last executing test programs: 20m26.91639758s ago: executing program 1 (id=2865): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r3, &(0x7f0000003440)={0x2020}, 0x2020) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x3) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = dup(0xffffffffffffffff) writev(r4, &(0x7f0000000400)=[{0x0}], 0x1) io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0xc95e}) 20m25.320381046s ago: executing program 1 (id=2869): r0 = syz_usb_connect(0x0, 0x1b, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x49, 0xc4, 0x43, 0x40, 0x1b3d, 0x1f7, 0xc703, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x0, 0x0, 0xa0}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000180)={0x40, 0x3, 0x2, '#\t'}, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000180)={0x40, 0x3, 0x2, '#\t'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 20m22.867294739s ago: executing program 1 (id=2875): mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="8b04040000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x20000000) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, 0x0, 0x0, 0x48081) shutdown(r2, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x880) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000000)={0x2}) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000880)={0x0, 0xc00e, &(0x7f0000000840)={&(0x7f00000009c0)=@bridge_getlink={0x28, 0x12, 0x101, 0x0, 0xffffffe0, {0x7, 0x0, 0x0, 0x0, 0x8448, 0x4000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xc3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4050}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x28020480) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FICLONERANGE(r6, 0x4020940d, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r8, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x380, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x98bd, 0x800000000000009, 0x0, 0x4, 0x10000, 0x100, 0x9004, 0x0, 0x8, 0x5, 0x5, 0x49, 0x3ff, 0x5, 0x2, 0x9, 0x8, 0x7, 0xc1, 0x1, 0x2, 0x2, 0x6, 0x9, 0x2000000000000096, 0xffffffff, 0xffffffff00000000, 0x0, 0x5, 0x7, 0x4, 0x3, 0x2, 0x888f, 0x1, 0x8, 0x6, 0x6, 0x3, 0xa3de, 0x20000000006, 0x8, 0x7, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x6, 0x4, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x10007, 0x40000005, 0xfffffffeffffffff, 0x9, 0xd, 0x10001, 0xbbd9, 0x80000000, 0xfffffffffffffc00, 0x2, 0x7, 0x2, 0xcdc, 0x4000000007, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x6, 0x4, 0x1, 0xab6, 0x0, 0x4, 0x0, 0xffffffffffffff81, 0x9, 0xff, 0x1, 0x28000000, 0x5, 0x8061d, 0x3, 0x7, 0xf6, 0x4, 0x406, 0x200, 0x7, 0xe53e, 0x2b, 0x8, 0x2293332f, 0x6, 0x5, 0x0, 0xd, 0x2, 0x4, 0xfffffffffffffffb, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x5, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x0, 0xfffffffffffffffe, 0xb692, 0xcc, 0x8, 0x3]}) 20m20.522431278s ago: executing program 1 (id=2880): mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x820009408200a5fe) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000040)='./file1\x00', 0x2000, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x11, r2, 0x8000000) unlink(&(0x7f0000000280)='./file1\x00') 20m20.28127567s ago: executing program 1 (id=2883): ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001b00)=""/102392, 0x18ff8) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/stat\x00', 0x0, 0x0) pread64(r3, &(0x7f0000002780)=""/59, 0x3b, 0xf27b) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x4000) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0xf0f041}) finit_module(r0, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x1802, 0x0) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) open(0x0, 0x2002, 0x100) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) read$FUSE(r5, &(0x7f000001cb40)={0x2020, 0x0, 0x0}, 0xff) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x6, 0x200040, 0x0, 0x0, 0x0, 0xc49, 0x0, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x0, 0x0, {0x0, 0x27}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x10, 0x6, 0x3) close_range(r4, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000040), 0x0) 20m19.473578435s ago: executing program 1 (id=2885): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000180)={0x1c, r1, 0xb97534d5fe9704cf, 0x30000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40480c0}, 0x4000004) 20m19.324760227s ago: executing program 32 (id=2885): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000180)={0x1c, r1, 0xb97534d5fe9704cf, 0x30000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40480c0}, 0x4000004) 10m57.53565605s ago: executing program 4 (id=4791): mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40), 0x4) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg(0xffffffffffffffff, 0x0, 0x44004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000029000b00ffffffff0000000005"], 0x2c}}, 0x0) syz_emit_ethernet(0x9c, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x40) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) recvmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=""/221, 0xdd}], 0x1}, 0x1fffffc}], 0x2, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffe) r7 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) setsockopt$sock_timeval(r7, 0x1, 0x14, 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100003e4e00000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) syz_emit_ethernet(0x104, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYRES64=r8], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) 10m56.535882347s ago: executing program 4 (id=4793): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}]}}}]}, 0x3c}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x418, 0x280, 0x268, 0x300, 0x280, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x1f8, 0x238, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xb, 0x0, 0x3, 0x0, 0x5, 0x9}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0x21, "6bb6778f9bdec125b0fb4f26be757b1e6f2fb8e9079627dc6726c4bc85e9"}}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x7}, 0x1c) sendto$inet6(r3, &(0x7f0000000340), 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)=""/142, 0x8e}, {&(0x7f00000000c0)=""/36, 0x24}, {0x0}, {0x0}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000000880)=""/193, 0xc1}, {&(0x7f0000000240)=""/105, 0x69}, {&(0x7f0000000380)=""/80, 0x50}, {&(0x7f0000002580)=""/4096, 0x1000}], 0x9}, 0x40000100) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'veth0_to_bridge\x00'}) shutdown(r3, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x8000) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read(r5, 0x0, 0x49) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x800000000001, 0x0, 0x2, 0x0) rt_sigpending(0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x70000, 0x0) 10m55.316632803s ago: executing program 4 (id=4795): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x41}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) poll(&(0x7f0000000140)=[{r1, 0x4}], 0x1, 0x2) r2 = getpid() socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) r3 = syz_io_uring_setup(0x22f, &(0x7f0000019140)={0x0, 0x8ffd, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r3, 0x7a98, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x20) 10m52.244125295s ago: executing program 4 (id=4809): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000240)={0x20, 0x14, 0x11, "023b48312025c04b028dcb170b2f0547cd"}, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) socket(0x400000000010, 0x3, 0x0) r2 = syz_clone(0x100100, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) prlimit64(r2, 0x0, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @private=0xa010102}, 0x1, 0x1}}, 0x26) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000005c0)=0x2) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={0x0, 0x0, 0x800, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000300)={0x4, 0xc3a, 0x0, 'queue1\x00', 0xfffffff7}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r6 = creat(&(0x7f0000000580)='./file1\x00', 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x40009975, r6, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc22fe88c43b82a0a5d3eb61c238a5159ea98db9c00aeef644ae98a8cb8dffff3b7ba14d7971910b559623af82", 0x13b}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0x2000000000000141, 0x0, 0x0, 0x3, 0xffffffffffffff4c, 0x0, 0x82000, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r5, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000100)={0x1100, 0x0, 0x4, 0x10003}) sched_setattr(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 10m47.393958635s ago: executing program 4 (id=4828): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x8, 0xb, 0x6, 0x0, 0xffffffffffffffff, 0xcb02}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 10m44.984837673s ago: executing program 4 (id=4834): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000007000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e00000008000000040000000004000000010100", @ANYRES32=r3, @ANYBLOB="0400"/20, @ANYRES32=r3, @ANYRES16=r4, @ANYBLOB="050006f203000000e90400000e00000010e6358015000000", @ANYRES32=0x1, @ANYBLOB, @ANYRESHEX=r0], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x48004) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x22002, 0x0) ioctl$FBIOBLANK(r6, 0x4611, 0x2) ioctl$SNDCTL_SYNTH_MEMAVL(0xffffffffffffffff, 0xc004510e, &(0x7f0000000080)=0x5) ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, &(0x7f0000000240)={0x7, 0x3, 0x1ff}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r4, 0x3b8d, &(0x7f0000000400)={0x20, 0x0, &(0x7f0000000380)=[{0x0, 0x2}, {0x1, 0x3}, {0x0, 0x1}, {0x1, 0x4}], 0xdeadbeef, 0x8, 0x4}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$phonet_pipe(0x23, 0x5, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8924, &(0x7f00000000c0)={'dummy0\x00', 0x1}) 10m44.824714801s ago: executing program 33 (id=4834): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000007000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e00000008000000040000000004000000010100", @ANYRES32=r3, @ANYBLOB="0400"/20, @ANYRES32=r3, @ANYRES16=r4, @ANYBLOB="050006f203000000e90400000e00000010e6358015000000", @ANYRES32=0x1, @ANYBLOB, @ANYRESHEX=r0], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x48004) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x22002, 0x0) ioctl$FBIOBLANK(r6, 0x4611, 0x2) ioctl$SNDCTL_SYNTH_MEMAVL(0xffffffffffffffff, 0xc004510e, &(0x7f0000000080)=0x5) ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, &(0x7f0000000240)={0x7, 0x3, 0x1ff}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r4, 0x3b8d, &(0x7f0000000400)={0x20, 0x0, &(0x7f0000000380)=[{0x0, 0x2}, {0x1, 0x3}, {0x0, 0x1}, {0x1, 0x4}], 0xdeadbeef, 0x8, 0x4}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$phonet_pipe(0x23, 0x5, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8924, &(0x7f00000000c0)={'dummy0\x00', 0x1}) 7m57.593541574s ago: executing program 3 (id=5416): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xe, 0x6, 0x1, 0x2, 0x340}}) r1 = socket$rxrpc(0x21, 0x2, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) rseq(0x0, 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x1, 0x84) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000480)=[@textreal={0x8, &(0x7f0000000400)="0f011966b9800000c00f326635000400000f3066b95b0800000f3266b9ab09000066b8f8ef574266bad45aab370f306675520fc7b8f17165660fc734821d000fc72a26670f01c8", 0x47}], 0x1, 0x41, &(0x7f00000004c0)=[@dstype3={0x7, 0x5}, @dstype0={0x6, 0xa}], 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000044000701fcffffff00000000017c000008000100", @ANYRES32=0x0, @ANYBLOB="ce8a9c02d3d28d94a403d10c3936879a8c4ab2492b53a5091ff33618ffb5681685cce853ee58add12f356bf1d2c2b2bf46c8f25de8a89b000b24aa3031a329152228a420213f1a6ab13d308b5cd866df"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000000)=0x14200000) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000640)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x89, 0x1, @private=0xe0000002, @local}, "0000000000001700"}}}}}, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1}}, 0x10) read$dsp(0xffffffffffffffff, &(0x7f00000001c0)=""/95, 0x2) dup(r1) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) bind$rxrpc(r1, &(0x7f00000003c0)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x100, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x40003}}, 0x24) 7m57.101801821s ago: executing program 3 (id=5418): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4001, 0x0, @empty, 0xd}, 0x1c) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) recvmmsg$unix(r4, &(0x7f0000000940), 0x0, 0x2000, &(0x7f0000000980)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x1800}) splice(r3, 0x0, r4, 0x0, 0x38000000000000, 0xa) process_vm_readv(0x0, &(0x7f0000000900)=[{&(0x7f0000000280)=""/158, 0x9e}], 0x1, &(0x7f0000000e80)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0xc008ae05, &(0x7f0000000300)) r6 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x2b9a, 0x20000, 0x1, 0xffdffff9, 0x0, r4}, &(0x7f0000000940)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r9 = openat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x40000, 0x5, 0x1}, 0x18) socket$nl_audit(0x10, 0x3, 0x9) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x20, 0x4000, @fd=r9, 0x20001, &(0x7f0000000840)=[{&(0x7f00000001c0)="67528bea58a929fbd82570f1c4eeb0502985169868ba6256b5a5a4692254292357c8d78e7ae1ca54ac1f5c15bc3c617f5add450d9e3f953f3122852a0e56175e6736a8dcd956c80a9adc5bc5a1093873f693287663f6be604377722350c132e9b1c7fd5ececd291363b7e13c47e7f4c724c4204a6a3a8063eae9e00574a3926a3b882f38e4ff392c9c6cb8ed80008029431b59fb75d737c682334bc2e54f9cf1c3674e4be6b4ed61cc177d8180", 0xad}, {&(0x7f0000000300)="48f6ed60806afabc250c66d557c83ba0ed17b0d759f5f8ad277c7c0a3aebc982b599e4c2a0b960f1bb9ac118a319139aa26bdd2a2574a6b8ee11778e0551640688553de193e922d0b0", 0x49}, {&(0x7f0000000380)="adc72ea55728b06c8aacb2848916f25bdb5ff66a803b382711036806afd3054361751127d01c8756240fe035bd49f140a82c6d1bc95b4f0c89ce149be32c38af8569463d92670aa7b48077f1288c38cdc20a3843a826c1ace0db01ea7ec929df934996a1807c0852255d0dde814c4bf3458ca68b710e8febbef88026e4c8a59e74acd38088fceb5be5a9a8b6a8efbb04a527739ec556fad909373fe9433b8e8dc3523da19f1918af4f07076cc0cb9485a9a148637240cb2b4aac0fa8f6a6526e3d18607abe3b52a29631161969ade8aa6ecf1cb4cfa2a8a2784a5ebb3ab474b0f73772ce3ce26e2a7900ed66fbd601ce", 0xf0}, {&(0x7f0000000480)="7dd3e55bec9dd0f8e259b837f02ad77bf85572d915cc2121b493cf63e0883371ab2e27f2608c9fda15e0c1a89c89a4ba66032fd4d077da3eaf17e502720caca0c480091fbcccb933e45c3161fe4a34162c2445cc4bc39caeabd4209ee7b82a082baaaaa97c794cbfb20ae0fb48cc69b89f953310195509d6da0feebaeecd449ac0279715710c88b3c3", 0x89}, {&(0x7f0000000540)="6d476eaffd54489c0acd894d2d4541de61dad52b2d5ece0a8a9a7be8dad82e1aca5bbc86dad56d33d430d241dac69f002f96fbc63435c88f7ca60d674ae433eee547dc8af92a6f9f9af873bf725fd7e3995631df853fdf86bddd1795000249b35c4d0039583dfeda8da1b176fb27f3a1f5b17760b6e996dee301b1c66f9a4698e71e33ed4de5213142a08b31c4fad73ab70c2820c3ee43d35a7fc7de46c1faa5bba9c3d45ec2dfff4b55854c01925ccbe28853266f00", 0xb6}, {&(0x7f0000000600)="8ad7ccfa4ad8fea68b1f47432f5e334530737222f6d4c06650ae3b9e8162265f35e66d5e8762104cafe7cf60535a1634282cd149c9fd3cd6a7c2d338dbcd5b221cbe1086ad15321c63df6c6bdcafed3a80edbe710c75665e9ab5897858a35526d8e124315a7ef064cb2013be946876be0b116c11", 0x74}, {&(0x7f0000000680)="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", 0xfb}, {&(0x7f0000000780)="f866a98ed44cbd693ee5ef0bcbc476f26259c8458d32956211b06f1c860bccaf5ede4cd814edc4dec6ae283e8e766f0e4d9d6ea120eabc44a3c428e7e1a6dfe51966502d715610378cb5d4e64f60a56c09", 0x51}, {&(0x7f0000000800)="0a9b756de10d08b705bb625937e517200f224ec95f", 0x15}], 0x9, 0x19, 0x1, {0x0, r10}}) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x3d15, 0x0, 0x0, 0x5}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x1) 7m53.211308483s ago: executing program 3 (id=5430): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) r1 = memfd_create(&(0x7f00000008c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x0) ftruncate(r1, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r1, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r4}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r5, 0x0, &(0x7f0000000480)=@tcp6=r2, 0x1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 7m51.203100253s ago: executing program 3 (id=5440): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x20003, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x4, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_ECN={0x8}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x1}]}}]}, 0x48}}, 0x40090) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) bpf$PROG_LOAD(0x5, 0x0, 0x19daaf87f67b5f5) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) lseek(r1, 0x7ffffffffffffffe, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000200)=0x7ffffffc) socket$packet(0x11, 0x3, 0x300) close(r2) 7m51.073617722s ago: executing program 3 (id=5442): openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x62941, 0x2, 0x10}, 0x18) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=' '], 0x40}}], 0x1, 0x40000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000bc0)='.\x00', 0x258102, 0x0) renameat2(r1, &(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x4) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r3 = socket(0xf, 0x4, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000180)='\b\x00', 0x2}, {&(0x7f00000000c0)="96bc8a376f24", 0x6}], 0x2, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x4000010) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/zoneinfo\x00', 0x0, 0x0) pread64(r5, &(0x7f0000002100)=""/171, 0xab, 0x9a) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r3, &(0x7f0000003a00)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000640)=""/79, 0x4f}, {0x0}], 0x2, &(0x7f0000000b00)=""/113, 0x71}, 0xe24}], 0x1, 0x20000020, 0x0) 7m50.125014709s ago: executing program 3 (id=5448): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) r0 = socket(0x848000000015, 0x805, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @private2, 0x3ff}, 0x1c) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271c, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) 7m34.662413887s ago: executing program 34 (id=5448): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) r0 = socket(0x848000000015, 0x805, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @private2, 0x3ff}, 0x1c) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271c, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) 27.736651508s ago: executing program 2 (id=6638): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@delchain={0x24, 0x65, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0xb}}}, 0x23}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 27.402123402s ago: executing program 2 (id=6640): r0 = openat$comedi(0xffffff9c, 0x0, 0x2180, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = getpid() io_uring_register$IORING_REGISTER_MEM_REGION(0xffffffffffffffff, 0x22, &(0x7f0000000280)={&(0x7f0000000240)={&(0x7f0000000080)="8d981ea1d21e9c323ca7d532cdec0937b316013f0f25553ba24b280ed978b136d7c5e1f61ecbc67ba0bbd43817d8692de4a30854a3bbdd34b11ba9ec35055e155a51332b733d192394554b300de4e21ab2e3c465", 0x54, 0x1, 0xe28, 0xfffffffffffffff2}}, 0x1) r4 = syz_pidfd_open(r3, 0x0) open_by_handle_at(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="15000000fe"], 0x1) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0e00"}) r6 = fspick(0xffffffffffffff9c, &(0x7f00000013c0)='./bus\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000001500)='\x00', &(0x7f0000001540)='%\x00', 0x0) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') mkdir(0x0, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x4}) 24.034889286s ago: executing program 5 (id=6648): pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x20000480) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r3, 0x0, &(0x7f0000000480)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000001c80), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000002100)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000001cc0)={0x40, r5, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x14, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb72b}]}, {0x4}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x40}}, 0x40000) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000640)=0x10) close(r6) 22.410239125s ago: executing program 7 (id=6653): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x1000088}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002240)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x1, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000200)={@empty, @empty, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x3e1f}, 0x3c) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010429bd70000000000000000000", @ANYRES32=0x0], 0x3c}}, 0x24008040) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400bd9170d2f6867f82b1ffd19b522000ba99841e0200eb00000000000800000000000000ba93571d060000002bce13f0abe4658b889fa01cd2bdb2577ec371090000000000000096cc6d2908fdbeca9afa4c321e6ab5b9c29e50a61b2d9f2408d31107e1cde0d3b39b923b3e9b8ec95399072aa079bdf6b3418526827ad2dcaf1d545c2b365b7b89047e839e162873bb940f61cd320720529ab194daa2b3e0034cf182a08fac0e13", @ANYRES16=r3, @ANYBLOB="01032abd7000fedbdf250b000000"], 0x14}, 0x1, 0x0, 0x0, 0x24000010}, 0x8000) r5 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r5, 0xc06864b8, &(0x7f0000000580)={0x0, 0x2a, 0x80, 0x20603843, 0x3, [0x2], [0x80ffff], [0x0, 0x8], [0x0, 0x1, 0x0, 0x4]}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="05010200000000006a000600000600000000", @ANYRES32=r8, @ANYBLOB="0800050009000000"], 0x24}}, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) gettid() syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) 22.334858983s ago: executing program 2 (id=6654): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(&(0x7f00000005c0)={0xffffffffffffffff}, 0x4000) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000600)=0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2000, &(0x7f0000000980)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',version=9p2200.L,uname=connlimit\x00,version=9p2000.u,uname=\x00,access=any,uname=/dev/video#\x00,rootcontext=sysadm_u,subj_type=]),euid=', @ANYRESDEC=r7, @ANYBLOB=',\x00']) r8 = socket$inet_smc(0x2b, 0x1, 0x0) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r9, 0x103, 0x7, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f00000007c0)={0x7, 0x1, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=""/7, 0x7}, {&(0x7f0000000400)=""/163, 0xa3}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000000700)=""/166, 0xa6}, {&(0x7f0000002240)=""/4096, 0x1000}, {&(0x7f0000000340)=""/114, 0x72}, {&(0x7f0000000500)=""/2, 0x2}], &(0x7f0000000800)=[0xfffffffffffffffb, 0x9, 0x4, 0x0, 0xffffffffffffff7f]}, 0x20) r10 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000640)={0x88, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'caif0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge_slave_0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x408d4}, 0x800) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000003240)=@nat={'nat\x00', 0x1b, 0x5, 0x578, 0x1d0, 0x1d0, 0xffffffff, 0x0, 0x0, 0x4e4, 0x4e4, 0xffffffff, 0x4e4, 0x4e4, 0x5, &(0x7f0000000900), {[{{@uncond, 0x0, 0x90, 0xc4, 0x0, {}, [@common=@socket0={{0x20}}]}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x8, @local, @broadcast, @icmp_id=0x67, @gre_key=0xe72f}}}}, {{@uncond, 0x0, 0xb0, 0x10c, 0x0, {}, [@common=@socket0={{0x20}}, @common=@socket0={{0x20}}]}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @random="93c4e9272298", 0x5a18, 0xb, [0x17, 0x1b, 0x1, 0x6, 0x2f, 0x13, 0x17, 0x13, 0x30, 0x11, 0x1, 0x32, 0x2a, 0x3f, 0x29, 0x20], 0x1, 0x0, 0x6}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x12}, 0xff, 0xff000000, 'pim6reg\x00', 'veth1_vlan\x00', {0xff}, {}, 0x5c, 0x0, 0x20}, 0x0, 0x204, 0x238, 0x0, {}, [@common=@inet=@policy={{0x154}, {[{@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffffff, 0xff000000, 0xffffffff], @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}, [0x0, 0xffffff00, 0xff], 0x4d5, 0x34ff, 0x8, 0x1, 0x10, 0x14}, {@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xff, 0xff], @ipv6=@private2, [0xffffff00, 0xffffffff, 0xffffff00, 0xffffff00], 0x4d4, 0x3500, 0x3c, 0x1, 0x5, 0x6}, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x30}, [0xffffffff, 0xff, 0xff], @ipv6=@empty, [0xff000000, 0xffffff00], 0x4d6, 0x3503, 0x2f, 0x1, 0xf, 0x8}, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff, 0xffffff00, 0xff, 0xff000000], @ipv4=@empty, [0xff, 0xffff00], 0x4d6, 0x3502, 0x8, 0x1, 0x2, 0xc}], 0x4}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xffffff00, 0xff], 0xfffffff5, 0x6}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x12, @multicast1, @multicast1, @icmp_id=0x64, @icmp_id=0x68}}}}, {{@ip={@local, @rand_addr=0x64010101, 0xff000000, 0xffffffff, 'pimreg\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x4, 0x1, 0x8}, 0x0, 0x94, 0xdc, 0x0, {}, [@common=@ttl={{0x24}, {0x3, 0x5}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x19, @ipv4=@rand_addr=0x64010100, @ipv6=@remote, @port=0x4e20, @port=0x4e22}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x5d4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) r11 = syz_open_dev$vim2m(&(0x7f0000000000), 0x404, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r11, 0xc008561c, &(0x7f0000000140)={0xf0f045}) socket$netlink(0x10, 0x3, 0x0) 19.492881205s ago: executing program 5 (id=6658): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0x20003) pause() fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4}], 0x2c, 0xffffffffffbffff8) futex(&(0x7f00000006c0)=0x2, 0x0, 0x2, &(0x7f0000000140)={0x77359400}, 0x0, 0x80000002) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x37, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r5 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000003, 0x0}, 0x0, 0x8, &(0x7f0000000200)) tkill(r5, 0x16) dup2(r1, r0) fcntl$setown(r3, 0x8, r2) tkill(r2, 0x13) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(r5, 0x5, &(0x7f0000000200)=0x2020ee9b) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x25) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) keyctl$read(0x1f, 0x0, &(0x7f0000000080)=""/61, 0x3d) 18.258673365s ago: executing program 7 (id=6661): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000000080"], 0x50}}, 0x0) syslog(0x9, &(0x7f0000000600)=""/144, 0x90) r2 = socket(0x11, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000003c0)=0x6121, 0x4) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) accept(r10, 0x0, 0x0) 17.979862073s ago: executing program 2 (id=6662): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000740)={0x2, 0x4e27, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41}, 0x0) (fail_nth: 5) 17.198644257s ago: executing program 7 (id=6663): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900}) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900}) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) writev(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="7e4964c69aaac6e3dd0359e353566417cd0dfcb6cdffb15d70007753ff81306d16a9d3200041927d3ead1a19d7676d5daeab50df342ccb6c3f34ab2c5771f4a60fb8a499f2b273367b74"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$alg(0x26, 0x5, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) r6 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/protocols\x00') pread64(r6, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) ioctl$UI_SET_RELBIT(r6, 0x40045566, 0x1) (async) ioctl$UI_SET_RELBIT(r6, 0x40045566, 0x1) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r7 = accept4(r5, 0x0, 0x0, 0x80000) r8 = dup(r7) write$UHID_INPUT(r8, 0x0, 0x0) recvmmsg$unix(r7, &(0x7f000000e100)=[{{0x0, 0x0, &(0x7f000000e040)=[{&(0x7f000000ce40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x120, 0x0) sendto$inet6(r4, &(0x7f0000000280)='g', 0x1, 0x4008891, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe) setsockopt$sock_int(r4, 0x1, 0x28, &(0x7f0000000000)=0xf66, 0x4) shutdown(r4, 0x1) (async) shutdown(r4, 0x1) recvmmsg(r4, &(0x7f0000001f00)=[{{&(0x7f0000000340)=@caif=@dbg, 0x80, &(0x7f0000000100)=[{&(0x7f0000000040)=""/48, 0x30}], 0x1, &(0x7f00000003c0)=""/166, 0xa6}, 0x4}, {{&(0x7f0000000580)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000880)=""/212, 0xd4}, {&(0x7f0000000980)=""/252, 0xfc}, {&(0x7f0000000a80)=""/4096, 0x1000}], 0x3, &(0x7f0000000600)=""/88, 0x58}, 0x7}, {{&(0x7f0000000780)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000000500)=""/8, 0x8}, {&(0x7f0000001a80)=""/83, 0x53}, {&(0x7f0000000680)=""/17, 0x11}, {&(0x7f0000001b00)=""/133, 0x85}, {&(0x7f0000001bc0)=""/219, 0xdb}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000001cc0)=""/213, 0xd5}, {&(0x7f0000001dc0)=""/105, 0x69}], 0x8, &(0x7f0000001ec0)=""/45, 0x2d}, 0x7}], 0x3, 0x20, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2eae0342ca72d7e8}) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2eae0342ca72d7e8}) ioctl$VIDIOC_QUERYMENU(r1, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) 16.657846845s ago: executing program 7 (id=6664): r0 = openat$comedi(0xffffff9c, 0x0, 0x2180, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = getpid() io_uring_register$IORING_REGISTER_MEM_REGION(0xffffffffffffffff, 0x22, &(0x7f0000000280)={&(0x7f0000000240)={&(0x7f0000000080)="8d981ea1d21e9c323ca7d532cdec0937b316013f0f25553ba24b280ed978b136d7c5e1f61ecbc67ba0bbd43817d8692de4a30854a3bbdd34b11ba9ec35055e155a51332b733d192394554b300de4e21ab2e3c465", 0x54, 0x1, 0xe28, 0xfffffffffffffff2}}, 0x1) r4 = syz_pidfd_open(r3, 0x0) open_by_handle_at(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="15000000fe"], 0x1) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0e00"}) r6 = fspick(0xffffffffffffff9c, &(0x7f00000013c0)='./bus\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000001500)='\x00', &(0x7f0000001540)='%\x00', 0x0) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') mkdir(0x0, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x4}) 16.398636598s ago: executing program 2 (id=6665): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xffffffffffffff4c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x2) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2208010, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setgroups(0x0, 0x0) lseek(r4, 0x10000000005, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000711225080000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}], 0x1}], 0x1, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x20000253) 16.142884935s ago: executing program 5 (id=6666): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x18e) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r6 = dup(r5) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f00000002c0)=ANY=[@ANYBLOB="8200000000000000ff000040"]) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) 15.661816394s ago: executing program 6 (id=6667): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/protocols\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000001800), 0x0, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$FUSE(r0, &(0x7f0000001080)={0x2020}, 0x2020) 15.148003067s ago: executing program 2 (id=6668): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000040)="b9800000c00f3235004000000f30b9fa0000000f01d9660f78c4020a1bf7b805000000b90000c0fe0f3cae0a41d941d90000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3166b857000f00d0", 0x54}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000400)=ANY=[]) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000eafffffff4000040"]) openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x1, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, 0x0, 0x10000) socket$inet_sctp(0x2, 0x1, 0x84) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r9, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="0a01000005af9e08d2106528c9a4000000010902120001000000000904"], 0x0) 14.629304383s ago: executing program 5 (id=6669): socket$nl_route(0x10, 0x3, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_usb_connect(0x0, 0x3d, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x4, 0x8c}, 0x0) io_setup(0x6, &(0x7f0000000140)) io_setup(0x46, &(0x7f0000000280)=0x0) io_submit(r1, 0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x40f9, 0x203d, 0xa4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @loopback, 0x4000005}, 0x1c) sendmsg$AUDIT_SET(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x54, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SYNPROXY={0x4}]}, 0x54}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r7 = syz_open_dev$dri(&(0x7f0000000380), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GET_LEASE(r7, 0xc01064c8, &(0x7f0000000240)={0x2, 0x0, &(0x7f0000000100)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r7, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000000), 0x0, r8}) semctl$GETZCNT(0xffffffffffffffff, 0x6, 0xf, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) 13.914966949s ago: executing program 0 (id=6671): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x0, 0x6}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='mm_lru_activate\x00', r0}, 0x18) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000300)={r3, 0x8001, 0x8, 0xf801, 0x247, 0x0, 0x78f0, 0x3, {0x0, @in={{0x2, 0x4e22, @multicast2}}, 0xfffffffe, 0x81, 0x6, 0x8, 0xa2f3}}, &(0x7f00000003c0)=0xb0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r3, 0x8000, 0x9b}, &(0x7f0000000080)=0xc) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 13.749991304s ago: executing program 6 (id=6672): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$ax25(0x3, 0x5, 0xc4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES16, @ANYBLOB="0100000000000000000017000000400006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000080)=0x80000003) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 12.941832608s ago: executing program 0 (id=6673): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mlockall(0x2) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x0) splice(r1, 0x0, r4, 0x0, 0x25a5, 0x0) shmctl$SHM_LOCK(0x0, 0xb) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendto$packet(r5, &(0x7f00000024c0)="0b0312002e0064000200475400f6a13bb1000000086086dd48034c350fb8dc4449b75c8cff0fc89e0a2862e84fb69650f6949b15d8f1552f0624fdf0bc5892b2d76bef5dc1d902d23783bb5c2c4fec10e1ff88ee180f01a337a4cad4e7b77a6336583f79138590226f4e1c8949fed3b8e1281407ed04", 0x76, 0x800, &(0x7f0000000140)={0x11, 0x8100, r7}, 0x14) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r9 = shmget$private(0x0, 0x2000, 0x4, &(0x7f0000b95000/0x2000)=nil) shmat(r9, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmctl$SHM_STAT(r9, 0xd, &(0x7f0000000040)=""/49) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1f, 0x12, r8, 0x100000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) fanotify_mark(0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r11, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x4000) 12.851560603s ago: executing program 0 (id=6674): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeda}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x2) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2208010, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setgroups(0x0, 0x0) lseek(r4, 0x10000000005, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000711225080000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x20000253) 12.792045449s ago: executing program 6 (id=6675): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121602, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r3, 0x400448e7, &(0x7f0000000080)) socket$inet(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xb}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000000)="19f83a7ee8714a624307f0aba3bc03317ca0d272ddaa01c89eefa87f8eb471f3f966ef18d88f2f51277f3346294925ce7b4d282be6e9f0", 0x37}, {&(0x7f00000013c0)="90a5bd212ca5da03101b401ac282d4d16e2b41ada48f9a5a540bbbabf093a2ab8808ca95f51e02731f8d814bdca023658c024ec80c57b8faa533dbf23cc4433a86a712ec487d1e109e3c6045fe3081b066ad5cffc301500127332363055d33cdd1c195b265f13a40ef0d194771421e57ecc77f29a9786e4c4a", 0x79}, {&(0x7f0000001440)="1ce75f0ce4900c20247948dfc233b2a76943220ac5319ef1521106138dacb1582854b1dd7c504c89093be8d410247b3d6b6d2782d3ecbd5d04829a49783002c103eafc6b6521c610884b734cef996b372c642b84eb52887c690f24711ee75583d7eba27bdc152c36539461434452a91e070bbc09032b4bb8022c7858fe31b84e9cf419a580334ecd583074b28786be52f06766af2bc8d93d59c2be79d905fccfb405b2ee211346b147ec984eb90b18a43727a4dbfcb9f2d2dd6353e1e2d51a01a5b5d786f7ea053982d28eaae6b38ec0ff82b8287e433b05b91c9755b93d83d2d70434b77eee854bb01688e02372c61a7c6360", 0xf3}, {&(0x7f0000001540)}], 0x4, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], 0x1f8}, 0x40000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000030c0)=@newtfilter={0x5698, 0x2c, 0x300, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xb}, {0x9}, {0xc, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x51cc, 0x2, [@TCA_ROUTE4_POLICE={0x82c, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x333, 0x9, 0x3, 0x6, 0x4, 0x6, 0x9, 0x10000, 0x8, 0x4b1e, 0x75e7, 0x5, 0x8, 0x7, 0x6, 0x6, 0x2, 0x8, 0x2, 0x7, 0x2, 0x8, 0x6, 0x1, 0x7ff, 0xffffffff, 0x1000, 0x4, 0x0, 0x81, 0x81, 0x6, 0x7, 0x87, 0x0, 0x9, 0x7, 0x9, 0x4, 0x7, 0x33, 0x80000001, 0x10000, 0x8, 0xb, 0x7f, 0x3, 0xd, 0xe00000, 0xe801, 0xff, 0xe77a, 0x8, 0x5, 0x5, 0x4, 0x1, 0x1, 0x5, 0x8001, 0x6, 0x9, 0x80000001, 0x9, 0x8, 0xffffffff, 0x9, 0x400, 0x7, 0x3, 0x2, 0xffff, 0x0, 0x40, 0x40, 0x4, 0x0, 0x5, 0x7fc, 0x4dfc, 0x8, 0x7, 0x10001, 0x1ff, 0x3f62, 0x400, 0x6, 0x5, 0x6, 0x2d96b2c4, 0x2, 0xff, 0x9, 0x641, 0x4, 0x6, 0xe, 0x4, 0x1, 0xab, 0x4, 0x56, 0x0, 0x6, 0x200, 0x2, 0x1, 0x4, 0x4, 0x7, 0x81b, 0x9, 0x5, 0x3, 0x6, 0xce5d, 0x8, 0x3fcf15af, 0x7, 0x0, 0xaa82, 0x6, 0xffffffb2, 0x2, 0x4, 0x6, 0x4, 0x4, 0x2, 0x5, 0x4, 0x5, 0x80, 0x0, 0x1, 0x8, 0x2, 0x7, 0x570, 0x5, 0x5, 0x1, 0x6, 0xf, 0x3, 0x17, 0x9, 0x7, 0x3, 0x1, 0x1, 0x4, 0x3, 0x54, 0x5, 0x7c, 0x647e, 0x7, 0xffffffff, 0x0, 0x2, 0x2, 0x0, 0x79a2, 0xc, 0x6, 0x9, 0x400, 0x5, 0x400, 0x1, 0x9, 0x3, 0x81, 0xa, 0x80, 0xfb0000, 0x7, 0xfb36, 0x3, 0xfffffffa, 0x1, 0xa, 0x0, 0x7, 0x3ff, 0x10000, 0x0, 0x2, 0x7, 0x0, 0x7, 0x8, 0x338, 0x5, 0x1, 0x8000, 0xe4, 0x75b9, 0x8, 0x40000000, 0xfff, 0x1, 0x72ac, 0x8, 0x2, 0x1, 0x3, 0x9, 0x26, 0x2, 0x8, 0x3, 0x3dd9, 0x0, 0x9, 0x4, 0xa, 0x1, 0x81c, 0x8, 0x9, 0x400, 0x4, 0x2, 0x400, 0x8, 0x9, 0x7, 0x40, 0x3ff, 0x374e, 0x2, 0x9, 0x80000000, 0x2, 0x2, 0xa, 0x0, 0x5, 0x9ead, 0x0, 0xa22c, 0x36, 0xfffffff8, 0x3, 0x7, 0x6, 0x1f, 0x7, 0x7, 0x90, 0x56f, 0x9, 0x0, 0x2]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x8, 0x4, 0x3, 0x6, 0x4, 0xe, 0x8, 0x3, 0xffff, 0x0, 0xc8, 0x100, 0xa, 0x7, 0x6, 0x9, 0x8, 0x4, 0xfffffc6c, 0x0, 0xfffffff7, 0x2, 0x3, 0x6, 0x1d, 0x9, 0x1, 0x9, 0x4, 0x1eac000, 0x45818ef4, 0xca, 0x6, 0x9, 0xb4e6, 0x5, 0x1000, 0x7, 0x7, 0x9, 0x9b93, 0x7, 0x1, 0x80000000, 0x81, 0xd, 0xff, 0x4, 0x3, 0x4, 0x5, 0x0, 0x5, 0x3, 0x6, 0x8, 0x81, 0x56d, 0xa57c, 0x6, 0x2, 0x8, 0x8001, 0x4, 0x1, 0x80000001, 0x4d7b, 0x2, 0xfffff51b, 0x6, 0x1, 0x2, 0x3, 0xb8, 0xfffffff7, 0x80000001, 0x44, 0xc099, 0x9, 0x6d, 0x1, 0x3, 0x8, 0x8f44, 0x5adb, 0x9, 0x8000, 0x9, 0x3000000, 0x0, 0x9, 0x1, 0x7, 0x3ff, 0x80, 0xee5, 0x6, 0x401, 0x5, 0x10001, 0x0, 0xbd3, 0x0, 0x5, 0x3, 0x7, 0xd, 0xfff, 0xffffff0f, 0x7, 0x95, 0x0, 0x8, 0x0, 0x4, 0x9, 0x8, 0x7, 0x92c, 0x80, 0x0, 0x3, 0x8, 0xffff3622, 0x5, 0xd, 0xcb, 0x5, 0x8000, 0x41ce, 0x3, 0x6, 0x7893, 0xfffffe01, 0x100, 0x1000, 0x5b6, 0xf, 0x7fffffff, 0x12, 0x4, 0x3, 0x0, 0xfffffffa, 0x3, 0xd, 0x1, 0x800, 0x1, 0x8, 0x142374ba, 0x38648c59, 0x2, 0x7, 0x9, 0x6, 0xac0000, 0x4, 0x9, 0x0, 0x7, 0x9, 0x3, 0xea, 0x9f2e, 0x2, 0x7, 0x9, 0x9, 0xc, 0x9, 0xc, 0x800000, 0x2, 0x2, 0x8001, 0xf, 0x9, 0x7fff, 0x0, 0xe4e6, 0x7fffffff, 0x10000, 0x4, 0x8, 0x4, 0x9, 0x1, 0x240f, 0xdee, 0x8001, 0x101, 0x3, 0xe07, 0x3, 0x2, 0x9, 0x5, 0xf84c, 0x5, 0x3257f625, 0x4, 0x9952, 0x0, 0x6, 0x6, 0x9, 0xfff, 0xffffffff, 0xd6c3, 0x7c9, 0x4, 0xfffffff9, 0x6, 0x6, 0x8, 0xc62, 0x2, 0x0, 0xd2, 0xe0000000, 0x1, 0x3c6d, 0x7, 0x2, 0x10000, 0x1, 0x7, 0xfffffffb, 0x81, 0x9, 0x10, 0xb, 0xfffffff8, 0x3, 0x8, 0x4, 0x2, 0x0, 0x5, 0x2, 0x8000, 0x0, 0x4, 0x4, 0x66d, 0x9, 0x9, 0x10, 0x2, 0x80000000, 0x7ff, 0x2, 0xd]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffa}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x8, 0x4}}, @TCA_ROUTE4_ACT={0x114, 0x6, [@m_skbedit={0x110, 0x4, 0x0, 0x0, {{0xc}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x5}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xfa6, 0x3494, 0x7, 0x1, 0x5}}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x8}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8000, 0x13a, 0xffffffffffffffff, 0x1, 0xb19}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x100}]}, {0x8b, 0x6, "e7ff9c9babb2eabef1567785236dab8a007f317ef9b3c0532ee2c3588dd98be858e6d9f8fb6e84682c0c7f0cff2dbd1794aa06e0a4c63bd637a0ea9fd9bf8a0bc1e66c1aefd890164df924f70abb76801393af027dcfa137eaddbe2e69994dabfbbb8ef48d12e5cb06f2ac879c0c17d2a51de3526701295a36056c6e257490acb7a9d963179fb9"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_ROUTE4_ACT={0x4878, 0x6, [@m_simple={0x1048, 0x20, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x16, 0x3, '/dev/snd/midiC#D#\x00'}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0x1074, 0x18, 0x0, 0x0, {{0xf}, {0x44, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @local}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_pedit={0x203c, 0x1a, 0x0, 0x0, {{0xa}, {0x1f64, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xec8, 0x4, {{{0x0, 0x1, 0x3, 0x2, 0x3}, 0x1, 0x6, [{0xfffffb23, 0xfffffff8, 0x6, 0x4, 0x4dc, 0x5}, {0x4, 0xf, 0x8, 0x2, 0x8, 0x7}, {0x0, 0x9, 0xe, 0x9, 0x9, 0x4}, {0x6, 0x7, 0x7, 0x8, 0x7ff, 0x33881564}, {0xffffffff, 0x100, 0x5, 0x8, 0x9, 0x9}, {0x5, 0x800000, 0xfffffff8, 0xfffffc01, 0x1, 0x8}, {0x8, 0x56031921, 0x225, 0x3ff, 0x1, 0x9}]}, [{0x8, 0x2, 0x55, 0x552d, 0xe, 0x7fffffff}, {0xd, 0x5, 0x9, 0x1, 0x9, 0x9}, {0xf45, 0x4, 0x8, 0x8, 0x4, 0x9}, {0x4, 0x5, 0x3, 0x4, 0xffffffff, 0x923}, {0x1, 0x868, 0x5, 0x1, 0x4, 0x7}, {0x4, 0x7fffffff, 0x7, 0x2, 0x0, 0xca}, {0x7, 0x8001, 0x4, 0x10, 0x2, 0x5}, {0xb0, 0xff, 0xda01960, 0x2, 0x6, 0xb}, {0xe, 0x7fff8, 0x0, 0x5d, 0x5, 0x5}, {0x2, 0x2, 0xfff, 0x0, 0xc672, 0x7}, {0x80000000, 0x2, 0x4, 0x5, 0x10000, 0x7}, {0x7fffffff, 0x0, 0x4, 0x1, 0x8, 0x8}, {0x3a27, 0x2000, 0x6, 0x9, 0x80000000, 0x7}, {0x8, 0x9, 0x6, 0x2, 0x9, 0x7}, {0x3, 0x3, 0x1, 0xc, 0xb84, 0x5}, {0x4, 0x9, 0x9, 0x0, 0x3, 0x3}, {0x3, 0xa, 0x1, 0x8001, 0x1c, 0x5}, {0x6, 0x6, 0x0, 0x8, 0x80000001, 0x2}, {0xa08, 0x6, 0xfff, 0x80000000, 0x4, 0x5}, {0x0, 0x3, 0x1, 0x7, 0xc4, 0x3ff}, {0x5, 0x72000000, 0x2, 0x80, 0x9f, 0x100}, {0x4, 0x8, 0x6, 0x7ff, 0x7f, 0x10000}, {0x3, 0x0, 0x8000, 0x4, 0x9, 0x7}, {0x7fff, 0x9, 0x9, 0x1, 0xf5b9, 0xb27}, {0xa2, 0x2, 0x3, 0x10000, 0x2, 0x9}, {0x5, 0x1, 0x7, 0x8, 0x5, 0x1}, {0xe7, 0xf1, 0x466b2e31, 0x7, 0x6, 0x1}, {0x2, 0x6, 0x8000, 0xd7ba, 0x10001, 0x1}, {0x5, 0x0, 0x10001, 0x9b, 0x1, 0xfffffff7}, {0x4, 0x61, 0x7fffffff, 0x8, 0x7}, {0x1000, 0x1, 0x9, 0x0, 0xfd7, 0x5}, {0x8, 0x4, 0x800, 0x8, 0xc}, {0x10000, 0xffff, 0x2, 0x6f, 0x5, 0x101}, {0x6, 0x10000, 0x2, 0x5, 0x2, 0x1}, {0x0, 0x5, 0xc1, 0x0, 0x7, 0x4}, {0xb, 0xfff, 0x9, 0x1ff, 0x6, 0x3}, {0x293, 0x41, 0x3ff, 0x3, 0x8, 0xcd1b}, {0xe9, 0x6, 0xf, 0xda, 0x9, 0x9}, {0xf, 0x3, 0x1, 0x4, 0x101, 0x9}, {0x2, 0xffff, 0x6, 0x5, 0x8, 0x4}, {0xdc, 0x1, 0x8, 0x1, 0x81, 0x7}, {0x64, 0x9c9, 0x3, 0x2, 0x2, 0x5}, {0xe5e, 0x81, 0x5, 0x7, 0x5, 0xa}, {0x5, 0x8, 0x2, 0x84c5, 0x7, 0xffffff84}, {0xffffff96, 0x1000, 0x2, 0x928, 0x2}, {0x6, 0x7, 0x8, 0xc3f9, 0x8, 0x7}, {0x2, 0xe95f, 0x5, 0x0, 0x8, 0x5}, {0x2, 0x3, 0x9, 0x3, 0x4, 0x800}, {0x9, 0x9, 0x0, 0x5, 0x0, 0xc4}, {0x9, 0x33, 0x4, 0x2, 0x7, 0x7}, {0x5, 0xe, 0x80, 0x7, 0x8998, 0xc}, {0x2, 0x3, 0xf, 0xc, 0xb321, 0x2}, {0x7, 0x5, 0x9, 0x4, 0x4, 0x1}, {0x400, 0x5, 0x101, 0x9, 0x7, 0x3}, {0xb0, 0x3, 0x7, 0x5, 0x3ff, 0x5}, {0x3ff, 0xf7, 0x1000, 0x3ff, 0x9, 0x7}, {0x7, 0x9, 0x2, 0xe3, 0x2, 0x2e0f}, {0x2, 0x1000, 0x2, 0x4, 0x4, 0x24}, {0x7, 0xad8, 0x5, 0x9, 0xe0000, 0x1}, {0x4, 0x7f, 0xca, 0x7, 0x1, 0x6}, {0x7, 0x6, 0x8516, 0x8000, 0x8, 0x7ff}, {0x4, 0x6, 0x800, 0x7b143878, 0x0, 0x1}, {0x7, 0x5, 0x863, 0x8, 0x5, 0xff}, {0xce, 0x10, 0x6, 0x81, 0x1, 0x2}, {0x8, 0x82, 0x10, 0x7, 0x6e1, 0x3ff}, {0x0, 0x80000000, 0x5c2, 0x81, 0x7, 0x3}, {0x9, 0x85e, 0x5, 0x7, 0xfffffff2, 0x1ff}, {0x9, 0x5, 0x5, 0x8, 0x5, 0x9}, {0x80000001, 0x0, 0x80000001, 0x1, 0x2, 0xf293}, {0x7, 0x1, 0x7164, 0x8, 0x3, 0x1}, {0x8, 0x5, 0x0, 0x8, 0x8, 0xfffffffe}, {0x2, 0x5, 0x200, 0x0, 0x6, 0x2}, {0x2, 0x5, 0x7ff, 0xb, 0xd, 0x9}, {0x9, 0x1, 0xf8, 0x4, 0x7, 0x6}, {0x9, 0x8387, 0xd, 0x2, 0x9cc, 0x5}, {0x8, 0x5, 0xb5, 0x7, 0x8, 0x2}, {0x5, 0xff, 0x348, 0x94b, 0x7ff, 0x6}, {0x4221, 0x101, 0x2, 0x3, 0x8, 0x3}, {0x60, 0x8, 0x3, 0x81, 0x0, 0x1}, {0x40, 0x81, 0x1, 0x5, 0x6, 0x10000}, {0x8, 0xba, 0xffff, 0x1, 0x2, 0x1}, {0x7, 0x0, 0x4, 0xffffffff, 0x0, 0x2}, {0x28, 0x8, 0x1ba2fac7, 0xc4, 0xf0000000, 0x1}, {0x2, 0x639, 0x52, 0xf8, 0x6f2, 0x2}, {0x5, 0x3, 0x6, 0x5, 0x2c, 0x1ff}, {0x9, 0x34345cee, 0x0, 0x1, 0x9, 0x2}, {0x8f, 0xfffffff8, 0x1ff, 0x2, 0x3, 0x1}, {0xf, 0x7, 0x8, 0x6, 0x7b6904d6, 0x3}, {0x9, 0xc8, 0x2, 0x33, 0x2, 0x2}, {0x2, 0x2, 0x9, 0x0, 0x6, 0x3ff}, {0x7, 0x7639, 0x5, 0x7fff, 0x3, 0x7fff}, {0x3, 0x6, 0x4, 0x1, 0x0, 0x2}, {0x200, 0x7, 0x9, 0x1, 0xffffffff}, {0x3, 0x2, 0x5, 0x8, 0x23, 0x2}, {0x9, 0xffff, 0x5, 0x5, 0x8000, 0x2}, {0x8, 0x1ff, 0x5, 0x806e, 0x7, 0xa}, {0x2, 0x6, 0x66eae876, 0x9, 0x81, 0xf0}, {0x81, 0x6, 0xfffffffc, 0x1, 0x98d, 0x5}, {0x5, 0x101, 0x2, 0x9, 0x3, 0x5}, {0x0, 0x6, 0xd729, 0xf1, 0xfffffffb, 0x7fff}, {0xbdc3, 0x0, 0x2, 0x7f, 0x8, 0x6}, {0x1, 0x1, 0x5, 0x6, 0x5, 0x3}, {0x0, 0x79e8, 0x8, 0x9, 0xa, 0x7}, {0x5c4e, 0xff, 0x81, 0x0, 0x80a2, 0x2}, {0x2a85, 0x8, 0x1, 0x0, 0x9, 0x80000000}, {0x6000000, 0x2, 0x7, 0x2, 0x2, 0x6}, {0x3, 0x7fff, 0x9, 0x5, 0x4, 0x9}, {0xf, 0x5, 0xfff, 0x5, 0x6, 0xfff}, {0xd42f, 0x6, 0x800, 0xce25, 0x8}, {0x2, 0x6, 0x7, 0x0, 0x5, 0x5}, {0x1, 0x4, 0x4e3, 0x72, 0x1e2, 0x8}, {0x101, 0xc5, 0x9, 0xffffe098, 0xffffffff, 0x2}, {0xfffffffe, 0xfffffffd, 0xfffffffe, 0x6, 0x0, 0x1}, {0x3, 0x1, 0x0, 0xcb, 0xfffff800, 0x6}, {0x9, 0x353, 0x8, 0x8c, 0x739, 0x7}, {0x3, 0x2, 0xcd, 0x80000000, 0x6, 0x9}, {0xfffffffc, 0x0, 0x0, 0x401, 0x3, 0x7fff}, {0x0, 0x2530, 0x400, 0x7, 0xffffff69, 0x98af}, {0x2, 0x0, 0x0, 0x1, 0x9, 0x4}, {0x400, 0x3, 0x7, 0x0, 0x1, 0x100}, {0x1, 0x559, 0x81, 0x5, 0x9, 0x2}, {0x5, 0x2, 0x3, 0x8001, 0x5532}, {0x3, 0x7f, 0x800, 0x5, 0x7, 0x101}, {0x7, 0x80000001, 0x216, 0x1, 0x4, 0x3}, {0x2, 0x0, 0x2, 0xfffffff9, 0x9, 0x7}, {0x2, 0xe, 0x80000000, 0xdec, 0x1a, 0x5}, {0xca95, 0x2, 0x10001, 0x1ff, 0x47, 0x100}, {0x7fff, 0xfffffffc, 0x6, 0x5, 0x3ff, 0x3}], [{0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0xad3d9c13163e9958}, {0x1}, {0x1}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x8afb663cdec9f22a, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x3}, {0x4}, {0x4}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x3}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x3}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x3}, {}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x4afc535386648ea}, {0x1, 0x1}, {}, {0x2}, {}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x4}, {0x2}, {0x4}, {0x3}, {}, {0x5, 0x1}, {}, {0x5, 0xc3c01e5dfe8858a2}, {0x3}, {0x4}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x7}, {0x1, 0x1}, {0x3}, {0x1}, {0x2}, {0x1}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x3}, {0x5, 0x1}, {}, {0x3}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x1}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xee0, 0x4, {{{0x0, 0x6, 0x0, 0xed6, 0x7}, 0x4, 0x94, [{0xffffff00, 0x1ff, 0xffffe59e, 0x8, 0xfffffbfd, 0xff}, {0x8001, 0x2, 0xff, 0x7, 0x905a, 0x1}, {0x8, 0x7, 0x5, 0xffff, 0x7a, 0xfffffffa}, {0xf, 0x6, 0x2, 0xfffffff8, 0x5, 0x46202ca9}, {0x8, 0x1b7, 0x3f, 0x89, 0x5, 0x20000000}, {0x9, 0x4, 0x1, 0xf4, 0x55cf4249, 0x11b1}, {0x80, 0x3, 0x200, 0x3, 0x4, 0xe}, {0xab, 0x400, 0x1, 0x1ff, 0x5, 0x40}]}, [{0x5425, 0x7fff, 0xfff, 0x1, 0x3, 0xadad}, {0x1, 0x5, 0x2, 0x8, 0x1, 0x4}, {0x7fff, 0x8, 0x5, 0x8, 0x10, 0x2}, {0x4, 0x34f, 0x56842f0d, 0x48, 0x10, 0x8}, {0x80, 0x8, 0xb, 0x2, 0x4, 0x130}, {0xffffff53, 0x5, 0xfffffffc, 0x3, 0xdfdf, 0x2}, {0x5, 0x1, 0x2, 0xe, 0x5, 0x1}, {0x8, 0x7, 0x8, 0x8, 0xe7b, 0x81}, {0x1, 0x400, 0x400, 0xe3a35e9, 0x5, 0x800}, {0x4, 0xfff, 0x1975, 0x3, 0x1, 0x9}, {0xfffffffa, 0x20000, 0xc6, 0x6, 0x2, 0x1}, {0x9, 0x76cc792b, 0xfb95, 0x5, 0x9, 0x8}, {0x200, 0x2140a4b4, 0x5, 0x1800, 0x5, 0xffffffff}, {0xffffffff, 0x7fffffff, 0x40, 0xffffffbc, 0x6, 0x1}, {0x1, 0x8, 0x101, 0x4, 0x2, 0x4}, {0x9, 0x4, 0xb, 0x3, 0x4, 0x4a}, {0x1, 0x3, 0x7, 0x3ff, 0xd, 0x8}, {0x7, 0x1, 0x3, 0x80, 0x7, 0xfffffffe}, {0xf, 0x695, 0x1, 0x80000000, 0xffffffff, 0x7ff8}, {0x8001, 0x7ff, 0xfe0, 0x392, 0xc, 0x800}, {0xffffffff, 0x8, 0xc3aa, 0x3, 0x401, 0x2}, {0x10000, 0x7, 0xca, 0xcdfc, 0xed, 0x8}, {0x7, 0x1, 0xe, 0xe670, 0x7, 0x7fff}, {0x7, 0x6, 0x4, 0x1, 0x3, 0xfffffffe}, {0x4, 0x80000000, 0x5, 0x7, 0x97, 0x7f}, {0x7e, 0x0, 0x3, 0x7fff, 0x1, 0x90c7}, {0xc, 0x200, 0x7ff, 0x3, 0x9, 0x3ff}, {0x0, 0x2, 0x7, 0xfffffc01, 0x1, 0x6}, {0xc, 0x8, 0x401, 0x6, 0xe24, 0x800}, {0xf32e, 0x9, 0xb1, 0x5, 0x6, 0x35}, {0x3, 0xfffffff9, 0x9, 0x5, 0x1, 0x7ff}, {0x935a, 0x5, 0xfffffffd, 0x5, 0x855, 0xbf}, {0x0, 0x9, 0x4, 0x800, 0x800}, {0x101, 0x3ff, 0xb9, 0xff, 0xfffffb70, 0x80}, {0xfff, 0x7, 0x200, 0x7f, 0x1, 0xf54}, {0x2, 0x8, 0x98db, 0x80, 0xfffffff9}, {0x10001, 0xfffffffa, 0x5, 0x2, 0x4, 0x42f8}, {0xff, 0x80, 0x4, 0x4, 0x4cf, 0x6}, {0x6, 0xd, 0xffffff12, 0x7, 0x4, 0xa1}, {0x4, 0xe3, 0x5a, 0x7, 0xb8, 0x1000}, {0x4, 0x8, 0x6, 0x6f, 0x0, 0x80}, {0x1c7b, 0x0, 0x400, 0x10, 0x1000, 0x2}, {0x2, 0x4, 0x6, 0xffffff80, 0x0, 0x8000}, {0x18e33c7e, 0xc0, 0xffff, 0x1, 0x2, 0x2}, {0x3, 0x6, 0x7, 0xfffffffb, 0x0, 0x7}, {0x0, 0x2, 0xfa, 0x8, 0x8, 0xfffffffb}, {0x8000, 0xd, 0x4, 0x1, 0x0, 0x5}, {0xb8, 0x975d, 0xfffffde8, 0xaf9, 0xffff, 0x5365}, {0x9, 0x6, 0x8, 0x6, 0x4, 0x568}, {0x1, 0xd4, 0x9, 0x1, 0x3, 0x2}, {0xff, 0x8, 0x10001, 0xa, 0x3, 0x2}, {0x8, 0x1, 0xd, 0xb85, 0x1, 0x2}, {0x9a1, 0x4, 0x3ff, 0x0, 0x4, 0x3}, {0x2a, 0x1000, 0x0, 0x1ff, 0x9, 0x7ff}, {0x6, 0xffff, 0x8, 0x3a97686e, 0x915}, {0x7fff, 0x81, 0x4, 0xc59e, 0x7, 0x9}, {0x7ff, 0x8000, 0x1, 0x3, 0x2}, {0x68, 0x6, 0x2, 0xaa, 0x2, 0x80000000}, {0x8, 0x6ce1, 0xb, 0x68, 0x48c3, 0x4}, {0xb, 0xcef, 0x2, 0xd3f, 0x71c2, 0xf36a}, {0xc1cb, 0x2000, 0xc6, 0x7, 0x0, 0x7ff}, {0x3, 0x1, 0x7, 0xe5, 0xb1, 0x1ff}, {0x6, 0x0, 0x80000001, 0x2, 0x21, 0x5}, {0xffffffff, 0x1, 0x5, 0x0, 0x3, 0x5}, {0x40, 0x4, 0x6, 0x8, 0x2, 0x2}, {0x1, 0xfffffff8, 0x6, 0x7, 0x9, 0x7ff}, {0x1c, 0x7fffffff, 0x200, 0x9e, 0x3, 0x6}, {0x40, 0x4, 0x2, 0x2, 0xc3a, 0x2}, {0xe2, 0x80, 0x9, 0x4d, 0x400, 0xf}, {0x7, 0x5, 0x6, 0x6, 0x7, 0x6}, {0xa, 0x200, 0x8, 0x3, 0x0, 0x1}, {0x0, 0xb, 0x1, 0x1, 0x7fff}, {0x4, 0x3, 0x30, 0x3, 0x2cdc, 0x8}, {0x39, 0x3, 0x3, 0x5, 0x4, 0x7}, {0xe3, 0x5, 0xfffffff9, 0x8000, 0x7, 0x9}, {0x9, 0xbd, 0x2, 0xc137, 0x13, 0x2}, {0x4, 0x10, 0xfffffff0, 0x1000, 0x7, 0x3}, {0xe8, 0x5, 0x81, 0x9, 0x200, 0x62}, {0x80000001, 0x8, 0x2, 0xddf, 0x3, 0x3}, {0x80000001, 0x0, 0xfffffffb, 0xd3fb, 0x9e4, 0x81}, {0x0, 0xb9d, 0x6, 0xffffffff, 0x0, 0x3}, {0x7, 0x9, 0x69fd, 0x800, 0x1, 0x7}, {0x243, 0x6, 0xfffffffa, 0x40, 0x6, 0x4}, {0x1, 0x8, 0xa96, 0x80, 0x7ff, 0x7}, {0xe37, 0x2, 0x4, 0x9, 0x8, 0x3}, {0x6a, 0x2, 0x6, 0xc, 0x80, 0xa}, {0xa, 0x1, 0x11, 0x200, 0x0, 0x401}, {0xb, 0x3, 0x7ff, 0x3, 0xe, 0x8}, {0x7f, 0x7, 0x4dbb, 0x8001, 0xc4, 0x80000000}, {0x8, 0x0, 0x0, 0x6, 0x4, 0x216}, {0x887, 0x393, 0x4, 0x7fffffff, 0x0, 0x4}, {0x3, 0xdb, 0x401, 0x4, 0x401, 0x5}, {0x7, 0x3, 0x88, 0x5, 0x3, 0x1}, {0x94d, 0x0, 0x0, 0x9, 0xa96f, 0x65f}, {0x10000, 0x1, 0x9aee, 0x4, 0x6, 0xffff}, {0x3, 0x0, 0x0, 0x81, 0x5, 0x3}, {0x9, 0x2, 0x59d, 0x7fffffff, 0x0, 0x3}, {0x3, 0xa72, 0xb, 0x8000, 0x2fb, 0x4}, {0x5a4, 0xba30, 0x0, 0x2, 0x4, 0x401}, {0x7, 0x10, 0x8, 0xc3af, 0x4, 0x8}, {0x1, 0x0, 0x91a, 0x3075, 0x9, 0x6}, {0xfff, 0x5, 0x8001, 0x2, 0x7, 0xdab0}, {0x8001, 0x2800, 0x0, 0x2a22d2ca, 0x4, 0xfffff801}, {0x2, 0x7ff, 0xd02, 0x7, 0x2, 0xfff}, {0x3d9, 0x8, 0xffffffff, 0x9, 0x7e6, 0xe3}, {0x5, 0x304, 0x9, 0xfffffff8, 0x1, 0x18deef5b}, {0x9, 0x5, 0x0, 0xf, 0x0, 0xf5}, {0x4, 0x7, 0x7, 0xba, 0xfffffffa, 0x9}, {0xb47, 0x4, 0x3, 0xcd, 0x10, 0xa2d2}, {0xa59, 0x4, 0x4, 0x40, 0x5, 0x5}, {0x2, 0x1, 0x5, 0x0, 0xffffffbe, 0x25}, {0x5, 0x5, 0x4, 0x6, 0x40, 0x7f}, {0xf17, 0x0, 0x4, 0xffd, 0x3, 0x7fff}, {0x6, 0x0, 0x6, 0x4, 0x51b, 0x4}, {0xa4, 0x0, 0x4, 0xc, 0x8, 0x8}, {0x7, 0x7fffffff, 0x13f, 0x7, 0xffff7fff, 0xcf9}, {0x8, 0xffffffff, 0x200, 0x6, 0x1, 0x3}, {0x5, 0x9, 0x165e, 0x800, 0x40}, {0x1, 0xf55, 0x8001, 0xc8ac, 0x85a3}, {0x80010, 0x9, 0x0, 0xff0, 0x3, 0xfffff403}, {0x2, 0x1, 0x5, 0x5, 0x7bf, 0x8}, {0x401, 0x9, 0x5, 0x5}, {0x9, 0x4, 0xfb4, 0x9, 0xff, 0x1000}, {0x6, 0xffffffff, 0x5, 0x7, 0x5, 0x8b11}, {0x401, 0x4, 0x600bb7ce, 0x9, 0x2, 0x1}, {0x8893, 0x2, 0x0, 0x8, 0x3aed, 0x5}, {0x373f, 0x8, 0xaf, 0x1, 0x20000, 0x5}, {0x5, 0x5, 0x1, 0x4, 0x8, 0x100}], [{0x5}, {0x0, 0x1}, {0x1}, {0x2}, {}, {0x3}, {0x4}, {0x2}, {0x0, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2}, {0x5, 0x1}, {0x3}, {}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x2}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {}, {0x3}, {0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0xf2173fb318dcda2a, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x5, 0x6ede33eb78f3a9ce}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3}, {}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x1}, {0x4}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {}, {0x2}, {0x3}, {0x3, 0x1}, {0xeab11e333c5a41e, 0x1}, {0x1}, {0x1, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x4}, {0x3, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x1b8, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x6}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x7}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0xae, 0x6, "d4bea9ce7dbe5084f0f16b1b4f3a8fac420277da5f58540672a4b3e5748e6ba2935954071bf4807f682c24098f22cf85460e74771fc07ba00b67be0e676d49727a3297cfa4d09ad1e2e471923422bb964c37a66e7cb152b95a48f66e7a43d7f75ad4fff801cc56216646dbc8e37236b1bd2d816754240da97e03d8f1cc42fc6e6368c9557f6ab01fbda8872f9e94749c37143cc189cc14208cad70e7d6e9bdbf6c6b3260bf5a55119c40"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mirred={0x1ec, 0x1f, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x101, 0x5, 0x728, 0x5d}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x9, 0x1, 0x0, 0x2}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0xfb3, 0x0, 0x5, 0x5}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x101, 0x0, 0xffffff34, 0x8d}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x7, 0x2, 0x4}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x4, 0x3, 0x7, 0x80000000}, 0x4}}]}, {0x100, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0x104, 0x20, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x7, 0x5, 0x6, 0x5, 0x6c2}}]}, {0xbf, 0x6, "7192dcc63faccace0ac56cb8e8cb609f65ee82546f7ef4b5566a4128b89afc22be93c663d47eee747c24e49a667d1f2adad74080428b2274b4fb9352eba483f4e7b7a392e87ad57aa35ca49589ed56615b9f5bf9da3e50f1eea71d19659e96afa76566c4ac38c68a12c5167dd56d1dbccb9994f2067d07f3e322b2bb8b3aa1b223a942361685fece5fe8ff48a21d8b05765dcb35ed28964c84f3db7122c48b5e325f78e86b4099852e4d179707e879f0ad2c659400ba716291c31e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_xt={0x394, 0x2, 0x0, 0x0, {{0x7}, {0x2cc, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xeb, 0x6, {0x4, 'nat\x00', 0xe5, 0x3, "dd399617a88f94de11f4e05eb1b9d20b73f9abf482c593a083ea9e203853df4c7c3138b8aa19dc4ed88f0bef07fa7ade0ee90f11953241b7e9b640be44f36654a7bd1a0e6154202b724daa0683ca32e42f12a83397a97d64e139606d5743bd1c1e11a688b54cc378e88021e4f4ebc563e5f854a50a274ec37675d819e8cc90839f6629b2d039e0c99fd1d77a3e9183b1ca17f6a48c0ab8b0a633f99aa04568b127ac01d2ee554fd1c059d96fa8c2b72f15c726981388448936f8f2e735fb367d06"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x112, 0x6, {0x6, 'mangle\x00', 0x6, 0x5, "c3029b552dabb4441cbf8700b5c858af325c0f151eb72cd66c40d40ad4e7714bd2e3b42735f964aae73b5f364fac77fe9f07c1aec525eeb3455505ce7c91f5da9bfbade2a76db511988608c1c054538d008c422179fa938d3414bc2b32ec1060d4e73448e4538f79da13438c879763c023f669cf5dc8aebdef1eec187cf6ce1ac57470bc10ac076b32c3fba6e77fb00c7738a032f6dc35784e36147efee11a1338d18b234264ea543dcd66f700bf91038a10b92354c1458c76d2e46e554e0cde5c309da02a7cad9df645daf29e7e0e5d714a4f290f114ac816c5db1dceac76cdfe794cf0c2fd8305"}}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0x82, 0x6, {0x101, 'raw\x00', 0x6, 0x5, "6c55086e309a07674c5755a3468e37897dc3f83837f830aac441268b0eaa457a56b73c5a2484d8dcf24dd71e773777b5e2a65cf66d055abf4e7df14e37ff84e08229d238797bcdd1f6b01bd2c1e19cc37f2331c537c529f3"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}]}, {0xa4, 0x6, "9bed9b7ad420c61eae0b4fb7d57bc33d276076c2295f1128ea51df5814f4a7afcd3fbf111078d720385b25538679c201cc3c73c91422670df3b0467a8874d982222e47a4210db51acef257aa3c2c71ffc7c957a8b71481fe81a488d9947fda8be905e0b462f9034506c3a934c237aa31f53fb4db29c015225181f54c3dc3669a166bd13dcf197214d6b1d9b050189833b1f65759f92d91f10b07a2f992c08b65"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_bpf={0xf8, 0x1e, 0x0, 0x0, {{0x8}, {0x68, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x24, 0x4, [{0x1, 0xcf, 0x2, 0x8}, {0xdd3, 0x9, 0x5, 0xfffffffb}, {0xff7f, 0x5, 0xf9, 0x8001}, {0x800, 0x1, 0x6, 0x69af}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x401, 0x9, 0x0, 0x9, 0xffff0001}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x9, 0x0, 0x6, 0x1}]}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x7f, 0x6, 0x7, 0xd1ac}, {0x84, 0x0, 0xf7, 0x4}, {0x800, 0x6, 0x8, 0x2}]}]}, {0x6c, 0x6, "37409abc3c3903e7ee8f8beaae21ab9a8e48bf6f092d204966d60df6f2e8b8d7b46043f779f64e4bbdd067ed01e26754511ffe70dd318b303a00d5c187035b55724dd152302300a208fea5f7ef76c7df6d0ce6b48d686c9f46b4698a1fe1fef9676b0f4dc79cc295"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xf, 0xfff3}}]}}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x6, 0x5, {0x22, 0xd}}, @filter_kind_options=@f_route={{0xa}, {0x414, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xe5}, @TCA_ROUTE4_POLICE={0x408, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x8, 0x800, 0x5, 0xffff, 0x7ff, 0x2, 0x3, 0xfa, 0x3ff, 0x80000001, 0xf4c, 0xa, 0x0, 0xffffff80, 0x9, 0x8001, 0x5d4, 0xffff, 0x0, 0x4, 0x3, 0x0, 0x80, 0x1, 0x3, 0x5, 0x7, 0x0, 0x4, 0x3, 0xfffff148, 0x1, 0x6, 0xfffffff9, 0x81, 0x9ca2, 0x3, 0x6, 0x4, 0xb, 0x5, 0xfffffffd, 0x7, 0x7, 0xf3b, 0x1033, 0x4, 0x1, 0xfc03, 0x2, 0x10, 0x7, 0x5, 0x1, 0x9, 0x5, 0x9, 0x6, 0x3, 0x6, 0x1, 0xf, 0x1, 0x9, 0x8, 0x6, 0x9, 0x0, 0x1, 0x7fffffff, 0x5, 0x8, 0x3, 0x4, 0x6, 0x8, 0x3, 0xce2, 0x5, 0x9, 0x4, 0x0, 0x80000000, 0x7, 0x0, 0x9d5, 0x0, 0xcda, 0xfffffff9, 0x5, 0x20225a2e, 0x9, 0x4, 0x4, 0x2, 0x6, 0x238, 0x80000001, 0x9, 0x4, 0xd, 0xfffffffc, 0x10001, 0x2, 0xe589, 0x1, 0x1, 0xfff, 0x45d, 0x8, 0x100, 0x1, 0x100, 0x7, 0x0, 0x9, 0x8ef, 0xa, 0x9, 0x4, 0x2, 0x8, 0x8, 0x81, 0x3, 0x1, 0x5, 0x3, 0x80000000, 0x4, 0xb2, 0x9, 0x9, 0x5, 0x2, 0x1, 0x7fffffff, 0x3, 0x1, 0x98f8, 0x4, 0x9, 0x0, 0x4, 0xb, 0x4, 0x0, 0x0, 0x6, 0x6, 0x7, 0xad, 0xef, 0x0, 0x5, 0x7, 0xfffffff8, 0x8, 0x98500000, 0x3, 0xf, 0x5, 0x5294, 0x2, 0xb, 0x7fff, 0x9, 0x92af, 0x6, 0xd2ef, 0x7, 0xf2, 0x6d, 0x63d, 0x1ff, 0xcf26, 0x800, 0x8, 0x6, 0x7fffffff, 0x8, 0x800, 0x0, 0x9, 0xffff8000, 0x9179, 0xb81, 0x3, 0x76f6d99f, 0x2, 0x0, 0x5, 0x100, 0x5, 0x9, 0x0, 0x3, 0x6, 0x7ff, 0x9, 0xf, 0x9, 0x1, 0xa, 0x795, 0x200, 0x717, 0xfffffff7, 0x800, 0x401, 0x3, 0x1ff, 0x400, 0x1400, 0x7fffffff, 0x3ff, 0x7, 0x9, 0x3, 0xfffffc00, 0x800, 0x800, 0x4, 0x7ff, 0x80000000, 0x8001, 0x45, 0x7, 0x1, 0x10, 0x7ff, 0x800, 0x1000, 0x7, 0xb1, 0x80000000, 0x6, 0x9, 0x7, 0x7, 0x7ff, 0x8, 0xfffffff9, 0x5, 0x7, 0x81, 0x4, 0x7f, 0x1, 0xff, 0x81, 0x3f, 0x401, 0xffff, 0x3]}]}]}}, @TCA_RATE={0x6, 0x5, {0x9d, 0x3}}, @filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_KEY_CT_ZONE_MASK={0x6}, @TCA_FLOWER_KEY_TCP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ARP_SIP={0x8, 0x39, @dev={0xac, 0x14, 0x14, 0x36}}, @TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x7}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x4}]}}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @random="33d4ad54d75c"}]}}]}, 0x5698}, 0x1, 0x0, 0x0, 0x2000c814}, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000001ec0)={{r2}, 0x0, 0x1a, @unused=[0x6, 0xfffffffffffffffe, 0x1, 0x9], @subvolid=0x7}) io_uring_enter(0xffffffffffffffff, 0x184c, 0x0, 0x0, 0x0, 0x0) 12.591509247s ago: executing program 5 (id=6676): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) 11.643479028s ago: executing program 0 (id=6677): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f00000007c0)=0x40000401, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6, &(0x7f0000000040)=0x5, 0x6, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r3, 0x7ac, &(0x7f0000000080)={0x0, 0x0, 0x800}) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0xb80, 0x0) ioctl$RTC_VL_READ(r4, 0x80047013, &(0x7f00000000c0)) 11.246619268s ago: executing program 5 (id=6678): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xc) openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000001c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f00000002c0)={r2, 0x6da, 0x1}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000)=0xf3e, 0x4) sendto$packet(r3, &(0x7f0000000240)='\x00', 0x1, 0x800, &(0x7f0000000080)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfc}}, 0x14) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x401, 0x0) ioctl$TCSBRKP(r5, 0x5425, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c6a7be57822013db999a640d02d2245ee4ad7539144477ce6c2555bfb1d0c5e8cac020a36d828f16af7ac616b1dac9883c0e391c377644bf95e9a229ad045843a8f44d14ea1af5a89cfef4c23b54cdff7de01cf", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800900010069706970000000000c0002800500090089000000"], 0x3c}}, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCSETSW2(r7, 0x5408, &(0x7f0000000040)={0x300, 0x0, 0x0, 0xfffffffe, 0x0, "2cf155f1d8b4d0441f0246e09537aa82dc1ecf", 0x2}) ioctl$TIOCGPGRP(r7, 0x5437, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) bind$netlink(r6, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x80}, 0xc) sendmmsg$sock(r3, &(0x7f0000002400)=[{{&(0x7f0000000300)=@l2tp={0x2, 0x0, @remote, 0x3}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)="76c123832362b1ec674aef5d24143d4c4f832df74e4a80735a65b29ab3b4543eb7172ee7b1d82acac150ee19ea363aa34aa1f95c7f8d84023e99f031da79b82546925f897c940cdb890137ee82be4287a881d104425abc1fbb48aceea223f5e10bd43a43d42415115bed0063ecc3efac105d9ecac6a1db84208e8062219976518e95fc870509553f36364d40c69a9a61d4e816b8ea0db11bcdb316ef23ba0961d3156aa268f77c4a3cf8d03601505d0e83294317649bc32a81f1c6d9aefd56bd2ac9e9c1", 0xc4}, {&(0x7f0000000480)="b9559718670bd84a86be3e4eaa2ad32b", 0x10}, {&(0x7f00000004c0)="a4fb669cf8306543d6f138c2c35587a3498431d0bcbebba9b5f5e4969443a03ba3562b06d548f4ede12280a4b1f1a6205ae04d2ffd1d613794fb6b837f4e44ff1496ae42", 0x44}, {&(0x7f0000000540)="17b4", 0x2}, {&(0x7f0000000580)="78bb875b18870eb744a2d395f62d3f2ab39dd08c5582c212ffe4acd2e8c1ffd731954651ddf6a44af206cea9a2243f4c41b93c8369a54579a10872be1f6c3821dfc52bf6c1062c3437", 0x49}], 0x5, &(0x7f0000000680)=[@mark={{0x14, 0x1, 0x24, 0xfb}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffeff}}, @mark={{0x14, 0x1, 0x24, 0xd}}, @mark={{0x14, 0x1, 0x24, 0xfffffff8}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x9ee}}, @txtime={{0x18, 0x1, 0x3d, 0xb}}], 0xa8}}, {{&(0x7f0000000740)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f0000000c40)=[{&(0x7f00000007c0)="79f480a53f8f581b297c2777069f8921767e261026f71c0c78f7a263750c6a88679a81024bf8704baae00c2cf2d8db6032d9c07c90d80a6b890e95346a4d1cbaf6df481ca9d4455e15bd5f47be7b493f6bb6bf46953edf8df9acbb", 0x5b}, {&(0x7f0000000880)="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", 0xfb}, {&(0x7f0000000980)="700192aedb2ee040385c188d8a506ae66ea2bc5d9838360d90f0a766866b918fb09a242be05756d5a110539d63c48d2ee421caa39a5f3ba44c9239798f109536d132b80ce883ecb3eef51ab01f42fa6d0a01a6e34dd95df8b85795b7bab0a66fa05bed9949073f7da918c28fd020b4c808406ddfb82e731c9543659f2cff2347848690a95d2d43d9772a7ff2d5fa0a6c285a38c34daea8579402035908326a75bf6bf2f6b6e1da4bab990a3e40c95d6412cd985935039a6704237cfbd69c259b27a4214d5aaa1115f26c04de62eaeaa79eca93f85ec7dd1fcb826d05bf7425b65de6", 0xe2}, {&(0x7f0000000a80)="30ec08c27e024ba190709dfee6d1a9e2c0febf6f2ee87fb2bee0b4f79130697932176a146c9534c3d5ead181f923092d023e0738546890852db4dff3d82a24f8193b8205003b5147939883688bfa5605a1d4e6adac7bdcabf9f8f77c00dcc083e37be57892f04f36ef5754b21b7223c2a8ca82f1cd82145cdbe6b46803f3ce6005d136381306b6c28b22f2e9a2691946f364abd4e0de8eeb99c1ffa1721709c5d4d7bb", 0xa3}, {&(0x7f0000000b40)="b875", 0x2}, {&(0x7f0000000b80)="0babd77f5170e0959dfc43eca54f1729f08a045f2f9f46a50cfd8db7e3179b3268ec317ae7ef8bde778c27c5c106bae804c83b4e12ca3dc5459598377c4a8bb4fe91d79bf46395e6132230ff0422405c1e6140100a6f09022c8040ac6a678bee8414501dc8b3581c6dbb462aa093e51ec91ff9f57d1fce60353fd04d2c19620334c9aeb1f77f0eaaaa06b1744eed0dbf76ea49e75b3049dcaf91920d7fce5ead", 0xa0}], 0x6, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x7645de8d}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x55}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x400}}], 0xd8}}, {{&(0x7f0000000dc0)=@ll={0x11, 0x10, r4, 0x1, 0xff, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x80, &(0x7f0000002080)=[{&(0x7f0000000e40)="79c7a5216b16b2680179244e0b5592c80bdff9d3c3b7c0023d24cf8ab7ac632ea0bc222b976d52388d97fefda1b447678a863c8e56857b81266c35f6391bf7e576cec32971a8f47d85e6d208aa34c5369f91", 0x52}, {&(0x7f0000000ec0)="3a35c9383c0c10931505fa0e8f68b756248dbeb3c79d0530da48dfd4dd4a59770a06fea2ff03b678fa86f4fdf8f7eb61792ff81887d284b13aa6ea51b48aa75517085b09950017afe5135e3894ab8a0ae3a7ae3850145e1d975282a484bb94cf2eebeccddb94f21e8ad7b2072772945da1342838b99f3275f48b5e50d059d4fdd6ffc14a177cfbf4b69d74abd352c2", 0x8f}, {&(0x7f0000000f80)="5090ab20574799e13b18a6b52d81495aa5421917626231c11fb9d8845f8864d3eb458377b23704293b4b7143a6fe2b9995e4e6f1b63e5a8b81205f911446e77a68cdc0159d0dcc093e145425251e66ce5709c3cf11035777d38a7d70dff76fcc6ee6d14115d5c70691a7766f36407b6dc85541b7af0b63aa6d5e409dbb120e8ca6aaced909547fba55123880f3bbb5542c0459d39b92e7bd607b0745378bf2f1f68981768fdd3ebb8daee6fcc027b08bf935ddcc671de9b7f07606b21b7ff10b6cf0f0a92247afe9359f95b30dcb1aee16b73b7c959fca02b90e9309d0e4ecf69e45ea495038482a6b9725f0928e521f53f799eede02c3", 0xf7}, {&(0x7f0000001080)="54042383aece7fcff5c283ad69048a816b4a3d0b60a9279a6d5bb2ea5519af99c6f83c753d2a2d77b635569883c84b9467647cb0f19fcd1a4910ec8cd874459e8e3eb02c8c5e47fd7345738fdd1b8d52e8b5d6de94391e51cf9f1ff91b31d00069aa4a87aa6d65696beaaf8c9079ccef5d0a7ead41e16937ed8d6993171a80594c97da4cf3e46e42798fc2049d2cb54d57136172d311caca7a5891b5b7ae5a12346317600deee1c303577550da4f47e6b8959bbd06741762be77b0aad523315b720f6e681b2d11df07e6779be320568285414156b4bb44a9fd003c384daaf8c5074c0a3258d9a1de5540ad6fe7a9d69758ec81daebeb999e48a0c24abf3c28648e10510bbd4a37dac91ea019a9ad72594bfb5a3a8b09d714cf0d7268c0c83d1f2df65420b20fe277afcc784a3dd8be34555ac76a612af8090ca953e07035cf7306fcc11ee51ad887b97c86e11737c415f8633b862c4da95f7a6f3a2a2d51c761a5aa2f25d5e5caca7127e6b9da564977b6962c93e150b07f81cd4de14db033a473bc93e3812c27edaea0c46dbd5365f19cf39606e688c854332fce1d901f4c15de6c5948ed3bde8ae017665ebff6c2ae375a827e2f65f8a493155bccc7aed9c457978c0b8a755ae9a3d44c78b167caa7cba850ead6e4825297b7f1db45517e971f405450e25b6612830655bcf2a2bc3045fa08bf8685defbb1f0d3942d4724dedc907773cce1751b14d87e00064ceb0f604e370296b68014a7303b89d09923780c677b4c45f8fac8bdf2542152f667d2d23ac16f0ec9c61df4446b424cf6e6513d253eb4610070e3535ce19c0adcccf463988a143e38117176987f4902bcf8181a1be6ea54ab1d9f21fe1ca32eb7d333abe2b590cefd7f372524113cd289f0106ff20c69be0ec767b4d766d1a999449b08f06d84834e4771fe9b2c9de102f1f42f4d2022652d863c9aa6bfab381e7234cbb54aee820b8cae290010828f8ff72c5982e12ceb94cf638f43a1eb46949e37cfd644ceedf4ac48760c68639331c0173fa6f444ce4426fce25abb8f07fb9ed5aa80b32761ac25e06b14bc0c6a4db4f1945c5b16ae6849e2522740aee4742edc73784e7ee7e3443392c582542438a85d1fcfb7532fa79687fa1fcc1fa9271ca9ba4dbd30088aa1f7c8fa2aa1cb4abb6e1fdc6c1a48b0a71b5ea1b353ec238d3f3dbf002a9ffb9eb88315a7a1d933405b05b5a3475f7513da9016b228f774154414755572f42cc0ecac9366dc6b6bd70029ff03689fb0752e039e6f4e1491bd456a375d6d94b618d41008b8d707780c4b97ca0e529e5bd601ed847d44d4a617e9576bd34c700f8c00abd4d1ecfd007f17dffada20d34cd5fed50fb9ebd8d806adc38515c37d9c135031dc24ef9c793811f462bac5fa14e15be83b7a25b6f9235d0bd5addbcc9799592bb0774cae53117c4103c9a062403606f7d2737b022dfcec4c17da8a7ca60ddcf7adf4085cbd398673ff83d8f342cde808de3e34bbefe073066fb98d37b2fa2e3eecfa127028be3bea0e9ea08b6e9d24fe1db61c43887b0069289cf39f27ab590b3236e09b10016ad0b532cc0c1416b3910215aeedc542a0aa3db73afedf8abb0bcca082c11aed21ac8fc29b6aeff47ede00b5b8d3d33eaa3aeb6f113266ce69736ee1bc45fae2fb6ba9ebbf6d049a6b30f2a4c2b3d46d70e321df4c8bb0cd4c9a6cce7f00cdbe32053e5628f88daeaefec777ffa4d0332bf9958ba81e5383fb23e74b8c74c9e976a0cfefd4d14503c82898aecd88e014410162e73d144285e0f715d85c27a8ed53aa2cf8120852d33300eb5cb06b2088dc318cf24bacefee5f060854020bf959556e2d44c61f4b0a9c1f99993a9cfaf5095db8cd70cc9f8a44f57042d1667b062019fbb388d15dafdc89fa7b010d0efd69bc9d35ff4cb04f0839bb2a216af879105dc43f4a5be809fd804ce01a55caed74e21e3319b05148a978135639e6962361706190e7e2946785dbd7eb4aaaddc4a76f6ac0ca260ce7bd7808a180038e415e87a705b8c1da812d0b26c1cddfd33a1fba6bd38bba0cbd1e80d8937ef6f32f722587683ec29f8a5d634c94c5f41612d3a85ab04b54b87a5a4265a4e36b7bd05d2bfdfe2b599382879a9236601d320f53adfd3d848bea1913d1e06fb546952bab0c10b58699eb4373647459ad023f9245bf7e78692195537f07d1d759b1eb3768d70bacc59882edc36fc0f32ddb12a61ddb84f1c163339c3c79448835b3d40ce96c177ec885aefb737f7095f9ca89d812f5c7d680206bb7da8d01472a551e8a3f6d853e983f83b746dbac372c4e66e4c527384fbbf169c500ab74543cd88f50617466f6265b7d395188b7481129c70929d129efc79addc3a671d5e95b726919aeb50d0a4b39c331e5db2f25e5087e8fab86239aa5df6d338d5f41075ddee13e0ad5ec38e0a0d1bf4e20968681433894daafddc2671d4d5b962903ce56e0e137be636af61b3a4836595bf71e77b6aa250a489a0e309128fdf5f57b4e7c5b002d7afc99bdab8925554a0576a32389b3050fcceb5d40366637dde032f35a7ac171978315a671f7d04452467fd17c29e41631fd62b4cb191c7e10abbb4c68f6c48847eccb58c20666fcc4d427121116c8160e4b5355930a0b8ef28858ccbda2b8dd833eeed9dfd3f49eb7c6e9b1b34adefbbccb5fd1eb872ee3bd4f2fae4226a8bc53f36bff6e06fb05e49944aff037cd98ad1942d7c3c6e6c12fc1ca88ae8d30e7232485b2c12549b94ca1edd7f76970d2d54ceb0d57fc88cc6aa0055090de828eec6fc56ef68de96ab4d93f5b5d27cc5520280906e831e97a376277d06d17669a043b40c5a4fc84d2366e154d7934a489a72823351c282106af62fd772105f808adb24e52d00a1356081cb7492e50951fe8e6d02578b74743d62299f49916b9262b96352a20e0c1c49a2974f7e8708c941af23461fb2a712b86b7ea623df7f942412efb8e0e5e9ba318a3e21b6a9a051736452a4fe4ac1f7acda444dc58a64273221e00daee7e4e7ef266e105cffc34fd9c01b758fb742673a5899e43639e8246d2c87824696e75f2527d435c8a54ccc598d8e42d62a1a2377f29227962c543b704c5980b5c71c259419f57c453386642ddeafa05d22cdc24474de8172d16f4af3f5b8b844ddbb3cfa717d7329ef6c347b625bf80605f52e915292e7c33ed772dca861f2f62666b3a02efaa89f934208f6b2e2b075f81bf2b440c5870c0e24e533fb5336e6edf5907e1de87e380a095a38fd14df3323e3ea1b5492414270f8ea0f5d51eb0c5497696636da81a37d2ab93d608589c486d3b58ee9ef8cbd7caa84bf784e8509b4461cb867dd66119e71d048bdc3d2b1f375b909893f25e776ac87f13cf02d5d90902697f434867660cab51400e7c411055b52c5e255a3b80906ecb81b2a8284fcbb878b9245a1a6c47b4b444357d433d85ec869d0ecaab524edd14b26331a733c99d660ca63b338f2adb5102581a2b1668ffb4e1996c14660c15e981ccc4dad9c6ca94ea31ff9c620b11b07b9e2c770b7bbe701fd6c61a5846b3163b22242d875b65378359d81eb3018525470d5ee2f648289afccd775816291c44b4f0e0ec2da93b0ccc32e34fda30b4239f2ac28b6af7acc4a7e62f18c1032f8113544044801ba8f27bf5a5813bf465aec9fedc07e2afc4aef8db3d16319d6cafcf16cefd99cd4072c603eb72007c534f731ab90479bd4a102d84f5f86711f0cbb7d92f0e36328d63ad50dd20ae0d8ab166e4f57a8d204cd88c1837e17e1f32d7e876399c22d21a5056d31d42ab0c2588bdb613a453c1f73e30a4879712668af6e33fc38ba2d92804297f2a354657651359dcb3155453436b0b518393d9d29efe70033209a965e6f11bc39f3b109b0ab1eb3824bf4eff39701d8874623ae552e379f3c396e5816e11ee6232506f250b4bee1f5087cf2993e460a6d33be3f7b88aeadf18ba53b8a2693a5392cb917c6cf92faff6b21809cd825ab5491166cedff37e2bae10661ec753dc7f18cd0f854ae6a7d2d5a0a3d305be1ca971d96eb3213035e82e3e6e4ee9c69da364374a522dd7ddfa1d2d7f58f8857e1e74ac544ecf9204a78928e4d2c42cefb4677698fcb57f9c04cc614c74d443add165052f3cad80868495bbc304b6b04535336fb429b308e04113810a5e2a09ee4e9ff50c54571d0da607afe9b48c7dbc0705a17f306a15d2216be2c2fd6ac1981cdea1a00fd779e35bb28c1e56bdc3ae54b9eaa08523df0dec45435f5f91451775fe1fcc7f678b649361748b0778f39478a3e0aaef9a9618f637011bd1070b1fb80e859e4c39bdaf20c783506d909f8b9bd96366bf48bae3050b2f22526d8303a668f9d7a666edc6f389cf78e29eb8b45951ac1d777e5a92aba2ba8c258ee62aa29a7114c29b8608cb005cfb090b8918f5c725daf4d9683d93ca248796e9e69415fc7a616796e1c8bde64bd6ba65c4b7626e4edc08716fbdc732f41f90976c121ecd2979c77ec8d4dc484d7df5674f385353a1f994eb767e628c776a88b3af8c834b640d20d9821eae3eac4e4ad0f10ddac09f715fa3cb38c7aa806c33c4b901b2ff6db26ffb21ee0130a11550611712763c8cae2ac03e5dd9d640ad6b2f49dbe635370ad35c0c554689671679afe71934b7aa2cf20725427738b4358346a9971c10b54634e57dd5dc81d9da44d6318b49ed54dd0460939a63351bd793d89cf00f2fb33505bdb9be150eb59409448846a3e27994e1585126eab3d8cfb152bc4128bc8b926f5bf74e5541873cfa367c485df30996200e8aa65853cf868eee6b2fec31ab1d927fc348564e1edc2900233926e18df7cd61c691be6ffe55a43dbf790173d41cbcfcf09a6cd79912e7e473ec2becdcaec4ad259ba97cec2183b484f8aa2cc2551ac4205eaca1fac5544e5152f0ba96b63af8b77c3cdbbe0446d04e0f818615ed41f2a872c1ef8f533160b46e6928976968ee9726bb637c16e9930fe9787b6bc95baa46c3f2949a44631c757e0e55ea61bddb3d4d68c793c641829e36b82ac4fe840f14cb49272168c20003b09dbd8fe5b14ab89f41be44d744066f4d69eb8d64b47d44ee4def5472945687f0a9f9d03859e4caa504596d14254f5cfd45c3aff8fb6dbce5875e3fdf47a4e734e408677b2c0574ee86565c594305563556e29156cfdebdaa6ddca33c162e7a07094f976a664d62c8538571714aad04caa21fb9335dba27b91a8ee8e1f35cf119caad904b9b178e9b3c2663bea0cd0e16869d009e494ab6f19b0677f62c0ccc79c0d006b72e8302b429d02991ae3ae2674e6b1bfd4d1cc0746388b278690a87b07dd0621e5fb0af70a5b50f1feb9d73d23c92a15fe831c3736e09e0727e38cb623c197400b4d129a94f6afe22f713a8f8ca73620a3b40faeb8c1416de96328f78f7579b24a24f47db75ca93552d7c02b5af0a70ffe1d338bacfe3d494385c19e58af699b824f3db1dc58d9dbfa1de326d26e104a3956539112f6c70e7c40d6890b5efefa10020b0341d3b94c226f13c0444994f9b60aadb506f5f30a1307591a022abbf95b7627820e088b43714b31e8937bc859d281f0c78d708197ab5d2f4a7ac1bb49b8cafe0126df25d9a34af9d1ad5563f00a79365e4dcc4625ef41d156b098f3320add4f00f446a8c06e4983cb9ab6bed9936f1cb580348ad5391d2740948db63e95e13ad7fe462dd57b62983882451ed1e1a4f4b1b483ec8f6045e899fbe1840660d0dcc6cf05b2b63260230768eff6e8fc5d530d5", 0x1000}], 0x4}}, {{&(0x7f00000020c0)=@un=@abs={0x1, 0x0, 0x4e20}, 0x80, &(0x7f0000002380)=[{&(0x7f0000002140)="11ff0c44dd164bc209cb041dc5b5e1eb6cdd4774d8ee78f9f41d4cfabd2747459161f5bff4636bb6ceb25fd101dc165d41c31043c27fd2b3a2d9c232b169624320bb", 0x42}, {&(0x7f00000021c0)="b115ecf95b3fa457c329a2d9c1d47f01e619491d0fb43675a89fc3fb8bb00f7413fb51c51034fa498d9ba3c88307f5df81f3c510d1451d3fca11d0396a5c14b00849946870acd1a53f1ce382223cd16c051b82ec3a391da6644b526c4e9be503fe6a7f5dece8a7a3345ea0450842d653e698ba", 0x73}, {&(0x7f0000002240)="b9f700959c1628010fc1a486cdc70ecd44d0b3a8424e36b59d8936a9eb8742acfc69c31375103cbeb78ab0c4ff677267515870f37cf14695b69d12c7895aa673dbdf8d53b0b404cf5e77b9c36720bf79c383673596bfe1612aa38dc6bc68bfdb24096228b327fe7fa75c09b1ec68fefebf78f6f3", 0x74}, {&(0x7f00000022c0)="d6f673c68c150539b082c914850f27b4261b7f0279be3fb7efa1c8e4f9db3a78569e91c3f8f161c4ef94d1d4c6de52e332d360d41fd31900e3496fd1c1854df224693467ef191752adf49b27c009c9aa87ab8b45bb04f47c422ce24c32a286295afd14d1b87eb2a4056ff7977b21281b72d83216e16cf24b6bdb4d1cf5eb75180d309c65778b5fe6a01fbb5653e7d8028ee0ff72f2109228f7ef6fcaf43d4932dd9d9c7085983aba6b6779", 0xab}], 0x4, &(0x7f00000023c0)=[@txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x8}}], 0x30}}], 0x4, 0x24040014) write$binfmt_script(r8, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r8, 0x3) 11.209289202s ago: executing program 0 (id=6679): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000400)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x1, 0x60, 0x0, 0x3f00, 0xc, 0x9, 0x0, 0x5, 0xc, 0x0}) 11.20875617s ago: executing program 7 (id=6680): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x18e) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r6 = dup(r5) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f00000002c0)=ANY=[@ANYBLOB="8200000000000000ff000040"]) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) 11.163988441s ago: executing program 6 (id=6681): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000340)={0x3c, @multicast2, 0x4e23, 0x3, 'dh\x00', 0x8, 0x81, 0x73}, 0x2c) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) modify_ldt$write(0x1, &(0x7f0000000040), 0x10) lsm_set_self_attr(0x69, 0x0, 0x42, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/netlink\x00') preadv(r7, &(0x7f0000001400)=[{&(0x7f00000002c0)=""/128, 0x80}], 0x1, 0xc002a0, 0x101) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) r10 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fedbdf251400000008000100010000000c000600010000000100"], 0x28}, 0x1, 0x0, 0x0, 0x8084}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x2880, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 9.681205101s ago: executing program 6 (id=6682): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = mq_open(&(0x7f0000000180)='@]!\x00', 0x842, 0x80, 0x0) mq_getsetattr(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000100)="b9ffddc1ddcccdde75537d5326a4dfff70bf2dfe443b1b5e2a9080f3", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x1, 0x10, 0xfa00, {&(0x7f00000000c0), r2}}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) open$dir(&(0x7f0000000080)='./file0\x00', 0x4080, 0x72) 9.659408427s ago: executing program 0 (id=6683): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_open_dev$sg(0x0, 0x0, 0x8002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = dup(r3) listen(r4, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x200008, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = socket$xdp(0x2c, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xa, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r6, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r8 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r5, 0x1, 0x53, &(0x7f0000000040)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f00000000c0)=0x2c) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000100)={0x9, "fa02c8098000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r9, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45bebe3f5b53e0ca3710c0000cdc67c5e3126628168", r9}) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) unshare(0x44000280) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000540)) lseek(r7, 0xa, 0x4) 9.554091517s ago: executing program 7 (id=6684): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000040)=@buf) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000000)={0x1}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = gettid() r5 = syz_open_procfs(r4, &(0x7f0000000040)='timerslack_ns\x00') read$msr(r5, &(0x7f0000000100)=""/108, 0x6c) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_delete(r0) 8.797793688s ago: executing program 6 (id=6685): r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x7, 0x5, 0x7fffffff}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)={0x20000006}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e20, 0x0, @private1, 0x85bad93}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000000c0)={r8, @in6={{0xa, 0x4e22, 0xf, @empty, 0x4}}, 0x9, 0x6, 0x0, 0x2, 0xce0206, 0xffffffe, 0x25}, 0x9c) epoll_pwait(r6, &(0x7f0000000100)=[{}], 0x1, 0x3, 0x0, 0x0) pipe2$9p(0x0, 0x80000) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 35 (id=6668): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000040)="b9800000c00f3235004000000f30b9fa0000000f01d9660f78c4020a1bf7b805000000b90000c0fe0f3cae0a41d941d90000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3166b857000f00d0", 0x54}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000400)=ANY=[]) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000eafffffff4000040"]) openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x1, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, 0x0, 0x10000) socket$inet_sctp(0x2, 0x1, 0x84) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r9, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="0a01000005af9e08d2106528c9a4000000010902120001000000000904"], 0x0) kernel console output (not intermixed with test programs): 5][T28622] bond8: (slave veth15): Enslaving as an active interface with a down link [ 2001.671445][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 2002.062812][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_h) [ 2002.168449][T28629] netlink: 68 bytes leftover after parsing attributes in process `syz.7.6196'. [ 2003.468015][T28627] misc userio: Invalid payload size [ 2003.502146][ T2336] pvrusb2: Attached sub-driver cx25840 [ 2003.507636][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2003.533277][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2003.547578][ T30] audit: type=1400 audit(2000002629.387:1420): avc: denied { bind } for pid=28626 comm="syz.0.6195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2003.943635][ T30] audit: type=1326 audit(2000002629.817:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28633 comm="syz.7.6197" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f31f5f8e9a9 code=0x0 [ 2004.566050][ T30] audit: type=1400 audit(2000002630.427:1422): avc: granted { setsecparam } for pid=28642 comm="syz.0.6200" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 2004.851983][T28648] netfs: Couldn't get user pages (rc=-14) [ 2004.918628][T28651] netfs: Couldn't get user pages (rc=-14) [ 2005.167650][ T30] audit: type=1400 audit(2000002630.937:1423): avc: denied { map } for pid=28652 comm="syz.6.6204" path="socket:[107232]" dev="sockfs" ino=107232 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2006.517140][T28670] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6208'. [ 2006.976964][T28674] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6209'. [ 2007.337740][T28678] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6211'. [ 2007.987635][T28692] lo speed is unknown, defaulting to 1000 [ 2008.054669][T28694] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6213'. [ 2008.821118][ T30] audit: type=1400 audit(2000002634.697:1424): avc: denied { map } for pid=28691 comm="syz.0.6215" path="socket:[107332]" dev="sockfs" ino=107332 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 2008.848703][ T30] audit: type=1400 audit(2000002634.727:1425): avc: granted { setsecparam } for pid=28695 comm="syz.2.6216" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 2011.221870][T28719] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6220'. [ 2011.397882][T28722] fuse: Bad value for 'group_id' [ 2011.407416][T28722] fuse: Bad value for 'group_id' [ 2011.484269][ T30] audit: type=1400 audit(2000002637.357:1426): avc: denied { bind } for pid=28715 comm="syz.6.6221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2011.581617][ T30] audit: type=1400 audit(2000002637.397:1427): avc: denied { setopt } for pid=28715 comm="syz.6.6221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2011.602312][ C0] vkms_vblank_simulate: vblank timer overrun [ 2011.721099][ T30] audit: type=1400 audit(2000002637.537:1428): avc: denied { getopt } for pid=28731 comm="syz.7.6225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2013.408597][T28734] lo speed is unknown, defaulting to 1000 [ 2013.985501][T28740] netlink: 204 bytes leftover after parsing attributes in process `syz.0.6226'. [ 2014.297534][ T30] audit: type=1400 audit(2000002640.167:1429): avc: denied { accept } for pid=28743 comm="syz.0.6227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 2015.243263][ T30] audit: type=1400 audit(2000002641.117:1430): avc: granted { setsecparam } for pid=28756 comm="syz.7.6230" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 2015.887466][T28764] netfs: Couldn't get user pages (rc=-14) [ 2016.844651][ T30] audit: type=1400 audit(2000002642.717:1431): avc: denied { read write } for pid=28774 comm="syz.6.6234" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 2017.655212][ T30] audit: type=1400 audit(2000002643.507:1432): avc: denied { read } for pid=28778 comm="syz.2.6237" name="sg0" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 2018.190036][T28784] netlink: 'syz.6.6238': attribute type 5 has an invalid length. [ 2018.669038][T28794] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2018.669038][T28794] program syz.2.6241 not setting count and/or reply_len properly [ 2019.615688][T28792] netfs: Couldn't get user pages (rc=-14) [ 2020.538674][T28801] FAULT_INJECTION: forcing a failure. [ 2020.538674][T28801] name failslab, interval 1, probability 0, space 0, times 0 [ 2020.552389][T28801] CPU: 0 UID: 0 PID: 28801 Comm: syz.7.6244 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 2020.552414][T28801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2020.552425][T28801] Call Trace: [ 2020.552430][T28801] [ 2020.552434][T28801] dump_stack_lvl+0x16c/0x1f0 [ 2020.552457][T28801] should_fail_ex+0x512/0x640 [ 2020.552477][T28801] should_failslab+0xc2/0x120 [ 2020.552488][T28801] __kmalloc_cache_noprof+0x6a/0x3e0 [ 2020.552503][T28801] ? __pfx_sctp_get_port_local+0x10/0x10 [ 2020.552515][T28801] ? sctp_bind_addr_match+0x193/0x300 [ 2020.552531][T28801] ? sctp_add_bind_addr+0xae/0x3f0 [ 2020.552549][T28801] sctp_add_bind_addr+0xae/0x3f0 [ 2020.552568][T28801] sctp_do_bind+0x2d6/0x700 [ 2020.552584][T28801] sctp_bindx_add+0x99/0x1e0 [ 2020.552600][T28801] sctp_setsockopt_bindx+0x242/0x290 [ 2020.552617][T28801] sctp_setsockopt+0x196b/0xb870 [ 2020.552631][T28801] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 2020.552648][T28801] ? __pfx_sctp_setsockopt+0x10/0x10 [ 2020.552665][T28801] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 2020.552680][T28801] ? sock_common_setsockopt+0x2e/0xf0 [ 2020.552691][T28801] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 2020.552705][T28801] do_sock_setsockopt+0xf3/0x1d0 [ 2020.552720][T28801] __sys_setsockopt+0x1a0/0x230 [ 2020.552739][T28801] __x64_sys_setsockopt+0xbd/0x160 [ 2020.552755][T28801] ? do_syscall_64+0x91/0x4c0 [ 2020.552765][T28801] ? lockdep_hardirqs_on+0x7c/0x110 [ 2020.552782][T28801] do_syscall_64+0xcd/0x4c0 [ 2020.552793][T28801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2020.552804][T28801] RIP: 0033:0x7f31f5f8e9a9 [ 2020.552814][T28801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2020.552825][T28801] RSP: 002b:00007f31f6d88038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2020.552836][T28801] RAX: ffffffffffffffda RBX: 00007f31f61b6080 RCX: 00007f31f5f8e9a9 [ 2020.552843][T28801] RDX: 0000000000000064 RSI: 0000000000000084 RDI: 0000000000000007 [ 2020.552849][T28801] RBP: 00007f31f6d88090 R08: 0000000000000020 R09: 0000000000000000 [ 2020.552856][T28801] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2020.552862][T28801] R13: 0000000000000000 R14: 00007f31f61b6080 R15: 00007ffd82d0c5f8 [ 2020.552876][T28801] [ 2020.777437][ C0] vkms_vblank_simulate: vblank timer overrun [ 2021.335343][T28807] netfs: Couldn't get user pages (rc=-14) [ 2021.714647][ T30] audit: type=1400 audit(2000002647.587:1433): avc: denied { append } for pid=28811 comm="syz.2.6248" name="nbd2" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2023.063139][T28826] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6250'. [ 2023.541246][T28828] lo speed is unknown, defaulting to 1000 [ 2023.552564][T28823] xt_ecn: cannot match TCP bits for non-tcp packets [ 2024.206010][T28835] x_tables: duplicate underflow at hook 1 [ 2024.859208][ T30] audit: type=1400 audit(2000002650.727:1434): avc: denied { create } for pid=28838 comm="syz.2.6255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 2024.874886][T28836] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2024.874886][T28836] program syz.6.6254 not setting count and/or reply_len properly [ 2024.963233][T28839] lo speed is unknown, defaulting to 1000 [ 2026.183128][T23003] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2026.194270][T23003] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2026.203866][T23003] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2026.338592][T23003] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2026.348385][T23003] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2026.431053][ T30] audit: type=1400 audit(2000002652.237:1435): avc: denied { mounton } for pid=28845 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 2026.621590][T11651] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2026.761839][T11651] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2026.893222][T11651] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2026.903673][T11651] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2026.997711][T11651] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2027.017473][T28858] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6258'. [ 2027.026471][T28858] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6258'. [ 2027.038381][T11651] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2027.235706][T28845] lo speed is unknown, defaulting to 1000 [ 2027.317708][T11651] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2027.338664][T11651] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2028.415059][T28861] lo speed is unknown, defaulting to 1000 [ 2028.479870][T28866] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=28866 comm=syz.5.6260 [ 2028.728846][T28872] netlink: 'syz.7.6262': attribute type 1 has an invalid length. [ 2028.900875][T23003] Bluetooth: hci0: command tx timeout [ 2029.035262][T28877] netlink: 44 bytes leftover after parsing attributes in process `syz.7.6262'. [ 2029.689679][T28872] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2030.231488][T28873] bond1: (slave veth3): Enslaving as an active interface with a down link [ 2030.277018][T11651] bridge_slave_1: left allmulticast mode [ 2030.289487][T11651] bridge_slave_1: left promiscuous mode [ 2030.299696][T11651] bridge0: port 2(bridge_slave_1) entered disabled state [ 2030.323742][T11651] bridge_slave_0: left allmulticast mode [ 2030.331384][T11651] bridge_slave_0: left promiscuous mode [ 2030.349860][T11651] bridge0: port 1(bridge_slave_0) entered disabled state [ 2030.692768][ T30] audit: type=1400 audit(2000002656.567:1436): avc: denied { read append } for pid=28885 comm="syz.2.6265" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 2030.723211][ T30] audit: type=1400 audit(2000002656.567:1437): avc: denied { open } for pid=28885 comm="syz.2.6265" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 2030.758183][T28886] 9pnet_fd: Insufficient options for proto=fd [ 2030.939135][T11651] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2030.958170][T11651] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2030.969413][T23003] Bluetooth: hci0: command tx timeout [ 2030.976583][T28889] netlink: 'syz.2.6266': attribute type 1 has an invalid length. [ 2030.977655][T11651] bond0 (unregistering): Released all slaves [ 2031.320753][T28897] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6266'. [ 2032.318706][T28898] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6267'. [ 2032.502222][T11651] bond1 (unregistering): (slave veth3): Releasing active interface [ 2032.510361][T11651] vlan2: entered promiscuous mode [ 2032.523964][T11651] bond1 (unregistering): (slave vlan2): Releasing active interface [ 2032.534172][T11651] bond1 (unregistering): Released all slaves [ 2032.669400][ T10] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 2032.680117][T11651] bond2 (unregistering): (slave veth5): Releasing active interface [ 2032.689785][T11651] bond2 (unregistering): Released all slaves [ 2032.804298][T11651] bond3 (unregistering): (slave veth7): Releasing active interface [ 2032.813312][T11651] bond3 (unregistering): Released all slaves [ 2032.819446][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 2032.852866][ T10] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2032.864147][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2032.893824][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2032.901018][ T10] pvrusb2: ********** [ 2032.905015][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2032.915169][ T10] pvrusb2: Important functionality might not be entirely working. [ 2032.923719][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2032.935121][ T10] pvrusb2: ********** [ 2032.990152][T11651] bond4 (unregistering): Released all slaves [ 2033.043315][T23003] Bluetooth: hci0: command tx timeout [ 2033.126827][T28891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2033.135457][T28891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2033.150085][T11651] bond5 (unregistering): (slave veth9): Releasing active interface [ 2033.159188][T11651] bond5 (unregistering): Released all slaves [ 2033.275816][T28889] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 2033.332465][ T2336] pvrusb2: Invalid write control endpoint [ 2033.348557][ T10] usb 6-1: USB disconnect, device number 48 [ 2033.354780][T11651] tipc: Left network mode [ 2033.451868][ T2336] pvrusb2: Invalid write control endpoint [ 2033.457630][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2033.597140][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2033.636379][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2034.213276][ T2336] pvrusb2: Device being rendered inoperable [ 2034.219337][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 2034.226394][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_h) [ 2034.236774][ T2336] pvrusb2: Attached sub-driver cx25840 [ 2034.256127][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2034.392257][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2034.678971][T28928] netlink: 'syz.2.6273': attribute type 1 has an invalid length. [ 2034.931273][T28928] 8021q: adding VLAN 0 to HW filter on device bond9 [ 2034.958945][T28930] bond9: (slave veth17): Enslaving as an active interface with a down link [ 2035.054120][T28930] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6273'. [ 2035.130069][T23003] Bluetooth: hci0: command tx timeout [ 2037.075633][T28934] loop6: detected capacity change from 0 to 524287999 [ 2037.100429][ T30] audit: type=1400 audit(2000002662.967:1438): avc: denied { map } for pid=28933 comm="syz.5.6274" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2037.222198][ T30] audit: type=1400 audit(2000002662.967:1439): avc: denied { execute } for pid=28933 comm="syz.5.6274" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2037.246174][T28845] chnl_net:caif_netlink_parms(): no params data found [ 2037.666942][ T30] audit: type=1400 audit(2000002663.467:1440): avc: denied { bind } for pid=28937 comm="syz.2.6276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 2038.239564][ T30] audit: type=1326 audit(2000002663.467:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28937 comm="syz.2.6276" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc3718e9a9 code=0x0 [ 2038.281711][T28946] overlay: Unknown parameter 'fsname' [ 2038.511014][T28951] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=28951 comm=syz.6.6277 [ 2038.822145][ T30] audit: type=1400 audit(2000002664.687:1442): avc: denied { read } for pid=28935 comm="syz.5.6275" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 2038.881571][ T30] audit: type=1400 audit(2000002664.687:1443): avc: denied { open } for pid=28935 comm="syz.5.6275" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 2039.019527][ T30] audit: type=1400 audit(2000002664.777:1444): avc: denied { ioctl } for pid=28935 comm="syz.5.6275" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 2039.445410][T28965] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6281'. [ 2039.672711][T11651] hsr_slave_0: left promiscuous mode [ 2039.711381][T11651] hsr_slave_1: left promiscuous mode [ 2039.840015][T11651] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2039.959852][T11651] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2039.997943][T11651] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2040.022103][T11651] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2040.091197][T11651] veth1_macvtap: left promiscuous mode [ 2040.096953][T11651] veth0_macvtap: left promiscuous mode [ 2040.103303][T28977] netlink: 'syz.6.6282': attribute type 9 has an invalid length. [ 2040.111647][T11651] veth1_vlan: left promiscuous mode [ 2040.116891][T11651] veth0_vlan: left promiscuous mode [ 2040.119842][T28978] netlink: 'syz.6.6282': attribute type 9 has an invalid length. [ 2040.540711][T28987] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6284'. [ 2040.550415][T11651] pim6reg (unregistering): left allmulticast mode [ 2040.702377][ T30] audit: type=1326 audit(2000002666.577:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28988 comm="syz.2.6286" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc3718e9a9 code=0x0 [ 2041.525668][ T2967] smc: removing ib device syz2 [ 2041.748495][T28998] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 2042.967421][T29008] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6289'. [ 2043.076951][T29004] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6289'. [ 2043.090623][T28845] bridge0: port 1(bridge_slave_0) entered blocking state [ 2043.097813][T28845] bridge0: port 1(bridge_slave_0) entered disabled state [ 2043.105208][T28845] bridge_slave_0: entered allmulticast mode [ 2043.113078][T28845] bridge_slave_0: entered promiscuous mode [ 2043.131135][T28845] bridge0: port 2(bridge_slave_1) entered blocking state [ 2043.144372][T28845] bridge0: port 2(bridge_slave_1) entered disabled state [ 2043.154399][T28845] bridge_slave_1: entered allmulticast mode [ 2043.161123][T28845] bridge_slave_1: entered promiscuous mode [ 2043.167562][T28977] team_slave_0: entered promiscuous mode [ 2043.173595][T28977] team_slave_1: entered promiscuous mode [ 2043.184225][T13519] syz2: Port: 1 Link DOWN [ 2043.338693][T28845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2043.407847][ T1207] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 2043.626347][T28845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2043.888324][ T1207] usb 3-1: Using ep0 maxpacket: 8 [ 2044.010807][ T1207] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2044.050068][ T1207] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2044.141366][T29024] netlink: 'syz.5.6294': attribute type 5 has an invalid length. [ 2044.199945][T28845] team0: Port device team_slave_0 added [ 2044.208292][T28845] team0: Port device team_slave_1 added [ 2044.225255][ T1207] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2044.277920][ T1207] pvrusb2: ********** [ 2044.313839][ T1207] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2044.509378][ T1207] pvrusb2: Important functionality might not be entirely working. [ 2044.517830][ T1207] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2044.534688][T29004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2044.544277][T29004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2044.584997][ T1207] pvrusb2: ********** [ 2044.595776][ T2336] pvrusb2: Invalid write control endpoint [ 2044.597793][ T1207] usb 3-1: USB disconnect, device number 15 [ 2045.008993][T29029] QAT: failed to copy from user cfg_data. [ 2045.608516][T28845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2045.651213][T28845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2046.007649][ T2336] pvrusb2: Invalid write control endpoint [ 2046.157804][T29036] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 2046.311559][T28845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2046.323258][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2046.379257][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2046.399043][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2046.410746][ T2336] pvrusb2: Device being rendered inoperable [ 2046.418747][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 2046.426240][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_h) [ 2046.455583][T28845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2046.494513][T28845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2046.520512][ C0] vkms_vblank_simulate: vblank timer overrun [ 2046.649669][ T2336] pvrusb2: Attached sub-driver cx25840 [ 2046.655622][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2046.668021][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2047.131360][T28845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2047.146744][T29041] veth1_macvtap: left promiscuous mode [ 2047.152368][T29041] macsec0: entered promiscuous mode [ 2047.157559][T29041] macsec0: entered allmulticast mode [ 2047.164414][T29042] veth1_macvtap: entered promiscuous mode [ 2047.170471][T29042] veth1_macvtap: entered allmulticast mode [ 2047.176412][T29042] macsec0: left promiscuous mode [ 2047.181598][T29042] macsec0: left allmulticast mode [ 2047.186617][T29042] veth1_macvtap: left allmulticast mode [ 2047.203300][ T30] audit: type=1400 audit(2000002672.707:1446): avc: denied { bind } for pid=29037 comm="syz.2.6298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2047.248146][ T30] audit: type=1400 audit(2000002672.717:1447): avc: denied { setopt } for pid=29037 comm="syz.2.6298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2047.327047][T29044] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:0 [ 2047.631161][T29048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2048.303944][ T30] audit: type=1400 audit(2000002673.887:1448): avc: denied { shutdown } for pid=29045 comm="syz.6.6300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2048.325118][ T30] audit: type=1400 audit(2000002673.887:1449): avc: denied { read } for pid=29045 comm="syz.6.6300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2048.428131][T29054] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6301'. [ 2048.923317][T28845] hsr_slave_0: entered promiscuous mode [ 2049.051068][T28845] hsr_slave_1: entered promiscuous mode [ 2049.195175][ T30] audit: type=1400 audit(2000002674.987:1450): avc: granted { setsecparam } for pid=29059 comm="syz.5.6305" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 2049.612987][ T30] audit: type=1400 audit(2000002675.487:1451): avc: denied { setopt } for pid=29066 comm="syz.7.6307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2050.199732][ T30] audit: type=1400 audit(2000002675.517:1452): avc: denied { bind } for pid=29066 comm="syz.7.6307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2050.439568][T13547] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 2050.599642][T13547] usb 3-1: Using ep0 maxpacket: 8 [ 2050.616443][T13547] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 2050.770364][T13547] usb 3-1: config 0 has no interface number 0 [ 2050.777026][T13547] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2050.788163][T29080] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6310'. [ 2050.829401][T13547] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2050.850856][T13547] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2050.896596][T13547] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2050.928956][T13547] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2050.952089][T13547] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2051.009546][T13547] usb 3-1: config 0 descriptor?? [ 2051.027020][T13547] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2051.177786][T29093] FAULT_INJECTION: forcing a failure. [ 2051.177786][T29093] name failslab, interval 1, probability 0, space 0, times 0 [ 2051.225312][T29072] random: crng reseeded on system resumption [ 2051.369229][T29093] CPU: 1 UID: 0 PID: 29093 Comm: syz.7.6314 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 2051.369257][T29093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2051.369268][T29093] Call Trace: [ 2051.369278][T29093] [ 2051.369285][T29093] dump_stack_lvl+0x16c/0x1f0 [ 2051.369318][T29093] should_fail_ex+0x512/0x640 [ 2051.369346][T29093] ? __kmalloc_noprof+0xbf/0x510 [ 2051.369372][T29093] ? ip_options_get+0xad/0x4d0 [ 2051.369390][T29093] should_failslab+0xc2/0x120 [ 2051.369406][T29093] __kmalloc_noprof+0xd2/0x510 [ 2051.369431][T29093] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 2051.369457][T29093] ip_options_get+0xad/0x4d0 [ 2051.369473][T29093] ? is_bpf_text_address+0x94/0x1a0 [ 2051.369496][T29093] ? __pfx_ip_options_get+0x10/0x10 [ 2051.369514][T29093] ? snprintf+0xc7/0x100 [ 2051.369537][T29093] ip_cmsg_send+0x94c/0xb90 [ 2051.369556][T29093] raw_sendmsg+0x8bd/0x3820 [ 2051.369579][T29093] ? avc_has_perm_noaudit+0x117/0x3b0 [ 2051.369600][T29093] ? __pfx_raw_sendmsg+0x10/0x10 [ 2051.369632][T29093] ? avc_has_perm+0x11a/0x1c0 [ 2051.369663][T29093] ? sock_has_perm+0x259/0x2f0 [ 2051.369698][T29093] ? __pfx_raw_sendmsg+0x10/0x10 [ 2051.369715][T29093] inet_sendmsg+0x119/0x140 [ 2051.369732][T29093] ____sys_sendmsg+0x973/0xc70 [ 2051.369748][T29093] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2051.369775][T29093] ___sys_sendmsg+0x134/0x1d0 [ 2051.369823][T29093] ? __pfx____sys_sendmsg+0x10/0x10 [ 2051.369846][T29093] ? __lock_acquire+0x622/0x1c90 [ 2051.369889][T29093] __sys_sendmsg+0x16d/0x220 [ 2051.369899][T29093] ? __pfx___sys_sendmsg+0x10/0x10 [ 2051.369919][T29093] do_syscall_64+0xcd/0x4c0 [ 2051.369930][T29093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2051.369942][T29093] RIP: 0033:0x7f31f5f8e9a9 [ 2051.369957][T29093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2051.369974][T29093] RSP: 002b:00007f31f6da9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2051.369992][T29093] RAX: ffffffffffffffda RBX: 00007f31f61b5fa0 RCX: 00007f31f5f8e9a9 [ 2051.370003][T29093] RDX: 0000000020001850 RSI: 00002000000000c0 RDI: 0000000000000003 [ 2051.370014][T29093] RBP: 00007f31f6da9090 R08: 0000000000000000 R09: 0000000000000000 [ 2051.370024][T29093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2051.370034][T29093] R13: 0000000000000000 R14: 00007f31f61b5fa0 R15: 00007ffd82d0c5f8 [ 2051.370057][T29093] [ 2051.861490][ T1207] usb 3-1: USB disconnect, device number 16 [ 2051.890026][ T1207] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 2052.338161][T28845] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2052.368704][T28845] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2052.381568][T28845] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2053.524457][ T30] audit: type=1400 audit(2000002678.327:1453): avc: denied { listen } for pid=29102 comm="syz.7.6317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 2054.300307][T28845] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2054.420832][T29106] infiniband syz2: set active [ 2054.425592][T29106] infiniband syz2: added bridge_slave_0 [ 2054.431908][T29106] syz2: rxe_create_cq: returned err = -12 [ 2054.437865][T29106] infiniband syz2: Couldn't create ib_mad CQ [ 2054.443974][T29106] infiniband syz2: Couldn't open port 1 [ 2054.459523][T29106] RDS/IB: syz2: added [ 2054.463533][T29106] smc: adding ib device syz2 with port count 1 [ 2054.469750][T29106] smc: ib device syz2 port 1 has pnetid [ 2055.055983][T29112] lo speed is unknown, defaulting to 1000 [ 2055.175017][ T30] audit: type=1326 audit(2000002681.047:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29125 comm="syz.2.6321" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc3718e9a9 code=0x0 [ 2055.239618][T28845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2055.291684][T28845] 8021q: adding VLAN 0 to HW filter on device team0 [ 2055.335478][T11671] bridge0: port 1(bridge_slave_0) entered blocking state [ 2055.342612][T11671] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2055.385775][T28101] bridge0: port 2(bridge_slave_1) entered blocking state [ 2055.392893][T28101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2055.666106][T28845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2055.709309][T28845] veth0_vlan: entered promiscuous mode [ 2055.723393][T28845] veth1_vlan: entered promiscuous mode [ 2055.768137][T28845] veth0_macvtap: entered promiscuous mode [ 2055.799082][T28845] veth1_macvtap: entered promiscuous mode [ 2055.827556][T28845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2055.855668][T28845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2055.882771][T28845] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2055.893517][T28845] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2055.903419][T28845] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2055.913536][T28845] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2056.072413][ T2967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2056.114149][ T2967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2056.268933][T28101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2056.277724][T28101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2056.299041][ T30] audit: type=1400 audit(2000002682.167:1455): avc: denied { mounton } for pid=28845 comm="syz-executor" path="/root/syzkaller.jydMz7/syz-tmp" dev="sda1" ino=2063 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 2056.774144][ T30] audit: type=1400 audit(2000002682.197:1456): avc: denied { mounton } for pid=28845 comm="syz-executor" path="/root/syzkaller.jydMz7/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 2056.802282][ T30] audit: type=1400 audit(2000002682.197:1457): avc: denied { mounton } for pid=28845 comm="syz-executor" path="/root/syzkaller.jydMz7/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=110627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 2056.894990][T29146] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 2056.918836][ T30] audit: type=1400 audit(2000002682.677:1458): avc: denied { mounton } for pid=28845 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2788 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 2056.980820][ T30] audit: type=1400 audit(2000002682.677:1459): avc: denied { mount } for pid=28845 comm="syz-executor" name="/" dev="gadgetfs" ino=6803 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 2057.513347][T29155] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=29155 comm=syz.0.6327 [ 2058.675535][T29166] lo speed is unknown, defaulting to 1000 [ 2059.452880][ C1] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 2060.067873][T29171] QAT: failed to copy from user cfg_data. [ 2060.451141][ T30] audit: type=1400 audit(2000002686.327:1460): avc: denied { write } for pid=29170 comm="syz.0.6333" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 2060.451829][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2060.533054][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2060.548408][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2060.588650][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2060.599097][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2060.651623][ T30] audit: type=1326 audit(2000002686.527:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29177 comm="syz.7.6334" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f31f5f8e9a9 code=0x0 [ 2060.756406][ T2967] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2060.789484][ T2967] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2060.848239][T29173] lo speed is unknown, defaulting to 1000 [ 2060.923451][ T2967] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2060.928671][ T30] audit: type=1326 audit(2000002686.797:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29183 comm="syz.6.6336" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff85958e9a9 code=0x0 [ 2060.947395][ T2967] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2061.193302][ T2967] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2061.218492][ T2967] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2061.352790][ T2967] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2061.373901][ T2967] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2061.482464][T29173] chnl_net:caif_netlink_parms(): no params data found [ 2061.550660][T29195] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6337'. [ 2062.118101][ T30] audit: type=1400 audit(2000002687.987:1463): avc: denied { mounton } for pid=29198 comm="syz.6.6340" path="/proc/974/cgroup" dev="proc" ino=109755 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 2062.379437][T21087] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 2062.429675][T29208] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=29208 comm=syz.0.6341 [ 2062.549515][T21087] usb 7-1: Using ep0 maxpacket: 32 [ 2062.581438][T21087] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2062.587226][ T5832] Bluetooth: hci1: unexpected event for opcode 0x100c [ 2062.610828][T21087] usb 7-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 2062.611725][ T30] audit: type=1400 audit(2000002688.457:1464): avc: denied { name_connect } for pid=29207 comm="syz.5.6342" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 2062.641112][ T5832] Bluetooth: hci2: command tx timeout [ 2062.647910][ T30] audit: type=1400 audit(2000002688.457:1465): avc: denied { getopt } for pid=29207 comm="syz.5.6342" lport=54050 faddr=::ffff:100.1.1.2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 2062.648234][T29209] netlink: 'syz.5.6342': attribute type 1 has an invalid length. [ 2062.682592][T29173] bridge0: port 1(bridge_slave_0) entered blocking state [ 2062.683756][T21087] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2062.690491][T29173] bridge0: port 1(bridge_slave_0) entered disabled state [ 2062.704960][T29173] bridge_slave_0: entered allmulticast mode [ 2062.712289][T29173] bridge_slave_0: entered promiscuous mode [ 2062.714461][T21087] usb 7-1: config 0 descriptor?? [ 2062.720696][T29209] netlink: 184 bytes leftover after parsing attributes in process `syz.5.6342'. [ 2062.733045][T29173] bridge0: port 2(bridge_slave_1) entered blocking state [ 2062.740238][T29173] bridge0: port 2(bridge_slave_1) entered disabled state [ 2062.747506][T29173] bridge_slave_1: entered allmulticast mode [ 2062.754880][T29173] bridge_slave_1: entered promiscuous mode [ 2062.760785][T29209] netlink: 'syz.5.6342': attribute type 1 has an invalid length. [ 2062.925569][T29173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2064.238139][T29173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2064.382954][T29173] team0: Port device team_slave_0 added [ 2064.393762][T29223] lo speed is unknown, defaulting to 1000 [ 2064.434482][T21087] chicony 0003:04F2:1421.003F: hidraw0: USB HID v1.01 Device [HID 04f2:1421] on usb-dummy_hcd.6-1/input0 [ 2064.486663][T29173] team0: Port device team_slave_1 added [ 2064.720988][ T5832] Bluetooth: hci2: command tx timeout [ 2064.929623][T29200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2064.938243][T29200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2064.967776][ T2967] bridge_slave_1: left allmulticast mode [ 2065.844162][ T2967] bridge_slave_1: left promiscuous mode [ 2065.880596][ T2967] bridge0: port 2(bridge_slave_1) entered disabled state [ 2066.014215][T29234] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 2066.193569][ T2967] bridge_slave_0: left allmulticast mode [ 2066.199231][ T2967] bridge_slave_0: left promiscuous mode [ 2066.215131][ T2967] bridge0: port 1(bridge_slave_0) entered disabled state [ 2066.289346][ T30] audit: type=1326 audit(2000002692.157:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29235 comm="syz.5.6349" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f377518e9a9 code=0x0 [ 2066.317408][T21087] usb 7-1: USB disconnect, device number 35 [ 2066.853238][ T2967] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2066.863382][ T2967] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2066.882256][ T5832] Bluetooth: hci2: command tx timeout [ 2066.892963][ T2967] bond0 (unregistering): Released all slaves [ 2067.229231][ T30] audit: type=1400 audit(2000002693.107:1467): avc: denied { setopt } for pid=29244 comm="syz.5.6351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 2067.405185][T29240] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6350'. [ 2067.442255][ T2967] bond1 (unregistering): (slave vlan2): Releasing active interface [ 2067.453014][ T2967] bond1 (unregistering): Released all slaves [ 2067.576234][ T2967] bond2 (unregistering): Released all slaves [ 2067.699396][T21087] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 2067.707680][ T2967] bond3 (unregistering): (slave veth3): Releasing active interface [ 2067.718019][ T2967] bond3 (unregistering): Released all slaves [ 2067.838413][ T2967] bond4 (unregistering): (slave veth5): Releasing active interface [ 2067.847428][ T2967] bond4 (unregistering): Released all slaves [ 2067.853511][T21087] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2067.853539][T21087] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2067.871793][T21087] usb 7-1: config 0 descriptor?? [ 2068.009479][ T2967] bond5 (unregistering): (slave veth7): Releasing active interface [ 2068.018865][ T2967] bond5 (unregistering): Released all slaves [ 2068.151284][ T2967] bond6 (unregistering): (slave veth9): Releasing active interface [ 2068.161798][ T2967] bond6 (unregistering): Released all slaves [ 2068.284573][ T2967] bond7 (unregistering): (slave veth13): Releasing active interface [ 2068.293946][ T2967] bond7 (unregistering): Released all slaves [ 2068.419233][ T2967] bond8 (unregistering): (slave veth15): Releasing active interface [ 2068.429963][ T2967] bond8 (unregistering): Released all slaves [ 2068.554173][ T2967] bond9 (unregistering): (slave veth17): Releasing active interface [ 2068.564043][ T2967] bond9 (unregistering): Released all slaves [ 2068.576719][T29173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2068.583936][T29173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2068.611145][T29173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2068.627832][T29173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2068.635021][T29173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2068.669832][T29173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2068.723984][T29243] dvmrp17: left allmulticast mode [ 2068.801494][ T2967] : left promiscuous mode [ 2068.823090][T21087] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 2068.831068][T21087] [drm:udl_init] *ERROR* Selecting channel failed [ 2068.855433][T21087] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 2068.887225][T21087] [drm] Initialized udl on minor 2 [ 2068.904389][T21087] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2068.916546][T21087] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 2068.928347][ T1207] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2068.937639][ T2967] tipc: Left network mode [ 2068.945364][T21087] usb 7-1: USB disconnect, device number 36 [ 2068.951430][ T1207] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 2068.963612][ T5832] Bluetooth: hci2: command tx timeout [ 2068.980517][T29173] hsr_slave_0: entered promiscuous mode [ 2068.987276][T29173] hsr_slave_1: entered promiscuous mode [ 2069.001867][T29173] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2069.010027][T29173] Cannot create hsr debugfs directory [ 2069.017006][T29245] sysfs: cannot create duplicate filename '/class/ieee80211/!å' [ 2069.027582][T29245] CPU: 1 UID: 0 PID: 29245 Comm: syz.5.6351 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 2069.027600][T29245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2069.027608][T29245] Call Trace: [ 2069.027612][T29245] [ 2069.027617][T29245] dump_stack_lvl+0x16c/0x1f0 [ 2069.027641][T29245] sysfs_warn_dup+0x7f/0xa0 [ 2069.027661][T29245] sysfs_do_create_link_sd+0x124/0x140 [ 2069.027673][T29245] sysfs_create_link+0x61/0xc0 [ 2069.027684][T29245] device_add+0x62c/0x1a70 [ 2069.027701][T29245] ? __pfx_device_add+0x10/0x10 [ 2069.027714][T29245] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2069.027728][T29245] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 2069.027744][T29245] wiphy_register+0x1c9c/0x2850 [ 2069.027758][T29245] ? netdev_run_todo+0x864/0x1320 [ 2069.027770][T29245] ? __dev_printk+0x270/0x270 [ 2069.027789][T29245] ? __pfx_wiphy_register+0x10/0x10 [ 2069.027810][T29245] ieee80211_register_hw+0x24ac/0x4140 [ 2069.027829][T29245] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 2069.027844][T29245] ? find_held_lock+0x2b/0x80 [ 2069.027859][T29245] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2069.027872][T29245] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 2069.027888][T29245] ? __hrtimer_setup+0x176/0x280 [ 2069.027901][T29245] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 2069.027934][T29245] ? trace_kmalloc+0x2b/0xd0 [ 2069.027947][T29245] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 2069.027967][T29245] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 2069.027985][T29245] ? hwsim_new_radio_nl+0xa0e/0x12c0 [ 2069.028004][T29245] ? __asan_memcpy+0x3c/0x60 [ 2069.028022][T29245] hwsim_new_radio_nl+0xb51/0x12c0 [ 2069.028041][T29245] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2069.028063][T29245] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 2069.028079][T29245] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 2069.028098][T29245] genl_family_rcv_msg_doit+0x206/0x2f0 [ 2069.028114][T29245] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2069.028133][T29245] ? bpf_lsm_capable+0x9/0x10 [ 2069.028147][T29245] ? security_capable+0x7e/0x260 [ 2069.028162][T29245] ? ns_capable+0xd7/0x110 [ 2069.028176][T29245] genl_rcv_msg+0x55c/0x800 [ 2069.028193][T29245] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2069.028208][T29245] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2069.028227][T29245] ? __lock_acquire+0x622/0x1c90 [ 2069.028239][T29245] netlink_rcv_skb+0x155/0x420 [ 2069.028252][T29245] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2069.028267][T29245] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2069.028285][T29245] ? netlink_deliver_tap+0x1ae/0xd30 [ 2069.028296][T29245] ? is_vmalloc_addr+0x86/0xa0 [ 2069.028314][T29245] genl_rcv+0x28/0x40 [ 2069.028326][T29245] netlink_unicast+0x58d/0x850 [ 2069.028341][T29245] ? __pfx_netlink_unicast+0x10/0x10 [ 2069.028358][T29245] netlink_sendmsg+0x8d1/0xdd0 [ 2069.028373][T29245] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2069.028391][T29245] ____sys_sendmsg+0xa95/0xc70 [ 2069.028406][T29245] ? copy_msghdr_from_user+0x10a/0x160 [ 2069.028423][T29245] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2069.028440][T29245] ? __pfx_futex_wake_mark+0x10/0x10 [ 2069.028454][T29245] ___sys_sendmsg+0x134/0x1d0 [ 2069.028473][T29245] ? __pfx____sys_sendmsg+0x10/0x10 [ 2069.028489][T29245] ? __lock_acquire+0x622/0x1c90 [ 2069.028516][T29245] __sys_sendmsg+0x16d/0x220 [ 2069.028527][T29245] ? __pfx___sys_sendmsg+0x10/0x10 [ 2069.028537][T29245] ? __x64_sys_futex+0x1e0/0x4c0 [ 2069.028561][T29245] do_syscall_64+0xcd/0x4c0 [ 2069.028574][T29245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2069.028585][T29245] RIP: 0033:0x7f377518e9a9 [ 2069.028595][T29245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2069.028607][T29245] RSP: 002b:00007f3775f74038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2069.028619][T29245] RAX: ffffffffffffffda RBX: 00007f37753b5fa0 RCX: 00007f377518e9a9 [ 2069.028626][T29245] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 2069.028633][T29245] RBP: 00007f3775210d69 R08: 0000000000000000 R09: 0000000000000000 [ 2069.028639][T29245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2069.028646][T29245] R13: 0000000000000000 R14: 00007f37753b5fa0 R15: 00007ffeddb651d8 [ 2069.028661][T29245] [ 2069.607594][T29251] FAULT_INJECTION: forcing a failure. [ 2069.607594][T29251] name failslab, interval 1, probability 0, space 0, times 0 [ 2069.620455][T29251] CPU: 0 UID: 0 PID: 29251 Comm: syz.5.6352 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 2069.620478][T29251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2069.620488][T29251] Call Trace: [ 2069.620493][T29251] [ 2069.620497][T29251] dump_stack_lvl+0x16c/0x1f0 [ 2069.620519][T29251] should_fail_ex+0x512/0x640 [ 2069.620539][T29251] should_failslab+0xc2/0x120 [ 2069.620550][T29251] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 2069.620568][T29251] ? skb_clone+0x190/0x3f0 [ 2069.620581][T29251] skb_clone+0x190/0x3f0 [ 2069.620591][T29251] netlink_deliver_tap+0xabd/0xd30 [ 2069.620607][T29251] netlink_unicast+0x62f/0x850 [ 2069.620622][T29251] ? __pfx_netlink_unicast+0x10/0x10 [ 2069.620639][T29251] netlink_sendmsg+0x8d1/0xdd0 [ 2069.620654][T29251] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2069.620671][T29251] ____sys_sendmsg+0xa95/0xc70 [ 2069.620685][T29251] ? copy_msghdr_from_user+0x10a/0x160 [ 2069.620703][T29251] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2069.620722][T29251] ___sys_sendmsg+0x134/0x1d0 [ 2069.620741][T29251] ? __pfx____sys_sendmsg+0x10/0x10 [ 2069.620756][T29251] ? __lock_acquire+0x622/0x1c90 [ 2069.620784][T29251] __sys_sendmsg+0x16d/0x220 [ 2069.620794][T29251] ? __pfx___sys_sendmsg+0x10/0x10 [ 2069.620804][T29251] ? __pfx___schedule+0x10/0x10 [ 2069.620829][T29251] do_syscall_64+0xcd/0x4c0 [ 2069.620846][T29251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2069.620858][T29251] RIP: 0033:0x7f377518e9a9 [ 2069.620868][T29251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2069.620879][T29251] RSP: 002b:00007f3775f53038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2069.620890][T29251] RAX: ffffffffffffffda RBX: 00007f37753b6080 RCX: 00007f377518e9a9 [ 2069.620897][T29251] RDX: 0000000000000000 RSI: 00002000000037c0 RDI: 0000000000000009 [ 2069.620903][T29251] RBP: 00007f3775f53090 R08: 0000000000000000 R09: 0000000000000000 [ 2069.620910][T29251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2069.620916][T29251] R13: 0000000000000000 R14: 00007f37753b6080 R15: 00007ffeddb651d8 [ 2069.620936][T29251] [ 2069.838513][ C0] vkms_vblank_simulate: vblank timer overrun [ 2069.860381][ T30] audit: type=1400 audit(2000002695.467:1468): avc: denied { open } for pid=29249 comm="syz.5.6352" path="/dev/ptyqf" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 2070.183378][ T10] IPVS: starting estimator thread 0... [ 2070.309448][T29254] IPVS: using max 37 ests per chain, 88800 per kthread [ 2071.160935][T29263] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6355'. [ 2071.391410][T29272] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 2071.958510][ T2967] hsr_slave_0: left promiscuous mode [ 2071.974175][ T2967] hsr_slave_1: left promiscuous mode [ 2072.012001][ T2967] veth1_macvtap: left promiscuous mode [ 2072.022123][ T2967] veth0_macvtap: left promiscuous mode [ 2072.039552][ T2967] veth1_vlan: left promiscuous mode [ 2072.055243][ T2967] veth0_vlan: left promiscuous mode [ 2072.160667][ T30] audit: type=1326 audit(2000002698.027:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29275 comm="syz.7.6359" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f31f5f8e9a9 code=0x0 [ 2072.183625][ C0] vkms_vblank_simulate: vblank timer overrun [ 2073.336202][T29285] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=29285 comm=syz.0.6360 [ 2073.776932][T29296] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2073.776932][T29296] program syz.6.6362 not setting count and/or reply_len properly [ 2075.135803][ T2967] pim6reg (unregistering): left allmulticast mode [ 2076.204924][ T2967] team0 (unregistering): Port device team_slave_1 removed [ 2076.245022][ T2967] team0 (unregistering): Port device team_slave_0 removed [ 2076.380390][T28101] smc: removing ib device syz2 [ 2076.635707][ T10] syz2: Port: 1 Link DOWN [ 2076.751714][T29312] lo speed is unknown, defaulting to 1000 [ 2077.036543][T29324] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2077.036543][T29324] program syz.7.6370 not setting count and/or reply_len properly [ 2078.198014][T29333] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6372'. [ 2078.389207][ T30] audit: type=1400 audit(2000002704.217:1470): avc: granted { setsecparam } for pid=29334 comm="syz.7.6373" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 2079.267859][T29173] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2079.298990][T29173] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2079.622236][T29173] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2079.646458][T29173] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2080.118655][T29173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2080.174360][T29173] 8021q: adding VLAN 0 to HW filter on device team0 [ 2080.194538][T11671] bridge0: port 1(bridge_slave_0) entered blocking state [ 2080.201697][T11671] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2080.280196][T11671] bridge0: port 2(bridge_slave_1) entered blocking state [ 2080.287377][T11671] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2080.805157][ T2967] IPVS: stop unused estimator thread 0... [ 2081.259101][T29369] lo speed is unknown, defaulting to 1000 [ 2081.966363][T29173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2082.067355][T29173] veth0_vlan: entered promiscuous mode [ 2082.078491][T29173] veth1_vlan: entered promiscuous mode [ 2082.353004][T29382] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2082.353004][T29382] program syz.5.6380 not setting count and/or reply_len properly [ 2082.970437][T29173] veth0_macvtap: entered promiscuous mode [ 2082.984673][T29173] veth1_macvtap: entered promiscuous mode [ 2083.089317][T29386] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=29386 comm=syz.6.6382 [ 2083.452778][T29173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2083.586164][T29392] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 2084.660883][T29173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2085.032860][T29173] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2085.064521][T29173] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2085.112328][T29173] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2085.137511][T29173] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2085.689490][T29409] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 2085.916478][T11639] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2085.946200][T11639] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2086.006217][T11639] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2086.023836][T11639] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2086.103324][T29415] lo speed is unknown, defaulting to 1000 [ 2086.241900][T29416] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=29416 comm=syz.6.6390 [ 2087.706006][T29427] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6328'. [ 2088.601202][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 2089.277309][ T30] audit: type=1400 audit(2000002715.147:1471): avc: denied { remount } for pid=29440 comm="syz.6.6395" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 2089.297460][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 2089.306497][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2089.315768][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2089.367146][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2089.374579][ T10] pvrusb2: ********** [ 2089.378632][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2089.395723][ T10] pvrusb2: Important functionality might not be entirely working. [ 2089.404113][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2089.419900][ T10] pvrusb2: ********** [ 2089.442518][T29444] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6396'. [ 2089.578958][T29423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2089.587661][T29423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2089.605858][ T2336] pvrusb2: Invalid write control endpoint [ 2089.636337][ T10] usb 3-1: USB disconnect, device number 17 [ 2089.719770][ T2336] pvrusb2: Invalid write control endpoint [ 2089.749745][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2089.783688][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2089.834143][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2089.880430][ T2336] pvrusb2: Device being rendered inoperable [ 2089.909094][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 2089.938725][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_h) [ 2089.983037][ T2336] pvrusb2: Attached sub-driver cx25840 [ 2089.988636][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2090.006639][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2090.040551][T29452] block nbd5: NBD_DISCONNECT [ 2090.049440][ T30] audit: type=1400 audit(2000002715.917:1472): avc: denied { write } for pid=29451 comm="syz.5.6397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2090.069376][T29452] block nbd5: Send disconnect failed -107 [ 2090.663763][T29451] block nbd5: Disconnected due to user request. [ 2090.670508][T29451] block nbd5: shutting down sockets [ 2091.003432][T29463] netlink: 'syz.2.6400': attribute type 5 has an invalid length. [ 2091.248758][T29463] ip6erspan0: entered promiscuous mode [ 2091.531825][T29473] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=29473 comm=syz.7.6402 [ 2093.564155][T29482] lo speed is unknown, defaulting to 1000 [ 2093.782358][T29486] FAULT_INJECTION: forcing a failure. [ 2093.782358][T29486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2093.796243][T29486] CPU: 1 UID: 0 PID: 29486 Comm: syz.5.6407 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 2093.796270][T29486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2093.796281][T29486] Call Trace: [ 2093.796287][T29486] [ 2093.796295][T29486] dump_stack_lvl+0x16c/0x1f0 [ 2093.796328][T29486] should_fail_ex+0x512/0x640 [ 2093.796361][T29486] _copy_from_user+0x2e/0xd0 [ 2093.796381][T29486] copy_msghdr_from_user+0x98/0x160 [ 2093.796418][T29486] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 2093.796450][T29486] ? kfree+0x24f/0x4d0 [ 2093.796472][T29486] ? __lock_acquire+0x622/0x1c90 [ 2093.796495][T29486] ___sys_recvmsg+0xdb/0x1a0 [ 2093.796524][T29486] ? __pfx____sys_recvmsg+0x10/0x10 [ 2093.796566][T29486] ? __pfx___might_resched+0x10/0x10 [ 2093.796596][T29486] do_recvmmsg+0x2fe/0x750 [ 2093.796617][T29486] ? __pfx_do_recvmmsg+0x10/0x10 [ 2093.796651][T29486] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 2093.796678][T29486] ? __fget_files+0x20e/0x3c0 [ 2093.796710][T29486] __x64_sys_recvmmsg+0x22a/0x280 [ 2093.796730][T29486] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 2093.796757][T29486] do_syscall_64+0xcd/0x4c0 [ 2093.796777][T29486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2093.796796][T29486] RIP: 0033:0x7f377518e9a9 [ 2093.796811][T29486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2093.796829][T29486] RSP: 002b:00007f3775f74038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2093.796847][T29486] RAX: ffffffffffffffda RBX: 00007f37753b5fa0 RCX: 00007f377518e9a9 [ 2093.796860][T29486] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000004 [ 2093.796871][T29486] RBP: 00007f3775f74090 R08: 0000000000000000 R09: 0000000000000000 [ 2093.796882][T29486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2093.796893][T29486] R13: 0000000000000000 R14: 00007f37753b5fa0 R15: 00007ffeddb651d8 [ 2093.796918][T29486] [ 2094.535720][T29493] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2094.535720][T29493] program syz.2.6408 not setting count and/or reply_len properly [ 2095.550044][T29494] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6409'. [ 2096.159435][ T30] audit: type=1400 audit(2000002721.947:1473): avc: denied { mount } for pid=29501 comm="syz.7.6412" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 2098.182790][T29531] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2098.191694][T29531] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2098.200710][T29531] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2098.209702][T29531] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2098.312122][T29531] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 2099.135551][T29543] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2099.135551][T29543] program syz.5.6421 not setting count and/or reply_len properly [ 2100.195752][T29550] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 2100.503658][T29556] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2100.503658][T29556] program syz.2.6425 not setting count and/or reply_len properly [ 2102.484983][T29563] QAT: failed to copy from user cfg_data. [ 2104.034017][T29580] netlink: 'syz.7.6432': attribute type 5 has an invalid length. [ 2104.198186][T29580] ip6erspan0: entered promiscuous mode [ 2105.279516][T20792] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 2105.482410][T20792] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 2106.306271][T20792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2106.339080][T20792] usb 3-1: Product: syz [ 2106.367689][T20792] usb 3-1: Manufacturer: syz [ 2106.473657][T20792] usb 3-1: SerialNumber: syz [ 2106.493115][T20792] usb 3-1: config 0 descriptor?? [ 2106.963648][T20792] usb 3-1: USB disconnect, device number 18 [ 2108.349421][T29607] netlink: 'syz.0.6441': attribute type 1 has an invalid length. [ 2108.357187][T29607] netlink: 232 bytes leftover after parsing attributes in process `syz.0.6441'. [ 2108.410899][T29607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6441'. [ 2108.507740][T29617] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2108.507740][T29617] program syz.6.6442 not setting count and/or reply_len properly [ 2108.710298][T21087] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 2109.799367][T21087] usb 1-1: Using ep0 maxpacket: 32 [ 2109.861199][T21087] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2110.201575][T29628] lo speed is unknown, defaulting to 1000 [ 2111.003875][T21087] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2111.095578][T21087] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2111.143377][T21087] usb 1-1: Product: syz [ 2111.157635][T21087] usb 1-1: Manufacturer: syz [ 2111.174754][T21087] usb 1-1: SerialNumber: syz [ 2111.651080][T21087] usb 1-1: config 0 descriptor?? [ 2111.874707][T21087] usb 1-1: can't set config #0, error -71 [ 2112.000033][T21087] usb 1-1: USB disconnect, device number 48 [ 2113.974325][T29660] netlink: 'syz.5.6454': attribute type 5 has an invalid length. [ 2114.155796][T29666] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6453'. [ 2114.501323][T29664] netfs: Couldn't get user pages (rc=-14) [ 2115.594784][T29683] 9pnet_fd: Insufficient options for proto=fd [ 2116.669720][T20792] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 2117.202566][T20792] usb 7-1: device descriptor read/64, error -71 [ 2117.587187][ T30] audit: type=1326 audit(2000002743.417:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29697 comm="syz.7.6464" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f31f5f8e9a9 code=0x0 [ 2117.804484][T20792] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 2117.989314][T20792] usb 7-1: device descriptor read/64, error -71 [ 2118.120630][ T30] audit: type=1400 audit(2000002743.987:1475): avc: granted { setsecparam } for pid=29701 comm="syz.0.6466" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 2118.249730][T20792] usb usb7-port1: attempt power cycle [ 2118.526348][T29713] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 2118.789326][T20792] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 2118.819943][T20792] usb 7-1: device descriptor read/8, error -71 [ 2119.105902][T29722] netlink: 'syz.2.6469': attribute type 5 has an invalid length. [ 2119.212403][T20792] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 2119.382036][T20792] usb 7-1: device descriptor read/8, error -71 [ 2119.509569][T20792] usb usb7-port1: unable to enumerate USB device [ 2120.249318][T13544] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 2120.259858][T29739] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6474'. [ 2120.390822][T29741] lo speed is unknown, defaulting to 1000 [ 2120.422183][T13544] usb 1-1: Using ep0 maxpacket: 8 [ 2120.433445][T13544] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2120.442162][T13544] usb 1-1: config 7 has an invalid interface number: 204 but max is 0 [ 2120.578668][T13544] usb 1-1: config 7 has no interface number 0 [ 2120.588605][T13544] usb 1-1: too many endpoints for config 7 interface 204 altsetting 80: 241, using maximum allowed: 30 [ 2120.666750][T13544] usb 1-1: config 7 interface 204 altsetting 80 has 0 endpoint descriptors, different from the interface descriptor's value: 241 [ 2120.693820][T13544] usb 1-1: config 7 interface 204 has no altsetting 0 [ 2120.704213][T13544] usb 1-1: string descriptor 0 read error: -22 [ 2120.710504][T13544] usb 1-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=82.fe [ 2120.719678][T13544] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2120.740468][T13544] hub 1-1:7.204: bad descriptor, ignoring hub [ 2120.746635][T13544] hub 1-1:7.204: probe with driver hub failed with error -5 [ 2121.719365][T29733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2121.813475][T29733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2122.039408][T13544] asix 1-1:7.204 (unnamed net_device) (uninitialized): invalid hw address, using random [ 2122.210948][ T30] audit: type=1326 audit(2000002748.057:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29754 comm="syz.6.6478" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff85958e9a9 code=0x0 [ 2122.610655][T13544] asix 1-1:7.204 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2123.939654][T13544] asix 1-1:7.204 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 2124.001298][T29774] FAULT_INJECTION: forcing a failure. [ 2124.001298][T29774] name failslab, interval 1, probability 0, space 0, times 0 [ 2124.019380][T29774] CPU: 1 UID: 0 PID: 29774 Comm: syz.5.6482 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 2124.019408][T29774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2124.019419][T29774] Call Trace: [ 2124.019425][T29774] [ 2124.019432][T29774] dump_stack_lvl+0x16c/0x1f0 [ 2124.019466][T29774] should_fail_ex+0x512/0x640 [ 2124.019496][T29774] should_failslab+0xc2/0x120 [ 2124.019515][T29774] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 2124.019542][T29774] ? skb_clone+0x190/0x3f0 [ 2124.019563][T29774] skb_clone+0x190/0x3f0 [ 2124.019581][T29774] netlink_deliver_tap+0xabd/0xd30 [ 2124.019606][T29774] netlink_unicast+0x62f/0x850 [ 2124.019631][T29774] ? __pfx_netlink_unicast+0x10/0x10 [ 2124.019659][T29774] netlink_sendmsg+0x8d1/0xdd0 [ 2124.019683][T29774] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2124.019714][T29774] ____sys_sendmsg+0xa95/0xc70 [ 2124.019737][T29774] ? copy_msghdr_from_user+0x10a/0x160 [ 2124.019764][T29774] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2124.019798][T29774] ___sys_sendmsg+0x134/0x1d0 [ 2124.019826][T29774] ? __pfx____sys_sendmsg+0x10/0x10 [ 2124.019851][T29774] ? __lock_acquire+0x622/0x1c90 [ 2124.019900][T29774] __sys_sendmsg+0x16d/0x220 [ 2124.019918][T29774] ? __pfx___sys_sendmsg+0x10/0x10 [ 2124.019952][T29774] do_syscall_64+0xcd/0x4c0 [ 2124.019971][T29774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2124.019991][T29774] RIP: 0033:0x7f377518e9a9 [ 2124.020006][T29774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2124.020022][T29774] RSP: 002b:00007f3775f74038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2124.020038][T29774] RAX: ffffffffffffffda RBX: 00007f37753b5fa0 RCX: 00007f377518e9a9 [ 2124.020049][T29774] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 2124.020060][T29774] RBP: 00007f3775f74090 R08: 0000000000000000 R09: 0000000000000000 [ 2124.020070][T29774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2124.020080][T29774] R13: 0000000000000000 R14: 00007f37753b5fa0 R15: 00007ffeddb651d8 [ 2124.020108][T29774] [ 2124.233959][ C1] vkms_vblank_simulate: vblank timer overrun [ 2124.292158][T13544] asix 1-1:7.204 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2124.302472][T13544] asix 1-1:7.204 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 2125.133805][T13544] asix 1-1:7.204 eth9: register 'asix' at usb-dummy_hcd.0-1, ASIX AX88178 USB 2.0 Ethernet, b6:60:22:e8:80:0b [ 2125.190516][T13544] usb 1-1: USB disconnect, device number 49 [ 2125.197281][T13544] asix 1-1:7.204 eth9: unregister 'asix' usb-dummy_hcd.0-1, ASIX AX88178 USB 2.0 Ethernet [ 2125.514533][T13521] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 2125.652427][T29789] QAT: failed to copy from user cfg_data. [ 2125.747992][ T30] audit: type=1400 audit(2000002751.607:1477): avc: denied { shutdown } for pid=29790 comm="syz.0.6488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 2125.787391][T29794] FAULT_INJECTION: forcing a failure. [ 2125.787391][T29794] name failslab, interval 1, probability 0, space 0, times 0 [ 2125.951204][T29794] CPU: 1 UID: 0 PID: 29794 Comm: syz.7.6490 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 2125.951231][T29794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2125.951242][T29794] Call Trace: [ 2125.951250][T29794] [ 2125.951257][T29794] dump_stack_lvl+0x16c/0x1f0 [ 2125.951295][T29794] should_fail_ex+0x512/0x640 [ 2125.951326][T29794] should_failslab+0xc2/0x120 [ 2125.951345][T29794] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 2125.951373][T29794] ? skb_clone+0x190/0x3f0 [ 2125.951395][T29794] skb_clone+0x190/0x3f0 [ 2125.951413][T29794] netlink_deliver_tap+0xabd/0xd30 [ 2125.951439][T29794] netlink_unicast+0x62f/0x850 [ 2125.951463][T29794] ? __pfx_netlink_unicast+0x10/0x10 [ 2125.951491][T29794] netlink_sendmsg+0x8d1/0xdd0 [ 2125.951516][T29794] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2125.951547][T29794] ____sys_sendmsg+0xa95/0xc70 [ 2125.951569][T29794] ? copy_msghdr_from_user+0x10a/0x160 [ 2125.951595][T29794] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2125.951622][T29794] ? __pfx__kstrtoull+0x10/0x10 [ 2125.951650][T29794] ___sys_sendmsg+0x134/0x1d0 [ 2125.951679][T29794] ? __pfx____sys_sendmsg+0x10/0x10 [ 2125.951720][T29794] ? find_held_lock+0x2b/0x80 [ 2125.951760][T29794] __sys_sendmmsg+0x200/0x420 [ 2125.951778][T29794] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2125.951801][T29794] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2125.951829][T29794] ? fput+0x70/0xf0 [ 2125.951848][T29794] ? ksys_write+0x1ac/0x250 [ 2125.951873][T29794] ? __pfx_ksys_write+0x10/0x10 [ 2125.951902][T29794] __x64_sys_sendmmsg+0x9c/0x100 [ 2125.951918][T29794] ? lockdep_hardirqs_on+0x7c/0x110 [ 2125.951946][T29794] do_syscall_64+0xcd/0x4c0 [ 2125.951965][T29794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2125.951984][T29794] RIP: 0033:0x7f31f5f8e9a9 [ 2125.952003][T29794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2125.952021][T29794] RSP: 002b:00007f31f6da9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2125.952039][T29794] RAX: ffffffffffffffda RBX: 00007f31f61b5fa0 RCX: 00007f31f5f8e9a9 [ 2125.952050][T29794] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 2125.952062][T29794] RBP: 00007f31f6da9090 R08: 0000000000000000 R09: 0000000000000000 [ 2125.952072][T29794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2125.952083][T29794] R13: 0000000000000000 R14: 00007f31f61b5fa0 R15: 00007ffd82d0c5f8 [ 2125.952107][T29794] [ 2126.190970][ C1] vkms_vblank_simulate: vblank timer overrun [ 2126.375340][T29794] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6490'. [ 2126.390967][T13521] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2126.453001][T13521] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 2126.791178][T13521] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2126.850553][T13521] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2126.908408][T13521] usb 6-1: config 0 descriptor?? [ 2126.983902][ T30] audit: type=1400 audit(2000002752.857:1478): avc: granted { setsecparam } for pid=29800 comm="syz.7.6493" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 2127.003218][ C1] vkms_vblank_simulate: vblank timer overrun [ 2127.271302][T13521] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 2127.368698][ T30] audit: type=1400 audit(2000002753.237:1479): avc: granted { setsecparam } for pid=29802 comm="syz.2.6492" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 2127.657311][T13544] usb 6-1: USB disconnect, device number 49 [ 2127.740697][T29813] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6495'. [ 2129.030503][T29831] usb usb5: usbfs: process 29831 (syz.2.6500) did not claim interface 0 before use [ 2129.106098][T29831] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 2129.184646][T29831] bridge1: entered promiscuous mode [ 2129.219355][T29831] bridge1: entered allmulticast mode [ 2129.446914][T29835] lo speed is unknown, defaulting to 1000 [ 2131.604296][T29838] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2131.604296][T29838] program syz.0.6502 not setting count and/or reply_len properly [ 2132.330231][T29857] SELinux: syz.5.6508 (29857) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 2133.299679][ T30] audit: type=1400 audit(2000002758.997:1480): avc: denied { write } for pid=29855 comm="syz.5.6508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2133.415817][T29868] 9pnet_fd: Insufficient options for proto=fd [ 2133.425761][ T30] audit: type=1400 audit(2000002759.287:1481): avc: denied { read } for pid=29867 comm="syz.0.6509" dev="sockfs" ino=113939 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2133.639847][ T30] audit: type=1400 audit(2000002759.497:1482): avc: denied { ioctl } for pid=29867 comm="syz.0.6509" path="/dev/ttyq5" dev="devtmpfs" ino=380 ioctlcmd=0x540a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 2133.899527][T29872] netlink: 'syz.5.6510': attribute type 4 has an invalid length. [ 2133.907300][T29872] netlink: 152 bytes leftover after parsing attributes in process `syz.5.6510'. [ 2133.978126][T29872] : renamed from bond0 (while UP) [ 2134.359508][ T30] audit: type=1400 audit(2000002760.217:1483): avc: denied { ioctl } for pid=29876 comm="syz.0.6512" path="socket:[113092]" dev="sockfs" ino=113092 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 2134.776056][T29882] netlink: 'syz.5.6513': attribute type 1 has an invalid length. [ 2135.397936][T29886] lo speed is unknown, defaulting to 1000 [ 2135.565959][ T30] audit: type=1400 audit(2000002761.427:1484): avc: denied { read } for pid=29888 comm="syz.2.6515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2135.907336][ T30] audit: type=1400 audit(2000002761.487:1485): avc: denied { write } for pid=29888 comm="syz.2.6515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2136.339574][ T30] audit: type=1400 audit(2000002761.567:1486): avc: granted { setsecparam } for pid=29890 comm="syz.5.6517" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 2136.712027][ T30] audit: type=1400 audit(2000002762.307:1487): avc: granted { setsecparam } for pid=29899 comm="syz.2.6520" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 2137.359438][ T1207] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 2137.679622][ T1207] usb 6-1: Using ep0 maxpacket: 32 [ 2137.705354][ T1207] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2137.725542][ T1207] usb 6-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 2137.735642][ T30] audit: type=1400 audit(2000002763.597:1488): avc: denied { map } for pid=29922 comm="syz.2.6524" path="socket:[114044]" dev="sockfs" ino=114044 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 2137.760139][ T1207] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2137.809728][ T1207] usb 6-1: config 0 descriptor?? [ 2137.843749][ T30] audit: type=1400 audit(2000002763.597:1489): avc: denied { accept } for pid=29922 comm="syz.2.6524" path="socket:[114044]" dev="sockfs" ino=114044 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 2137.869680][ C1] vkms_vblank_simulate: vblank timer overrun [ 2137.939869][T13544] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 2138.052175][T29928] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6527'. [ 2138.100955][T13544] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2138.578291][ T1207] chicony 0003:04F2:1421.0040: hidraw0: USB HID v1.01 Device [HID 04f2:1421] on usb-dummy_hcd.5-1/input0 [ 2138.859040][T13544] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2138.870946][T13544] usb 1-1: config 1 has no interface number 1 [ 2138.877340][T13544] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2138.902535][T13544] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 2138.916628][T13544] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2138.925980][T13544] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2138.934102][T13544] usb 1-1: Product: syz [ 2138.938331][T13544] usb 1-1: Manufacturer: syz [ 2138.943057][T13544] usb 1-1: SerialNumber: syz [ 2138.963732][T29916] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 2139.032679][T29914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2139.085947][T29914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2139.216626][T29936] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 2139.481536][T13544] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 2139.516896][T13544] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 2139.528908][ T1207] usb 6-1: USB disconnect, device number 50 [ 2139.607923][T29937] fido_id[29937]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 2139.611701][T13544] usb 1-1: USB disconnect, device number 50 [ 2139.794843][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 2139.794878][ T30] audit: type=1400 audit(2000002765.667:1491): avc: granted { setsecparam } for pid=29941 comm="syz.6.6530" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 2139.820231][ C1] vkms_vblank_simulate: vblank timer overrun [ 2140.122215][T23941] udevd[23941]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2141.464771][T29965] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 2141.658547][T29970] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 2143.484729][T29988] lo speed is unknown, defaulting to 1000 [ 2143.490727][ T10] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 2143.650199][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 2143.657984][ T30] audit: type=1326 audit(2000002769.527:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29993 comm="syz.6.6544" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff85958e9a9 code=0x0 [ 2143.658784][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2143.817861][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2143.836232][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2143.845758][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2143.855733][ T10] usb 1-1: Product: syz [ 2143.859913][ T10] usb 1-1: Manufacturer: syz [ 2143.864902][ T10] usb 1-1: SerialNumber: syz [ 2143.921426][ T10] usb 1-1: config 0 descriptor?? [ 2143.940904][T30001] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2143.940904][T30001] program syz.2.6545 not setting count and/or reply_len properly [ 2143.960703][ T10] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2144.119317][ T10] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 2144.550652][ T10] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 2144.624233][ T10] em28xx 1-1:0.0: Config register raw data: 0x41 [ 2144.953328][T30011] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6547'. [ 2145.209648][ T30] audit: type=1400 audit(2000002771.027:1493): avc: granted { setsecparam } for pid=30012 comm="syz.6.6549" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 2145.702987][T30021] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 2146.149726][T30029] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=30029 comm=syz.6.6553 [ 2146.387597][T13521] usb 1-1: USB disconnect, device number 51 [ 2146.405328][T13521] em28xx 1-1:0.0: Disconnecting em28xx [ 2146.428124][T13521] em28xx 1-1:0.0: Freeing device [ 2147.576486][T30040] lo speed is unknown, defaulting to 1000 [ 2148.825803][T30036] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6555'. [ 2148.935545][T30049] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6558'. [ 2149.506911][T30060] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6561'. [ 2150.009413][T13521] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 2150.130029][T30067] FAULT_INJECTION: forcing a failure. [ 2150.130029][T30067] name failslab, interval 1, probability 0, space 0, times 0 [ 2150.143877][T30067] CPU: 0 UID: 0 PID: 30067 Comm: syz.2.6564 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 2150.143901][T30067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2150.143911][T30067] Call Trace: [ 2150.143918][T30067] [ 2150.143925][T30067] dump_stack_lvl+0x16c/0x1f0 [ 2150.143949][T30067] should_fail_ex+0x512/0x640 [ 2150.143967][T30067] ? __kmalloc_noprof+0xbf/0x510 [ 2150.143984][T30067] ? bm_init+0x40/0x980 [ 2150.144000][T30067] should_failslab+0xc2/0x120 [ 2150.144013][T30067] __kmalloc_noprof+0xd2/0x510 [ 2150.144032][T30067] bm_init+0x40/0x980 [ 2150.144050][T30067] ? lookup_ts_algo+0x148/0x360 [ 2150.144068][T30067] textsearch_prepare+0xa3/0x190 [ 2150.144084][T30067] string_mt_check+0x1c1/0x270 [ 2150.144098][T30067] ? __pfx_string_mt_check+0x10/0x10 [ 2150.144111][T30067] xt_check_match+0x283/0xa50 [ 2150.144127][T30067] ? __pfx_xt_check_match+0x10/0x10 [ 2150.144143][T30067] ? xt_find_match+0x1f6/0x290 [ 2150.144158][T30067] ? xt_find_match+0x1f6/0x290 [ 2150.144174][T30067] find_check_entry.constprop.0+0x317/0x9b0 [ 2150.144194][T30067] ? __pfx_find_check_entry.constprop.0+0x10/0x10 [ 2150.144214][T30067] ? kasan_quarantine_put+0x10a/0x240 [ 2150.144230][T30067] ? lockdep_hardirqs_on+0x7c/0x110 [ 2150.144249][T30067] ? kfree+0x2b4/0x4d0 [ 2150.144262][T30067] ? translate_table+0xba1/0x1720 [ 2150.144279][T30067] translate_table+0xc98/0x1720 [ 2150.144300][T30067] ? __pfx_translate_table+0x10/0x10 [ 2150.144315][T30067] ? xt_alloc_table_info+0x3e/0xa0 [ 2150.144332][T30067] do_ipt_set_ctl+0x570/0xae0 [ 2150.144347][T30067] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 2150.144363][T30067] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 2150.144379][T30067] ? lockdep_hardirqs_on+0x7c/0x110 [ 2150.144395][T30067] ? sockopt_release_sock+0x52/0x60 [ 2150.144407][T30067] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2150.144418][T30067] ? sockopt_release_sock+0x52/0x60 [ 2150.144435][T30067] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 2150.144449][T30067] nf_setsockopt+0x8a/0xf0 [ 2150.144463][T30067] ip_setsockopt+0xcb/0xf0 [ 2150.144480][T30067] udp_setsockopt+0x7d/0xd0 [ 2150.144494][T30067] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 2150.144508][T30067] do_sock_setsockopt+0xf3/0x1d0 [ 2150.144523][T30067] __sys_setsockopt+0x1a0/0x230 [ 2150.144542][T30067] __x64_sys_setsockopt+0xbd/0x160 [ 2150.144557][T30067] ? do_syscall_64+0x91/0x4c0 [ 2150.144568][T30067] ? lockdep_hardirqs_on+0x7c/0x110 [ 2150.144584][T30067] do_syscall_64+0xcd/0x4c0 [ 2150.144595][T30067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2150.144607][T30067] RIP: 0033:0x7f5f59b8e9a9 [ 2150.144617][T30067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2150.144627][T30067] RSP: 002b:00007f5f5aa60038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2150.144639][T30067] RAX: ffffffffffffffda RBX: 00007f5f59db5fa0 RCX: 00007f5f59b8e9a9 [ 2150.144646][T30067] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 2150.144652][T30067] RBP: 00007f5f5aa60090 R08: 0000000000000360 R09: 0000000000000000 [ 2150.144659][T30067] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2150.144665][T30067] R13: 0000000000000000 R14: 00007f5f59db5fa0 R15: 00007fff5bf4a2b8 [ 2150.144679][T30067] [ 2150.501749][T30069] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 2150.547211][T30071] kvm: MONITOR instruction emulated as NOP! [ 2150.601751][T13521] usb 6-1: Using ep0 maxpacket: 8 [ 2150.608652][T13521] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2150.618116][T13521] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2150.636662][T13521] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2150.655732][T13521] pvrusb2: ********** [ 2150.659848][T13521] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2150.670045][T13521] pvrusb2: Important functionality might not be entirely working. [ 2150.677897][T13521] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2150.689902][T13521] pvrusb2: ********** [ 2150.832567][T30075] syz.2.6567: attempt to access beyond end of device [ 2150.832567][T30075] nbd2: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 2150.846160][T30075] gfs2: error -5 reading superblock [ 2151.238425][T30058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2151.247412][T30058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2151.265054][T13521] usb 6-1: USB disconnect, device number 51 [ 2151.276069][ T2336] pvrusb2: Invalid write control endpoint [ 2151.643343][ T2336] pvrusb2: Invalid write control endpoint [ 2151.651890][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2151.668112][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2151.679644][T23003] Bluetooth: hci0: command 0x0406 tx timeout [ 2151.700207][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2151.779653][ T2336] pvrusb2: Device being rendered inoperable [ 2151.826946][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 2151.847843][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_h) [ 2151.856853][ T2336] pvrusb2: Attached sub-driver cx25840 [ 2151.862634][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2151.877053][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2152.703896][T30089] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2152.703896][T30089] program syz.5.6572 not setting count and/or reply_len properly [ 2153.030980][T30095] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6573'. [ 2153.068129][T30095] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6573'. [ 2153.246048][ T30] audit: type=1400 audit(2000002779.107:1494): avc: granted { setsecparam } for pid=30092 comm="syz.6.6574" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 2153.607268][T30101] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6575'. [ 2153.619343][ T10] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 2153.643093][T30101] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6575'. [ 2153.792711][ T30] audit: type=1400 audit(2000002779.667:1495): avc: denied { execute_no_trans } for pid=30102 comm="syz.0.6576" path="/52/file0" dev="tmpfs" ino=292 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2153.797885][T30103] SELinux: Context system_u:object_r:utempter_exec_t:s0 is not valid (left unmapped). [ 2153.827507][ T30] audit: type=1400 audit(2000002779.707:1496): avc: denied { relabelto } for pid=30102 comm="syz.0.6576" name="file0" dev="tmpfs" ino=292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:utempter_exec_t:s0" [ 2153.856187][ T30] audit: type=1400 audit(2000002779.707:1497): avc: denied { associate } for pid=30102 comm="syz.0.6576" name="file0" dev="tmpfs" ino=292 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:utempter_exec_t:s0" [ 2153.883789][ C0] vkms_vblank_simulate: vblank timer overrun [ 2153.891162][ T30] audit: type=1400 audit(2000002779.727:1498): avc: denied { unlink } for pid=28845 comm="syz-executor" name="file0" dev="tmpfs" ino=292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:utempter_exec_t:s0" [ 2153.917816][ C0] vkms_vblank_simulate: vblank timer overrun [ 2153.940986][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 2154.056775][ T10] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2154.065900][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2154.085218][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2154.092310][ T10] pvrusb2: ********** [ 2154.096356][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2154.106719][ T10] pvrusb2: Important functionality might not be entirely working. [ 2154.114886][T13521] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 2154.122968][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2154.165183][T30107] lo speed is unknown, defaulting to 1000 [ 2154.303533][ T10] pvrusb2: ********** [ 2154.310953][T30091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2154.319622][T30091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2154.333552][ T2336] pvrusb2: Invalid write control endpoint [ 2154.334907][ T10] usb 6-1: USB disconnect, device number 52 [ 2154.377153][ T2336] pvrusb2: Invalid write control endpoint [ 2154.383156][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2154.394448][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2154.402642][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2154.412751][ T2336] pvrusb2: Device being rendered inoperable [ 2154.418768][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 2154.426072][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_h) [ 2154.434536][ T2336] pvrusb2: Attached sub-driver cx25840 [ 2154.440247][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2154.450436][T13521] usb 3-1: Using ep0 maxpacket: 8 [ 2154.455502][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2154.467044][T13521] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2154.483512][T13521] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2154.509153][T13521] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2154.518168][T13521] pvrusb2: ********** [ 2154.533858][T13521] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2154.545314][T13521] pvrusb2: Important functionality might not be entirely working. [ 2154.553927][T13521] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2154.566254][T13521] pvrusb2: ********** [ 2154.732415][T30099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2154.741183][T30099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2154.752513][T13521] usb 3-1: USB disconnect, device number 19 [ 2154.758465][ T2336] pvrusb2: Invalid write control endpoint [ 2155.288920][T30122] loop6: detected capacity change from 0 to 524287999 [ 2155.720815][ T2336] pvrusb2: Invalid write control endpoint [ 2155.729305][T13544] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 2155.784167][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2155.942254][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2155.950504][T13544] usb 6-1: Using ep0 maxpacket: 32 [ 2156.089474][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2156.089651][T13544] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2156.103388][ T2336] pvrusb2: Device being rendered inoperable [ 2156.557453][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 2156.569589][T30126] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2156.569589][T30126] program syz.0.6584 not setting count and/or reply_len properly [ 2156.594987][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_h) [ 2156.613587][ T2336] pvrusb2: Attached sub-driver cx25840 [ 2156.627175][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2156.657661][T13544] usb 6-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 2156.659441][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2156.703161][T13544] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2156.745507][T13544] usb 6-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 2156.775577][T13544] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2156.870827][T13544] usb 6-1: config 0 descriptor?? [ 2156.901760][ T30] audit: type=1400 audit(2000002782.767:1499): avc: denied { mount } for pid=30134 comm="syz.2.6586" name="/" dev="pstore" ino=2999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 2156.950155][ T30] audit: type=1400 audit(2000002782.807:1500): avc: denied { mounton } for pid=30134 comm="syz.2.6586" path="/42/file0" dev="pstore" ino=2999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=dir permissive=1 [ 2156.980930][ T30] audit: type=1400 audit(2000002782.857:1501): avc: denied { unmount } for pid=29173 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 2157.033132][ T30] audit: type=1400 audit(2000002782.907:1502): avc: denied { write } for pid=30136 comm="syz.2.6587" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2157.350258][T30141] infiniband syz2: set active [ 2157.354989][T30141] infiniband syz2: added bridge_slave_0 [ 2157.373976][T13544] usbhid 6-1:0.0: can't add hid device: -71 [ 2157.389451][T13521] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 2157.391122][T30141] RDS/IB: syz2: added [ 2157.401107][T30141] smc: adding ib device syz2 with port count 1 [ 2157.407288][T30141] smc: ib device syz2 port 1 has pnetid [ 2157.452587][T13544] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2157.539439][T13521] usb 1-1: Using ep0 maxpacket: 8 [ 2157.558578][T13521] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 2157.583543][T13521] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2157.618764][T13521] usb 1-1: Product: syz [ 2157.635408][T13521] usb 1-1: Manufacturer: syz [ 2157.652384][T13521] usb 1-1: SerialNumber: syz [ 2157.678825][T13521] usb 1-1: config 0 descriptor?? [ 2158.368035][T13544] usb 6-1: USB disconnect, device number 53 [ 2159.250412][T13521] dvb_usb_rtl28xxu 1-1:0.0: chip type detection failed -110 [ 2159.257796][T13521] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 2159.647291][T30151] lo speed is unknown, defaulting to 1000 [ 2159.917335][T30156] lo speed is unknown, defaulting to 1000 [ 2160.025820][T29222] usb 1-1: USB disconnect, device number 52 [ 2160.646837][T30162] FAULT_INJECTION: forcing a failure. [ 2160.646837][T30162] name failslab, interval 1, probability 0, space 0, times 0 [ 2160.720812][T30162] CPU: 1 UID: 0 PID: 30162 Comm: syz.6.6591 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 2160.720839][T30162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2160.720851][T30162] Call Trace: [ 2160.720857][T30162] [ 2160.720864][T30162] dump_stack_lvl+0x16c/0x1f0 [ 2160.720898][T30162] should_fail_ex+0x512/0x640 [ 2160.720929][T30162] ? __kmalloc_noprof+0xbf/0x510 [ 2160.720962][T30162] ? lsm_blob_alloc+0x68/0x90 [ 2160.720982][T30162] should_failslab+0xc2/0x120 [ 2160.721000][T30162] __kmalloc_noprof+0xd2/0x510 [ 2160.721031][T30162] lsm_blob_alloc+0x68/0x90 [ 2160.721053][T30162] security_sk_alloc+0x30/0x270 [ 2160.721080][T30162] sk_prot_alloc+0x1c7/0x2a0 [ 2160.721103][T30162] sk_alloc+0x36/0xc20 [ 2160.721129][T30162] bpf_prog_test_run_skb+0x330/0x2280 [ 2160.721151][T30162] ? __fget_files+0x204/0x3c0 [ 2160.721172][T30162] ? __fget_files+0x20e/0x3c0 [ 2160.721187][T30162] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 2160.721210][T30162] ? fput+0x70/0xf0 [ 2160.721233][T30162] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 2160.721252][T30162] __sys_bpf+0x1707/0x4ea0 [ 2160.721280][T30162] ? __pfx___sys_bpf+0x10/0x10 [ 2160.721304][T30162] ? ksys_write+0x190/0x250 [ 2160.721333][T30162] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 2160.721367][T30162] ? fput+0x70/0xf0 [ 2160.721384][T30162] ? ksys_write+0x1ac/0x250 [ 2160.721409][T30162] ? __pfx_ksys_write+0x10/0x10 [ 2160.721438][T30162] __x64_sys_bpf+0x78/0xc0 [ 2160.721461][T30162] ? lockdep_hardirqs_on+0x7c/0x110 [ 2160.721489][T30162] do_syscall_64+0xcd/0x4c0 [ 2160.721507][T30162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2160.721526][T30162] RIP: 0033:0x7ff85958e9a9 [ 2160.721541][T30162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2160.721558][T30162] RSP: 002b:00007ff85a392038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2160.721575][T30162] RAX: ffffffffffffffda RBX: 00007ff8597b5fa0 RCX: 00007ff85958e9a9 [ 2160.721587][T30162] RDX: 0000000000000050 RSI: 0000200000000440 RDI: 000000000000000a [ 2160.721598][T30162] RBP: 00007ff85a392090 R08: 0000000000000000 R09: 0000000000000000 [ 2160.721608][T30162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2160.721619][T30162] R13: 0000000000000000 R14: 00007ff8597b5fa0 R15: 00007ffe69f42aa8 [ 2160.721643][T30162] [ 2161.779352][T30173] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6593'. [ 2161.907668][T30174] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6593'. [ 2162.096968][T30179] FAULT_INJECTION: forcing a failure. [ 2162.096968][T30179] name failslab, interval 1, probability 0, space 0, times 0 [ 2162.122578][T30179] CPU: 0 UID: 0 PID: 30179 Comm: syz.6.6597 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 2162.122604][T30179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2162.122614][T30179] Call Trace: [ 2162.122621][T30179] [ 2162.122628][T30179] dump_stack_lvl+0x16c/0x1f0 [ 2162.122661][T30179] should_fail_ex+0x512/0x640 [ 2162.122687][T30179] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 2162.122716][T30179] should_failslab+0xc2/0x120 [ 2162.122734][T30179] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 2162.122757][T30179] ? __asan_memcpy+0x3c/0x60 [ 2162.122782][T30179] ? __kernfs_new_node+0xd2/0x8e0 [ 2162.122805][T30179] __kernfs_new_node+0xd2/0x8e0 [ 2162.122826][T30179] ? __pfx___kernfs_new_node+0x10/0x10 [ 2162.122849][T30179] ? find_held_lock+0x2b/0x80 [ 2162.122873][T30179] ? kernfs_root+0xee/0x2a0 [ 2162.122896][T30179] kernfs_new_node+0x13c/0x1e0 [ 2162.122921][T30179] kernfs_create_link+0xcc/0x240 [ 2162.122948][T30179] sysfs_do_create_link_sd+0x90/0x140 [ 2162.122967][T30179] sysfs_create_link+0x61/0xc0 [ 2162.122984][T30179] driver_sysfs_add+0x91/0x2d0 [ 2162.123027][T30179] really_probe+0x146/0xa90 [ 2162.123046][T30179] __driver_probe_device+0x1de/0x440 [ 2162.123062][T30179] driver_probe_device+0x4c/0x1b0 [ 2162.123077][T30179] __device_attach_driver+0x1df/0x310 [ 2162.123092][T30179] ? __pfx___device_attach_driver+0x10/0x10 [ 2162.123105][T30179] bus_for_each_drv+0x156/0x1e0 [ 2162.123125][T30179] ? __pfx_bus_for_each_drv+0x10/0x10 [ 2162.123145][T30179] ? lockdep_hardirqs_on+0x7c/0x110 [ 2162.123167][T30179] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2162.123192][T30179] __device_attach+0x1e4/0x4b0 [ 2162.123206][T30179] ? __pfx___device_attach+0x10/0x10 [ 2162.123223][T30179] ? __might_fault+0xe3/0x190 [ 2162.123243][T30179] ? __might_fault+0x13b/0x190 [ 2162.123263][T30179] ? usb_ifnum_to_if+0x16f/0x1d0 [ 2162.123288][T30179] proc_ioctl+0x58e/0x6c0 [ 2162.123308][T30179] usbdev_ioctl+0x1773/0x4070 [ 2162.123328][T30179] ? __pfx_usbdev_ioctl+0x10/0x10 [ 2162.123343][T30179] ? do_vfs_ioctl+0x523/0x1a60 [ 2162.123363][T30179] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 2162.123387][T30179] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 2162.123402][T30179] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 2162.123417][T30179] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 2162.123438][T30179] ? hook_file_ioctl_common+0x145/0x410 [ 2162.123461][T30179] ? selinux_file_ioctl+0x180/0x270 [ 2162.123475][T30179] ? selinux_file_ioctl+0xb4/0x270 [ 2162.123491][T30179] ? __pfx_usbdev_ioctl+0x10/0x10 [ 2162.123509][T30179] __x64_sys_ioctl+0x18e/0x210 [ 2162.123529][T30179] do_syscall_64+0xcd/0x4c0 [ 2162.123544][T30179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2162.123559][T30179] RIP: 0033:0x7ff85958e9a9 [ 2162.123572][T30179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2162.123586][T30179] RSP: 002b:00007ff85a392038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2162.123601][T30179] RAX: ffffffffffffffda RBX: 00007ff8597b5fa0 RCX: 00007ff85958e9a9 [ 2162.123611][T30179] RDX: 0000200000000000 RSI: 00000000c0105512 RDI: 0000000000000003 [ 2162.123620][T30179] RBP: 00007ff85a392090 R08: 0000000000000000 R09: 0000000000000000 [ 2162.123628][T30179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2162.123637][T30179] R13: 0000000000000000 R14: 00007ff8597b5fa0 R15: 00007ffe69f42aa8 [ 2162.123657][T30179] [ 2162.123742][T30179] hub 8-0:1.0: really_probe: driver_sysfs_add failed [ 2162.474874][T30182] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2162.474874][T30182] program syz.0.6595 not setting count and/or reply_len properly [ 2163.239516][T29222] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 2163.399381][T29222] usb 3-1: Using ep0 maxpacket: 8 [ 2163.425569][T29222] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 2163.450386][T29222] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2163.458503][T29222] usb 3-1: Product: syz [ 2163.467546][T29222] usb 3-1: Manufacturer: syz [ 2163.472421][T29222] usb 3-1: SerialNumber: syz [ 2163.490417][T29222] usb 3-1: config 0 descriptor?? [ 2163.550396][T13544] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 2163.571674][T30192] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 2163.604699][T30192] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 2163.775028][T29222] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2163.818310][T30195] FAULT_INJECTION: forcing a failure. [ 2163.818310][T30195] name failslab, interval 1, probability 0, space 0, times 0 [ 2163.904068][T30195] CPU: 1 UID: 0 PID: 30195 Comm: syz.6.6601 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 2163.904096][T30195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2163.904107][T30195] Call Trace: [ 2163.904113][T30195] [ 2163.904120][T30195] dump_stack_lvl+0x16c/0x1f0 [ 2163.904153][T30195] should_fail_ex+0x512/0x640 [ 2163.904183][T30195] should_failslab+0xc2/0x120 [ 2163.904200][T30195] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 2163.904226][T30195] ? skb_clone+0x190/0x3f0 [ 2163.904246][T30195] skb_clone+0x190/0x3f0 [ 2163.904262][T30195] netlink_deliver_tap+0xabd/0xd30 [ 2163.904286][T30195] netlink_unicast+0x62f/0x850 [ 2163.904309][T30195] ? __pfx_netlink_unicast+0x10/0x10 [ 2163.904326][T30195] ? __build_skb_around+0x278/0x3b0 [ 2163.904353][T30195] netlink_sendmsg+0x8d1/0xdd0 [ 2163.904376][T30195] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2163.904404][T30195] ____sys_sendmsg+0xa95/0xc70 [ 2163.904426][T30195] ? copy_msghdr_from_user+0x10a/0x160 [ 2163.904452][T30195] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2163.904483][T30195] ___sys_sendmsg+0x134/0x1d0 [ 2163.904510][T30195] ? __pfx____sys_sendmsg+0x10/0x10 [ 2163.904534][T30195] ? __lock_acquire+0x622/0x1c90 [ 2163.904580][T30195] __sys_sendmsg+0x16d/0x220 [ 2163.904595][T30195] ? __pfx___sys_sendmsg+0x10/0x10 [ 2163.904627][T30195] do_syscall_64+0xcd/0x4c0 [ 2163.904644][T30195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2163.904661][T30195] RIP: 0033:0x7ff85958e9a9 [ 2163.904674][T30195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2163.904691][T30195] RSP: 002b:00007ff85a392038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2163.904707][T30195] RAX: ffffffffffffffda RBX: 00007ff8597b5fa0 RCX: 00007ff85958e9a9 [ 2163.904718][T30195] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 2163.904727][T30195] RBP: 00007ff85a392090 R08: 0000000000000000 R09: 0000000000000000 [ 2163.904737][T30195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2163.904746][T30195] R13: 0000000000000000 R14: 00007ff8597b5fa0 R15: 00007ffe69f42aa8 [ 2163.904769][T30195] [ 2164.134777][T13544] usb 1-1: Using ep0 maxpacket: 32 [ 2164.142788][T29222] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 2164.154500][T13544] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2164.162774][T13544] usb 1-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 2164.171852][T13544] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2164.181272][T13544] usb 1-1: config 0 descriptor?? [ 2165.187061][T13544] chicony 0003:04F2:1421.0041: hidraw0: USB HID v1.01 Device [HID 04f2:1421] on usb-dummy_hcd.0-1/input0 [ 2165.391110][T30189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2165.409867][T30189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2165.681419][T30213] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 2165.791769][ T10] usb 3-1: USB disconnect, device number 20 [ 2165.839352][T20792] usb 1-1: USB disconnect, device number 53 [ 2165.900202][ T30] audit: type=1326 audit(2000002791.777:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30216 comm="syz.2.6606" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5f59b8e9a9 code=0x0 [ 2167.267920][ T30] audit: type=1400 audit(2000002793.047:1504): avc: denied { ioctl } for pid=30225 comm="syz.2.6608" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2167.524055][ T30] audit: type=1400 audit(2000002793.387:1505): avc: granted { setsecparam } for pid=30229 comm="syz.6.6609" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 2167.776717][T30232] syz2: rxe_newlink: already configured on bridge_slave_0 [ 2168.044285][ T30] audit: type=1400 audit(2000002793.727:1506): avc: granted { setsecparam } for pid=30237 comm="syz.0.6611" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 2168.063691][ C1] vkms_vblank_simulate: vblank timer overrun [ 2168.990139][T30249] netlink: 'syz.2.6613': attribute type 10 has an invalid length. [ 2169.315436][T30249] veth0_macvtap: left promiscuous mode [ 2169.337468][T30249] batman_adv: batadv0: Adding interface: macvtap0 [ 2169.359983][T30249] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2169.409386][T20792] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 2169.492468][T30258] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2169.492468][T30258] program syz.5.6614 not setting count and/or reply_len properly [ 2169.512602][T30249] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 2170.279451][ T30] audit: type=1326 audit(2000002796.137:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30263 comm="syz.0.6618" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbb9d18e9a9 code=0x0 [ 2170.486268][T30274] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=30274 comm=syz.7.6617 [ 2171.818186][T30288] dlm: Unknown command passed to DLM device : 9 [ 2171.818186][T30288] [ 2172.196719][ T30] audit: type=1400 audit(2000002797.977:1508): avc: denied { write } for pid=30289 comm="syz.5.6623" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 2173.133296][ T30] audit: type=1400 audit(2000002798.927:1509): avc: granted { setsecparam } for pid=30295 comm="syz.2.6625" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 2174.439721][T30316] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=30316 comm=syz.2.6631 [ 2176.922894][T30332] geneve1: entered allmulticast mode [ 2180.263341][T30367] FAULT_INJECTION: forcing a failure. [ 2180.263341][T30367] name failslab, interval 1, probability 0, space 0, times 0 [ 2180.276062][T30367] CPU: 0 UID: 0 PID: 30367 Comm: syz.7.6645 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 2180.276086][T30367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2180.276096][T30367] Call Trace: [ 2180.276103][T30367] [ 2180.276110][T30367] dump_stack_lvl+0x16c/0x1f0 [ 2180.276143][T30367] should_fail_ex+0x512/0x640 [ 2180.276171][T30367] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 2180.276200][T30367] should_failslab+0xc2/0x120 [ 2180.276218][T30367] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 2180.276245][T30367] ? security_file_alloc+0x34/0x2b0 [ 2180.276269][T30367] security_file_alloc+0x34/0x2b0 [ 2180.276288][T30367] init_file+0x93/0x4c0 [ 2180.276308][T30367] alloc_empty_file+0x73/0x1e0 [ 2180.276330][T30367] alloc_file_pseudo+0x13a/0x230 [ 2180.276353][T30367] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 2180.276382][T30367] sock_alloc_file+0x50/0x210 [ 2180.276402][T30367] do_accept+0x240/0x530 [ 2180.276425][T30367] ? do_raw_spin_lock+0x12c/0x2b0 [ 2180.276448][T30367] ? __pfx_do_accept+0x10/0x10 [ 2180.276493][T30367] __sys_accept4+0x100/0x1c0 [ 2180.276517][T30367] ? __pfx___sys_accept4+0x10/0x10 [ 2180.276539][T30367] ? ksys_write+0x1ac/0x250 [ 2180.276571][T30367] __x64_sys_accept+0x74/0xb0 [ 2180.276593][T30367] ? lockdep_hardirqs_on+0x7c/0x110 [ 2180.276619][T30367] do_syscall_64+0xcd/0x4c0 [ 2180.276638][T30367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2180.276656][T30367] RIP: 0033:0x7f31f5f8e9a9 [ 2180.276671][T30367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2180.276688][T30367] RSP: 002b:00007f31f6d67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 2180.276706][T30367] RAX: ffffffffffffffda RBX: 00007f31f61b6160 RCX: 00007f31f5f8e9a9 [ 2180.276718][T30367] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 2180.276728][T30367] RBP: 00007f31f6d67090 R08: 0000000000000000 R09: 0000000000000000 [ 2180.276739][T30367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2180.276749][T30367] R13: 0000000000000000 R14: 00007f31f61b6160 R15: 00007ffd82d0c5f8 [ 2180.276774][T30367] [ 2181.560743][T30377] netlink: 68 bytes leftover after parsing attributes in process `syz.7.6649'. [ 2181.908121][T30382] FAULT_INJECTION: forcing a failure. [ 2181.908121][T30382] name failslab, interval 1, probability 0, space 0, times 0 [ 2182.069424][T30382] CPU: 1 UID: 0 PID: 30382 Comm: syz.0.6652 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 2182.069451][T30382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2182.069461][T30382] Call Trace: [ 2182.069467][T30382] [ 2182.069475][T30382] dump_stack_lvl+0x16c/0x1f0 [ 2182.069509][T30382] should_fail_ex+0x512/0x640 [ 2182.069534][T30382] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 2182.069564][T30382] should_failslab+0xc2/0x120 [ 2182.069582][T30382] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 2182.069609][T30382] ? __alloc_skb+0x2b2/0x380 [ 2182.069640][T30382] __alloc_skb+0x2b2/0x380 [ 2182.069666][T30382] ? __pfx___alloc_skb+0x10/0x10 [ 2182.069694][T30382] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 2182.069725][T30382] netlink_alloc_large_skb+0x69/0x130 [ 2182.069747][T30382] netlink_sendmsg+0x6a1/0xdd0 [ 2182.069772][T30382] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2182.069802][T30382] ____sys_sendmsg+0xa95/0xc70 [ 2182.069824][T30382] ? copy_msghdr_from_user+0x10a/0x160 [ 2182.069850][T30382] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2182.069883][T30382] ___sys_sendmsg+0x134/0x1d0 [ 2182.069912][T30382] ? __pfx____sys_sendmsg+0x10/0x10 [ 2182.069938][T30382] ? __lock_acquire+0x622/0x1c90 [ 2182.069987][T30382] __sys_sendmsg+0x16d/0x220 [ 2182.070003][T30382] ? __pfx___sys_sendmsg+0x10/0x10 [ 2182.070037][T30382] do_syscall_64+0xcd/0x4c0 [ 2182.070056][T30382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2182.070073][T30382] RIP: 0033:0x7fbb9d18e9a9 [ 2182.070088][T30382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2182.070105][T30382] RSP: 002b:00007fbb9e091038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2182.070122][T30382] RAX: ffffffffffffffda RBX: 00007fbb9d3b5fa0 RCX: 00007fbb9d18e9a9 [ 2182.070134][T30382] RDX: 0000000004040040 RSI: 0000200000000200 RDI: 0000000000000006 [ 2182.070145][T30382] RBP: 00007fbb9e091090 R08: 0000000000000000 R09: 0000000000000000 [ 2182.070155][T30382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2182.070165][T30382] R13: 0000000000000000 R14: 00007fbb9d3b5fa0 R15: 00007ffda0a96e88 [ 2182.070189][T30382] [ 2182.712200][T30393] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6653'. [ 2182.752775][T30393] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6653'. [ 2183.150575][T30398] mkiss: ax0: crc mode is auto. [ 2183.178490][ T30] audit: type=1326 audit(2000002809.027:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30396 comm="syz.0.6656" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbb9d18e9a9 code=0x0 [ 2185.362458][T30403] mkiss: ax0: crc mode is auto. [ 2185.405427][ T30] audit: type=1326 audit(2000002811.247:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30401 comm="syz.6.6657" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff85958e9a9 code=0x0 [ 2186.550619][T30411] lo speed is unknown, defaulting to 1000 [ 2186.650906][T30417] lo speed is unknown, defaulting to 1000 [ 2186.958513][ T30] audit: type=1400 audit(2000002812.827:1512): avc: denied { accept } for pid=30416 comm="syz.7.6661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2187.525562][T23003] Bluetooth: hci2: command 0x0406 tx timeout [ 2187.648036][T30429] FAULT_INJECTION: forcing a failure. [ 2187.648036][T30429] name failslab, interval 1, probability 0, space 0, times 0 [ 2187.661169][T30429] CPU: 1 UID: 0 PID: 30429 Comm: syz.2.6662 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 2187.661193][T30429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2187.661203][T30429] Call Trace: [ 2187.661209][T30429] [ 2187.661216][T30429] dump_stack_lvl+0x16c/0x1f0 [ 2187.661248][T30429] should_fail_ex+0x512/0x640 [ 2187.661275][T30429] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 2187.661302][T30429] should_failslab+0xc2/0x120 [ 2187.661320][T30429] __kmalloc_cache_noprof+0x6a/0x3e0 [ 2187.661342][T30429] ? lockdep_hardirqs_on+0x7c/0x110 [ 2187.661370][T30429] ? rds_cong_from_addr+0x50/0x540 [ 2187.661406][T30429] rds_cong_from_addr+0x50/0x540 [ 2187.661437][T30429] rds_cong_get_maps+0x21/0xe0 [ 2187.661464][T30429] __rds_conn_create+0xaca/0x2340 [ 2187.661492][T30429] ? __pfx___rds_conn_create+0x10/0x10 [ 2187.661519][T30429] rds_conn_create_outgoing+0x44/0x60 [ 2187.661541][T30429] rds_sendmsg+0xe37/0x31f0 [ 2187.661568][T30429] ? __pfx___schedule+0x10/0x10 [ 2187.661600][T30429] ? __pfx_rds_sendmsg+0x10/0x10 [ 2187.661627][T30429] ? rcu_is_watching+0x12/0xc0 [ 2187.661649][T30429] ? irqentry_exit+0x3b/0x90 [ 2187.661664][T30429] ? lockdep_hardirqs_on+0x7c/0x110 [ 2187.661702][T30429] ? ____sys_sendmsg+0xa95/0xc70 [ 2187.661723][T30429] ____sys_sendmsg+0xa95/0xc70 [ 2187.661745][T30429] ? lockdep_hardirqs_on+0x7c/0x110 [ 2187.661771][T30429] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2187.661798][T30429] ? ___sys_sendmsg+0x110/0x1d0 [ 2187.661829][T30429] ___sys_sendmsg+0x134/0x1d0 [ 2187.661862][T30429] ? __pfx____sys_sendmsg+0x10/0x10 [ 2187.661887][T30429] ? __lock_acquire+0x622/0x1c90 [ 2187.661935][T30429] __sys_sendmsg+0x16d/0x220 [ 2187.661952][T30429] ? __pfx___sys_sendmsg+0x10/0x10 [ 2187.661986][T30429] do_syscall_64+0xcd/0x4c0 [ 2187.662005][T30429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2187.662023][T30429] RIP: 0033:0x7f5f59b8e9a9 [ 2187.662037][T30429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2187.662054][T30429] RSP: 002b:00007f5f5aa1e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2187.662071][T30429] RAX: ffffffffffffffda RBX: 00007f5f59db6160 RCX: 00007f5f59b8e9a9 [ 2187.662083][T30429] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000008 [ 2187.662095][T30429] RBP: 00007f5f5aa1e090 R08: 0000000000000000 R09: 0000000000000000 [ 2187.662106][T30429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2187.662117][T30429] R13: 0000000000000000 R14: 00007f5f59db6160 R15: 00007fff5bf4a2b8 [ 2187.662142][T30429] [ 2187.912354][ C1] vkms_vblank_simulate: vblank timer overrun [ 2187.935506][ T30] audit: type=1400 audit(2000002813.517:1513): avc: denied { connect } for pid=30423 comm="syz.2.6662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2191.099308][T13544] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 2191.699315][T13544] usb 3-1: Using ep0 maxpacket: 8 [ 2191.721074][T13544] usb 3-1: New USB device found, idVendor=10d2, idProduct=2865, bcdDevice=a4.c9 [ 2191.767356][T13544] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2191.795100][T13544] usb 3-1: config 0 descriptor?? [ 2191.820405][ T30] audit: type=1804 audit(2000002817.687:1514): pid=30472 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.6673" name="/newroot/73/file0" dev="tmpfs" ino=406 res=1 errno=0 [ 2191.927112][T13544] usblcd 3-1:0.0: USBLCD model not supported. [ 2193.697404][T30491] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20003 [ 2193.749767][ T30] audit: type=1400 audit(2000002819.607:1515): avc: denied { append } for pid=30487 comm="syz.0.6679" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 2194.736820][ T30] audit: type=1400 audit(2000002819.847:1516): avc: denied { bind } for pid=30490 comm="syz.6.6681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2194.791413][T30496] lo speed is unknown, defaulting to 1000 [ 2194.797402][T30496] lo speed is unknown, defaulting to 1000 [ 2194.806079][T30496] lo speed is unknown, defaulting to 1000 [ 2194.862001][T30496] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 2194.899174][T30496] lo speed is unknown, defaulting to 1000 [ 2194.906285][T30496] lo speed is unknown, defaulting to 1000 [ 2194.913314][T30496] lo speed is unknown, defaulting to 1000 [ 2194.920231][T30496] lo speed is unknown, defaulting to 1000 [ 2194.926645][T30496] lo speed is unknown, defaulting to 1000 [ 2194.933225][T30496] lo speed is unknown, defaulting to 1000 [ 2303.839126][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 2303.846097][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P30504/1:b..l P5204/1:b..l [ 2303.855892][ C0] rcu: (detected by 0, t=10502 jiffies, g=166241, q=360 ncpus=2) [ 2303.863690][ C0] task:udevd state:R running task stack:24488 pid:5204 tgid:5204 ppid:1 task_flags:0x400140 flags:0x00004002 [ 2303.878364][ C0] Call Trace: [ 2303.881641][ C0] [ 2303.884571][ C0] __schedule+0x116a/0x5dd0 [ 2303.889085][ C0] ? find_held_lock+0x2b/0x80 [ 2303.893768][ C0] ? __pfx___schedule+0x10/0x10 [ 2303.898624][ C0] ? _raw_spin_lock+0x2e/0x40 [ 2303.903307][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 2303.908679][ C0] preempt_schedule_common+0x44/0xc0 [ 2303.913966][ C0] preempt_schedule_thunk+0x16/0x30 [ 2303.919169][ C0] _raw_spin_unlock+0x3e/0x50 [ 2303.923843][ C0] __d_lookup+0x227/0x4a0 [ 2303.928181][ C0] lookup_fast+0x17c/0x610 [ 2303.932604][ C0] walk_component+0x5b/0x5b0 [ 2303.937201][ C0] path_lookupat+0x142/0x6d0 [ 2303.941797][ C0] filename_lookup+0x224/0x5f0 [ 2303.946565][ C0] ? __pfx_filename_lookup+0x10/0x10 [ 2303.951867][ C0] ? find_held_lock+0x2b/0x80 [ 2303.956541][ C0] ? __might_fault+0xe3/0x190 [ 2303.961216][ C0] ? __might_fault+0xe3/0x190 [ 2303.965889][ C0] ? __might_fault+0x13b/0x190 [ 2303.970657][ C0] vfs_statx+0x101/0x3e0 [ 2303.974899][ C0] ? __pfx_vfs_statx+0x10/0x10 [ 2303.979664][ C0] ? getname_flags.part.0+0x1c5/0x550 [ 2303.985041][ C0] vfs_fstatat+0x7b/0xf0 [ 2303.989281][ C0] __do_sys_newfstatat+0x97/0x120 [ 2303.994303][ C0] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 2303.999957][ C0] do_syscall_64+0xcd/0x4c0 [ 2304.004459][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2304.010346][ C0] RIP: 0033:0x7f5855d11b0a [ 2304.014755][ C0] RSP: 002b:00007ffd0e56a908 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 2304.023165][ C0] RAX: ffffffffffffffda RBX: 00007ffd0e56ada0 RCX: 00007f5855d11b0a [ 2304.031130][ C0] RDX: 00007ffd0e56a910 RSI: 00007ffd0e56ada0 RDI: 00000000ffffff9c [ 2304.039093][ C0] RBP: 0000557bf5bda2c0 R08: 0000000000000000 R09: 0000000000000001 [ 2304.047059][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd0e56a9a0 [ 2304.055024][ C0] R13: 0000000000000100 R14: 0000557bed78abe0 R15: 00007ffd0e56b420 [ 2304.063005][ C0] [ 2304.066017][ C0] task:syz.0.6683 state:R running task stack:28184 pid:30504 tgid:30500 ppid:28845 task_flags:0x400140 flags:0x00004000 [ 2304.079506][ C0] Call Trace: [ 2304.082777][ C0] [ 2304.085704][ C0] __schedule+0x116a/0x5dd0 [ 2304.090225][ C0] ? __pfx___schedule+0x10/0x10 [ 2304.095091][ C0] ? mark_held_locks+0x49/0x80 [ 2304.099862][ C0] preempt_schedule_irq+0x51/0x90 [ 2304.104892][ C0] irqentry_exit+0x36/0x90 [ 2304.109301][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 2304.114754][ C0] RIP: 0010:stack_access_ok+0x0/0x200 [ 2304.120122][ C0] Code: 20 ff ff ff 44 8b 85 30 ff ff ff e9 ba fe ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <48> b8 00 00 00 00 00 fc ff df 41 57 41 56 4c 8d 77 08 41 55 41 54 [ 2304.139723][ C0] RSP: 0000:ffffc900045ef320 EFLAGS: 00000246 [ 2304.145786][ C0] RAX: 0000000000000002 RBX: 0000000000000001 RCX: ffffffff913e327c [ 2304.153747][ C0] RDX: 0000000000000008 RSI: ffffc900045ef3e0 RDI: ffffc900045ef3e8 [ 2304.161711][ C0] RBP: ffffc900045ef430 R08: ffffffff913e3280 R09: 0000000000000000 [ 2304.169676][ C0] R10: 0000000000000000 R11: 0000000000006afc R12: ffffc900045ef438 [ 2304.177641][ C0] R13: ffffc900045ef3e8 R14: ffffc900045ef3e8 R15: ffffc900045ef41c [ 2304.185625][ C0] unwind_next_frame+0xb7d/0x20a0 [ 2304.190650][ C0] ? __unwind_start+0x574/0x7f0 [ 2304.195497][ C0] __unwind_start+0x45f/0x7f0 [ 2304.200169][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2304.206326][ C0] arch_stack_walk+0x73/0x100 [ 2304.211003][ C0] ? __unwind_start+0x574/0x7f0 [ 2304.215852][ C0] ? __register_sysctl_table+0xb3/0x1900 [ 2304.221481][ C0] stack_trace_save+0x8e/0xc0 [ 2304.226155][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 2304.231544][ C0] ? __pfx___schedule+0x10/0x10 [ 2304.236409][ C0] kasan_save_stack+0x33/0x60 [ 2304.241132][ C0] kasan_save_track+0x14/0x30 [ 2304.245814][ C0] __kasan_kmalloc+0xaa/0xb0 [ 2304.250408][ C0] __kmalloc_noprof+0x223/0x510 [ 2304.255272][ C0] __register_sysctl_table+0xb3/0x1900 [ 2304.260730][ C0] ? is_module_address+0x5f/0xf0 [ 2304.265663][ C0] ? __pfx___register_sysctl_table+0x10/0x10 [ 2304.271647][ C0] ? is_module_address+0x69/0xf0 [ 2304.276578][ C0] ? register_net_sysctl_sz+0x228/0x3e0 [ 2304.282129][ C0] neigh_sysctl_register+0x31f/0x670 [ 2304.287415][ C0] ? __pfx_neigh_proc_base_reachable_time+0x10/0x10 [ 2304.294017][ C0] ? __pfx_neigh_sysctl_register+0x10/0x10 [ 2304.299832][ C0] ? inetdev_init+0x245/0x5a0 [ 2304.304508][ C0] ? inetdev_event+0xc5f/0x18a0 [ 2304.309358][ C0] ? notifier_call_chain+0xbc/0x410 [ 2304.314575][ C0] ? copy_net_ns+0x2a6/0x5f0 [ 2304.319165][ C0] ? create_new_namespaces+0x3ea/0xa90 [ 2304.324625][ C0] ? unshare_nsproxy_namespaces+0xc0/0x1f0 [ 2304.330434][ C0] ? ksys_unshare+0x45b/0xa40 [ 2304.335115][ C0] ? __x64_sys_unshare+0x31/0x40 [ 2304.340052][ C0] ? do_syscall_64+0xcd/0x4c0 [ 2304.344719][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2304.350784][ C0] devinet_sysctl_register+0xb6/0x200 [ 2304.356163][ C0] inetdev_init+0x2b8/0x5a0 [ 2304.360667][ C0] inetdev_event+0xc5f/0x18a0 [ 2304.365341][ C0] ? ib_netdevice_event+0xfc/0x330 [ 2304.370455][ C0] ? __pfx_inetdev_event+0x10/0x10 [ 2304.375580][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2304.381482][ C0] notifier_call_chain+0xbc/0x410 [ 2304.386508][ C0] ? __pfx_inetdev_event+0x10/0x10 [ 2304.391622][ C0] call_netdevice_notifiers_info+0xbe/0x140 [ 2304.397513][ C0] register_netdevice+0x182e/0x2270 [ 2304.402713][ C0] ? __pfx_register_netdevice+0x10/0x10 [ 2304.408262][ C0] ? __pfx_loopback_net_init+0x10/0x10 [ 2304.413719][ C0] register_netdev+0x34/0x50 [ 2304.418304][ C0] loopback_net_init+0x7a/0x170 [ 2304.423153][ C0] ? __pfx_loopback_net_init+0x10/0x10 [ 2304.428609][ C0] ops_init+0x1e2/0x5f0 [ 2304.432762][ C0] setup_net+0x1ff/0x510 [ 2304.437001][ C0] ? lockdep_init_map_type+0x5c/0x280 [ 2304.442367][ C0] ? __pfx_setup_net+0x10/0x10 [ 2304.447125][ C0] ? debug_mutex_init+0x37/0x70 [ 2304.451982][ C0] copy_net_ns+0x2a6/0x5f0 [ 2304.456395][ C0] create_new_namespaces+0x3ea/0xa90 [ 2304.461685][ C0] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 2304.467317][ C0] ksys_unshare+0x45b/0xa40 [ 2304.471825][ C0] ? __pfx_ksys_unshare+0x10/0x10 [ 2304.476850][ C0] ? do_user_addr_fault+0x843/0x1370 [ 2304.482140][ C0] __x64_sys_unshare+0x31/0x40 [ 2304.486915][ C0] do_syscall_64+0xcd/0x4c0 [ 2304.491436][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2304.497422][ C0] RIP: 0033:0x7fbb9d18e9a9 [ 2304.501857][ C0] RSP: 002b:00007fbb9e04f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2304.510279][ C0] RAX: ffffffffffffffda RBX: 00007fbb9d3b6160 RCX: 00007fbb9d18e9a9 [ 2304.518260][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000044000280 [ 2304.526230][ C0] RBP: 00007fbb9d210d69 R08: 0000000000000000 R09: 0000000000000000 [ 2304.534198][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2304.542164][ C0] R13: 0000000000000001 R14: 00007fbb9d3b6160 R15: 00007ffda0a96e88 [ 2304.550181][ C0] [ 2304.553212][ C0] rcu: rcu_preempt kthread starved for 9067 jiffies! g166241 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 2304.564407][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 2304.574369][ C0] rcu: RCU grace-period kthread stack dump: [ 2304.580247][ C0] task:rcu_preempt state:R running task stack:27784 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 2304.593731][ C0] Call Trace: [ 2304.597005][ C0] [ 2304.599938][ C0] __schedule+0x116a/0x5dd0 [ 2304.604462][ C0] ? __pfx___schedule+0x10/0x10 [ 2304.609332][ C0] ? find_held_lock+0x2b/0x80 [ 2304.614008][ C0] ? schedule+0x2d7/0x3a0 [ 2304.618342][ C0] schedule+0xe7/0x3a0 [ 2304.622410][ C0] schedule_timeout+0x123/0x290 [ 2304.627264][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 2304.632633][ C0] ? __pfx_process_timeout+0x10/0x10 [ 2304.637920][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2304.643726][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 2304.649192][ C0] rcu_gp_fqs_loop+0x1ea/0xb00 [ 2304.653957][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 2304.659236][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 2304.664436][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 2304.669363][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 2304.674214][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2304.680023][ C0] rcu_gp_kthread+0x270/0x380 [ 2304.684696][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2304.689888][ C0] ? rcu_is_watching+0x12/0xc0 [ 2304.694651][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 2304.699877][ C0] ? __kthread_parkme+0x19e/0x250 [ 2304.704903][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2304.710097][ C0] kthread+0x3c5/0x780 [ 2304.714160][ C0] ? __pfx_kthread+0x10/0x10 [ 2304.718749][ C0] ? rcu_is_watching+0x12/0xc0 [ 2304.723507][ C0] ? __pfx_kthread+0x10/0x10 [ 2304.728097][ C0] ret_from_fork+0x5d4/0x6f0 [ 2304.732690][ C0] ? __pfx_kthread+0x10/0x10 [ 2304.737277][ C0] ret_from_fork_asm+0x1a/0x30 [ 2304.742057][ C0] [ 2304.745069][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 2304.751383][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 2304.761267][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2304.771312][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 2304.776945][ C0] Code: 6b 6d 02 e9 83 fb 02 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 89 23 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 2304.796547][ C0] RSP: 0018:ffffffff8e207e08 EFLAGS: 000002c6 [ 2304.802609][ C0] RAX: 000000000d76a123 RBX: 0000000000000000 RCX: ffffffff8b868c99 [ 2304.810573][ C0] RDX: 0000000000000000 RSI: ffffffff8de2ff26 RDI: ffffffff8c1573e0 [ 2304.818537][ C0] RBP: fffffbfff1c52ef0 R08: 0000000000000001 R09: ffffed1017086645 [ 2304.826501][ C0] R10: ffff8880b843322b R11: 0000000000000001 R12: 0000000000000000 [ 2304.834464][ C0] R13: ffffffff8e297780 R14: ffffffff90a94050 R15: 0000000000000000 [ 2304.842428][ C0] FS: 0000000000000000(0000) GS:ffff888124720000(0000) knlGS:0000000000000000 [ 2304.851356][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2304.857934][ C0] CR2: 00007f4377caf16f CR3: 000000000e382000 CR4: 00000000003526f0 [ 2304.865900][ C0] Call Trace: [ 2304.869173][ C0] [ 2304.872099][ C0] default_idle+0x13/0x20 [ 2304.876427][ C0] default_idle_call+0x6d/0xb0 [ 2304.881183][ C0] do_idle+0x391/0x510 [ 2304.885259][ C0] ? __pfx_do_idle+0x10/0x10 [ 2304.889846][ C0] ? trace_sched_exit_tp+0x31/0x130 [ 2304.895047][ C0] cpu_startup_entry+0x4f/0x60 [ 2304.899810][ C0] rest_init+0x16b/0x2b0 [ 2304.904062][ C0] ? acpi_subsystem_init+0x133/0x180 [ 2304.909346][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 2304.914886][ C0] start_kernel+0x3ee/0x4d0 [ 2304.919396][ C0] x86_64_start_reservations+0x18/0x30 [ 2304.924855][ C0] x86_64_start_kernel+0x130/0x190 [ 2304.929968][ C0] common_startup_64+0x13e/0x148 [ 2304.934912][ C0] [ 2304.942928][T30504] lo speed is unknown, defaulting to 1000