: Bad value for 'rfdno' [ 1649.373858][T21595] block nbd4: Receive control failed (result -107) [ 1649.427512][T26312] FAULT_INJECTION: forcing a failure. [ 1649.427512][T26312] name failslab, interval 1, probability 0, space 0, times 0 [ 1649.511943][T26312] CPU: 0 UID: 0 PID: 26312 Comm: syz.2.5913 Tainted: G S syzkaller #0 PREEMPT(full) [ 1649.511970][T26312] Tainted: [S]=CPU_OUT_OF_SPEC [ 1649.511974][T26312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1649.511981][T26312] Call Trace: [ 1649.511987][T26312] [ 1649.511992][T26312] dump_stack_lvl+0x100/0x190 [ 1649.512015][T26312] should_fail_ex.cold+0x5/0xa [ 1649.512031][T26312] should_failslab+0xc2/0x120 [ 1649.512049][T26312] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 1649.512063][T26312] ? sock_alloc_inode+0x26/0x2c0 [ 1649.512081][T26312] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1649.512098][T26312] sock_alloc_inode+0x26/0x2c0 [ 1649.512114][T26312] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1649.512143][T26312] alloc_inode+0x68/0x250 [ 1649.512160][T26312] sock_alloc+0x44/0x280 [ 1649.512176][T26312] do_accept+0xf9/0x530 [ 1649.512188][T26312] ? do_raw_spin_lock+0x128/0x260 [ 1649.512205][T26312] ? __pfx_do_accept+0x10/0x10 [ 1649.512225][T26312] __sys_accept4+0x108/0x200 [ 1649.512238][T26312] ? __pfx___sys_accept4+0x10/0x10 [ 1649.512251][T26312] ? __pfx_ksys_write+0x10/0x10 [ 1649.512264][T26312] __x64_sys_accept4+0x96/0x100 [ 1649.512275][T26312] ? lockdep_hardirqs_on+0x78/0x100 [ 1649.512290][T26312] do_syscall_64+0x115/0x870 [ 1649.512304][T26312] ? clear_bhb_loop+0x40/0x90 [ 1649.512319][T26312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1649.512330][T26312] RIP: 0033:0x7f952379e019 [ 1649.512342][T26312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1649.512352][T26312] RSP: 002b:00007f9524599028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 1649.512364][T26312] RAX: ffffffffffffffda RBX: 00007f9523a26090 RCX: 00007f952379e019 [ 1649.512456][T26312] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 1649.512466][T26312] RBP: 00007f9524599090 R08: 0000000000000000 R09: 0000000000000000 [ 1649.512473][T26312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1649.512479][T26312] R13: 00007f9523a26128 R14: 00007f9523a26090 R15: 00007fff001be628 [ 1649.512498][T26312] [ 1649.895549][T26307] nbd4: detected capacity change from 0 to 8589934592 [ 1649.918399][T25897] block nbd4: Dead connection, failed to find a fallback [ 1649.926306][T25897] block nbd4: shutting down sockets [ 1649.932659][T25897] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1649.946809][T25897] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1649.961688][T25897] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1649.976742][T25897] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1649.985512][T25897] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1649.998610][T25897] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1650.007450][T25897] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1650.017925][T25897] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1650.030894][T25897] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1650.041548][T25897] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1650.053653][T25897] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1650.065960][T25897] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1650.075350][T25897] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1650.085560][T25897] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1650.093956][T25897] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1650.110211][T25897] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1650.119548][T20527] ldm_validate_partition_table(): Disk read failed. [ 1650.130483][T25897] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1650.140527][T25897] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1650.148629][T25897] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1650.158355][T25897] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1650.166568][T20527] Dev nbd4: unable to read RDB block 0 [ 1650.177842][T20527] nbd4: unable to read partition table [ 1650.225945][T20527] ldm_validate_partition_table(): Disk read failed. [ 1650.300115][T20527] Dev nbd4: unable to read RDB block 0 [ 1650.333321][T20527] nbd4: unable to read partition table [ 1650.590976][T26330] netlink: 15 bytes leftover after parsing attributes in process `syz.4.5918'. [ 1650.776164][T26334] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5919'. [ 1651.036159][ T29] audit: type=1400 audit(1785810078.056:3246): avc: denied { read append } for pid=26339 comm="syz.0.5922" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1651.062369][T26343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5923'. [ 1651.130541][T26347] FAULT_INJECTION: forcing a failure. [ 1651.130541][T26347] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1651.275638][T26347] CPU: 0 UID: 0 PID: 26347 Comm: syz.1.5924 Tainted: G S syzkaller #0 PREEMPT(full) [ 1651.275660][T26347] Tainted: [S]=CPU_OUT_OF_SPEC [ 1651.275664][T26347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1651.275671][T26347] Call Trace: [ 1651.275676][T26347] [ 1651.275680][T26347] dump_stack_lvl+0x100/0x190 [ 1651.275700][T26347] should_fail_ex.cold+0x5/0xa [ 1651.275714][T26347] _copy_from_user+0x2e/0xd0 [ 1651.275731][T26347] do_handle_open+0xeb/0xf20 [ 1651.275747][T26347] ? __fget_files+0x21f/0x3d0 [ 1651.275759][T26347] ? __pfx_do_handle_open+0x10/0x10 [ 1651.275776][T26347] ? ksys_write+0x1ac/0x250 [ 1651.275791][T26347] ? do_syscall_64+0x115/0x870 [ 1651.275804][T26347] do_syscall_64+0x115/0x870 [ 1651.275817][T26347] ? clear_bhb_loop+0x40/0x90 [ 1651.275831][T26347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1651.275843][T26347] RIP: 0033:0x7f93ecb9e019 [ 1651.275852][T26347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1651.275863][T26347] RSP: 002b:00007f93ed9be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 1651.275877][T26347] RAX: ffffffffffffffda RBX: 00007f93ece26090 RCX: 00007f93ecb9e019 [ 1651.275884][T26347] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 000000000000000a [ 1651.275890][T26347] RBP: 00007f93ed9be090 R08: 0000000000000000 R09: 0000000000000000 [ 1651.275897][T26347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1651.275904][T26347] R13: 00007f93ece26128 R14: 00007f93ece26090 R15: 00007ffd0ccdd588 [ 1651.275918][T26347] [ 1651.279156][ T29] audit: type=1400 audit(1785810078.066:3247): avc: denied { open } for pid=26339 comm="syz.0.5922" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1653.556545][T26360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5927'. [ 1653.569216][T26360] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5927'. [ 1653.810680][ T29] audit: type=1400 audit(1785810080.836:3248): avc: denied { watch_reads } for pid=26362 comm="syz.3.5928" path="/482" dev="tmpfs" ino=2614 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1653.923318][ T29] audit: type=1326 audit(1785810080.876:3249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26362 comm="syz.3.5928" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f803919e019 code=0x0 [ 1654.722017][T21595] Bluetooth: hci1: unexpected event for opcode 0x0004 [ 1654.870515][T26376] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5931'. [ 1655.192111][T26390] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1656.496993][T26397] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5936'. [ 1656.507973][T26397] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5936'. [ 1656.590857][ T29] audit: type=1400 audit(1785810082.616:3250): avc: denied { unmount } for pid=16596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1657.760780][T26408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5939'. [ 1657.772486][T26408] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5939'. [ 1657.996631][ T29] audit: type=1400 audit(1785810083.026:3251): avc: denied { listen } for pid=26399 comm="syz.1.5938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1659.040012][ T29] audit: type=1400 audit(1785810083.026:3252): avc: denied { accept } for pid=26399 comm="syz.1.5938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1659.086824][T26419] FAULT_INJECTION: forcing a failure. [ 1659.086824][T26419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1659.100189][T26419] CPU: 0 UID: 0 PID: 26419 Comm: syz.0.5943 Tainted: G S syzkaller #0 PREEMPT(full) [ 1659.100209][T26419] Tainted: [S]=CPU_OUT_OF_SPEC [ 1659.100214][T26419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1659.100221][T26419] Call Trace: [ 1659.100226][T26419] [ 1659.100230][T26419] dump_stack_lvl+0x100/0x190 [ 1659.100251][T26419] should_fail_ex.cold+0x5/0xa [ 1659.100269][T26419] _copy_from_user+0x2e/0xd0 [ 1659.100286][T26419] ucma_write+0x128/0x330 [ 1659.100305][T26419] ? __pfx_ucma_write+0x10/0x10 [ 1659.100321][T26419] ? bpf_lsm_file_permission+0x9/0x10 [ 1659.100338][T26419] ? security_file_permission+0x76/0x210 [ 1659.100350][T26419] ? rw_verify_area+0xce/0x6d0 [ 1659.100367][T26419] vfs_write+0x2aa/0x1050 [ 1659.100384][T26419] ? __pfx_ucma_write+0x10/0x10 [ 1659.100402][T26419] ? __pfx_vfs_write+0x10/0x10 [ 1659.100417][T26419] ? find_held_lock+0x2b/0x80 [ 1659.100429][T26419] ? __fget_files+0x215/0x3d0 [ 1659.100441][T26419] ? __fget_files+0x215/0x3d0 [ 1659.100454][T26419] ? __fget_files+0x21f/0x3d0 [ 1659.100469][T26419] ksys_write+0x1f8/0x250 [ 1659.100479][T26419] ? __pfx_ksys_write+0x10/0x10 [ 1659.100492][T26419] do_syscall_64+0x115/0x870 [ 1659.100509][T26419] ? clear_bhb_loop+0x40/0x90 [ 1659.100523][T26419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1659.100535][T26419] RIP: 0033:0x7f38dff9e019 [ 1659.100547][T26419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1659.100558][T26419] RSP: 002b:00007f38e0dcf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1659.100572][T26419] RAX: ffffffffffffffda RBX: 00007f38e0225fa0 RCX: 00007f38dff9e019 [ 1659.100579][T26419] RDX: 0000000000000018 RSI: 0000200000000240 RDI: 0000000000000006 [ 1659.100585][T26419] RBP: 00007f38e0dcf090 R08: 0000000000000000 R09: 0000000000000000 [ 1659.100592][T26419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1659.100599][T26419] R13: 00007f38e0226038 R14: 00007f38e0225fa0 R15: 00007ffd403c5718 [ 1659.100613][T26419] [ 1661.933880][T26452] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5951'. [ 1661.945495][T26452] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5951'. [ 1662.351412][T21595] Bluetooth: hci0: unexpected event for opcode 0x0004 [ 1662.524760][T26461] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1662.612653][ T29] audit: type=1400 audit(1785810086.636:3253): avc: denied { accept } for pid=26469 comm="syz.3.5956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1662.680612][T26473] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1662.687657][T26473] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1662.764914][T26473] vhci_hcd vhci_hcd.0: Device attached [ 1662.793271][T26466] netlink: 14640 bytes leftover after parsing attributes in process `syz.2.5954'. [ 1662.808604][T26477] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26477 comm=syz.0.5957 [ 1662.821714][ T29] audit: type=1400 audit(1785810086.816:3254): avc: denied { ioctl } for pid=26472 comm="syz.0.5957" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1662.889318][T26475] vhci_hcd: connection closed [ 1662.889586][T21088] vhci_hcd vhci_hcd.0: stop threads [ 1662.915236][ T5729] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1662.939038][T21088] vhci_hcd vhci_hcd.0: release socket [ 1662.958665][T21088] vhci_hcd vhci_hcd.0: disconnect device [ 1663.085738][ T5729] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 1663.098380][T26480] FAULT_INJECTION: forcing a failure. [ 1663.098380][T26480] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1663.120926][ T5729] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1663.173081][T26480] CPU: 0 UID: 0 PID: 26480 Comm: syz.1.5958 Tainted: G S syzkaller #0 PREEMPT(full) [ 1663.173104][T26480] Tainted: [S]=CPU_OUT_OF_SPEC [ 1663.173108][T26480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1663.173115][T26480] Call Trace: [ 1663.173119][T26480] [ 1663.173124][T26480] dump_stack_lvl+0x100/0x190 [ 1663.173144][T26480] should_fail_ex.cold+0x5/0xa [ 1663.173162][T26480] _copy_from_user+0x2e/0xd0 [ 1663.173179][T26480] copy_msghdr_from_user+0x9f/0x4c0 [ 1663.173192][T26480] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1663.173216][T26480] ___sys_sendmsg+0x106/0x1e0 [ 1663.173229][T26480] ? __pfx____sys_sendmsg+0x10/0x10 [ 1663.173239][T26480] ? __lock_acquire+0x49f/0x1a40 [ 1663.173254][T26480] ? get_pid_task+0x106/0x250 [ 1663.173279][T26480] __sys_sendmsg+0x160/0x210 [ 1663.173296][T26480] ? __pfx___sys_sendmsg+0x10/0x10 [ 1663.173317][T26480] do_syscall_64+0x115/0x870 [ 1663.173331][T26480] ? clear_bhb_loop+0x40/0x90 [ 1663.173345][T26480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1663.173356][T26480] RIP: 0033:0x7f93ecb9e019 [ 1663.173366][T26480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1663.173377][T26480] RSP: 002b:00007f93ed9df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1663.173389][T26480] RAX: ffffffffffffffda RBX: 00007f93ece25fa0 RCX: 00007f93ecb9e019 [ 1663.173396][T26480] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1663.173403][T26480] RBP: 00007f93ed9df090 R08: 0000000000000000 R09: 0000000000000000 [ 1663.173409][T26480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1663.173416][T26480] R13: 00007f93ece26038 R14: 00007f93ece25fa0 R15: 00007ffd0ccdd588 [ 1663.173430][T26480] [ 1663.490998][ T5729] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 1664.552051][ T29] audit: type=1400 audit(1785810088.576:3255): avc: denied { create } for pid=26487 comm="syz.4.5962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1664.604295][T16391] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1664.661934][T21595] block nbd0: Receive control failed (result -107) [ 1664.803671][T26495] nbd0: detected capacity change from 0 to 8589934592 [ 1664.831940][T26497] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1664.839345][T16391] usb 2-1: Using ep0 maxpacket: 8 [ 1664.855974][T16391] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 1664.885362][T16391] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1664.941305][T26493] block nbd0: shutting down sockets [ 1664.959187][T16391] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1665.024029][T16391] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 1665.164423][T16391] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1665.939516][T26502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5965'. [ 1665.950428][T26502] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5965'. [ 1666.022195][T14493] usb 4-1: USB disconnect, device number 47 [ 1666.056450][T16391] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1666.185478][T26505] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1666.217154][T16391] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1666.266904][T26513] kvm: kvm [26504]: vcpu0, guest rIP: 0x58ad29489c2a7d0a Unhandled WRMSR(0x4000006d) = 0x6 [ 1666.301464][T16391] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1666.566235][T16391] usb 2-1: GET_CAPABILITIES returned 0 [ 1666.600831][T16391] usbtmc 2-1:16.0: can't read capabilities [ 1666.774919][T16391] usb 2-1: USB disconnect, device number 65 [ 1667.076758][T26527] FAULT_INJECTION: forcing a failure. [ 1667.076758][T26527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1667.134702][T26527] CPU: 0 UID: 0 PID: 26527 Comm: syz.0.5973 Tainted: G S syzkaller #0 PREEMPT(full) [ 1667.134729][T26527] Tainted: [S]=CPU_OUT_OF_SPEC [ 1667.134734][T26527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1667.134742][T26527] Call Trace: [ 1667.134748][T26527] [ 1667.134754][T26527] dump_stack_lvl+0x100/0x190 [ 1667.134778][T26527] should_fail_ex.cold+0x5/0xa [ 1667.134795][T26527] _copy_from_user+0x2e/0xd0 [ 1667.134815][T26527] __sys_bpf+0x2f5/0x4e80 [ 1667.134835][T26527] ? __pfx___sys_bpf+0x10/0x10 [ 1667.134848][T26527] ? find_held_lock+0x2b/0x80 [ 1667.134860][T26527] ? get_pid_task+0xfc/0x250 [ 1667.134872][T26527] ? get_pid_task+0xfc/0x250 [ 1667.134888][T26527] ? find_held_lock+0x2b/0x80 [ 1667.134903][T26527] ? rcu_read_lock_any_held+0x6a/0xa0 [ 1667.134917][T26527] ? find_held_lock+0x2b/0x80 [ 1667.134928][T26527] ? ksys_write+0x190/0x250 [ 1667.134940][T26527] ? ksys_write+0x190/0x250 [ 1667.134963][T26527] ? fput+0x79/0x100 [ 1667.134982][T26527] ? __x64_sys_bpf+0xce/0x140 [ 1667.134995][T26527] __x64_sys_bpf+0xce/0x140 [ 1667.135008][T26527] ? do_syscall_64+0x90/0x870 [ 1667.135026][T26527] do_syscall_64+0x115/0x870 [ 1667.135041][T26527] ? clear_bhb_loop+0x40/0x90 [ 1667.135058][T26527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1667.135071][T26527] RIP: 0033:0x7f38dff9e019 [ 1667.135083][T26527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1667.135095][T26527] RSP: 002b:00007f38e0dcf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1667.135109][T26527] RAX: ffffffffffffffda RBX: 00007f38e0225fa0 RCX: 00007f38dff9e019 [ 1667.135117][T26527] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 1667.135125][T26527] RBP: 00007f38e0dcf090 R08: 0000000000000000 R09: 0000000000000000 [ 1667.135132][T26527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1667.135140][T26527] R13: 00007f38e0226038 R14: 00007f38e0225fa0 R15: 00007ffd403c5718 [ 1667.135156][T26527] [ 1668.064747][T16757] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1668.094807][T26541] FAULT_INJECTION: forcing a failure. [ 1668.094807][T26541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1668.113586][T26541] CPU: 0 UID: 0 PID: 26541 Comm: syz.2.5978 Tainted: G S syzkaller #0 PREEMPT(full) [ 1668.113609][T26541] Tainted: [S]=CPU_OUT_OF_SPEC [ 1668.113613][T26541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1668.113620][T26541] Call Trace: [ 1668.113624][T26541] [ 1668.113629][T26541] dump_stack_lvl+0x100/0x190 [ 1668.113651][T26541] should_fail_ex.cold+0x5/0xa [ 1668.113669][T26541] _copy_from_user+0x2e/0xd0 [ 1668.113687][T26541] copy_msghdr_from_user+0x9f/0x4c0 [ 1668.113701][T26541] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1668.113715][T26541] ? __pfx__kstrtoull+0x10/0x10 [ 1668.113729][T26541] ___sys_sendmsg+0x106/0x1e0 [ 1668.113741][T26541] ? __pfx____sys_sendmsg+0x10/0x10 [ 1668.113759][T26541] ? find_held_lock+0x2b/0x80 [ 1668.113778][T26541] __sys_sendmmsg+0x20c/0x440 [ 1668.113794][T26541] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1668.113808][T26541] ? ksys_write+0x190/0x250 [ 1668.113829][T26541] ? fput+0x79/0x100 [ 1668.113843][T26541] ? ksys_write+0x1ac/0x250 [ 1668.113852][T26541] ? __pfx_ksys_write+0x10/0x10 [ 1668.113864][T26541] __x64_sys_sendmmsg+0x9c/0x100 [ 1668.113879][T26541] ? lockdep_hardirqs_on+0x78/0x100 [ 1668.113893][T26541] do_syscall_64+0x115/0x870 [ 1668.113906][T26541] ? clear_bhb_loop+0x40/0x90 [ 1668.113920][T26541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1668.113932][T26541] RIP: 0033:0x7f952379e019 [ 1668.113942][T26541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1668.113953][T26541] RSP: 002b:00007f95245ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1668.113964][T26541] RAX: ffffffffffffffda RBX: 00007f9523a25fa0 RCX: 00007f952379e019 [ 1668.113971][T26541] RDX: 0000000000000002 RSI: 0000200000000280 RDI: 0000000000000003 [ 1668.113977][T26541] RBP: 00007f95245ba090 R08: 0000000000000000 R09: 0000000000000000 [ 1668.113984][T26541] R10: 000000004404c880 R11: 0000000000000246 R12: 0000000000000001 [ 1668.113990][T26541] R13: 00007f9523a26038 R14: 00007f9523a25fa0 R15: 00007fff001be628 [ 1668.114004][T26541] [ 1668.223761][T16757] usb 4-1: Using ep0 maxpacket: 16 [ 1668.224866][T16757] usb 4-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1668.224887][T16757] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1668.224903][T16757] usb 4-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 1668.224917][T16757] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1668.226148][T16757] usb 4-1: config 0 descriptor?? [ 1668.254209][ T5729] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1668.404065][ T5729] usb 2-1: Using ep0 maxpacket: 32 [ 1668.405283][ T5729] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1668.405325][ T5729] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1668.406774][ T5729] usb 2-1: config 0 descriptor?? [ 1668.409145][ T5729] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1668.686457][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.686719][ T1315] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 1668.686772][ T1315] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 1668.686814][ T1315] aoe: packet could not be sent on ipvlan2. consider increasing tx_queue_len [ 1669.550983][T26539] netlink: 'syz.1.5977': attribute type 4 has an invalid length. [ 1669.690140][T26539] netlink: 'syz.1.5977': attribute type 4 has an invalid length. [ 1669.823608][ T5729] gspca_sq930x: ucbus_write failed -110 [ 1669.823695][ T5729] sq930x 2-1:0.0: probe with driver sq930x failed with error -110 [ 1670.039679][ T5729] usb 2-1: USB disconnect, device number 66 [ 1670.285177][ T29] audit: type=1400 audit(1785810093.306:3256): avc: denied { create } for pid=26561 comm="syz.2.5985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1670.430288][T16757] usbhid 4-1:0.0: can't add hid device: -71 [ 1670.430361][T16757] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1670.431938][T16757] usb 4-1: USB disconnect, device number 48 [ 1671.458538][T26585] netlink: 'syz.4.5990': attribute type 12 has an invalid length. [ 1671.458556][T26585] netlink: 'syz.4.5990': attribute type 29 has an invalid length. [ 1671.458565][T26585] netlink: 148 bytes leftover after parsing attributes in process `syz.4.5990'. [ 1671.458578][T26585] netlink: 'syz.4.5990': attribute type 1 has an invalid length. [ 1671.458588][T26585] netlink: 'syz.4.5990': attribute type 2 has an invalid length. [ 1671.528348][T26586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5989'. [ 1672.003382][ T29] audit: type=1400 audit(1785810095.026:3257): avc: denied { write } for pid=26570 comm="syz.0.5987" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1672.020085][ T29] audit: type=1400 audit(1785810095.046:3258): avc: denied { map } for pid=26570 comm="syz.0.5987" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1672.542017][T26609] gadgetfs: bound to dummy_udc driver [ 1672.860476][ T29] audit: type=1400 audit(1785810095.886:3259): avc: denied { connect } for pid=26618 comm="syz.0.5999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1673.448349][T26628] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6001'. [ 1673.528860][T26630] syzkaller0: entered promiscuous mode [ 1673.537481][T26628] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6001'. [ 1673.566805][T26630] syzkaller0: entered allmulticast mode [ 1673.635478][T26630] syzkaller0: mtu less than device minimum [ 1674.802021][T26646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6005'. [ 1674.814026][T26646] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6005'. [ 1675.491312][ T29] audit: type=1400 audit(1785810097.516:3260): avc: denied { create } for pid=26659 comm="syz.0.6012" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1675.650507][ T29] audit: type=1400 audit(1785810097.566:3261): avc: denied { write } for pid=26659 comm="syz.0.6012" name="file0" dev="tmpfs" ino=405 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1675.726507][T21595] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1675.807817][ T29] audit: type=1400 audit(1785810097.566:3262): avc: denied { open } for pid=26659 comm="syz.0.6012" path="/74/file0" dev="tmpfs" ino=405 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1675.920172][T26666] fuse: Unknown parameter 'us~r_id' [ 1675.969700][ T29] audit: type=1400 audit(1785810097.566:3263): avc: denied { ioctl } for pid=26659 comm="syz.0.6012" path="/74/file0" dev="tmpfs" ino=405 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1676.080177][T26674] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6015'. [ 1676.137603][ T29] audit: type=1400 audit(1785810097.946:3264): avc: denied { mounton } for pid=26659 comm="syz.0.6012" path="/74/file0" dev="tmpfs" ino=405 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1676.169074][T26674] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6015'. [ 1676.320952][ T29] audit: type=1400 audit(1785810098.096:3265): avc: denied { setattr } for pid=26659 comm="syz.0.6012" name="file0" dev="tmpfs" ino=405 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1676.720372][ T29] audit: type=1400 audit(1785810098.746:3266): avc: denied { write } for pid=26667 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1676.886864][T25665] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1677.664477][T26693] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6019'. [ 1677.675280][T26693] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6019'. [ 1677.744189][T25665] usb 2-1: device descriptor read/64, error -71 [ 1677.814700][ T29] audit: type=1400 audit(1785810098.846:3267): avc: denied { write } for pid=26695 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1678.023534][T25665] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1678.183527][T25665] usb 2-1: device descriptor read/64, error -71 [ 1678.264644][ T29] audit: type=1400 audit(1785810099.296:3268): avc: denied { unlink } for pid=25055 comm="syz-executor" name="file0" dev="tmpfs" ino=405 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1678.302555][T26655] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1678.343147][T25665] usb usb2-port1: attempt power cycle [ 1678.353858][T26655] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1678.439766][T26714] gadgetfs: bound to dummy_udc driver [ 1678.469537][T26655] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1678.510458][T26655] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1678.733887][T25665] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1678.764035][T26655] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1678.797589][T26655] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1678.812113][T25665] usb 2-1: device descriptor read/8, error -71 [ 1678.888207][ T29] audit: type=1400 audit(1785810099.926:3269): avc: denied { write } for pid=26703 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1679.088786][T25665] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1679.135338][T25665] usb 2-1: device descriptor read/8, error -71 [ 1679.147479][T26655] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1679.190361][T26655] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1679.275919][T25665] usb usb2-port1: unable to enumerate USB device [ 1679.432837][T26655] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1679.472545][T26655] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1679.623737][T16757] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 1679.826733][T16757] usb 5-1: config 0 has an invalid interface number: 212 but max is 0 [ 1679.873371][T16757] usb 5-1: config 0 has no interface number 0 [ 1679.912140][T16757] usb 5-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=d7.23 [ 1679.955780][T16757] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1680.002590][T16757] usb 5-1: Product: syz [ 1680.027391][T16757] usb 5-1: Manufacturer: syz [ 1680.062635][T16757] usb 5-1: SerialNumber: syz [ 1680.099704][T16757] usb 5-1: config 0 descriptor?? [ 1680.114628][T26768] block nbd3: not configured, cannot reconfigure [ 1680.134725][T16757] ftdi_sio 5-1:0.212: FTDI USB Serial Device converter detected [ 1680.191473][T16757] ftdi_sio ttyUSB0: unknown device type: 0xd723 [ 1680.345342][T26746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1680.398269][T26746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1680.518173][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 1680.518186][ T29] audit: type=1326 audit(1785810101.546:3274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26753 comm="syz.1.6032" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f93ecb9e019 code=0x7ffc0000 [ 1680.616217][T16757] usb 5-1: USB disconnect, device number 9 [ 1680.665367][T16757] ftdi_sio 5-1:0.212: device disconnected [ 1681.261345][T26803] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6037'. [ 1681.324583][ T29] audit: type=1400 audit(1785810102.356:3275): avc: denied { write } for pid=26787 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1681.375713][T26803] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6037'. [ 1681.753882][ T29] audit: type=1400 audit(1785810102.786:3276): avc: denied { write } for pid=26811 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1683.118023][T26824] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1683.190271][ T0] Disabled fast string operations [ 1683.195390][ T0] ------------[ cut here ]------------ [ 1683.200869][ T0] alternatives_patched [ 1683.200886][ T0] WARNING: arch/x86/kernel/cpu/cpuid-deps.c:127 at do_clear_cpu_cap+0x356/0x440, CPU#1: swapper/1/0 [ 1683.215787][ T0] Modules linked in: [ 1683.219725][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G S syzkaller #0 PREEMPT(full) [ 1683.230271][ T0] Tainted: [S]=CPU_OUT_OF_SPEC [ 1683.235049][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1683.245163][ T0] RIP: 0010:do_clear_cpu_cap+0x356/0x440 [ 1683.250843][ T0] Code: 2a 38 d0 7c 08 84 d2 0f 85 ea 00 00 00 8b 2d d1 db 71 0f 31 ff 89 ee e8 88 c9 59 00 85 ed 0f 84 7d fd ff ff e8 0b cf 59 00 90 <0f> 0b 90 e9 6f fd ff ff 48 89 54 24 18 89 14 24 e8 f5 ce 59 00 8b [ 1683.270495][ T0] RSP: 0000:ffffc90000197c98 EFLAGS: 00010093 [ 1683.276768][ T0] RAX: 0000000000000000 RBX: 0000000000000070 RCX: ffffffff81b095c8 [ 1683.284935][ T0] RDX: ffff88801eac2540 RSI: ffffffff81b095d5 RDI: ffff88801eac2540 [ 1683.292939][ T0] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 1683.300940][ T0] R10: 0000000000000001 R11: ffffffffffff5820 R12: 0000000000000070 [ 1683.308967][ T0] R13: 0000000000000601 R14: ffffc90000197ce0 R15: ffffc90000197d80 [ 1683.316957][ T0] FS: 0000000000000000(0000) GS:ffff888123ed8000(0000) knlGS:0000000000000000 [ 1683.325913][ T0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1683.332555][ T0] CR2: 0000000000000000 CR3: 000000000e994000 CR4: 00000000003506b0 [ 1683.340572][ T0] Call Trace: [ 1683.343877][ T0] [ 1683.346874][ T0] ? __pfx_do_clear_cpu_cap+0x10/0x10 [ 1683.352300][ T0] ? _printk+0xcf/0x110 [ 1683.356490][ T0] ? __pfx_cpu_parse_topology+0x10/0x10 [ 1683.362067][ T0] ? early_init_intel.cold+0x129/0x1eb [ 1683.367574][ T0] early_init_intel.cold+0x13f/0x1eb [ 1683.372902][ T0] init_intel+0x1c/0x7b0 [ 1683.377228][ T0] identify_cpu+0x8b0/0x1c30 [ 1683.381948][ T0] ? __pfx_cpu_init+0x10/0x10 [ 1683.386927][ T0] identify_secondary_cpu+0x178/0x270 [ 1683.392350][ T0] start_secondary+0xcf/0x2d0 [ 1683.397071][ T0] ? __pfx_start_secondary+0x10/0x10 [ 1683.402933][ T0] common_startup_64+0x13e/0x158 [ 1683.408204][ T0] [ 1683.411304][ T0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1683.418607][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G S syzkaller #0 PREEMPT(full) [ 1683.429418][ T0] Tainted: [S]=CPU_OUT_OF_SPEC [ 1683.434194][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1683.444373][ T0] Call Trace: [ 1683.447687][ T0] [ 1683.450637][ T0] dump_stack_lvl+0x100/0x190 [ 1683.455354][ T0] vpanic+0x552/0x970 [ 1683.459369][ T0] ? __pfx_vpanic+0x10/0x10 [ 1683.463913][ T0] panic+0xd1/0xe0 [ 1683.467685][ T0] ? __pfx_panic+0x10/0x10 [ 1683.472501][ T0] ? check_panic_on_warn+0x1f/0x90 [ 1683.477656][ T0] check_panic_on_warn.cold+0x19/0x34 [ 1683.483060][ T0] ? do_clear_cpu_cap+0x356/0x440 [ 1683.488116][ T0] __warn.cold+0x191/0x318 [ 1683.492643][ T0] __report_bug+0x30f/0x440 [ 1683.497171][ T0] ? do_clear_cpu_cap+0x356/0x440 [ 1683.502241][ T0] ? __pfx___report_bug+0x10/0x10 [ 1683.507305][ T0] ? prb_read_valid+0x78/0xa0 [ 1683.512020][ T0] ? __pfx_prb_read_valid+0x10/0x10 [ 1683.517245][ T0] ? tick_nohz_tick_stopped+0x6c/0xa0 [ 1683.522649][ T0] ? do_clear_cpu_cap+0x356/0x440 [ 1683.527737][ T0] report_bug+0xb2/0x220 [ 1683.532029][ T0] ? do_clear_cpu_cap+0x356/0x440 [ 1683.537087][ T0] handle_bug+0x16a/0x2a0 [ 1683.541455][ T0] exc_invalid_op+0x17/0x50 [ 1683.545989][ T0] asm_exc_invalid_op+0x1a/0x20 [ 1683.550883][ T0] RIP: 0010:do_clear_cpu_cap+0x356/0x440 [ 1683.556552][ T0] Code: 2a 38 d0 7c 08 84 d2 0f 85 ea 00 00 00 8b 2d d1 db 71 0f 31 ff 89 ee e8 88 c9 59 00 85 ed 0f 84 7d fd ff ff e8 0b cf 59 00 90 <0f> 0b 90 e9 6f fd ff ff 48 89 54 24 18 89 14 24 e8 f5 ce 59 00 8b [ 1683.576179][ T0] RSP: 0000:ffffc90000197c98 EFLAGS: 00010093 [ 1683.582277][ T0] RAX: 0000000000000000 RBX: 0000000000000070 RCX: ffffffff81b095c8 [ 1683.590385][ T0] RDX: ffff88801eac2540 RSI: ffffffff81b095d5 RDI: ffff88801eac2540 [ 1683.598896][ T0] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 1683.606897][ T0] R10: 0000000000000001 R11: ffffffffffff5820 R12: 0000000000000070 [ 1683.615418][ T0] R13: 0000000000000601 R14: ffffc90000197ce0 R15: ffffc90000197d80 [ 1683.623617][ T0] ? do_clear_cpu_cap+0x348/0x440 [ 1683.629229][ T0] ? do_clear_cpu_cap+0x355/0x440 [ 1683.634474][ T0] ? do_clear_cpu_cap+0x355/0x440 [ 1683.639951][ T0] ? __pfx_do_clear_cpu_cap+0x10/0x10 [ 1683.645723][ T0] ? _printk+0xcf/0x110 [ 1683.650013][ T0] ? __pfx_cpu_parse_topology+0x10/0x10 [ 1683.655591][ T0] ? early_init_intel.cold+0x129/0x1eb [ 1683.661121][ T0] early_init_intel.cold+0x13f/0x1eb [ 1683.666461][ T0] init_intel+0x1c/0x7b0 [ 1683.670739][ T0] identify_cpu+0x8b0/0x1c30 [ 1683.675436][ T0] ? __pfx_cpu_init+0x10/0x10 [ 1683.680138][ T0] identify_secondary_cpu+0x178/0x270 [ 1683.685543][ T0] start_secondary+0xcf/0x2d0 [ 1683.690274][ T0] ? __pfx_start_secondary+0x10/0x10 [ 1683.695597][ T0] common_startup_64+0x13e/0x158 [ 1683.700589][ T0] [ 1684.796740][ T0] Shutting down cpus with NMI [ 1684.801902][ T0] Kernel Offset: disabled [ 1684.806225][ T0] Rebooting in 86400 seconds..