last executing test programs: 9m52.224947412s ago: executing program 3 (id=266): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x400000000000000) 9m50.387078868s ago: executing program 3 (id=271): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xac, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x9}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0xfffffffb}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}, @IPSET_ATTR_SIZE={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8a03}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}]}, 0xac}, 0x1, 0x0, 0x0, 0x4040040}, 0x4000000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$TCXONC(r0, 0x540a, 0x3) (async) ioctl$TCXONC(r0, 0x540a, 0x2) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xac, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x9}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0xfffffffb}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}, @IPSET_ATTR_SIZE={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8a03}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}]}, 0xac}, 0x1, 0x0, 0x0, 0x4040040}, 0x4000000) (async) 9m50.256351318s ago: executing program 3 (id=273): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') r5 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r6, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1808caa, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r7 = io_uring_setup(0x4803, &(0x7f0000001240)={0x0, 0x8efc, 0x800, 0x4, 0x1d1}) io_uring_register$IORING_REGISTER_BUFFERS2(r7, 0xf, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001500)=""/223, 0xdf}], 0x0}, 0x20) 9m49.20929096s ago: executing program 3 (id=274): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x80000000000000a, 0x2) r1 = syz_clone(0x40000, &(0x7f00000000c0)="4b0bc646ed7bc1f638b511f56dbbf9a08870e81b7f90704a329bef68356637f44e847bb3e5a897aff75d37b4d29a7bb9ca704d4e26e1d450040576c7e47f122e7d84ba0433d022cc77e50463580f800224fa99f51e4736b41fdb7089ea5f8bb47c30820a8d205881ab54a75edfe55fa079edf62ebc24668b6cca2820dd140f644df784df763d734cb18a38900bcb1589ce95b9f882f7b8bd141c31c2a0e0a69c159cb4e3d11096599b24de7a9416973524e4a27269f71fd032ebc04b3c50f750698a1b6ca546ded599970e7b9df7ff9650f6aec040e819ab6b9b21c73b", 0xdd, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="446e70e8eb3f0836aa9d8c49b87cbb63a889aab980e2d4975a0298a3425fdd29c16c66f8029162c573326b213c44d808200e122a2b33b45f9da90f78d06ea86f8493c73e8d1cb0504ff2727ca0db81a4fb9f6fc432f9db1633b0b8a7fb25273dfa67e443e638af97f7f25028195f41126ebda5f8f7a234852a3e7d6692f1c97f83e6887b037ec9f9255a9fa3a8e317c8aaea4f637fba5144edc65dbdc3461c5b10ba7d43d2ab34c9ae56da5aa1") r2 = syz_open_procfs(r1, &(0x7f0000000300)='net/nf_conntrack\x00') syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000001740)=@IORING_OP_FADVISE={0x18, 0x60, 0x0, @fd_index=0x9, 0x5978, 0x0, 0xfffffffa}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000340)={0x2, 0x1, 0x3}) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000003c0)) getsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000e80), &(0x7f0000000ec0)=0x10) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r2, 0x7ac, &(0x7f0000001340)={0x0, 0x0, 0x4}) getresuid(&(0x7f0000001440), &(0x7f0000001480), &(0x7f00000014c0)=0x0) read$FUSE(r2, &(0x7f0000007fc0)={0x2020}, 0x2020) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) quotactl_fd$Q_SETINFO(r2, 0xffffffff80000602, r3, &(0x7f0000003680)={0xb1, 0x9, 0x0, 0x3}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_INFO(r5, 0x0, 0x481, &(0x7f00000036c0), &(0x7f0000003700)=0xc) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000003740)=0x2) r6 = fsopen(&(0x7f0000000240)='tracefs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000280)='gid', &(0x7f0000000040)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D\xde\x1e-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\x98\xf2\x1e\xe4\'U\xb3\xf8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\r\x00\x00\x00\x86N\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xff\x01\x00\x00\x00\x00\x00\x00\x96t\\\x0f\x12C\xf0\xe5C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\x8e\xa8\x10\x94JmDv\xcc^\xf1\xc4g\xd6,\x1e\xa0\xcc\xbf\xfd\x97\v\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1\tf>>\xb5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x97\xc0\xf6\x0e\x00\x00\x00\x00\x00\x00\x00\xf9\xdcaA\x95\x9fUjHo\x93\xa0jh:\xe3\xa9\xd0:&\f\xb2VK=c&!92\xb8@A\x9eb\xab\xbd\xf8#,\x8e\x86T_\xc4\x88\x9b\x11vC\x14\x99j\x01R \xeb\xaaa\xaab\xe4B\x88jST\xfbt \x85\x13\xc73', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x100000000000000) r7 = dup(r2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000003980)={0x0}) ioctl$TUNSETVNETLE(r2, 0x400454dc, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000005e40)={0x8, 0x0, [{0x6000, 0x42, &(0x7f0000001380)=""/66}, {0xb000, 0xe7, &(0x7f0000001500)=""/231}, {0x0, 0x28, &(0x7f0000003640)=""/40}, {0xffffffff, 0x29, &(0x7f0000004b80)=""/41}, {0x1, 0xeb, &(0x7f0000001600)=""/250}, {0xb000, 0xd0, &(0x7f0000004cc0)=""/208}, {0x10000, 0xaa, &(0x7f0000004dc0)=""/96}, {0x41000, 0x1000, &(0x7f0000004e40)=""/4096}]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000380)={0x0, r8, "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", "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"}) 9m45.70916176s ago: executing program 3 (id=282): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="210928bd7000060000104400000008000300", @ANYRES32=r1, @ANYBLOB="140023800800140087ffffe3"], 0x30}, 0x1, 0x0, 0x0, 0x30000801}, 0x0) 9m43.724450867s ago: executing program 3 (id=285): r0 = socket$kcm(0xa, 0x2, 0x11) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0xa0240, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) close(r1) r4 = add_key$keyring(&(0x7f0000002280), &(0x7f00000022c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r5 = add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000002480)=@chain) pipe2$watch_queue(&(0x7f0000002300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r6, 0x6f) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000140)={@host}) setsockopt$inet6_int(r6, 0x29, 0x7, &(0x7f0000000180), 0x4) r7 = add_key$fscrypt_provisioning(&(0x7f0000002a40), &(0x7f0000002a80)={'syz', 0x2}, &(0x7f0000002ac0)={0x2, 0x0, @b}, 0x48, r4) keyctl$KEYCTL_MOVE(0x1e, r7, r4, 0xfffffffffffffffb, 0x1) sendmsg$kcm(r0, 0x0, 0x4) 9m43.441931813s ago: executing program 32 (id=285): r0 = socket$kcm(0xa, 0x2, 0x11) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0xa0240, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) close(r1) r4 = add_key$keyring(&(0x7f0000002280), &(0x7f00000022c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r5 = add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000002480)=@chain) pipe2$watch_queue(&(0x7f0000002300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r6, 0x6f) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000140)={@host}) setsockopt$inet6_int(r6, 0x29, 0x7, &(0x7f0000000180), 0x4) r7 = add_key$fscrypt_provisioning(&(0x7f0000002a40), &(0x7f0000002a80)={'syz', 0x2}, &(0x7f0000002ac0)={0x2, 0x0, @b}, 0x48, r4) keyctl$KEYCTL_MOVE(0x1e, r7, r4, 0xfffffffffffffffb, 0x1) sendmsg$kcm(r0, 0x0, 0x4) 2m52.698985529s ago: executing program 4 (id=1569): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0x4, 0x4) userfaultfd(0x80001) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9400000013004f0a000200"/20, @ANYRES32=r3, @ANYBLOB="00000000000000000800cfffecc507006c001a8054000a80140007"], 0x94}}, 0x20008841) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) splice(r3, 0x0, r5, 0x0, 0x8201, 0x4) io_submit(r2, 0x25, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x4006, r1, 0x0}]) 2m52.321567996s ago: executing program 4 (id=1572): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) getsockopt(0xffffffffffffffff, 0x114, 0x800, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') exit(0x7) statx(r0, 0x0, 0x1000, 0x10, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r1, &(0x7f00000193c0)=""/102392, 0x18ff8) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r2, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000000)=0x15) 2m49.294672425s ago: executing program 4 (id=1583): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) write$char_usb(0xffffffffffffffff, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key(&(0x7f0000001340)='keyring\x00', &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', r2}) fsopen(&(0x7f00000000c0)='nfs\x00', 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 2m49.149170175s ago: executing program 4 (id=1584): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmsg(r0, &(0x7f0000000100)={0x0, 0x1, &(0x7f0000002200)=[{&(0x7f0000000780)=""/4108, 0x437aba2}], 0x1, 0x0, 0xfffffdee, 0x407006}, 0x2125) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0xe656b000) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r2, &(0x7f0000000140)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)={0x7, 0x811, 0x0, {0x77359400}, {}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x2b, 0x2, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) ioctl(r1, 0x9, &(0x7f0000000580)="97456c4ca3a31953e232ffa799b14f824ce3d07972dac59f18d6e973f435ac390d48b35262c15d94e6f463f72898771d960c7026f6f8c360ea8808a46448778dd58f6d4c70243ea2822ba6c4b76fde5a3281310cedc807cabc722a70811cc45a3c8390dd2fb276ed4e34c7962e9dff279ec26896cdf3ab120af4f1e5a3b0a291ea5a5737e6053ba9ecc95be03752c56cf0a9c369188d5964bfabae87c204868c828b26764b643701fa2540d096ecb363655175881645264fe9dd8f070788295cc0d3a6383e505b3a779318afae2116d347448bae4c4091e31215802f5588af") r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r5, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x0}, 0x68) dup3(r5, r7, 0x6700000000000000) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') 2m48.137554701s ago: executing program 4 (id=1593): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000003240)=[{&(0x7f0000000680)="e87402720892e3e63fa8764354bcad90c979a9ab77c8f186ab2b81b31f8db7f085681ab1877ec2ef0e1c1e9c32cb2fbd", 0x30}, {&(0x7f0000000700)="ef3977c0585e6989e498deca6dcbb1d05921c2f84a60a92927972b5576ede8646cfe1cc61e0ebc934e9bb2ab3acf5685269f0cbffc535d4af2c41e", 0x3b}, {&(0x7f0000000840)="939a80baf886fe19d0eaef59a774373ca1deafd713507864ecee17abe72c65139c7e16f5b112d04ed2bcd3f59a294d30c5ddedd0b7d224080235d8c6bfcb542a16bf1e99c94fd5c1b82f900bb4ecf894cb4d394b699629f952af6b1ef8c732f867dcb1163eae21fe2c5ecf80ed94ef16922ef44c25f1b2345f44c18be584b04770dac660eceae3cae2846918d1861e5afe15f2988c86c237633c30fa8188f340b4b32e6233cf407f2012670ef7d7cfad22de4ed75254098203a3488bdfda9a4978b071910b3a1f7d99727b5d61461dad6d95f742e6a9cc8411", 0xd9}, {&(0x7f0000000940)="bc105c126c31b265cd12f8d289f6f76f80b5a475b2445c6dd0dbbc04a6413a971a29294a9c84f67289f996705d726b8b31df9e52e14547b373dedb96f3def9d21a5402a7d499c1ac85ca206e90334e8be50184f110e0fbbf3e725f89daf3fdf657a280cc066340defc43b2defa15176217d3fdcf0a538b4ee22c1e2d5da94a5b59fab8457595580c21800ad07babc91e8bb650527b6fb39a7e91a39da6aedf20205df61de92964110f9da25f", 0xac}, {&(0x7f0000000a80)="91081551cc85c81e1d7605d6b7e9a2ad97e1e96558810a6bc9b527132dfd1033f78bdea2a0d8264d39131c1b9fb6fa3a668273eb991b17fee4fb5b604fc093782620753c7a366ccf", 0x48}, {&(0x7f0000002240)="c37474be4cc584ebad236acce32156aef2b899e6aa3b734a6e830ed7fe0a7cd2c1fb3b862dcd4dddc81fd8c560933c473677fcccfef4f6b153b7c89051a51fcd1b77d4d2e086fc38aa9059c60ebcf80f97b6b7a810dcba0acd46048e3f016c3b649937cffc10e6fe4ac7d4bc4e6d134475691fc61c73d811206812661b435e17d50c48f77003a9b484ec5974fc354274dd63bdd25e34dc67d258bfe62927bb8cc1b6c35d346e5272a4e10bd26e6df3f6bbd2dd8ae9b715eeb9841525665cc7d06964638f34accb9bbab7a9fcc80d1b25d3a8186adca60d3539cdfd8567934e107842ee63ae4fc3b675258b68259da25a42c6455d0d3411cc898ff0357adee8320fd6876792eae7cb6411bf726e22b780147c1c516a08d5e1fd1a541d32b1334e817cae91562af018bf21c86a45cfe639d7673c751d47f7762765a4ce38ea8dd2b793e968582fd4940334fd1043c584fa630f56cea5fadbffe07e291a739387187e28e90533f5de3ffcdd26004d7e74cbc53f8c35c654b267ca502b159a4bb0c622707e36293447d5e12abb9db5fd6f7d4433b59352c9fd62fafa81b1801db54d45580e86f1eaea2dba4ec87280a8b85e296765a37e55cb498f8d0b70e37d0b9555b69b274c3bb8e336d0ca97cb4da2c86474ddd16c9bf76b8a9789e4ec8d8060ebddd454df67c74fb671d62614968485e642874623f2ff579d57e1c4fbd797e85248ffb601202735f4c312821bc6de34c417ecd93418b206e8da17952a57c56518f66581aaeb1340abb341684a2fc267460d5a51312f513e51d33de309fbc9219f59da280e385ff55b23c1051df97e06f8d80926e28e9ba36dcdd69bb65fc2476ed7cda29329e588224a4b0d3cc9427ad0180f9441a73f4dc30ab5250bca5035c601c5b90214317b87a3168ba9d692e73d1f3d7c2b1fe69a8ca9ba0d42d4ca8af41905951a4f02a8f253c08f6e782d4d03fd001e63acf4b773bedd0874ede41df7603761b465541611644a5addf7c181fe747cb79b254cd94b4837e5da2a6478d5ad6c4dd5164f7c57e30c851a2e025dc3a8af3288bbce9aa87658ff4dcf22453baaa0bcb57564a339a92a4f32eecd52bb30d3e86d160fe0b909e878dfe396489927a62085ffb36cbd91d6dfa3467d980d31604228b7214c0ea838a9fc993f3aa9347008a0f4e6c664dd3b6381ac560ce7e5b7e85d2005e8844c593be4062b8ddc80409c10c95a00b52c4045bd6de0d7c38b2937ab690ae3a377677dbf7018c3f67fa965bf32c0ff6e8c75faf4f103279d0377e201f98b59e12b724f7636a94a7a278795abffb4eacf8abafdd2c6cf2d994be7aa90f54ee2261b6e3423f591ac75ed03341442ecf1959abe2b86e9b8a95d8395feb566cc1f673c7ae5a58ebde4f27daba5ece2fa2e0307e6ede34aa7a9ab8a41bf17d2784977d9948ca3cf7b47b6d12fa01c73e988e971e9d9a7062d4cada04d1e1281bff43145190ecc3e84230856581f2426fa46b184a0b4c681acfabd76f913bc7d6a3e044676c36c23a66876e28540a9ef07d7bee4cf4d3f801e267c317b93fba04c831e45a2373a1895a854e79bb9098456f9ab96cf7502c23bf0a5c95974b5c2cf42dbccc26b9d83d3f8cd280cd323beaab597e4e0b2ad81d75ed151d0da95107011d3ab6f7ff6bd12a381782b861b60eee67da2309048f43ca223844d6a2447a221b8a625705d950d3e0567ed7ad4767e712c7229abfd656f62c4858144dc548faffb4ac0c9f5d61f7faa223d9813e6e253c27ec823bb3875fb042ffad6c5d37d87d7bd1429c1aed59cc2b11f5b0e197a6b9d38690305d01d7f44b6f0924d112b5c46c6795ec68b2425ade50101846698d0587c9ff7068ebf8398850ef34470ff468fe9697bde2af981a729c4ce2a0cf9c22210cc91f16e816a1125140efc778ab04e16e41c1c62c65ad01ced31095f44852c4894d426076a50d927cf08d018651002940fae58980bd5174be9de73682f8cd4b1ab65b11b1be12a2e6b358b450ab85ed08ddc4cedbb8193415a71ce7bd7d5ef0f0ef02b4cc9fa88386088a621497333d6de15967481192263205d337e48584ef8ebe3de3d6cd1c92f9f98e4de5922e994f0e81b162866e26deb40779c54fd3c7144b4bbf9febc8221053f929e40c37f35cd3e5a6582f0228cc4a6d579bd4c1191bbe7ef91db6ee7a95cb0515cfba1860b6c8cf8967c926c48eb04d43902c0f705f1ff477f3581a943e3b6685185ff0cd2614586c372b201432bfbd63f9f024e75d64dc586d3a50be8e8dba1a255709bb79d70616db6373c40c63182e500742137f08c234aae73fb1e3bffb3c85375cb46566013aa2b73a73147f42fcb5e1694a349d5300492c84c115fa65cdea734d34b751889578491c3b06e1425921cc89d2d1dcc5d6a1338b20fd555111afef51a91464808c0f51ee123f2690dfd1af50a024be0d7d26426e27bd7d52003c1232410648966b1363afad602c2578e94f106c9479d69f374fab7b2488051e8ad27a9abf03b71cd9c7f34aea721a08185bd65b0c516339607a5746ff6e8ee789b75f23702187cfdcfe1d6d4243026d0cd2813afb66af168f94117ee8dc75964e9fe0bb7cfe6d667fedfa3e7dbf69d4aa5477ed5f61d7dfcbf76e1fb1af0ce53c776c0629e98fb9a2296562b44f7f51c0df3a804baa2417eedfaee2cd31342ad42473a9b96b618476f5b58fc20c0654b98acf16b3e5cefd22ec3f8b6258b652f12ee00fe1e280029853af210e089b256a0c945a0dc66860ac295b7d8be6b8caf436bdf824a392e23c4e454a040deb456a02b3dae656d507310ce45b02cc282720d1d8919b0a478e3a77c72cc5a4a3e509095d5d07615a481926068650b8d076147f2c194a5938b2574083c122417fb28bd9c37b79c1b873bc724b895364e42e9f4b89444c55c8ab5af290995cd2a6736d0e96ede1ae056e9cf9810756d080e80f2b7bd0398d2801acfdbaf022f0463ad61256f506b8ae0d4248101a9266e95de0e247d4c13508200ece102a6a2ef698c9fd9087c498e29d709093fb2db9653f1bd94ff1591b239be105943d931a74d456e394c2c9bde364dc9189f3cb38811eb4ba57f52b0c42061842f0624b1fbcb04326063d74be4aed4cf9123daec822c08c73b80e2103dd43c41fed67e0940508c2464a3cf0e6d83dd97bf0290a0f3a708cb6c71940f79177be7b8008ca55c8de089a1c1d2efe0a80babf38ed272b728e68464e04ae8ff6d28135610d77a3020242ae520de6002fe9f5d271711673632fa1ed72d7e00a5db7c59a848abfe444b5ddefebae0249d2eeedc92a5e06aed2d285af5fad26780928d23c96e1338c496a371f98005a101c5f514868ef78380ec11d50ad15f8bdd587c54592fa8cac7ef1a9c74d5426247e689a56150f98f9168050192100b94c68cf9b8dfde64e202672119d144b57f821b32ff2848d0a18a0c364379f11b137145342d6cff7b3351d3b633c97a756f2dc0dfd8662b20147f4f927bf2c20270467ed16a25bc67d1e19e3afb70403a8551bbc2372f2aa9924cee93d35e00398626b5f239f0bc2250063f40b4bdd7aff0ff4b463fdf6e25180a8b9fce8aa0dffaef0a2e459d046e5c250dc9afc904bdb16f0a2fbecb2ecf4206e063900a676a178f26c283b2c858f01c8cd3255b8693eb5118ec4a9f59756d81b6587a68186b859d80d66b4f5e002ba93dbebe2fc570e80b0224ee8b2f79a03f26de95328d26982d273afe5099b20f7ea9a9ae0cc26d7a12191fa10dee66f70db1e4d230b89a9eecfc96b2aff61e23f6c838ee70702aebebaf5c91c9554b6cf1825ad8d7d5dc88ff9dea0dae2b77d404386d5bb2ca5da5f34669b62e1626e9c830e2dbb0158ec6f12dadc0db0ccd107e0bef6b836e0c919a1d88dbaad898fe25d25ccffb85d1edbe0fcc1b7a095c51df915ccc208b9b17bc737e0bd82c70ab62f18ae5341087731060d07545031f21e40ebdff3261ebc4a9c4d9bf6878f1f0892dd4042fac15fa86ac4c2d94493710939304c833da75d79b6dbd828543684b9824573f96f0960c03cdffa44b2cfed2fb6240fa3b3b074b2da82ccaf921d1b7548fc2229f79ae705534167bfe63a9aac06451c3b611ee2996cc8461156200e84178c781dc8bc312558f72c8eab8edaa426a90e38d11dd37cddbd829578f600c501e222ee843d7aa7d79d225ffdc8d100394f45359dc77de4df5b1719ca6aff7c1150e782c12563afe6f9bc2e5d7e0eed9e2cc56b0", 0xbc8}], 0x6, &(0x7f0000000500)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x4) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1}, 0x10000) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB]) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x4480, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r2 = open(&(0x7f00000002c0)='.\x00', 0x80000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, 0x0, 0x0) 2m47.000837543s ago: executing program 4 (id=1599): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 2m31.74537833s ago: executing program 33 (id=1599): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 1m36.111801392s ago: executing program 6 (id=1645): madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) io_setup(0x9, &(0x7f00000000c0)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/freeze_filesystems', 0x20001, 0x0) io_submit(r0, 0x1, &(0x7f00000013c0)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000100)='9', 0x1, 0x0, 0x0, 0x0, r1}]) r2 = open$dir(&(0x7f0000000040)='./bus\x00', 0x10000, 0x40) fcntl$addseals(r2, 0x409, 0x8) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r5 = open(&(0x7f0000000000)='./bus\x00', 0x1a1043, 0xc5) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f00000003c0)={0xac1, 0x40, 0x1fc, 0x33, 0x1}) write$FUSE_INIT(r3, &(0x7f0000000240)={0x50, 0x0, r4, {0x7, 0x1f, 0xfffffff8, 0x202, 0x0, 0x0, 0x2, 0x6}}, 0x50) write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="33000000060000000000000000000000010000000000000001000000000000000a000000bc818bd139dcd9647daa81292d7d00"], 0x33) 1m24.781917437s ago: executing program 5 (id=1796): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fe\xdc\x8b\x18rBl{\x82=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\\\xa2\xfc\xe3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) syz_clone3(&(0x7f000000dd80)={0xa40400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="10797fcd6c7704e11e05000000000000009ff075475e4b94", 0x18) r5 = accept$alg(r4, 0x0, 0x0) readv(r5, &(0x7f0000000240)=[{&(0x7f0000000000)=""/27, 0x1b}, {&(0x7f0000000180)=""/192, 0xc0}], 0x2) sendmmsg$alg(r5, &(0x7f00000004c0)=[{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000007c0)="a19f9e", 0x3}], 0x1, 0x0, 0x0, 0x8854}], 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x1, 0x70bd28, 0x25dfd402, {0x0, 0x0, 0x0, r3, 0x64e98, 0x12ac1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BCAST_FLOOD={0x5, 0x1e, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) 1m22.032950137s ago: executing program 5 (id=1799): socket$nl_generic(0x10, 0x3, 0x10) capget(0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="ffffff7f70e58a217c000000000005000600af0000be340e98bbb031567a24b7e60f000500050001000000080003000000002c"], 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x24000806) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c980128846360"], 0xffdd) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f00000010c0)) newfstatat(0xffffffff0000005d, 0x0, 0x0, 0x1000) 1m19.412205896s ago: executing program 5 (id=1802): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) get_mempolicy(0x0, 0x0, 0x5eb, &(0x7f0000001000/0x13000)=nil, 0x3) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_GET_CAPABILITIES(r3, 0x8004551a, &(0x7f00000000c0)) 1m18.726463492s ago: executing program 5 (id=1804): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz0\x00', 0x1ff) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f00000000c0)=0x8004, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001a000100000000000000cf0080202000000000000000000008000200ffffffff080001"], 0x2c}}, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)={0x18, 0x56, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1, 0x0, 0x0, 0xea}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) openat$cgroup_ro(r2, &(0x7f00000002c0)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfa, 0x20ff, 0xd, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r4, 0x2, &(0x7f0000000380)={0x0, 0x6c}) openat$comedi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/comedi5\x00', 0x20800, 0x0) inotify_init() r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="7a0af8ff75256320bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5986fc44bc25fb591cf77b9dfb379a3f611dbc2a364916f098dab10b1a297cf528666d1ddd73f30f2382f6cda4bfdd45be583823c0f092248a57d48621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000800db583620ce7243d1aebdb638d91dbef6619358399aa9c2acd068c03efefd8bc77edf2d34b12cd48a1b20fb7dd843267e0331759f4ec6b5b0af58e604f494eff289026d5045ef08000000000000007718a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5202db761014b1b999a12df6bee431a6681000000263b6233e1c0fe30e384c3cb07b74a72291a1a2b523dd81b6651b1ee48e999bb004823ebcd8c65743f31f84b263ab9b3426692d01ad194f302d7a658e9e54687d3c56d7bedb6b2f25ddb8c640ab321a402058c9221b6870814cf4ee23ddb79fff5eb156e0a000000000000f2bd1d4a178d86d6935eb8b75bc4eb680d10e8b6a54c6c8674caf63ff76622939a20d4aadf85db40179c2cf83ee07e30a279d8f9f3bc282deb43a03409f8e6972f3f720d045923702cede0f3e91411f3f1b16f065624f280a7dcce8db910f93c49b9e0b6dd7356aa79d5fabb5c0d0da6d719d7e0efb2bb713d18242cd5df6ca53307a4cdd9030a46c190e317c8de5e5c3933fd5d5bf38f6b9fc39fc829dcfe4af8ac5fbb7314a7a433e0182767d1376eda2b20"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x2000d00, 0xe, 0xaf74d922fc9bf873, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0xfffffffd, 0x4000000, 0x0, 0x0, &(0x7f0000000780)="abe320678adbafb1c806b647bb74ed129e09672f9bf9dd3b0c687f16fa0ee9a2d8dfabbf7a048645f1c9a075e664cd0d0a8669869222b3763698301ceeb89c3a28dcfccdaf8a9706055013a2cb795809e5d41847408cec52979cc451bfa20cf318bc33bbcd2d5b13646bac791be31192afc6273924a6419b9fbf8543aa744c3822b320b927ef8946bc1514a23a794f0593af847970b9248d17ef1ab222787433188977be6a5873806bea7cdea600"/200, &(0x7f0000000000), 0x5, 0x0, 0x1002}, 0x28) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000480)=ANY=[@ANYBLOB="050000000000000005000000000000000900000000000000", @ANYRES32=r3, @ANYBLOB="00000000f7ffffffffffffff00"]) 1m17.033017732s ago: executing program 5 (id=1808): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x6, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x2, 0x3, @remote}, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04"], 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa5a01f3c2f13608060001080006040002aaaaaaaaaaaaac1414bbaaaaaaaaaaaaac1414bbfac18bfa11ba867e817093bf131da5802e7b5a944df34d75db8a6a7747f0338de187ec73b3d7207b031ab8b8ad"], 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0x2}, 0x6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 1m16.510103745s ago: executing program 5 (id=1810): socket$nl_generic(0x10, 0x3, 0x10) capget(0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="ffffff7f70e58a217c000000000005000600af0000be340e98bbb031567a24b7e60f000500050001000000080003000000002c"], 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x24000806) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c980128846360"], 0xffdd) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f00000010c0)) newfstatat(0xffffffff0000005d, 0x0, 0x0, 0x1000) 1m16.050033992s ago: executing program 34 (id=1810): socket$nl_generic(0x10, 0x3, 0x10) capget(0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="ffffff7f70e58a217c000000000005000600af0000be340e98bbb031567a24b7e60f000500050001000000080003000000002c"], 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x24000806) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c980128846360"], 0xffdd) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f00000010c0)) newfstatat(0xffffffff0000005d, 0x0, 0x0, 0x1000) 1m16.038862543s ago: executing program 6 (id=1645): madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) io_setup(0x9, &(0x7f00000000c0)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/freeze_filesystems', 0x20001, 0x0) io_submit(r0, 0x1, &(0x7f00000013c0)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000100)='9', 0x1, 0x0, 0x0, 0x0, r1}]) r2 = open$dir(&(0x7f0000000040)='./bus\x00', 0x10000, 0x40) fcntl$addseals(r2, 0x409, 0x8) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r5 = open(&(0x7f0000000000)='./bus\x00', 0x1a1043, 0xc5) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f00000003c0)={0xac1, 0x40, 0x1fc, 0x33, 0x1}) write$FUSE_INIT(r3, &(0x7f0000000240)={0x50, 0x0, r4, {0x7, 0x1f, 0xfffffff8, 0x202, 0x0, 0x0, 0x2, 0x6}}, 0x50) write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="33000000060000000000000000000000010000000000000001000000000000000a000000bc818bd139dcd9647daa81292d7d00"], 0x33) 1m12.235978948s ago: executing program 6 (id=1645): madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) io_setup(0x9, &(0x7f00000000c0)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/freeze_filesystems', 0x20001, 0x0) io_submit(r0, 0x1, &(0x7f00000013c0)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000100)='9', 0x1, 0x0, 0x0, 0x0, r1}]) r2 = open$dir(&(0x7f0000000040)='./bus\x00', 0x10000, 0x40) fcntl$addseals(r2, 0x409, 0x8) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r5 = open(&(0x7f0000000000)='./bus\x00', 0x1a1043, 0xc5) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f00000003c0)={0xac1, 0x40, 0x1fc, 0x33, 0x1}) write$FUSE_INIT(r3, &(0x7f0000000240)={0x50, 0x0, r4, {0x7, 0x1f, 0xfffffff8, 0x202, 0x0, 0x0, 0x2, 0x6}}, 0x50) write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="33000000060000000000000000000000010000000000000001000000000000000a000000bc818bd139dcd9647daa81292d7d00"], 0x33) 1m9.360187145s ago: executing program 6 (id=1645): madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) io_setup(0x9, &(0x7f00000000c0)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/freeze_filesystems', 0x20001, 0x0) io_submit(r0, 0x1, &(0x7f00000013c0)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000100)='9', 0x1, 0x0, 0x0, 0x0, r1}]) r2 = open$dir(&(0x7f0000000040)='./bus\x00', 0x10000, 0x40) fcntl$addseals(r2, 0x409, 0x8) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r5 = open(&(0x7f0000000000)='./bus\x00', 0x1a1043, 0xc5) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f00000003c0)={0xac1, 0x40, 0x1fc, 0x33, 0x1}) write$FUSE_INIT(r3, &(0x7f0000000240)={0x50, 0x0, r4, {0x7, 0x1f, 0xfffffff8, 0x202, 0x0, 0x0, 0x2, 0x6}}, 0x50) write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="33000000060000000000000000000000010000000000000001000000000000000a000000bc818bd139dcd9647daa81292d7d00"], 0x33) 53.212552511s ago: executing program 6 (id=1645): madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) io_setup(0x9, &(0x7f00000000c0)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/freeze_filesystems', 0x20001, 0x0) io_submit(r0, 0x1, &(0x7f00000013c0)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000100)='9', 0x1, 0x0, 0x0, 0x0, r1}]) r2 = open$dir(&(0x7f0000000040)='./bus\x00', 0x10000, 0x40) fcntl$addseals(r2, 0x409, 0x8) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r5 = open(&(0x7f0000000000)='./bus\x00', 0x1a1043, 0xc5) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f00000003c0)={0xac1, 0x40, 0x1fc, 0x33, 0x1}) write$FUSE_INIT(r3, &(0x7f0000000240)={0x50, 0x0, r4, {0x7, 0x1f, 0xfffffff8, 0x202, 0x0, 0x0, 0x2, 0x6}}, 0x50) write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="33000000060000000000000000000000010000000000000001000000000000000a000000bc818bd139dcd9647daa81292d7d00"], 0x33) 49.288856181s ago: executing program 6 (id=1645): madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) io_setup(0x9, &(0x7f00000000c0)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/freeze_filesystems', 0x20001, 0x0) io_submit(r0, 0x1, &(0x7f00000013c0)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000100)='9', 0x1, 0x0, 0x0, 0x0, r1}]) r2 = open$dir(&(0x7f0000000040)='./bus\x00', 0x10000, 0x40) fcntl$addseals(r2, 0x409, 0x8) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r5 = open(&(0x7f0000000000)='./bus\x00', 0x1a1043, 0xc5) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f00000003c0)={0xac1, 0x40, 0x1fc, 0x33, 0x1}) write$FUSE_INIT(r3, &(0x7f0000000240)={0x50, 0x0, r4, {0x7, 0x1f, 0xfffffff8, 0x202, 0x0, 0x0, 0x2, 0x6}}, 0x50) write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="33000000060000000000000000000000010000000000000001000000000000000a000000bc818bd139dcd9647daa81292d7d00"], 0x33) 19.809912338s ago: executing program 7 (id=1811): socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000027000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="318329bd45e7ca000000000000000009000000000000", @ANYRES32, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4004110}, 0x8000) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x3, r2, 0x230d}, 0xc) keyctl$setperm(0x5, 0x0, 0x1010) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) 15.954522902s ago: executing program 7 (id=1811): socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000027000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="318329bd45e7ca000000000000000009000000000000", @ANYRES32, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4004110}, 0x8000) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x3, r2, 0x230d}, 0xc) keyctl$setperm(0x5, 0x0, 0x1010) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) 13.986550134s ago: executing program 0 (id=1941): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue0\x00', 0x5}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x80) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f00000003c0)={@broadcast, @link_local, @val={@val={0x88a8, 0x4, 0x0, 0x1}, {0x8100, 0x0, 0x1, 0x2}}, {@ipv6={0x86dd, @tcp={0xa, 0x6, "eba828", 0x14, 0x6, 0xff, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], {{0x4e20, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x7}}}}}}}, 0x0) write$UHID_INPUT(r7, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000000c0)={0x6, 0xffff81a4, 0x40, 0x0, 0xf}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 12.510204569s ago: executing program 7 (id=1811): socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000027000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="318329bd45e7ca000000000000000009000000000000", @ANYRES32, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4004110}, 0x8000) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x3, r2, 0x230d}, 0xc) keyctl$setperm(0x5, 0x0, 0x1010) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) 10.534944907s ago: executing program 0 (id=1946): syz_usb_connect(0x2, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000380)={0x60, 0x0, &(0x7f000007c000/0x2000)=nil, &(0x7f0000839000/0x1000)=nil, 0xb8, &(0x7f0000000700)=[{0x1}], 0xaaaac9c, 0x2, 0x0, 0x0, 0x0, 0x4c}) 10.534659988s ago: executing program 1 (id=1947): syz_emit_ethernet(0x0, 0x0, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000000)="aafc361abad74318502891c4c26423fb18e301de0a534d0136cd3295dd6a6d299206fef236153a6fb9f3ddaf173b35381663ab6d9a0d7eda9ebe3f5459c0c467048e63a19e308071", 0x0, 0x48) r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000640)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="001401"], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="400e81"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.677208394s ago: executing program 2 (id=1950): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0x2, 0x4, 0x4, 0x1, 0x1014}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000b"], 0x50) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x34, r5, 0x20d, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x26]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc051}, 0x4000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa0400, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100"], 0x48) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040)=0x30000000) read$dsp(r8, &(0x7f00000000c0)=""/108, 0x6c) 8.51085085s ago: executing program 7 (id=1811): socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000027000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="318329bd45e7ca000000000000000009000000000000", @ANYRES32, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4004110}, 0x8000) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x3, r2, 0x230d}, 0xc) keyctl$setperm(0x5, 0x0, 0x1010) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) 8.431011628s ago: executing program 2 (id=1951): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000027000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="318329bd45e7ca000000000000000009000000000000", @ANYRES32, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4004110}, 0x8000) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x3, r2, 0x230d}, 0xc) keyctl$setperm(0x5, 0x0, 0x1010) 5.933103647s ago: executing program 0 (id=1952): ioctl$KVM_GET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee2, &(0x7f00000000c0)=@attr_irq_timer={0x0, 0x1, 0x0, &(0x7f0000000000)=0x15}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x80000, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$rxrpc(0x21, 0x2, 0xa) getpgid(0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_type(r3, &(0x7f0000000040), 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) futex(&(0x7f00000002c0), 0x8c, 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1, 0x3, 0xdddd1000, 0x1000, &(0x7f0000fea000/0x1000)=nil}) r4 = syz_open_dev$video4linux(&(0x7f0000000100), 0x0, 0x20000) ioctl$VIDIOC_SUBDEV_G_SELECTION(r4, 0xc040563d, &(0x7f00000003c0)={0x1, 0x0, 0x2, 0x4, {0x9, 0x0, 0x3, 0x1097}}) 5.926310012s ago: executing program 1 (id=1953): ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x324) socket$nl_generic(0x10, 0x3, 0x10) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)=@newqdisc={0x3d0, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x398, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "96f12f4f3c45a80086a2182d8ddcee59f1822471d1dca2e7c7b7ef8c93b8a96a99ac6f9e4d192a7c7c11e0b811895195de421827637ee859f15353db27795bfd3a3c9bac840a333f8deab7719f9a3706d5e03b840865996d7d8f96cfdb8c558d1952f53984ed19de5ea6d48039bc1b30a159c614b5f22282d091bba3a30002adbb89283cbfd9dac36aeb685c398d77c60acffa714573cd799369db784c2a5456d7187f3802a3c0839be44f69584313f9ac1214d00a730257410974a9a82680f3a9bf95375a0936dc7b574d29182a9650892517b6876056b8412b28a0ee330b901eac896e3bb31c6a4b2928dffb4f3992ff5b5b0e953f77542d76f0c6ce66320a"}, @TCA_GRED_PARMS={0x38, 0x1, {0x4c0, 0x6, 0x0, 0x3, 0x5, 0x9, 0xfffffffc, 0x3, 0x4, 0x9, 0x14, 0x5, 0x1e, 0x7, 0x69}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x7}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_MAX_P={0x8, 0x4, 0x1ff}, @TCA_GRED_PARMS={0x38, 0x1, {0x7, 0x7, 0x9, 0x0, 0x7, 0x5, 0x40, 0x7, 0x5, 0x10001, 0x1, 0x17, 0x5, 0xf4, 0xfffff38c, 0x5}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x200}]}}, @TCA_RATE={0x6, 0x5, {0x80, 0x9}}]}, 0x3d0}, 0x1, 0x0, 0x0, 0x40488c0}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) mprotect(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x1d, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = fsmount(r0, 0x1, 0x0) fchdir(r6) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="010000000f149782955bdefcf5e99401042a0400000000000000004500757665726273805f73ab625ea474d204678d1f7930e3783d119f15a1a758aa8e82bbcf9e6d8881b925485b6f03049001b07fb7d5857e9c34c71f3d4d6675bafe76f5fb5ce86515acdeeeadf7b6923d373226e1f9df1299414d00aa5823f20b077cfba1b504450ae4d285a218af5528fe1d75eb451b0f99d037a18682af0dbeecb56dcde61ead6d135fff5ff225d4f0ce7d311927ba3f0730cb5c68211c83cd0d19cd82f75b16592669d0349166da020dec20d847d4501c1c9b0387969b2944a7f0ae856c123dadf808a1693402d4a90551af9b28f25b94d86fb70dbc08368f3cd521d750c33d8c03edf0a34db48189de83cefb47e87c9e1732af49cfc8cfca40cd8474b9e1e3b2a85815324b303e8fb84c0324122886f21c66c4bcf09a68d8475395256eef6dc766db460ec7e04273a68443544c41476c994e34135f96de5057a8622fe5eb4468e2ee06e0f99520f35efb5ebddd50ac3fc06c7e88c2383ca3728e66f85d949abe5c249fc4fc37efc4bcb786d0ac5fcd2a64d0bdd6d5ea33f20a1ad3be58a610f245699fd6c0af065331cf5669f133c09ec0cf05ee34a81731cf87eae1ded7c2c698c34a89d3ad58f44858dc48cf2d9d886b9ecf6c704b47d42047974740d2dc95fb8e37e27ba0c65e5ebc76998c9f065b2ea50c58cb0fd40f36cfbc4334a3f4f8635952f431bf19be5cb127cdbf3bef3b90abbcddee0ef8727fe1ec1bb7e21c9a9386314b67928407976a7888eb075560348560308bcbbb2536bc95bee1d1185bad51d119e22053d8"], 0x24}}, 0x20004840) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r9 = socket$nl_generic(0x10, 0x3, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0xa0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r10 = syz_open_procfs(0x0, &(0x7f00000007c0)='numa_maps\x00') read$FUSE(r10, &(0x7f0000002840)={0x2020}, 0x2020) 5.908434694s ago: executing program 2 (id=1954): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newtfilter={0x68, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r6, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x0, 0x7, 0x5}, {{0x1, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x1, 0x2, 0x4}, {0x7}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r3, 0x3e}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000740)='\'v\\', 0x3}], 0x1}, 0x20004014) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000140)={0x268, 0x0, 0x5, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [{{0x254, 0x1, {{0x2, 0x5}, 0x9, 0x7, 0x5, 0xa18f, 0x1a, 'syz1\x00', "2c7111252b6b3253f91a748ed3262c5eeec6fce5a104bf3c95a9e912340c82df", "bdeaa7498324a27c17ba5bfadee0efd1b509a5f0715570778b528fd3d11a7a5c", [{0x269, 0xd, {0x1}}, {0x4, 0xfdf4, {0x1, 0xc}}, {0xf776, 0x8, {0x3, 0xffff8242}}, {0xa, 0xf, {0x2, 0x5}}, {0x9, 0x0, {0x1, 0x1ff}}, {0xd, 0xf7, {0x1, 0x2}}, {0x400, 0xa5b, {0x0, 0x7}}, {0x943, 0x740f, {0x1, 0x6}}, {0x100, 0x6, {0x2, 0x5}}, {0x0, 0x118, {0x2, 0x8}}, {0x8000, 0x4, {0xbd900e6b3511f07e}}, {0x2, 0x6, {0x1, 0xc}}, {0x6, 0xfff7, {0x0, 0x6}}, {0xb19, 0x3, {0x3, 0xc9f}}, {0x4, 0x401, {0x0, 0xfffffffd}}, {0xb96a, 0x4, {0x2, 0x6}}, {0x4a, 0xe875, {0x2, 0x8}}, {0x5, 0x4, {0x1}}, {0x7, 0x2, {0x1, 0x26c}}, {0x401, 0xffaa, {0x3, 0x8}}, {0xfe, 0x4, {0x3}}, {0x9, 0x1, {0x0, 0x7}}, {0x7bad, 0x41e, {0x2, 0x46}}, {0x4, 0x9, {0x0, 0x2}}, {0x8, 0x0, {0x3, 0x6}}, {0x0, 0x9, {0x3, 0x928}}, {0x8, 0xffff, {0x1, 0x1}}, {0xf, 0x4, {0x3, 0x80000001}}, {0x5c14, 0xff, {0x1, 0xb}}, {0x4, 0xa070, {0x2, 0x6}}, {0x81, 0x0, {0x0, 0x6}}, {0x3, 0x94, {0x1, 0x1}}, {0x5, 0x4, {0x2, 0x2}}, {0x3, 0x0, {0x3}}, {0xfffe, 0x3, {0x3, 0x4}}, {0x9, 0x3255, {0x1, 0xc}}, {0x10, 0x2, {0x7, 0x4}}, {0x2, 0xe, {0x2, 0x85a}}, {0xebd, 0x1, {0x3, 0x400}}, {0xff, 0x1, {0x3, 0x5}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x1}, 0x4004) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5.389188465s ago: executing program 2 (id=1955): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000014c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c383032313100f58965f119cc126753b031a7b853d042666cf768bebe72b11c91f6e7bc6d"], 0x20}}, 0x0) recvmmsg(r5, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='adfs\x00', 0x2000010, 0x0) getpid() syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x4}, 0xfffffffffffffe7c, 0x0, 0x0) rseq(0x0, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x10000, 0xf, 0xfc, 0x3, 0x2, 0x9ed, 0x2}, &(0x7f0000000300)=0x9c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000340)={r6, 0x1, 0xf, "d0f93368825dfb6f5c28acfb7c6183"}, 0x17) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000000f) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 5.381781633s ago: executing program 0 (id=1956): syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r4, r1, 0x25, 0x0, @val=@tcx={@void, @value=r4}}, 0x1c) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000440)="013e332bd84d645bfadada5063af1ed9412f712e41b9c2eeacc9a687e2914906e58bd9cf5c0b7ac941da3d5ad554d11af28dd72dd46df676f9b08b769858505d3c8d526aae57bcfd20b5aa98fe53009a182fe36b44a6e45e95481bc9cdbb39e0bd95b5808b835f44d9270df1b5b087b4a9f9f2718a49720e5ba02385f8e4077a70f137f2683172a530ced8b97b898a2d0a5f8fd7fd708cae83b5047cd4e63b9373e2d6b1d268f686c8f926334a", &(0x7f0000000240)=@udp6=r5}, 0x20) syz_emit_ethernet(0x66, &(0x7f0000000080)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x30, 0x3a, 0xff, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5, {0x5, 0x6, "d22418", 0x200, 0x6c, 0x0, @mcast2, @remote}}}}}}}, 0x0) 5.304813317s ago: executing program 1 (id=1957): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue0\x00', 0x5}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x80) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f00000003c0)={@broadcast, @link_local, @val={@val={0x88a8, 0x4, 0x0, 0x1}, {0x8100, 0x0, 0x1, 0x2}}, {@ipv6={0x86dd, @tcp={0xa, 0x6, "eba828", 0x14, 0x6, 0xff, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], {{0x4e20, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x7}}}}}}}, 0x0) write$UHID_INPUT(r7, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000000c0)={0x6, 0xffff81a4, 0x40, 0x0, 0xf}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 4.707239117s ago: executing program 0 (id=1958): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000000000000000000000000850000005300000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300007f000000850000007b00000095"], &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffa}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@ifindex, 0x23, 0x0, 0x81, 0x0, 0x0, 0x0, &(0x7f0000000780), &(0x7f00000007c0), 0x0}, 0x40) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1ff, 0x0, 0x0, 0x41000, 0x4}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) sendmmsg$inet6(r1, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x18000}], 0x11}}], 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000500)="0000000000000000000051229dc9", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000004c00)=[{{0x0, 0x810, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4051}, 0x20008001) recvmsg$can_raw(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1) getsockopt$inet6_udp_int(r4, 0x11, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) 4.385010343s ago: executing program 2 (id=1959): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000040)={0x3, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES8=r0, @ANYRESHEX=r1], 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x4048000) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001700), 0x82001) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x29c0f0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000084000000040000002200000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000d001e000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x194) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) cachestat(r4, &(0x7f00000001c0)={0x800, 0x100}, 0x0, 0xee) rename(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file1\x00') ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000001740)={{0x61, 0xd4}, 0x1, 0x1, 0x3, {0x59, 0x7}, 0x80, 0xffffe70c}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000000)=ANY=[], 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x2, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d757b731540a"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f0000000000)=@string={0x4, 0x3, "f8a5"}}, {0x0, 0x0}, {0x0, 0x0}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x409}}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0e000000840000000400000000000000000002665ee398a44b5f20fd81713936902900a189aca0ef5e0a90f619bd447e502be73ba805591469a272cc9ec81353c3349843897e7bbfd8ed53306200e657c0d53f46a378ac02d0fdd8b0cdf72db00a4106c78226c1f7de06a9efb1ecdadc6cf759529c3ce5284e76566cd63f621effebb9dd253346558d1b5334d64aaaa2799331add3829d686dc1ffab8fd386c546ca31c99076e634d3f9cb61315445c3bc5c7c0203adbe7b088649920d313f14addd7c651d105a4ebe6612807d6c8807a647186e7c86cac4523129d3abd679b1d3", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002400)={r6, 0x0, 0x0}, 0x20) 4.045202052s ago: executing program 7 (id=1811): socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000027000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="318329bd45e7ca000000000000000009000000000000", @ANYRES32, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4004110}, 0x8000) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x3, r2, 0x230d}, 0xc) keyctl$setperm(0x5, 0x0, 0x1010) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) 1.710567822s ago: executing program 0 (id=1960): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x6, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x2, 0x3, @remote}, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001"], 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa5a01f3c2f13608060001080006040002aaaaaaaaaaaaac1414bbaaaaaaaaaaaaac1414bbfac18bfa11ba867e817093bf131da5802e7b5a944df34d75db8a6a7747f0338de187ec73b3d7207b031ab8b8ad"], 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0x2}, 0x6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 1.710028667s ago: executing program 1 (id=1961): ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x324) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b0f, &(0x7f0000000000)={'wlan0\x00'}) 1.687850599s ago: executing program 2 (id=1962): syz_usb_connect(0x2, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000380)={0x60, 0x0, &(0x7f000007c000/0x2000)=nil, &(0x7f0000839000/0x1000)=nil, 0xb8, &(0x7f0000000700)=[{0x1}], 0xaaaac9c, 0x2, 0x0, 0x0, 0x0, 0x4c}) 1.609551973s ago: executing program 1 (id=1963): socket$kcm(0x21, 0x2, 0xa) socket$l2tp(0x2, 0x2, 0x73) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x5, 0x1, 0x80000000}) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x20132, 0xffffffffffffffff, 0x391e1000) read$FUSE(0xffffffffffffffff, &(0x7f0000000400)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000002f80)={0xa0, 0x0, r3, {{0x4, 0x2, 0x6, 0x4, 0x7, 0xfffffffa, {0x1, 0xe, 0x100, 0x7b, 0x10, 0x400, 0x3, 0xfffffff9, 0x8, 0x8000, 0x10001, r4, r5, 0x9, 0x8}}}}, 0xa0) io_uring_setup(0x664b, &(0x7f0000000500)={0x0, 0x3, 0x0, 0x22}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r6, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) socket(0x10, 0x803, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) kexec_load(0xd0ffbf, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x3e0000, 0x40000000}], 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000000c0)={0x2, r2, 0x1}) write(r0, &(0x7f00000000c0), 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r8, 0x0) preadv2(r8, &(0x7f0000000180)=[{&(0x7f0000000500)=""/4082, 0xff2}, {&(0x7f0000000200)=""/37, 0x25}], 0x2, 0x4, 0x2, 0xa) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000080)=0x2) syz_open_procfs(0x0, 0x0) getpgrp(0x0) 46.597376ms ago: executing program 7 (id=1811): socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000027000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="318329bd45e7ca000000000000000009000000000000", @ANYRES32, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4004110}, 0x8000) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x3, r2, 0x230d}, 0xc) keyctl$setperm(0x5, 0x0, 0x1010) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) 0s ago: executing program 1 (id=1964): syz_emit_ethernet(0x0, 0x0, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000000)="aafc361abad74318502891c4c26423fb18e301de0a534d0136cd3295dd6a6d299206fef236153a6fb9f3ddaf173b35381663ab6d9a0d7eda9ebe3f5459c0c467048e63a19e308071", 0x0, 0x48) r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000640)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="001401"], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="400e81"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): mber: Љ [ 641.575541][ T5802] usb 3-1: config 0 descriptor?? [ 641.587584][T12620] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 641.884329][ T5734] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 642.057053][ T5734] usb 2-1: Using ep0 maxpacket: 8 [ 642.066847][ T5734] usb 2-1: unable to get BOS descriptor or descriptor too short [ 642.111929][ T5734] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 16 [ 642.122021][ T5734] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 107, changing to 10 [ 642.188988][ T5734] usb 2-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 642.198394][ T5734] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.210231][ T5734] usb 2-1: Product: syz [ 642.233358][ T5734] usb 2-1: Manufacturer: syz [ 642.238083][ T5734] usb 2-1: SerialNumber: syz [ 642.248329][T12634] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 642.548772][ T5734] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 642.555866][ T5734] usb 2-1: MIDIStreaming interface descriptor not found [ 642.579065][ T5734] usb 2-1: too many endpoints [ 642.608007][ T5734] usb 2-1: USB disconnect, device number 99 [ 642.659380][ T5934] udevd[5934]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 643.282278][T12636] fuse: Unknown parameter '18446744073709551615000000000000000000000030000000000000000000300000000000000000000' [ 644.556939][ T5734] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 644.729821][ T5734] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 644.752033][ T5734] usb 2-1: New USB device found, idVendor=1e71, idProduct=2019, bcdDevice= 0.00 [ 644.761265][ T5734] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.784204][ T5734] usb 2-1: config 0 descriptor?? [ 644.800389][T12641] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 645.286356][ T5734] hid_parser_main: 3 callbacks suppressed [ 645.286392][ T5734] nzxt-smart2 0003:1E71:2019.0009: unknown main item tag 0x0 [ 645.309647][ T5734] nzxt-smart2 0003:1E71:2019.0009: unknown main item tag 0x0 [ 645.317109][ T5734] nzxt-smart2 0003:1E71:2019.0009: unknown main item tag 0x0 [ 645.325024][ T5734] nzxt-smart2 0003:1E71:2019.0009: unknown main item tag 0x0 [ 645.353670][ T5734] nzxt-smart2 0003:1E71:2019.0009: unknown main item tag 0x0 [ 645.361336][ T5734] nzxt-smart2 0003:1E71:2019.0009: unknown main item tag 0x0 [ 645.379989][ T5734] nzxt-smart2 0003:1E71:2019.0009: unknown main item tag 0x0 [ 645.387903][ T5734] nzxt-smart2 0003:1E71:2019.0009: unknown main item tag 0x0 [ 645.395527][ T5734] nzxt-smart2 0003:1E71:2019.0009: unknown main item tag 0x0 [ 645.413487][ T5734] nzxt-smart2 0003:1E71:2019.0009: unknown main item tag 0x0 [ 645.434342][ T5734] nzxt-smart2 0003:1E71:2019.0009: unbalanced collection at end of report description [ 645.470201][ T5734] nzxt-smart2 0003:1E71:2019.0009: probe with driver nzxt-smart2 failed with error -22 [ 645.645657][T12490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 645.652920][T12490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 645.679304][T12490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 645.740089][ T5802] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input45 [ 645.789722][ T5802] usb 3-1: USB disconnect, device number 97 [ 645.963190][T12490] hsr_slave_0: entered promiscuous mode [ 645.973362][T12490] hsr_slave_1: entered promiscuous mode [ 645.980841][T12490] debugfs: 'hsr0' already exists in 'hsr' [ 645.987990][T12490] Cannot create hsr debugfs directory [ 646.051449][ T30] audit: type=1400 audit(1781369246.015:1076): avc: denied { setopt } for pid=12647 comm="syz.5.1724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 646.098230][T12650] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.111397][T12650] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.636455][ T5712] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 647.974236][ T5350] usb 2-1: USB disconnect, device number 100 [ 648.032329][ T5712] usb 1-1: device descriptor read/64, error -71 [ 648.181654][ T5726] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 648.273162][T12670] FAULT_INJECTION: forcing a failure. [ 648.273162][T12670] name failslab, interval 1, probability 0, space 0, times 0 [ 648.286296][T12670] CPU: 1 UID: 0 PID: 12670 Comm: syz.1.1731 Tainted: G L syzkaller #0 PREEMPT(full) [ 648.286327][T12670] Tainted: [L]=SOFTLOCKUP [ 648.286334][T12670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 648.286344][T12670] Call Trace: [ 648.286352][T12670] [ 648.286360][T12670] dump_stack_lvl+0x100/0x190 [ 648.286391][T12670] should_fail_ex.cold+0x5/0xa [ 648.286419][T12670] should_failslab+0xc2/0x120 [ 648.286440][T12670] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 648.286467][T12670] ? copy_process+0x69a/0x7ed0 [ 648.286500][T12670] copy_process+0x69a/0x7ed0 [ 648.286525][T12670] ? stack_trace_save+0x8e/0xc0 [ 648.286544][T12670] ? __pfx_stack_trace_save+0x10/0x10 [ 648.286562][T12670] ? stack_depot_save_flags+0x27/0x9d0 [ 648.286589][T12670] ? rcu_is_watching+0x12/0xc0 [ 648.286622][T12670] ? __pfx_copy_process+0x10/0x10 [ 648.286646][T12670] ? __do_sys_io_uring_enter+0xa88/0x1b50 [ 648.286673][T12670] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.286703][T12670] ? __pfx_io_wq_worker+0x10/0x10 [ 648.286727][T12670] create_io_thread+0xc2/0x110 [ 648.286754][T12670] ? __pfx_create_io_thread+0x10/0x10 [ 648.286794][T12670] ? __pfx_io_wq_worker+0x10/0x10 [ 648.286820][T12670] ? lockdep_init_map_type+0x5c/0x250 [ 648.286844][T12670] ? lockdep_init_map_type+0x5c/0x250 [ 648.286867][T12670] ? __init_swait_queue_head+0xca/0x150 [ 648.286896][T12670] create_io_worker+0x1cd/0x5b0 [ 648.286921][T12670] io_wq_enqueue+0x4d8/0x970 [ 648.286945][T12670] ? __pfx_io_wq_enqueue+0x10/0x10 [ 648.286967][T12670] ? irqentry_exit+0x24d/0x970 [ 648.286989][T12670] ? __pfx_io_wq_work_match_item+0x10/0x10 [ 648.287012][T12670] ? io_prep_async_work+0x3ab/0x720 [ 648.287038][T12670] io_queue_iowq+0x232/0x5c0 [ 648.287061][T12670] io_queue_sqe_fallback+0x16b/0x210 [ 648.287083][T12670] ? io_submit_sqes+0x553/0x24b0 [ 648.287109][T12670] io_submit_sqes+0x15a8/0x24b0 [ 648.287145][T12670] __do_sys_io_uring_enter+0xa88/0x1b50 [ 648.287177][T12670] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 648.287201][T12670] ? ksys_write+0x1a2/0x250 [ 648.287220][T12670] ? ksys_write+0x20e/0x250 [ 648.287241][T12670] ? fput+0x79/0x100 [ 648.287264][T12670] ? ksys_write+0x1ac/0x250 [ 648.287283][T12670] ? __pfx_ksys_write+0x10/0x10 [ 648.287301][T12670] ? trace_irq_enable.constprop.0+0x31/0x160 [ 648.287327][T12670] ? rcu_is_watching+0x12/0xc0 [ 648.287356][T12670] do_syscall_64+0x115/0x870 [ 648.287378][T12670] ? clear_bhb_loop+0x40/0x90 [ 648.287401][T12670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.287419][T12670] RIP: 0033:0x7f46c599ce59 [ 648.287436][T12670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 648.287453][T12670] RSP: 002b:00007f46c3bf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 648.287471][T12670] RAX: ffffffffffffffda RBX: 00007f46c5c16180 RCX: 00007f46c599ce59 [ 648.287483][T12670] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 648.287493][T12670] RBP: 00007f46c3bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 648.287504][T12670] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 648.287515][T12670] R13: 00007f46c5c16218 R14: 00007f46c5c16180 R15: 00007ffe928cdaa8 [ 648.287540][T12670] [ 648.481730][ T5712] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 648.722040][ T5726] usb 3-1: Using ep0 maxpacket: 8 [ 648.739742][ T5726] usb 3-1: unable to get BOS descriptor or descriptor too short [ 648.754514][ T5726] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 16 [ 648.778274][ T5726] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 107, changing to 10 [ 648.809011][ T5726] usb 3-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 648.822643][ T5726] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.840770][ T5726] usb 3-1: Product: syz [ 648.850515][ T5726] usb 3-1: Manufacturer: syz [ 648.862248][ T5726] usb 3-1: SerialNumber: syz [ 648.892727][T12664] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 648.977553][ T5712] usb 1-1: device descriptor read/64, error -71 [ 649.072048][T12675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1732'. [ 649.084360][T12675] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1732'. [ 649.095609][ T5712] usb usb1-port1: attempt power cycle [ 649.150690][ T5726] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 649.157800][T11321] usb 6-1: new full-speed USB device number 74 using dummy_hcd [ 649.177486][ T5726] usb 3-1: MIDIStreaming interface descriptor not found [ 649.198492][ T5726] usb 3-1: too many endpoints [ 649.241438][T12679] netlink: 'syz.1.1733': attribute type 11 has an invalid length. [ 649.288236][T12490] netdevsim netdevsim6 netdevsim0: renamed from eth9 [ 649.293167][T12679] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1733'. [ 649.305655][ T5726] usb 3-1: USB disconnect, device number 98 [ 649.330387][T11321] usb 6-1: config 0 has an invalid interface number: 176 but max is 2 [ 649.362113][T11321] usb 6-1: config 0 has an invalid interface number: 3 but max is 2 [ 649.375436][T12490] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 649.392213][T11321] usb 6-1: config 0 has no interface number 0 [ 649.401628][T12490] netdevsim netdevsim6 netdevsim1: renamed from eth10 [ 649.414386][T11321] usb 6-1: config 0 has no interface number 1 [ 649.433031][T11321] usb 6-1: too many endpoints for config 0 interface 3 altsetting 255: 255, using maximum allowed: 30 [ 649.448307][T12490] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 649.458087][T12490] netdevsim netdevsim6 netdevsim2: renamed from eth11 [ 649.466138][T11321] usb 6-1: config 0 interface 3 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 649.479641][ T5712] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 649.494681][T12490] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 649.501881][T11321] usb 6-1: config 0 interface 3 has no altsetting 0 [ 649.518342][ T5712] usb 1-1: device descriptor read/8, error -71 [ 649.525987][T12490] netdevsim netdevsim6 netdevsim3: renamed from eth12 [ 649.533333][T11321] usb 6-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 649.547924][T11321] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.558614][T12490] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 649.562542][T12683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1734'. [ 649.571790][T11321] usb 6-1: config 0 descriptor?? [ 649.805791][ T30] audit: type=1400 audit(1781369249.522:1077): avc: denied { write } for pid=12692 comm="syz.2.1736" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 649.960358][ T5712] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 649.971168][T11321] usb 6-1: Could not set interface, error -71 [ 649.996819][ T5712] usb 1-1: device descriptor read/8, error -71 [ 650.008217][T11321] usb 6-1: selecting invalid altsetting 0 [ 650.229012][T12693] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 650.239756][T12693] FAULT_INJECTION: forcing a failure. [ 650.239756][T12693] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 650.252940][T12693] CPU: 1 UID: 0 PID: 12693 Comm: syz.2.1736 Tainted: G L syzkaller #0 PREEMPT(full) [ 650.252970][T12693] Tainted: [L]=SOFTLOCKUP [ 650.252977][T12693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 650.252988][T12693] Call Trace: [ 650.252995][T12693] [ 650.253002][T12693] dump_stack_lvl+0x100/0x190 [ 650.253030][T12693] should_fail_ex.cold+0x5/0xa [ 650.253057][T12693] _copy_to_user+0x32/0xd0 [ 650.253083][T12693] simple_read_from_buffer+0xcb/0x170 [ 650.253109][T12693] proc_fail_nth_read+0x1af/0x230 [ 650.253132][T12693] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 650.253155][T12693] ? rw_verify_area+0xce/0x6d0 [ 650.253173][T12693] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 650.253195][T12693] vfs_read+0x1e4/0xb30 [ 650.253219][T12693] ? __pfx_vfs_read+0x10/0x10 [ 650.253239][T12693] ? __fget_files+0x215/0x3d0 [ 650.253268][T12693] ? __fget_files+0x21f/0x3d0 [ 650.253299][T12693] ksys_read+0x12a/0x250 [ 650.253323][T12693] ? __pfx_ksys_read+0x10/0x10 [ 650.253340][T12693] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 650.253375][T12693] ? syscall_user_dispatch+0x76/0x130 [ 650.253404][T12693] do_syscall_64+0x115/0x870 [ 650.253428][T12693] ? clear_bhb_loop+0x40/0x90 [ 650.253452][T12693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.253472][T12693] RIP: 0033:0x7f013055d68e [ 650.253488][T12693] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 650.253505][T12693] RSP: 002b:00007f0131407fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 650.253524][T12693] RAX: ffffffffffffffda RBX: 00007f01314086c0 RCX: 00007f013055d68e [ 650.253537][T12693] RDX: 000000000000000f RSI: 00007f01314080a0 RDI: 000000000000000a [ 650.253548][T12693] RBP: 00007f0131408090 R08: 0000000000000000 R09: 0000000000000000 [ 650.253559][T12693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 650.253571][T12693] R13: 00007f0130816038 R14: 00007f0130815fa0 R15: 00007ffcf64d5c28 [ 650.253597][T12693] [ 650.905368][T11321] usb 6-1: Could not set interface, error -22 [ 650.923713][T12490] 8021q: adding VLAN 0 to HW filter on device team0 [ 650.938116][T11321] usb 6-1: USB disconnect, device number 74 [ 650.997329][ T6300] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.004525][ T6300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 651.007431][ T5712] usb usb1-port1: unable to enumerate USB device [ 651.143491][ T30] audit: type=1400 audit(1781369250.758:1078): avc: denied { write } for pid=12707 comm="syz.1.1739" path="socket:[45300]" dev="sockfs" ino=45300 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 651.187341][ T6299] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.194548][ T6299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 651.294581][ T30] audit: type=1400 audit(1781369250.906:1079): avc: denied { setopt } for pid=12707 comm="syz.1.1739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 651.533099][ T30] audit: type=1400 audit(1781369251.101:1080): avc: denied { accept } for pid=12707 comm="syz.1.1739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 652.483563][T12729] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1743'. [ 652.547612][T12734] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1743'. [ 652.575360][ T30] audit: type=1400 audit(1781369252.047:1081): avc: denied { bind } for pid=12722 comm="syz.2.1742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 652.656501][T12490] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 652.819896][T12743] FAULT_INJECTION: forcing a failure. [ 652.819896][T12743] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 652.888348][T12743] CPU: 1 UID: 0 PID: 12743 Comm: syz.1.1745 Tainted: G L syzkaller #0 PREEMPT(full) [ 652.888378][T12743] Tainted: [L]=SOFTLOCKUP [ 652.888384][T12743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 652.888395][T12743] Call Trace: [ 652.888401][T12743] [ 652.888408][T12743] dump_stack_lvl+0x100/0x190 [ 652.888436][T12743] should_fail_ex.cold+0x5/0xa [ 652.888461][T12743] _copy_to_iter+0x1f3/0x1720 [ 652.888484][T12743] ? chacha_block_generic+0x265/0x360 [ 652.888509][T12743] ? __pfx__copy_to_iter+0x10/0x10 [ 652.888533][T12743] ? lockdep_hardirqs_on+0x78/0x100 [ 652.888556][T12743] ? crng_make_state+0x2b0/0x6c0 [ 652.888584][T12743] get_random_bytes_user+0x17b/0x3d0 [ 652.888611][T12743] ? __pfx_get_random_bytes_user+0x10/0x10 [ 652.888641][T12743] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 652.888664][T12743] ? kernel_write+0x6b3/0x6c0 [ 652.888691][T12743] ? import_ubuf+0x1b6/0x220 [ 652.888713][T12743] __x64_sys_getrandom+0x183/0x290 [ 652.888738][T12743] ? __pfx___x64_sys_getrandom+0x10/0x10 [ 652.888770][T12743] ? fput+0x79/0x100 [ 652.888798][T12743] ? rcu_is_watching+0x12/0xc0 [ 652.888828][T12743] do_syscall_64+0x115/0x870 [ 652.888850][T12743] ? clear_bhb_loop+0x40/0x90 [ 652.888872][T12743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.888890][T12743] RIP: 0033:0x7f46c599ce59 [ 652.888906][T12743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 652.888924][T12743] RSP: 002b:00007f46c67ab028 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 652.888941][T12743] RAX: ffffffffffffffda RBX: 00007f46c5c15fa0 RCX: 00007f46c599ce59 [ 652.888953][T12743] RDX: 0000000000000003 RSI: 00000000ffffff3f RDI: 0000200000000580 [ 652.888965][T12743] RBP: 00007f46c67ab090 R08: 0000000000000000 R09: 0000000000000000 [ 652.888976][T12743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 652.888986][T12743] R13: 00007f46c5c16038 R14: 00007f46c5c15fa0 R15: 00007ffe928cdaa8 [ 652.889012][T12743] [ 653.883079][T12764] Failed to initialize the IGMP autojoin socket (err -2) [ 653.899029][ T5350] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 653.936534][T12760] overlayfs: missing 'workdir' [ 654.324088][ T5350] usb 3-1: device descriptor read/64, error -71 [ 654.544607][ T30] audit: type=1400 audit(1781369253.917:1082): avc: denied { write } for pid=12740 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 654.590654][ T5350] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 654.618983][T12490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 654.745293][T12783] syzkaller0: entered promiscuous mode [ 654.779111][T12783] syzkaller0: entered allmulticast mode [ 654.785205][ T5350] usb 3-1: device descriptor read/64, error -71 [ 655.498339][T12788] random: crng reseeded on system resumption [ 655.610555][ T30] audit: type=1400 audit(1781369254.796:1083): avc: denied { write } for pid=12782 comm="syz.0.1753" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 655.741183][ T5350] usb usb3-port1: attempt power cycle [ 655.764456][ T30] audit: type=1400 audit(1781369254.860:1084): avc: denied { write } for pid=12790 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 657.026644][T12804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1755'. [ 657.082130][T12806] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1755'. [ 657.332122][T12490] veth0_vlan: entered promiscuous mode [ 657.441121][T12490] veth1_vlan: entered promiscuous mode [ 657.572400][T12816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1757'. [ 657.606695][T12490] veth0_macvtap: entered promiscuous mode [ 657.618632][T12820] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=12820 comm=syz.5.1758 [ 657.671910][ T30] audit: type=1400 audit(1781369256.802:1085): avc: denied { write } for pid=12797 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 657.698267][T12490] veth1_macvtap: entered promiscuous mode [ 657.721125][T12820] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=12820 comm=syz.5.1758 [ 657.734978][T12820] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65528 sclass=netlink_route_socket pid=12820 comm=syz.5.1758 [ 658.126450][ T30] audit: type=1400 audit(1781369257.227:1086): avc: denied { write } for pid=12828 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 659.032529][T12816] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 659.079125][T12490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 659.120200][T12490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 659.255164][T12490] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 659.393307][T12842] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1761'. [ 659.419566][T12490] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 659.442128][T12837] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 659.476065][T12842] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1761'. [ 659.507387][T12490] wireguard: wg0: Could not create IPv4 socket [ 659.608958][T12490] wireguard: wg1: Could not create IPv4 socket [ 659.684472][T12490] wireguard: wg2: Could not create IPv4 socket [ 659.768822][ T30] audit: type=1400 audit(1781369258.742:1087): avc: denied { write } for pid=12832 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 659.998628][T12860] netlink: 'syz.5.1764': attribute type 1 has an invalid length. [ 660.088203][ T30] audit: type=1400 audit(1781369259.046:1088): avc: denied { write } for pid=12858 comm="syz.5.1764" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 660.113558][T12860] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 660.211870][ T30] audit: type=1400 audit(1781369259.046:1089): avc: denied { open } for pid=12858 comm="syz.5.1764" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 660.395608][ T30] audit: type=1400 audit(1781369259.074:1090): avc: denied { write } for pid=12863 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 660.678618][ T30] audit: type=1400 audit(1781369259.582:1091): avc: denied { write } for pid=12875 comm="syz.5.1766" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 661.838204][T12884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1768'. [ 662.017084][T12886] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1768'. [ 662.392037][ T30] audit: type=1326 audit(1781369261.161:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12882 comm="syz.2.1767" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f013059ce59 code=0x0 [ 662.675384][T12898] syzkaller0: entered promiscuous mode [ 662.688437][T12898] syzkaller0: entered allmulticast mode [ 662.967436][ T24] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 663.186537][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 663.230034][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 663.271027][ T24] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 16 [ 663.329043][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 107, changing to 10 [ 663.394672][ T24] usb 2-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 663.406804][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.422354][ T24] usb 2-1: Product: syz [ 663.443977][ T24] usb 2-1: Manufacturer: syz [ 663.451456][ T24] usb 2-1: SerialNumber: syz [ 663.472395][T12900] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 663.623074][ T5633] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 663.640466][ T5633] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 663.651088][ T5633] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 663.658939][ T5633] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 663.666611][ T5633] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 664.225918][T12909] input: syz1 as /devices/virtual/input/input46 [ 665.548975][ T5350] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 665.550919][T12923] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1774'. [ 665.806502][ T5350] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 665.840949][ T5350] usb 3-1: config 0 has no interfaces? [ 665.842790][T12906] Failed to initialize the IGMP autojoin socket (err -2) [ 665.856495][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 665.880449][ T24] usb 2-1: MIDIStreaming interface descriptor not found [ 665.905884][ T5350] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 665.907623][ T24] usb 2-1: too many endpoints [ 665.935479][ T5350] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.963552][ T5350] usb 3-1: Product: syz [ 665.990000][ T5350] usb 3-1: Manufacturer: syz [ 666.008397][ T5350] usb 3-1: SerialNumber: syz [ 666.040994][ T5350] usb 3-1: config 0 descriptor?? [ 666.121154][ T24] usb 2-1: USB disconnect, device number 101 [ 666.239599][T12944] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 666.669363][ T5633] Bluetooth: hci2: command tx timeout [ 666.729756][ T5936] udevd[5936]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 666.998216][ T30] audit: type=1400 audit(1781369265.427:1093): avc: denied { getopt } for pid=12948 comm="syz.5.1778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 667.087328][ T30] audit: type=1400 audit(1781369265.501:1094): avc: denied { write } for pid=12936 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 667.285626][ T30] audit: type=1400 audit(1781369265.686:1095): avc: denied { write } for pid=12961 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 667.379063][T12966] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 667.896260][ T30] audit: type=1400 audit(1781369266.221:1096): avc: denied { lock } for pid=12919 comm="syz.2.1775" path="socket:[45665]" dev="sockfs" ino=45665 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 668.050564][T12957] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1775'. [ 668.229722][T12973] binder: 12969:12973 ioctl 400c620e 200000000200 returned -22 [ 668.509242][ T30] audit: type=1400 audit(1781369266.812:1097): avc: denied { mounton } for pid=12975 comm="syz.1.1782" path="/62/file0" dev="configfs" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 668.617268][ T30] audit: type=1400 audit(1781369266.868:1098): avc: denied { read } for pid=12975 comm="syz.1.1782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 668.744009][ T30] audit: type=1400 audit(1781369267.034:1099): avc: denied { unmount } for pid=11462 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 668.913455][ T5633] Bluetooth: hci2: command tx timeout [ 669.246778][ T30] audit: type=1400 audit(1781369267.495:1100): avc: denied { write } for pid=12971 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 669.252179][ T24] usb 3-1: USB disconnect, device number 102 [ 669.454994][ T5802] usb 2-1: new full-speed USB device number 102 using dummy_hcd [ 669.457995][ T30] audit: type=1400 audit(1781369267.689:1101): avc: denied { write } for pid=12998 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 669.685477][ T5802] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 670.061075][T13008] binder: 13004:13008 ioctl 400c620e 200000000200 returned -22 [ 670.084385][ T5802] usb 2-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 670.109802][ T5802] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.235971][ T5802] usb 2-1: Product: syz [ 670.275061][ T5802] usb 2-1: Manufacturer: syz [ 670.327434][ T5802] usb 2-1: SerialNumber: syz [ 670.352977][ T5802] usb 2-1: config 0 descriptor?? [ 670.693731][ T5802] cdc_subset 2-1:0.0: probe with driver cdc_subset failed with error -22 [ 671.191733][ T5633] Bluetooth: hci2: command tx timeout [ 671.523065][ T5816] usb 2-1: USB disconnect, device number 102 [ 671.841359][T13028] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 672.277250][T12906] netdevsim netdevsim6 netdevsim0: renamed from eth9 [ 672.295457][T12906] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 672.303649][T12906] netdevsim netdevsim6 netdevsim1: renamed from eth10 [ 672.317027][ T24] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 672.349324][T12906] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 672.369457][ T30] audit: type=1400 audit(1781369270.385:1102): avc: denied { write } for pid=13009 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 672.377959][T12906] netdevsim netdevsim6 netdevsim2: renamed from eth11 [ 672.450364][T12906] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 672.475146][T12906] netdevsim netdevsim6 netdevsim3: renamed from eth12 [ 672.496694][ T30] audit: type=1400 audit(1781369270.496:1103): avc: denied { write } for pid=13032 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 672.502794][T12906] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 672.529705][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 672.540226][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 673.035042][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 673.116125][ T990] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 673.183152][ T24] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 673.213601][ T24] usb 3-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 673.221880][ T24] usb 3-1: Product: syz [ 673.235386][ T24] usb 3-1: Manufacturer: syz [ 673.240211][ T24] usb 3-1: SerialNumber: syz [ 673.452072][ T5633] Bluetooth: hci2: command tx timeout [ 673.574948][ T24] usb 3-1: config 0 descriptor?? [ 673.647463][ T990] usb 1-1: device descriptor read/64, error -71 [ 674.049887][ T24] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 674.117797][ T990] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 674.351336][ T990] usb 1-1: device descriptor read/64, error -71 [ 674.390253][T13054] CIFS: VFS: UNC: missing share name [ 674.455311][T13054] CIFS: VFS: Malformed UNC in devname [ 674.532482][ T990] usb usb1-port1: attempt power cycle [ 675.041179][ T990] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 675.167072][ T990] usb 1-1: device descriptor read/8, error -71 [ 675.321544][ T140] usb 3-1: Failed to submit usb control message: -110 [ 675.378797][ T140] usb 3-1: unable to send the bmi data to the device: -110 [ 675.463886][ T140] usb 3-1: unable to get target info from device [ 675.496326][ T990] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 675.567602][ T140] usb 3-1: could not get target info (-110) [ 675.630040][ T990] usb 1-1: device descriptor read/8, error -71 [ 675.718714][ T140] usb 3-1: could not probe fw (-110) [ 675.824844][ T990] usb usb1-port1: unable to enumerate USB device [ 676.446068][ T5726] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 676.635576][ T5726] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 676.688432][ T5726] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 676.761488][T13072] kvm: vcpu 4: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 676.836688][ T990] usb 3-1: USB disconnect, device number 103 [ 676.867020][ T5726] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 676.924488][ T5726] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 677.062324][ T5726] usb 2-1: SerialNumber: syz [ 678.016451][T13083] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1799'. [ 678.380356][ T990] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 678.791399][ T30] audit: type=1400 audit(1781369276.303:1104): avc: denied { write } for pid=13050 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 679.743621][ T5726] usb 2-1: 0:2 : does not exist [ 679.748610][ T5726] usb 2-1: unit 5 not found! [ 679.783366][ T30] audit: type=1400 audit(1781369277.217:1105): avc: denied { unmount } for pid=11462 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 679.787519][ T5726] usb 2-1: USB disconnect, device number 103 [ 679.876191][ T5802] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 679.908662][ T30] audit: type=1400 audit(1781369277.263:1106): avc: denied { append } for pid=13099 comm="syz.5.1802" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 679.987585][ T30] audit: type=1400 audit(1781369277.263:1107): avc: denied { write } for pid=13098 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 680.118605][ T5802] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 680.142211][ T5802] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 680.151992][ T30] audit: type=1800 audit(1781369277.549:1108): pid=13111 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.1804" name="file0" dev="overlay" ino=1735 res=0 errno=0 [ 680.190554][ T5802] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 680.220710][ T5802] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 680.252830][ T5802] usb 1-1: SerialNumber: syz [ 680.266889][ T5726] usb 2-1: new full-speed USB device number 104 using dummy_hcd [ 680.455160][T13128] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 681.034203][ T5726] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 681.052328][ T5726] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.096771][ T5726] usb 2-1: config 0 descriptor?? [ 681.244055][ T5726] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 681.461537][ T5726] gp8psk: usb in 128 operation failed. [ 681.623534][ T5802] usb 1-1: skipping empty audio interface (v1) [ 681.747826][ T5726] gp8psk: usb in 146 operation failed. [ 681.758601][ T30] audit: type=1400 audit(1781369279.045:1109): avc: denied { write } for pid=13112 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 681.761013][ T5726] gp8psk: failed to get FW version [ 681.789644][ T5802] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 681.800314][T12906] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 681.840652][ T5802] usb 1-1: USB disconnect, device number 116 [ 681.870244][ T5933] udevd[5933]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 681.873695][T12906] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 681.915420][ T5726] gp8psk: usb in 149 operation failed. [ 681.935418][ T5726] gp8psk: failed to get FPGA version [ 681.983807][T12906] wireguard: wg0: Could not create IPv4 socket [ 682.007305][T12906] wireguard: wg1: Could not create IPv4 socket [ 682.027057][T12906] wireguard: wg2: Could not create IPv4 socket [ 682.034509][ T30] audit: type=1400 audit(1781369279.303:1110): avc: denied { write } for pid=13143 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 682.166823][ T9299] bond0: (slave syz_tun): Releasing backup interface [ 682.178193][ T5726] gp8psk: usb out operation failed. [ 682.186806][ T5726] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 682.202925][ T5726] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 682.254035][ T5726] usb 2-1: USB disconnect, device number 104 [ 683.262228][ T5617] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 683.276148][ T5617] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 683.287920][ T5617] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 683.305537][ T5617] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 683.320965][ T5617] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 683.369615][T13172] netlink: 'syz.0.1814': attribute type 15 has an invalid length. [ 683.418851][T13172] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1814'. [ 683.442556][ T30] audit: type=1400 audit(1781369280.605:1111): avc: denied { write } for pid=13152 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 683.810095][T13173] 9p: Bad value for 'wfdno' [ 683.849207][ T5617] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 683.863809][ T5617] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 683.879957][ T5617] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 683.894239][ T5617] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 683.908722][ T5617] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 683.988319][ T30] audit: type=1400 audit(1781369281.103:1112): avc: denied { write } for pid=13183 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 684.192477][T13194] binder: 13192:13194 ioctl 400c620e 200000000200 returned -22 [ 684.683866][T13167] Failed to initialize the IGMP autojoin socket (err -2) [ 684.695410][ T30] audit: type=1400 audit(1781369281.750:1113): avc: denied { setopt } for pid=13208 comm="syz.2.1819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 684.697707][T13209] dlm: no locking on control device [ 685.065308][T13182] Failed to initialize the IGMP autojoin socket (err -2) [ 685.074683][ T24] usb 2-1: new full-speed USB device number 105 using dummy_hcd [ 685.316360][ T24] usb 2-1: config 206 has an invalid interface number: 83 but max is 0 [ 685.464633][ T5734] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 685.496434][ T24] usb 2-1: config 206 has no interface number 0 [ 685.554048][ T5633] Bluetooth: hci1: command tx timeout [ 685.593469][ T24] usb 2-1: config 206 interface 83 has no altsetting 0 [ 685.666053][ T24] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a7.a6 [ 685.714468][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.755493][ T5734] usb 3-1: no configurations [ 685.797152][ T24] usb 2-1: Product: syz [ 685.804887][ T5734] usb 3-1: can't read configurations, error -22 [ 685.833550][ T24] usb 2-1: Manufacturer: syz [ 685.862607][ T24] usb 2-1: SerialNumber: syz [ 685.995229][ T5734] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 686.270823][ T5734] usb 3-1: no configurations [ 686.307062][ T5734] usb 3-1: can't read configurations, error -22 [ 686.400192][ T5734] usb usb3-port1: attempt power cycle [ 686.530057][ T30] audit: type=1400 audit(1781369283.458:1114): avc: denied { write } for pid=13201 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 686.748535][ T30] audit: type=1400 audit(1781369283.651:1115): avc: denied { write } for pid=13243 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 686.798924][ T5734] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 686.832004][ T5734] usb 3-1: no configurations [ 686.836727][ T5734] usb 3-1: can't read configurations, error -22 [ 686.993232][ T5734] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 687.030531][ T5734] usb 3-1: no configurations [ 687.036683][ T5734] usb 3-1: can't read configurations, error -22 [ 687.051094][ T5734] usb usb3-port1: unable to enumerate USB device [ 687.101975][ T30] audit: type=1400 audit(1781369283.984:1116): avc: denied { write } for pid=13246 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 687.177839][ T30] audit: type=1400 audit(1781369284.058:1117): avc: denied { write } for pid=13263 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 687.462894][ T5617] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 687.476715][ T5617] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 687.487466][ T5617] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 687.498752][ T5617] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 687.510924][ T5617] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 687.806545][ T5633] Bluetooth: hci1: command tx timeout [ 687.854076][ T24] xbox_remote_probe: Unexpected desc.bNumEndpoints: 2 [ 687.893289][ T24] usb 2-1: USB disconnect, device number 105 [ 687.932876][T13167] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 687.964642][T13167] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 687.985172][T13167] wireguard: wg0: Could not create IPv4 socket [ 687.994454][T13167] wireguard: wg1: Could not create IPv4 socket [ 688.003176][T13167] wireguard: wg2: Could not create IPv4 socket [ 688.077548][T13277] Failed to initialize the IGMP autojoin socket (err -2) [ 688.113715][ T30] audit: type=1400 audit(1781369284.916:1118): avc: denied { write } for pid=13274 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 688.311616][T13308] 9p: Bad value for 'wfdno' [ 688.375699][ T30] audit: type=1400 audit(1781369285.156:1119): avc: denied { write } for pid=13312 comm="syz.2.1827" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 688.430450][ T30] audit: type=1400 audit(1781369285.175:1120): avc: denied { write } for pid=13313 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 688.931408][T13321] fuse: Bad value for 'fd' [ 689.354604][ T30] audit: type=1400 audit(1781369285.202:1121): avc: denied { read } for pid=13312 comm="syz.2.1827" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 689.368030][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 689.393062][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 689.828354][ T30] audit: type=1400 audit(1781369286.495:1122): avc: denied { write } for pid=13324 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 690.314428][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 690.314443][ T30] audit: type=1400 audit(1781369286.947:1124): avc: denied { write } for pid=13340 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 690.460476][ T30] audit: type=1400 audit(1781369287.086:1125): avc: denied { write } for pid=13358 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 690.512092][ T5726] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 690.675276][ T5726] usb 3-1: Using ep0 maxpacket: 8 [ 690.681061][ T5726] usb 3-1: unable to get BOS descriptor or descriptor too short [ 690.684316][ T5726] usb 3-1: config 4 interface 0 has no altsetting 0 [ 690.721822][ T5726] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 690.721897][ T5726] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 690.721975][ T5726] usb 3-1: Manufacturer: syz [ 690.722080][ T5726] usb 3-1: SerialNumber: syz [ 690.889441][ T5617] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 690.896094][ T5617] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 690.905758][ T5617] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 690.911269][ T5617] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 690.915847][ T5617] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 691.090191][ T5726] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 691.104040][ T5726] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 691.104332][ T5726] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 691.104371][ T5726] usb 3-1: media controller created [ 691.123368][ T5726] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 691.264023][ T5726] zl10353_read_register: readreg error (reg=127, ret==0) [ 691.310350][ T5726] usb 3-1: USB disconnect, device number 109 [ 691.409688][ T30] audit: type=1400 audit(1781369287.954:1126): avc: denied { connect } for pid=13380 comm="syz.1.1833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 691.464338][T13382] can0: slcan on ptm0. [ 691.633480][ T30] audit: type=1400 audit(1781369288.166:1127): avc: denied { write } for pid=13366 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 691.849976][ T30] audit: type=1400 audit(1781369288.360:1128): avc: denied { write } for pid=13402 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 691.908021][T13382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 691.955047][T13382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 692.529495][ T5633] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 692.669342][ T5633] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 692.682346][ T5633] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 692.693060][ T5633] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 692.712007][ T5633] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 693.160045][ T6011] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.169996][T13363] Failed to initialize the IGMP autojoin socket (err -2) [ 693.178183][ T5617] Bluetooth: hci1: command tx timeout [ 693.186734][ T6011] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.226768][ T6011] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.236116][ T6011] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.254142][T13380] can0 (unregistered): slcan off ptm0. [ 693.286367][T13398] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 693.334901][ T30] audit: type=1400 audit(1781369289.735:1129): avc: denied { write } for pid=13408 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 693.492960][T13398] usb 1-1: no configurations [ 693.505526][T13398] usb 1-1: can't read configurations, error -22 [ 693.550770][ T30] audit: type=1400 audit(1781369289.929:1130): avc: denied { write } for pid=13440 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 694.054587][T13445] fuse: Bad value for 'fd' [ 694.519811][T13398] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 694.667348][T13414] Failed to initialize the IGMP autojoin socket (err -2) [ 694.738693][T13398] usb 1-1: no configurations [ 694.764386][T13398] usb 1-1: can't read configurations, error -22 [ 694.803211][T13398] usb usb1-port1: attempt power cycle [ 694.854272][T13453] binder: 13450:13453 ioctl 400c620e 200000000200 returned -22 [ 694.997456][T13453] dlm: no locking on control device [ 695.020778][ T5617] Bluetooth: hci2: command tx timeout [ 695.224609][T13398] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 695.270746][T13398] usb 1-1: no configurations [ 695.275495][T13398] usb 1-1: can't read configurations, error -22 [ 695.429702][ T5617] Bluetooth: hci1: command tx timeout [ 695.440808][T13398] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 695.462953][T13398] usb 1-1: device descriptor read/8, error -71 [ 695.593247][T13398] usb usb1-port1: unable to enumerate USB device [ 695.740586][ T30] audit: type=1400 audit(1781369291.951:1131): avc: denied { write } for pid=13452 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 695.799823][T13389] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 695.862026][ T30] audit: type=1400 audit(1781369292.062:1132): avc: denied { write } for pid=13469 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 695.954975][ T5633] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 695.968831][ T5633] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 695.978675][ T5633] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 695.999476][ T5633] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 696.006645][T13389] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 696.020727][ T5633] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 696.032098][T13389] usb 3-1: config 0 has no interface number 0 [ 696.048726][T13389] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 696.080462][T13389] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 696.104950][T13389] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 696.127694][T13389] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.171703][T13389] usb 3-1: config 0 descriptor?? [ 696.741838][T13363] netdevsim netdevsim6 netdevsim0: renamed from eth13 [ 696.747225][T13389] prodikeys 0003:041E:2801.000A: reserved main item tag 0xd [ 696.776203][T13363] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 696.789720][ T30] audit: type=1400 audit(1781369292.920:1133): avc: denied { write } for pid=13482 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 696.824314][T13363] netdevsim netdevsim6 netdevsim1: renamed from eth14 [ 696.834549][T13389] prodikeys 0003:041E:2801.000A: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.2-1/input1 [ 696.855516][T13363] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 696.875804][T13363] netdevsim netdevsim6 netdevsim2: renamed from eth15 [ 696.933242][T13363] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 696.949289][T13389] hid_prodikeys: hid-prodikeys: failed to find output report [ 696.949289][T13389] [ 696.955773][ T30] audit: type=1400 audit(1781369293.077:1134): avc: denied { read } for pid=13504 comm="syz.0.1844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 696.993736][T13363] netdevsim netdevsim6 netdevsim3: renamed from eth16 [ 697.052582][T13363] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 697.064795][ T30] audit: type=1400 audit(1781369293.123:1135): avc: denied { write } for pid=13503 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 697.116406][T13471] Failed to initialize the IGMP autojoin socket (err -2) [ 697.682806][ T5633] Bluetooth: hci1: command tx timeout [ 697.756173][T13389] usb 3-1: USB disconnect, device number 110 [ 699.939522][ T5617] Bluetooth: hci1: command tx timeout [ 699.956911][ T5617] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 699.975031][ T5617] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 699.990961][ T5617] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 700.003497][ T5617] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 700.010986][ T5617] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 700.156537][ T30] audit: type=1400 audit(1781369296.022:1136): avc: denied { write } for pid=13515 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 700.662915][T13553] fuse: Bad value for 'fd' [ 701.120260][T13390] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 701.213939][ T30] audit: type=1400 audit(1781369297.001:1137): avc: denied { write } for pid=13560 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 701.345094][T13390] usb 3-1: Using ep0 maxpacket: 32 [ 701.358849][T13390] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 701.384394][T13390] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 701.412929][T13390] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 701.442932][T13390] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.471918][T13390] usb 3-1: config 0 descriptor?? [ 701.599505][T13541] Failed to initialize the IGMP autojoin socket (err -2) [ 701.693040][T13363] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 701.741278][T13363] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 701.793835][T13363] wireguard: wg0: Could not create IPv4 socket [ 701.804601][T13363] wireguard: wg1: Could not create IPv4 socket [ 701.827301][T13363] wireguard: wg2: Could not create IPv4 socket [ 702.032538][ T30] audit: type=1400 audit(1781369297.767:1138): avc: denied { write } for pid=13568 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 702.291642][ T30] audit: type=1400 audit(1781369297.989:1139): avc: denied { write } for pid=13586 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 702.811864][ T30] audit: type=1326 audit(1781369298.441:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13583 comm="syz.1.1850" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f46c599ce59 code=0x0 [ 703.246446][ T5633] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 703.260618][ T5633] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 703.271079][ T5633] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 703.279138][ T5633] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 703.318062][ T5633] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 703.482194][ T30] audit: type=1400 audit(1781369299.106:1141): avc: denied { write } for pid=13596 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 704.157435][T13390] usb 3-1: USB disconnect, device number 111 [ 704.173752][ T30] audit: type=1400 audit(1781369299.724:1142): avc: denied { write } for pid=13618 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 704.726260][T13629] FAULT_INJECTION: forcing a failure. [ 704.726260][T13629] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 704.761140][T13629] CPU: 0 UID: 0 PID: 13629 Comm: syz.2.1855 Tainted: G L syzkaller #0 PREEMPT(full) [ 704.761170][T13629] Tainted: [L]=SOFTLOCKUP [ 704.761176][T13629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 704.761185][T13629] Call Trace: [ 704.761189][T13629] [ 704.761194][T13629] dump_stack_lvl+0x100/0x190 [ 704.761212][T13629] should_fail_ex.cold+0x5/0xa [ 704.761228][T13629] _copy_from_iter+0x1f4/0x1690 [ 704.761245][T13629] ? __asan_memset+0x23/0x50 [ 704.761262][T13629] ? __pfx__copy_from_iter+0x10/0x10 [ 704.761276][T13629] ? __pfx___alloc_skb+0x10/0x10 [ 704.761304][T13629] netlink_sendmsg+0x808/0xda0 [ 704.761330][T13629] ? __pfx_netlink_sendmsg+0x10/0x10 [ 704.761348][T13629] ? __might_fault+0xa0/0x140 [ 704.761378][T13629] ____sys_sendmsg+0x9e1/0xb70 [ 704.761392][T13629] ? __pfx_netlink_sendmsg+0x10/0x10 [ 704.761407][T13629] ? __pfx_____sys_sendmsg+0x10/0x10 [ 704.761426][T13629] ___sys_sendmsg+0x190/0x1e0 [ 704.761441][T13629] ? __pfx____sys_sendmsg+0x10/0x10 [ 704.761472][T13629] __sys_sendmsg+0x170/0x220 [ 704.761490][T13629] ? __pfx___sys_sendmsg+0x10/0x10 [ 704.761518][T13629] ? rcu_is_watching+0x12/0xc0 [ 704.761536][T13629] do_syscall_64+0x115/0x870 [ 704.761552][T13629] ? clear_bhb_loop+0x40/0x90 [ 704.761566][T13629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.761578][T13629] RIP: 0033:0x7f013059ce59 [ 704.761588][T13629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 704.761600][T13629] RSP: 002b:00007f0131408028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 704.761612][T13629] RAX: ffffffffffffffda RBX: 00007f0130815fa0 RCX: 00007f013059ce59 [ 704.761620][T13629] RDX: 0000000020000040 RSI: 0000200000000240 RDI: 0000000000000003 [ 704.761627][T13629] RBP: 00007f0131408090 R08: 0000000000000000 R09: 0000000000000000 [ 704.761634][T13629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 704.761640][T13629] R13: 00007f0130816038 R14: 00007f0130815fa0 R15: 00007ffcf64d5c28 [ 704.761655][T13629] [ 705.088349][T13598] Failed to initialize the IGMP autojoin socket (err -2) [ 705.135156][T13399] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 705.412043][T13399] usb 1-1: Using ep0 maxpacket: 32 [ 705.443920][T13399] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 705.547196][T13399] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 705.564301][T13399] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 705.593145][T13399] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.627771][T13399] usb 1-1: config 0 descriptor?? [ 705.751316][ T30] audit: type=1400 audit(1781369301.192:1143): avc: denied { write } for pid=13631 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 705.923367][ T30] audit: type=1400 audit(1781369301.349:1144): avc: denied { write } for pid=13655 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 706.136999][T13399] savu 0003:1E7D:2D5A.000B: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 706.263059][ T5617] Bluetooth: hci1: command tx timeout [ 706.397270][ T30] audit: type=1400 audit(1781369301.792:1145): avc: denied { write } for pid=13658 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 706.463720][T13399] usb 1-1: USB disconnect, device number 121 [ 706.546916][ T30] audit: type=1400 audit(1781369301.931:1146): avc: denied { write } for pid=13670 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 706.890644][ T9] usb 3-1: new full-speed USB device number 112 using dummy_hcd [ 707.429552][ T5633] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 707.459860][ T5633] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 707.484397][ T5633] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 707.502088][ T5633] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 707.512373][ T5633] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 708.028924][ T9] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 708.061770][ T9] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 708.079734][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.104157][ T9] usb 3-1: Product: syz [ 708.124325][ T9] usb 3-1: Manufacturer: syz [ 708.133649][ T9] usb 3-1: SerialNumber: syz [ 708.170440][ T9] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 708.288949][ T30] audit: type=1400 audit(1781369303.546:1147): avc: denied { bind } for pid=13698 comm="syz.1.1862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 708.310959][ T30] audit: type=1400 audit(1781369303.565:1148): avc: denied { write } for pid=13698 comm="syz.1.1862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 708.514573][ T5617] Bluetooth: hci1: command tx timeout [ 708.608378][T13717] Failed to initialize the IGMP autojoin socket (err -2) [ 709.255090][T13679] Failed to initialize the IGMP autojoin socket (err -2) [ 709.626076][ T30] audit: type=1400 audit(1781369304.774:1149): avc: denied { write } for pid=13684 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 709.899119][ T30] audit: type=1400 audit(1781369305.024:1150): avc: denied { write } for pid=13735 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 710.134772][T13598] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 710.165186][T13598] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 710.184956][T13598] wireguard: wg0: Could not create IPv4 socket [ 710.194021][T13598] wireguard: wg1: Could not create IPv4 socket [ 710.202594][T13598] wireguard: wg2: Could not create IPv4 socket [ 710.324800][ T9] usb 3-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 710.351242][ T9] usb 3-1: USB disconnect, device number 112 [ 710.440319][ T30] audit: type=1400 audit(1781369305.522:1151): avc: denied { write } for pid=13742 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 710.513504][ T30] audit: type=1400 audit(1781369305.596:1152): avc: denied { write } for pid=13753 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 710.882935][ T30] audit: type=1400 audit(1781369305.938:1153): avc: denied { block_suspend } for pid=13774 comm="syz.2.1868" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 710.911679][ T9] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 710.954385][ T5633] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 710.972099][ T30] audit: type=1400 audit(1781369306.011:1154): avc: denied { write } for pid=13756 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 710.995618][ T5633] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 711.007688][ T803] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 711.017552][ T5633] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 711.029098][ T5633] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 711.041849][ T5633] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 711.115744][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 711.135485][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 711.174290][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 711.205569][ T9] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 711.224760][ T803] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 711.247342][ T30] audit: type=1400 audit(1781369306.270:1155): avc: denied { write } for pid=13785 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 711.252070][ T803] usb 2-1: config 0 has no interfaces? [ 711.272039][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.308825][ T9] usb 1-1: config 0 descriptor?? [ 711.339746][ T803] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 711.368135][ T803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.391753][ T803] usb 2-1: Product: syz [ 711.403767][ T803] usb 2-1: Manufacturer: syz [ 711.411116][ T803] usb 2-1: SerialNumber: syz [ 711.429257][ T803] usb 2-1: config 0 descriptor?? [ 711.617727][T13776] Failed to initialize the IGMP autojoin socket (err -2) [ 711.728546][T13766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 711.788797][T13766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 711.840888][T13766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 711.871623][T13766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 711.912425][T13766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 711.939309][T13766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 711.967084][T13766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 712.081667][T13766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 712.090841][ T30] audit: type=1400 audit(1781369307.045:1156): avc: denied { write } for pid=13794 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 712.098953][T13766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 712.544558][T13766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.280808][ T5633] Bluetooth: hci1: command tx timeout [ 713.728486][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 713.728516][ T30] audit: type=1400 audit(1781369308.559:1160): avc: denied { write } for pid=13834 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 713.918871][T13389] usb 2-1: USB disconnect, device number 106 [ 713.992878][ T9] usb 1-1: USB disconnect, device number 122 [ 714.075184][T13776] netdevsim netdevsim6 netdevsim0: renamed from eth13 [ 714.122105][T13776] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 714.139294][T13776] netdevsim netdevsim6 netdevsim1: renamed from eth14 [ 714.176075][T13776] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 714.213631][ T5617] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 714.231733][ T5617] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 714.236027][T13776] netdevsim netdevsim6 netdevsim2: renamed from eth15 [ 714.245729][ T5617] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 714.262261][ T5617] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 714.270362][ T5617] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 714.509261][T13776] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 714.671022][T13776] netdevsim netdevsim6 netdevsim3: renamed from eth16 [ 714.717673][T13776] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 714.856454][T13849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1876'. [ 714.896513][ T30] audit: type=1400 audit(1781369309.640:1161): avc: denied { write } for pid=13837 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 715.071628][T13868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1878'. [ 715.188851][ T30] audit: type=1400 audit(1781369309.907:1162): avc: denied { write } for pid=13869 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 715.230388][T13389] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 715.287221][T13877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.304651][T13877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 715.406815][T13882] FAULT_INJECTION: forcing a failure. [ 715.406815][T13882] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 715.427412][T13389] usb 2-1: unable to get BOS descriptor or descriptor too short [ 715.443948][T13882] CPU: 1 UID: 0 PID: 13882 Comm: syz.2.1880 Tainted: G L syzkaller #0 PREEMPT(full) [ 715.443979][T13882] Tainted: [L]=SOFTLOCKUP [ 715.443985][T13882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 715.443995][T13882] Call Trace: [ 715.444001][T13882] [ 715.444008][T13882] dump_stack_lvl+0x100/0x190 [ 715.444033][T13882] should_fail_ex.cold+0x5/0xa [ 715.444057][T13882] _copy_to_user+0x32/0xd0 [ 715.444081][T13882] simple_read_from_buffer+0xcb/0x170 [ 715.444109][T13882] proc_fail_nth_read+0x1af/0x230 [ 715.444129][T13882] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 715.444150][T13882] ? rw_verify_area+0xce/0x6d0 [ 715.444166][T13882] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 715.444184][T13882] vfs_read+0x1e4/0xb30 [ 715.444206][T13882] ? __pfx_vfs_read+0x10/0x10 [ 715.444225][T13882] ? __fget_files+0x215/0x3d0 [ 715.444253][T13882] ? __fget_files+0x21f/0x3d0 [ 715.444282][T13882] ksys_read+0x12a/0x250 [ 715.444300][T13882] ? __pfx_ksys_read+0x10/0x10 [ 715.444321][T13882] ? rcu_is_watching+0x12/0xc0 [ 715.444350][T13882] do_syscall_64+0x115/0x870 [ 715.444373][T13882] ? clear_bhb_loop+0x40/0x90 [ 715.444396][T13882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.444414][T13882] RIP: 0033:0x7f013055d68e [ 715.444429][T13882] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 715.444446][T13882] RSP: 002b:00007f0131407fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 715.444462][T13882] RAX: ffffffffffffffda RBX: 00007f01314086c0 RCX: 00007f013055d68e [ 715.444473][T13882] RDX: 000000000000000f RSI: 00007f01314080a0 RDI: 0000000000000004 [ 715.444483][T13882] RBP: 00007f0131408090 R08: 0000000000000000 R09: 0000000000000000 [ 715.444494][T13882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 715.444504][T13882] R13: 00007f0130816038 R14: 00007f0130815fa0 R15: 00007ffcf64d5c28 [ 715.444527][T13882] [ 715.445301][T13389] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 715.487704][T13844] Failed to initialize the IGMP autojoin socket (err -2) [ 715.555300][T13389] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 715.569939][ T5617] Bluetooth: hci1: command tx timeout [ 715.600086][T13389] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 715.631173][T13398] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 715.736068][T13389] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 715.736112][T13389] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 715.736137][T13389] usb 2-1: config 1 interface 1 has no altsetting 0 [ 715.738684][T13389] usb 2-1: string descriptor 0 read error: -22 [ 715.816298][T13389] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 715.866389][T13389] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.881665][T13398] usb 1-1: Using ep0 maxpacket: 32 [ 715.894702][T13398] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 715.932572][T13398] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 715.951801][T13398] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.993267][T13398] usb 1-1: Product: syz [ 716.007082][T13398] usb 1-1: Manufacturer: syz [ 716.023542][T13398] usb 1-1: SerialNumber: syz [ 716.053483][T13398] usb 1-1: config 0 descriptor?? [ 716.075768][T13398] quatech2 1-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 716.263098][ T30] audit: type=1400 audit(1781369310.904:1163): avc: denied { write } for pid=13887 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 716.302440][T13398] usb 1-1: qt2_attach - failed to power on unit: -71 [ 716.320448][T13398] quatech2 1-1:0.0: probe with driver quatech2 failed with error -71 [ 716.355617][T13398] usb 1-1: USB disconnect, device number 123 [ 716.479203][ T30] audit: type=1400 audit(1781369311.107:1164): avc: denied { write } for pid=13917 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 716.526797][T13911] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input47 [ 716.560586][T13776] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 716.604439][T13776] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 716.680121][T13776] wireguard: wg0: Could not create IPv4 socket [ 716.701680][T13776] wireguard: wg1: Could not create IPv4 socket [ 716.721576][T13776] wireguard: wg2: Could not create IPv4 socket [ 716.847285][T13389] usb 2-1: 2:0: failed to get current value for ch 1 (-71) [ 716.973875][ T30] audit: type=1400 audit(1781369311.551:1165): avc: denied { write } for pid=13921 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 717.021816][T13389] usb 2-1: USB disconnect, device number 107 [ 717.311784][ T30] audit: type=1400 audit(1781369311.864:1166): avc: denied { write } for pid=13937 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 717.427477][T12201] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 717.443074][T12201] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 717.453488][T12201] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 717.464543][T12201] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 717.484133][T12201] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 717.797813][T13543] Bluetooth: hci1: command tx timeout [ 717.927698][T13398] usb 2-1: new full-speed USB device number 108 using dummy_hcd [ 718.147737][T13398] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 718.171822][T13398] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.214034][T13398] usb 2-1: config 0 descriptor?? [ 718.241998][T13397] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 718.267271][T13398] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 718.371071][ T30] audit: type=1400 audit(1781369312.843:1167): avc: denied { write } for pid=13944 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 718.408922][T13939] Failed to initialize the IGMP autojoin socket (err -2) [ 718.436691][T13397] usb 3-1: Using ep0 maxpacket: 32 [ 718.444008][T13397] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 718.454329][T13397] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 718.464322][T13397] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.479564][T13398] gp8psk: usb in 128 operation failed. [ 718.525551][T13397] usb 3-1: config 0 descriptor?? [ 718.655195][ T30] audit: type=1400 audit(1781369313.102:1168): avc: denied { write } for pid=13969 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 718.718065][T13398] gp8psk: usb in 146 operation failed. [ 718.733943][T13398] gp8psk: failed to get FW version [ 718.739901][T13543] Bluetooth: hci3: command 0x0406 tx timeout [ 718.779348][T13398] gp8psk: FPGA Version = 0 [ 719.129339][ T30] audit: type=1400 audit(1781369313.545:1169): avc: denied { write } for pid=13972 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 719.214482][T13398] gp8psk: usb out operation failed. [ 719.227375][ T30] audit: type=1400 audit(1781369313.637:1170): avc: denied { write } for pid=13984 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 719.251523][T13398] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 719.270514][T13398] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 719.308389][T13398] usb 2-1: USB disconnect, device number 108 [ 719.796817][ T30] audit: type=1400 audit(1781369314.163:1171): avc: denied { create } for pid=13992 comm="syz.0.1887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 720.017895][T13543] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 720.026693][T13543] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 720.044092][T13543] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 720.055333][T14003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1889'. [ 720.066671][T13543] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 720.107218][T13543] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 720.727465][ T30] audit: type=1400 audit(1781369315.022:1172): avc: denied { write } for pid=13989 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 720.912362][T14028] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 720.938628][T14028] audit: out of memory in audit_log_start [ 721.042587][ T30] audit: type=1400 audit(1781369315.317:1173): avc: denied { write } for pid=14030 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 721.072699][T14004] Failed to initialize the IGMP autojoin socket (err -2) [ 721.166095][T14037] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 721.249191][ T30] audit: type=1400 audit(1781369315.502:1174): avc: denied { getopt } for pid=14039 comm="syz.1.1896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 721.283989][T13390] usb 3-1: USB disconnect, device number 113 [ 721.475263][T14049] random: crng reseeded on system resumption [ 721.971548][ T30] audit: type=1400 audit(1781369316.176:1175): avc: denied { write } for pid=14048 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 722.022194][ T30] audit: type=1400 audit(1781369316.222:1176): avc: denied { write } for pid=14060 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 722.210874][ T30] audit: type=1400 audit(1781369316.397:1177): avc: denied { write } for pid=14063 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 722.814955][T14108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1898'. [ 722.853438][T14108] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1898'. [ 723.108773][T13396] usb 2-1: new full-speed USB device number 109 using dummy_hcd [ 723.147552][T14118] binder: 14114:14118 ioctl 400c620e 200000000200 returned -22 [ 723.254891][T13543] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 723.272263][T13543] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 723.285351][T13543] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 723.310471][T13396] usb 2-1: unable to get BOS descriptor or descriptor too short [ 723.319561][T14118] dlm: no locking on control device [ 723.319962][T13396] usb 2-1: not running at top speed; connect to a high speed hub [ 723.342744][T13396] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 723.354950][T13543] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 723.366798][T13396] usb 2-1: config 0 has no interface number 0 [ 723.374068][T13396] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 46935, setting to 64 [ 723.386149][T13396] usb 2-1: config 0 interface 88 has no altsetting 0 [ 723.393642][T13543] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 723.521650][T13396] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 723.561568][T13396] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 723.590162][T13396] usb 2-1: Product: syz [ 723.606772][T13396] usb 2-1: SerialNumber: Љ [ 723.633505][T13396] usb 2-1: config 0 descriptor?? [ 723.650608][T14110] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 723.945331][T13396] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input48 [ 723.982854][T13389] usb 3-1: new full-speed USB device number 114 using dummy_hcd [ 723.985272][T13396] usb 2-1: USB disconnect, device number 109 [ 724.084105][ T5626] udevd[5626]: Error opening device "/dev/input/event4": No such file or directory [ 724.121473][ T5626] udevd[5626]: Unable to EVIOCGABS device "/dev/input/event4" [ 724.140678][ T5626] udevd[5626]: Unable to EVIOCGABS device "/dev/input/event4" [ 724.154439][T14117] Failed to initialize the IGMP autojoin socket (err -2) [ 724.165191][T13389] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 724.186588][T13389] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.209780][T13389] usb 3-1: config 0 descriptor?? [ 724.229750][T13389] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 724.441486][T13389] gp8psk: usb in 128 operation failed. [ 724.676565][T13389] gp8psk: usb in 146 operation failed. [ 724.682661][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 724.682677][ T30] audit: type=1400 audit(1781369318.678:1185): avc: denied { write } for pid=14150 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 724.719367][T13389] gp8psk: failed to get FW version [ 724.732513][T13389] gp8psk: FPGA Version = 0 [ 724.814542][ T30] audit: type=1400 audit(1781369318.798:1186): avc: denied { write } for pid=14161 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 724.954520][T13389] gp8psk: usb in 138 operation failed. [ 724.961917][T13389] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 724.980684][T13389] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 724.994409][T13389] usb 3-1: USB disconnect, device number 114 [ 725.091616][ T30] audit: type=1400 audit(1781369319.056:1187): avc: denied { write } for pid=14164 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 725.160566][ T30] audit: type=1400 audit(1781369319.112:1188): avc: denied { write } for pid=14175 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 725.364645][ T30] audit: type=1400 audit(1781369319.305:1189): avc: denied { write } for pid=14178 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 725.429151][ T30] audit: type=1400 audit(1781369319.361:1190): avc: denied { write } for pid=14189 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 725.690884][ T30] audit: type=1400 audit(1781369319.601:1191): avc: denied { write } for pid=14192 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 725.749900][ T30] audit: type=1400 audit(1781369319.647:1192): avc: denied { watch watch_reads } for pid=14205 comm="syz.2.1907" path="pipe:[5125]" dev="pipefs" ino=5125 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 725.858898][ T30] audit: type=1400 audit(1781369319.767:1193): avc: denied { write } for pid=14210 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 725.861081][ T5617] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 725.901476][ T5617] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 725.915337][ T5617] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 725.939718][ T5617] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 725.952050][ T5617] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 726.934804][T14224] netlink: 'syz.0.1910': attribute type 1 has an invalid length. [ 727.108867][T14224] 8021q: adding VLAN 0 to HW filter on device bond2 [ 727.141659][T14238] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1910'. [ 727.175358][T14224] bond1: (slave bond2): making interface the new active one [ 727.466981][T14224] bond1: (slave bond2): Enslaving as an active interface with an up link [ 727.599698][T14235] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 727.638031][T14238] 8021q: adding VLAN 0 to HW filter on device bond1 [ 727.666694][T13399] usb 3-1: new full-speed USB device number 115 using dummy_hcd [ 727.683024][ T30] audit: type=1400 audit(1781369321.447:1194): avc: denied { write } for pid=14222 comm="syz.0.1910" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 727.856314][T13399] usb 3-1: config 0 has no interfaces? [ 727.871991][T13399] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 727.918789][T13399] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.919020][T14213] Failed to initialize the IGMP autojoin socket (err -2) [ 728.172948][T13399] usb 3-1: config 0 descriptor?? [ 728.489769][T13399] usb 3-1: USB disconnect, device number 115 [ 730.187354][ T5617] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 730.191735][ T5617] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 730.193187][ T5617] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 730.193896][ T5617] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 730.194288][ T5617] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 730.243369][T13389] usb 2-1: new full-speed USB device number 110 using dummy_hcd [ 730.407634][T13389] usb 2-1: unable to get BOS descriptor or descriptor too short [ 730.408087][T13389] usb 2-1: not running at top speed; connect to a high speed hub [ 730.408987][T13389] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 730.409012][T13389] usb 2-1: config 0 has no interface number 0 [ 730.409048][T13389] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 46935, setting to 64 [ 730.409075][T13389] usb 2-1: config 0 interface 88 has no altsetting 0 [ 730.412876][T13389] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 730.504285][T13389] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 730.521301][T13389] usb 2-1: Product: syz [ 730.533269][T14325] Failed to initialize the IGMP autojoin socket (err -2) [ 730.542801][T13389] usb 2-1: SerialNumber: Љ [ 730.546184][T13389] usb 2-1: config 0 descriptor?? [ 730.559883][T14318] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 730.805211][T13389] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input49 [ 730.847187][T13389] usb 2-1: USB disconnect, device number 110 [ 731.034358][T13390] usb 3-1: new low-speed USB device number 116 using dummy_hcd [ 731.207424][T13390] usb 3-1: Invalid ep0 maxpacket: 16 [ 731.369916][T13390] usb 3-1: new low-speed USB device number 117 using dummy_hcd [ 731.535207][T13390] usb 3-1: Invalid ep0 maxpacket: 16 [ 731.551097][T13390] usb usb3-port1: attempt power cycle [ 731.922419][T13390] usb 3-1: new low-speed USB device number 118 using dummy_hcd [ 731.948153][T13390] usb 3-1: Invalid ep0 maxpacket: 16 [ 732.084849][T13390] usb 3-1: new low-speed USB device number 119 using dummy_hcd [ 732.107246][T13390] usb 3-1: Invalid ep0 maxpacket: 16 [ 732.113019][T13390] usb usb3-port1: unable to enumerate USB device [ 732.299806][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 732.299824][ T30] audit: type=1400 audit(1781369325.703:1205): avc: denied { write } for pid=14372 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 732.415392][ T30] audit: type=1400 audit(1781369325.814:1206): avc: denied { write } for pid=14388 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 732.485303][T13543] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 732.500343][T13543] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 732.513034][T13543] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 732.526030][T13543] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 732.534036][T13543] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 732.615551][T13390] usb 1-1: new full-speed USB device number 124 using dummy_hcd [ 732.637274][ T9] usb 2-1: new full-speed USB device number 111 using dummy_hcd [ 732.792427][T13390] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 732.801975][T13390] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.820999][ T9] usb 2-1: config 0 has no interfaces? [ 732.832828][T13390] usb 1-1: config 0 descriptor?? [ 732.838553][ T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 732.857417][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.871012][T13390] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 732.883795][T14390] Failed to initialize the IGMP autojoin socket (err -2) [ 732.894388][ T9] usb 2-1: config 0 descriptor?? [ 733.087160][T13390] gp8psk: usb in 128 operation failed. [ 733.146004][ T9] usb 2-1: USB disconnect, device number 111 [ 733.282531][ T30] audit: type=1400 audit(1781369326.617:1207): avc: denied { write } for pid=14413 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 733.321846][T13390] gp8psk: usb in 146 operation failed. [ 733.332641][T13390] gp8psk: failed to get FW version [ 733.338123][T13390] gp8psk: usb in 149 operation failed. [ 733.345206][T13390] gp8psk: failed to get FPGA version [ 733.350842][T13390] gp8psk: usb in 138 operation failed. [ 733.358040][T13390] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 733.371053][T13390] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 733.371153][ T30] audit: type=1400 audit(1781369326.700:1208): avc: denied { write } for pid=14424 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 733.384360][T13390] usb 1-1: USB disconnect, device number 124 [ 733.616567][ T30] audit: type=1400 audit(1781369326.922:1209): avc: denied { write } for pid=14427 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 733.685490][ T30] audit: type=1400 audit(1781369326.986:1210): avc: denied { write } for pid=14438 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 734.118842][ T30] audit: type=1400 audit(1781369327.383:1211): avc: denied { write } for pid=14449 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 734.177483][ T30] audit: type=1400 audit(1781369327.439:1212): avc: denied { write } for pid=14460 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 734.390184][ T30] audit: type=1400 audit(1781369327.633:1213): avc: denied { write } for pid=14463 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 734.451145][ T30] audit: type=1400 audit(1781369327.697:1214): avc: denied { write } for pid=14474 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 734.624089][T14484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1924'. [ 734.721881][ T5617] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 734.740524][ T5617] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 734.750380][ T5617] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 734.760111][ T5617] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 734.776155][ T5617] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 734.805389][T13390] hid_parser_main: 467 callbacks suppressed [ 734.805411][T13390] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 734.825736][T14496] FAULT_INJECTION: forcing a failure. [ 734.825736][T14496] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 734.838975][T14496] CPU: 1 UID: 0 PID: 14496 Comm: syz.0.1925 Tainted: G L syzkaller #0 PREEMPT(full) [ 734.839004][T14496] Tainted: [L]=SOFTLOCKUP [ 734.839010][T14496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 734.839021][T14496] Call Trace: [ 734.839027][T14496] [ 734.839033][T14496] dump_stack_lvl+0x100/0x190 [ 734.839059][T14496] should_fail_ex.cold+0x5/0xa [ 734.839082][T14496] _copy_from_iter+0x1f4/0x1690 [ 734.839107][T14496] ? __asan_memset+0x23/0x50 [ 734.839134][T14496] ? __pfx__copy_from_iter+0x10/0x10 [ 734.839155][T14496] ? __pfx___alloc_skb+0x10/0x10 [ 734.839179][T14496] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 734.839216][T14496] netlink_sendmsg+0x808/0xda0 [ 734.839241][T14496] ? __pfx_netlink_sendmsg+0x10/0x10 [ 734.839260][T14496] ? __might_fault+0xa0/0x140 [ 734.839292][T14496] ____sys_sendmsg+0x9e1/0xb70 [ 734.839311][T14496] ? __pfx_netlink_sendmsg+0x10/0x10 [ 734.839332][T14496] ? __pfx_____sys_sendmsg+0x10/0x10 [ 734.839363][T14496] ___sys_sendmsg+0x190/0x1e0 [ 734.839386][T14496] ? __pfx____sys_sendmsg+0x10/0x10 [ 734.839434][T14496] __sys_sendmsg+0x170/0x220 [ 734.839459][T14496] ? __pfx___sys_sendmsg+0x10/0x10 [ 734.839495][T14496] ? rcu_is_watching+0x12/0xc0 [ 734.839525][T14496] do_syscall_64+0x115/0x870 [ 734.839548][T14496] ? clear_bhb_loop+0x40/0x90 [ 734.839570][T14496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.839588][T14496] RIP: 0033:0x7f411819ce59 [ 734.839603][T14496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 734.839620][T14496] RSP: 002b:00007f41163f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 734.839637][T14496] RAX: ffffffffffffffda RBX: 00007f4118415fa0 RCX: 00007f411819ce59 [ 734.839649][T14496] RDX: 0000000004041080 RSI: 0000200000006040 RDI: 0000000000000004 [ 734.839660][T14496] RBP: 00007f41163f6090 R08: 0000000000000000 R09: 0000000000000000 [ 734.839671][T14496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 734.839681][T14496] R13: 00007f4118416038 R14: 00007f4118415fa0 R15: 00007ffc0d63c608 [ 734.839704][T14496] [ 734.875569][T13390] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 735.200838][T14500] fido_id[14500]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 736.111982][T14490] Failed to initialize the IGMP autojoin socket (err -2) [ 736.352581][T13390] usb 2-1: new full-speed USB device number 112 using dummy_hcd [ 736.516896][T13390] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 736.518853][T13390] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 736.518879][T13390] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.518899][T13390] usb 2-1: Product: syz [ 736.518914][T13390] usb 2-1: Manufacturer: syz [ 736.518928][T13390] usb 2-1: SerialNumber: syz [ 736.531054][T13390] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 737.948843][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 737.948859][ T30] audit: type=1400 audit(1781369330.919:1219): avc: denied { write } for pid=14549 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 738.009926][ T30] audit: type=1400 audit(1781369330.975:1220): avc: denied { write } for pid=14560 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 738.086225][T14566] Invalid logical block size (18) [ 738.266759][ T5617] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 738.283190][ T5617] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 738.296688][ T5617] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 738.308513][ T5617] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 738.318652][ T5617] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 738.378397][T13389] usb 1-1: new full-speed USB device number 125 using dummy_hcd [ 738.486561][T13398] usb 3-1: new full-speed USB device number 120 using dummy_hcd [ 738.515091][ T30] audit: type=1400 audit(1781369331.446:1221): avc: denied { write } for pid=14568 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 738.564099][T13389] usb 1-1: unable to get BOS descriptor or descriptor too short [ 738.575522][T13389] usb 1-1: not running at top speed; connect to a high speed hub [ 738.588049][T13389] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 738.606974][T13389] usb 1-1: config 0 has no interface number 0 [ 738.624194][ T30] audit: type=1400 audit(1781369331.547:1222): avc: denied { write } for pid=14588 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 738.627969][T13389] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 46935, setting to 64 [ 738.665761][T13389] usb 1-1: config 0 interface 88 has no altsetting 0 [ 738.686262][T13398] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 738.686791][T13389] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 738.699940][T13398] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.725595][T13389] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 738.736609][T13389] usb 1-1: Product: syz [ 738.741011][T13389] usb 1-1: SerialNumber: Љ [ 738.752184][T13398] usb 3-1: config 0 descriptor?? [ 738.762132][T13389] usb 1-1: config 0 descriptor?? [ 738.777853][T13398] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 738.781054][T14565] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 738.814657][T14572] Failed to initialize the IGMP autojoin socket (err -2) [ 738.998269][T13398] gp8psk: usb in 128 operation failed. [ 739.034502][T13389] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input50 [ 739.094606][T13389] usb 1-1: USB disconnect, device number 125 [ 739.226095][T13398] gp8psk: FW Version = 0.00.0 (0x0) Build 2000/00/00 [ 739.248804][ T30] audit: type=1400 audit(1781369332.119:1223): avc: denied { write } for pid=14594 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 739.331365][ T30] audit: type=1400 audit(1781369332.193:1224): avc: denied { write } for pid=14605 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 739.364665][T13390] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 739.399312][T13390] usb 2-1: USB disconnect, device number 112 [ 739.444416][T13398] gp8psk: usb in 149 operation failed. [ 739.451162][T13398] gp8psk: failed to get FPGA version [ 739.458387][T13398] gp8psk: usb in 138 operation failed. [ 739.464371][T13398] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 739.477040][T13398] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 739.494674][T13398] usb 3-1: USB disconnect, device number 120 [ 739.654179][ T30] audit: type=1400 audit(1781369332.489:1225): avc: denied { write } for pid=14608 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 739.717802][ T30] audit: type=1400 audit(1781369332.553:1226): avc: denied { write } for pid=14619 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 739.920757][ T30] audit: type=1400 audit(1781369332.747:1227): avc: denied { write } for pid=14622 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 739.974269][ T30] audit: type=1400 audit(1781369332.793:1228): avc: denied { write } for pid=14633 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 741.102917][T14693] dlm: no locking on control device [ 741.350606][T13543] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 741.363497][T13543] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 741.372103][T13543] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 741.380966][T13543] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 741.392305][T13543] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 742.578024][T14696] Failed to initialize the IGMP autojoin socket (err -2) [ 743.378661][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 743.378677][ T30] audit: type=1400 audit(1781369335.932:1238): avc: denied { write } for pid=14740 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 743.781766][ T30] audit: type=1400 audit(1781369336.302:1239): avc: denied { write } for pid=14743 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 743.895508][ T30] audit: type=1400 audit(1781369336.412:1240): avc: denied { write } for pid=14754 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 744.280551][ T30] audit: type=1400 audit(1781369336.763:1241): avc: denied { write } for pid=14757 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 744.340812][ T30] audit: type=1400 audit(1781369336.828:1242): avc: denied { write } for pid=14768 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 744.539578][ T30] audit: type=1400 audit(1781369337.003:1243): avc: denied { write } for pid=14771 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 744.598966][ T30] audit: type=1400 audit(1781369337.068:1244): avc: denied { write } for pid=14782 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 744.896341][T14793] Failed to initialize the IGMP autojoin socket (err -2) [ 745.001011][T13543] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 745.027927][T13543] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 745.040127][T13543] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 745.052299][ T30] audit: type=1400 audit(1781369337.474:1245): avc: denied { write } for pid=14785 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 745.079347][T13543] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 745.093374][T13543] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 745.220381][T14813] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 745.641335][T13396] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 745.679455][ T30] audit: type=1400 audit(1781369338.065:1246): avc: denied { write } for pid=14814 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 745.787184][T13396] usb 2-1: device descriptor read/64, error -71 [ 746.047140][T13396] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 746.105507][T14804] Failed to initialize the IGMP autojoin socket (err -2) [ 746.188305][T13396] usb 2-1: device descriptor read/64, error -71 [ 746.296242][T13397] usb 3-1: new full-speed USB device number 121 using dummy_hcd [ 746.318406][T13396] usb usb2-port1: attempt power cycle [ 746.330491][ T30] audit: type=1400 audit(1781369338.665:1247): avc: denied { write } for pid=14821 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 746.471259][T13397] usb 3-1: unable to get BOS descriptor or descriptor too short [ 746.491775][T13397] usb 3-1: not running at top speed; connect to a high speed hub [ 746.501700][T13397] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 746.517276][T13397] usb 3-1: config 0 has no interface number 0 [ 746.523412][T13397] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 46935, setting to 64 [ 746.535118][T13397] usb 3-1: config 0 interface 88 has no altsetting 0 [ 746.546530][T13397] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 746.555748][T13397] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 746.564441][T13397] usb 3-1: Product: syz [ 746.570244][T13397] usb 3-1: SerialNumber: Љ [ 746.585685][T13397] usb 3-1: config 0 descriptor?? [ 746.591951][T14829] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 746.718750][T13396] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 746.752821][T13396] usb 2-1: device descriptor read/8, error -71 [ 746.843475][T13397] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input51 [ 746.876676][T13397] usb 3-1: USB disconnect, device number 121 [ 746.926237][ T5626] udevd[5626]: Error opening device "/dev/input/event4": No such file or directory [ 746.944759][ T5626] udevd[5626]: Unable to EVIOCGABS device "/dev/input/event4" [ 746.952854][ T5626] udevd[5626]: Unable to EVIOCGABS device "/dev/input/event4" [ 746.960686][ T5626] udevd[5626]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 747.000982][ T4983] udevd[4983]: worker [5626] terminated by signal 6 (Aborted) [ 747.008660][ T4983] udevd[4983]: worker [5626] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input51/event4' [ 747.021776][T13396] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 747.057703][T13396] usb 2-1: device descriptor read/8, error -71 [ 747.177611][T13396] usb usb2-port1: unable to enumerate USB device [ 748.604526][T13397] usb 1-1: new full-speed USB device number 126 using dummy_hcd [ 748.676851][T13389] usb 2-1: new full-speed USB device number 117 using dummy_hcd [ 748.744236][T13543] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 748.758580][T13543] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 748.767990][T13543] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 748.776084][T13543] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 748.783809][T13543] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 748.817544][T13397] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 748.843730][T13397] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 748.858474][T13397] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.870836][T13397] usb 1-1: Product: syz [ 748.878430][T13397] usb 1-1: Manufacturer: syz [ 748.884109][T13397] usb 1-1: SerialNumber: syz [ 748.897538][T13389] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 748.903722][T13397] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 748.907148][T13389] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.968527][T13389] usb 2-1: config 0 descriptor?? [ 748.994963][T13389] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 749.614139][T13389] gp8psk: usb in 128 operation failed. [ 749.643246][T13389] gp8psk: FW Version = 0.00.0 (0x0) Build 2000/00/00 [ 749.716649][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 749.716661][ T30] audit: type=1400 audit(1781369341.785:1261): avc: denied { write } for pid=14937 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 749.858846][T13389] gp8psk: usb in 149 operation failed. [ 749.869389][ T30] audit: type=1400 audit(1781369341.924:1262): avc: denied { write } for pid=14959 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 749.895506][T13389] gp8psk: failed to get FPGA version [ 749.903373][T13389] gp8psk: usb in 138 operation failed. [ 749.913794][T13389] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 749.937702][T13389] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 749.982595][T13389] usb 2-1: USB disconnect, device number 117 [ 750.086170][T14934] Failed to initialize the IGMP autojoin socket (err -2) [ 750.877850][ T30] audit: type=1400 audit(1781369342.856:1263): avc: denied { write } for pid=14963 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 750.998826][ T30] audit: type=1400 audit(1781369342.976:1264): avc: denied { write } for pid=14982 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 751.330821][ T30] audit: type=1400 audit(1781369343.272:1265): avc: denied { write } for pid=14985 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 751.449292][ T30] audit: type=1400 audit(1781369343.355:1266): avc: denied { write } for pid=14996 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 751.537572][T13397] usb 1-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 751.594840][T13397] usb 1-1: USB disconnect, device number 126 [ 751.880727][ T30] audit: type=1400 audit(1781369343.779:1267): avc: denied { write } for pid=14999 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 751.945262][ T30] audit: type=1400 audit(1781369343.844:1268): avc: denied { write } for pid=15010 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 752.159365][ T30] audit: type=1400 audit(1781369344.029:1269): avc: denied { write } for pid=15013 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 752.217101][ T30] audit: type=1400 audit(1781369344.093:1270): avc: denied { write } for pid=15024 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 753.469681][T13543] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 753.557522][T15082] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 754.005113][T13543] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 754.018569][T13543] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 754.031152][T13543] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 754.038754][T13543] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 754.562777][T15078] Failed to initialize the IGMP autojoin socket (err -2) [ 754.696552][T13389] usb 3-1: new full-speed USB device number 122 using dummy_hcd [ 754.887788][T13389] usb 3-1: unable to get BOS descriptor or descriptor too short [ 754.919155][T13389] usb 3-1: not running at top speed; connect to a high speed hub [ 754.958904][T13389] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 754.986750][T13389] usb 3-1: config 0 has no interface number 0 [ 755.006708][T13389] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 46935, setting to 64 [ 755.044696][T13389] usb 3-1: config 0 interface 88 has no altsetting 0 [ 755.064152][T13389] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 755.084228][T13389] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 755.092441][T13389] usb 3-1: Product: syz [ 755.100442][T13389] usb 3-1: SerialNumber: Љ [ 755.114355][T13389] usb 3-1: config 0 descriptor?? [ 755.124818][T15103] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 755.253172][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 755.253188][ T30] audit: type=1400 audit(1781369346.891:1277): avc: denied { write } for pid=15108 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 755.312502][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 755.330045][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 755.394623][T13389] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input52 [ 755.435979][ C1] usb_acecad 3-1:0.88: can't resubmit intr, dummy_hcd.2-1/input0, status -1 [ 755.445001][ T30] audit: type=1400 audit(1781369347.075:1278): avc: denied { write } for pid=15119 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 755.470810][T13389] usb 3-1: USB disconnect, device number 122 [ 755.508274][ T6062] udevd[6062]: Error opening device "/dev/input/event4": No such file or directory [ 755.527457][ T6062] udevd[6062]: Unable to EVIOCGABS device "/dev/input/event4" [ 755.535182][ T6062] udevd[6062]: Unable to EVIOCGABS device "/dev/input/event4" [ 755.875862][ T30] audit: type=1400 audit(1781369347.472:1279): avc: denied { write } for pid=15122 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 755.975384][ T30] audit: type=1400 audit(1781369347.565:1280): avc: denied { write } for pid=15133 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 756.375297][ T30] audit: type=1400 audit(1781369347.934:1281): avc: denied { write } for pid=15136 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 756.471402][ T30] audit: type=1400 audit(1781369348.026:1282): avc: denied { write } for pid=15147 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 756.724586][ T30] audit: type=1400 audit(1781369348.257:1283): avc: denied { write } for pid=15150 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 756.779639][ T30] audit: type=1400 audit(1781369348.303:1284): avc: denied { write } for pid=15161 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 756.994259][ T30] audit: type=1400 audit(1781369348.506:1285): avc: denied { write } for pid=15164 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 757.058656][ T30] audit: type=1400 audit(1781369348.562:1286): avc: denied { write } for pid=15175 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 757.774076][ T5617] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 757.787387][ T5617] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 757.803382][ T5617] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 757.813364][ T5617] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 757.821358][T13397] usb 3-1: new full-speed USB device number 123 using dummy_hcd [ 757.833893][ T5617] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 758.123037][T13397] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 758.135485][T13389] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 758.153879][T13397] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 758.175367][T13397] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.196254][T13397] usb 3-1: Product: syz [ 758.208892][T13397] usb 3-1: Manufacturer: syz [ 758.220045][T13397] usb 3-1: SerialNumber: syz [ 758.239673][T13397] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 758.307850][T13389] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 758.330570][T13389] usb 1-1: can't read configurations, error -61 [ 758.482101][T13389] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 758.584493][T15188] Failed to initialize the IGMP autojoin socket (err -2) [ 758.670369][T13389] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 758.705555][T13389] usb 1-1: can't read configurations, error -61 [ 758.731935][T13389] usb usb1-port1: attempt power cycle [ 759.045375][T13388] usb 2-1: new full-speed USB device number 118 using dummy_hcd [ 759.121686][T13389] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 759.149570][T13389] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 759.160417][T13389] usb 1-1: can't read configurations, error -61 [ 759.209632][T13388] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 759.229494][T13388] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.246365][T13388] usb 2-1: config 0 descriptor?? [ 759.257478][T13388] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 759.305523][T13389] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 759.351316][T13389] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 759.359073][T13389] usb 1-1: can't read configurations, error -61 [ 759.366981][T13389] usb usb1-port1: unable to enumerate USB device [ 759.472266][T13388] gp8psk: usb in 128 operation failed. [ 759.697602][T13388] gp8psk: FW Version = 0.00.0 (0x0) Build 2000/00/00 [ 759.915164][T13388] gp8psk: usb in 149 operation failed. [ 759.933548][T13388] gp8psk: failed to get FPGA version [ 759.939169][T13388] gp8psk: usb in 138 operation failed. [ 759.955266][T13388] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 759.966084][T13388] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 759.986484][T13388] usb 2-1: USB disconnect, device number 118 [ 760.204359][T13396] ================================================================== [ 760.212534][T13396] BUG: KASAN: slab-use-after-free in __mutex_lock+0x1887/0x1b10 [ 760.220150][T13396] Read of size 8 at addr ffff888032a8d2e8 by task kworker/1:8/13396 [ 760.228116][T13396] [ 760.230434][T13396] CPU: 1 UID: 0 PID: 13396 Comm: kworker/1:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 760.230453][T13396] Tainted: [L]=SOFTLOCKUP [ 760.230457][T13396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 760.230466][T13396] Workqueue: events l2cap_chan_timeout [ 760.230483][T13396] Call Trace: [ 760.230489][T13396] [ 760.230495][T13396] dump_stack_lvl+0x100/0x190 [ 760.230509][T13396] print_report+0x13d/0x4b0 [ 760.230526][T13396] ? __virt_addr_valid+0x239/0x430 [ 760.230539][T13396] ? __mutex_lock+0x1887/0x1b10 [ 760.230559][T13396] kasan_report+0xdf/0x1d0 [ 760.230577][T13396] ? __mutex_lock+0x1887/0x1b10 [ 760.230599][T13396] __mutex_lock+0x1887/0x1b10 [ 760.230620][T13396] ? l2cap_chan_timeout+0x6d/0x360 [ 760.230639][T13396] ? __pfx___mutex_lock+0x10/0x10 [ 760.230657][T13396] ? lock_acquire+0x5e/0x370 [ 760.230672][T13396] ? l2cap_chan_timeout+0x6d/0x360 [ 760.230685][T13396] l2cap_chan_timeout+0x6d/0x360 [ 760.230699][T13396] process_one_work+0xa0e/0x1980 [ 760.230716][T13396] ? __pfx_process_one_work+0x10/0x10 [ 760.230732][T13396] ? __pfx_l2cap_chan_timeout+0x10/0x10 [ 760.230747][T13396] worker_thread+0x5ef/0xe50 [ 760.230762][T13396] ? __pfx_worker_thread+0x10/0x10 [ 760.230776][T13396] ? kthread+0x13a/0x450 [ 760.230788][T13396] ? __pfx_worker_thread+0x10/0x10 [ 760.230802][T13396] kthread+0x370/0x450 [ 760.230814][T13396] ? __pfx_kthread+0x10/0x10 [ 760.230827][T13396] ret_from_fork+0x72b/0xd50 [ 760.230842][T13396] ? __pfx_ret_from_fork+0x10/0x10 [ 760.230856][T13396] ? rcu_is_watching+0x12/0xc0 [ 760.230873][T13396] ? __switch_to+0x800/0x1100 [ 760.230895][T13396] ? __pfx_kthread+0x10/0x10 [ 760.230908][T13396] ret_from_fork_asm+0x1a/0x30 [ 760.230927][T13396] [ 760.230931][T13396] [ 760.402699][T13396] Allocated by task 13919: [ 760.407094][T13396] kasan_save_stack+0x30/0x50 [ 760.411773][T13396] kasan_save_track+0x14/0x30 [ 760.416427][T13396] __kasan_kmalloc+0xaa/0xb0 [ 760.420994][T13396] l2cap_conn_add.part.0+0x60/0xb00 [ 760.426180][T13396] l2cap_chan_connect+0x1435/0x1f90 [ 760.431358][T13396] l2cap_sock_connect+0x37a/0x770 [ 760.436371][T13396] kernel_connect+0x107/0x160 [ 760.441027][T13396] rfcomm_dlc_open+0x838/0xac0 [ 760.445787][T13396] rfcomm_sock_connect+0x42c/0x690 [ 760.450888][T13396] __sys_connect_file+0x141/0x1a0 [ 760.455899][T13396] __sys_connect+0x141/0x170 [ 760.460479][T13396] __x64_sys_connect+0x72/0xb0 [ 760.465225][T13396] do_syscall_64+0x115/0x870 [ 760.469798][T13396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.475671][T13396] [ 760.477971][T13396] Freed by task 13776: [ 760.482021][T13396] kasan_save_stack+0x30/0x50 [ 760.486680][T13396] kasan_save_track+0x14/0x30 [ 760.491333][T13396] kasan_save_free_info+0x3b/0x70 [ 760.496342][T13396] __kasan_slab_free+0x5f/0x80 [ 760.501086][T13396] kfree+0x223/0x6c0 [ 760.504963][T13396] l2cap_conn_del+0x57f/0x710 [ 760.509618][T13396] l2cap_disconn_cfm+0x9f/0x100 [ 760.514446][T13396] hci_conn_hash_flush+0x10e/0x280 [ 760.519541][T13396] hci_dev_close_sync+0x5cf/0x13c0 [ 760.524637][T13396] hci_dev_do_close+0x2e/0xb0 [ 760.529295][T13396] hci_unregister_dev+0x227/0x670 [ 760.534301][T13396] vhci_release+0x17d/0x230 [ 760.538784][T13396] __fput+0x3ff/0xb50 [ 760.542765][T13396] task_work_run+0x150/0x240 [ 760.547337][T13396] do_exit+0x951/0x2af0 [ 760.552254][T13396] do_group_exit+0xd5/0x2a0 [ 760.556736][T13396] __x64_sys_exit_group+0x3e/0x50 [ 760.561740][T13396] x64_sys_call+0x102c/0x1530 [ 760.566419][T13396] do_syscall_64+0x115/0x870 [ 760.571001][T13396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.576896][T13396] [ 760.579204][T13396] The buggy address belongs to the object at ffff888032a8d000 [ 760.579204][T13396] which belongs to the cache kmalloc-1k of size 1024 [ 760.593322][T13396] The buggy address is located 744 bytes inside of [ 760.593322][T13396] freed 1024-byte region [ffff888032a8d000, ffff888032a8d400) [ 760.607181][T13396] [ 760.609495][T13396] The buggy address belongs to the physical page: [ 760.615902][T13396] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888032a8f800 pfn:0x32a88 [ 760.625940][T13396] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 760.634427][T13396] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 760.642906][T13396] page_type: f5(slab) [ 760.646871][T13396] raw: 00fff00000000240 ffff88813fe2edc0 ffffea000098ea10 ffffea0000d2f010 [ 760.655443][T13396] raw: ffff888032a8f800 0000000800100005 00000000f5000000 0000000000000000 [ 760.664022][T13396] head: 00fff00000000240 ffff88813fe2edc0 ffffea000098ea10 ffffea0000d2f010 [ 760.672673][T13396] head: ffff888032a8f800 0000000800100005 00000000f5000000 0000000000000000 [ 760.681326][T13396] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 760.689977][T13396] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 760.698625][T13396] page dumped because: kasan: bad access detected [ 760.705016][T13396] page_owner tracks the page as allocated [ 760.710706][T13396] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 13, tgid 13 (kworker/u8:1), ts 85031090032, free_ts 84483026561 [ 760.731099][T13396] post_alloc_hook+0xfd/0x120 [ 760.735764][T13396] get_page_from_freelist+0x11a6/0x3410 [ 760.741297][T13396] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 760.747191][T13396] new_slab+0xa6/0x6c0 [ 760.751246][T13396] refill_objects+0x277/0x420 [ 760.755908][T13396] __pcs_replace_empty_main+0x375/0x650 [ 760.761443][T13396] __kmalloc_noprof+0x688/0x850 [ 760.766294][T13396] ieee802_11_parse_elems_full+0x177/0x37f0 [ 760.772220][T13396] ieee80211_ibss_rx_queued_mgmt+0xc8d/0x2f80 [ 760.778298][T13396] ieee80211_iface_work+0xbff/0x13e0 [ 760.783570][T13396] cfg80211_wiphy_work+0x410/0x570 [ 760.788669][T13396] process_one_work+0xa0e/0x1980 [ 760.793591][T13396] worker_thread+0x5ef/0xe50 [ 760.798164][T13396] kthread+0x370/0x450 [ 760.802218][T13396] ret_from_fork+0x72b/0xd50 [ 760.806791][T13396] ret_from_fork_asm+0x1a/0x30 [ 760.811541][T13396] page last free pid 5922 tgid 5921 stack trace: [ 760.817841][T13396] __free_frozen_pages+0x794/0x10a0 [ 760.823025][T13396] qlist_free_all+0x47/0xf0 [ 760.827525][T13396] kasan_quarantine_reduce+0x1a0/0x1f0 [ 760.832977][T13396] __kasan_slab_alloc+0x69/0x90 [ 760.837808][T13396] __kvmalloc_node_noprof+0x316/0xa00 [ 760.843167][T13396] vmemdup_user+0x2a/0xe0 [ 760.847480][T13396] kvm_vcpu_ioctl_set_cpuid2+0x84/0x160 [ 760.853007][T13396] kvm_arch_vcpu_ioctl+0x1f4a/0x5730 [ 760.858287][T13396] kvm_vcpu_ioctl+0x8a0/0x1720 [ 760.863050][T13396] __x64_sys_ioctl+0x18e/0x210 [ 760.867794][T13396] do_syscall_64+0x115/0x870 [ 760.872370][T13396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.878242][T13396] [ 760.880547][T13396] Memory state around the buggy address: [ 760.886153][T13396] ffff888032a8d180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 760.894198][T13396] ffff888032a8d200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 760.902327][T13396] >ffff888032a8d280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 760.910374][T13396] ^ [ 760.917816][T13396] ffff888032a8d300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 760.925879][T13396] ffff888032a8d380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 760.933917][T13396] ================================================================== [ 760.942734][T13396] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 760.950590][T13396] CPU: 1 UID: 0 PID: 13396 Comm: kworker/1:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 760.961625][T13396] Tainted: [L]=SOFTLOCKUP [ 760.965952][T13396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 760.976013][T13396] Workqueue: events l2cap_chan_timeout [ 760.981486][T13396] Call Trace: [ 760.984760][T13396] [ 760.987682][T13396] dump_stack_lvl+0x100/0x190 [ 760.992353][T13396] vpanic+0x552/0x970 [ 760.996327][T13396] ? __pfx_vpanic+0x10/0x10 [ 761.000823][T13396] ? mark_held_locks+0x40/0x70 [ 761.005580][T13396] ? irqentry_exit+0x24d/0x970 [ 761.010341][T13396] ? __mutex_lock+0x1887/0x1b10 [ 761.015186][T13396] panic+0xd1/0xe0 [ 761.018904][T13396] ? __pfx_panic+0x10/0x10 [ 761.023348][T13396] ? check_panic_on_warn+0x1f/0x90 [ 761.028477][T13396] check_panic_on_warn.cold+0x19/0x34 [ 761.033858][T13396] end_report.part.0+0x3a/0x90 [ 761.038632][T13396] kasan_report.cold+0xe/0x18 [ 761.043329][T13396] ? __mutex_lock+0x1887/0x1b10 [ 761.048197][T13396] __mutex_lock+0x1887/0x1b10 [ 761.052874][T13396] ? l2cap_chan_timeout+0x6d/0x360 [ 761.057985][T13396] ? __pfx___mutex_lock+0x10/0x10 [ 761.063012][T13396] ? lock_acquire+0x5e/0x370 [ 761.067599][T13396] ? l2cap_chan_timeout+0x6d/0x360 [ 761.072704][T13396] l2cap_chan_timeout+0x6d/0x360 [ 761.077637][T13396] process_one_work+0xa0e/0x1980 [ 761.082579][T13396] ? __pfx_process_one_work+0x10/0x10 [ 761.087960][T13396] ? __pfx_l2cap_chan_timeout+0x10/0x10 [ 761.093525][T13396] worker_thread+0x5ef/0xe50 [ 761.098114][T13396] ? __pfx_worker_thread+0x10/0x10 [ 761.103221][T13396] ? kthread+0x13a/0x450 [ 761.107461][T13396] ? __pfx_worker_thread+0x10/0x10 [ 761.112564][T13396] kthread+0x370/0x450 [ 761.116632][T13396] ? __pfx_kthread+0x10/0x10 [ 761.121212][T13396] ret_from_fork+0x72b/0xd50 [ 761.125797][T13396] ? __pfx_ret_from_fork+0x10/0x10 [ 761.130898][T13396] ? rcu_is_watching+0x12/0xc0 [ 761.135660][T13396] ? __switch_to+0x800/0x1100 [ 761.140334][T13396] ? __pfx_kthread+0x10/0x10 [ 761.144924][T13396] ret_from_fork_asm+0x1a/0x30 [ 761.149688][T13396] [ 761.152934][T13396] Kernel Offset: disabled [ 761.157231][T13396] Rebooting in 86400 seconds..