last executing test programs: 20m18.178382186s ago: executing program 32 (id=83): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) 15m35.38888265s ago: executing program 33 (id=930): syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x3000000000002}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f00000000c0)={0x7, 0x0, 0x4fd, 0x80800, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000006580)=0x4) ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, &(0x7f0000006380)={&(0x7f00000061c0)=[0x0, &(0x7f0000000080)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000000}}, &(0x7f0000006440)=@freefrag={{0x4f32494e, 0x9, 0x10, 0xc0000001}, {}, 0x2}, &(0x7f0000000100)=@uuid={{0x4f32494e, 0x5, 0x10, 0x1}}, &(0x7f0000000140)=@label={{0x4f32494e, 0x4, 0x10, 0x40000001}}, &(0x7f00000001c0)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x40000001}}, &(0x7f0000000340)=@freefrag={{0x4f32494e, 0x9, 0x10}, {}, 0x4}, &(0x7f0000000480)=@label={{0x4f32494e, 0x4, 0x10}}, &(0x7f0000000200)=@features={{0x4f32494e, 0x6, 0x10, 0x40000001}}, &(0x7f0000000500)=@label={{0x4f32494e, 0x4, 0x10, 0x40000001}}, &(0x7f00000002c0)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x1}}, 0x0, &(0x7f00000005c0)=@label={{0x4f32494e, 0x4, 0x10, 0x1}}, 0x0, &(0x7f00000006c0)=@label={{0x4f32494e, 0x4, 0x10, 0x80000000}}, &(0x7f0000000740)=@journal={{0x4f32494e, 0x7, 0x10}}, 0x0, &(0x7f0000001800)=@uuid={{0x4f32494e, 0x5, 0x10, 0xc0000001}}, &(0x7f0000001840)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000001}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002b00)=@uuid={{0x4f32494e, 0x5, 0x10, 0x80000000}}, 0x0, 0x0, &(0x7f0000002bc0)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000000}}, 0x0, 0x0, 0x0, &(0x7f0000003cc0)=@uuid={{0x4f32494e, 0x5, 0x10, 0x40000002}}, &(0x7f0000003d00)=@maxslots={{0x4f32494e, 0x3, 0x10}}, 0x0, 0x0, 0x0, &(0x7f0000003e00)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000001}}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004f80)=@freefrag={{0x4f32494e, 0x9, 0x10, 0xc0000000}, {}, 0x24}, 0x0, 0x0, &(0x7f0000005140)=@maxslots={{0x4f32494e, 0x3, 0x10}}, &(0x7f0000005180)=@freeinode={{0x4f32494e, 0x8, 0x10, 0xc0000000}, [{0x800, 0xa}, {0x9, 0x664}, {0x0, 0x7}, {0x5, 0x8}, {0x772, 0x8}, {0xff, 0x9}, {0x800, 0x63}, {0xfff, 0x5}, {0x400, 0x8}, {0xfffffffffffffff9, 0x6}, {0x9, 0x7f00000000000}, {0xc, 0x7}, {0xa3, 0xf}, {0x9, 0x5}, {0xe354, 0x9cc4}, {0x7f, 0x7}, {0x8, 0x3}, {0x0, 0x8d}, {0x1, 0xf8af}, {0x10000, 0x2c8}, {0x3, 0xffffffffffffffff}, {0x80000001, 0x3}, {0x9, 0x4}, {0xc662, 0x5}, {0x5, 0xff}, {0x5, 0xffffffff}, {0xffffffffffffff8a, 0x713f}, {0xfffffffffffff132, 0x1000}, {0x0, 0x4}, {0x8, 0x9}, {0x2, 0x4}, {0x2, 0x4}, {0x6, 0x80000000}, {0x9, 0x5}, {0x2}, {0x7f, 0xfffffffffffffffe}, {0x4}, {0x8, 0x1}, {0x1, 0x5}, {0x7, 0x167}, {0x83, 0x7fffffffffffffff}, {0x4, 0x6}, {0x3fa2, 0xd7}, {0x4, 0x3}, {0x5, 0x5}, {0xd3, 0x1000}, {0x5, 0x2}, {0x3, 0x81}, {0x2ee0549b, 0x7fffffff}, {0x0, 0x7fffffffffffffff}, {0x8}, {0x8, 0x1ff}, {0x49f5, 0xff}, {0x2, 0xffffffff}, {0xffffffffffffffff, 0x401}, {0x7fffffff, 0xff}, {0x8, 0x3}, {0x979, 0x1}, {0x10, 0x6}, {0x401, 0x4}, {0x5, 0x7}, {0xe, 0xfffffffffffffff9}, {0x803c, 0x5}, {0x5, 0x9}, {0x0, 0x9}, {0x6, 0x4}, {0x1, 0xfffffffffffffff7}, {0x5, 0xa}, {0x1, 0x8}, {0x2, 0x1}, {0x1, 0x8000000000000001}, {0x8b, 0x7fff}, {0x8, 0x4}, {0x5, 0x232}, {0xd44, 0x118}, {0x7, 0x6e}, {0x6}, {0x7f}, {0x9, 0x6}, {0x7, 0x7}, {0xbf, 0x81}, {0x7fffffff, 0xd2}, {0x6, 0x3}, {0x95, 0x5}, {0x2, 0xb35}, {0x400, 0x8}, {0x7, 0x267b8ee5}, {0xfffffffffffffff7, 0xf37}, {0x91, 0x8}, {0x1, 0x200}, {0x24000, 0x5}, {0x35, 0x7fff}, {0x9, 0x8}, {0xf, 0x7}, {0x5, 0x2}, {0x7cb0cf07, 0x5}, {}, {0x0, 0xfffffffffffffff9}, {0x9, 0x200}, {0x1, 0x101}, {0x7a, 0x5}, {0x7, 0x5f5b}, {0x7fffffffffffffff, 0x100000001}, {0x0, 0xc74c}, {0x5, 0x8}, {0xffffffffffffffff, 0x8}, {0x10000, 0xa6a}, {0x9, 0x5}, {0x8, 0x8}, {0x8000000000000001, 0xffffffffffff343e}, {0x9, 0x20f}, {0x1000, 0xffff}, {0x9419}, {0xc}, {0x7, 0x200}, {0x5, 0x9}, {0x7, 0xffffffffffffff7f}, {0xf, 0x3}, {0xa, 0x3}, {0x1, 0x23eb}, {0x401}, {0x9, 0x3}, {0x7, 0x8}, {0x5, 0xb}, {0xfffffffffffffff2, 0x7f}, {0x9, 0x2}, {0x6dc, 0x10000}, {0x7}, {0x2, 0x1}, {0x4, 0x4}, {0x8001, 0x7}, {0xa2c1, 0x2}, {0x7e, 0xffffffffffff2ea0}, {0x2, 0x5}, {0x4}, {0x2, 0xfffffffffa0b5016}, {0x2, 0x200}, {0xc738, 0x47}, {0x9, 0xff}, {0x636a, 0x9}, {0xf4cf, 0x3}, {0x8, 0x6}, {0x9261, 0x8}, {0x4, 0xe}, {0x8, 0x2}, {0x3b298c93, 0x5}, {0x8001, 0x5}, {0x9, 0x2}, {0x6, 0x1}, {0xffffffffffffab44, 0x557ddba}, {0x81, 0x6}, {0x808, 0x1}, {0x8, 0xffffffffffffffff}, {0x2, 0x2}, {0x12000000, 0xa}, {0x6, 0x1}, {0x22f, 0x4}, {0x3, 0x70000000000000}, {0x10001, 0x7}, {0xae1e, 0xa4}, {0xd5, 0x1}, {0x68, 0xffffffffffffffff}, {0x7, 0x3}, {0x0, 0x8}, {0x7fffffffffffffff, 0x9}, {0x16f18ed0, 0x2}, {0x5, 0xa4d}, {0x7, 0xfaf}, {0x6, 0x5}, {0x80000000}, {0x0, 0x6}, {0x22, 0x2}, {0x4, 0xfffffffffffffffe}, {0x3412, 0x5}, {0xffffffffffffffff, 0x76e133de}, {0x0, 0x9}, {0x506e3606, 0x5c3}, {0x80, 0x7f}, {0xfffffffffffffffc, 0x6}, {0x0, 0xeb}, {0x9, 0x9cf}, {0x12, 0x5}, {0xffffffff, 0x5}, {0x1, 0x4}, {0x7fffffff, 0xda}, {0xc1, 0x9}, {0xc61, 0x9}, {0x7f, 0x4}, {0x4, 0x9}, {0x1, 0x2}, {0x2, 0x1}, {0x8, 0x60000000}, {0x0, 0x7}, {0x10, 0x3}, {0x5, 0x5}, {0x100000001, 0x3ff}, {0x5, 0x3}, {0xe42, 0x2}, {0xffffffffffffff7f, 0x4}, {0x9, 0x8}, {0xf5ca, 0x6}, {0x1, 0x7}, {0x4, 0x5}, {0x8, 0xfffffffffffffff9}, {0x436, 0x90000000000}, {0xfff, 0x8}, {0x3000000000000, 0x8000}, {0x0, 0x6}, {0xff, 0x8}, {0x7fff, 0x80000001}, {0xe, 0xb}, {0xffffffffffff8000, 0x2}, {0x2, 0x6}, {0x2, 0x1ff}, {0xfffffffffffff146, 0x8000000000000001}, {0x2, 0x2}, {0x5, 0x100000000}, {0x8000, 0x48}, {0x8, 0xb}, {0x6, 0x100}, {0x2, 0x1}, {0x81, 0x8}, {0xfd}, {0x6}, {0x6, 0x7}, {0x0, 0x10000}, {0x8, 0x1}, {0x10000, 0x2}, {0x2f, 0x7}, {0xc97, 0x4}, {0x9, 0x6}, {0x4, 0x6}, {0x3, 0x200}, {0x1ff, 0x6}, {0x100000000000, 0x9}, {0x58b9, 0xb6c}, {0x1, 0x7}, {0x1, 0x9}, {0x9}, {0x5, 0x2}, {0x6, 0x7}, {0x2, 0x7}, {0x48, 0x7}, {0x8, 0x80000001}, {0x10, 0xfffffffffffffff7}, {0x2, 0x9}, {0x80, 0xfffffffffffffff7}, {0x2, 0xb718}, {0x1}, {0xfff, 0x316d}, {0x7, 0x800}, {0x0, 0x6}, {0x7, 0x5}, {0x6, 0xafd}, {0x0, 0xa9e}]}], 0x32}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 8m2.439517502s ago: executing program 0 (id=2512): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x0, &(0x7f0000000140)}) move_pages(0x0, 0x0, &(0x7f0000000000), &(0x7f0000000240), 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='.\x00', 0x10000a0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, &(0x7f0000019340)={0x2, 0xffff, @rand_addr=0x64010100}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)=0x4, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xf1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000019380)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90, '\x00', r2, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0x9c}}, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="8500000005000000070000000000000095000000000000005bee1ea01c7814c00980e99a5df1f0614e1942612258708ff9dfaef11bd5504710e1d85587ee4727c9802ba8f5bd83e27c5585207b4e19cee40a9cab915f98eeb1e5a448c0d934224a13ed92a919f303d06b06833168000000000000000000000000f828967cd7352bed054c35edcb5548bcc8573fa4bcd1b87b8bc4a080d48368c87caa011f9f43f44dce6f7896caa82c8cc94a6f9f01ea49effd5ddd45908a22dc23876180f09a80e42135896d93fc510cbde2b03f40dab9c5904a59c5a7a47d173f8001e59332bbea03c2b6"], &(0x7f0000000040)='GPL\x00', 0x4000002, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x14, &(0x7f00000000c0)={0x0, 0x11}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x4010, 0x3}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r4, 0x2, &(0x7f0000000280)={0x3, 0x2000003}, 0x0) 8m0.326539055s ago: executing program 0 (id=2518): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x30, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000000)={0x0, 0xea60}, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) close(0xffffffffffffffff) getsockopt$sock_buf(r0, 0x1, 0x3b, 0xffffffffffffffff, &(0x7f0000000000)=0xd) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000240)=ANY=[@ANYRES8=0x0, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008c00000095"], &(0x7f0000000180)='GPL\x00', 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_setup(0xfbb, &(0x7f0000000280)={0x0, 0x95bf, 0x8000, 0x3, 0x1cd}, &(0x7f00000001c0), &(0x7f0000000300)) io_uring_enter(r5, 0x1ad, 0x6ec3, 0x20, &(0x7f0000000340)={[0x10000]}, 0x8) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r6, 0x6, 0x3, &(0x7f0000000040), 0x4) socket$can_j1939(0x1d, 0x2, 0x7) 7m59.918539657s ago: executing program 0 (id=2520): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0xfffffffffffffdb1, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) mount(0x0, 0x0, 0x0, 0x208000, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000010000000000000060018200000", @ANYRES32=r2, @ANYBLOB="0000000007000000c30009400000000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) futex(&(0x7f0000000100), 0xd, 0x1, &(0x7f0000000140)={0x77359400}, 0x0, 0x12) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 7m58.525497303s ago: executing program 0 (id=2525): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xfff2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4804) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xb}, {0xa, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r1 = timerfd_create(0x8, 0x80000) timerfd_gettime(r1, &(0x7f0000000140)) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r2, 0x7af, &(0x7f0000000040)={@my=0x0, 0xcd4}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000a0000004200000040"], 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = getpgid(0x0) sched_setattr(r6, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8001, 0x0, 0x3, 0x1, 0x50, 0xfffffffb, 0xffffffff}, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x48, 0x2c, 0xc2f, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0x3}}]}}]}, 0x48}}, 0x24040084) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x1003, r3}, 0x38) socket$kcm(0xa, 0x2, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='(\x00\x00@', @ANYRES16=r10], 0x28}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r12 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r12, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'wlc\x00', 0x0, 0xa7e, 0x70}, 0x2c) sendmsg$TIPC_NL_BEARER_ADD(r12, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES16=r11, @ANYBLOB="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"], 0x2d8}, 0x1, 0x0, 0x0, 0x4048800}, 0x40410c1) 7m56.949789191s ago: executing program 0 (id=2530): socket$can_j1939(0x1d, 0x2, 0x7) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x14, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x200480c4}, 0x4000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000360000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r4, &(0x7f00000001c0), 0x0}, 0x20) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x1, 0x6}, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000340)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000037c2000040042801c0001800600060080350000100015"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8927, &(0x7f0000000040)={'vxcan1\x00'}) syz_io_uring_setup(0xd7, &(0x7f0000000000)={0x0, 0xb46, 0x0, 0x0, 0x34f}, &(0x7f00000002c0), &(0x7f0000000080)) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r6, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) 7m56.100928117s ago: executing program 0 (id=2531): openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x200000007, 0xfff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$loop(0x0, 0x6, 0x8201) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x207601a}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000002140)="4627563e95d073e9c44031e486c6c3c887234dab29bb5d4444d206b6ed7b2b3001b6ed59a692ab0f0251ebf104d3747ab90777b96df4449e5275f86a62902df16f5fba75e202cbdf6fe7cc018a76b412f6485398037d6cb464f1dcf7fda3c76e43cdf64a53f6182a0b7e6476035e8bce74d0582b1ccf32dc8b0cc3b610b143afb4d3c163308a66f2dedd0d45f392d7899f5c4d2ded35c1602f7338dea29e0dff356a32c9e921eeebf8b9845ec2a40b68a8bdcb88009c910e110de23a02648667d740186ee2a3f4a59672477230c4a3a62a1417659b1978cf2b671f836d49fd361ad0af9157916d29cb4fcc1e873a336660b639383485a5322faca6694c74f58fa428582950bd136778dff61da52778dade8b2c3331b31a89259469b0900ab4173202f6256b2d23d3feb8517556292de52662192eca03da5744515c4a92cd3f0f296209bacb28a0267776c9797a784cfd95a52f9de496a5ed70459d55041b663a70d7d471da4f86cd187fd53e667422a0fdfe5eb34e2f2b8c133f2271fe5b1e71533b698169ac8107187533e37765fbd69c327ec608249c44018e3496b2f66fb8bb942f4bd26ed687ee1f7d2a53d7233fbde91cd03f4b4db0c23ed56ff9a61e0d5a1bf6ed50c308e8af0c32b2e0b15df009046ed88d60b772e0cdbfb3d765251aae01b01660df364dce51971ea2034b316a0b0071cb1d28bb86279de377ccb5a18ce981241b5d566e248866f280d71c6775e14fad44342945663bd56ad056f79e49f8071153391f8de78b05496a5f174e812ee0b102e0421c632e4a9f8ffd87ea68df1d7e85af4b30024b2a3cf0e1106871b3427eedfe857f3bc2a021d42fc09224ece3c56e57806a2da229231cc8e3ed5dbd82fd2d3894cba01e36c2ba91a42456eb570446fa3e2eddfe30264572d5d778cbf5d676ad4bd37d11e09573a5566b3656a760c9d3030b2bcd90be0d670866010e2d33c93f223a79ca167bce1a46670db33470c75776582f26b5d9ce847493ddb34612bc829f93f473c24263246011c4ca689f62f4539550ee13b246aeeec477fb2e9e4b223f66c006303abdb003809b9cd4e993b90821750b86608882355e5f587182c1ac6c677b07c26956073ff3a78d4f325139d9c0b8aead052e73fd21b3615ea22acc084bf5060f72936796311e31c038426f0a0e6c304cd2d9c363e7a1a21752032be17adca8b476b0e571b591c9dd923b0066fd5e32e045494c0a9e1e511f147988e0a5fe9652b92ed0e015ef54e3ed2a510b9383f1938dece777ca866f1a21082052827f3a48c2f38482fe3a8286c0ff17d4c24a468a5a0ec0a2eb1165f48cf76fc07450c82294d973a1793dd58008834f0d3aba4e097ceff0ba44656c67839ff3e489975297b334ecf6c7ce4634afbe3d8ab70827563aa75ffafc43429170c3fe3854238485c5a9b567a959a746010c22a92e863e318312e0efc06ab86d1435e06aca5f4b7b7f06a78f90795545c145c9941b74adb9a31ab4f749f81665dd9308acba8d7861856b548eab226377be82611ad79c8d25b176de98003c1ea28b556a2b90360913c39f8f64f0d122c732af5a990603429b354ecd4de797e17722c66546cc38349cb09c40ea54972562734e9816c83103e0bd19451e6144d005e6ce6d6d6fc1ce90238b73d1e0aaa4ee9fd0545054cea97639a404edf3b27c0073be84961084ea685e8ace53c7d7f52b62e378d9ee167aec3e5cbd60ff36c0d3ad40181bad59f111c30e9414112fbc71ad7ede21c288c878dd2509c36f93c31dab5d091107c8e8bdcadffdcb3053eba35b44c70a6421b343922cb11c69b886db0f412e5c23f89dbaff9e5847fd749e28356cab3999f1142449047a3a6c43bf670244e55d888f36ef1dc87bc5bb1460b6c8d1e69efca9a02ba834591906a65102c3e1c1c7dbdeccc7e261795f349d110836445d8ba19cbc699c46d4edc34942a488de1cc1140dc6acf23c8ec1f475e613c85ba025ff7ae639cb2499629eb5f5c88c4057e30bcf41767424af763c9204084856d87cd99f0da06ae6ee5b7382c1f6f2cbb2cf2dfd8320271f16ba7ebd8f0e3c742482f5426530b1ab946c7118f70aa4eac41dd78569341a0f3dd250531aaefdff4cab9e9eed7efdaa865f9b804ade79ced061a1fcd18a6c61a708fdf119841dc232cc5c4e5343cb8a82e9dd9647779bca053b5a2c43481c06ce2a593e388f5f5f4e681771021aaaf0589dac69db22c7285035d1eb89c75935fa4208b3786f2640ce9d65b0e671967dc27808fea5d17ac70a3ac2802f65d45d9c0372aeed530ee58bf04e190f50dac25139caec0b253d17af28eaed173c7043d66567188f04ea51733835c1c66ac7a634d7b90bdac4a6d1075bb277dc6ca420b24485012db44aed5a2e8099f4f3ed53bdb0b35b35905db28169b3e3b3d13ff94bdf2c9549f4a54c64b8d27098b86ff46cfd515f35b1d5a1bbf1bb29df16cdf296e804977a6b583d018c4fdb66264d5f2d9e162059017d6b6cbc6d6c2f1009717c67093f6feaafce1f242f4b730a2e714e9bba79f18c42a158425147b7b2cd9add4ac1d2c1a95b13a4f352d51982a5d967cd611911e6d0777afbc10883c6293f056acc69da89a0a64913be996466ed63f969d5ccd124cd3052d6654e6db0519449f3cbf3a2011541d26e5b76c3c192857905bcf989fd943d42aee9ebd40fee33094eae69154092e9514819ff126040ea7d43a927809149cfaffcc76cb1e332426bf0eb1ac1a3968c70030453a284a0fe39b9ebd704f0950cb5350d4c60d65566b3f24ec4636cd5bb3e23066f4d4f1814e60f286f3ad2d3c10e79c5991c8bf5fdb561723873fe0c75c7bb6ba262aa3a6655349df95f07abb0200d5b9152da4bfdd66a311b29a15755e8465b7b0d99f7f8ccefe9cb3561b5619d4c21b36c9b29442ccd5949882d0167244d84b677685d62074f63b8dc66941f317c78bb093491e2acb7207cc80fe51c22199aae878170af9fa1eb164854587007eb108f23d1c7946bf75aee50eee6fffdae24b992393bd37d268a136b3dcb1b7d2c9b9fbfe0c860b0d344f488e85de2a65a20eb057f0047d0b6b8898bdd68e21f2234a2c66b963a2d86f62297a7d1176c14acaddd4861f5bb74ee91eb3b6ba0c7328433b977e23c02ab67d82a12d620fc034f1c9c3a99a6a07ddf59eaa18384e429101dacbd93ee794e27b774242446fa433a8c03e4312ad56f6c4dfd1ad014d07932480e07caedabda36caaeaaf405dfa1a650843f2e09ae89c666ab8754d9bf9b290f4c4c9242d8f98533bfdbae191a6fbcba6bdb9096427d2d8efb5dcfbd58df7763cc445bf44a0be6de2335a395ab8157dee25794be81c3d87a7d457b52d88f86cabf91f2ec16a8e05a00f72277943737839a5242163025704c7b938f3f424ef5db6b60d3181e3ef94cbdc6516f0ecf01b52164b92f2e12ed55db595fd8de6862a3b12ebe06b19d1f93132b83b2f5ddbc9808b3ce8fa40352c84664d824edd2631a5e2fddaae887689092007d3d0f22a948f54bfd5c42bea5f0d6bf5018cee5ef232c8b6ea3f54ee6f4997c8ad5ccfd28227eeca811312375a849bdf4d343c1b0ec7035279d1bc0892ef193a74018d5ccd5ccaf0503a697b23abb44b7aa3beced0626daa5e1fbfc4d29d2804292fcc60b775f656179510168bf05929dbc92e009d94561d946f7b4b5a18c08d29678c482d90e07abb029e80546e5cee6c4a30712a9b92d556a29b2de021bd49b6398340a9363b689bedc007416bcb659c0c4b6eaa31ec4976ee4896ff87a7dfab48dc7046d44c9c2db6881f7d6b252e582eb878b0be9b24666e74e8eb565c07582f17817ea2422de5da79cb367e76b9b8a9d056de06ad0483986fef2a3b62d64d5d2128cf55499025ad0739ad3ce5e1bfa6aaac16828bdacad2f86b32ed933a2f672efd1f4a32dd23e59aed872d1015eaaf701a0ef8e1427d59728450c4f1bd561e7ef6f8e34d12ae2120a51746a5c346e739c09854caeec07af0d70dd4d9164b3ae8a098a41c081465fdb5537cb560426bc0de4b735f253dbc779b9dce429d99700cd6c0cbd778caeb56401b2bb5c1ca310ab0c91e1d9f4578b5fb3b4f0dad4c565495797e8e83603f3ef188a896fad5bfec24457e0f6f962b8613434f16acf74308171567eae5ad9ec11186a56493a5394042bd1b29fbe0ce64e5f1b0b56e8910343666d627d71c729c0c90bfae0134e117842d67b160ff50688f7b45f0ae330c2d4890732ace7795ff74b6e36466da623c8eef75528b22199c9bf589a1fcd2aca6c5fe3cce2eddabf1ddc8e87380b815ed5928222613383db7941eb9d55b45487b399a9a35ca4cbd9eaf08c71273fc3334b0acdbd117b13697a9ae475e79a44911ce4fed1490a2ec654fe469c9ea933999dae3616b063769446cfefb4562bd124e42f62a3dd0385fe3d21029ad8fd1c58b0badd42e415a76e3e92f246629d3579dd80d940e6dd9bee3d9a6ef8a7840fb253507e718eca32ff4119eb0bcc02aa210939a3bc41704a63202139c68e276254395ab6b858f4528ea2b3a57328e0b31816de3ad85e50e7f4ec9445eaf21a8b9916ed209bb7e79a7a08c2e4e09644ab831c0ba68d05d5ebf57a9eb36bb9caa8e7ac78a8ccca1bcb03cef0c5eb31fafa6e283632c117031aa3919f72aa80a2b9b2557749951348d5294ed2414ffcbafdf976bfb7a401bedb208fe1285738df515af493047aec962bcacb8ea7bad5fc12d5bf415e66c06c4c87044e694291e104ef53850cbc7ef73ab57982d77a3f941c226a915163e8eebd256cb8a1f0130023d2c5d3be77cab39bae4449711d6f39e50cc83eefaf6cc727b1c0b3fc4f7bd110d18262cd872cee8ca95f1be8005d5b339abbde923ef2d4290d5579e4420ff2beb705c16e96101c38c31cfd05639f252730c145182e4406aab68f556e0290ccf05e25a7bf13cdb5db47a8a0841fbeb880d4f0add608d1badb8992924b548ef1426ec774ec9d86678d4c2aae8f1e3b2dfb295802f75727a308dd1b39460f26858eff99fae8d27f24ea6902adabc89311a5fd18c3d9c606db7295f25acd22624bcc753c4c3acdb3f6c563174441333b69a126e4fcc6b06165f6221539c5ed277c20dac4b7978619e10616475de88810bbac714f3651efaa59b75791080a1086c0f3f1b5edb4b3976cc936665855f6a56788d76c6e771b1c968c859fd1ba995d336d301695fc012b8031a14ca529e3e9bf622db6813417925bb4e1a7a5b786aa90f4d048f1f442a2696970dd442d3a6ee117a3e768644c99951b75e51e98de61bc7ed8eb9e87fd43ec75e948829bd19fc545cddefee7a6f068a419e216982ca4ce6ad3256f1e64d203ba1da27e9e175738124ca86a312d0dd0caae6d64751d459d8134830ebb4f4c7931aa90c1ad6fefd99ea4ded3d246236719d6fd48979ee31eaabbea385e91aea0557a58d73a63660ecee981e3da40a39fec3f01caaffafee3504e9f8dc990cc2d69c513db25f6e722ea4811f778af8a338498b6b908682aca6e02e898cb65377f820529d35707cb83ba69b16c92b571728c58188fb08ed6f6c27d6b70e963b147605714468b90966f082d7175fcbc6e770835efb6e7bac5eeaeb5b2c23eb30ecc102e647f1ff71bc6b35f629a55dd305f8ed5287e35403a91b4dc77a6df2fff354460bf563c071846c84617da4df4c46a9e359c45d217a2b096c830ac8614947d110334ca17f587d86825b2b7ae1039fc11109687c1ad0a16f0180d1700414a4694e7ab73c715436dce437a9b3dff55f62fc1ffffc33d3be037c34c9ee7a0fcfeaec1778268565663f39b69c141304c892ae80da42cc854a87c955e6d8060a731eb16ee91e8ea27f90da85196e4f034d40b85ff59eb4b7c76218342f9c9f8d3749c874562829b7ad0c786c5c25ed240aa14755ff7f5ba5298f9f6b6ec3a46ac36d6a39c59c2ecf7781da77931214ac9a8697691d933b20cb64acde409fc159d748e4f92d83ff7767260fdec04b2e80cc524a2366e8fa5b70eb8684d164dec49fa95f42e7e75daa8c268204beec1fbc58cbbe3317af0993a8676dfdb13db7875f50cebdbc629bcd605dd4c4a65c31870495fb9a9ec51c1867ca8b117a6f9507aa26cee54c4c12f8f22b9d88072639ad765bb7906435128d1c146b9e2029880eccbdf78449bd0630381ad16c13444d709a11890d80fae0d24c037180a8726143306a7cd67abbc830167f524008f9a8e3172df597a63af2e87a92e90b70ce53069657f9b46acc9da241a1b00571540ec5fed4a9acfdd0066ba248cb2bf24540d7296256d4c9a5a5bc821817ada912cdde59876d86d4c53c1d047c6bc3442c2ee78326d7c51b6d01bd4f7ff5bc45db88649220d44099b406ac2e4744996b869ea688ecb4e758e755b29717869d5dfccbf5fd553ad83de0c4cd16b3fd4913451734226e4cf29bc0a860943b3e854d8cf49f07d2bfba1c280efaa85bb8f0f8818d1e58178c338c9e46c873adc0a4b6c832aaf0878956d8a04fcc043ff307f60a263cf1bc57ad0434b6a6f99075d932ff75deb8b017cbd16b272139a4addc24749d9551ba44d5bef0536e58de5e9d0b8985f1044163d542859c699f27f033b01d1e5d4c5598bcc4279f29c56eca82cf40c3b2799277e9b0aea04ba5cdd679e3eb63ceb0eafc21c373356caadc0f5730054a0979d7e32117962af0444b7e0e75bf1d30fd1af656956367bbbddf018531833f6c383b76cd63d014c91f67b41548e558cfae6a953a78c36ba3a896b3a0bf48aaa947d042a456a48c8f323682f560f2679f53578f00746cb04c4ef12b905b37f1b1bac9c75a85d6f173d531198f150ee6dbe7fcdbed4e0baf7610b82a793c17124970924ae32c86f9b7b40a229219958cd2445fca613e264adbf29644b1f405c68ef8afff7f4c1dc86f0e578e3716fa86c53f776dc42e7d28978f1e694428560b923b5d44e3aacb18cb38d3efd90ca0812027d336b011557e9e953cbff769e9ba84b903f5fcf1e6b4ab3e210ceaac574f80607116b196b6ded8668729f9be216bfdd049e88d1cb45581701c6ca7c991488a73e6ae5decdfc6416fa69b76f82e92246ee2b29c91885be24e96ea72438499c5c421ffd199f172667adf7d257947bb47945817930a7f2f0dfc73c2a5f6002fd40b9ea51c4a0c610e9759d43c082ed0c126c0de63c5a079b4c8bac46fcc8a1f74d8929ee2b7878430e3caed5f5aad7378fcbc4d659144a7cdbd654185ffdabd9b36257993ca823990df4aa7809ee58b7a278f38085202f3618fefef67f71b39f8ed35a28b3ff47e6caa3cecdbb41b899ea7ef3179ec3d67d0e3380f61d5a57453b9b790d171e1838c68f988a6914f4b81a7a12a0f50612182de8844a5f18026bc4110a10a31a88dae4bb40a3fea22360830784cf82ccde8187d04635e7e5bc6cda8252fa77d7022ae5fdeb978315f925cdbe7cbe0e3894965795fda4b94068bee89f79f86c420b211411929b9b3074703583c0ba0703a4d282441495110dd167c228079db163febc9ea0bcb02ab400999abfecfbca274fca55a055859eb256fcddc1d1773d72d5c3793ca3ff5f2fbe647b04f5ff2b2dc50a3a897e03634a36d21e391e6b6290cf85064711600de9a74057b78d9c04857017bc762300872f674eed1b68fac65025f3252bb803a9ff8ccf4b2b49028622168439db3bc01ea9ae7618b73dc7f858ba388891da14b88f7fee4f5f49abd687ba947969b8b923c2e119fe172126835ab4d1429133a38bbb80f1f6c308ffd180a179c05d9fb112a70e7658f9e3c7b6545556726e6589ba479edf21afd08da62963b5b724fa7b618c27fba201297dd465217de92395734355e9b34e27ff4916d78dbe0424df3d6110297a7847efda2675f12a3bf5e4b07827cdae6c61b0d969f6bb15be656b394a3f3ca8d705a4cac9c78c66c4be58c40888d49ceb08eb9a90c230faace7e4c837a8cb1aa69b020f9f43532cb7315cd698dfffb0179fb24e135480af4c437170c010e6e8f94108523dca95598c59b9e483753b79bafb02a455ceec727fd271b4cb4af7d958751a747afe6625c1e8b0316af5e13e42dc8d97dc42d5960edcaa391164693250a6f98653fa20c78823e1c1a77b798491f197a647b291cdd04087b3143e5b0fc550ecbbff19666b1c8e2a5bf2cb40f9f54c11828a8dd16489f36583e3128cda7a9abde8abbf61294450af638f56444176b5a11f84e67e4e666d6df58c45c0adc45938a2639fb1717a44c8dedf8471ac82fc1771a704f778fb812acb953493a831be5b28b16b20a112aafcee4e44640a6653c4b3035d5de4fcc16312057046bc3c650057dd9be4450b3e837ff8ac19019e67550a124416d671ccc76de36946c2d91f3d63b212111f4f09f39c24c1a981a7e63dd37a8d94ebfae1df5796d971193a8c723f172a9266af23d1d0e48aae73de4e7545a13f09a1ae3feb147ba1c700776148f027abc7dbdd1f3cb823b9a4c0e9dd43fd0bc411dc3eac2369f10fc9669ffaec5ef76da6b7f8884430b3a00da63a0e5272de159ea047584f4804a14159b1321309db45c55af563081d126300dc3ac446936f6653db92fc09d225716f425997dc247939b8c1e09a11f8b10c36b671cc590922051871ce19f6db85eefac9a666c3cec6fd5a69e7610ae5123413b458024b02521420d8c50c265d7b763f070b8fd1981824da47079135a667ee2395e43cae172e6a5ae96aeb7ce490212792498e427b80036f52cc557d3f94b118b2248af9a75a6d27d084ba423edc616981864cb0069a06f359a953a6e7df6b765d222626030248253e4e93eb0979b0a5550ee15d1489f56cc1d30b1584f37b51dfa029af5b45a85b141f4f8ffdc809a19e01f22f80c8a11e9d35f790a6de2d898462a19f412de4df26896a3d107baa7a661b5482cd71453b5f88f889b93ee6df84363ecaf04cb0dcd4369f9d1a827b955182334a998e8f2edbfe74beb14e9ff50134f03d24d70b068801684e25370c1cfc065d88582389713500f974e8a6c6e7f015b8e84e5b9861e45d4ce4eef79f0e8d4f15eaf7c1b33e64287470b5b3c0b8b6bdadae567f977341b57486c1eb279be8ee1cdf11b6e0dbd42d32c95b6801cea98e6000ea80777c6ad3f62012732859497080b3aa127a0f3a7b80a99182406ccfd54affb463f8eaf01b0c65ab582628b3c2237d039ee68d307dd113e4b593b243bd64eb6f58a0ccdd8e9a78f9ed393e2affde8d616d57c7aa1d12ebb4be718b49843ec6a90d5d8c197f154f27805046c410d4e1b66cbf4a8e495a3a229a2a1d58b4909a240d7ae6ea9e740c055b06e756e57e2ff19c148cbaf37357c0d3273b7f2ec631565e9f6c6c8722ddb0c1180695fb204f35917dc2fe11469801c545b2560a59d0666ec129b88e4f427989e820982329c2c39321f25648666af651f87b495195a95a5d158fd161324796272303114d99d22890385853dbc66d37ce22de0db447260217cf51aaed240e4f4963ca7510522fc6e7dbe164ccdedc334787ddb24bbc8205bf3353d447a1de2407c248775fa7e318d83e3ff18150b3cd9a7cbb0df0703aab6ef8d0f71bf9b5a305dc25fbd200e06b73c7f298320bd90dab05ec62b5f885e7cf95274c656051c71628f31196354460b001b6366c26fd2e92f6ad68ea37d7e3fe91fe98223563b4d23f802b3911a5241a793cb9f5b4f80081ace5877f95da7499f728ab09837120ca75c63d725e46f9f77c3da16318c9bcdd4a9d68379b627c1a71a34b684e5614ab3fabceab8d2741aca921b1b018098060686c56d7ed190e7470f529f6e680ed72e749fe7c9c2f37ea8cf08d4520e496361d2437018bbda93396c05abb2aeba443ea1ee56a3da04a8b880452a3610cb4163154e02df8a08a5e48c03fb0b0cdd4d355142cc736b344b9fd987b49b85791e5bf7805250dfe63b04c7ff56608129ef43664aa2acf82f18b49cdfd2ae5551ea4d486b35cd2ea60e3f032c58f531d4d36054f5ce268a29862ded0a3cc0ff1d30882f7c85b95e9a8599bf1d143d2d25555bbaa6f8b673b76ca8cc17b693519194784833d902581fec4e656ca546eade53abfd7e4650df648cb61a146bef5382f9255bf4a7c380854568495bdb7b33f490d240ead3d1851ce3b6400eda5a370f13ec998605f46b234bc9293c026bd1d648647bf52d506deb522012ae89c4ea75414ae6677c4aef28dd756f877af23d1a5ae3cb2205850c14f27f595d1a1542bb1eaf641293e3ba40e0bb54193a1e5db969d37c97709efbc34ab509f08a51ba71ecc4f9f66c27190115948cffaae914e7eb4e8d0c59ef7368e9b08a05bbbd340e1c1d34319f150d299c0ddf3bb2138359e826f4997068b99d13cc454fea46b8664d413b79b19656d62cbb5b31744aa33f99651fa56703eaec2e6998c7321f69f6cd110c89ae0c612a96f9a84dd751fd81ff66c80563e7091f5c5b67f89d52e7c58eb26218cddeaf5c6def3ad07a610bd4e5785675580c199b8550cbb02e3b4e1d240bb8df8e514fb505f39fd222209584331bef5d271056accaef84c88741ebd9f116cce3fe7b07b78ac4bad346c0d6e71c9daecd8d60aa8ea0914f85c9078dfaff04ba5e9bbbacddbc0cb40fe20f869d7f196c5edb6657c50b82c67f1abab663bff0a8da16422fe31a4a17995ee25081a06154d1c03f1a87a9d4ad5141a9227849bd920d2515ca16a245b635c85a77884cce0b8ae56929b5e22c52f971c2eed4ccfd64f7790a616f719fc0305af71405abae9407ed1cdaa26606331fdcf9b3c19b90e561f646ea15e0e668ef37b349594a335baf26962b89ef33c98aec3ca3e7df47c20dc2928d074e5f87c0edcf37cb25d3b8304f57f8257a5ae96791697e3c6d04f4ec2eb6a69f25346defed5b509368dea2b1960218bc6dd21b567583c229fc7b5fc85f7f2032eb304c3a1f72204f75ee950344cdef846d94e916b29a43d00c789256810de5fff6f9fd1af0fcfc2edd3fff9e2010d88083fc0b9e6a291e9a7a08af62433689a39e34bed8dafc90fec82be5c63a843d82132ce8916e395791dc86c8d11caf57f7fd096c28537ec38d6c14df9782312abc85fba2d04b0b159637b0e09f7e9faa1a6136359d17cf7c58b83994d58674ddbc248b804a82156900ca95a5002ef62de046e2f5ddf8e1e19f00189d4f5169bfc3c67afc149c6bc155767e64eac433cfb787be7f7bae7f869c0ec3d142668c2f90d383af7207a635850c515d69c6a62e24e0d58c5da244a917a17caa6be01992c4f8be0b9fff57522db4756840bdf72cafa6061ff2b86305c180c470b3af589e7c9e5328d98cf737bf01d80762e1e41a4d63a8655387be7f295862fdea629aa97b40c2ba1b563f1a103a860f7dff7fd5ee8423ce3dbf0fad41b66965c67299e35483130d461ac6c68215850fd441323bb856cdf03f624520743f7b445641c72e08994c8f252fe179b29226637b533f0ed6c94a0b84efc1a884af940fbc05c654b59d37a54047de233c496103bb27b657e7f63c24ef3ce29709622f67653f398dc7c4e44", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000080000000000000010000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000080000000000000067726f75705f6964cdbb89763096d34d72a6ba367df320f35c31955776112ec917fcf0ab30bc1e2d6695d23c9f1f71f84b3fa73edbc56aca0f"], 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'veth1_vlan\x00', 0x8000}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000380)={{0x3, 0x81}, 'port0\x00', 0x41, 0x20010, 0x2, 0x1ff, 0x8000, 0xfffffffe, 0x8, 0x0, 0x4, 0xf4}) openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) 7m40.89648966s ago: executing program 34 (id=2531): openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x200000007, 0xfff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$loop(0x0, 0x6, 0x8201) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x207601a}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000002140)="4627563e95d073e9c44031e486c6c3c887234dab29bb5d4444d206b6ed7b2b3001b6ed59a692ab0f0251ebf104d3747ab90777b96df4449e5275f86a62902df16f5fba75e202cbdf6fe7cc018a76b412f6485398037d6cb464f1dcf7fda3c76e43cdf64a53f6182a0b7e6476035e8bce74d0582b1ccf32dc8b0cc3b610b143afb4d3c163308a66f2dedd0d45f392d7899f5c4d2ded35c1602f7338dea29e0dff356a32c9e921eeebf8b9845ec2a40b68a8bdcb88009c910e110de23a02648667d740186ee2a3f4a59672477230c4a3a62a1417659b1978cf2b671f836d49fd361ad0af9157916d29cb4fcc1e873a336660b639383485a5322faca6694c74f58fa428582950bd136778dff61da52778dade8b2c3331b31a89259469b0900ab4173202f6256b2d23d3feb8517556292de52662192eca03da5744515c4a92cd3f0f296209bacb28a0267776c9797a784cfd95a52f9de496a5ed70459d55041b663a70d7d471da4f86cd187fd53e667422a0fdfe5eb34e2f2b8c133f2271fe5b1e71533b698169ac8107187533e37765fbd69c327ec608249c44018e3496b2f66fb8bb942f4bd26ed687ee1f7d2a53d7233fbde91cd03f4b4db0c23ed56ff9a61e0d5a1bf6ed50c308e8af0c32b2e0b15df009046ed88d60b772e0cdbfb3d765251aae01b01660df364dce51971ea2034b316a0b0071cb1d28bb86279de377ccb5a18ce981241b5d566e248866f280d71c6775e14fad44342945663bd56ad056f79e49f8071153391f8de78b05496a5f174e812ee0b102e0421c632e4a9f8ffd87ea68df1d7e85af4b30024b2a3cf0e1106871b3427eedfe857f3bc2a021d42fc09224ece3c56e57806a2da229231cc8e3ed5dbd82fd2d3894cba01e36c2ba91a42456eb570446fa3e2eddfe30264572d5d778cbf5d676ad4bd37d11e09573a5566b3656a760c9d3030b2bcd90be0d670866010e2d33c93f223a79ca167bce1a46670db33470c75776582f26b5d9ce847493ddb34612bc829f93f473c24263246011c4ca689f62f4539550ee13b246aeeec477fb2e9e4b223f66c006303abdb003809b9cd4e993b90821750b86608882355e5f587182c1ac6c677b07c26956073ff3a78d4f325139d9c0b8aead052e73fd21b3615ea22acc084bf5060f72936796311e31c038426f0a0e6c304cd2d9c363e7a1a21752032be17adca8b476b0e571b591c9dd923b0066fd5e32e045494c0a9e1e511f147988e0a5fe9652b92ed0e015ef54e3ed2a510b9383f1938dece777ca866f1a21082052827f3a48c2f38482fe3a8286c0ff17d4c24a468a5a0ec0a2eb1165f48cf76fc07450c82294d973a1793dd58008834f0d3aba4e097ceff0ba44656c67839ff3e489975297b334ecf6c7ce4634afbe3d8ab70827563aa75ffafc43429170c3fe3854238485c5a9b567a959a746010c22a92e863e318312e0efc06ab86d1435e06aca5f4b7b7f06a78f90795545c145c9941b74adb9a31ab4f749f81665dd9308acba8d7861856b548eab226377be82611ad79c8d25b176de98003c1ea28b556a2b90360913c39f8f64f0d122c732af5a990603429b354ecd4de797e17722c66546cc38349cb09c40ea54972562734e9816c83103e0bd19451e6144d005e6ce6d6d6fc1ce90238b73d1e0aaa4ee9fd0545054cea97639a404edf3b27c0073be84961084ea685e8ace53c7d7f52b62e378d9ee167aec3e5cbd60ff36c0d3ad40181bad59f111c30e9414112fbc71ad7ede21c288c878dd2509c36f93c31dab5d091107c8e8bdcadffdcb3053eba35b44c70a6421b343922cb11c69b886db0f412e5c23f89dbaff9e5847fd749e28356cab3999f1142449047a3a6c43bf670244e55d888f36ef1dc87bc5bb1460b6c8d1e69efca9a02ba834591906a65102c3e1c1c7dbdeccc7e261795f349d110836445d8ba19cbc699c46d4edc34942a488de1cc1140dc6acf23c8ec1f475e613c85ba025ff7ae639cb2499629eb5f5c88c4057e30bcf41767424af763c9204084856d87cd99f0da06ae6ee5b7382c1f6f2cbb2cf2dfd8320271f16ba7ebd8f0e3c742482f5426530b1ab946c7118f70aa4eac41dd78569341a0f3dd250531aaefdff4cab9e9eed7efdaa865f9b804ade79ced061a1fcd18a6c61a708fdf119841dc232cc5c4e5343cb8a82e9dd9647779bca053b5a2c43481c06ce2a593e388f5f5f4e681771021aaaf0589dac69db22c7285035d1eb89c75935fa4208b3786f2640ce9d65b0e671967dc27808fea5d17ac70a3ac2802f65d45d9c0372aeed530ee58bf04e190f50dac25139caec0b253d17af28eaed173c7043d66567188f04ea51733835c1c66ac7a634d7b90bdac4a6d1075bb277dc6ca420b24485012db44aed5a2e8099f4f3ed53bdb0b35b35905db28169b3e3b3d13ff94bdf2c9549f4a54c64b8d27098b86ff46cfd515f35b1d5a1bbf1bb29df16cdf296e804977a6b583d018c4fdb66264d5f2d9e162059017d6b6cbc6d6c2f1009717c67093f6feaafce1f242f4b730a2e714e9bba79f18c42a158425147b7b2cd9add4ac1d2c1a95b13a4f352d51982a5d967cd611911e6d0777afbc10883c6293f056acc69da89a0a64913be996466ed63f969d5ccd124cd3052d6654e6db0519449f3cbf3a2011541d26e5b76c3c192857905bcf989fd943d42aee9ebd40fee33094eae69154092e9514819ff126040ea7d43a927809149cfaffcc76cb1e332426bf0eb1ac1a3968c70030453a284a0fe39b9ebd704f0950cb5350d4c60d65566b3f24ec4636cd5bb3e23066f4d4f1814e60f286f3ad2d3c10e79c5991c8bf5fdb561723873fe0c75c7bb6ba262aa3a6655349df95f07abb0200d5b9152da4bfdd66a311b29a15755e8465b7b0d99f7f8ccefe9cb3561b5619d4c21b36c9b29442ccd5949882d0167244d84b677685d62074f63b8dc66941f317c78bb093491e2acb7207cc80fe51c22199aae878170af9fa1eb164854587007eb108f23d1c7946bf75aee50eee6fffdae24b992393bd37d268a136b3dcb1b7d2c9b9fbfe0c860b0d344f488e85de2a65a20eb057f0047d0b6b8898bdd68e21f2234a2c66b963a2d86f62297a7d1176c14acaddd4861f5bb74ee91eb3b6ba0c7328433b977e23c02ab67d82a12d620fc034f1c9c3a99a6a07ddf59eaa18384e429101dacbd93ee794e27b774242446fa433a8c03e4312ad56f6c4dfd1ad014d07932480e07caedabda36caaeaaf405dfa1a650843f2e09ae89c666ab8754d9bf9b290f4c4c9242d8f98533bfdbae191a6fbcba6bdb9096427d2d8efb5dcfbd58df7763cc445bf44a0be6de2335a395ab8157dee25794be81c3d87a7d457b52d88f86cabf91f2ec16a8e05a00f72277943737839a5242163025704c7b938f3f424ef5db6b60d3181e3ef94cbdc6516f0ecf01b52164b92f2e12ed55db595fd8de6862a3b12ebe06b19d1f93132b83b2f5ddbc9808b3ce8fa40352c84664d824edd2631a5e2fddaae887689092007d3d0f22a948f54bfd5c42bea5f0d6bf5018cee5ef232c8b6ea3f54ee6f4997c8ad5ccfd28227eeca811312375a849bdf4d343c1b0ec7035279d1bc0892ef193a74018d5ccd5ccaf0503a697b23abb44b7aa3beced0626daa5e1fbfc4d29d2804292fcc60b775f656179510168bf05929dbc92e009d94561d946f7b4b5a18c08d29678c482d90e07abb029e80546e5cee6c4a30712a9b92d556a29b2de021bd49b6398340a9363b689bedc007416bcb659c0c4b6eaa31ec4976ee4896ff87a7dfab48dc7046d44c9c2db6881f7d6b252e582eb878b0be9b24666e74e8eb565c07582f17817ea2422de5da79cb367e76b9b8a9d056de06ad0483986fef2a3b62d64d5d2128cf55499025ad0739ad3ce5e1bfa6aaac16828bdacad2f86b32ed933a2f672efd1f4a32dd23e59aed872d1015eaaf701a0ef8e1427d59728450c4f1bd561e7ef6f8e34d12ae2120a51746a5c346e739c09854caeec07af0d70dd4d9164b3ae8a098a41c081465fdb5537cb560426bc0de4b735f253dbc779b9dce429d99700cd6c0cbd778caeb56401b2bb5c1ca310ab0c91e1d9f4578b5fb3b4f0dad4c565495797e8e83603f3ef188a896fad5bfec24457e0f6f962b8613434f16acf74308171567eae5ad9ec11186a56493a5394042bd1b29fbe0ce64e5f1b0b56e8910343666d627d71c729c0c90bfae0134e117842d67b160ff50688f7b45f0ae330c2d4890732ace7795ff74b6e36466da623c8eef75528b22199c9bf589a1fcd2aca6c5fe3cce2eddabf1ddc8e87380b815ed5928222613383db7941eb9d55b45487b399a9a35ca4cbd9eaf08c71273fc3334b0acdbd117b13697a9ae475e79a44911ce4fed1490a2ec654fe469c9ea933999dae3616b063769446cfefb4562bd124e42f62a3dd0385fe3d21029ad8fd1c58b0badd42e415a76e3e92f246629d3579dd80d940e6dd9bee3d9a6ef8a7840fb253507e718eca32ff4119eb0bcc02aa210939a3bc41704a63202139c68e276254395ab6b858f4528ea2b3a57328e0b31816de3ad85e50e7f4ec9445eaf21a8b9916ed209bb7e79a7a08c2e4e09644ab831c0ba68d05d5ebf57a9eb36bb9caa8e7ac78a8ccca1bcb03cef0c5eb31fafa6e283632c117031aa3919f72aa80a2b9b2557749951348d5294ed2414ffcbafdf976bfb7a401bedb208fe1285738df515af493047aec962bcacb8ea7bad5fc12d5bf415e66c06c4c87044e694291e104ef53850cbc7ef73ab57982d77a3f941c226a915163e8eebd256cb8a1f0130023d2c5d3be77cab39bae4449711d6f39e50cc83eefaf6cc727b1c0b3fc4f7bd110d18262cd872cee8ca95f1be8005d5b339abbde923ef2d4290d5579e4420ff2beb705c16e96101c38c31cfd05639f252730c145182e4406aab68f556e0290ccf05e25a7bf13cdb5db47a8a0841fbeb880d4f0add608d1badb8992924b548ef1426ec774ec9d86678d4c2aae8f1e3b2dfb295802f75727a308dd1b39460f26858eff99fae8d27f24ea6902adabc89311a5fd18c3d9c606db7295f25acd22624bcc753c4c3acdb3f6c563174441333b69a126e4fcc6b06165f6221539c5ed277c20dac4b7978619e10616475de88810bbac714f3651efaa59b75791080a1086c0f3f1b5edb4b3976cc936665855f6a56788d76c6e771b1c968c859fd1ba995d336d301695fc012b8031a14ca529e3e9bf622db6813417925bb4e1a7a5b786aa90f4d048f1f442a2696970dd442d3a6ee117a3e768644c99951b75e51e98de61bc7ed8eb9e87fd43ec75e948829bd19fc545cddefee7a6f068a419e216982ca4ce6ad3256f1e64d203ba1da27e9e175738124ca86a312d0dd0caae6d64751d459d8134830ebb4f4c7931aa90c1ad6fefd99ea4ded3d246236719d6fd48979ee31eaabbea385e91aea0557a58d73a63660ecee981e3da40a39fec3f01caaffafee3504e9f8dc990cc2d69c513db25f6e722ea4811f778af8a338498b6b908682aca6e02e898cb65377f820529d35707cb83ba69b16c92b571728c58188fb08ed6f6c27d6b70e963b147605714468b90966f082d7175fcbc6e770835efb6e7bac5eeaeb5b2c23eb30ecc102e647f1ff71bc6b35f629a55dd305f8ed5287e35403a91b4dc77a6df2fff354460bf563c071846c84617da4df4c46a9e359c45d217a2b096c830ac8614947d110334ca17f587d86825b2b7ae1039fc11109687c1ad0a16f0180d1700414a4694e7ab73c715436dce437a9b3dff55f62fc1ffffc33d3be037c34c9ee7a0fcfeaec1778268565663f39b69c141304c892ae80da42cc854a87c955e6d8060a731eb16ee91e8ea27f90da85196e4f034d40b85ff59eb4b7c76218342f9c9f8d3749c874562829b7ad0c786c5c25ed240aa14755ff7f5ba5298f9f6b6ec3a46ac36d6a39c59c2ecf7781da77931214ac9a8697691d933b20cb64acde409fc159d748e4f92d83ff7767260fdec04b2e80cc524a2366e8fa5b70eb8684d164dec49fa95f42e7e75daa8c268204beec1fbc58cbbe3317af0993a8676dfdb13db7875f50cebdbc629bcd605dd4c4a65c31870495fb9a9ec51c1867ca8b117a6f9507aa26cee54c4c12f8f22b9d88072639ad765bb7906435128d1c146b9e2029880eccbdf78449bd0630381ad16c13444d709a11890d80fae0d24c037180a8726143306a7cd67abbc830167f524008f9a8e3172df597a63af2e87a92e90b70ce53069657f9b46acc9da241a1b00571540ec5fed4a9acfdd0066ba248cb2bf24540d7296256d4c9a5a5bc821817ada912cdde59876d86d4c53c1d047c6bc3442c2ee78326d7c51b6d01bd4f7ff5bc45db88649220d44099b406ac2e4744996b869ea688ecb4e758e755b29717869d5dfccbf5fd553ad83de0c4cd16b3fd4913451734226e4cf29bc0a860943b3e854d8cf49f07d2bfba1c280efaa85bb8f0f8818d1e58178c338c9e46c873adc0a4b6c832aaf0878956d8a04fcc043ff307f60a263cf1bc57ad0434b6a6f99075d932ff75deb8b017cbd16b272139a4addc24749d9551ba44d5bef0536e58de5e9d0b8985f1044163d542859c699f27f033b01d1e5d4c5598bcc4279f29c56eca82cf40c3b2799277e9b0aea04ba5cdd679e3eb63ceb0eafc21c373356caadc0f5730054a0979d7e32117962af0444b7e0e75bf1d30fd1af656956367bbbddf018531833f6c383b76cd63d014c91f67b41548e558cfae6a953a78c36ba3a896b3a0bf48aaa947d042a456a48c8f323682f560f2679f53578f00746cb04c4ef12b905b37f1b1bac9c75a85d6f173d531198f150ee6dbe7fcdbed4e0baf7610b82a793c17124970924ae32c86f9b7b40a229219958cd2445fca613e264adbf29644b1f405c68ef8afff7f4c1dc86f0e578e3716fa86c53f776dc42e7d28978f1e694428560b923b5d44e3aacb18cb38d3efd90ca0812027d336b011557e9e953cbff769e9ba84b903f5fcf1e6b4ab3e210ceaac574f80607116b196b6ded8668729f9be216bfdd049e88d1cb45581701c6ca7c991488a73e6ae5decdfc6416fa69b76f82e92246ee2b29c91885be24e96ea72438499c5c421ffd199f172667adf7d257947bb47945817930a7f2f0dfc73c2a5f6002fd40b9ea51c4a0c610e9759d43c082ed0c126c0de63c5a079b4c8bac46fcc8a1f74d8929ee2b7878430e3caed5f5aad7378fcbc4d659144a7cdbd654185ffdabd9b36257993ca823990df4aa7809ee58b7a278f38085202f3618fefef67f71b39f8ed35a28b3ff47e6caa3cecdbb41b899ea7ef3179ec3d67d0e3380f61d5a57453b9b790d171e1838c68f988a6914f4b81a7a12a0f50612182de8844a5f18026bc4110a10a31a88dae4bb40a3fea22360830784cf82ccde8187d04635e7e5bc6cda8252fa77d7022ae5fdeb978315f925cdbe7cbe0e3894965795fda4b94068bee89f79f86c420b211411929b9b3074703583c0ba0703a4d282441495110dd167c228079db163febc9ea0bcb02ab400999abfecfbca274fca55a055859eb256fcddc1d1773d72d5c3793ca3ff5f2fbe647b04f5ff2b2dc50a3a897e03634a36d21e391e6b6290cf85064711600de9a74057b78d9c04857017bc762300872f674eed1b68fac65025f3252bb803a9ff8ccf4b2b49028622168439db3bc01ea9ae7618b73dc7f858ba388891da14b88f7fee4f5f49abd687ba947969b8b923c2e119fe172126835ab4d1429133a38bbb80f1f6c308ffd180a179c05d9fb112a70e7658f9e3c7b6545556726e6589ba479edf21afd08da62963b5b724fa7b618c27fba201297dd465217de92395734355e9b34e27ff4916d78dbe0424df3d6110297a7847efda2675f12a3bf5e4b07827cdae6c61b0d969f6bb15be656b394a3f3ca8d705a4cac9c78c66c4be58c40888d49ceb08eb9a90c230faace7e4c837a8cb1aa69b020f9f43532cb7315cd698dfffb0179fb24e135480af4c437170c010e6e8f94108523dca95598c59b9e483753b79bafb02a455ceec727fd271b4cb4af7d958751a747afe6625c1e8b0316af5e13e42dc8d97dc42d5960edcaa391164693250a6f98653fa20c78823e1c1a77b798491f197a647b291cdd04087b3143e5b0fc550ecbbff19666b1c8e2a5bf2cb40f9f54c11828a8dd16489f36583e3128cda7a9abde8abbf61294450af638f56444176b5a11f84e67e4e666d6df58c45c0adc45938a2639fb1717a44c8dedf8471ac82fc1771a704f778fb812acb953493a831be5b28b16b20a112aafcee4e44640a6653c4b3035d5de4fcc16312057046bc3c650057dd9be4450b3e837ff8ac19019e67550a124416d671ccc76de36946c2d91f3d63b212111f4f09f39c24c1a981a7e63dd37a8d94ebfae1df5796d971193a8c723f172a9266af23d1d0e48aae73de4e7545a13f09a1ae3feb147ba1c700776148f027abc7dbdd1f3cb823b9a4c0e9dd43fd0bc411dc3eac2369f10fc9669ffaec5ef76da6b7f8884430b3a00da63a0e5272de159ea047584f4804a14159b1321309db45c55af563081d126300dc3ac446936f6653db92fc09d225716f425997dc247939b8c1e09a11f8b10c36b671cc590922051871ce19f6db85eefac9a666c3cec6fd5a69e7610ae5123413b458024b02521420d8c50c265d7b763f070b8fd1981824da47079135a667ee2395e43cae172e6a5ae96aeb7ce490212792498e427b80036f52cc557d3f94b118b2248af9a75a6d27d084ba423edc616981864cb0069a06f359a953a6e7df6b765d222626030248253e4e93eb0979b0a5550ee15d1489f56cc1d30b1584f37b51dfa029af5b45a85b141f4f8ffdc809a19e01f22f80c8a11e9d35f790a6de2d898462a19f412de4df26896a3d107baa7a661b5482cd71453b5f88f889b93ee6df84363ecaf04cb0dcd4369f9d1a827b955182334a998e8f2edbfe74beb14e9ff50134f03d24d70b068801684e25370c1cfc065d88582389713500f974e8a6c6e7f015b8e84e5b9861e45d4ce4eef79f0e8d4f15eaf7c1b33e64287470b5b3c0b8b6bdadae567f977341b57486c1eb279be8ee1cdf11b6e0dbd42d32c95b6801cea98e6000ea80777c6ad3f62012732859497080b3aa127a0f3a7b80a99182406ccfd54affb463f8eaf01b0c65ab582628b3c2237d039ee68d307dd113e4b593b243bd64eb6f58a0ccdd8e9a78f9ed393e2affde8d616d57c7aa1d12ebb4be718b49843ec6a90d5d8c197f154f27805046c410d4e1b66cbf4a8e495a3a229a2a1d58b4909a240d7ae6ea9e740c055b06e756e57e2ff19c148cbaf37357c0d3273b7f2ec631565e9f6c6c8722ddb0c1180695fb204f35917dc2fe11469801c545b2560a59d0666ec129b88e4f427989e820982329c2c39321f25648666af651f87b495195a95a5d158fd161324796272303114d99d22890385853dbc66d37ce22de0db447260217cf51aaed240e4f4963ca7510522fc6e7dbe164ccdedc334787ddb24bbc8205bf3353d447a1de2407c248775fa7e318d83e3ff18150b3cd9a7cbb0df0703aab6ef8d0f71bf9b5a305dc25fbd200e06b73c7f298320bd90dab05ec62b5f885e7cf95274c656051c71628f31196354460b001b6366c26fd2e92f6ad68ea37d7e3fe91fe98223563b4d23f802b3911a5241a793cb9f5b4f80081ace5877f95da7499f728ab09837120ca75c63d725e46f9f77c3da16318c9bcdd4a9d68379b627c1a71a34b684e5614ab3fabceab8d2741aca921b1b018098060686c56d7ed190e7470f529f6e680ed72e749fe7c9c2f37ea8cf08d4520e496361d2437018bbda93396c05abb2aeba443ea1ee56a3da04a8b880452a3610cb4163154e02df8a08a5e48c03fb0b0cdd4d355142cc736b344b9fd987b49b85791e5bf7805250dfe63b04c7ff56608129ef43664aa2acf82f18b49cdfd2ae5551ea4d486b35cd2ea60e3f032c58f531d4d36054f5ce268a29862ded0a3cc0ff1d30882f7c85b95e9a8599bf1d143d2d25555bbaa6f8b673b76ca8cc17b693519194784833d902581fec4e656ca546eade53abfd7e4650df648cb61a146bef5382f9255bf4a7c380854568495bdb7b33f490d240ead3d1851ce3b6400eda5a370f13ec998605f46b234bc9293c026bd1d648647bf52d506deb522012ae89c4ea75414ae6677c4aef28dd756f877af23d1a5ae3cb2205850c14f27f595d1a1542bb1eaf641293e3ba40e0bb54193a1e5db969d37c97709efbc34ab509f08a51ba71ecc4f9f66c27190115948cffaae914e7eb4e8d0c59ef7368e9b08a05bbbd340e1c1d34319f150d299c0ddf3bb2138359e826f4997068b99d13cc454fea46b8664d413b79b19656d62cbb5b31744aa33f99651fa56703eaec2e6998c7321f69f6cd110c89ae0c612a96f9a84dd751fd81ff66c80563e7091f5c5b67f89d52e7c58eb26218cddeaf5c6def3ad07a610bd4e5785675580c199b8550cbb02e3b4e1d240bb8df8e514fb505f39fd222209584331bef5d271056accaef84c88741ebd9f116cce3fe7b07b78ac4bad346c0d6e71c9daecd8d60aa8ea0914f85c9078dfaff04ba5e9bbbacddbc0cb40fe20f869d7f196c5edb6657c50b82c67f1abab663bff0a8da16422fe31a4a17995ee25081a06154d1c03f1a87a9d4ad5141a9227849bd920d2515ca16a245b635c85a77884cce0b8ae56929b5e22c52f971c2eed4ccfd64f7790a616f719fc0305af71405abae9407ed1cdaa26606331fdcf9b3c19b90e561f646ea15e0e668ef37b349594a335baf26962b89ef33c98aec3ca3e7df47c20dc2928d074e5f87c0edcf37cb25d3b8304f57f8257a5ae96791697e3c6d04f4ec2eb6a69f25346defed5b509368dea2b1960218bc6dd21b567583c229fc7b5fc85f7f2032eb304c3a1f72204f75ee950344cdef846d94e916b29a43d00c789256810de5fff6f9fd1af0fcfc2edd3fff9e2010d88083fc0b9e6a291e9a7a08af62433689a39e34bed8dafc90fec82be5c63a843d82132ce8916e395791dc86c8d11caf57f7fd096c28537ec38d6c14df9782312abc85fba2d04b0b159637b0e09f7e9faa1a6136359d17cf7c58b83994d58674ddbc248b804a82156900ca95a5002ef62de046e2f5ddf8e1e19f00189d4f5169bfc3c67afc149c6bc155767e64eac433cfb787be7f7bae7f869c0ec3d142668c2f90d383af7207a635850c515d69c6a62e24e0d58c5da244a917a17caa6be01992c4f8be0b9fff57522db4756840bdf72cafa6061ff2b86305c180c470b3af589e7c9e5328d98cf737bf01d80762e1e41a4d63a8655387be7f295862fdea629aa97b40c2ba1b563f1a103a860f7dff7fd5ee8423ce3dbf0fad41b66965c67299e35483130d461ac6c68215850fd441323bb856cdf03f624520743f7b445641c72e08994c8f252fe179b29226637b533f0ed6c94a0b84efc1a884af940fbc05c654b59d37a54047de233c496103bb27b657e7f63c24ef3ce29709622f67653f398dc7c4e44", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000080000000000000010000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000080000000000000067726f75705f6964cdbb89763096d34d72a6ba367df320f35c31955776112ec917fcf0ab30bc1e2d6695d23c9f1f71f84b3fa73edbc56aca0f"], 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'veth1_vlan\x00', 0x8000}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000380)={{0x3, 0x81}, 'port0\x00', 0x41, 0x20010, 0x2, 0x1ff, 0x8000, 0xfffffffe, 0x8, 0x0, 0x4, 0xf4}) openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) 6m47.530419033s ago: executing program 1 (id=2707): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x7) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x40000c0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2a8}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0), 0x0) sendto$inet(r0, &(0x7f00000000c0), 0x0, 0x6000000000000000, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x3}, @enum, @func_proto={0x0, 0x0, 0x0, 0xd, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x40}, 0x28) syz_usb_connect(0x0, 0x6b, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000385352608f20446b76e8e01020301090259000104e9000909049300000e0100ff0a2401020005028a010209240603040001a53011240606040508000400050006000100050924030506030501f909240702020005cbad092403060101"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x7, [{0x2, &(0x7f0000000180)=@string={0x2}}, {0x0, 0x0}, {0x9b, &(0x7f0000000280)=ANY=[]}, {0x0, 0x0}, {0x4a, &(0x7f00000005c0)=@string={0x4a, 0x3, "7dc9aea16df8cfe19083242e6492d081111b6ce1dd39b1b38889458f2cee9579a9a07df29cd836a490edc7a0e187fe42af254b1fe19c309a203ea0945fad03636cda51dbb5634377"}}, {0xd9, &(0x7f0000000340)=@string={0xd9, 0x3, "b21cb883cb53725d8c5587715e7969108f8db44c815dc8114cd4b75da92ce0bb11e01868c78c7da0c39828cb2cc93dcae128271f18d5feabf3b0040cb43d1eb29049404e9ba9d5169bd952f82ee46834fb4742b95f6fa9cedb29074b9ea9c929549297a901658de6752e872e838d612e68d89e5fa63bf44b1d7fe670b5b9a9b84a8f8417ecf4e584a6b37e7deb25673c4644597ffba1e9fe14101115392f930ea186d2ecd774ec8490ba4d6bfd737213199c90b87ddc2f5f2cd9b54bd19e3ed59bbe7f42a2b17dc9565335817f3a7dc6c958b9880fffe4"}}, {0xe5, &(0x7f0000000640)=@string={0xe5, 0x3, "5c8bae4d4da330c0871d4a70dc1b12023b63a74e1a7cbe69b351f44f3d252dd5ccee89e7a5b22373b87ef966756a49edd098a7aa8531968d1c62f893818f633407170fe9203fe79538f2f689a4e1a72735adbb36f2c3c1593e8f8bccc4e51990894c195092b754012966b0052f142b5e3a3f136c53ce65350870bf86073805c43235d41131fcb16f4d3f78d61545887e98ecde57a9f40486cca7e4360d69c6e1ab49bf8acf0e7d757500e6fd846f75cf7903b8c4d1cbc1ae914e56c4cb9979cb55937d95df1d421920c452cd40fa796e376d623341bf692f00"/227}}]}) 6m44.486572207s ago: executing program 1 (id=2719): openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) socket$rds(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e9"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f00000002c0), 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a64b9f", 0xc, 0x11, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[], {0x0, 0x4e22, 0xc, 0x0, @opaque="03000000"}}}}}}, 0x0) 6m43.750554812s ago: executing program 1 (id=2723): r0 = socket(0x28, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="1b0000001a005f0400f9f407000904018000200000000000000000", 0x1b) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0xfffffffffffffca7) write$proc_mixer(0xffffffffffffffff, 0x0, 0x33) socket$igmp6(0xa, 0x3, 0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) r4 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000002c0)={0xf0f044, 0x800}) poll(&(0x7f00000000c0)=[{r4, 0xe7d4c009da6c1985}], 0x1, 0x4) 6m40.880488808s ago: executing program 1 (id=2727): syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x2002) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x181240, 0x4e) r0 = open$dir(0x0, 0x1, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0xac9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_pauseparam={0x13, 0x0, 0x6, 0xa}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x30, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) r6 = open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0) r7 = creat(&(0x7f0000000200)='./bus\x00', 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r7, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00'], 0x2b) sendfile(r8, r6, 0x0, 0x4000000053d2) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fffff}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYRES32=r9, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 6m39.766045676s ago: executing program 1 (id=2730): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[], 0x2a, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) listen(r1, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) getrusage(0x1, &(0x7f0000000200)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x7fff0006}]}) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x3, 0x189083) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) 6m38.914900214s ago: executing program 1 (id=2732): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x7fffffe, 0x400, 0x208, 0x0, 0xffffffff, 0x2c0, 0x128, 0x368, 0x368, 0xffffffff, 0x368, 0x368, 0x5, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x1c}, 0x0, 0xffff00, 'vxcan1\x00', 'dummy0\x00', {0xff}, {}, 0x2, 0x3, 0x1a}, 0x0, 0xf0, 0x128, 0x48, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00', 0x9fbb}}, @common=@unspec=@devgroup={{0x38}, {0x3, 0x7, 0x615, 0x9a, 0x5}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x14, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @port=0x4e20, @gre_key=0x3}}}}, {{@uncond, 0x0, 0xb0, 0xe0, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x1, 0x6, 0x0, 0x4, 0x1, 0x5], 0x1, 0x2}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x5}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x14, @ipv6=@private2, @ipv4=@local, @port=0x4e24, @port=0x4e20}}}, {{@ip={@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x15}, 0xffffffff, 0xffffff00, 'erspan0\x00', 'veth1_to_bridge\x00', {0xff}, {0xff}, 0x88, 0x0, 0x8}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr=0xffffffff, @empty, @icmp_id, @port=0x4e21}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) 6m23.725777268s ago: executing program 35 (id=2732): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x7fffffe, 0x400, 0x208, 0x0, 0xffffffff, 0x2c0, 0x128, 0x368, 0x368, 0xffffffff, 0x368, 0x368, 0x5, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x1c}, 0x0, 0xffff00, 'vxcan1\x00', 'dummy0\x00', {0xff}, {}, 0x2, 0x3, 0x1a}, 0x0, 0xf0, 0x128, 0x48, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00', 0x9fbb}}, @common=@unspec=@devgroup={{0x38}, {0x3, 0x7, 0x615, 0x9a, 0x5}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x14, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @port=0x4e20, @gre_key=0x3}}}}, {{@uncond, 0x0, 0xb0, 0xe0, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x1, 0x6, 0x0, 0x4, 0x1, 0x5], 0x1, 0x2}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x5}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x14, @ipv6=@private2, @ipv4=@local, @port=0x4e24, @port=0x4e20}}}, {{@ip={@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x15}, 0xffffffff, 0xffffff00, 'erspan0\x00', 'veth1_to_bridge\x00', {0xff}, {0xff}, 0x88, 0x0, 0x8}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr=0xffffffff, @empty, @icmp_id, @port=0x4e21}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) 5m20.918567718s ago: executing program 8 (id=2972): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000002000000a70000000060a0b0400000000000000000200000044000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c61737400000000100001800a00010072656469720000000900010073797a30000000000900020073797a32"], 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, 0xb, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x74}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x3ff}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x40811}, 0x4004) syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120110031acf034023040ac5765dfc020301090212000104ac10f9dea0adbd40d07916af0109048a0100406c5909"], &(0x7f0000000b00)={0x7, 0x0, 0xfffffffffffffd40, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) syz_usb_connect$uac2(0x1, 0xd4, &(0x7f00000006c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x4b4, 0x931e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc2, 0x3, 0x1, 0xb0, 0x10, 0x6, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xf5, 0x8, 0x55, 0xe}, [@output_terminal={0xc, 0x24, 0x3, 0x5, 0x305, 0x4, 0x6, 0x2, 0x9, 0x40}, @sample_rate={0xd, 0x24, 0xd, 0x1, 0x2, 0x5, [0x1, 0x0, 0x3]}, @processing_unit={0x7, 0x24, 0x8, 0x4, 0x1, [0x0]}, @extension_unit={0xc, 0x24, 0x9, 0x3, 0xfffd, 0xe8, "7dcba824f8"}, @input_terminal={0x10, 0x24, 0x2, 0x5, 0x100, 0x6, 0x6, 0x2, 0x7f, 0x8, 0x2, 0x1}, @input_terminal={0x10, 0x24, 0x2, 0x1, 0x200, 0x3, 0x2, 0x8, 0x3aaf51ae, 0x3, 0x68, 0x48}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x420, 0x9, 0x8, 0x5, {0x8, 0x25, 0x1, 0x1, 0xc, 0x9, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x9, 0x1, 0x6b, 0x62, "3bf9", "201d76"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x1, 0x7f, 0x0, {0x8, 0x25, 0x1, 0x0, 0xf, 0x5, 0x8c}}}}}}}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x250, 0x3, 0xe2, 0x9, 0x8, 0x3}, 0x13d, &(0x7f0000000940)={0x5, 0xf, 0x13d, 0x5, [@generic={0x67, 0x10, 0x4, "9b1ec1abbc43b687359fdf764d8657ce053122db03cfeb33bc34d9ec523da8cc8887ec34dccf5df788ef7527416a63e9801a46e41d3c90cedea784eb2ff2e22fff4d5cabadfd4fa826c0082f3c2928aec0a7a85eedd2c5f36b4633421d58c9386e8a031b"}, @wireless={0xb, 0x10, 0x1, 0xc, 0xc, 0xff, 0x8, 0x12d, 0x1}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x3, 0x29, 0x7, 0x4}, @generic={0x97, 0x10, 0x1, "ae2c7e480d78df92e0bd6f0508afaee85d02993bd9cb26343b5e0ae3802863c818d42cf04da93d3e071e1b2686be880983be38ab44b133cdda83cd02249a3423f3ff6437916903ee8d98e3bdd27bbf56004caf1f6f7c22f4c9d7d4c177bb58568e395ce062be09ee923ea9070f4c0074fab7d8820dc56183dd3a667b9885387c62a74d4c29a0ade718b051cbac5861d528801248"}, @ssp_cap={0x24, 0x10, 0xa, 0x8, 0x6, 0x7fffffd, 0xff0f, 0x1b1, [0xc0c0, 0xff0f, 0x3f, 0xff0000, 0x30, 0xc000]}]}, 0x5, [{0x22, &(0x7f0000000280)=@string={0x22, 0x3, "29f526da6d73e28ea7009cd7ba0f9072ec15e1b336b8829caafa272859065ade"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x415}}, {0x19, &(0x7f0000000800)=@string={0x19, 0x3, "f2cd79dce8f56ea478ef3cf6687ab009da935221b90380"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x438}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x43e}}]}) syz_usb_connect$uac2(0x1, 0xee, &(0x7f0000000000)={{0x12, 0x1, 0x7b0, 0x0, 0x0, 0x0, 0x10, 0x499, 0x1006, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdc, 0x3, 0x1, 0x7, 0x40, 0x9, {0x8, 0xb, 0x2, 0x1, 0x1, 0x5, 0x20, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x1, 0x9, 0x11, 0x4}, [@source_unit={0x8, 0x24, 0xa, 0x8, 0x0, 0x8, 0x6, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x9, 0x4, 0x6, 0xe2, "d04725", "39a186"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2, 0x9, 0x8, 0x3}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7, 0x80, 0x0, 0x5}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x3c, 0x7, 0xc, 0x6}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x10d, 0xc2d, 0xf, "160e9d97af"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8, 0x5, 0x81, {0x8, 0x25, 0x1, 0x80, 0x0, 0xd9, 0x8000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x75}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x4, 0x1, 0x1, 0x6, "", "e3"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7, 0x4, 0x7, 0xd1}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0xe, 0x2, 0xff, 0x2, 'n~'}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x8, 0x4, 0x81, 0x7, 0xaa}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x5, 0x8, 0x8, {0x8, 0x25, 0x1, 0x1, 0x35, 0x5, 0x1ff}}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x76912c6eba92eee3, 0x7, 0x8, 0x4, 0xb7, 0xd8}, 0x32, &(0x7f0000000140)={0x5, 0xf, 0x32, 0x3, [@wireless={0xb, 0x10, 0x1, 0x2, 0x80, 0x6, 0x7, 0x0, 0x40}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x8, 0x2, 0x7}, @ssp_cap={0x18, 0x10, 0xa, 0x3, 0x3, 0xc, 0xf, 0xb, [0xffc030, 0x0, 0xff0000]}]}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x439}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x44a}}, {0xc3, &(0x7f00000005c0)=@string={0xc3, 0x3, "e32bbadef62d5ac0fddde2a52b2ac6ffd2c2ee9757c6a7ec00fe30f4ab43f8e8731f59095ae74a2f26995e6fe6b030776c80e079e7078994abbe55084985cd823434e05bbaed82adda2ce0d8ce6d43fda6d33c166b6c74fba331921080331ba3d068a31b7066be700625e0ca428701296107daa806d7d917647dd55f09efa675919dc42d368e90eb8d86dbf72dd8c32543735451f442de485a204c15924c50a74d27089c75d0f3a05142340bf874612cf9065987f142f676753bd9a55408d0188e"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc04}}]}) 5m17.442951977s ago: executing program 8 (id=2982): sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000180)="aa581ff83dac4a636cb9b825c4009d215634b12c4ce8a4e1d32e2e4b6e56cfa1ba584ba7d17f3a6a991d96384d307c768c81c980e56f316d71e106acf3d5b8711479f234fa73a5a6d7b4b4f6ad2b48b5117919f03f0438c8", 0x58}], 0x2}, 0x0) close(r1) socket$kcm(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @local}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x4b4a, 0x10000000000004) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) gettid() ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x60d}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x1, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x6}, 0x50) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 5m14.687901679s ago: executing program 8 (id=2991): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000080)={0x79}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000100)=0x4) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000280)={[0x60000000004, 0x1000000000, 0x80400000000009, 0xfffffffffffffa20, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x9, 0x5, 0x0, 0x400, 0x2, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x8080000, 0x0, 0x0, 0x8, 0x0, 0x2, 0x2, 0x0, 0x8, 0x4, 0x10}, {0xffff1000, 0xb000, 0xc, 0xfe, 0x0, 0x1, 0x0, 0x0, 0x3, 0x7}, {0x1, 0x5000, 0xc, 0xff, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x0, 0x6, 0x2}, {0x60000, 0xffff1000, 0x9, 0x0, 0x5, 0x8, 0x0, 0x2, 0xfc, 0xf, 0x0, 0x1}, {0x0, 0x0, 0xf, 0x0, 0x8, 0x0, 0x2, 0x3, 0xfc, 0x0, 0x5, 0x7f}, {0x0, 0x0, 0xa, 0xfe, 0x0, 0x0, 0x3}, {0x0, 0x3000, 0x4, 0x0, 0x0, 0x1, 0x0, 0xcc, 0x26, 0x40}, {0x80a0000, 0x3}, {0xdddd1000, 0xe}, 0xddf8ffdb, 0x0, 0x10000, 0x50, 0x0, 0xf801, 0x0, [0x0, 0x0, 0x1]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5m13.232824105s ago: executing program 8 (id=2995): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) (async) r1 = syz_open_dev$evdev(&(0x7f0000000240), 0x8001, 0x105800) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000280)=0x7) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)='1', 0x1}], 0x1, 0x0, 0x0, 0x40004}}], 0x1, 0x8041) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={0xffffffffffffffff}, 0x4) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) getsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x4) (async) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000500)=ANY=[], 0x78) (async) splice(r2, 0x0, r5, 0x0, 0x39000, 0x0) (async) syz_usb_disconnect(r0) (async) r6 = syz_usb_connect(0x1, 0x24, &(0x7f0000000140)=ANY=[@ANYRES16=r4], 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_usb_disconnect(r0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000040)={0x5, 0x0, 0xd000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x1fd, 0x1, 0x60000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) (async) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0x44, &(0x7f00000001c0)=ANY=[]) (async) r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000218c0000000c0a01030000000000000000070000090900020073797a31000000000900010073797a3000000000600003805c000080080003400000000250000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000000c00014000000000000000032027"], 0x110}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) read$char_usb(r10, 0x0, 0x0) 5m11.766097979s ago: executing program 8 (id=3003): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r4, 0x8949, &(0x7f0000000000)={'bond0\x00', @ifru_hwaddr=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r5, 0x40047440, &(0x7f0000001200)) ioctl$USBDEVFS_BULK(r3, 0x5523, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20000002aa94fd891b0700309cdb2d", @ANYRES16=0x0, @ANYBLOB="7961fdffffff000000007e0000000c0099006c91000014000000"], 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) ioctl$AUTOFS_IOC_CATATONIC(r6, 0x9362, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x7d) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan1\x00'}) socket$inet_sctp(0x2, 0x1, 0x84) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r7, 0x89e4) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000380)={@empty}, 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) 5m10.775873714s ago: executing program 8 (id=3006): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendfile(r2, r2, 0x0, 0x7) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = add_key$user(&(0x7f0000000200), 0x0, &(0x7f0000000280)="5d5b18f9bf", 0x5, 0xfffffffffffffffb) keyctl$set_timeout(0xf, r3, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x0, 0x0, 0x0, 0x1, 0xd3, &(0x7f0000001380)=""/211, 0x100, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x10, 0x8c}, 0x94) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000080), 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0xffff}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000000), &(0x7f0000000140)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1b, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102384, 0x18ff0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) 4m54.870503378s ago: executing program 36 (id=3006): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendfile(r2, r2, 0x0, 0x7) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = add_key$user(&(0x7f0000000200), 0x0, &(0x7f0000000280)="5d5b18f9bf", 0x5, 0xfffffffffffffffb) keyctl$set_timeout(0xf, r3, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x0, 0x0, 0x0, 0x1, 0xd3, &(0x7f0000001380)=""/211, 0x100, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x10, 0x8c}, 0x94) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000080), 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0xffff}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000000), &(0x7f0000000140)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1b, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102384, 0x18ff0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) 4m50.337950176s ago: executing program 3 (id=3078): syz_emit_ethernet(0x1b, &(0x7f0000000100)={@local, @random="560a8e390c76", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x0, 0x1c, 0x67, 0x0, 0x2, 0x5e, 0x0, @multicast2, @empty}, "6494548f67ed9740"}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'batadv0\x00', &(0x7f0000000400)=@ethtool_pauseparam={0x13, 0x10004, 0x2, 0x2}}) 4m48.40384009s ago: executing program 3 (id=3085): syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x2002) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x181240, 0x4e) r1 = open$dir(0x0, 0x1, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r1}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0xac9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_pauseparam={0x13, 0x0, 0x6, 0xa}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x30, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) creat(&(0x7f0000000200)='./bus\x00', 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) sendfile(r7, 0xffffffffffffffff, 0x0, 0x4000000053d2) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fffff}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r6, @ANYRES32=r8, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) close_range(r0, 0xffffffffffffffff, 0x0) 4m47.396799953s ago: executing program 3 (id=3088): syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x2002) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x181240, 0x4e) r1 = open$dir(0x0, 0x1, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r1}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0xac9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_pauseparam={0x13, 0x0, 0x6, 0xa}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x30, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) r7 = open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0) r8 = creat(&(0x7f0000000200)='./bus\x00', 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r8, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00'], 0x2b) sendfile(r9, r7, 0x0, 0x4000000053d2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) close_range(r0, 0xffffffffffffffff, 0x0) 4m46.299775466s ago: executing program 3 (id=3091): r0 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0x80000ffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x30) fsetxattr$security_capability(r0, &(0x7f0000000200), &(0x7f0000000240)=@v3={0x3000000, [{0x5, 0x7}, {0x9, 0xfffffffd}], 0xffffffffffffffff}, 0x18, 0x1) 4m46.198296844s ago: executing program 3 (id=3092): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) keyctl$instantiate(0xc, 0x0, 0xfffffffffffffffd, 0x2a, 0x0) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="a5ffff02370000642405000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x404c8c0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r4, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801}], 0x492492492492335, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) socket$rxrpc(0x21, 0x2, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x50) close(0x3) r7 = creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53049cc) close(r7) socket$inet6_sctp(0xa, 0x1, 0x84) 4m44.506275428s ago: executing program 3 (id=3098): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4004088}, 0x0) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000340)=""/244, 0xf4}, {0x0}, {&(0x7f0000000640)=""/258, 0x102}, {&(0x7f0000000b00)=""/4103, 0x1007}], 0x4}, 0x22120) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000dbdf1b7526993a8f6ae98a250a00000ad000e5003372e8e07df7c766b53b9ee703057d05a87e51650a331ed17ae6aa7d0ebe095bb76d7676e837b8fd4ca060b943f8fbd1a19870"], 0xe4}, 0x1, 0x0, 0x0, 0x8801}, 0x50) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000200)=ANY=[@ANYBLOB="020000000000000002004e21e0000001000000000000000000000000000000000000000000000000000000000000000000000600"/130], 0x210) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x4000081, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x7, 0x0, 0x2, 0xffffffffffffffff]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESDEC=r2]) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="fcfe737c43d18d32"], 0x20}}, 0x0) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r7, 0x29, 0xd0, &(0x7f0000000000)=0xb, 0x4) ftruncate(r1, 0x8008976) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r8 = syz_usb_connect$uac2(0x1, 0xfd, &(0x7f0000000440)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x15ca, 0x1806, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xeb, 0x3, 0x1, 0x2, 0x0, 0x99, {0x8, 0xb, 0x2, 0x1, 0x1, 0x7, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xfc, 0x1, 0x29, 0x8}, [@mixer_unit={0x5, 0x24, 0x4, 0x6, 0x2b}, @source_unit={0x8, 0x24, 0xa, 0x81, 0x1, 0x33, 0x7, 0x4}, @mixer_unit={0xb, 0x24, 0x4, 0x2, 0x6, "34b36d5377c8"}, @source_unit={0x8, 0x24, 0xa, 0x5, 0x1, 0x0, 0x8, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x8, 0x4, 0x4, 0x74, "", 'k'}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x39}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x400, 0x5, 0xe, 0x7f}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x48, 0x4, 0x1, 0x6, "c5", 'Q'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x18, 0xad75, 0x1, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x81, 0x9, 0x88, {0x8, 0x25, 0x1, 0x1, 0x3, 0x81}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x8}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7, 0x1000, 0x7, 0xcd}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1, 0x80, 0x6, 0x21}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7, 0x4, 0xc, 0x7, "d14a6a", "e9"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x9}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x8, 0x4, 0x40, 0x8, "", 'A'}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x3, 0x4, 0x1a, {0x8, 0x25, 0x1, 0x80, 0x33, 0x2, 0x8}}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x1, 0x2, 0xa3, 0x20}, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="050f090300080c03100b0310f7ff100b24100a07c60000000f00e5007fc1ff00f0000000c000ffbe0c023f00c00000000000ff00"], 0x1, [{0x2c, &(0x7f0000000280)=@string={0x2c, 0x3, "3b10ede86a2bcbcd26413d0c33eb18e15b5025b85f3ca53c82b36a4bb05dd18abb2bf37d38e1441c5c28"}}]}) syz_usb_ep_write(r8, 0x9, 0xe, &(0x7f0000000540)="e4c5ccf1b9f07409b82286a6a135") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 4m29.430640029s ago: executing program 37 (id=3098): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4004088}, 0x0) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000340)=""/244, 0xf4}, {0x0}, {&(0x7f0000000640)=""/258, 0x102}, {&(0x7f0000000b00)=""/4103, 0x1007}], 0x4}, 0x22120) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000dbdf1b7526993a8f6ae98a250a00000ad000e5003372e8e07df7c766b53b9ee703057d05a87e51650a331ed17ae6aa7d0ebe095bb76d7676e837b8fd4ca060b943f8fbd1a19870"], 0xe4}, 0x1, 0x0, 0x0, 0x8801}, 0x50) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000200)=ANY=[@ANYBLOB="020000000000000002004e21e0000001000000000000000000000000000000000000000000000000000000000000000000000600"/130], 0x210) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x4000081, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x7, 0x0, 0x2, 0xffffffffffffffff]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESDEC=r2]) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="fcfe737c43d18d32"], 0x20}}, 0x0) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r7, 0x29, 0xd0, &(0x7f0000000000)=0xb, 0x4) ftruncate(r1, 0x8008976) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r8 = syz_usb_connect$uac2(0x1, 0xfd, &(0x7f0000000440)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x15ca, 0x1806, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xeb, 0x3, 0x1, 0x2, 0x0, 0x99, {0x8, 0xb, 0x2, 0x1, 0x1, 0x7, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xfc, 0x1, 0x29, 0x8}, [@mixer_unit={0x5, 0x24, 0x4, 0x6, 0x2b}, @source_unit={0x8, 0x24, 0xa, 0x81, 0x1, 0x33, 0x7, 0x4}, @mixer_unit={0xb, 0x24, 0x4, 0x2, 0x6, "34b36d5377c8"}, @source_unit={0x8, 0x24, 0xa, 0x5, 0x1, 0x0, 0x8, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x8, 0x4, 0x4, 0x74, "", 'k'}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x39}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x400, 0x5, 0xe, 0x7f}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x48, 0x4, 0x1, 0x6, "c5", 'Q'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x18, 0xad75, 0x1, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x81, 0x9, 0x88, {0x8, 0x25, 0x1, 0x1, 0x3, 0x81}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x8}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7, 0x1000, 0x7, 0xcd}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1, 0x80, 0x6, 0x21}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7, 0x4, 0xc, 0x7, "d14a6a", "e9"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x9}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x8, 0x4, 0x40, 0x8, "", 'A'}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x3, 0x4, 0x1a, {0x8, 0x25, 0x1, 0x80, 0x33, 0x2, 0x8}}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x1, 0x2, 0xa3, 0x20}, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="050f090300080c03100b0310f7ff100b24100a07c60000000f00e5007fc1ff00f0000000c000ffbe0c023f00c00000000000ff00"], 0x1, [{0x2c, &(0x7f0000000280)=@string={0x2c, 0x3, "3b10ede86a2bcbcd26413d0c33eb18e15b5025b85f3ca53c82b36a4bb05dd18abb2bf37d38e1441c5c28"}}]}) syz_usb_ep_write(r8, 0x9, 0xe, &(0x7f0000000540)="e4c5ccf1b9f07409b82286a6a135") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 2m38.619875978s ago: executing program 9 (id=3569): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) modify_ldt$write2(0x11, &(0x7f0000000640)={0x7ec935bf, 0x0, 0x400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1}, 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d80762ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x80000001, 0x0, 0x0, 0x10000004, {0x40, 0xd08, 0x0, 0xfe, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x40480923, 0x200000000005) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x18) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'vlan1\x00', 0x0}) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000004240), 0x1, 0x0) pwritev2(r7, &(0x7f0000005380)=[{&(0x7f0000004280)="ba", 0x1}], 0x1, 0x7, 0x7fff, 0xc) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r2) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r7, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="10002dbd7000fedbdf250600000028000680060001000200000014000400ff020000000000000000000000000001050002000700001a798ca90001000000"], 0x44}, 0x1, 0x0, 0x0, 0x400c840}, 0x1) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x18, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x6}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0) syz_usb_connect$cdc_ecm(0x7, 0x4f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12015002020000ff2505a1a440000102030109023d000101ee5003090400040302060006072407"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r6, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r11, 0x4008ae90, &(0x7f00000000c0)={0x2, 0x0, [{0xd, 0x7, 0x3, 0xbd7, 0x3, 0x818, 0x8}, {0x1, 0x10000, 0x4, 0x19a7e7c5, 0x5, 0xd5f9, 0xffffffb5}]}) sendmsg$kcm(r4, 0x0, 0x0) r12 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r12, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) 2m34.815898188s ago: executing program 9 (id=3581): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0xffffffffffffff17, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0500000004000000030000000400000000000000", @ANYRES32, @ANYBLOB="b9383dbff54c0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) semop(0x0, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000240)=[0x7fff]) io_uring_setup(0x475, &(0x7f0000000ac0)={0x0, 0x0, 0x4, 0x200002, 0x4000021}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, &(0x7f00000000c0)) socket$inet6_sctp(0xa, 0x1, 0x84) 2m33.648537426s ago: executing program 9 (id=3584): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000f0", @ANYRES16=r1, @ANYBLOB="01072bbd7400080000000500"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) 2m33.318842763s ago: executing program 9 (id=3585): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x11, 0x0, 0x0, @pid}]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="5300030002"], 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x7fffffff) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x1000000201005) 2m32.434365685s ago: executing program 9 (id=3587): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fffff}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 2m32.251316875s ago: executing program 9 (id=3588): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) close_range(r0, 0xffffffffffffffff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20a00, 0x10) mkdirat(r2, &(0x7f0000000040)='./file0\x00', 0x101) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) ioctl$SNDCTL_SEQ_GETTIME(r3, 0x80045113, &(0x7f0000000100)) sync() 2m16.665998641s ago: executing program 38 (id=3588): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) close_range(r0, 0xffffffffffffffff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20a00, 0x10) mkdirat(r2, &(0x7f0000000040)='./file0\x00', 0x101) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) ioctl$SNDCTL_SEQ_GETTIME(r3, 0x80045113, &(0x7f0000000100)) sync() 21.860538009s ago: executing program 5 (id=3987): socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0xd66a) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000300), 0x3fffffffffffef1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r3 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000380)={0xa, 0x4e1d, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6e2}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7020000030000008500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r4 = socket$inet_udp(0x2, 0x2, 0x0) setxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[], 0x24, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x91}, @multicast2}}}}) accept4$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0, 0x80800) socket$netlink(0x10, 0x3, 0x7) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', &(0x7f0000000040)='hpfs\x00', 0x800, 0x0) 19.753913325s ago: executing program 5 (id=3993): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) semop(0xffffffffffffffff, &(0x7f0000000300)=[{0x2, 0x5, 0x2000}], 0x1f4) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x1ff, 0xc0000) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000680)={0x0, 0x1f00, 0x0}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000010000000000000000000000850000008700000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) r9 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r9, &(0x7f0000000100)='-1\x00', 0x2) close_range(r9, 0xffffffffffffffff, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000001d00)=@mangle={'mangle\x00', 0x64, 0x6, 0x548, 0x1b0, 0x2b0, 0x1b0, 0x2b0, 0x1b0, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [0xffffff00], [], 'nicvf0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x3}, {0xffffffffffffffff, 0x0, 0x1}, {0x0, 0x1, 0x1}, 0x56, 0xff}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x2, 0x9, 0x1}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x0}}}, {{@ipv6={@mcast1, @loopback, [], [], 'veth0_to_bond\x00', 'geneve1\x00', {}, {}, 0x2}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'batadv0\x00', 'virt_wifi0\x00', {}, {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}]}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d40)=@newtfilter={0x44, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FD={0x8, 0x6, r8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x800) 16.207010742s ago: executing program 5 (id=4004): openat(0xffffffffffffff9c, 0x0, 0x20842, 0x63) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x6, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) clock_adjtime(0x17, &(0x7f0000000040)={0xd51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f420f00, 0x201, 0x0, 0x0, 0x1, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100, 0x3, 0x0, 0xe438, 0x0, 0x0, 0xe0}) 13.898495017s ago: executing program 5 (id=4017): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fanotify_init(0x500, 0x400) r2 = fcntl$dupfd(r0, 0x406, r0) fanotify_mark(r1, 0x1, 0x40000019, r2, 0x0) read$FUSE(r2, &(0x7f000003e800)={0x2020}, 0x2020) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="01"], 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x4000084) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'batadv_slave_1\x00', &(0x7f0000000080)=@ethtool_coalesce={0xf, 0x7ff, 0x5, 0x6, 0x233844d7, 0x1, 0x7, 0x4, 0x6, 0x2, 0x3, 0xca, 0x3, 0x111, 0x9, 0xbe, 0x7fff, 0x9, 0x800, 0x7f, 0x4a, 0x3, 0xad}}) syz_usbip_server_init(0x6) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}, @IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}]}}}]}, 0x44}}, 0x0) 13.54373293s ago: executing program 4 (id=4019): syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x2002) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x181240, 0x4e) r1 = open$dir(0x0, 0x1, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r1}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0xac9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_pauseparam={0x13, 0x0, 0x6, 0xa}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) creat(&(0x7f0000000200)='./bus\x00', 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x4000000053d2) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fffff}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYRES32=r7, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) close_range(r0, 0xffffffffffffffff, 0x0) 11.782760495s ago: executing program 7 (id=4022): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x80) read(0xffffffffffffffff, &(0x7f0000000300)=""/239, 0xef) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$sndpcmp(0x0, 0x2e8, 0x2a0000) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x4004510d, &(0x7f0000000000)) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r3, 0x0, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000004c0)={0x3, &(0x7f0000000040)=[{0x50, 0x0, 0x0, 0x8ed}, {0x20, 0x7f, 0x2, 0xfffff034}, {0x6, 0xfc, 0x4, 0x23a8}]}, 0x10) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r5, &(0x7f0000000040)=ANY=[], 0x6) 11.526579047s ago: executing program 5 (id=4023): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b9"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r2, &(0x7f0000000080)="ba"}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xb, 0x0, 0x301, 0xf8, 0x0, 0x0, 0x0, 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = syz_open_procfs(0x0, &(0x7f00000020c0)='net/rt_cache\x00') read$FUSE(r6, &(0x7f0000000000)={0x2020}, 0x2020) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000100)={'pimreg\x00', 0x4000}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xff00000000000000, 0x828d, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x65e2, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) accept4$alg(r7, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDCTL_TMR_STOP(r4, 0x5403) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_usb_control_io(r0, 0x0, 0x0) ioctl$KVM_SMI(r8, 0xaeb7) 11.165030272s ago: executing program 7 (id=4024): syz_usb_connect(0x6, 0x36, &(0x7f0000000540)=ANY=[], 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x1000, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)=0x10000) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x2, 0x7ffffff7, 0x32435750, 0x2, 0x8, [{0x1000000, 0x40}, {0xc, 0x8}, {0x400000e, 0xa0}, {0x10000, 0xfffffff0}, {0x9, 0x3}, {0x7ffffffb, 0x8}, {0xfb60, 0xe}, {0x7, 0x80000000}], 0x6, 0x78, 0x0, 0x1, 0x6}}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0xfdef) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x20, 0x9b, &(0x7f0000000200)="ae60a5f788a7083da9032a5b987ab83e4e712553338649c56593ec08dd79f1bbb3e7ba15be406de6d812013e64584aefb8f4f3059d22dedaf81492db1dec14ae11c11312a4edf830c27a291a66d5f018293e16d0f814f541a5685d61f1fd3846d0865a4e606e2164ac4978a69d3af5c677a224add5cb5c847df9996e177482181b6dba843d4fdc86eea8ddfe1ad3008f44fcfc2d5a233129d3e80b", 0x3, 0x6, 0x1, 0x1, 0x3ff, 0x3, 0x4, 'syz0\x00'}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="09000000040000000400000007"], 0x48) fsmount(0xffffffffffffffff, 0x1, 0x0) socket(0xa, 0x3, 0x3a) 10.140721531s ago: executing program 6 (id=4027): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x20043, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x37) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0xffffffffffffffce, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x800, 0x0, 0x3, 0x1}, 0x20) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000100)={0x38, 0x6, 0x38, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x8, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x2a201, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) syz_open_procfs$userns(0x0, &(0x7f00000001c0)) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) r7 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r8}) ioctl$sock_inet6_tcp_SIOCINQ(r7, 0x8936, &(0x7f0000000000)) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r2, @ANYBLOB="00000000000000001c002b8008000100", @ANYRES32, @ANYBLOB="eeff020016d2293719000000080008002bdb9f53e564d80ce3376241aee0c8fd51f3064175bcad76665a0e75388ef9537a9575166c75e4b6d281bcd1294223cef34e1f7d35a3a56448deece5641275dbc6b3979b0ab6969edef480252f27b0", @ANYRES32, @ANYRES32=0x0], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x40840) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) ioctl$int_in(r6, 0x5421, &(0x7f00000000c0)=0x7fffffffffffffff) 9.319269293s ago: executing program 7 (id=4029): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r1) sendmsg$NFC_CMD_DEV_UP(r1, 0x0, 0x4008004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2014800, 0x0) geteuid() socket(0x1d, 0x2, 0x6) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r3, 0x24000000, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) 9.278425072s ago: executing program 4 (id=4030): inotify_init1(0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r6, &(0x7f0000000400)={0x0, 0x3f, &(0x7f00000003c0)={&(0x7f0000000280)={0x80, r7, 0x1, 0x0, 0x0, {}, [{@pci={{0x8, 0x8e}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x80}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x4008080) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002dc0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x74}}, 0x0) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00\t\x00'/16], 0x28) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r0, &(0x7f0000000c40)=ANY=[], 0x13) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) 8.218796563s ago: executing program 4 (id=4032): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) sendfile(r0, r0, 0x0, 0x200000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000040)={{@host, 0x12}, 0xffffffff, 0xff, 0x5, 0x7}) 7.642494908s ago: executing program 6 (id=4035): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/comedi4\x00', 0xa002, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000059100)={0x1, &(0x7f0000059080)=[{0x4000000, 0x92ff, 0x0, 0x2000000, 0x6}]}) 7.641987844s ago: executing program 4 (id=4036): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = dup3(r0, r0, 0x80000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) creat(&(0x7f0000000040)='./file0\x00', 0x4b) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) userfaultfd(0x80801) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfea8, 0xa) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010800000000000000000a0000000900020073697a320000000005000400000000000c0007800500150005000000050005000a00000014000300686173683a69702c700000000000f600"], 0x58}}, 0x84000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f000000a400)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6, 0x0, {0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="ebfb61d97f4bb00397fad642eb74cb426e1dbb5b5bce69c21d19bbb9f79bbf656f9c7c7c92a3029475bdaaa9a689392d72d9f92781bb448d3770dd530d87ea7ab846e1eec796f0eebf6463056cf0f46abafcbe06b0e2a08dbb74f79beada847b56b461d57fb7454c524255f85689752f4e5a02ab722f21b3647a48b18bc878418a06fa0c51a4f45b4afc7eb5fd677d2a28f5dc147cefddc883da9cf5cd18f945e51e8adcf47c4992a5b8c8215300be360540e27cd5969e3ec464d97aa68d844af6863ccf37d6001a7dff5588e1f50ac1cc2a146e5f46ef8b157168e5085de912291533642778743963b0510c0fe8e6b30b685a7b54f4b65575c85327661a09cd2c1cb6676b1a092b7a6b82119fe66ba88bff786ebe3926ff2d13c5d5c8a9d38e8ad8af336333dada146a20f76245c00751b5a663edc95243794bd7a68557a8674c756943dd672f090e2ad8e8848dcbef35db0fe60f36b12562b53b6d9c8a236ef761a1b7bc1015cf29b5bb451e850417437d671edf5b8cabf1f7e40d44dce246f9ecd3e2c05c1bc7a689224bb05787bc9c025edea91bc6475590e04505e1390a1a283cbcb6c461fb6f3ee86aba069a84ae25b612cff3517f4bcf254453c74e2c15eaeec1ec9a388aa0d6dcf052654d4779abdda65de89b7840fa7e85b1e42afdffe5db0955543cd329e4d379cbc06529576857eb19cfb0e76e30385165dd27f97e2fc7a4557d3710ac22965be737853afa241d903427ce0d6f89af9912ab8b3b71b3ee3083f7cd6105c375e75646ad6e3c567564fc1b046b0501b59c14beb5103aa0d742e2b48c52b396aa8ad6ff983e6e2ca8d8cff3519bb3ef1d40704d88b7eb97b48e31c039491f38f826e267cc928cb3bcfc8525d332e8e56fb3e1deeb74b4c0f9fac1e1ef01699ca18b977d0a541ff213549d04e9523783dc30d29bd140037df026759a0986abb8964c35fa4cf307d82fed9f57521d6f66d9d2443e81f1390ffa35c91540a4c2a0c77ccdc8f79d86179660f00d4d9d05e98868b9caa7d74e74b72e4b5144e674bfb07cec2f0f52f2dbf957f9321dc0adc5daa091c4064b47e2454b686262559f36528c5124142d3a60ac9c3af3bbfc74869d3de86c827cc037f3556735424c0dc411918f1d6c586585224d767383e2d36da87d454059d7836fba9ddd7055671b560ec585fb71c179941c2b369809011b06bd10a4e0ccc55b259414f3d81ecb073501bc26dbf513b6630573c758c0665de50ec0d0b6f6566b3ce71f306000e89d09ddd1f8a1e63c295b23e7c41425694c404226e33fe456ca8835f1bbcd0ef77d106b61bd9d8b071c1263005c27c06c3ce62632d759684455a990ebfdb5267cd32aacf7584956c56ea02dd99055c1329ba7ae0b59af0ef18a5af956bd0cd4f426283439bf408643daad52614a11999a775404b55d2539297b2f98b01c5b2e8cfe963094a62c49b470fdf4153eb9e2ad25c57ba554a0512a1828229837737e5cd35176f0a236b4fb279dde503e03ad83478c49c375b91a6c3d418f77a2b246adc6a6e6733eaa69b03fda5bd36c8d58c39854a873a3adf5eff0403971a86ea9b624b262a4482a1ac7ea79b6c93cc2e68d55b6ce1467b21766c7a594886b95bac529d3cd64077e2433ade0a0e33b34cb06e953a6f18faeb220dd019d059b5066d8fff7cb19257c7e5383726104e50d69c1e79a50dcae4554769ed0a095c09571e0a5340d089aa3ecf5f711a61611d0e70f6142dd8ed644bd0a86689aefbb80562ace3d32458963042ee39eaf975ba65e0c78035807d491818ac1cad3c8fb539845530da13aafa9194102aa1c38076f789df3d76975d2281d82c46a32bd2b7f5ea44eec41486e4c3ed841ae8813a5851083455bb92fba4a0e026fdfcc29a282e92242f70836f2840b0c48369989aac073f373a046773845f5b0938525c336cfe3f8faeae1f997b8da2f509cdc7365646a1d3cc2ef4b11caa6dbfeddce1dfe7e0ef35167475d31d40a7cece9f30afcee778d32d25012a56055a7a2677d7e54909be75df7182ced016f2bb4f92cd39ea55182dfbc0870faf242da79188754dd03d970f6e95777b7a4590bdaa34468ed80fbcec5b3f5ddbe90fa5731df31d67612b885193e14d62fbc81e766a94f5e03e0eaa36b116316856ebaceb7198f6b65699edc1ce46416a55f989d9c25ca30efbcc0d42b793f789418ed6eea939519ed2eeb4bc89fcfc2be28ee8c22f244c313ecb1fa4bfdf89bf87d3dc8323b05461f7a7937ac7a957970418ee8b0c240163b3c1d607647ad655c2cae873ce0e7b5e4d84c718aa334eca381fa66ad889b647d187d08be7590359ae9e2f357723514e7e3c03d6fb2b29281c5c5cd79dd2e0d21ab01567f9b2bbd164c4047bd7c6196bd429c3e3318468fbd0e119582fe3bea0bac54343c056bbcd9e2f0606bed6bd541475b76344161509a15b92c532fe1c316c3902e27c5fdbe29ce0b20b16e2caffda74525a19318fc5be2c3a738d2c26c0a4218a2d8bf30a484e2dc5ee804afebaf6ab9e99a362a899203c13e41181e7478ce2b86766cc0135cfad6366e3cbb8bc5609c66093982d91c800ee58090a9a6ead53d4d8ea52da5067c3374f5bde1ff44691780377e4381fffdab2166e1d360ed7e86f23a0481690af1cb4fb2838a3c6ad381706d18815d0f756eb1315818ef245d763f48f3180714c103bed0e046c6e4dbbcccf500befe82d8c123a1e086da99f767069829e16cdc8fc835ac4507d1900acd444e88d11d422259887e56050b5631360fde798f7ed4b2bea41aa7c272baeea54f1e1dff0374b41141fd4861d139ac659838238c731b40f0b80a224ddf4225b7e2966f232f92334bf80aa479289e753477f8f2a5bd5db08a660fb65016fda62a7599f1eb1da5f40e905715d84d9001ec98a6a3a6257bd4de3b56c86cfb78513f2270cde378b7b506b0dab2a5a80cc12f6219ff16406a16d840c4b16720b8a35a568ba27c5d6187639a1e441ce4df2e0d82919a94c8f0bacb623af64c38ca8b5aa2d69e1a26c9a38f68757db379f82ba8ade9ad901676fce45944c772061d10a93edf18b5d72f024e26b014a459b396d508c9ed9bb77bc0a1f35fa626a554132f13802ea251ae6a7778f7ed5c420dad6b448cfbed2d4af1a99569650ceae4a3a2c0b3136633ffce186c2cb60c3f8a37f763c4ae5399ec56a769b4325d48b5fae9d44aeab50e38e00e6a96382f6f8b447b377dc12d3a7bd37b09746b3b376b3ab368903e8262cb6e450c644ba15cc351da667a04aec5ff96557a7ec3eb1a95ec7720da08f3413a3501316b378b83bf098066e76d8c0d47c3d6b71e0662a35051e7d1f532fc72232ebe1112861d7162d1453316bc4701403de54c9ece2fcc4e9917a8b9bc2427ccb1f80c7b586bc406f512d10f97b276209fdafda4300979da9591b2e66b87ad9685e264eaed6d5cdb5b5d37e40dbdbb53637743e39114e8c3ca160c860c6f9ab427e107d432071324db0569180297ad4379ba2afc8129c6168e1dd95d0d59fda3b9a2daed825431475ae2ebb3cc1a7af4028de94d737cf01b4703ec6483add572ad7a48493a0df6401c0082fe2c57919d0015bbaf9d0abf795988c9bf4fdf6f5cd55cf95f7a769168a24a91e120bc57158a1260b427bd5b4b68a1f9837907227911d752c3df9424c6fa84b043677b0f812aee0b53b917cda876eb16d60b9d1f4192bbe05c982f001884c9dfc49bef5923ae95cdc7639d1b178c46df2502daecf64ece3d62761bc0cd3a31be4b60e1a0fcaaed4fd5e854e3164618829ff30f692c2750b4b04ad9153b0af7aab1fdacf2c36fc5a716510d260035b1e9da606a1f43b7fd95880076f316d04da7a71bd55f54808a1cfd216ad19f7e7edb0833286150d2e12fa8b0fb22f1bf3b0786ee23cffa8812e7a160887241f098c20369a34a7d42293dfdf2cc2f87f04fccdaff3a299613a0d9ef70e062096f3081b0a07e05fc15790ca80ce0176ce59e14c5ac7d2960056ac55f6c645b340a62fda54753bc262ef73f16c166489342cc65a7d713f478217a8b842028491fafcfcf9bf975b3ef909584448328a31223ad69d7034519f2bc9b304b97cf9b3acbec591e46fdbbc769bafa1868bf606cf1f3c1e4d3c7da834bc84c004d90b1ac455b0bc63fa11bd6fddc5887606b13ec96ac00f02b01562d02de6fbb12ed296623dcecdcae6fd0208180d82d33c270f84669c8a62161aa5c29039b63b7ccc58c2e780764cb42a2114d8d067469e671c7b24f8e72baaa49012bd08660b129d6b7837121730e9bba55dcedfdd40fbd63cd9f287ccfc125f7adf4850ccf12da8ffa9dfdd6d94a9aef51771a750bf683043d0ed94883484ec27fb640758ed2d3f6a58abefb221ea921e202e05847b49eacb517f616c9c0c247bfb31745b293b2818f962f30e955ad85a1f269c4c5911669661f31cdfbf28a13b4054b45224e43a1fc9aed6cb8b672a1ee4eb5fbaac229373d845dce79db9e1346daca6f21d6c40bc90dea773becf641eb5a9d8b2c957256ac31f59e72414e2346c40930119e2e1389d8ac830b8e4b42e8e9e23b07eb1205ae3003a088cc07937eb54f483bcb4fd9fd3f268fca800e57f82b6765127f789900beecc467456c3e4cfe9c62eec94cfcb7df35ee828224d67151df80d139c665e0af2e231f20005f2a1a83034ee236bd997e8902dd3ae068aeaa8a0e0c4605f1604745a5f1aea9ef70db93189776c82382bceae17baca99f9461e5e82589f4c5b6e19244e946eea3a9f5ea82b8cf26df9d4ddaf9806c0a3f8ae8f115377fc33972df630930247e439842cb5934a6f41fd996a0e26e7af886292e12f3510266af869aafb21936e0d3a7591415680f1d5e429f810216cd97c4413e1ae130871e574e9673924e4ee06f6266e622ab55df91067b009097e8f53eb3db494eb3394140373741848650a73dfe84192ed2d6864cd09b8a21e78687cffc39b067b1fb2cbbcbf0000a62915a91a3c17868b3a23025df5bcab3030961423c295723c259dc399364e0261a83d851d94fc09b92be622d88bc9c0ad18ff021e0aaf2b13711532e0403462f233fe43d92b246edc6d90c9220d94ea9713350bb3cfde108817de790d5d24a5d9b25f6aaca64e7459a4f5fac48270305528501438097f2be927633f37fc6caa9bba564b83410f5c027120ebdd66fb63c53ca13d0bab3b7d750b8aa312eb2df242abc3c773d69a3a0c524f90b3a4496d2d1c357c2d688b15bc906bcd27638b64bc2d81456775983cc74e209aeee7dc75de7fbd48161cb2aabb4c1be45b03849fc8322fbaa43fe206c9cf6db3edb24a3fa3af9f2968cb47fc4f0fc0ec3d12e6903fc8599cea9c6a8d13e7507f5c9b5673cf658d246eb404ca5fd25f9dd56d4fa3cf5512ca707455968c2f16d66113fe7ebb465c5c13bbc8ac886a4c4105e8b5d24d7d9226fd730f32e7c86eb506d2a9211af3197dd68f918586d3e720c510d9db6efdd729dbad85fd0d1ce799f700ac1ccdfc0fc67fcaae4b87f60b5405b764b222653e42b5e039a40a1c933cc7208c8a7e39b0e1263bf1e01072d036f051c15a7ebfdb983ab4ecc4e4d18dc2ded18935bd0d35bd1d82251c929bae9afeccc898019c06600b7c00b6a2befe65a20503236b8cd189f3f686fba4b371b7b8e5187f781663f6dc32d255f52a8e198db511ab7777ba924d855f2726e03a661d98bd7bc301acc99efa1c9e8d40d5a5163533080d09349db0cc4a7d9585ccd558c3d48b68bd7c734add163f8fadcb6ff5957659224ea90e08351930ca20332a49d53c46e3b5ca3c34554ea5d9f0df195ace8ad44aa5fa81fa88797a42aa842b6416e34f4a20ac33a9fe161cbfa9e6351681bc0a0bf5020aec711fc2229ae070c035030db50b811d5b7bd457777e18e3dfdf8811cb11674c4d651b5d252f4f838d0b937ece6c8d8a0c5a9ace4db13c0234853c686db3cb9f5818d564ecc35a8b10038762f81c77e2636c068ec19896731d7f0d2dc051b04e797aa7e9ee05ee36520ebfaeddb1c854daf342997cc5af5f2eb448edbc19536f9217b057518fdda0f4abb764474b3f3e68d7cf6b796670ee0a66f5ea98087dda222a1fc93ee91e0d18a199ef358e5eac1358f901cbb620abbd2539a30b25f582900d87d18b9b9216738a253e8b52095d3dea4bd30037d420ec9414dfe672df22f78c519da5aaed0c3c316eba9ca442d52e65158d51a319e0c6ca9ab2b4d7551ae7beb865ef0f47bb9266258b5f2ecf827f3207abe139714194ceb3be54015794c914285cc1c3bf2ecc95a1c58f5d3864bf4c97f32583d45656262cae71e7da64199dd011a224e201231e50ab6634dda73cee05d281c45d419bcc10555ef7d2e7bd01a79e74dcec9c3a82212f830e94663eb32ea2067142b556de992de89ea2ee90cce3630c4d0cafa0e00eb7ad87b19e248edca528ef42bc827de164618d085cc09df461f728017fbad30ef786ae78895622d0b2882d4eb0021bd4f56c071842a29a44adc54d6dd980c594a1c96f1cd1c572537d0c09a51fdb9525aca645f446d29d0162b33a9df1b9aa1fe7d1933c7e1d041adeee8b5ff3316f396bc3d141f39168e2ab132e7862b4ab45f360215a9fe80dee3813ba7f4d5118bf57da083cc7c78872d1cc2463bb26c10597741e3d9bfa17ca025d90dd09fd4769fc7b79ef32fd28c6da9db9bf386d497576df2e1b84523fba9fcb8869f882df186c90783fba185ca0287d62452d869ed9c550e0153e5381692f0c9db0cc7bb293ec30fa4ae1db4a0043d155f4cfc0fa5d579a6628af392b9b2114485f4124ed586c7b691719a709f3b968837a62b009e0e980d96f6bb8c72cb5fa9dab2eeeb800df4936ece203fe1cbec8766390beb1baa2b7346bf345e533b173649c9c9dd9b340cb1cdebee985c9b50cd9baa9cb92f96cf7e5845d2ea1f88ad93428a868af94a7e05f6d6e982cdd49c7fc986894db5e7efa228d554c9a7aae5133da2597ee5e412965b3faad6fef69d3b5c0f2c776474aa9d3656ab2035b73099045405f3ba0fc1a533135185bb57fad3aad194b5c0206a0be5f1d9802a6287db79a7602f7fc2a5e244903331aa5a9af13440c6eb86a779b6ffabefc2ff88151eeb3d9fc3a5d2dd6a884ee527bee2ae2cbcc8d522d882349795efa3e633d25d7a5ac5af5ed98df4f74da424d193d4d55f649725f8588bea1491053f7acec758dc5c5062ec06f4fd153c11c6d60659182d739d5a10fe783ddedad1b9532a023301b3bca7f47ef93415a12fcb02948400e80143d8c9c8150d88caaf33dc62af2944f863d27acf76ae9f04244fb2303ffb2daa3e38b67a71b4658e8c38178ef557706ac9a7469d0ca7602752fff91383febcf0d5aeb3c9017b03637896d00eceb7388d5ac87ed22fd909e2a4807c3761ebda781fefa6f13828f56c15e49333a93fafd3dde8874b7d5d7e2b1e0867abdb946f61a5f2148fb5c5ba8c421012142c9541e5095152e10348fc837c2376ef1b4b5c5a9daab01d1c13c04447ef61c8e3bcbcfd5b9d4cc29f3ad38ac4c23054ddadf96ee19a46b5477fd6af93c71f7a908d5bffedc5177f22926e10338a0a7c559e7c2f35b950895b02ff69224adc68f723f4393a58844fc188e28cf7855a576717934eafcb4dcaf8a096a095c285b5a6c986dc1391ad5090cc9ff96420d218f93760eb2364708868844595bfb1c17d90e9d5df982ab8c46f042333aecb1ae37b7dbdaa76b5c3f1c87fee1f5cb152352bba4886bab24ae8d6b248ee5210f36b5e9b53e22913f815a1ae324fb48e9f05e4f42e65feaae8f1703d1fcb5698b268cf2808355c2a9d6f3a2086537fe8b01291eed211bb24d7f9a14c21fa36190e09b267f2501281b6c78ba17e532e9d592e20b54fb15f9164bfdec247d495cdabb8c2b7668d91105d6c2caa1fc46445ed92dcb927a1ce1119095a29c466e3c472791481c19cc5d94bbef9d89219fff58a93927489bacef85f2266c68a4d4e4a08bf1623dfbc0f5c300683591dd12fddb92db5e17258fe0da5dabef0ee3bc56755598a052d1d020cea383ba45da439deee9a70d694b14e106a64867ec0575c96b71b96bd5c723aa92831014ddef5ed01f61c167d3079516b34bd26de211eeb5e46d73513bb8b5e847b5ff55e7cf8212e72a395a393b6b4a4e36ec441b2569f66bfdf00119f6c9eb52559a6d5ccab046d27a8bf4093d2dda3c7a9169b47d85379fc33114ddfa7c06eedd875a5af99910627ddc0eaf54c199054e5a0958322d3aad4bb1afb2e6fa006829ce8d42e5cb9290154f8718a4475195bdbcaaad53ecdcbf0c8274b1bcc93e3a0cfcf15b50677f5d99e0f5666cbed18ba4f07f65b0e3d76e4a6deeece27647f167b36270ad23db012ec7bd2213a595b1ed04056e4e2945f3297daae4f53f244c3ec5a95a08103e5e2e6e6e6051be3198b0dcaaab4912f445b4338ed05c96b9e99c66686e7e2a139feaf3e8bf796cbbef8eab9e4dad67b47595d33a9cbdf459e362c5ebd7fb7e07014eca0bcefcf1d0bd40b2c9558e118f4466cdbf68fb71b252d4bf30ad7710860e44fc8d6f137965679945eca097a771e50a2257dea0988a095902905bba389a6ae27ee59d4995a0a56c38abe9301a98472867814cd1f6011a6f693d2e538b173afb9af48612c1a89f8f3da089f85f46b91d07c00a7e76f128896fb50fe55267ddd81b7f95cd6f06add421bf00fec2086fe8b0601a6784da3df46f0864a8aab97a5055b2e9f2eb8c93ef53d7dfca0a0e868d4a3e160b34bb7c84b7a5f1b482881f20e50024f1e640c4e1e151efb8345755ff667a882cbf42ed885e65dc4b486bad7edb7c2a7d4c2cac1008cf1d3362caaf815d31d4807f3fcc47b44d7b60ab434740f3fa602c9ecea79f51d4cf8441e36ca9ef2cedaf1db084410b08a3a91c0078eb7426fa7ddc78589b4c9b3613307c07b7b0d24482be0bf887be23dbff67c6d3b672055f73c75bd5dbb6f4a23a702d07de43aaae4321dd6694c2207b7b5301c28072a0cca82c3447f6a374529849f7053b0cb4eb4ffe23fe29fc8a6b3a4f21b14501110d3848b37bc9f32432951ce22b1eecf97a11c45de4352e7cb89a0f24863bf76fb4ec009a18980db74a81e348052bf00899e40353b6627c96cdab5c9a13d60462e26d5cda79393f5509de914194a1a5a6ccfe30105db1d34cb2572791f136e4dce7370e3ae7edf7b426b012a6a60b6db86ea0c53d946f72796c311e63f9673e8f458a26312cc04d228ba4a6ae6cc4fbe8ff9f40eb0d6d38abdcefb2a001cb085f7e9bd0b67150fba651b69d51b4ac7a44739127c614bf03ab196026c066fba0604bb14e9d9a94160bd133a3ed6ca6f10eb343cdbabe9bb79ee01041816bc1ea02a7a023df2e295e27ae8d0aa778804fdb9c3e6a7f18f72740eb732e583bf1b86bc864b565cd44169d1212ac343be39cefc195c2420c7e5a5ede7b3f77d49a048a431fc269ba2cd107bcd332565cfdbd3431aaed1b0971c53c1ac5991e439020761b6b8c92e2e412f69f1ce215a72b961ed1595e8563d8ee3f4a6c366f29b0113b642c04dde47f70e43b745f978aa1970f447c014c3f46e65c6cc1799cf6fbce57bb4a2d592ce8475243663fa4f133a5548a8a3592b5d4764ee71e2cb5cf51d520ead5e015dceebf28540147189f7845808c3deece3ecfb6c7e19a124ad0802894c1cfcdd3d61d8e10ee7c3ad641b42d74e0baf11ae54ee1816c7c86fb3e6091512b5212654a0070871331f3be2b5aeec7a1c560a8103931f1c0ca8d7382ecb74a5978a6b30a65926d642bef261fecc40cfe8670aded8b77e28c89e97feaade8fc5388e1982dc3730c994ea837562844a2cd64ed390e8c4d5c731fd4f4e6cf9e79ec5def3511acf627c454bcae4940451bc6199f8accdf7e8e30de4ea35ab83ca3572a0cca4f66fd20d4675e617e16b99b5d3879f91302ec298e4aa8d5c382115beb450619d43d0e30ee40198eb8e704683bbeade3cba98f04fd9000537b059687b1e754aedbe539801d785fc15764f8921f1ae63dd7b02b617f8b93385f84452cc79a68d6ac2683dd880430c8464e48973586fd52335896ea51fce0243d8043730f06ec1deb22716d36031ae3b02a4990e07c4d1fc282ac4d66d5d2057923ba6d63827bd1f90bef83a86e2c32200d313adb813ebb720e00abdd9aec5621b05d1fbe3d140b41f387492620675626dbacac301143a033e552631cdac013f9302afc52f1341b525ca3fbe97db74d8526ab3ab846dcf82c48fdd19af2bcf89001bc1d708b7f5cded36c8090dd128a96e797fe39197c1948a9b5db9c03df22fb8290fcab1fa23415e41aa8fcb0a0f5d380c642f6d8501f9ba96918f6876e5d1ed96d1fc3c85180c7de901e21efa5a77f012477d1106cb887ba2473ec53e7897178a06cce23f8caad489466e5df131de9f6838998c8d6981d9282e09ef1a137b414a5f3e162e01a3a7abada509191e167d2e4cdfd34a9a1f25171588b52b8ea45855b3466d0821a0e81bb004eadfe717dbeb4469b4240baa1afc3d11dbaa90cc248a1f2fa995504d8f02eff2818613e1a4f354ddabf57f95a2384e3b5ad2b95b6c83cd80e52869da0a47c75a51088fb7ee7f7dcc1b3995454845e64b676f14a2a3c6104a35f09d75dceb6620d8a18cce5640eaa93f1395cd846c5f90a8a5cfd288fd3eb872ab199dccbb64f2a344b354b40256e518858a0c063409db8c1a587b5620aa2a0d60d61cc81c13d7db325a7ad63f5332953531e50365cc0fc7092f05fabb47b91eddabc1f84eb08eb3ac565902b040d95381d0bdd997212b18eb4e69ffb426edeaee2bad52bc36130a8705a2ec87cd1b28f46bbb3c98fa86a50e50ce6fe6aa6a541e375972be18ed0db24105f4e276a4f4d0e69ca29f32a8be1e64df5c2eb7bd10418fcd1357d4be55e72ff4b0aefd789e7eb986d6fea70fc183c9ece5dc23444c6dd332bcb90bae6d090dbc000592d544b7259104ce1d35b8726021f29556b5f4d859260341806d2d2b911476b674c85e21a8be56e7a83fcf9d03a7d3273cce7b80c7b505f9fec2971e083d8d53c140ccadae58f3f2ed329fa484465763c785f95a3ab0d745f2a1b601f3abe60acb2f97dde39baba636c202aabc5b9698175bea8b021e1ccc6fdae1efb29e7e7a9ed950e072365d550770cba6dc0e82117af2d377c22fff8327ed352748877564e49372ebe8e644e44c9e89f059f338bd840aa04001e8a53e7b1981008541e0b763bb7120a6b3fcbafdde2c85495890faae59e4817aba26e90d909af0fc034795c7444a7ac368f64261c4d86863703e10ec14a7a022613183a4b129df9a471a32bbf78fe68cf949d241c1dafbae6611b34bffde66570dadb4d308149f8a3c0d36ff0adaff83732240525c17bdf7b69e95e61d5eaf6e38c145da29c5e27ea89a2704e7c3fb156aee54355994507974c05bd3a7693587b89fbb4c3f3b2e5b73c6d430e3be8e9f83f5be905910caa49771f65401203553bf8611c60f648f78129b8041566e8058868b7b5d1880b0c23b9cbd3211", 0x2000, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)={0xa0, 0x0, 0x7, {{0x5, 0x2, 0x0, 0x8, 0x1, 0x7, {0x6, 0x100, 0xffffffff80000000, 0xd, 0x7, 0x8000000000000000, 0x48000000, 0x8000, 0x93d, 0x1000, 0x4, r6, r7, 0xfffffffd, 0x24a2}}, {0x0, 0x1}}}, 0x0, 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r8) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)={0x50, r9, 0x1, 0xfffffffe, 0x0, {0x4, 0x74, 0x609}, [@NLBL_UNLABEL_A_IPV6ADDR={0x11, 0x2, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}]}, 0x50}, 0x1, 0xffffffff00000003, 0x0, 0x60040}, 0x0) 7.49017457s ago: executing program 6 (id=4039): openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) (async) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x7ffff000}], 0x1, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x0, &(0x7f00000009c0)=0xd, 0x4) sendfile(r0, r0, 0x0, 0x8) (async) sendfile(r0, r0, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x0, 0x0) (async) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r3 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x90009427, &(0x7f0000000080)) preadv(0xffffffffffffffff, &(0x7f00000026c0), 0x0, 0x15c, 0x0) (async) preadv(0xffffffffffffffff, &(0x7f00000026c0), 0x0, 0x15c, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, &(0x7f0000000300)='usrquota') syz_open_procfs$namespace(r3, &(0x7f0000000100)='ns/time\x00') (async) syz_open_procfs$namespace(r3, &(0x7f0000000100)='ns/time\x00') quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, 0x0) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='vfat\x00', 0x800041, &(0x7f00000001c0)='discard') ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000001280)={0x1, @pix_mp={0x10000, 0x802, 0x20303159, 0x3, 0x5, [{0xff, 0x3}, {0x4944, 0x8bbc043}, {0x8, 0xc}, {0xe, 0x7fffffff}, {0x1, 0xfffffffd}, {0x39, 0x4}, {0x9, 0x2}, {0x400, 0x501}], 0x2, 0x3, 0x8, 0x2, 0x1}}) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) 6.315272955s ago: executing program 4 (id=4041): syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x2002) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x181240, 0x4e) r1 = open$dir(0x0, 0x1, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r1}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0xac9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_pauseparam={0x13, 0x0, 0x6, 0xa}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) creat(&(0x7f0000000200)='./bus\x00', 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x4000000053d2) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fffff}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYRES32=r7, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) close_range(r0, 0xffffffffffffffff, 0x0) 6.010295372s ago: executing program 7 (id=4043): syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x2002) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) open$dir(&(0x7f0000000000)='./file0\x00', 0x181240, 0x4e) r1 = open$dir(0x0, 0x1, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r1}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0xac9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_pauseparam={0x13, 0x0, 0x6, 0xa}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x30, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) r7 = open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0) r8 = creat(&(0x7f0000000200)='./bus\x00', 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r8, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00'], 0x2b) sendfile(r9, r7, 0x0, 0x4000000053d2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fffff}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) close_range(r0, 0xffffffffffffffff, 0x0) 5.914463597s ago: executing program 6 (id=4044): syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100100080020b404010000000000000109022400010000200009040000050300010009210600060122070009058103"], 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x100002, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000280)={0x0, @multicast1, @dev}, &(0x7f0000000340)=0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) r6 = getpid() r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe06", 0x51}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)}, 0x4048043) socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$IOCTL_START_ACCEL_DEV(r0, 0x40096102, &(0x7f0000000440)={{}, 0x80}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r9) 5.884430014s ago: executing program 2 (id=4045): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000035c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_RESET(r1, 0x5514) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00000004eb0000060000582111845fa000977dcf4b981332a208d8fb5f020000522530f3a4bd2048a12667cc37c240fe3a9dff30f0e94ee625e5b278609ea754260da7533efd465a4b6d779f958a4174b9b6e031d2e7d2337cf42e67a99cbf8d533b00b9767cd06de343af2dd6003340ded3712e75c0949ac2e5eb9d2ca1e76c306a1e15cbae6eb1292ac37ce0fa8c67064f022bcabc83aa4482e1ce811f95c20f938efd4b6b6ff63a39c8c439bb1145df3a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='smaps_rollup\x00') r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000ac0)={0x59413716}) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000b40), r5) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x30, r7, 0x622, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x7, 0x80000000, 0x4, 0xfffffffb}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) pread64(r5, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) r8 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r8, &(0x7f0000000a40)={&(0x7f0000000180)=@x25, 0x80, &(0x7f0000000880)=[{&(0x7f0000000380)=""/150, 0x96}, {&(0x7f0000000200)=""/46, 0x2e}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f000001a240)=""/4096, 0x1000}, {&(0x7f0000000240)=""/54, 0x36}, {&(0x7f0000000540)=""/101, 0x65}, {&(0x7f00000005c0)=""/51, 0x33}, {&(0x7f0000000600)=""/206, 0xce}, {&(0x7f0000000700)=""/174, 0xae}, {&(0x7f00000007c0)=""/168, 0xa8}], 0xa, &(0x7f0000000940)=""/207, 0xcf}, 0x40000000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000d00)={@map=r9, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 5.496011376s ago: executing program 2 (id=4046): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x18, 0x25, 0x301, 0x270bd24, 0x25dfdbff, {0x1}, [@nested={0x4, 0xae}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xa0) fallocate(r4, 0x0, 0x0, 0x1001f0) copy_file_range(r4, 0x0, r4, &(0x7f00000000c0)=0xc615, 0x101, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="430325bd7000fcffffff0c00000008000300", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r5) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000000)='./bus\x00') fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000240), &(0x7f0000000280), 0x2, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xae}], {0x95, 0x0, 0x6c00}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x14, 0x18, 0x301, 0x70bdac, 0x25dfdc00, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x200400c4) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000040)) 5.411815294s ago: executing program 7 (id=4047): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000000)=0x6, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000041000/0x4000)=nil, 0x2) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='freezer.parent_freezing\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$kcm(0x29, 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r1, &(0x7f0000000240)=ANY=[], 0xe) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000f87000/0x4000)=nil, &(0x7f00003a3000/0x2000)=nil, 0x4000, 0x2}) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000000)) 5.262735531s ago: executing program 5 (id=4048): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x80) read(0xffffffffffffffff, &(0x7f0000000300)=""/239, 0xef) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$sndpcmp(0x0, 0x2e8, 0x2a0000) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x4004510d, &(0x7f0000000000)) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r3, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000004c0)={0x3, &(0x7f0000000040)=[{0x50, 0x0, 0x0, 0x8ed}, {0x20, 0x7f, 0x2, 0xfffff034}, {0x6, 0xfc, 0x4, 0x23a8}]}, 0x10) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r5, &(0x7f0000000040)=ANY=[], 0x6) 5.232953979s ago: executing program 7 (id=4049): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) prlimit64(0x0, 0xf, &(0x7f0000000140)={0x80000000000007, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$RTC_IRQP_READ(r5, 0x8008700b, &(0x7f00000002c0)) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfffffc99}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) listen(r6, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r8, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r6}, 0x20) sendmmsg$inet6(r6, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x56, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000580)={0x0, 0xff7f, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0) 4.512411125s ago: executing program 2 (id=4050): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000001701000003"], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) 2.428458759s ago: executing program 2 (id=4051): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff0f}) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3020, 0x1000004, 0x13, r3, 0x100000000) (fail_nth: 6) 1.218713005s ago: executing program 2 (id=4052): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff0f}) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3020, 0x1000004, 0x13, r3, 0x100002800) 1.213103835s ago: executing program 6 (id=4053): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[], 0x2a, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) syz_open_dev$vbi(0x0, 0x2, 0x2) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000f25000/0x2000)=nil) socket$kcm(0x21, 0x0, 0xa) getrusage(0x1, &(0x7f0000000200)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x7fff0006}]}) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x3, 0x189083) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x1000, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x16, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) r3 = syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x0) ioctl$I2C_RDWR(r3, 0x707, &(0x7f00000000c0)={&(0x7f0000000080), 0x23}) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x0, r4) write$sndseq(r5, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @control={0x3, 0x5a, 0x93}}, {0x0, 0x0, 0x0, 0x2, @time={0x367f, 0xfffffffd}, {}, {0x80}, @result={0x2, 0x2}}], 0x38) ioctl$SYNC_IOC_FILE_INFO(r5, 0xc0383e04, &(0x7f0000000080)={""/32, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000200)=[{}, {}, {}]}) 635.12507ms ago: executing program 2 (id=4054): r0 = socket(0xa, 0x3, 0x3a) timerfd_create(0x0, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f00000003c0)={0x0, 0xaee2, 0x800, 0x2, 0xbfdfffff}, &(0x7f0000000000)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1223}}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000140)={{0xa, 0x0, 0x8, @loopback, 0xc}, {0xa, 0x4e24, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe000001000000000800", @ANYRES64=r4], 0x24}}, 0x4000000) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e57d, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r5, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "bd6c3039", {0x3, 0x1, 0x0, 0x3, 0x0, 0x60, 0x5}}) 546.914667ms ago: executing program 6 (id=4055): syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x2002) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(0x0, 0x1, 0x2) io_uring_setup(0xac9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_pauseparam={0x13, 0x0, 0x6, 0xa}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x30, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x84) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00'], 0x2b) sendfile(r4, r2, 0x0, 0x4000000053d2) 0s ago: executing program 4 (id=4056): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r2, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0xffffffff, 0x25dfdbfe}, 0x10}}, 0x0) r3 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000100)={0x2, 0x1, 0x3, 0x14, 0x4}) getsockopt(0xffffffffffffffff, 0x8, 0x8, 0x0, &(0x7f000001b080)) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2a71f0d3fe13be00", "3d0e00000000003efe56890a5b857206", "47eb0b4a89ffff000000000000c94742"}, 0x4, 0x4}) socket$unix(0x1, 0x1, 0x0) io_uring_setup(0x2b3, &(0x7f0000000480)={0x0, 0xc575, 0x10, 0x3, 0x58}) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000240)={0x0, "08000000000000000000000000000000000000b582000000010000000100", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r6}) bpf$MAP_CREATE(0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 1][ T29] audit: type=1400 audit(2000000082.600:2185): avc: denied { block_suspend } for pid=20423 comm="syz.5.3573" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1146.202856][ T5918] usb 10-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1146.313461][ T5918] usb 10-1: config 220 interface 0 has no altsetting 0 [ 1146.418389][ T5918] usb 10-1: config 220 interface 76 has no altsetting 0 [ 1146.480854][ T5918] usb 10-1: config 220 interface 1 has no altsetting 0 [ 1146.561455][ T5918] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1146.610019][ T5918] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1146.740319][ T5918] usb 10-1: Product: syz [ 1146.794913][ T5918] usb 10-1: Manufacturer: syz [ 1146.884744][ T5918] usb 10-1: SerialNumber: syz [ 1147.176548][T20414] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3569'. [ 1147.607737][ T29] audit: type=1400 audit(2000000084.050:2186): avc: denied { bind } for pid=20411 comm="syz.9.3569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1148.153395][ T5918] usb 10-1: selecting invalid altsetting 0 [ 1148.170332][ T5918] uvcvideo 10-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1148.178531][ T5918] uvcvideo 10-1:220.0: No valid video chain found. [ 1148.205472][ T5918] usb 10-1: selecting invalid altsetting 0 [ 1148.235405][ T5918] usbtest 10-1:220.1: probe with driver usbtest failed with error -22 [ 1148.265184][ T5918] usb 10-1: USB disconnect, device number 7 [ 1148.266839][T20451] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3578'. [ 1148.315932][T20455] openvswitch: netlink: Missing valid actions attribute. [ 1148.327552][T20455] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1148.468646][ T29] audit: type=1400 audit(2000000084.910:2187): avc: denied { create } for pid=20448 comm="syz.2.3577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1149.005432][ T5918] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1149.226545][ T5918] usb 8-1: Using ep0 maxpacket: 16 [ 1149.372823][ T5918] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1149.393966][ T5918] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1149.409303][ T5918] usb 8-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 1149.419260][ T5918] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1149.436017][ T5918] usb 8-1: config 0 descriptor?? [ 1149.572643][ T5918] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1149.680707][T20471] IPVS: length: 155 != 8 [ 1149.737824][T20471] xt_hashlimit: size too large, truncated to 1048576 [ 1149.870985][ T29] audit: type=1400 audit(2000000086.120:2188): avc: denied { getopt } for pid=20468 comm="syz.6.3582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1150.463580][T20483] openvswitch: netlink: IP tunnel dst address not specified [ 1151.925077][ T5857] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1152.133296][T18497] usb 8-1: USB disconnect, device number 22 [ 1152.185880][ T10] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1152.217340][ T5857] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1152.229130][ T5857] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1152.242472][ T5857] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1152.259627][ T5857] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.273839][T20494] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1152.298475][ T5857] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1152.339465][ T10] usb 7-1: no configurations [ 1152.347363][ T10] usb 7-1: can't read configurations, error -22 [ 1152.409885][T18497] wlan0 speed is unknown, defaulting to 1000 [ 1152.417755][T18497] syz1: Port: 1 Link DOWN [ 1152.495535][ T10] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1152.533384][T18497] usb 10-1: USB disconnect, device number 8 [ 1152.585786][ T5857] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1152.657605][ T10] usb 7-1: no configurations [ 1152.663278][ T10] usb 7-1: can't read configurations, error -22 [ 1152.674640][ T10] usb usb7-port1: attempt power cycle [ 1152.765603][ T5857] usb 8-1: Using ep0 maxpacket: 16 [ 1152.841662][ T5857] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1152.912306][ T5857] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1152.955134][ T5857] usb 8-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 1153.023569][ T5857] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1153.037311][ T10] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1153.084861][ T10] usb 7-1: no configurations [ 1153.118570][ T10] usb 7-1: can't read configurations, error -22 [ 1153.174225][ T5857] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1153.254213][ T5857] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1153.323602][ T5857] usb 8-1: Manufacturer: syz [ 1153.370910][ T10] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1153.422621][ T5857] usb 8-1: config 0 descriptor?? [ 1153.467341][ T10] usb 7-1: no configurations [ 1153.507217][ T10] usb 7-1: can't read configurations, error -22 [ 1153.555980][ T10] usb usb7-port1: unable to enumerate USB device [ 1154.888181][T20526] openvswitch: netlink: IP tunnel dst address not specified [ 1155.219149][T20534] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3600'. [ 1155.423005][T18473] usb 8-1: USB disconnect, device number 23 [ 1156.175401][T18473] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1156.745471][T18473] usb 8-1: Using ep0 maxpacket: 16 [ 1156.752147][T18473] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1156.762775][T18473] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1156.776840][T18473] usb 8-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 1156.786644][T18473] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.058969][T18473] usb 8-1: config 0 descriptor?? [ 1157.070162][T18473] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1158.227411][T20563] netlink: 'syz.5.3607': attribute type 4 has an invalid length. [ 1158.599063][ T29] audit: type=1400 audit(2000000095.040:2189): avc: denied { bind } for pid=20564 comm="syz.5.3608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1158.706938][ T5808] Bluetooth: hci2: command 0x0406 tx timeout [ 1159.430638][T20569] 9p: Could not find request transport: nd [ 1159.621724][ T5918] usb 8-1: USB disconnect, device number 24 [ 1159.631307][T20574] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.3610'. [ 1160.213045][T20589] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3617'. [ 1161.655500][T15170] block nbd0: Possible stuck request ffff888027c40000: control (read@0,1024B). Runtime 300 seconds [ 1161.666725][T15170] block nbd0: Possible stuck request ffff888027c40200: control (read@1024,1024B). Runtime 300 seconds [ 1161.679093][T15170] block nbd0: Possible stuck request ffff888027c40400: control (read@2048,1024B). Runtime 300 seconds [ 1161.690855][T15170] block nbd0: Possible stuck request ffff888027c40600: control (read@3072,1024B). Runtime 300 seconds [ 1162.695457][ T5792] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1162.845417][ T5792] usb 3-1: Using ep0 maxpacket: 16 [ 1162.857578][ T5792] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1162.870102][ T5792] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1162.883577][ T5792] usb 3-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 1162.892735][ T5792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1162.910932][ T5792] usb 3-1: config 0 descriptor?? [ 1162.918704][ T5792] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1163.417272][ T29] audit: type=1400 audit(2000000099.860:2190): avc: denied { read write } for pid=20615 comm="syz.6.3623" name="mouse0" dev="devtmpfs" ino=927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1163.442867][ T29] audit: type=1400 audit(2000000099.860:2191): avc: denied { open } for pid=20615 comm="syz.6.3623" path="/dev/input/mouse0" dev="devtmpfs" ino=927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1164.197781][ T29] audit: type=1400 audit(2000000100.610:2192): avc: denied { write } for pid=20633 comm="syz.7.3625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1164.450209][ T5792] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1164.473179][ T29] audit: type=1400 audit(2000000100.610:2193): avc: denied { nlmsg_write } for pid=20633 comm="syz.7.3625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1164.618122][ T5792] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 1164.626465][ T5792] usb 7-1: config 0 has no interface number 0 [ 1164.632638][ T5792] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1164.645952][ T5792] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1164.655106][ T5792] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.663255][ T5792] usb 7-1: Product: syz [ 1164.667687][ T5792] usb 7-1: Manufacturer: syz [ 1164.672686][ T5792] usb 7-1: SerialNumber: syz [ 1164.681319][ T5792] usb 7-1: config 0 descriptor?? [ 1164.693769][ T5792] yurex 7-1:0.50: USB YUREX device now attached to Yurex #0 [ 1164.825568][T18473] usb 6-1: new full-speed USB device number 97 using dummy_hcd [ 1165.178500][T18473] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1165.260777][T18473] usb 6-1: not running at top speed; connect to a high speed hub [ 1165.274046][T18473] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1165.294955][T18473] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1165.325242][T18473] usb 6-1: string descriptor 0 read error: -22 [ 1165.345658][T18473] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1165.355103][T18473] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1165.507905][T18473] usb 6-1: 0:2 : does not exist [ 1165.725750][ T5918] usb 3-1: USB disconnect, device number 11 [ 1165.920408][T20640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1165.967142][T20640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1166.318846][T18473] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1166.339805][T18473] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1166.355035][T18473] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 1166.369343][T20654] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3631'. [ 1166.425716][T18473] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1166.449553][T20655] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3631'. [ 1166.466603][T18473] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1166.539684][T18473] usb 6-1: USB disconnect, device number 97 [ 1167.110713][ C0] usb 7-1: yurex_control_callback - control failed: -2 [ 1167.181919][ T5878] usb 7-1: USB disconnect, device number 29 [ 1167.215216][ T5878] yurex 7-1:0.50: USB YUREX #0 now disconnected [ 1167.353121][ T29] audit: type=1400 audit(2000000103.790:2194): avc: denied { read write } for pid=20662 comm="syz.5.3634" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1167.426046][ T29] audit: type=1400 audit(2000000103.790:2195): avc: denied { ioctl open } for pid=20662 comm="syz.5.3634" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1167.598065][ T5808] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1167.609962][ T5808] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1167.619193][ T5808] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1167.632064][ T5808] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1167.785964][ T5808] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1167.886456][T20670] wlan0 speed is unknown, defaulting to 1000 [ 1170.219119][T18472] Bluetooth: hci5: command tx timeout [ 1170.432719][T20670] chnl_net:caif_netlink_parms(): no params data found [ 1170.545056][T20699] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3640'. [ 1170.554389][T20699] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3640'. [ 1171.523322][T20702] vivid-003: kernel_thread() failed [ 1171.766179][T20707] mkiss: ax0: crc mode is auto. [ 1171.813717][T20670] bridge0: port 1(bridge_slave_0) entered blocking state [ 1171.899640][ T29] audit: type=1400 audit(2000000000.550:2196): avc: denied { mac_admin } for pid=20706 comm="syz.5.3645" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1171.899945][T20710] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1171.901141][T20670] bridge0: port 1(bridge_slave_0) entered disabled state [ 1171.955575][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1172.027107][T20670] bridge_slave_0: entered allmulticast mode [ 1172.073877][T20670] bridge_slave_0: entered promiscuous mode [ 1172.230381][T20670] bridge0: port 2(bridge_slave_1) entered blocking state [ 1172.265703][ T5808] Bluetooth: hci5: command tx timeout [ 1172.275909][T20670] bridge0: port 2(bridge_slave_1) entered disabled state [ 1172.301397][T20670] bridge_slave_1: entered allmulticast mode [ 1172.309100][ T29] audit: type=1400 audit(2000000000.970:2197): avc: denied { lock } for pid=20714 comm="syz.2.3648" path="socket:[71416]" dev="sockfs" ino=71416 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1172.316945][T20670] bridge_slave_1: entered promiscuous mode [ 1172.825765][ T29] audit: type=1400 audit(2000000001.110:2198): avc: denied { write } for pid=20714 comm="syz.2.3648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1172.846516][ T29] audit: type=1400 audit(2000000001.170:2199): avc: denied { getopt } for pid=20714 comm="syz.2.3648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1172.915152][T20670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1172.991977][T20670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1173.351323][T20670] team0: Port device team_slave_0 added [ 1173.383123][T20670] team0: Port device team_slave_1 added [ 1173.464028][T20670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1173.516272][T20670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1173.625203][T20670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1173.644938][ T29] audit: type=1400 audit(2000000002.300:2200): avc: denied { create } for pid=20730 comm="syz.5.3650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1173.666827][T20670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1173.673912][T20670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1173.703310][T20670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1173.844198][ T29] audit: type=1400 audit(2000000002.500:2201): avc: denied { read write } for pid=20728 comm="syz.7.3643" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1174.050883][ T29] audit: type=1400 audit(2000000002.660:2202): avc: denied { open } for pid=20728 comm="syz.7.3643" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1174.269713][T20670] hsr_slave_0: entered promiscuous mode [ 1174.287461][T20670] hsr_slave_1: entered promiscuous mode [ 1174.303388][T20670] debugfs: 'hsr0' already exists in 'hsr' [ 1174.311257][T20670] Cannot create hsr debugfs directory [ 1174.346166][ T5808] Bluetooth: hci5: command tx timeout [ 1176.426301][ T5808] Bluetooth: hci5: command tx timeout [ 1176.838851][ T29] audit: type=1400 audit(2000000001.970:2203): avc: denied { watch_reads } for pid=20763 comm="syz.2.3659" path="/100" dev="tmpfs" ino=547 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1176.922663][T20773] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20773 comm=syz.2.3659 [ 1176.959790][T20766] loop8: detected capacity change from 0 to 4 [ 1176.969736][T20766] Dev loop8: unable to read RDB block 4 [ 1176.980054][T20766] loop8: unable to read partition table [ 1176.992340][T20766] loop8: partition table beyond EOD, truncated [ 1177.018573][T20766] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1177.855458][ T5918] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1177.950454][ T29] audit: type=1400 audit(2000000003.090:2204): avc: denied { load_policy } for pid=20790 comm="syz.6.3655" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1177.950854][T20791] SELinux: policydb magic number 0x9f0965f3 does not match expected magic number 0xf97cff8c [ 1177.981517][T20791] SELinux: failed to load policy [ 1177.989157][ T29] audit: type=1400 audit(2000000003.130:2205): avc: denied { append } for pid=20790 comm="syz.6.3655" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1178.015380][ T5918] usb 3-1: Using ep0 maxpacket: 8 [ 1178.027515][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1178.038390][ T5918] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1178.073677][ T5918] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1178.120596][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.141728][ T5918] usb 3-1: Product: syz [ 1178.146231][ T5918] usb 3-1: Manufacturer: syz [ 1178.151145][ T5918] usb 3-1: SerialNumber: syz [ 1179.160735][ T5918] usb 3-1: config 0 descriptor?? [ 1179.536728][ T29] audit: type=1400 audit(2000000001.100:2206): avc: denied { name_bind } for pid=20813 comm="syz.6.3666" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1179.623107][ T5878] usb 3-1: USB disconnect, device number 12 [ 1179.953734][ T29] audit: type=1400 audit(2000000001.490:2207): avc: denied { read } for pid=20822 comm="syz.5.3665" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1179.985616][ T29] audit: type=1400 audit(2000000001.490:2208): avc: denied { open } for pid=20822 comm="syz.5.3665" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1180.009824][ T29] audit: type=1400 audit(2000000001.510:2209): avc: denied { read } for pid=20822 comm="syz.5.3665" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1180.046885][ T29] audit: type=1400 audit(2000000001.510:2210): avc: denied { open } for pid=20822 comm="syz.5.3665" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1180.868300][ T29] audit: type=1400 audit(2000000002.420:2211): avc: denied { ioctl } for pid=20841 comm="syz.2.3670" path="socket:[71665]" dev="sockfs" ino=71665 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1181.168157][ T29] audit: type=1400 audit(2000000002.730:2212): avc: denied { name_connect } for pid=20850 comm="syz.6.3672" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1182.298709][T20861] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3673'. [ 1182.308072][T20861] openvswitch: netlink: Missing key (keys=200040, expected=2000) [ 1182.692375][T20823] bridge0: port 2(bridge_slave_1) entered disabled state [ 1182.699829][T20823] bridge0: port 1(bridge_slave_0) entered disabled state [ 1182.776667][T20823] bridge0: entered allmulticast mode [ 1183.186709][T20670] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1183.228972][T20670] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1183.268832][T20670] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1183.300928][T20670] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1183.732907][T20670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1183.786386][T20670] 8021q: adding VLAN 0 to HW filter on device team0 [ 1183.813116][T12126] bridge0: port 1(bridge_slave_0) entered blocking state [ 1183.820322][T12126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1183.898881][T12126] bridge0: port 2(bridge_slave_1) entered blocking state [ 1183.905995][T12126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1184.375432][ T5918] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1184.446805][T20905] wlan0 speed is unknown, defaulting to 1000 [ 1184.585619][ T5918] usb 7-1: Using ep0 maxpacket: 16 [ 1184.608741][ T5918] usb 7-1: config 0 has no interfaces? [ 1184.685380][T20922] FAULT_INJECTION: forcing a failure. [ 1184.685380][T20922] name failslab, interval 1, probability 0, space 0, times 0 [ 1184.698052][T20922] CPU: 1 UID: 0 PID: 20922 Comm: syz.5.3683 Tainted: G L syzkaller #0 PREEMPT(full) [ 1184.698081][T20922] Tainted: [L]=SOFTLOCKUP [ 1184.698087][T20922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1184.698098][T20922] Call Trace: [ 1184.698105][T20922] [ 1184.698112][T20922] dump_stack_lvl+0x100/0x190 [ 1184.698147][T20922] should_fail_ex.cold+0x5/0xa [ 1184.698170][T20922] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1184.698193][T20922] should_failslab+0xc2/0x120 [ 1184.698211][T20922] __kmalloc_noprof+0xe0/0x850 [ 1184.698236][T20922] ? tomoyo_encode2+0x1c5/0x3c0 [ 1184.698261][T20922] tomoyo_realpath_from_path+0xb6/0x690 [ 1184.698290][T20922] tomoyo_mount_acl+0x1b6/0x8b0 [ 1184.698310][T20922] ? lock_acquire+0x1cf/0x380 [ 1184.698337][T20922] ? find_held_lock+0x2b/0x80 [ 1184.698360][T20922] ? finish_task_switch.isra.0+0x200/0xb80 [ 1184.698387][T20922] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 1184.698407][T20922] ? finish_task_switch.isra.0+0x205/0xb80 [ 1184.698432][T20922] ? finish_task_switch.isra.0+0x205/0xb80 [ 1184.698458][T20922] ? rcu_is_watching+0x12/0xc0 [ 1184.698507][T20922] ? tomoyo_domain+0xb2/0x150 [ 1184.698531][T20922] ? tomoyo_profile+0x47/0x60 [ 1184.698558][T20922] tomoyo_mount_permission+0x214/0x460 [ 1184.698578][T20922] ? tomoyo_mount_permission+0x1f6/0x460 [ 1184.698600][T20922] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 1184.698637][T20922] security_sb_mount+0xdd/0x270 [ 1184.698659][T20922] path_mount+0x158/0x23d0 [ 1184.698687][T20922] ? __pfx_path_mount+0x10/0x10 [ 1184.698707][T20922] ? lockdep_hardirqs_on+0x78/0x100 [ 1184.698731][T20922] ? putname+0xb1/0x110 [ 1184.698749][T20922] ? kmem_cache_free+0x124/0x6a0 [ 1184.698780][T20922] ? __x64_sys_mount+0x293/0x310 [ 1184.698801][T20922] __x64_sys_mount+0x293/0x310 [ 1184.698823][T20922] ? __pfx___x64_sys_mount+0x10/0x10 [ 1184.698853][T20922] do_syscall_64+0x106/0xf80 [ 1184.698872][T20922] ? clear_bhb_loop+0x40/0x90 [ 1184.698894][T20922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.698912][T20922] RIP: 0033:0x7f8b3b59c799 [ 1184.698928][T20922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1184.698945][T20922] RSP: 002b:00007f8b3c44b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1184.698963][T20922] RAX: ffffffffffffffda RBX: 00007f8b3b816180 RCX: 00007f8b3b59c799 [ 1184.698975][T20922] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 0000200000000140 [ 1184.698986][T20922] RBP: 00007f8b3c44b090 R08: 0000000000000000 R09: 0000000000000000 [ 1184.698997][T20922] R10: 0000000000208800 R11: 0000000000000246 R12: 0000000000000001 [ 1184.699008][T20922] R13: 00007f8b3b816218 R14: 00007f8b3b816180 R15: 00007ffe8e3527c8 [ 1184.699034][T20922] [ 1184.699055][T20922] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1185.003710][ T5918] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1185.037499][ T5918] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1185.072955][ T5918] usb 7-1: Manufacturer: syz [ 1185.121410][ T5918] usb 7-1: config 0 descriptor?? [ 1185.501921][T20670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1185.646497][ T29] audit: type=1400 audit(2000000003.950:2213): avc: denied { mount } for pid=20931 comm="syz.5.3685" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1185.791273][ T29] audit: type=1400 audit(2000000003.980:2214): avc: denied { create } for pid=20931 comm="syz.5.3685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1185.811869][ T5918] usb 7-1: USB disconnect, device number 30 [ 1185.812036][T20932] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1185.844213][T20932] CIFS mount error: No usable UNC path provided in device string! [ 1185.844213][T20932] [ 1185.854488][T20932] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1185.865438][ T29] audit: type=1400 audit(2000000003.980:2215): avc: denied { ioctl } for pid=20931 comm="syz.5.3685" path="socket:[72402]" dev="sockfs" ino=72402 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1186.317448][T20670] veth0_vlan: entered promiscuous mode [ 1186.356837][T20966] binder: 20962:20966 ioctl 4018620d 0 returned -22 [ 1186.372034][T20670] veth1_vlan: entered promiscuous mode [ 1186.434994][T20670] veth0_macvtap: entered promiscuous mode [ 1187.009868][T20670] veth1_macvtap: entered promiscuous mode [ 1187.446860][ T29] audit: type=1400 audit(2000000005.760:2216): avc: denied { ioctl } for pid=20962 comm="syz.7.3687" path="socket:[72547]" dev="sockfs" ino=72547 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1187.522907][T20670] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1187.556525][T20670] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1187.587890][T18646] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.777566][T18646] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1188.063128][T20999] FAULT_INJECTION: forcing a failure. [ 1188.063128][T20999] name failslab, interval 1, probability 0, space 0, times 0 [ 1188.098670][T20999] CPU: 1 UID: 0 PID: 20999 Comm: syz.6.3695 Tainted: G L syzkaller #0 PREEMPT(full) [ 1188.098703][T20999] Tainted: [L]=SOFTLOCKUP [ 1188.098708][T20999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1188.098717][T20999] Call Trace: [ 1188.098723][T20999] [ 1188.098730][T20999] dump_stack_lvl+0x100/0x190 [ 1188.098764][T20999] should_fail_ex.cold+0x5/0xa [ 1188.098787][T20999] should_failslab+0xc2/0x120 [ 1188.098805][T20999] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1188.098827][T20999] ? do_getname+0x35/0x390 [ 1188.098853][T20999] do_getname+0x35/0x390 [ 1188.098877][T20999] user_path_at+0x26/0x60 [ 1188.098895][T20999] __x64_sys_mount+0x1fb/0x310 [ 1188.098919][T20999] ? __pfx___x64_sys_mount+0x10/0x10 [ 1188.098946][T20999] do_syscall_64+0x106/0xf80 [ 1188.098964][T20999] ? clear_bhb_loop+0x40/0x90 [ 1188.098986][T20999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1188.099002][T20999] RIP: 0033:0x7fa81c59c799 [ 1188.099017][T20999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1188.099033][T20999] RSP: 002b:00007fa81d48d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1188.099050][T20999] RAX: ffffffffffffffda RBX: 00007fa81c815fa0 RCX: 00007fa81c59c799 [ 1188.099062][T20999] RDX: 0000200000000200 RSI: 0000200000000100 RDI: 0000200000000040 [ 1188.099073][T20999] RBP: 00007fa81d48d090 R08: 0000000000000000 R09: 0000000000000000 [ 1188.099082][T20999] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 1188.099092][T20999] R13: 00007fa81c816038 R14: 00007fa81c815fa0 R15: 00007fff31916e08 [ 1188.099116][T20999] [ 1188.429702][ T29] audit: type=1400 audit(2000000006.650:2217): avc: denied { connect } for pid=20985 comm="syz.2.3694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1188.728978][T18646] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1188.849098][T18646] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1188.876874][ T5792] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1189.097634][ T5792] usb 7-1: Using ep0 maxpacket: 32 [ 1189.113207][ T5792] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1189.179714][ T5792] usb 7-1: config 5 has an invalid interface number: 204 but max is 0 [ 1189.192762][ T5792] usb 7-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1189.478602][ T5792] usb 7-1: config 5 has no interface number 0 [ 1189.517353][ T5792] usb 7-1: config 5 interface 204 altsetting 249 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1189.536287][ T5792] usb 7-1: config 5 interface 204 has no altsetting 0 [ 1189.545035][ T5792] usb 7-1: language id specifier not provided by device, defaulting to English [ 1189.582483][ T5792] usb 7-1: New USB device found, idVendor=0bb4, idProduct=0a83, bcdDevice= d.65 [ 1189.611968][ T5792] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1189.632759][ T5792] usb 7-1: SerialNumber: é¾·é‘橂㔬ᑇ혹괢㩑禄쑔埻䀴朶꼢 [ 1189.681381][T12126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1189.711694][T12126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1189.753628][ T8627] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1189.763331][ T8627] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1189.890517][ T5792] uvcvideo 7-1:5.204: Found UVC 0.00 device (0bb4:0a83) [ 1189.925385][ T5792] uvcvideo 7-1:5.204: No valid video chain found. [ 1189.956462][ T5792] usb 7-1: USB disconnect, device number 31 [ 1191.060771][ T5918] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1191.285435][ T5918] usb 5-1: Using ep0 maxpacket: 32 [ 1191.320531][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1191.357519][ T5918] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1191.372101][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.454023][ T5918] usb 5-1: config 0 descriptor?? [ 1191.529233][ T5918] hub 5-1:0.0: USB hub found [ 1191.743712][ T5918] hub 5-1:0.0: 1 port detected [ 1192.410388][T21073] infiniband syz2: set active [ 1192.415237][T21073] infiniband syz2: added bridge_slave_1 [ 1192.445796][ T29] audit: type=1400 audit(2000000010.760:2218): avc: denied { getopt } for pid=21067 comm="syz.6.3707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1192.484014][T21073] RDS/IB: syz2: added [ 1192.488073][T21073] smc: adding ib device syz2 with port count 1 [ 1192.494312][T21073] smc: ib device syz2 port 1 has no pnetid [ 1192.819930][T15170] block nbd0: Possible stuck request ffff888027c40000: control (read@0,1024B). Runtime 330 seconds [ 1192.836393][T15170] block nbd0: Possible stuck request ffff888027c40200: control (read@1024,1024B). Runtime 330 seconds [ 1192.849573][T15170] block nbd0: Possible stuck request ffff888027c40400: control (read@2048,1024B). Runtime 330 seconds [ 1192.861730][T15170] block nbd0: Possible stuck request ffff888027c40600: control (read@3072,1024B). Runtime 330 seconds [ 1193.554856][ T29] audit: type=1400 audit(2000000011.860:2219): avc: denied { connect } for pid=21081 comm="syz.2.3710" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1193.583048][T21084] comedi comedi0: comedi_config --init_data is deprecated [ 1193.774473][ T5918] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 1193.807449][ T5878] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1193.812178][ T5918] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 1194.011176][ T5918] usbhid 5-1:0.0: can't add hid device: -71 [ 1194.024268][ T5918] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1194.137654][ T5878] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1194.148077][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.159685][ T29] audit: type=1400 audit(2000000012.470:2220): avc: denied { search } for pid=21099 comm="cmp" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1194.188434][ T5878] usb 3-1: config 0 descriptor?? [ 1194.192138][ T5918] usb 5-1: USB disconnect, device number 26 [ 1194.225108][ T5878] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1194.294209][ T29] audit: type=1400 audit(2000000012.490:2221): avc: denied { read } for pid=21099 comm="cmp" name="resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1194.368151][T21089] netlink: 'syz.7.3714': attribute type 21 has an invalid length. [ 1194.376180][T21089] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3714'. [ 1194.387832][T21089] netlink: 'syz.7.3714': attribute type 21 has an invalid length. [ 1194.395717][T21089] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3714'. [ 1194.436322][ T29] audit: type=1400 audit(2000000012.490:2222): avc: denied { open } for pid=21099 comm="cmp" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1194.458933][ T5878] usb 3-1: USB disconnect, device number 13 [ 1194.473087][ T29] audit: type=1400 audit(2000000012.490:2223): avc: denied { getattr } for pid=21099 comm="cmp" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1194.604625][ T29] audit: type=1400 audit(2000000012.510:2224): avc: denied { ioctl } for pid=21081 comm="syz.2.3710" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1194.647746][ T29] audit: type=1400 audit(2000000012.560:2225): avc: denied { read write } for pid=19610 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1194.703312][T21116] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3719'. [ 1194.729522][ T29] audit: type=1400 audit(2000000012.560:2226): avc: denied { open } for pid=19610 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1194.759117][T21116] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3719'. [ 1194.785767][ T29] audit: type=1400 audit(2000000012.560:2227): avc: denied { ioctl } for pid=19610 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1195.181944][T21135] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3722'. [ 1197.688230][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 1197.688247][ T29] audit: type=1400 audit(2000000016.000:2306): avc: denied { write } for pid=21176 comm="syz.5.3734" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1197.718478][T21187] binder: 21184:21187 ioctl c0306201 200000000040 returned -22 [ 1197.815594][ T29] audit: type=1400 audit(2000000016.000:2307): avc: denied { read } for pid=21184 comm="syz.4.3737" name="binder0" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1197.915753][T21193] ptrace attach of "./syz-executor exec"[19610] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ   fs  8  A € \x09 Û  þÿÿú ÿÿÿÿ 1 [ 1197.927568][ T29] audit: type=1400 audit(2000000016.000:2308): avc: denied { open } for pid=21184 comm="syz.4.3737" path="/dev/binderfs/binder0" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1198.345844][ T29] audit: type=1400 audit(2000000016.000:2309): avc: denied { ioctl } for pid=21184 comm="syz.4.3737" path="/dev/binderfs/binder0" dev="binder" ino=22 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1198.497301][ T29] audit: type=1400 audit(2000000016.000:2310): avc: denied { set_context_mgr } for pid=21184 comm="syz.4.3737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1198.616742][ T29] audit: type=1400 audit(2000000016.070:2311): avc: denied { ioctl } for pid=21182 comm="syz.2.3736" path="socket:[74801]" dev="sockfs" ino=74801 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1198.811646][ T29] audit: type=1400 audit(2000000016.920:2312): avc: denied { shutdown } for pid=21199 comm="syz.7.3733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1199.116469][ T29] audit: type=1400 audit(2000000016.920:2313): avc: denied { write } for pid=21199 comm="syz.7.3733" path="socket:[74822]" dev="sockfs" ino=74822 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1199.195893][T21211] wlan0 speed is unknown, defaulting to 1000 [ 1199.305422][ T5918] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1199.478799][ T29] audit: type=1400 audit(2000000016.960:2314): avc: denied { bind } for pid=21196 comm="syz.4.3739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1199.485451][ T5918] usb 5-1: Using ep0 maxpacket: 16 [ 1199.591971][ T5918] usb 5-1: config 0 has no interfaces? [ 1199.621268][ T5918] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1199.672981][ T5918] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1199.715263][ T5918] usb 5-1: Manufacturer: syz [ 1199.740381][ T29] audit: type=1400 audit(2000000016.960:2315): avc: denied { name_bind } for pid=21196 comm="syz.4.3739" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1199.792278][ T5918] usb 5-1: config 0 descriptor?? [ 1199.825437][ T793] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1200.380223][T21236] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1200.389351][T21236] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1200.815406][ T793] usb 3-1: Using ep0 maxpacket: 32 [ 1200.869845][ T793] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1200.910034][ T793] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1200.986947][ T793] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1201.041879][ T793] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.209709][ T793] usb 3-1: config 0 descriptor?? [ 1201.332770][T21250] geneve2: entered promiscuous mode [ 1201.338098][T21250] geneve2: entered allmulticast mode [ 1202.106553][ T793] hid_parser_main: 28 callbacks suppressed [ 1202.106571][ T793] ft260 0003:0403:6030.0009: unknown main item tag 0x0 [ 1202.145489][ T793] ft260 0003:0403:6030.0009: unknown main item tag 0x0 [ 1202.359717][ T793] ft260 0003:0403:6030.0009: chip code: 0000 0000 [ 1202.604521][ T793] ft260 0003:0403:6030.0009: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 1202.792518][ T793] ft260 0003:0403:6030.0009: failed to retrieve status: -32, no wakeup [ 1202.945367][ T5878] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1203.017736][T21224] ft260 0003:0403:6030.0009: ft260_i2c_read: failed with -38 [ 1203.050015][ T5792] usb 3-1: USB disconnect, device number 14 [ 1203.131490][ T5878] usb 8-1: device descriptor read/64, error -71 [ 1203.590123][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 1203.590135][ T29] audit: type=1400 audit(2000000021.900:2327): avc: denied { getopt } for pid=21269 comm="syz.6.3750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1203.726948][ T5878] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1203.867427][ T5878] usb 8-1: device descriptor read/64, error -71 [ 1204.057888][ T5878] usb usb8-port1: attempt power cycle [ 1204.147359][ T5808] Bluetooth: hci2: unexpected event for opcode 0x1407 [ 1204.159236][ T29] audit: type=1400 audit(2000000022.460:2328): avc: denied { create } for pid=21278 comm="syz.6.3752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1204.449708][ T29] audit: type=1400 audit(2000000022.560:2329): avc: denied { bind } for pid=21278 comm="syz.6.3752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1204.474993][ T29] audit: type=1400 audit(2000000022.560:2330): avc: denied { connect } for pid=21278 comm="syz.6.3752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1204.497035][ T5878] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1204.498539][ T29] audit: type=1400 audit(2000000022.580:2331): avc: denied { accept } for pid=21278 comm="syz.6.3752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1204.529307][T21279] netlink: 'syz.6.3752': attribute type 4 has an invalid length. [ 1204.537885][ T5878] usb 8-1: device descriptor read/8, error -71 [ 1204.925643][ T5878] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1204.934038][ T29] audit: type=1400 audit(2000000023.080:2332): avc: denied { bind } for pid=21288 comm="syz.2.3755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1204.967615][ T5878] usb 8-1: device descriptor read/8, error -71 [ 1205.016513][ T29] audit: type=1400 audit(2000000023.090:2333): avc: denied { bind } for pid=21288 comm="syz.2.3755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1205.076823][ T5878] usb usb8-port1: unable to enumerate USB device [ 1205.131094][T21296] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3756'. [ 1205.140209][T21296] openvswitch: netlink: Missing key (keys=200040, expected=2000) [ 1205.369645][ T29] audit: type=1400 audit(2000000023.090:2334): avc: denied { listen } for pid=21288 comm="syz.2.3755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1205.506741][ T29] audit: type=1400 audit(2000000023.470:2335): avc: denied { bind } for pid=21290 comm="syz.6.3756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1205.555474][ T29] audit: type=1400 audit(2000000023.760:2336): avc: denied { firmware_load } for pid=21293 comm="syz.5.3757" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1206.406745][T21312] overlay: Unknown parameter 'permit_directio' [ 1206.769346][T21318] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3762'. [ 1207.467833][T21329] macvlan0: entered promiscuous mode [ 1207.496899][T21329] netlink: 'syz.2.3764': attribute type 1 has an invalid length. [ 1207.557873][T21329] netlink: 'syz.2.3764': attribute type 2 has an invalid length. [ 1208.340204][T21348] netlink: 'syz.7.3768': attribute type 4 has an invalid length. [ 1208.369261][T21349] 9p: Bad value for 'wfdno' [ 1208.395621][T21350] netlink: 'syz.7.3768': attribute type 4 has an invalid length. [ 1209.037890][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 1209.037909][ T29] audit: type=1400 audit(2000000027.350:2346): avc: denied { read } for pid=5472 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1209.057012][T21359] can0: slcan on ttyprintk. [ 1209.146916][ T5918] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 1209.321556][ T5918] usb 6-1: Using ep0 maxpacket: 32 [ 1209.333560][ T5918] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1209.365666][T21358] can0 (unregistered): slcan off ttyprintk. [ 1210.113397][ T29] audit: type=1400 audit(2000000028.350:2347): avc: denied { setopt } for pid=21363 comm="syz.2.3773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1210.133384][T18497] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1210.146004][ T5918] usb 6-1: config 5 has an invalid interface number: 13 but max is 0 [ 1210.175510][ T5918] usb 6-1: config 5 has an invalid descriptor of length 204, skipping remainder of the config [ 1210.248994][ T29] audit: type=1400 audit(2000000028.350:2348): avc: denied { bind } for pid=21363 comm="syz.2.3773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1210.286728][ T5918] usb 6-1: config 5 has no interface number 0 [ 1210.314399][ T5918] usb 6-1: config 5 interface 13 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1210.366205][T18497] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 1210.377968][T18497] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1210.387856][ T29] audit: type=1400 audit(2000000028.350:2349): avc: denied { name_bind } for pid=21363 comm="syz.2.3773" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1210.409700][ T5918] usb 6-1: config 5 interface 13 has no altsetting 0 [ 1210.418478][T18497] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1210.428743][T18497] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1210.437222][ T5918] usb 6-1: New USB device found, idVendor=0bb4, idProduct=0a83, bcdDevice= d.65 [ 1210.448884][ T29] audit: type=1400 audit(2000000028.350:2350): avc: denied { node_bind } for pid=21363 comm="syz.2.3773" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 1210.470274][T18497] usb 7-1: Manufacturer: syz [ 1210.475382][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.485577][ T5918] usb 6-1: Product: syz [ 1210.491588][ T5918] usb 6-1: Manufacturer: syz [ 1210.500742][T18497] usb 7-1: config 0 descriptor?? [ 1210.505760][ T5918] usb 6-1: SerialNumber: syz [ 1210.518848][ T29] audit: type=1400 audit(2000000028.360:2351): avc: denied { connect } for pid=21363 comm="syz.2.3773" laddr=::ffff:0.0.0.0 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1210.581613][ T29] audit: type=1400 audit(2000000028.360:2352): avc: denied { name_connect } for pid=21363 comm="syz.2.3773" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1210.608641][T18497] rc_core: IR keymap rc-hauppauge not found [ 1210.623163][T18497] Registered IR keymap rc-empty [ 1210.644778][T18497] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1210.674449][ T29] audit: type=1400 audit(2000000028.420:2353): avc: denied { setopt } for pid=21363 comm="syz.2.3773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1210.700611][T18497] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input39 [ 1210.737177][ T5918] usb 6-1: USB disconnect, device number 98 [ 1210.769621][ T29] audit: type=1400 audit(2000000029.070:2354): avc: denied { read } for pid=5162 comm="acpid" name="event4" dev="devtmpfs" ino=4431 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1210.809100][T18497] usb 7-1: USB disconnect, device number 32 [ 1210.830111][ T29] audit: type=1400 audit(2000000029.070:2355): avc: denied { open } for pid=5162 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=4431 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1210.864570][T18473] usb 5-1: USB disconnect, device number 27 [ 1210.969547][T21385] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3778'. [ 1211.466091][T18473] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1211.757731][T18473] usb 5-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1211.818802][T18473] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1211.853408][T18473] usb 5-1: string descriptor 0 read error: -22 [ 1211.885831][T18473] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.40 [ 1211.925466][T18473] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1212.115524][T18497] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 1212.376057][T18497] usb 6-1: Using ep0 maxpacket: 16 [ 1212.551570][T21392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1212.579011][T18497] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1212.624388][T18497] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1212.687263][T21392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1212.722100][T18497] usb 6-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 1212.731749][T18473] lenovo 0003:17EF:6047.000A: unknown main item tag 0x0 [ 1212.766110][T18473] lenovo 0003:17EF:6047.000A: unknown main item tag 0x0 [ 1212.792062][T18497] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1212.807899][T18473] lenovo 0003:17EF:6047.000A: unknown main item tag 0x0 [ 1212.838274][T18497] usb 6-1: config 0 descriptor?? [ 1212.846566][T18473] lenovo 0003:17EF:6047.000A: unknown main item tag 0x0 [ 1212.862010][T18497] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1212.874280][T18473] lenovo 0003:17EF:6047.000A: unknown main item tag 0x0 [ 1212.910546][T18473] lenovo 0003:17EF:6047.000A: unknown main item tag 0x0 [ 1213.254525][T18473] lenovo 0003:17EF:6047.000A: unknown main item tag 0x0 [ 1213.292918][T18473] lenovo 0003:17EF:6047.000A: unknown main item tag 0x0 [ 1213.426971][T18473] lenovo 0003:17EF:6047.000A: unknown main item tag 0x0 [ 1213.487783][T18473] lenovo 0003:17EF:6047.000A: unknown main item tag 0x0 [ 1213.742311][T18473] lenovo 0003:17EF:6047.000A: hidraw0: USB HID v0.01 Device [HID 17ef:6047] on usb-dummy_hcd.4-1/input0 [ 1213.800981][T18473] lenovo 0003:17EF:6047.000A: Failed to switch F7/9/11 mode: -71 [ 1213.868392][T18473] lenovo 0003:17EF:6047.000A: Failed to switch middle button: -71 [ 1213.920050][T18473] lenovo 0003:17EF:6047.000A: Fn-lock setting failed: -71 [ 1213.935498][ T24] usb 7-1: new full-speed USB device number 33 using dummy_hcd [ 1213.964425][T18473] lenovo 0003:17EF:6047.000A: Sensitivity setting failed: -71 [ 1213.973126][T21443] random: crng reseeded on system resumption [ 1214.001822][T18473] usb 5-1: USB disconnect, device number 28 [ 1214.008540][T21445] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1214.085556][ T24] usb 7-1: device descriptor read/64, error -71 [ 1214.216310][T18497] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1214.405408][ T24] usb 7-1: new full-speed USB device number 34 using dummy_hcd [ 1214.441136][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 1214.441154][ T29] audit: type=1400 audit(2000000032.750:2368): avc: denied { ioctl } for pid=21442 comm="syz.2.3790" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1214.567221][ T24] usb 7-1: device descriptor read/64, error -71 [ 1214.598497][T18497] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1214.611058][T18497] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1214.624713][T18497] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1214.639191][T18497] usb 8-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 1214.649780][T18497] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.662225][T18497] usb 8-1: config 0 descriptor?? [ 1214.686573][ T24] usb usb7-port1: attempt power cycle [ 1214.776433][ T5878] usb 6-1: USB disconnect, device number 99 [ 1214.912023][ T29] audit: type=1400 audit(2000000033.220:2369): avc: denied { ioctl } for pid=21424 comm="syz.7.3787" path="socket:[75112]" dev="sockfs" ino=75112 ioctlcmd=0xf508 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1214.968328][ T29] audit: type=1400 audit(2000000033.280:2370): avc: denied { setopt } for pid=21455 comm="syz.2.3793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1214.990198][T18472] Bluetooth: hci4: command 0x0406 tx timeout [ 1215.045680][ T24] usb 7-1: new full-speed USB device number 35 using dummy_hcd [ 1215.366343][ T24] usb 7-1: device descriptor read/8, error -71 [ 1216.719552][ T24] usb 7-1: new full-speed USB device number 36 using dummy_hcd [ 1216.775376][ T5792] usb 6-1: new full-speed USB device number 100 using dummy_hcd [ 1216.875755][T18497] usbhid 8-1:0.0: can't add hid device: -71 [ 1216.923401][T18497] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1216.957708][T18497] usb 8-1: USB disconnect, device number 29 [ 1216.965873][ T5792] usb 6-1: config 0 has an invalid interface number: 113 but max is 0 [ 1216.983372][ T24] usb 7-1: device not accepting address 36, error -71 [ 1216.991626][ T5792] usb 6-1: config 0 has no interface number 0 [ 1216.997505][ T29] audit: type=1400 audit(2000000035.290:2371): avc: denied { ioctl } for pid=21470 comm="syz.6.3799" path="/dev/input/event3" dev="devtmpfs" ino=928 ioctlcmd=0x4502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1217.033394][ T24] usb usb7-port1: unable to enumerate USB device [ 1217.033843][ T5792] usb 6-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 1217.168259][ T5792] usb 6-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1217.168460][ T5792] usb 6-1: config 0 interface 113 has no altsetting 0 [ 1217.168959][T21477] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3798'. [ 1217.169000][T21477] openvswitch: netlink: Missing key (keys=200040, expected=2000) [ 1217.373607][ T5792] usb 6-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1217.373628][ T5792] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.373639][ T5792] usb 6-1: Product: syz [ 1217.373649][ T5792] usb 6-1: Manufacturer: syz [ 1217.373658][ T5792] usb 6-1: SerialNumber: syz [ 1217.375092][ T5792] usb 6-1: config 0 descriptor?? [ 1217.399826][ C0] usb 6-1: NFC: Urb failure (status -71) [ 1217.400211][ T5792] usb 6-1: NFC: Unable to get FW version [ 1217.431598][ T29] audit: type=1400 audit(2000000035.290:2372): avc: denied { nlmsg_read } for pid=21470 comm="syz.6.3799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1217.553311][ T5792] pn533_usb 6-1:0.113: probe with driver pn533_usb failed with error -90 [ 1217.562015][ T29] audit: type=1400 audit(2000000035.300:2373): avc: denied { create } for pid=21470 comm="syz.6.3799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 1217.605894][ T29] audit: type=1400 audit(2000000035.530:2374): avc: denied { mounton } for pid=21455 comm="syz.2.3793" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1217.635405][ T5857] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1217.683980][ T29] audit: type=1400 audit(2000000035.990:2375): avc: denied { connect } for pid=21488 comm="syz.6.3802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1217.721416][ T29] audit: type=1400 audit(2000000035.990:2376): avc: denied { append } for pid=21488 comm="syz.6.3802" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1217.757639][ T29] audit: type=1400 audit(2000000036.030:2377): avc: denied { ioctl } for pid=21485 comm="syz.7.3801" path="socket:[74669]" dev="sockfs" ino=74669 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1218.423416][T21490] ubi: mtd0 is already attached to ubi31 [ 1218.549182][ T5857] usb 3-1: device descriptor read/all, error -71 [ 1218.697295][T21497] binder: 21495:21497 ioctl c0306201 0 returned -14 [ 1218.807597][ T5792] usb 6-1: USB disconnect, device number 100 [ 1219.042393][T21500] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3805'. [ 1219.244407][T21508] : entered promiscuous mode [ 1219.865545][ T977] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1220.031196][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 1220.031221][ T29] audit: type=1400 audit(2000000038.330:2382): avc: denied { mount } for pid=21523 comm="syz.6.3812" name="/" dev="ramfs" ino=75200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1220.060035][ T977] usb 5-1: device descriptor read/64, error -71 [ 1220.067607][ T29] audit: type=1804 audit(2000000038.340:2383): pid=21524 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.3812" name="bus" dev="ramfs" ino=75201 res=1 errno=0 [ 1220.105698][ T29] audit: type=1804 audit(2000000038.340:2384): pid=21524 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.6.3812" name="bus" dev="ramfs" ino=75201 res=1 errno=0 [ 1220.305342][ T977] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1220.829536][ T977] usb 5-1: device descriptor read/64, error -71 [ 1220.932311][ T29] audit: type=1400 audit(2000000039.240:2385): avc: denied { name_bind } for pid=21528 comm="syz.5.3811" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1220.954678][ T977] usb usb5-port1: attempt power cycle [ 1220.997231][T21529] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3811'. [ 1221.104172][ T29] audit: type=1400 audit(2000000039.410:2386): avc: denied { ioctl } for pid=21538 comm="syz.6.3816" path="socket:[75242]" dev="sockfs" ino=75242 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1221.233229][ T5792] usb 8-1: new full-speed USB device number 30 using dummy_hcd [ 1221.315474][ T977] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1221.491494][ T977] usb 5-1: device descriptor read/8, error -71 [ 1221.507725][ T5792] usb 8-1: config 0 has an invalid interface number: 113 but max is 0 [ 1221.518287][ T5792] usb 8-1: config 0 has no interface number 0 [ 1221.524776][ T5792] usb 8-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 1221.546249][ T5792] usb 8-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1221.556587][ T5792] usb 8-1: config 0 interface 113 has no altsetting 0 [ 1221.566436][ T5792] usb 8-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1221.582354][ T5792] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.592369][ T5792] usb 8-1: Product: syz [ 1221.596882][ T5792] usb 8-1: Manufacturer: syz [ 1221.601526][ T5792] usb 8-1: SerialNumber: syz [ 1221.623386][ T5792] usb 8-1: config 0 descriptor?? [ 1221.644079][ C0] usb 8-1: NFC: Urb failure (status -71) [ 1221.658702][ T5792] usb 8-1: NFC: Unable to get FW version [ 1221.667975][ T5792] pn533_usb 8-1:0.113: probe with driver pn533_usb failed with error -90 [ 1221.707538][ T5918] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1221.746149][ T977] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1221.766029][ T977] usb 5-1: device descriptor read/8, error -71 [ 1221.861671][ T29] audit: type=1400 audit(2000000040.170:2387): avc: denied { setopt } for pid=21545 comm="syz.6.3819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1221.875394][ T5918] usb 3-1: Using ep0 maxpacket: 32 [ 1221.891032][ T5918] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1221.891624][ T977] usb usb5-port1: unable to enumerate USB device [ 1221.901204][ T5918] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1221.901251][ T5918] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 1221.901274][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1221.944196][ T5918] usb 3-1: config 0 descriptor?? [ 1222.457175][T21559] sctp: [Deprecated]: syz.2.3817 (pid 21559) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1222.457175][T21559] Use struct sctp_sack_info instead [ 1222.777770][ T29] audit: type=1400 audit(2000000041.090:2388): avc: denied { getopt } for pid=21565 comm="syz.4.3825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1222.884428][T21567] befs: (loop13): No write support. Marking filesystem read-only [ 1222.897062][T21567] befs: (loop13): unable to read superblock [ 1222.980042][ T29] audit: type=1400 audit(2000000041.180:2389): avc: denied { create } for pid=21562 comm="syz.6.3824" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1223.004826][ T29] audit: type=1400 audit(2000000041.290:2390): avc: denied { create } for pid=21562 comm="syz.6.3824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1223.045924][ T29] audit: type=1400 audit(2000000041.360:2391): avc: denied { setopt } for pid=21565 comm="syz.4.3825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1223.185440][T15170] block nbd0: Possible stuck request ffff888027c40000: control (read@0,1024B). Runtime 360 seconds [ 1223.196304][T15170] block nbd0: Possible stuck request ffff888027c40200: control (read@1024,1024B). Runtime 360 seconds [ 1223.207944][T15170] block nbd0: Possible stuck request ffff888027c40400: control (read@2048,1024B). Runtime 360 seconds [ 1223.219006][T15170] block nbd0: Possible stuck request ffff888027c40600: control (read@3072,1024B). Runtime 360 seconds [ 1223.666852][T21574] pimreg: entered allmulticast mode [ 1223.692230][T21574] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1223.945226][ T977] usb 8-1: USB disconnect, device number 30 [ 1224.165603][T18473] usb 7-1: new low-speed USB device number 37 using dummy_hcd [ 1224.345909][T18473] usb 7-1: Invalid ep0 maxpacket: 32 [ 1224.367556][ T5918] usbhid 3-1:0.0: can't add hid device: -71 [ 1224.375098][ T5918] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1224.387916][ T5918] usb 3-1: USB disconnect, device number 17 [ 1224.978844][T18473] usb 7-1: new low-speed USB device number 38 using dummy_hcd [ 1225.165613][T18473] usb 7-1: Invalid ep0 maxpacket: 32 [ 1225.262620][T18473] usb usb7-port1: attempt power cycle [ 1226.516598][T18473] usb 7-1: new low-speed USB device number 39 using dummy_hcd [ 1226.577342][T18473] usb 7-1: Invalid ep0 maxpacket: 32 [ 1226.587471][ T5808] Bluetooth: hci2: unexpected event for opcode 0x1407 [ 1226.735580][T18473] usb 7-1: new low-speed USB device number 40 using dummy_hcd [ 1226.768048][T18473] usb 7-1: Invalid ep0 maxpacket: 32 [ 1226.776023][T18473] usb usb7-port1: unable to enumerate USB device [ 1229.162731][T21578] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 1229.329296][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1229.329314][ T29] audit: type=1400 audit(2000000047.640:2393): avc: denied { listen } for pid=21641 comm="syz.6.3846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1229.406031][ T5878] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1229.645538][ T29] audit: type=1400 audit(2000000047.720:2394): avc: denied { map } for pid=21641 comm="syz.6.3846" path="socket:[75399]" dev="sockfs" ino=75399 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1229.706014][ T5878] usb 3-1: device descriptor read/64, error -71 [ 1229.731842][ T29] audit: type=1400 audit(2000000047.720:2395): avc: denied { read } for pid=21641 comm="syz.6.3846" path="socket:[75399]" dev="sockfs" ino=75399 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1229.955842][ T5878] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1229.968664][ T5857] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1230.175539][ T5857] usb 7-1: Using ep0 maxpacket: 8 [ 1230.256515][ T5878] usb 3-1: device descriptor read/64, error -71 [ 1230.270933][ T5857] usb 7-1: config 2 has an invalid interface number: 138 but max is 0 [ 1230.299524][ T5857] usb 7-1: config 2 has no interface number 0 [ 1230.330197][ T5857] usb 7-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 1230.370957][ T5857] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.379424][ T5878] usb usb3-port1: attempt power cycle [ 1230.519957][T21663] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1230.593779][ T29] audit: type=1400 audit(2000000048.810:2396): avc: denied { write } for pid=21660 comm="syz.4.3850" name="wireless" dev="proc" ino=4026533451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1231.406516][ T29] audit: type=1400 audit(2000000048.810:2397): avc: denied { create } for pid=21660 comm="syz.4.3850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1231.475645][ T5878] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1231.506120][ T5878] usb 3-1: device descriptor read/8, error -71 [ 1231.745530][ T5878] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1231.795207][ T5878] usb 3-1: device descriptor read/8, error -71 [ 1232.603376][ T29] audit: type=1400 audit(2000000050.910:2398): avc: denied { unlink } for pid=20670 comm="syz-executor" name="file4" dev="tmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1232.787033][ T5878] usb usb3-port1: unable to enumerate USB device [ 1232.949438][T21679] FAULT_INJECTION: forcing a failure. [ 1232.949438][T21679] name failslab, interval 1, probability 0, space 0, times 0 [ 1232.970346][ T24] usb 7-1: USB disconnect, device number 41 [ 1233.004970][T21679] CPU: 0 UID: 0 PID: 21679 Comm: syz.4.3854 Tainted: G L syzkaller #0 PREEMPT(full) [ 1233.005000][T21679] Tainted: [L]=SOFTLOCKUP [ 1233.005006][T21679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1233.005017][T21679] Call Trace: [ 1233.005023][T21679] [ 1233.005029][T21679] dump_stack_lvl+0x100/0x190 [ 1233.005064][T21679] should_fail_ex.cold+0x5/0xa [ 1233.005086][T21679] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1233.005109][T21679] should_failslab+0xc2/0x120 [ 1233.005126][T21679] __kmalloc_noprof+0xe0/0x850 [ 1233.005156][T21679] tomoyo_realpath_from_path+0xb6/0x690 [ 1233.005185][T21679] tomoyo_path_number_perm+0x23c/0x580 [ 1233.005203][T21679] ? tomoyo_path_number_perm+0x22e/0x580 [ 1233.005224][T21679] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1233.005272][T21679] ? find_held_lock+0x2b/0x80 [ 1233.005292][T21679] ? __fget_files+0x215/0x3d0 [ 1233.005308][T21679] ? hook_file_ioctl_common+0x146/0x410 [ 1233.005337][T21679] ? __fget_files+0x21f/0x3d0 [ 1233.005358][T21679] security_file_ioctl+0xd3/0x230 [ 1233.005387][T21679] __x64_sys_ioctl+0xb7/0x210 [ 1233.005415][T21679] do_syscall_64+0x106/0xf80 [ 1233.005434][T21679] ? clear_bhb_loop+0x40/0x90 [ 1233.005456][T21679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1233.005474][T21679] RIP: 0033:0x7f1cc199c799 [ 1233.005491][T21679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1233.005509][T21679] RSP: 002b:00007f1cc28a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1233.005525][T21679] RAX: ffffffffffffffda RBX: 00007f1cc1c16180 RCX: 00007f1cc199c799 [ 1233.005536][T21679] RDX: 0000200000000740 RSI: 0000000000004c02 RDI: 0000000000000004 [ 1233.005547][T21679] RBP: 00007f1cc28a2090 R08: 0000000000000000 R09: 0000000000000000 [ 1233.005557][T21679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1233.005568][T21679] R13: 00007f1cc1c16218 R14: 00007f1cc1c16180 R15: 00007ffe70a522b8 [ 1233.005591][T21679] [ 1233.246692][T21679] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1233.403975][ T29] audit: type=1400 audit(2000000051.710:2399): avc: denied { read } for pid=21681 comm="syz.7.3855" path="socket:[76175]" dev="sockfs" ino=76175 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1233.418220][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1233.496683][T21687] syzkaller0: entered promiscuous mode [ 1233.502287][T21687] syzkaller0: entered allmulticast mode [ 1233.508794][ T29] audit: type=1400 audit(2000000051.760:2400): avc: denied { accept } for pid=21684 comm="syz.4.3857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1233.554450][ T29] audit: type=1400 audit(2000000051.760:2401): avc: denied { write } for pid=21684 comm="syz.4.3857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1233.598040][ T29] audit: type=1400 audit(2000000051.760:2402): avc: denied { read } for pid=21684 comm="syz.4.3857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1236.241402][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1236.241419][ T29] audit: type=1400 audit(2000000054.550:2404): avc: denied { create } for pid=21716 comm="syz.5.3863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1240.105476][ T5177] udevd[5177]: worker [15726] /devices/virtual/block/nbd0 timeout; kill it [ 1240.115941][ T5177] udevd[5177]: seq 20331 '/devices/virtual/block/nbd0' killed [ 1240.595555][T18472] Bluetooth: hci6: command 0x0406 tx timeout [ 1246.773917][ T29] audit: type=1400 audit(2000000065.080:2405): avc: denied { create } for pid=21729 comm="syz.7.3865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1246.801470][ T29] audit: type=1400 audit(2000000065.110:2406): avc: denied { write } for pid=21729 comm="syz.7.3865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1246.830164][ T29] audit: type=1400 audit(2000000065.140:2407): avc: denied { bind } for pid=21743 comm="syz.6.3867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1246.983384][T21746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3870'. [ 1247.150061][T21746] 8021q: adding VLAN 0 to HW filter on device team1 [ 1251.056003][ T29] audit: type=1400 audit(2000000069.370:2408): avc: denied { listen } for pid=21792 comm="syz.4.3882" lport=48086 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1251.121451][ T29] audit: type=1400 audit(2000000069.370:2409): avc: denied { accept } for pid=21792 comm="syz.4.3882" lport=48086 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1251.156028][ T29] audit: type=1400 audit(2000000069.390:2410): avc: denied { getopt } for pid=21792 comm="syz.4.3882" lport=48086 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1251.948286][T21807] netlink: 'syz.4.3887': attribute type 21 has an invalid length. [ 1251.965484][T21807] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3887'. [ 1252.491108][ T5808] Bluetooth: hci2: unexpected event for opcode 0x1407 [ 1253.277665][T15170] block nbd0: Possible stuck request ffff888027c40000: control (read@0,1024B). Runtime 390 seconds [ 1253.290447][T15170] block nbd0: Possible stuck request ffff888027c40200: control (read@1024,1024B). Runtime 390 seconds [ 1253.302436][T15170] block nbd0: Possible stuck request ffff888027c40400: control (read@2048,1024B). Runtime 390 seconds [ 1253.314327][T15170] block nbd0: Possible stuck request ffff888027c40600: control (read@3072,1024B). Runtime 390 seconds [ 1253.557310][ T29] audit: type=1400 audit(2000000071.870:2411): avc: denied { setopt } for pid=21834 comm="syz.6.3894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1254.059842][ T29] audit: type=1400 audit(2000000071.930:2412): avc: denied { read } for pid=21834 comm="syz.6.3894" path="socket:[76497]" dev="sockfs" ino=76497 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1256.013096][T21857] syz.4.3898 (21857): drop_caches: 2 [ 1256.595717][ T29] audit: type=1400 audit(2000000074.890:2413): avc: denied { accept } for pid=21866 comm="syz.6.3902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1256.645456][ T5808] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 1256.655953][ T5808] CPU: 1 UID: 0 PID: 5808 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 1256.655989][ T5808] Tainted: [L]=SOFTLOCKUP [ 1256.655997][ T5808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1256.656011][ T5808] Workqueue: hci2 hci_rx_work [ 1256.656048][ T5808] Call Trace: [ 1256.656058][ T5808] [ 1256.656067][ T5808] dump_stack_lvl+0x100/0x190 [ 1256.656111][ T5808] sysfs_warn_dup.cold+0x1c/0x28 [ 1256.656142][ T5808] sysfs_create_dir_ns+0x24b/0x2b0 [ 1256.656173][ T5808] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1256.656202][ T5808] ? find_held_lock+0x2b/0x80 [ 1256.656238][ T5808] ? kobject_add_internal+0x25f/0x930 [ 1256.656263][ T5808] ? kobject_add_internal+0x25f/0x930 [ 1256.656292][ T5808] ? do_raw_spin_unlock+0x145/0x1e0 [ 1256.656319][ T5808] kobject_add_internal+0x2c8/0x930 [ 1256.656350][ T5808] kobject_add+0x16a/0x1e0 [ 1256.656370][ T5808] ? __pfx_kobject_add+0x10/0x10 [ 1256.656391][ T5808] ? class_to_subsys+0x10f/0x150 [ 1256.656425][ T5808] ? kobject_put+0xb9/0x640 [ 1256.656447][ T5808] ? _raw_spin_unlock+0x28/0x50 [ 1256.656472][ T5808] device_add+0x294/0x1950 [ 1256.656501][ T5808] ? __pfx_dev_set_name+0x10/0x10 [ 1256.656520][ T5808] ? __pfx_device_add+0x10/0x10 [ 1256.656547][ T5808] ? mgmt_send_event_skb+0x2fb/0x460 [ 1256.656585][ T5808] hci_conn_add_sysfs+0x1a3/0x260 [ 1256.656610][ T5808] le_conn_complete_evt+0x11cb/0x1f40 [ 1256.656647][ T5808] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1256.656685][ T5808] hci_le_conn_complete_evt+0x23c/0x3a0 [ 1256.656717][ T5808] ? skb_pull_data+0x15f/0x1e0 [ 1256.656747][ T5808] hci_le_meta_evt+0x34a/0x5f0 [ 1256.656767][ T5808] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1256.656801][ T5808] hci_event_packet+0x682/0x11c0 [ 1256.656829][ T5808] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1256.656845][ T5808] ? __pfx_hci_event_packet+0x10/0x10 [ 1256.656872][ T5808] ? kcov_remote_start+0x374/0x660 [ 1256.656895][ T5808] ? lockdep_hardirqs_on+0x78/0x100 [ 1256.656917][ T5808] hci_rx_work+0x451/0xfc0 [ 1256.656946][ T5808] process_one_work+0x9d7/0x1920 [ 1256.656975][ T5808] ? __pfx_process_one_work+0x10/0x10 [ 1256.656998][ T5808] ? __pfx_hci_rx_work+0x10/0x10 [ 1256.657027][ T5808] worker_thread+0x5da/0xe40 [ 1256.657057][ T5808] ? kthread+0x13a/0x450 [ 1256.657073][ T5808] ? __pfx_worker_thread+0x10/0x10 [ 1256.657090][ T5808] kthread+0x370/0x450 [ 1256.657112][ T5808] ? __pfx_kthread+0x10/0x10 [ 1256.657133][ T5808] ret_from_fork+0x754/0xd80 [ 1256.657158][ T5808] ? __pfx_ret_from_fork+0x10/0x10 [ 1256.657180][ T5808] ? rcu_is_watching+0x12/0xc0 [ 1256.657201][ T5808] ? __switch_to+0x7b4/0x1120 [ 1256.657220][ T5808] ? __pfx_kthread+0x10/0x10 [ 1256.657237][ T5808] ret_from_fork_asm+0x1a/0x30 [ 1256.657269][ T5808] [ 1256.657292][ T5808] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1256.968223][ T5808] Bluetooth: hci2: failed to register connection device [ 1256.977314][T21873] FAULT_INJECTION: forcing a failure. [ 1256.977314][T21873] name failslab, interval 1, probability 0, space 0, times 0 [ 1257.001140][ T29] audit: type=1400 audit(2000000075.270:2414): avc: denied { create } for pid=21866 comm="syz.6.3902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1257.033052][T21873] CPU: 0 UID: 0 PID: 21873 Comm: syz.6.3902 Tainted: G L syzkaller #0 PREEMPT(full) [ 1257.033074][T21873] Tainted: [L]=SOFTLOCKUP [ 1257.033078][T21873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1257.033093][T21873] Call Trace: [ 1257.033098][T21873] [ 1257.033102][T21873] dump_stack_lvl+0x100/0x190 [ 1257.033125][T21873] should_fail_ex.cold+0x5/0xa [ 1257.033141][T21873] should_failslab+0xc2/0x120 [ 1257.033154][T21873] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1257.033171][T21873] ? __alloc_skb+0x140/0x710 [ 1257.033185][T21873] __alloc_skb+0x140/0x710 [ 1257.033195][T21873] ? __alloc_skb+0x5b7/0x710 [ 1257.033206][T21873] ? __pfx___alloc_skb+0x10/0x10 [ 1257.033217][T21873] ? __hci_dev_get+0x16a/0x2b0 [ 1257.033231][T21873] mgmt_cmd_status+0x42/0x530 [ 1257.033250][T21873] hci_sock_sendmsg+0x2245/0x2620 [ 1257.033265][T21873] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 1257.033280][T21873] sock_write_iter+0x524/0x5a0 [ 1257.033295][T21873] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 1257.033306][T21873] ? __pfx_sock_write_iter+0x10/0x10 [ 1257.033326][T21873] ? bpf_lsm_file_permission+0x9/0x10 [ 1257.033344][T21873] ? security_file_permission+0x76/0x210 [ 1257.033360][T21873] ? rw_verify_area+0xce/0x6d0 [ 1257.033377][T21873] vfs_write+0x6ac/0x1070 [ 1257.033394][T21873] ? __pfx_sock_write_iter+0x10/0x10 [ 1257.033410][T21873] ? __pfx_vfs_write+0x10/0x10 [ 1257.033425][T21873] ? find_held_lock+0x2b/0x80 [ 1257.033448][T21873] ksys_write+0x1f8/0x250 [ 1257.033465][T21873] ? __pfx_ksys_write+0x10/0x10 [ 1257.033485][T21873] do_syscall_64+0x106/0xf80 [ 1257.033497][T21873] ? clear_bhb_loop+0x40/0x90 [ 1257.033511][T21873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1257.033523][T21873] RIP: 0033:0x7fa81c59c799 [ 1257.033533][T21873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1257.033544][T21873] RSP: 002b:00007fa81d46c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1257.033556][T21873] RAX: ffffffffffffffda RBX: 00007fa81c816090 RCX: 00007fa81c59c799 [ 1257.033563][T21873] RDX: 000000000000000d RSI: 0000200000000000 RDI: 000000000000000e [ 1257.033569][T21873] RBP: 00007fa81d46c090 R08: 0000000000000000 R09: 0000000000000000 [ 1257.033576][T21873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1257.033582][T21873] R13: 00007fa81c816128 R14: 00007fa81c816090 R15: 00007fff31916e08 [ 1257.033596][T21873] [ 1257.435598][ T5878] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1257.595526][ T5878] usb 8-1: Using ep0 maxpacket: 8 [ 1257.614039][ T5878] usb 8-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=ad.1d [ 1257.636900][ T5878] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.662807][ T5878] usb 8-1: Product: syz [ 1257.673537][ T5878] usb 8-1: Manufacturer: syz [ 1257.678794][ T5878] usb 8-1: SerialNumber: syz [ 1257.690506][ T5878] usb 8-1: config 0 descriptor?? [ 1257.755756][ T5878] usb_ehset_test 8-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 1257.770525][T21886] QAT: failed to copy from user cfg_data. [ 1257.914357][ T29] audit: type=1400 audit(2000000076.220:2415): avc: denied { getopt } for pid=21888 comm="syz.4.3901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1257.954495][T21889] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3901'. [ 1258.231234][ T29] audit: type=1400 audit(2000000076.540:2416): avc: denied { read } for pid=21869 comm="syz.7.3903" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1258.255682][ T5878] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1258.272073][ T29] audit: type=1400 audit(2000000076.570:2417): avc: denied { open } for pid=21869 comm="syz.7.3903" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1258.365198][ T29] audit: type=1400 audit(2000000076.580:2418): avc: denied { ioctl } for pid=21869 comm="syz.7.3903" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1258.435733][ T5878] usb 5-1: Using ep0 maxpacket: 32 [ 1258.449746][ T5878] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1258.463649][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.464035][ T47] usb 8-1: USB disconnect, device number 31 [ 1258.533104][ T5878] usb 5-1: Product: syz [ 1258.558830][ T29] audit: type=1400 audit(2000000076.870:2419): avc: denied { connect } for pid=21893 comm="syz.2.3906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1258.592278][ T5878] usb 5-1: Manufacturer: syz [ 1258.609237][ T5878] usb 5-1: SerialNumber: syz [ 1258.635213][ T5878] usb 5-1: config 0 descriptor?? [ 1258.855461][ T977] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1258.866345][ T5878] airspy 5-1:0.0: usb_control_msg() failed -71 request 09 [ 1258.880279][ T5878] airspy 5-1:0.0: Could not detect board [ 1258.888780][ T5878] airspy 5-1:0.0: probe with driver airspy failed with error -71 [ 1258.900962][ T5878] usb 5-1: USB disconnect, device number 33 [ 1258.913767][ T29] audit: type=1400 audit(2000000077.220:2420): avc: denied { bind } for pid=21895 comm="syz.6.3907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1258.935929][ T29] audit: type=1400 audit(2000000077.250:2421): avc: denied { listen } for pid=21895 comm="syz.6.3907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1258.974573][ T29] audit: type=1400 audit(2000000077.280:2422): avc: denied { write } for pid=21895 comm="syz.6.3907" path="socket:[76551]" dev="sockfs" ino=76551 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1259.015504][ T977] usb 3-1: Using ep0 maxpacket: 16 [ 1259.046665][ T977] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1259.056376][ T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1259.064752][ T977] usb 3-1: Product: syz [ 1259.080678][ T977] usb 3-1: Manufacturer: syz [ 1259.086048][ T977] usb 3-1: SerialNumber: syz [ 1259.093376][ T977] usb 3-1: config 0 descriptor?? [ 1259.531684][ T977] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1259.558037][ T977] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1259.576115][ T977] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1259.594890][ T977] usb 3-1: media controller created [ 1259.905370][ T5857] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1259.913121][ T5878] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1259.932397][ T977] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1260.013308][ T977] zl10353_read_register: readreg error (reg=127, ret==0) [ 1260.022310][ T977] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1260.042044][ T977] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1260.059651][ T977] usb 3-1: USB disconnect, device number 22 [ 1260.975415][ T5878] usb 6-1: Using ep0 maxpacket: 16 [ 1261.019073][ T977] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1261.067522][ T5878] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1261.100905][ T5878] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1261.114531][ T5878] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1261.123967][ T5878] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1261.149709][ T5878] usb 6-1: config 0 descriptor?? [ 1261.969972][ T5878] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.000B/input/input42 [ 1262.137454][ T5878] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1263.032655][T21951] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1264.679055][ T24] usb 6-1: USB disconnect, device number 101 [ 1265.045488][ T977] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1265.253428][ T29] audit: type=1400 audit(2000000083.530:2423): avc: denied { ioctl } for pid=21985 comm="syz.6.3932" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=77173 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1265.545564][T18497] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1265.605385][ T977] usb 3-1: Using ep0 maxpacket: 16 [ 1265.616622][ T977] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1265.630811][ T977] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1265.644038][ T977] usb 3-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 1265.653398][ T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1265.664985][ T977] usb 3-1: config 0 descriptor?? [ 1265.687916][ T977] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1265.748253][T18497] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 1265.764842][T18497] usb 5-1: config 0 has no interface number 0 [ 1265.794565][T18497] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1265.814745][T21997] netlink: 'syz.7.3934': attribute type 1 has an invalid length. [ 1265.970668][T21997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1266.043471][T18497] usb 5-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 1266.173072][ T29] audit: type=1400 audit(2000000084.380:2424): avc: denied { append } for pid=21996 comm="syz.7.3934" name="sg0" dev="devtmpfs" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1266.190991][T18497] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1266.246026][T18497] usb 5-1: config 0 descriptor?? [ 1266.271806][T21988] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1266.326710][T21999] bond0: (slave veth5): Enslaving as an active interface with a down link [ 1266.376047][T21999] netlink: 14 bytes leftover after parsing attributes in process `syz.7.3934'. [ 1266.420592][T21997] bond0: (slave dummy0): making interface the new active one [ 1266.442682][T21997] dummy0: entered promiscuous mode [ 1266.449238][T21997] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1266.485495][ T977] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1266.525921][T21999] bond0: (slave dummy0): Releasing active interface [ 1266.532783][T21999] dummy0 (unregistering): left promiscuous mode [ 1266.652211][ T977] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1266.687934][ T977] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1266.709505][ T977] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1266.722192][ T977] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1266.726443][T18497] hid_parser_main: 4007 callbacks suppressed [ 1266.726466][T18497] asus 0003:0B05:1ABE.000C: unknown main item tag 0x0 [ 1266.740953][ T977] usb 7-1: Product: syz [ 1266.748015][ T977] usb 7-1: Manufacturer: syz [ 1266.752768][ T977] usb 7-1: SerialNumber: syz [ 1266.760244][ T977] usb 7-1: config 0 descriptor?? [ 1266.891262][T18497] asus 0003:0B05:1ABE.000C: unknown main item tag 0x0 [ 1266.909795][T21988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1266.923841][T18497] asus 0003:0B05:1ABE.000C: unknown main item tag 0x0 [ 1266.960119][T21988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1266.968397][T18497] asus 0003:0B05:1ABE.000C: unknown main item tag 0x0 [ 1266.976664][T18497] asus 0003:0B05:1ABE.000C: unknown main item tag 0x0 [ 1266.989332][T18497] asus 0003:0B05:1ABE.000C: unknown main item tag 0x0 [ 1266.999649][T18497] asus 0003:0B05:1ABE.000C: unknown main item tag 0x0 [ 1267.008079][T18497] asus 0003:0B05:1ABE.000C: unknown main item tag 0x0 [ 1267.015183][T18497] asus 0003:0B05:1ABE.000C: unknown main item tag 0x0 [ 1267.024449][ T29] audit: type=1400 audit(2000000085.340:2425): avc: denied { ioctl } for pid=21987 comm="syz.4.3933" path="socket:[77201]" dev="sockfs" ino=77201 ioctlcmd=0xaf83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1267.030077][T18497] asus 0003:0B05:1ABE.000C: unknown main item tag 0x0 [ 1267.170978][T18497] asus 0003:0B05:1ABE.000C: reserved main item tag 0xd [ 1267.178306][T18497] asus 0003:0B05:1ABE.000C: reserved main item tag 0xe [ 1267.186881][T18497] asus 0003:0B05:1ABE.000C: collection stack underflow [ 1267.194232][T18497] asus 0003:0B05:1ABE.000C: item 0 0 0 12 parsing failed [ 1267.206232][T18497] asus 0003:0B05:1ABE.000C: Asus hid parse failed: -22 [ 1267.213786][T18497] asus 0003:0B05:1ABE.000C: probe with driver asus failed with error -22 [ 1267.268585][T18497] usb 5-1: USB disconnect, device number 35 [ 1267.540959][ T977] usb 7-1: USB disconnect, device number 42 [ 1267.559235][ T29] audit: type=1400 audit(2000000085.870:2426): avc: denied { write } for pid=22007 comm="syz.5.3936" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1268.010110][ T24] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 1268.112828][T22032] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1268.500393][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1268.588442][ T29] audit: type=1400 audit(2000000086.830:2427): avc: denied { create } for pid=22033 comm="syz.7.3942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1268.627606][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 1268.708775][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.871389][ T29] audit: type=1400 audit(2000000086.830:2428): avc: denied { ioctl } for pid=22033 comm="syz.7.3942" path="socket:[77218]" dev="sockfs" ino=77218 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1269.205462][ T24] usb 5-1: config 0 descriptor?? [ 1269.214329][T22026] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1269.228824][ T24] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1269.253110][ T977] usb 3-1: USB disconnect, device number 23 [ 1269.462304][T22026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1269.489846][T22026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1269.529963][ T29] audit: type=1400 audit(2000000087.820:2429): avc: denied { map } for pid=22044 comm="syz.6.3945" path="/dev/ocfs2_control" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1269.805918][T22026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3940'. [ 1270.054161][T22026] vlan2: entered allmulticast mode [ 1270.059713][T22026] team0: entered allmulticast mode [ 1270.064879][T22026] team_slave_0: entered allmulticast mode [ 1270.070800][T22026] team_slave_1: entered allmulticast mode [ 1270.101917][T22052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1270.113921][T22052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1270.378255][T22057] netlink: 'syz.6.3949': attribute type 10 has an invalid length. [ 1270.408154][T22057] team0: Device ipvlan1 failed to register rx_handler [ 1270.495444][ T5878] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1270.733849][T22059] fuse: Bad value for 'fd' [ 1270.852443][ T10] libceph: connect (1)[c::]:6789 error -101 [ 1270.869699][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 1270.875985][ T977] usb 5-1: USB disconnect, device number 36 [ 1270.967099][ T5878] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1270.978422][ T5878] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1270.990003][ T5878] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1271.001178][ T5878] usb 8-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 1271.011530][ T5878] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.024327][ T5878] usb 8-1: config 0 descriptor?? [ 1271.135764][ T10] libceph: connect (1)[c::]:6789 error -101 [ 1271.142001][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 1271.308473][T22058] ceph: No mds server is up or the cluster is laggy [ 1272.184346][T22072] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3952'. [ 1272.193439][T22072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3952'. [ 1272.486854][T22084] syzkaller0: entered promiscuous mode [ 1272.492780][T22084] syzkaller0: entered allmulticast mode [ 1273.052603][T22093] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1273.088352][ T29] audit: type=1400 audit(2000000091.400:2430): avc: denied { connect } for pid=22092 comm="syz.4.3956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1273.113232][ T29] audit: type=1400 audit(2000000091.420:2431): avc: denied { bind } for pid=22092 comm="syz.4.3956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1273.143588][ T29] audit: type=1400 audit(2000000091.420:2432): avc: denied { write } for pid=22092 comm="syz.4.3956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1273.277079][T22100] netlink: 'syz.6.3957': attribute type 1 has an invalid length. [ 1273.289522][ T5878] usbhid 8-1:0.0: can't add hid device: -71 [ 1273.298342][ T5878] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1273.600982][ T5878] usb 8-1: USB disconnect, device number 32 [ 1273.608987][ T29] audit: type=1400 audit(2000000091.740:2433): avc: denied { wake_alarm } for pid=22098 comm="syz.4.3958" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1274.039324][ T29] audit: type=1400 audit(2000000091.760:2434): avc: denied { getopt } for pid=22098 comm="syz.4.3958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1274.181983][ T29] audit: type=1400 audit(2000000092.340:2435): avc: denied { mount } for pid=22109 comm="syz.2.3960" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1274.225763][ T29] audit: type=1400 audit(2000000092.340:2436): avc: denied { mounton } for pid=22109 comm="syz.2.3960" path="/173/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 1274.252227][ T29] audit: type=1400 audit(2000000092.340:2437): avc: denied { mount } for pid=22109 comm="syz.2.3960" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1274.657080][ T793] libceph: connect (1)[c::]:6789 error -101 [ 1274.669011][ T793] libceph: mon0 (1)[c::]:6789 connect error [ 1274.802628][T22119] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1274.811573][T22119] overlayfs: overlapping lowerdir path [ 1274.818292][ T29] audit: type=1400 audit(2000000093.100:2438): avc: denied { create } for pid=22112 comm="syz.7.3961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1274.839225][ T29] audit: type=1400 audit(2000000093.100:2439): avc: denied { ioctl } for pid=22112 comm="syz.7.3961" path="socket:[77298]" dev="sockfs" ino=77298 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1274.928338][T22113] ceph: No mds server is up or the cluster is laggy [ 1274.953013][ T793] libceph: connect (1)[c::]:6789 error -101 [ 1275.189776][ T793] libceph: mon0 (1)[c::]:6789 connect error [ 1275.550584][T22126] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3964'. [ 1275.559992][T22126] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 1275.578595][ T10] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 1275.831235][ T10] usb 5-1: config 0 has an invalid interface number: 113 but max is 0 [ 1275.859289][ T10] usb 5-1: config 0 has no interface number 0 [ 1275.881902][ T10] usb 5-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 1275.904874][T22136] netlink: 'syz.6.3966': attribute type 1 has an invalid length. [ 1275.981723][T22138] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3966'. [ 1276.012601][ T10] usb 5-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1276.120859][ T10] usb 5-1: config 0 interface 113 has no altsetting 0 [ 1276.195818][T22136] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1276.221498][ T10] usb 5-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1276.333266][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.393301][ T10] usb 5-1: Product: syz [ 1276.416704][ T10] usb 5-1: Manufacturer: syz [ 1276.436779][ T10] usb 5-1: SerialNumber: syz [ 1276.523114][ T10] usb 5-1: config 0 descriptor?? [ 1276.614175][ C0] usb 5-1: NFC: Urb failure (status -71) [ 1276.622553][ T10] usb 5-1: NFC: Unable to get FW version [ 1276.650768][ T10] pn533_usb 5-1:0.113: probe with driver pn533_usb failed with error -90 [ 1277.015884][ T10] usb 8-1: new full-speed USB device number 33 using dummy_hcd [ 1277.267490][ T10] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1277.276047][ T10] usb 8-1: not running at top speed; connect to a high speed hub [ 1277.289341][ T10] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 4 [ 1277.305228][ T10] usb 8-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice= 0.40 [ 1277.317068][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.325966][ T10] usb 8-1: Product: syz [ 1277.330506][ T10] usb 8-1: Manufacturer: syz [ 1277.336737][ T10] usb 8-1: SerialNumber: syz [ 1277.548465][T22143] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1277.563156][ T10] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1277.570967][ T10] snd-usb-audio 8-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 1277.582998][ T10] usb 8-1: USB disconnect, device number 33 [ 1278.378291][ T10] usb 5-1: USB disconnect, device number 37 [ 1278.715653][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 1278.715671][ T29] audit: type=1326 audit(2000000097.020:2446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22172 comm="syz.7.3975" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f665659c799 code=0x0 [ 1278.756045][ T10] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 1279.351576][T22176] 9pnet_virtio: no channels available for device syz [ 1279.667341][ T10] usb 5-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 1279.804976][ T10] usb 5-1: config 161 has 0 interfaces, different from the descriptor's value: 15 [ 1279.875775][T22175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3976'. [ 1279.884923][T22175] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 1279.906275][ T29] audit: type=1400 audit(2000000098.220:2447): avc: denied { setopt } for pid=22185 comm="syz.7.3978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1279.930684][ T10] usb 5-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 1279.959172][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.017678][T22189] FAULT_INJECTION: forcing a failure. [ 1280.017678][T22189] name failslab, interval 1, probability 0, space 0, times 0 [ 1280.031439][T22189] CPU: 0 UID: 0 PID: 22189 Comm: syz.2.3979 Tainted: G L syzkaller #0 PREEMPT(full) [ 1280.031473][T22189] Tainted: [L]=SOFTLOCKUP [ 1280.031483][T22189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1280.031495][T22189] Call Trace: [ 1280.031502][T22189] [ 1280.031510][T22189] dump_stack_lvl+0x100/0x190 [ 1280.031549][T22189] should_fail_ex.cold+0x5/0xa [ 1280.031575][T22189] ? tomoyo_encode2+0xfb/0x3c0 [ 1280.031599][T22189] should_failslab+0xc2/0x120 [ 1280.031619][T22189] __kmalloc_noprof+0xe0/0x850 [ 1280.031646][T22189] ? d_absolute_path+0x136/0x1b0 [ 1280.031680][T22189] tomoyo_encode2+0xfb/0x3c0 [ 1280.031709][T22189] tomoyo_encode+0x29/0x50 [ 1280.031731][T22189] tomoyo_realpath_from_path+0x18c/0x690 [ 1280.031763][T22189] tomoyo_path_number_perm+0x23c/0x580 [ 1280.031783][T22189] ? tomoyo_path_number_perm+0x22e/0x580 [ 1280.031806][T22189] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1280.031830][T22189] ? rcu_read_unlock+0x17/0x60 [ 1280.031879][T22189] ? current_check_access_path+0x281/0x460 [ 1280.031913][T22189] ? __pfx_current_check_access_path+0x10/0x10 [ 1280.031942][T22189] ? _raw_spin_unlock+0x28/0x50 [ 1280.031966][T22189] ? lookup_one_qstr_excl+0xb3/0x250 [ 1280.031996][T22189] tomoyo_path_mkdir+0x9b/0xe0 [ 1280.032023][T22189] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 1280.032059][T22189] security_path_mkdir+0x154/0x2e0 [ 1280.032095][T22189] filename_mkdirat+0x168/0x5e0 [ 1280.032122][T22189] ? __pfx_filename_mkdirat+0x10/0x10 [ 1280.032143][T22189] ? strncpy_from_user+0x19d/0x2d0 [ 1280.032175][T22189] ? do_getname+0x191/0x390 [ 1280.032202][T22189] __x64_sys_mkdir+0x6b/0x90 [ 1280.032224][T22189] do_syscall_64+0x106/0xf80 [ 1280.032244][T22189] ? clear_bhb_loop+0x40/0x90 [ 1280.032269][T22189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1280.032289][T22189] RIP: 0033:0x7f729219c799 [ 1280.032308][T22189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1280.032324][T22189] RSP: 002b:00007f7293120028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1280.032343][T22189] RAX: ffffffffffffffda RBX: 00007f7292415fa0 RCX: 00007f729219c799 [ 1280.032356][T22189] RDX: 0000000000000000 RSI: 000000000000013b RDI: 0000200000000100 [ 1280.032367][T22189] RBP: 00007f7293120090 R08: 0000000000000000 R09: 0000000000000000 [ 1280.032378][T22189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1280.032390][T22189] R13: 00007f7292416038 R14: 00007f7292415fa0 R15: 00007fff9f5c10c8 [ 1280.032419][T22189] [ 1280.032498][T22189] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1280.356022][T22192] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3977'. [ 1280.920316][ T10] usb 5-1: string descriptor 0 read error: -71 [ 1280.950609][ T10] usb 5-1: USB disconnect, device number 38 [ 1280.975348][T18414] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1281.138378][T18414] usb 3-1: config 0 has an invalid interface number: 156 but max is 0 [ 1281.149880][T18414] usb 3-1: config 0 has no interface number 0 [ 1281.163881][T18414] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1281.190523][T18414] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1281.212585][T18414] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 1281.239782][T18414] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1281.261861][T18414] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1281.283717][T18414] usb 3-1: config 0 descriptor?? [ 1281.299841][T18414] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1281.516971][T18414] spca561 3-1:0.156: probe with driver spca561 failed with error -22 [ 1281.531314][T18414] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1281.531360][T18414] usb 3-1: MIDIStreaming interface descriptor not found [ 1281.639833][ T29] audit: type=1400 audit(2000000099.950:2448): avc: denied { create } for pid=22215 comm="syz.4.3985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 1281.683837][T18414] usb 3-1: USB disconnect, device number 24 [ 1281.890652][ T29] audit: type=1400 audit(2000000100.190:2449): avc: denied { connect } for pid=22215 comm="syz.4.3985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1281.890687][ T29] audit: type=1400 audit(2000000100.200:2450): avc: denied { setopt } for pid=22215 comm="syz.4.3985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1282.495379][ T29] audit: type=1400 audit(2000000100.790:2451): avc: denied { write } for pid=22228 comm="syz.5.3987" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1282.582725][T22233] hpfs: Bad magic ... probably not HPFS [ 1283.370657][T15170] block nbd0: Possible stuck request ffff888027c40000: control (read@0,1024B). Runtime 420 seconds [ 1283.386918][T15170] block nbd0: Possible stuck request ffff888027c40200: control (read@1024,1024B). Runtime 420 seconds [ 1283.398306][T15170] block nbd0: Possible stuck request ffff888027c40400: control (read@2048,1024B). Runtime 420 seconds [ 1283.445459][ T29] audit: type=1400 audit(2000000100.880:2452): avc: denied { ioctl } for pid=22228 comm="syz.5.3987" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1283.582442][T15170] block nbd0: Possible stuck request ffff888027c40600: control (read@3072,1024B). Runtime 420 seconds [ 1283.651455][ T29] audit: type=1400 audit(2000000101.940:2453): avc: denied { mount } for pid=22237 comm="syz.7.3989" name="/" dev="mqueue" ino=48580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1284.565363][ T47] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1285.215372][T18414] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1285.265228][ T47] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1285.321582][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1285.365395][T18414] usb 3-1: device descriptor read/64, error -71 [ 1285.372126][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1285.415377][ T793] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1285.441404][ T47] usb 5-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 1285.485432][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.526985][ T47] usb 5-1: config 0 descriptor?? [ 1285.605365][T18414] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1285.610103][ T793] usb 7-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1285.658152][ T793] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.677975][ T793] usb 7-1: Product: syz [ 1285.682206][ T793] usb 7-1: Manufacturer: syz [ 1285.704499][ T793] usb 7-1: SerialNumber: syz [ 1285.739680][ T793] usb 7-1: config 0 descriptor?? [ 1285.785523][T18414] usb 3-1: device descriptor read/64, error -71 [ 1285.896065][T18414] usb usb3-port1: attempt power cycle [ 1286.038801][ T793] usb 7-1: ignoring: probably an ADSL modem [ 1286.130416][ T29] audit: type=1400 audit(2000000104.440:2454): avc: denied { execstack } for pid=22274 comm="syz.7.4000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1286.245357][T18414] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1286.290543][T18414] usb 3-1: device descriptor read/8, error -71 [ 1286.463895][ T793] cxacru 7-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1286.546229][T18414] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1286.579203][T18414] usb 3-1: device descriptor read/8, error -71 [ 1286.581817][T22267] Cannot find map_set index 0 as target [ 1286.705708][T18414] usb usb3-port1: unable to enumerate USB device [ 1286.914673][ T29] audit: type=1400 audit(2000000105.220:2455): avc: denied { connect } for pid=22262 comm="syz.6.3997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1287.377002][ T29] audit: type=1400 audit(2000000105.220:2456): avc: denied { ioctl } for pid=22262 comm="syz.6.3997" path="socket:[78370]" dev="sockfs" ino=78370 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1287.426825][ T47] usbhid 5-1:0.0: can't add hid device: -71 [ 1287.432850][ T47] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1287.624003][ T47] usb 5-1: USB disconnect, device number 39 [ 1287.757245][T22298] can0: slcan on ttyS3. [ 1287.811130][ T29] audit: type=1400 audit(2000000106.090:2457): avc: denied { ioctl } for pid=22288 comm="syz.4.4002" path="socket:[78377]" dev="sockfs" ino=78377 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1288.516858][T22304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4005'. [ 1288.525958][T22304] openvswitch: netlink: Message has 16 unknown bytes. [ 1288.885542][T22288] can0 (unregistered): slcan off ttyS3. [ 1288.908905][ T793] usb 7-1: USB disconnect, device number 43 [ 1289.182184][T22312] syz_tun: entered allmulticast mode [ 1289.203977][T22311] syz_tun: left allmulticast mode [ 1289.208396][ T29] audit: type=1400 audit(2000000107.510:2458): avc: denied { create } for pid=22310 comm="syz.2.4009" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1289.316349][ T29] audit: type=1400 audit(2000000107.560:2459): avc: denied { mount } for pid=22318 comm="syz.7.4010" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1289.485393][ T793] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 1289.508439][ T29] audit: type=1400 audit(2000000107.560:2460): avc: denied { remount } for pid=22318 comm="syz.7.4010" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1289.735368][ T793] usb 8-1: Using ep0 maxpacket: 32 [ 1289.744045][ T793] usb 8-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1289.762992][ T29] audit: type=1400 audit(2000000108.070:2461): avc: denied { cmd } for pid=22334 comm="syz.6.4015" path="socket:[77696]" dev="sockfs" ino=77696 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1289.764553][ T793] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1289.808410][ T793] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1289.878134][ T29] audit: type=1400 audit(2000000108.190:2462): avc: denied { name_bind 0x1000000 } for pid=22337 comm="syz.5.4017" path="socket:[77744]" dev="sockfs" ino=77744 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1289.958645][T22338] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 1289.965169][T22338] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1289.973911][T22338] vhci_hcd vhci_hcd.0: Device attached [ 1289.984731][T22338] geneve2: entered promiscuous mode [ 1289.990109][T22338] geneve2: entered allmulticast mode [ 1289.999209][T22342] vhci_hcd: connection closed [ 1289.999908][ T8635] vhci_hcd vhci_hcd.5: stop threads [ 1290.010239][ T8635] vhci_hcd vhci_hcd.5: release socket [ 1290.015868][ T8635] vhci_hcd vhci_hcd.5: disconnect device [ 1290.165612][ T47] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1290.208135][ T793] gspca_nw80x: reg_r err -71 [ 1290.212930][ T793] nw80x 8-1:3.0: probe with driver nw80x failed with error -71 [ 1290.230746][ T793] usb 8-1: USB disconnect, device number 34 [ 1290.342618][ T47] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1290.369469][ T47] usb 3-1: config 0 has no interfaces? [ 1290.377616][ T47] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1290.387233][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.415976][ T47] usb 3-1: config 0 descriptor?? [ 1290.752504][ T29] audit: type=1400 audit(2000000109.060:2463): avc: denied { read append } for pid=22339 comm="syz.2.4018" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1291.909795][ T29] audit: type=1400 audit(2000000109.060:2464): avc: denied { open } for pid=22339 comm="syz.2.4018" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1291.948179][ T29] audit: type=1400 audit(2000000110.250:2465): avc: denied { unmount } for pid=15802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1293.372866][ T977] usb 3-1: USB disconnect, device number 29 [ 1293.463027][ T29] audit: type=1400 audit(2000000111.720:2466): avc: denied { ioctl } for pid=22363 comm="syz.7.4024" path="socket:[78511]" dev="sockfs" ino=78511 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1295.181779][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1295.575426][ T5857] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1295.583302][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 1295.725473][ T5857] usb 6-1: device descriptor read/64, error -32 [ 1296.125415][ T5857] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1296.179534][T22407] fuse: Bad value for 'user_id' [ 1296.184423][T22407] fuse: Bad value for 'user_id' [ 1296.725322][T22416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4036'. [ 1297.402340][T22414] vfat: Unknown parameter 'discardu/#/msr' [ 1297.687952][T22422] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1298.225615][T18414] usb 7-1: new full-speed USB device number 44 using dummy_hcd [ 1298.246919][ T29] audit: type=1400 audit(2000000116.550:2467): avc: denied { read } for pid=22436 comm="syz.2.4045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1298.292694][ T5857] usb 6-1: device descriptor read/all, error -71 [ 1298.300137][ T5857] usb usb6-port1: attempt power cycle [ 1298.389562][T18414] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1298.415564][T18414] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1298.441052][T18414] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1298.465231][T18414] usb 7-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 1298.474818][T18414] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1298.503844][T18414] usb 7-1: config 0 descriptor?? [ 1299.495368][ T29] audit: type=1400 audit(2000000117.770:2468): avc: denied { create } for pid=22430 comm="syz.6.4044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1300.533162][T22449] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.051223][T22449] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.431577][T22449] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.603867][T22456] FAULT_INJECTION: forcing a failure. [ 1301.603867][T22456] name failslab, interval 1, probability 0, space 0, times 0 [ 1301.617691][T22456] CPU: 0 UID: 0 PID: 22456 Comm: syz.2.4051 Tainted: G L syzkaller #0 PREEMPT(full) [ 1301.617726][T22456] Tainted: [L]=SOFTLOCKUP [ 1301.617733][T22456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1301.617742][T22456] Call Trace: [ 1301.617746][T22456] [ 1301.617751][T22456] dump_stack_lvl+0x100/0x190 [ 1301.617778][T22456] should_fail_ex.cold+0x5/0xa [ 1301.617795][T22456] should_failslab+0xc2/0x120 [ 1301.617808][T22456] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 1301.617825][T22456] ? sidtab_sid2str_get+0x17a/0x670 [ 1301.617843][T22456] kmemdup_noprof+0x29/0x60 [ 1301.617861][T22456] sidtab_sid2str_get+0x17a/0x670 [ 1301.617877][T22456] security_sid_to_context_core+0x35a/0x6d0 [ 1301.617893][T22456] avc_audit_post_callback+0x109/0x910 [ 1301.617913][T22456] ? __pfx_audit_log_lsm_data+0x10/0x10 [ 1301.617927][T22456] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 1301.617942][T22456] ? skb_put+0x138/0x180 [ 1301.617958][T22456] ? audit_log_n_string+0x256/0x550 [ 1301.617976][T22456] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 1301.617990][T22456] common_lsm_audit+0x23f/0x2b0 [ 1301.618004][T22456] ? __pfx_common_lsm_audit+0x10/0x10 [ 1301.618018][T22456] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 1301.618033][T22456] slow_avc_audit+0x186/0x210 [ 1301.618048][T22456] ? __pfx_slow_avc_audit+0x10/0x10 [ 1301.618065][T22456] ? avc_denied+0x14a/0x190 [ 1301.618083][T22456] ? avc_has_perm_noaudit+0x2fc/0x3b0 [ 1301.618103][T22456] avc_has_perm+0x1a6/0x1e0 [ 1301.618119][T22456] ? __pfx_avc_has_perm+0x10/0x10 [ 1301.618133][T22456] ? sched_clock_cpu+0x6c/0x570 [ 1301.618156][T22456] inode_has_perm+0x166/0x1d0 [ 1301.618173][T22456] selinux_mmap_file+0x10a/0x1b0 [ 1301.618183][T22456] ? __pfx_selinux_mmap_file+0x10/0x10 [ 1301.618199][T22456] security_mmap_file+0xc3/0x9b0 [ 1301.618215][T22456] vm_mmap_pgoff+0xec/0x470 [ 1301.618226][T22456] ? find_held_lock+0x2b/0x80 [ 1301.618241][T22456] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1301.618325][T22456] ? __fget_files+0x215/0x3d0 [ 1301.618353][T22456] ? __fget_files+0x21f/0x3d0 [ 1301.618373][T22456] ksys_mmap_pgoff+0x3c8/0x650 [ 1301.618396][T22456] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1301.618411][T22456] ? __x64_sys_mmap+0x1a/0x190 [ 1301.618427][T22456] __x64_sys_mmap+0x125/0x190 [ 1301.618442][T22456] do_syscall_64+0x106/0xf80 [ 1301.618462][T22456] ? clear_bhb_loop+0x40/0x90 [ 1301.618480][T22456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1301.618494][T22456] RIP: 0033:0x7f729219c799 [ 1301.618508][T22456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1301.618521][T22456] RSP: 002b:00007f72930ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1301.618535][T22456] RAX: ffffffffffffffda RBX: 00007f7292416090 RCX: 00007f729219c799 [ 1301.618544][T22456] RDX: 0000000001000004 RSI: 0000000000003020 RDI: 0000200000002000 [ 1301.618552][T22456] RBP: 00007f72930ff090 R08: 0000000000000006 R09: 0000000100000000 [ 1301.618559][T22456] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 1301.618567][T22456] R13: 00007f7292416128 R14: 00007f7292416090 R15: 00007fff9f5c10c8 [ 1301.618585][T22456] [ 1302.019655][ T29] audit: type=1400 audit(2000000119.910:2469): avc: denied { map } for pid=22454 comm="syz.2.4051" path="/dev/dri/card1" dev="devtmpfs" ino=628 ssid=148 tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1302.041441][ T29] audit: type=1400 audit(2000000119.930:2470): avc: denied { execute } for pid=22454 comm="syz.2.4051" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1302.071736][T22449] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1302.412806][T18414] usbhid 7-1:0.0: can't add hid device: -71 [ 1302.464297][ T6130] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1302.544329][ T6130] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1302.561249][T18414] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1303.080451][ T6130] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1303.108580][T18414] usb 7-1: USB disconnect, device number 44 [ 1303.114562][ T6130] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1303.786476][ T30] INFO: task syz.9.3588:20494 blocked for more than 144 seconds. [ 1303.796177][ T30] Tainted: G L syzkaller #0 [ 1303.815374][T18497] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1303.818176][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1303.981332][T18497] usb 3-1: too many configurations: 125, using maximum allowed: 8 [ 1304.170348][ T30] task:syz.9.3588 state:D stack:28024 pid:20494 tgid:20493 ppid:18017 task_flags:0x400140 flags:0x00080002 [ 1304.197295][T18497] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1304.206758][T18497] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1304.224383][ T30] Call Trace: [ 1304.234648][T18497] usb 3-1: Product: syz [ 1304.243745][ T30] [ 1304.248144][T18497] usb 3-1: Manufacturer: syz [ 1304.252873][T18497] usb 3-1: SerialNumber: syz [ 1304.255775][ T30] __schedule+0xfee/0x6120 [ 1304.274206][T18497] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1304.295431][ T30] ? __lock_acquire+0x4a5/0x2630 [ 1304.300907][ T30] ? __pfx___schedule+0x10/0x10 [ 1304.310771][ T793] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1304.325488][ T30] ? find_held_lock+0x2b/0x80 [ 1304.335286][ T30] ? schedule+0x2bf/0x390 [ 1304.339713][ T30] schedule+0xdd/0x390 [ 1304.355372][ T30] schedule_preempt_disabled+0x13/0x30 [ 1304.360883][ T30] __mutex_lock+0xc9a/0x1b90 [ 1304.375299][ T30] ? sync_bdevs+0x153/0x480 [ 1304.379869][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1304.384924][ T30] ? __mutex_unlock_slowpath+0x15c/0x790 [ 1304.407638][ T30] ? iput.part.0+0x1a0/0xf50 [ 1304.412337][ T30] ? sync_bdevs+0x153/0x480 [ 1304.425559][ T30] sync_bdevs+0x153/0x480 [ 1304.430318][ T30] ksys_sync+0xb0/0xf0 [ 1304.434583][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 1304.462049][ T30] ? __secure_computing+0x201/0x2e0 [ 1304.474256][ T30] __do_sys_sync+0xe/0x20 [ 1304.483114][ T30] do_syscall_64+0x106/0xf80 [ 1304.493411][ T30] ? clear_bhb_loop+0x40/0x90 [ 1304.503390][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1304.512986][ T30] RIP: 0033:0x7feece99c799 [ 1304.517683][ T30] RSP: 002b:00007feecf89d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1304.535486][ T30] RAX: ffffffffffffffda RBX: 00007feecec15fa0 RCX: 00007feece99c799 [ 1304.543531][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1304.551924][ T30] RBP: 00007feecec15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1304.560006][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1304.568533][ T30] R13: 00007feecec16038 R14: 00007feecec15fa0 R15: 00007ffccd6e8d68 [ 1304.576653][ T30] [ 1304.579743][ T30] [ 1304.579743][ T30] Showing all locks held in the system: [ 1304.588594][ T30] 1 lock held by khungtaskd/30: [ 1304.593475][ T30] #0: ffffffff8e7e7620 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1304.603718][ T30] 3 locks held by kworker/1:1/47: [ 1304.609292][ T30] #0: ffff88813fe67148 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 1304.654798][ T30] #1: ffffc90000b77d08 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 1304.667274][ T30] #2: ffff8880603fb240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1b8/0x63b0 [ 1304.677682][ T30] 2 locks held by kworker/1:2/793: [ 1304.682801][ T30] #0: ffff88813fe67148 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 1304.693550][ T30] #1: ffffc90003df7d08 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 1304.705516][ T30] 3 locks held by syslogd/5159: [ 1304.710381][ T30] #0: ffff8880b843b1a0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 1304.720851][ T30] #1: ffffffff8e7e7620 (rcu_read_lock){....}-{1:3}, at: __schedule+0x2c11/0x6120 [ 1304.730565][ T30] #2: ffffffff9b1d6d48 (&____s->seqcount#2){----}-{0:0}, at: clockevents_program_event+0x151/0x360 [ 1304.749512][T18414] usb 3-1: USB disconnect, device number 30 [ 1304.756261][ T30] 2 locks held by udevd/5177: [ 1304.768060][ T30] #0: ffff8880b843b1a0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 1304.778844][ T30] #1: ffff8880b8524648 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2c11/0x6120 [ 1304.787845][ T30] 2 locks held by getty/5562: [ 1304.792823][ T30] #0: ffff8880392f10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1304.803175][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 1304.813517][ T30] 1 lock held by udevd/15726: [ 1304.818277][ T30] #0: ffff8880277bb358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1304.828018][ T30] 5 locks held by kworker/0:0/18414: [ 1304.833370][ T30] #0: ffff8880232aa948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 1304.844614][ T30] #1: ffffc90004cafd08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 1304.856120][ T30] #2: ffff88802abcc198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 1304.866679][ T30] #3: ffff88802ae0d198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0x10a/0x9a0 [ 1304.876164][ T30] #4: ffff888029d7d160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xaa/0x600 [ 1304.887166][ T30] 1 lock held by syz.9.3588/20494: [ 1304.892356][ T30] #0: ffff8880277bb358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 1304.902043][ T30] 1 lock held by syz.5.4048/22460: [ 1304.907181][ T30] #0: ffff888055811908 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 1304.917984][ T30] [ 1304.920319][ T30] ============================================= [ 1304.920319][ T30] [ 1304.928850][ T30] NMI backtrace for cpu 0 [ 1304.928871][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1304.928898][ T30] Tainted: [L]=SOFTLOCKUP [ 1304.928904][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1304.928915][ T30] Call Trace: [ 1304.928921][ T30] [ 1304.928927][ T30] dump_stack_lvl+0x100/0x190 [ 1304.928962][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1304.928983][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1304.929012][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1304.929039][ T30] sys_info+0x141/0x190 [ 1304.929063][ T30] watchdog+0xd25/0x1050 [ 1304.929095][ T30] ? __pfx_watchdog+0x10/0x10 [ 1304.929120][ T30] ? __kthread_parkme+0x18c/0x230 [ 1304.929148][ T30] ? kthread+0x13a/0x450 [ 1304.929171][ T30] ? __pfx_watchdog+0x10/0x10 [ 1304.929193][ T30] kthread+0x370/0x450 [ 1304.929209][ T30] ? __pfx_kthread+0x10/0x10 [ 1304.929227][ T30] ret_from_fork+0x754/0xd80 [ 1304.929247][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1304.929268][ T30] ? __switch_to+0x7b4/0x1120 [ 1304.929289][ T30] ? __pfx_kthread+0x10/0x10 [ 1304.929308][ T30] ret_from_fork_asm+0x1a/0x30 [ 1304.929339][ T30] [ 1304.929346][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1305.061119][ C1] NMI backtrace for cpu 1 [ 1305.061147][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1305.061167][ C1] Tainted: [L]=SOFTLOCKUP [ 1305.061173][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1305.061182][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1305.061204][ C1] Code: e8 82 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 f1 1b 00 fb f4 fc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1305.061217][ C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000246 [ 1305.061231][ C1] RAX: 000000000724dad7 RBX: ffff88801e69a4c0 RCX: ffffffff8b8f9c75 [ 1305.061241][ C1] RDX: 0000000000000000 RSI: ffffffff8de74d20 RDI: ffffffff8c1afba0 [ 1305.061250][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: ffffed10170a6795 [ 1305.061259][ C1] R10: ffff8880b8533cab R11: 0000000000000000 R12: ffffed1003cd3498 [ 1305.061268][ C1] R13: 0000000000000001 R14: ffffffff90d98310 R15: 0000000000000000 [ 1305.061277][ C1] FS: 0000000000000000(0000) GS:ffff888124445000(0000) knlGS:0000000000000000 [ 1305.061293][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1305.061302][ C1] CR2: 00007f1cc1be92f8 CR3: 0000000037d6b000 CR4: 00000000003526f0 [ 1305.061312][ C1] Call Trace: [ 1305.061318][ C1] [ 1305.061324][ C1] default_idle+0x9/0x10 [ 1305.061341][ C1] default_idle_call+0x6c/0xb0 [ 1305.061357][ C1] do_idle+0x35b/0x4b0 [ 1305.061377][ C1] ? __pfx_do_idle+0x10/0x10 [ 1305.061396][ C1] cpu_startup_entry+0x4f/0x60 [ 1305.061413][ C1] start_secondary+0x21d/0x2d0 [ 1305.061434][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1305.061459][ C1] common_startup_64+0x13e/0x148 [ 1305.061481][ C1] [ 1305.238029][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1305.244980][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1305.255674][ T30] Tainted: [L]=SOFTLOCKUP [ 1305.259987][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1305.270440][ T30] Call Trace: [ 1305.274009][ T30] [ 1305.276945][ T30] dump_stack_lvl+0x100/0x190 [ 1305.281674][ T30] vpanic+0x552/0x970 [ 1305.285646][ T30] ? __pfx_vpanic+0x10/0x10 [ 1305.290133][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1305.296494][ T30] panic+0xd1/0xe0 [ 1305.300336][ T30] ? __pfx_panic+0x10/0x10 [ 1305.305207][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1305.312139][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1305.319028][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1305.325350][ T30] ? watchdog.cold+0x198/0x1ca [ 1305.330132][ T30] ? watchdog+0xd35/0x1050 [ 1305.334720][ T30] watchdog.cold+0x1a9/0x1ca [ 1305.339408][ T30] ? __pfx_watchdog+0x10/0x10 [ 1305.344158][ T30] ? __kthread_parkme+0x18c/0x230 [ 1305.349444][ T30] ? kthread+0x13a/0x450 [ 1305.354010][ T30] ? __pfx_watchdog+0x10/0x10 [ 1305.359291][ T30] kthread+0x370/0x450 [ 1305.363434][ T30] ? __pfx_kthread+0x10/0x10 [ 1305.368096][ T30] ret_from_fork+0x754/0xd80 [ 1305.372756][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1305.378029][ T30] ? __switch_to+0x7b4/0x1120 [ 1305.382689][ T30] ? __pfx_kthread+0x10/0x10 [ 1305.387262][ T30] ret_from_fork_asm+0x1a/0x30 [ 1305.392219][ T30] [ 1305.395699][ T30] Kernel Offset: disabled [ 1305.400023][ T30] Rebooting in 86400 seconds..