last executing test programs: 2m15.104154755s ago: executing program 4 (id=1006): prlimit64(0x0, 0x5, &(0x7f00000003c0)={0x7, 0x100}, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f00000027c0)={0x2020}, 0x5ae) syz_io_uring_setup(0xf00, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x55}, &(0x7f0000000100), 0x0, &(0x7f0000000280)=0x0) close(0xffffffffffffffff) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x844) r6 = dup3(r4, r3, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0xd3, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0xb}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000900)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) syz_ublk_setup_io_uring(0x76e3, &(0x7f0000000180)={0x0, 0xf4bc, 0x80, 0x0, 0x92}, &(0x7f0000000200)=0x0, &(0x7f0000000240), &(0x7f0000000480)) syz_io_uring_submit(r8, 0x0, r2, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x40}) 2m13.501547592s ago: executing program 4 (id=1009): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x2710, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xf9, 0x40, 0x42, 0xfb, 0x0, 0xc, 0x0, 0xfb, 0x4, 0xfc, 0x38}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x100000000005, 0x20, 0x3, 0x2, 0x80000000106c, 0x100, 0x8000000000000, 0x80000004040080, 0x1c00000, 0x6, 0x0, 0xf, 0x0, 0x8000], 0x1, 0x3c4210}) getpgrp(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) futex(&(0x7f0000004000)=0x1, 0x5, 0x0, 0x0, &(0x7f0000004000), 0xb0024000) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000300)=0x3, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x1, 0x2, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_EXPECT_FLAGS={0x8}]}, 0x1c}}, 0x20008000) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000000280)={0x30, 0x1, 0x4, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x8}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xfffffffb}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) 2m11.473284163s ago: executing program 4 (id=1017): mq_open(&(0x7f00000013c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5\x00\x02\x00\x00\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x00\x00\x00\x00\x00\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\xac8t\xc5\xd7Q?\xb4\xeex@\xe4\xcc\xfe\x98\xf63\xde\xcd\x1841\x93\xe5\xb7D\xd49\"\f<\x8d\xa5m\x883\xcf\xc7\xe5Y\xb6H\xa4\xc4_Q|\v\x06:\xdap48T\xa6\xcb:+\x7f\x9771fK=\xc2)\xa60\x1d>\xd2\xe8\xc0\x03\xa7e\xbeo\x8d\xe3\x854\x11\xc5d\xcb\x82', 0x40, 0x48, 0x0) r0 = fanotify_init(0xf00, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) fanotify_mark(r0, 0x541, 0x4000101b, r1, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @loopback, 0x8}, 0x1c) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0x190ec) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x9730514a12869b60, 0x0) ioctl$COMEDI_INSNLIST(r5, 0x8010640b, &(0x7f0000000200)={0x0, 0x0}) sendmmsg$inet6(r2, &(0x7f0000001140), 0x0, 0x54) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000000), &(0x7f0000000080)=0x8) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x1f1501) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) 2m8.22658796s ago: executing program 4 (id=1024): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x2710, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xf9, 0x40, 0x42, 0xfb, 0x0, 0xc, 0x0, 0xfb, 0x4, 0xfc, 0x38}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x100000000005, 0x20, 0x3, 0x2, 0x80000000106c, 0x100, 0x8000000000000, 0x80000004040080, 0x1c00000, 0x6, 0x0, 0xf, 0x0, 0x8000], 0x1, 0x3c4210}) getpgrp(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) futex(&(0x7f0000004000)=0x1, 0x5, 0x0, 0x0, &(0x7f0000004000), 0xb0024000) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000300)=0x3, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000000280)={0x30, 0x1, 0x4, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x8}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xfffffffb}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2m6.620374649s ago: executing program 4 (id=1026): syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2800) r0 = syz_clone(0x23100000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x66, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[], 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x100000000000001, r3, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) r4 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) fsopen(0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0xfa) getpgrp(r4) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000700)="580000001500add427323b472545b45602117fffffff81000e220e2280007f000001e801000500000000003ac7100003ffffffffd3daffffffffffe7ee000000deff000000ddbd57cff2ffe293a2afebd998c88d5d6b3710", 0x58}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd788}, 0x94) ptrace$setopts(0x4206, r0, 0x0, 0xe) prlimit64(r0, 0x6, &(0x7f0000000000)={0x2, 0x9}, &(0x7f0000000040)) 2m2.214870222s ago: executing program 4 (id=1037): r0 = socket(0xa, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$midi(0x6, 0x31, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r4, r3, 0x8000, 0x3) bpf$MAP_CREATE(0x200000000000001d, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) chroot(&(0x7f00000002c0)='./file0\x00') timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e22, @local}, 0x10) pread64(0xffffffffffffffff, 0x0, 0x0, 0x2f) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r5, 0x4001af84, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) 1m46.992050127s ago: executing program 32 (id=1037): r0 = socket(0xa, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$midi(0x6, 0x31, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r4, r3, 0x8000, 0x3) bpf$MAP_CREATE(0x200000000000001d, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) chroot(&(0x7f00000002c0)='./file0\x00') timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e22, @local}, 0x10) pread64(0xffffffffffffffff, 0x0, 0x0, 0x2f) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r5, 0x4001af84, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) 9.876514232s ago: executing program 2 (id=1296): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff90acedc6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x10, 0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0}) prctl$PR_GET_SECUREBITS(0x1b) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x7e) syz_emit_ethernet(0xf9, &(0x7f0000001100)={@link_local, @random="0000fc00", @void, {@ipv4={0x800, @gre={{0x29, 0x4, 0x1, 0x6, 0xeb, 0x64, 0x0, 0x4, 0x2f, 0x0, @multicast1, @multicast2, {[@lsrr={0x83, 0x23, 0xb1, [@loopback, @empty, @empty, @remote, @multicast1, @broadcast, @private=0xa010101, @multicast1]}, @timestamp={0x44, 0x20, 0xe5, 0x0, 0x9, [0x3, 0x9b, 0x80, 0xa8, 0x3, 0x4, 0x9]}, @cipso={0x86, 0x4d, 0xffffffffffffffff, [{0x6, 0x8, "f0c0cc0eb5b4"}, {0x2, 0x2}, {0x1, 0x8, "532aa6c3a0d7"}, {0x5, 0xb, "2a285014176a8f4289"}, {0x6, 0xc, "be5f39f0b3ebc16ce1df"}, {0x7, 0x4, "e321"}, {0x2, 0xb, "70031a7b18f2486d15"}, {0x5, 0xa, "0ac356ab002bf6f2"}, {0x1, 0x5, "36cfab"}]}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x3, 0x1, 0xe2, 0x0, 0x1, 0x1, 0x1, 0x8}, 0x1, {0x8}}}, {0x8, 0x22eb, 0x4, {{0xf, 0x2, 0x2, 0x3, 0x0, 0x0, 0x6}, 0x2, {0x9c, 0xbd, 0x0, 0x19, 0x1, 0x1, 0x3, 0x0, 0x1}}}, {0x8, 0x6558, 0x2, "f80f83"}}}}}}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r3, 0x40096101, &(0x7f0000000a40)={{&(0x7f00000009c0)={'Accelerator0\x00', {&(0x7f0000000880)=@adf_dec={@format={'Dc', '0', 'RingRx\x00'}, {0x7}, {&(0x7f00000003c0)=@adf_dec={@bank={'Bank', '0', 'InterruptCoalescingEnabled\x00'}, {0x9}}}}}, {&(0x7f0000000940)={'Accelerator1\x00'}}}}, 0x8}) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) r6 = syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x80200) ioctl$NBD_SET_FLAGS(r6, 0xab0a, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9e}, [@ringbuf_output={{0x18, 0x5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 9.8735126s ago: executing program 3 (id=1297): write$binfmt_aout(0xffffffffffffffff, 0x0, 0xc8) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000001840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001800)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1734}, 0x1, 0x0, 0x0, 0x4048015}, 0x4000004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, 0xffffffffffffffff, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) 9.791117785s ago: executing program 5 (id=1298): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_TSC_KHZ_cpu(r2, 0xaea3) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x4d, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0x10, 0xffff}, {0xfff3, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x4000010) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"}) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) openat$vnet(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0xfdef) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r6 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$6lowpan_enable(r6, &(0x7f00000001c0)='1', 0x1) write$6lowpan_control(r5, &(0x7f0000000280)='connect aa:aa:aa:aa:aa:10 2', 0x1b) 8.515497939s ago: executing program 2 (id=1300): r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x12580, 0x80) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x0, 0xa3b1, 0x200, 0x0, 0x52}, &(0x7f00000001c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8f02, 0x1, 0x3, 0x29a}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5d8c, 0x200, 0x1, 0x10e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa33b, 0x280, 0x1, 0xa7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x92f0, 0x8000, 0x1, 0x351}}], 0x4, &(0x7f0000001440)={0x2e, 0x1a, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xff}, 0x0, 0x0, '\x00', {0x0, 0x1f, 0x0, &(0x7f0000000440)=@buf_max_buf="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"}}, &(0x7f00000014c0)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000001500)={0x1ff, r0, 0x0, {0x6, 0x7fffffff}, 0x5}, 0x1) r2 = openat(r0, &(0x7f0000000100)='./file0\x00', 0x8200, 0x101) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat2$dir(0xffffffffffffff9c, &(0x7f0000001680)='.\x00', &(0x7f0000000040), 0x58) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000001780)=0x1, 0x4) r6 = openat(0xffffffffffffffff, &(0x7f0000001540)='./file0\x00', 0x400001, 0x1) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0, 0xfc}}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xec, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private1, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x2, 0x0, 0x2, 0xe0, 0x80}, 0x2}, [@migrate={0x9c, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in6=@loopback, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x2}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private0, @in6=@loopback, @in=@broadcast, 0x6c, 0x1, 0x0, 0x0, 0x2, 0xa}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB="700000000009010400000000000000000a00000008000540000000160900010073797a30000000003c0002000c00028005000100000000002c000180140003000000000000000000000000000000000014000400200100000000000000000000000000020c0004"], 0x70}}, 0x4008000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000001600)={'gretap0\x00', &(0x7f00000015c0)={'syztnl2\x00', 0x0, 0x8000, 0x700, 0x7, 0x1, {{0x8, 0x4, 0x1, 0x29, 0x20, 0x68, 0x0, 0xd, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x38}, @broadcast, {[@generic={0x86, 0xc, "3928097d0b72549fcc32"}]}}}}}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f0000001740)={&(0x7f0000001580), 0xc, &(0x7f0000001700)={&(0x7f0000001640)={0x8c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x10}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xc9}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xa3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xa}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffffff81}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x18, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10001}, 0x4000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000001400000004000000002000000000000000000000300000000030000000300000000000000000000000000000105000000240000000000000000000003000000000200000002000000000000000000"], 0x0, 0x5a}, 0x28) 8.424843918s ago: executing program 5 (id=1301): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x600000, 0xb82c09fa4108ba73, &(0x7f0000a00000/0x600000)=nil) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xb, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x800}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xee8, 0x1c, 0x800, 0x8}, {0x7, 0x2, 0x7, 0x1003, 0x5, 0x20000007}, 0x6db6312a, 0x7, 0x1257}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x20040000) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@deltfilter={0x2c64, 0x2d, 0x200, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x5}, {0x0, 0x1}, {0xe, 0xc}}, [@filter_kind_options=@f_route={{0xa}, {0xc78, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x43}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x6f}, @TCA_ROUTE4_POLICE={0x408, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x5, 0xb, 0x8, 0x3382, 0x2, 0x6d9, 0x42e6, 0xbc0a, 0x1, 0x3, 0x4, 0xfffffffb, 0x2, 0x401, 0x6, 0x101, 0x3, 0xa, 0xfffffffc, 0x8, 0x6, 0x46c, 0x9, 0x6, 0x6, 0x2, 0x17db, 0x0, 0x4, 0x0, 0x9, 0x6, 0x2, 0x6e6d, 0x5, 0x3, 0x7, 0x7, 0x1, 0x7fffffff, 0x8, 0x8, 0xa, 0xfffffffd, 0x0, 0xf, 0xfffffffc, 0x8, 0x7, 0x9, 0x5, 0x4, 0x53a, 0x0, 0x8, 0x3, 0x5, 0x1, 0x2, 0x3, 0x8, 0x40000000, 0xff, 0x2, 0x0, 0x5, 0x8000, 0x7, 0xdf4a, 0x8, 0x2, 0x800, 0xb, 0x9, 0x8000, 0x400, 0x88, 0x10000, 0xd0d1, 0x10000, 0x8, 0x6, 0x4, 0xfff, 0x4, 0x4, 0x5a51, 0x7, 0x8828, 0x5, 0x0, 0x7, 0xff, 0xf94, 0x100, 0x6, 0xfffeffff, 0x9, 0x6, 0x7, 0x0, 0xb58c, 0x1, 0xe, 0x401, 0x100, 0x2, 0x1ff, 0x1, 0xc70, 0x0, 0xff, 0x1a0182ae, 0x2, 0x4, 0xfffffffb, 0x1, 0x10001, 0x1, 0x6, 0x7fff, 0x6, 0x6, 0x7, 0x1, 0x7, 0xfff, 0x7, 0x3, 0x6, 0xf, 0x6, 0x401, 0x1000, 0x3, 0xd562, 0x2, 0xc50, 0x4, 0x3, 0x7fffffff, 0xfffffffc, 0x7, 0x401, 0x0, 0xd82a, 0x2, 0x7, 0xffffffff, 0x1, 0x80000101, 0x4, 0x3, 0x77, 0x3, 0x3, 0x9, 0xfffffffe, 0xad4, 0x1, 0x6c, 0x1, 0x200, 0x0, 0x0, 0x5, 0x5, 0xfffffc00, 0x3878, 0x8, 0x8, 0x4, 0x0, 0x8, 0x5, 0x8, 0x4b, 0x1, 0xd, 0xffffff71, 0x9, 0x28, 0x3, 0xb8c, 0x3, 0x7, 0xb900, 0x5, 0x2, 0x2, 0x4, 0x2, 0xffff, 0x100, 0x7, 0x2d, 0xfffffffd, 0x6, 0x6, 0x4, 0x3, 0x6, 0x6, 0xf, 0x3ff, 0x40, 0x3, 0xffffffff, 0xffffffa0, 0x5, 0x3ff, 0x6, 0xffffff80, 0x1, 0x7, 0xc91, 0x40, 0x5, 0x9, 0x80000001, 0x1, 0xffff, 0x7, 0x4, 0x6, 0xc911, 0x2, 0x8, 0x3, 0x772, 0x9c0a, 0x8, 0x5c, 0xf4, 0x6, 0x2, 0xffff, 0xf, 0x59b, 0xa, 0x4, 0x99, 0x3, 0x1, 0x1, 0x3, 0x1, 0x7, 0x4, 0x0, 0x781, 0x4, 0x3, 0x4, 0x0, 0x6]}]}, @TCA_ROUTE4_POLICE={0x83c, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x101, 0x1000, 0x9, 0xa, 0x8000, 0x6, 0x0, 0x2, 0xd4e4, 0x3, 0x0, 0xc, 0x3, 0xfffffffc, 0xc5e, 0x5, 0xb, 0x0, 0x4, 0x300000, 0xb, 0x8, 0x7, 0x800, 0xfffffffc, 0x2, 0xf, 0x2, 0xf, 0x3, 0xa1fd, 0xfffffff9, 0x6416, 0x7, 0x9, 0x7, 0x1, 0x5, 0x80000000, 0x3, 0xc, 0x5, 0x200, 0x101, 0x401, 0x7ff, 0x9, 0x7fff, 0x7, 0x7, 0x2, 0x4, 0x1f4, 0x7fffffff, 0x0, 0x200, 0x5, 0x3, 0x6, 0x1, 0x5, 0x5, 0x9, 0x0, 0x4, 0xf5ff, 0x1, 0x8, 0x6, 0x5, 0x2, 0xe469, 0x1, 0x2, 0x1, 0x6, 0x9, 0x1c7, 0xa22d, 0x9, 0x2, 0xef, 0x6, 0x0, 0x69, 0xd458, 0xd, 0x8, 0xfffff000, 0x1, 0x1, 0x7, 0x9, 0x1d, 0x1, 0x8000, 0x7, 0x47, 0x1, 0x9, 0x9, 0xda, 0x6, 0x0, 0x401, 0x28, 0x8, 0x1, 0x4, 0x9, 0x7, 0x9, 0x4, 0x7f, 0x5, 0x4, 0xa21, 0x1000, 0x88a, 0x1, 0x1, 0x9, 0x0, 0x6, 0x8, 0x6, 0x3d, 0x6, 0xf21f, 0x5, 0x128, 0x2, 0x9, 0x2, 0x6, 0x9, 0x8, 0x6, 0x5, 0xc765, 0x401, 0xa74, 0x3, 0xffffffc0, 0xb, 0x1, 0x5, 0xffffffff, 0x101, 0x80, 0x9, 0x10001, 0x4, 0x5, 0x9, 0x800, 0x3, 0x5028, 0x3, 0x387, 0x7fffffff, 0x3, 0xc5c6, 0x4, 0xfff, 0x7, 0x9, 0x5, 0x9, 0x1, 0xc, 0x9, 0x0, 0x9, 0x9, 0x100, 0x1, 0x4, 0xfffffffb, 0x9, 0x4, 0xf052, 0x6, 0x3, 0xffff1395, 0x7, 0x6, 0x7, 0xb, 0x2, 0xbb, 0x5, 0x2, 0x9, 0x6, 0xb41, 0x7fff, 0x8, 0x46, 0x0, 0xfffffffc, 0x8, 0x9, 0x3, 0x9, 0x6, 0x6, 0x65, 0x8001, 0x4, 0xffff0001, 0x1000, 0x9, 0x9, 0x9, 0xb6, 0x3, 0xfffffff2, 0x2, 0x9, 0x9d9, 0x9, 0xd1, 0xdf91, 0x0, 0x0, 0x2, 0x4, 0x0, 0x12d, 0x8, 0x7, 0x9, 0xd6cc, 0x1, 0x0, 0x3, 0x1, 0x0, 0x5, 0x9, 0xffffffff, 0xfffffffd, 0x7ff, 0x5, 0x80, 0x10, 0x7, 0x4, 0xc, 0x7, 0xb, 0x7, 0x8, 0x10001]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x73cc}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x3, 0x3fc, 0x1ff, 0x6e, 0x7fff, 0x81, 0xe8ed, 0x2, 0x6, 0x6e4, 0x80000001, 0x3, 0x4, 0x9, 0x7, 0x1e, 0x6dc, 0xd, 0x0, 0x3, 0x10, 0x326, 0xa, 0xa5, 0x2, 0x8, 0xffffffff, 0x1, 0x10000000, 0x8, 0x6e69, 0x7, 0x5, 0x9a, 0x0, 0x7fff, 0x5, 0xfffffff8, 0x6, 0x7f, 0x6, 0x3, 0x15ca, 0x4, 0x1, 0x7, 0x8, 0x2, 0x2, 0x40, 0x4, 0x5, 0x4, 0x2, 0x3, 0x5, 0x10001, 0xfffff800, 0xfffffffd, 0xf, 0x6, 0x7ff, 0x1ff, 0x5c0, 0x2, 0x79, 0x4, 0x9, 0x7, 0x9, 0x69, 0xa, 0x6, 0x1, 0x4, 0x8, 0x9c, 0x0, 0x5, 0xe00000, 0xfffffffc, 0x8, 0x0, 0x10, 0xd79, 0x624, 0x817, 0x8, 0xfff, 0x0, 0x7, 0x9, 0xf9b3, 0x0, 0xa, 0x3, 0x1, 0x76ac, 0x9, 0x8, 0xfff, 0x8000, 0x1, 0x4, 0x4, 0x0, 0x0, 0x7, 0x6, 0x6c, 0x0, 0x2, 0x8, 0x6, 0x1, 0x1, 0x7ce3, 0x3, 0x3, 0x385eec19, 0x393, 0x8, 0x0, 0x9, 0x0, 0x5, 0xffff, 0x8001, 0x3, 0x5, 0x5c7, 0x5, 0x7, 0x6a5, 0x4, 0x4, 0xb, 0x1, 0x9c2, 0x0, 0x5, 0x3, 0x6, 0x100, 0xdb11, 0xfffffffa, 0x2, 0x8, 0x870c, 0x1, 0x3, 0x40c889c5, 0x0, 0x1, 0x7fffffff, 0x5d67, 0xffff, 0xc, 0xe, 0x37, 0x7ff, 0x3, 0xe, 0xd8d5, 0x4, 0x100, 0x2, 0x8, 0x6, 0x3, 0x10, 0x7, 0x7f, 0x7, 0x3, 0x99c, 0x1ff, 0x80, 0x6, 0x7fffffff, 0x2, 0x3ff, 0x1, 0x1, 0x2, 0x6, 0x2, 0x3, 0x57, 0x4, 0x4, 0x2, 0x4, 0xb3, 0x401, 0x10, 0x8, 0x8, 0xffffffff, 0xb, 0x8, 0x5, 0x80000001, 0x0, 0x2, 0x81, 0x9, 0x7, 0x8001, 0x7fff, 0x2, 0x100, 0x0, 0x6838, 0x1, 0xfffffffd, 0x1000, 0x7, 0x3, 0xfffff001, 0x4, 0x7, 0x366, 0x9, 0x6, 0x3, 0x1, 0x0, 0x8, 0xd28, 0x9, 0x0, 0x7, 0xf0c2, 0xeb54, 0x2, 0x8001, 0x5, 0x3, 0x0, 0x6, 0x1, 0x3f, 0x122, 0x1, 0x14, 0x2, 0x2, 0xec5, 0x7f, 0x2, 0x78d1, 0x7fff, 0x9, 0x4]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10001}, @TCA_POLICE_RATE64={0xc, 0x8, 0x800}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0xed}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x26}, @TCA_ROUTE4_IIF={0x8, 0x4, r9}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xf0}]}}, @TCA_RATE={0x6, 0x5, {0x6}}, @TCA_RATE={0x6, 0x5, {0x9, 0x4}}, @filter_kind_options=@f_cgroup={{0xb}, {0x1f00, 0x2, [@TCA_CGROUP_POLICE={0xc2c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x56, 0xfffffffc, 0x1, 0x5, 0xfffffc00, 0x1e016e3c, 0xfffff59b, 0xa2b2, 0x4, 0x42, 0x6, 0x6, 0x1, 0x79, 0x9e4, 0x400, 0xfffffff8, 0x4, 0x5, 0x2, 0x6, 0x8, 0x3, 0x6, 0x5, 0x4, 0xfffffffd, 0x6e0f, 0x1e17, 0x1, 0x2, 0xfffffff8, 0x8, 0xff, 0x1, 0x80, 0x7, 0xfffffffe, 0x2, 0x0, 0x10, 0x4, 0x5, 0x5bd83c2, 0x7ff, 0x8, 0x2, 0xffff, 0x100, 0xfffffc00, 0x9, 0x7, 0x386f, 0x7, 0x401, 0x21d9, 0x6, 0x1, 0x81, 0x7f, 0xfffeffff, 0xc, 0x7fff, 0x5, 0x8, 0xfffffffb, 0x7, 0x80000000, 0x9, 0x824, 0x10001, 0x1, 0xa, 0x1, 0x8, 0x5, 0x7, 0xfffffffc, 0x0, 0x0, 0x8001, 0x8, 0x81, 0x8, 0x1a00000, 0x7, 0x9, 0x9, 0x8000, 0x6, 0x1, 0x4f3643d, 0x3, 0x6, 0x2, 0x5, 0x6, 0x5ee2, 0x3, 0xe, 0x9, 0x8, 0x8, 0x4, 0x3, 0x8ee2, 0x3, 0x4, 0x1, 0x6, 0x7, 0x1, 0x5, 0x80000000, 0x1, 0x0, 0x8, 0x80000001, 0x9e1, 0xa, 0x1, 0x3, 0x10001, 0x1, 0x0, 0x5, 0x80000000, 0x7, 0x4, 0x78, 0x8, 0x7fffffff, 0x6, 0x6, 0x80, 0x80000000, 0xff, 0x7, 0x5, 0x3, 0x7ff, 0x7ff, 0x3, 0x8001, 0x9, 0x6, 0x7, 0x1, 0x5, 0x101, 0x9, 0xa8, 0x80000000, 0x4, 0x1, 0x101, 0x9, 0x2, 0x8, 0x802, 0x40, 0x80000001, 0x0, 0x0, 0x4, 0x8, 0xfffffffd, 0xffff, 0xa5, 0x3, 0x6, 0x2, 0x3, 0x9, 0xfffffffe, 0xe57b, 0xc, 0x6, 0x6d, 0xfffffffd, 0x1, 0xa88d, 0x1, 0x1, 0x3, 0x4489e45b, 0x3, 0x2, 0x4, 0x7, 0x0, 0x5, 0x6b7, 0xe, 0x6, 0x7, 0x5, 0x61, 0x0, 0x40, 0xbe89, 0x1000, 0xc34, 0x4, 0x5fc, 0xe, 0xfffffffa, 0x1, 0xce, 0xb47, 0x5, 0x7, 0xafa, 0x3, 0x4, 0x1, 0x1, 0x8a, 0x1, 0x634d, 0x3, 0x1, 0x6, 0x9, 0x0, 0x5, 0x1, 0x8001, 0x10, 0xd5, 0x5, 0x7, 0x8000, 0xe2, 0x7, 0x46f, 0x40, 0xffffffff, 0x84, 0xfffffffc, 0x1, 0x10001, 0x101, 0x9, 0x2, 0x5, 0x400, 0x6d, 0x2, 0x5, 0x3, 0x100, 0x9, 0x5]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xd6801dd6}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x1, 0x100, 0x0, 0xf0, 0x7, 0x4, 0x8, 0x3, 0x100, 0x54fa, 0x200, 0x27, 0xfffffffd, 0x1ff, 0xee4, 0x6, 0x5, 0x0, 0xfffffffc, 0xc2, 0x459, 0x3, 0xb3d, 0x1, 0x9, 0x200, 0x3, 0x1, 0x200, 0x3, 0xbc, 0xfe, 0x2, 0xfffffff2, 0x10, 0x0, 0x2, 0x6, 0x4, 0x9, 0x0, 0x7fff, 0x9db, 0x5, 0xcb, 0x4b4, 0xffffffff, 0x120, 0x10, 0x1ff, 0x2, 0x5, 0x1, 0x4, 0x1, 0x7ff, 0x88a, 0xff, 0x101, 0x4, 0x7, 0x5, 0x1, 0x2, 0x3, 0x401, 0xe, 0x8, 0x8, 0x7fff, 0x8, 0xf84, 0x4, 0x7, 0xdc5e, 0xfff, 0x9, 0x80000000, 0x5, 0x0, 0x8, 0x2, 0x6, 0x2, 0x6, 0x2, 0x0, 0x4, 0x4, 0x4b67, 0x0, 0xd, 0x5, 0x0, 0x80000000, 0x5, 0x8, 0x3, 0x1000, 0x4fb3, 0xc, 0x1, 0x8001, 0x2, 0x7f, 0x5, 0x8001, 0x4, 0x81, 0x9ef, 0x9, 0x5, 0xb, 0x1, 0x9, 0x6, 0x9, 0xfffffffc, 0x1ff, 0x8, 0x3, 0x8, 0xffff9708, 0x6, 0x1ff, 0x1, 0xd60c, 0x19, 0x6, 0x3, 0x80000001, 0x10, 0xfffffffe, 0x1e6, 0xf3, 0x7fffffff, 0xff, 0x6, 0x1, 0x7, 0xc6, 0x1, 0x1, 0x9, 0x81, 0x5, 0x200, 0x3, 0xffffb85a, 0xe3, 0xb, 0x0, 0xa0ba, 0x0, 0x2, 0xff, 0x40, 0x8, 0x6, 0x2, 0x1000, 0xe1, 0x101, 0x1d00, 0x8, 0xf72, 0xf61e, 0x3ff, 0xc7, 0x8001, 0x7, 0x0, 0x5, 0xf, 0x800, 0x0, 0x8, 0x54, 0x90, 0x5, 0x94, 0xfffffffd, 0x4021, 0xa3af, 0x4d, 0x8, 0x2, 0x8, 0x4, 0x2, 0x3, 0x6, 0x9, 0x1, 0x2, 0x7, 0x2, 0x1f1, 0x3, 0xa65, 0x1, 0x4, 0x8, 0x6, 0x3, 0x3ff, 0x3ff, 0x6, 0xd834, 0x0, 0x0, 0x0, 0x3ff, 0x25e, 0x800, 0x6, 0x4, 0x4, 0xc, 0x8, 0x1, 0x4, 0x63b, 0xca, 0x8, 0x2, 0xff, 0x9a, 0x7fffffff, 0x6, 0xfffffffd, 0x6, 0xc578, 0xc732, 0xfffff801, 0x6, 0xe, 0x80, 0x8, 0x9, 0x5, 0xf03a, 0x5, 0xdd, 0x10001, 0x6, 0x2, 0xffffffff, 0xa, 0x1, 0x0, 0x81, 0x2, 0x7, 0x66a9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x200, 0x2, 0x2, 0x3, 0x6, 0x2, 0x2, 0x1, 0xffffffff, 0x2, 0xa815, 0xffff, 0x47, 0x227, 0x7, 0x0, 0xf4bf, 0xc, 0x1ff, 0xab44, 0x1, 0x6, 0x5, 0x7, 0x8, 0x1000, 0x8, 0x2, 0xc, 0x100, 0x4, 0x8, 0xc, 0xefa, 0x5, 0x3, 0x3, 0x0, 0x7, 0x7, 0x8000, 0x7, 0x0, 0x2, 0x9, 0x4, 0x966, 0xffffff94, 0x8001, 0x6, 0x1000000, 0x4, 0x7, 0x2, 0x0, 0x7d, 0x2, 0xffff3319, 0x5, 0x63, 0x1ff, 0x5, 0x5, 0x8, 0x3, 0x4, 0x1, 0xb, 0x6, 0x3, 0x10, 0x10000, 0x5, 0xddd, 0x7, 0x0, 0x2, 0x8, 0x1000, 0x20000005, 0x1, 0xd, 0x7fff, 0x7, 0x7, 0x1000, 0xb, 0xec62, 0x9faa, 0xd, 0x6, 0x21, 0x758, 0x0, 0x1, 0x1, 0x10000, 0x3, 0x3, 0x2, 0x80, 0x95, 0x3, 0xdee1, 0x1a3, 0x7ff, 0x6c8, 0x8, 0x4, 0x5, 0x10000, 0xa, 0x4, 0x23c, 0x1, 0x80, 0x0, 0x7f, 0x6, 0x1, 0xe, 0x1, 0x4, 0x8001, 0x401, 0xb2d, 0x2, 0xe34, 0x7, 0xfffff000, 0x1, 0xf, 0x2, 0xdd32, 0x8, 0x40, 0x4, 0x6, 0xd4819d76, 0xe, 0x1, 0x0, 0x20000, 0x7fff, 0x2, 0x5, 0xb, 0x7, 0xffffffff, 0x9, 0x1, 0x3, 0x1000, 0xd, 0x7, 0x8, 0xea66, 0x5, 0x7, 0x2, 0x3, 0x7, 0xfffffff7, 0x14, 0xb2e, 0xb, 0xfffffff9, 0xd, 0x6, 0x9d, 0xd, 0x8, 0x80000000, 0x1, 0x5, 0x3, 0x6, 0x8, 0x0, 0xd, 0x1, 0xe70, 0x2, 0x4, 0x10001, 0x9, 0x1ff, 0x5, 0x1, 0x2, 0x0, 0x2, 0x3, 0x6, 0x8, 0xa, 0x6, 0x1, 0x6, 0x1000, 0x41325017, 0x2, 0xffff, 0xffffffff, 0x1, 0x9, 0x3, 0x100, 0x80000000, 0x80000000, 0x250, 0x1000, 0x6, 0x6, 0x69, 0x7fffffff, 0x1, 0xee34, 0x10001, 0x4, 0x4e4d, 0x0, 0x4000000, 0x2, 0x6, 0x3ff, 0x9, 0x2, 0x7fffffff, 0x7, 0x6, 0x2, 0x6, 0x5, 0x1, 0x80, 0x3d, 0x7fff, 0x5, 0x8, 0x99, 0x40, 0xd3, 0x1, 0x2, 0x1, 0x3, 0x1, 0x7, 0xa, 0x1, 0x6, 0x101, 0x800, 0x5, 0xe]}]}, @TCA_CGROUP_ACT={0x12d0, 0x1, [@m_mirred={0x60, 0x17, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x54, 0x2981, 0x10000000, 0x1000, 0x6}, 0x4, r2}}]}, {0x12, 0x6, "b5e4c757c83038184609212a9dbc"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_bpf={0x10d4, 0x1e, 0x0, 0x0, {{0x8}, {0x108c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_FD={0x8, 0x5, r4}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x656, 0x9, 0x10, 0x4}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_FD={0x8, 0x5, r7}, @TCA_ACT_BPF_NAME={0xffe, 0x6, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}, @TCA_ACT_BPF_OPS={0x4c, 0x4, [{0xff27, 0x8, 0x6, 0x9}, {0xb, 0x8, 0xd, 0xfffffff8}, {0x4, 0xb9, 0x9, 0x7}, {0x116, 0xe0, 0x5, 0x2d2}, {0x9366, 0x2, 0x2, 0xa}, {0x0, 0x6, 0x1, 0x7}, {0x3, 0x8, 0x7, 0xfffffff9}, {0x5, 0x0, 0x2, 0x3}, {0x5, 0x0, 0x59, 0x6436}]}]}, {0x21, 0x6, "3ecf8dab7ba5bbe05dd527412139832e5d033527b1372748c27294f8a6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_mirred={0x108, 0x1b, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6efc, 0xffffffff, 0x20000000, 0x8000, 0x2}, 0x7d56ef34b074b2a9, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x67, 0x3, 0x3, 0x69c5, 0x7f}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x5, 0x3, 0x5, 0xada1}, 0x1, r2}}]}, {0x7a, 0x6, "40a047c96e4d9b64011cc1cf4459f158fff689aeabfe061823c59ded48f288efb93c57e0333b1c01b1cebd527402c4e610edcf9c4862b168baa241bf581adefdedaa6286d175fa4c9b060f29bf81e06f07908a63c94bf1ec7b6755e1d545cbba5bcc6721f69530f426c9cda90f64eaddb9c7683ffd53"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_csum={0x90, 0x6, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x76, 0xfffff350, 0x20000000, 0x3f800, 0x8}, 0x20}}]}, {0x46, 0x6, "db0bdddc34526c7ac628dde866cb77106d380338cf56d675bd2e66120fe6b5a90196f8e4720507edcd6bbaf9d301a65118a7a7edb96689023ed30c90d64cafe06b93"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}, @filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x10, 0x9}}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_POLICE={0x54, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x8, 0xfffffff9, 0x1c3c, 0x80000000, {0x46, 0x2, 0xcce, 0x5, 0x80, 0x7}, {0x10, 0x0, 0xfffd, 0x8, 0xf1b1, 0xffffffff}, 0x6, 0xfffffffe, 0x9}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}]}]}}, @TCA_RATE={0x6, 0x5, {0x80}}, @TCA_RATE={0x6, 0x5, {0x9, 0x5}}, @TCA_RATE={0x6, 0x5, {0x1, 0xf7}}]}, 0x2c64}, 0x1, 0x0, 0x0, 0x4004}, 0x4850) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031400d3fc1c0000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r12 = syz_open_dev$sndpcmc(&(0x7f0000000340), 0x1, 0x80) ioctl$SNDRV_PCM_IOCTL_UNLINK(r12, 0x4161, 0x0) 7.875661238s ago: executing program 3 (id=1302): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x8) socketpair$unix(0x1, 0x3, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b40)={0x1c, 0x18, 0x1, 0x0, 0x25dfdbfb, {0xa}, [@generic="261750397fba"]}, 0x1c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bind$alg(0xffffffffffffffff, 0x0, 0x0) r5 = add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, 0x0, r5}, &(0x7f0000001800)=""/80, 0x50, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='cdg', 0x3) write$binfmt_script(r2, &(0x7f0000000200), 0xfffffd9d) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x401, 0x70bd28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x10000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001900200027bd7000fddbdf251df80000150004000200004003010000856e43716cee23590300000005000d0010000000150002000100004002010000487ea45c76d2baee05000000"], 0x4c}, 0x1, 0x0, 0x0, 0xc10}, 0x8000) 7.49656734s ago: executing program 2 (id=1303): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) syz_usb_connect(0x0, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a240104000502010207240705000005082408050400049604000000010302000100060006092403050503060581092403060101040505072404"], 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000c80)={0x30, 0x42, 0x1, 0xffffffff, 0x25dfdbfd, {0x2}, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x6}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0xc8, 0x0, 0x0, @u64=0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008880}, 0x4040) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x40841, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$alg(0x26, 0x5, 0x0) r4 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000340)='net/route\x00') preadv(r5, &(0x7f0000000080)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x40000000, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?^\xc9\xef\xe0Q\x01\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\x80\x1a\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf?\xc1\rv\xd3j\r6\x7f\x00'/141, 0x0) read(r4, 0x0, 0xfffffea1) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 6.590383257s ago: executing program 0 (id=1305): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0000f33bfd0a04406abb0346e7512bc9da45d74cdfda997eee8202d944dab5796adc301f2103746e8d7a4434bbc992061b767dfb22722b556d6bbb437742928d7e0a1c58fac1f2272b31c00de6c8a269bfe95acd586b8c6496a91441a7e9556ac8de226985d715153fa801c39af28c635c68370d3e5696aee37141f31b2745b0e7900d643c9770455d2bb0394ca6852f00b169f1b70a421d2481105ca9c90f0700000059fd5f90b9be56b9bff559f23d28cd08a2481703328ec900"/202, @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r2, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffff8, 0x0, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r4, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r2, &(0x7f000000a340)="7c7a6a069306f2c5ddf91f36944f207a1bd11284b4445fa3507bbc5def2e6fec4bb7c6001eafe381e277221f30085acd5d0c251f7c60c23874c04db6aa516f773dd2e57e746d1a085193c8b7664fceb1fe764d87f4395c66e5d4eee443a555692ebe80f3a11b8be74963f1a18c1d0cd71dec65e609e065e14615d2e8b283e55b4aa8b485f81ce52443d61fac9f08cf34f2997c05a63f98f988cfcea9a5650b37dff5817e5033b3912c226bd9bf68b528dec710584242fbdcf7dd0d55e394d3742039e6960bb589fb9ba18ac8e9e82cdbd08e9b584d0a8224cae3e9dd91e25699549007dc0d99165a73cda1c99fc48f6bfdb900c60e4481222505c58cc1108fbaf317d361d1f2d78f6db6e14b283ca9f1927f4f8a0f6f52818be03c7b257aec57f06a0a4279131a2bb0a13b23ab188ea50a686abb2f7e4d0f7a166f358e4cb886b7fbdf51cd9a153410dcc4cc5db7e8e94cc9ba2371a328480ad20f51d7fa012f367a0a8f9c882c47b5f714f0e1b35f72b2261989513c1428d648aa8ab8c12c87dfea38d5be0d49097fce804c9cd2ac8f61b68579853129351e3bcdbdae3371d2b12a150d94b3097161c226c50a1d2c1f8b4c10a986e21dbbb854ad1d26d0ce5d950835d14664ee8f58c537f5256b761b4707fe8d46cc1658798d285310a1cff127b1280cab3f1f633569391d5a7cc08aa1d108b93c38df397d90bbb81753930934df7dcaf8f960dff660fe239aa15cf48872668cacf4d664dc0809fe9d780ab202c3a968abb56655267c907eb3343809b2407105a5c14d53a3b17a9a1552314d27e13daf48a2bb7b2c9fc15aba9ae1d6325c11fbe8432c067efa72878ca56c6463b6cf4d29646905422908a4a1f7741d0049febed4fc2b7cc27154031e50a0ab297826383935bef6a0f968db92128e8a940509b5368146bdcacc852b9d0b4ae9624635f9e69f3a7bc8e6f3340c7de46f49feb20a46f11aef464fa6696a60865bdd0c40b1c411c9661fa9f6393a33a7eb4afaef3eb1ab4634a42baeea780ac6c0c4fc8cf7a92cf0592f993ac85bdfd6c18ba4b7cf4c4438a8330413de8365b4a080234f59edefca0c5ce9697b20cc7b71d04438c00cf3d557bd03b5e1b86e167d2d6e09714135ef720667d0f2e7ca54da419d1bf6722eda31381059216009cd8c99ba1d7f9ebc1bc021457a195fa5be2f0727a84cf4cac5e080f22c836a4955d5ed06bee2eec0d39abc5f459ac43596fee3b341dfbd7ce6f4e57ea42e1e8d4f65880b8b77d2ee27dc1efe95ff1bacf5aa14933456b68645380d0f2ef6284b9946857456d64f4cb656998e99e3e286f596b31c69a69d0ee8444ed838ca2f0ead1be9538e4e927239d0e65a3f871dcad33881f69592eed93a9fafc934aefa67bb87d582d0ae4cfbb5c50325774bbc259a277749751228d3610f95fd56e9fbccb288eca1b14c8255b6996a59c91efbb08440ed91cdd53b0aab82600906904cee2a117a06157e24fa822e1cf4f9db4c2e8a5e842cfc503e578e69002fbae194b6bc7c8b69aac7359292109b712eb49d21946f5ea2745ab77ef59950dcfd924ff2aef20e85f2a14554aabb417f15c725c73edd4853926ad6c525afa2c65de213cee799c18d1ced9424d10d7076fc5862579702a5f91031381f41cb8d9899ab514cfa1c8c51437df9710271d8cf69e8900921cba296703f1a7b5234500c1625884fea594d836a930b06142a6e577cd9c2a32cae65e712624abeeffc423a5d5ed7bd75fcb1a82ecec8acd0da9918a5c7c189f14f8cdf37062f93b87f9188501556060ffc6eac435cb1624f2af688316366e03cfb869eacf83d9d45fce910c3347f810b614c2e4291e70471ca2b574241c3f3d9740c6a45c7296a2f275acbde72e513ef4e5a1123a57c2eb1bd023af716c16a7747204338f60b6e3ac514af50b21952c21592aefb6149828a5183ba581d5ee8647f374645ff941bab67bef760ce353b456c4b51c5d3a0c5372b1773b944ad67a92937dd838e1b6f550a1dca975d6230e430bcc278afed54e0621008b2f850107b0244359e3747be5282630452d432e5df0fd160795effed150f9396a7da5a1e4dce0c8f62280ff2fbfaa813859a671208b4b9f05fe450729b0efad83a790acd688a90e5fee5550de4ddeac70ecd125ad076c4e2b68652e6ea520e2b6b339b4b9dc219d853e06b9aa79d022e53607213fc254e15ec3e6b776d2b562997e0fe52b98c58e1c0316b22a4219460053da87e7baff7dc1892c2de2f324dd1169b977f3a6698d0234c78de3e46ba5824f3e373f264e8d28fbb4cc108a41fdecd4b629d92b0a65f84366bf504eb5a894ba40c89f9df854dc469fa174ac85cb8d2adfdc099ca9848a1032b2e2f375bd1544dfb69e33492e1a4b921ad7ff17c4c7e357ff69f42d2301c302ee2ed313f0e9a20ebfe028a8737d6e38bf179940179cb779b70c2276264cb4f23249db7d5f179baa842b70f5b287cf74ce1ff6b70a56be8f2fe15aeadcb229804923d28a793838bc605eaf5dcd362f757577ebdac54b09fd73326720d3522d002a41a3b5f2450f48286a5ea45836b5ee77fc415f47e0716049ec2610d607737fd5a73b066b4876f9d744f6b3486b088dd3bfc3d393a27c6c799ce078e2ee348257b5ec1ba9de76da2a67ca912dc2dd5afc70834ceecbb8bd41f6e790294cacd5891bef1b4e2124dcd6dffdedee8f16b3bddc030429dcb0f98e6fe0649cb14eed3293fa4933b2ab8c0ec0ff4dbbced1e32dceb317252e715b872b00478cbd7b0275b7394a0ccfe9887410b32f1ce9266b3b83470ec982cf908507d3ad0cc366bff3759388b624701b3e0dc0e7928386b155b50b42a8e352622516beeeddfb79866a2eb1d360802cd19d62fd171267a0fece5f54e315a8cd49c41072f2a7a0baab5aadae2c1ff28e285b642f8d3869321bd18b4aed107feaa12d055b179a8ab7b50e2796d287a196e280d527b526c45c8aa98696d88a02d923d06fedf51336c0695c218e70448073921971093ea44b5352e10ce6cec26d082b93f69958165bd986f56650a62224c2d9fd044bd8fefd33544c6bd141b4cc211a087fa57c09e195c8edffe559048db738d1395f5e2625dd7cd035b8c76aad6c238fb52a7c5ff0965fc7122a5899746ca88abd699d6078623722fff92726e18613519f2b1927504fd5cb7a38ffa373c3883022f0387953530834affb5f05e0f44c24caa75561b2b63994493ab857fdc30900586fed09298d846e5936869b43d81c4b91902028e57a8f2da16355ccb7a77d29ecc8e66015e979b2f3edc5b8d77c45348dea55c9ed6b7465acf899f4bc1a7edcae0b0daf69ff85c504eea1294620b6d3dbb004575044a5ae7c110010c2cf39827fbdab3b42ac35d147fc53bb5e7de6c47091dc80c14b8da494b2e913d1a52085e29af19edc4a417346c5a896a3851cb6132511e0627d190b77623c8a3bb6085eff22ede7127f7988a1d388fb70ea20d5c1b2424c5aa83532bc5162a5d177968b4a46583f2d4b92d04a5f19145221aeaf724d92ea1d4dfb53021b47585bbe5ce35f8d09a83e13fdb1de8e52dc646d41e810879ce9c830959c3ee93f11a16d030d141863244395e3f847505fe6d9594a34009fec9a743c033b9793335684cc5c3d0eb0ad094f40a60264b02cd88c583c850d99c5b9c6c5dcef467ca3ea38f2aa42f5657cd940aeb12960efa18d571e4f958b9cd90918e069a486d84f214617ce29c0f2c26bf84f12f5036f26a8de0c8359f572654bf5ee06d38f741c464976d95ae3fdda45c2ed2d08ef71d3590e82d235e0fa357c568158791a195d4a2d9615e1edc85be64cfd169f925ffc4f636f86783cf43624a77bdb9b172228097f02f391df00668dafbd9932298b23cfadfd1b8d14a25cb408a440f930f0813de73c1eb2eb4b3c802d718a672453d0038965c6dc98db96fb4e06f1fda72782d0839d4e8b477ebdb2c73510db44f643ec7dc4fcb837806853caa35cf622aff9d44381d3f7adae00650cbb6f0334ceca14ec982dfb5817d7fd49251c203b6463a09c14885f754603291ccf0a7ceaa57284ee751774fa5ad72f9f7a32fa542947af40601e98057895f2869d4ec2db0d73930962535fc9e12ba7e6777cb458592bee505b367012ebd27b256fa0fac1452cf3b28eab573549b7c7a13752ca0189768f738d5f8030fe999f7bdc466d67bb32937ae469f1a1e21fac2ae2ab92a0a260bf0e9ce20625e82f88d0ed4d13876aed768765d77433bb9137d92d622df502aef574de82fe28063128fe5a1787ced99734c2f3f221e80d3baefd367d01d950ee1bc981b4b5ff86b2a96ab78fa3c1201303cab473103d89bb185afc77dd2cb7ac1564045036fe9fcf85af5d73a7553bc45bf5e221564540982db2f81e612e7c1715d3498b8d7851c0160146d6eaae9e30c81dedfca8e7122fcb69b26b396629b723f1e1822b8d5d8f2ac583728a5ab40010f88aa42f37f2031a3e99d8d6661e63f86f65af521066ea6af89c89e1748521b8368cd03409e895a941025ee777653f55e66cd1a0cca21308666260c3b9a306ddadb322eb1d09f7b27fd570cd35b6ec88bb391e3ae4745e17fb4dd7aef1d75b4ebb91e6e7789b241566d7c0cc97a3a126ed50b0cb621e015414f62641afd85bad78470463f86d8287aa56d331911c23c4cae8e5dfea33f3789c03d61f51c590417b5ff9f1aa35ab6a15364296c5f9399216ce565210a4075ac5e43e916850774a127f9174d95b43d839e056b4a7d679bb8804951ca171c0b59f4d6f32c4fe8f908b9a1614591f5d1e1cf3348e02317ec4655c693417a4c4e7007a8db02faa1634f8eea9c9bbe5b149ce2279953a54884392dc7251dd38670fd59d9d1da5203340909d50f779e864339014bcb545d825cdcccedc558a1d01a2784b8f499ce9fa2ddb0dd1dc0b93d1b282a96cb4ecf152474dbc4b2853b30c8e5fcea85bdab949f5eb1e98d81c102c349f680230082db5aba9e20209c35b16598507d28211b49763b598a7e60519d5b28b67c027cb2657cf2ac7c7455291fcfe63f0b43afcd3afaea934da97c209d02e5b47a686c1c284aeee5d662fd9d9be7c576259d9f1a36fc0f7fe329a1da1dbe078381233940745fc28a56db98b1a8442325168158e3f0b3cbf8a368d19dd20cdfc1c4f3893a30a49223050159b0bb8b7c59ca705ae254530cabd67798fe84b8fe37847ba67cbcf7a494925a8598b7b50a741c9ced10ea08e35c422b79265561a07f40ebb89bc46069a1c1ad95949fe757a76ff6b5386a043abc967c367a9d86b54d374e573540dfc1f6d396f398abe9735f523b778fd124ac1e1eb832a66dd4b1838a50e6a4eb1b95b8a60a94f067b24d1194976c539d5ec287a261bf25904575be3ff49e7411a8dc09739649828124c14fc2b89dad1f3f5725db2e45f5a447cd3e4bdf9e1e95c5ad7c76fcf0c1021cb6c32e6985e1d113030d534eecb0dff2554183ee18da2da5d21a8b994a81f05e0e6ae89b20bffb4be333d1956270da23e9905830921b1f3d615a56a20b11d45ccd1d22b910e33f475a92c31fa5b4675ddee18336d0ee7b75c07df2a9d4ad53d83142219a00aef15e1e9dace0f039d63a530fdf671a54aba3882dad0d439632af5576726c3aa095cc1a0a03063e8a6581b78bef501acc24b05a0150d8f683c90e8e5e283a49f898906dab926e544ead48cb9bf9a6e1bf140b5273443b8cb8166b2d8a5464a3e9d9f4246ac81ea91b33a0b399dde9f5efaf792bb04cfa028f40b7c92db2d9c33e16ef58b9263350879ea94e581a1187b2d1931b1cd7606a76bd8943b7c3098a33bdf476960af7bdf2854b1336e72feb603b8bb2242df0839d157843d369a50a615068ff5d99ecebe8dc19158a6c654e853cedf860a727bf8140c062f5d307fdcd150ad0af03d2c3a913b91047858ed6382d2d2d30f5c0bd419c2cd4047f225107ea8bf4a3a69384f16b5b5bb2655bdb750db4e975794592987df95f6a90374b0a08769b2c957faa16a21270196afba76b4527f01f0c5db7fa16e2da81fc49336e20bc3ee1ccbcb62255c84513d9ceb706f03c25000517070c03b7bce838e6b6cbc7f767959fbd62e11ab7ea6d760cff674a4296e6185eb348028b472290922160f3ea36c22c8375a016f505017c0a0e041dd8e52b4f19ccfc701109a19391a059d77db239d40a06d84a6f0ccd08aaad764e53ad1da19ee825a4d25ca7cd538289bffe135486ec1614e28b3682c7081a1b0a2c7272f4e36f6d0d9e68d84209126dc59312d48eed1c63c90efeadd472259392c28746abf394c5c6c97d3fb00b70a74c313a817ee1719c33f16d58f297fc7eacbca5803df115745079c5434e851ad6c1f0e8ba0bdbb66cbb6789b89a23526b476ad0f2cea0907e72702f93d37bdfe7b39fb9b33fb1111e58f5c45db8cc38afe4e03a318aa0690afb870a67aeda7da9640fdad1e1f551dd4757c69b4f523b616e502514a2e35495916f2e5ddab1ad9534644d99ec56e818caba173773aa5e45104deb869b23063eaea5542d3bc503a6948b83779aa46879443cad02477451b46429f1f67560c31d4377f96031ab94866a73be753c4ab91cc6576c3991c3423103ebae604e887c56cbacb9e95b8b46300b62e698a6456a0d175cf682eacabbe301e0b0ea34f963daed0dc6c1b75fa5e3870959913e69e61911d9ff646e9c6bab33fe566871027e861577c4d7fdfdf94ce7ac1a3f6d29daf28d660431a89c0b56c4b95090e2ca5df62c1e5c5dbf98f067751819d4c5914aa33883b7b521aab30d14e1cfae74fcf3ad4b2cf9448009d3223ad984e0c50f92d465573a6fc2894f8a5d4e855316738ecfd6a6c157d39b5c44d80a7cba944cf9f7a701899859821cf2bc248459f7a350fefba53c1481a7197f024f2eb74251455c06f4b82dfcf3ccf3e3b98b898fa1b16c310125e5e9fd4019acccbe91b4d842ddd52ee56f6d3112dec80159d6d3ef93bca70e7afcccb223361c39addbe3c429934cd0ae35f36a8f6309f08e36b27341db1f21fd8a148b239361b31a85f53bd1ad49fadace6c64d5f4363427fb2f268e8aec6d81cdb7f1252baa4652dc55881661114bf98cdf17190379591f0e22dc97e790f53f463bbb0ad0ead78ddf7dfe2e26052acc31cfe52b822afd5ec5c75957106cb5c368c09252ff3e4f624d90e599279fb985ecdb7d8880dfe05ac2d2da83e34e2b9b88f5dd60107a4509902fcddf4a36605e5c7a2606a4aea9fd4b5b24ca6b67d6945d133869cf9276d8c30b08c2a9f4bf03f4e0b956fd5f3c80b958ac5c41e4115b6708799c3102bd8b6c7fe17ff8c3f89c7437255faf69d1e16074086dd44d038bc0211ac74743169b462dbc085d77bf45eea72bf8348308bf48feea02d739a0fee9fbf71023ef8c6828da1aec8618cc2345ff663f88bc52a990e6b9591425435b0c7900ea4068f5aa6345e94254e259a71290fa23281658a6a165d1dee10dcb355518264824665ff2c5538de9ae4487782911f79e0bb09bc2c2d8e0d91b33cbec839075c9b38c848e9d2fad7368e96c1932042c3e85fd95b7d4500e6cae9e649082e9d5ca6f2cf91fc7ecaccc1049525d4325003424cacbd6eb5b8cc30b6893bd1ef46a8e7cbcc87dc2dda5c802ef1f8bb607c7457eb161254dc0feb60ed5ed0383fdb4db91d7e41d45c8eb80c1981e801ef05703f97f8710a2e00eb0559f854f700f946937b9e68c75ad6d0015d5d79be5423d0d846bc76f92ea7ebb0302b3d3c695c0aafa83b2bf029a444709cbf2cefbdcc7eaf3dd7a16f8ca8c861e883db10d433f7fec547be45e6829962e430bb3c93e8cdfb342c1cb7e53d8a6ea625d5574c4b4303f61c4338a658e652ab2bc0029c0a78a5114f495a439956909cf42128cb4348affbecb20b7fea98e22160e9a58e7666a00e7b37fbec4bd3860d66a39d1232a57e8cc50710c5c666f7efa98f16f9a02d843c94b0842a383945d06899998ff2fd01ffb58ab53ea89b2c93634c48d0420edb9791b8e451b35b534b8b2874c4859c684cd14afb5335a2555c75ad9df018635bb7131a7ef204ccecfed33a675fc51687e3f8818406fbf58e7b5fde1ca96153817e1b632e89a78d967eb6a34af1dac0d9ffa448b7b9bac27afc305a7b47febbe0a37036c18aef6852b1b2759d67479f9edb169e796d949844a1624b1e832a2eee9be36dc5866d6fde431cfcbd4e305d322c9dd07f83b5b361daaa74bfc9fbce8b447210c327468659ecbb0a5fc20d0cb79de7d1d70bf251c81d5f38711f3f4bd4752685b077058beb465711b1359d2a7d2f59216c5a807121bb97e7ccacc46526e4072f1d6de3b487d492fed0995e2273fa3bb115bd08d32d8e57eb2aa8f9d3b81babd1b8334c3a5e69422b75502ced3793d07b9bdf38e9d9fa1d2e48c7886dfc41985e8ffc49f09c4ba58ddc3b4cbf562b591f8939ced5d18214a77cc753075334a157373cc33cbc07a731cd6342492f5e05f78108e627bc88777203c76632bbe0120924c7a51bbfc9dc789a5695b7c95ef544935032fb81d499c454a2d78727875c20bc8a48a9f23cf6595c17c9cdaa8d04bab8ac567ebd3bbcdb40e11f1893fea3970f176f75f38d17d6ee1bd4ab76c660723a776bc72319199ab82c40ac4a9f4f475e8fd4643a4be8601cb5172e112c236c7c430078601bf183a59a03885e994c1116a9d4ef275790ff2417ffd85b43274fc57654466fa394958aeb11f343c3439604af13997011af70b67df1a9dfa4cdb751a2dc3e5bbf42f7b9ebc6dcebb2dbdc57d7a2cef7409dba307b7cf6eab148a924566341d035cabc877c68d0fbfaebdd39c16304b63a1bae376fb4650708bf5695dfd7ffc01f43f0021f622de0b116ea494454497337a0ec469963de7f9d2b1d6c5a7a0a7835777a78a2b9e16eec696446981d2fea550f011419b96f7b2018d027b87fc715521b0302bd7b5b3bc5f033346029eced73df07dd1bb1f91848376b40b9e9da7233e7832edcc7b54ef6fd320d19efce78d58ea7020fbbdf77612dc8a4f3281915ac9706f346e405b9f489f8f2e9a2decb8d18bec1e5f735a4ec69bba4dc5d36c9c1cc50b92fe67b2cdd53fa671c0cbe331abdf46787e7c9912b951aa20700dba6cf5a209fe5c9c61ef62a8e2e572ec774b2d0f42d570633fc44d44826e848d47a8f386a5704e0a3eaf1d06617181aeb166334ab55d5aedccb27abf19a42a480930e25465721336c70a2ea7799d21a3659124ac9503efc99c1b13ca2b9723e3e338055f9b3cef7502017ebbb09a64b06462db353a5c562101cb7fbf29e056deeb1ff0c7bc877210c941c87401ceae52bcecc83e87655069ab931bd813c1a87d67554f5d2cf435e6dd92a515c22f5d5a9a44ebc81e9c4849104343b80824005619312a9e349d996e366d381da42edad1a560bf5e31ecd049e92ceaf42954958600a7868599fe10e9b34587368d3044250c3d1a8ba6c8dcb6d318d4f9e71c2d33fc74cb57620a8343258d072f3aa767b4b178f3f66d5a713dae2426296c12edf9ee37636869e30df64cd3855fae20bc7602c1b7e6c8246ed4be71231a5ec7b5e7a9ebb08bf8667d8f2900ecdb0a0addc14a2328eebc448db13013e6a3c1a661065e5ac0a04b5171bd84c9d9d947a6c31257ed13a966530c5e20168c100117cf82b4c00ea3ad00ea65e1af89535b3f11a1418ddad33db8cec281543732d2ff4eab54b12cc95f7d872e75bc01bf6c580540b0e26413c6c2321ddfb0447bdb6acf05ddf2bb92534a3a5f37d6da882289f6fefc6a213cdfcf34902137fa3b982b2b4c27c611f08909a18405482f1e3a2bf3635d3e970457541da16e37bb3c422cceeb484bb64c78724431a543ecf4ca851914c1555e3b785ec87bba3769927f6c29f80e7ae8632bdb9acdddf7c3b5580740d9b2bfc25086c9566844136f3fac74f429121f86c378c68c20a194b0c98b1e92991954cbf60477e217a2e25297fc7b18972e40c531ec19e1eea193bbc8893392d8528c6a0375bcb4b082d20d5c47cb330bbb4b74b91ab55d4a0d3e1dee8182c581e8e70ac30108eeb7185c6ea3f786881ad124e1404651ee95cdb0fbb0d0f4a2b43c795ec1cd4e46234a88862d57903ce878b641004fb637341e5d6bf5163f1a3467b828f6eea96c3c2bb79503687867e11eec32dec452e0fdd2eaacfc0a477ee839ef049855da734d18212142dfe2a95ab9ad9bc4f98c3bfa34134c7e6c9f8669303314d4e8c1bc5475e8fcf418cbdb3246ebf393d911cdfee8f2550dc1593ece59ced81a4ffb2484f9c8ebed0aed8d418138445c4e96b209adcc4afd70f09901662daa2c8c557d6039768d97e6b9518f0de4ac2e0187ba08a4a9128d3e632fca102137338b5e568f12c7bd28db772c800fb5f4d4e683b201840731bb7c034235cd73313cde88891bbb31597bb537696e6c987302297f9717b8053779aed447d33ef9129e84d3031fa9b453bd5731fb010ffd19a9133e0ccbec2461cdd31ba294d68c60a8535b15584bab6e6d0ce6c1cef4755bd5f7d90f4debb40af1437a19a96ef9c0709692156152091c7efb58f2d39a65b96416dc09e8091ae08d9be5235a3c1ec062862baa1aab788f28e83ba4635cecc6671f2320f42b4f711e7d0fcad89d6727d3630da1ef35e32dee39eda665946abe6224f17f2acc29e62518fd51eb7f193d9bb16c38204069098c293fdce24c1c79229fd08622a4256b581cffce12e46c20248dc902753f0e3c91f9685b3d45f984620e262b3487d67d152f1c50de3fd2067a9d3debf715f346dd2f712c55545336a9036ba82bb06cfae59a48d083c3388f77790c9639fa0a9c33f4c66c7513042bffb765c2a4b3657dddf0ea094d8d79018f66c8ef8e9df980a89906275edf4a467a5db0a623976899f0efd167aab6ff385cdde59027a95a570277cb94ebce503906c28527e3114eb9ed739d0c2f4cf82786b35c0054718f47381ed8ce9b107e1f1019be5fc877166da667036f0c1b84e2b5118b5f4babc052d997e5f1e8c4cf45eb26430b74d9e1df3735b8d5df559903143d983e974bed6cc608c2580a991bdd3628ec676d348de8752cafa80c1661f162e35c25fc0ba0198423f83214fed800f9355ac8ea67951cfeeb3736b50c1e14d45d33aa25fc72c38702bd5dd217842e54114f4799c45ff1b7cec9729382ff7fc3ff80cbe1a13d03e19eecd7de676f6791fe34143ae30c97da9623907d974a37b65d0ef5d46b718d58541c6b1902814de71218ca7396ceb5fdacdc3cf4d110862402e7cc6254f1e44e28593fd443290262db75fd482ce1d305d6bf9fd3e5e0efbedac5a4d097650b111e6e9e1b2c66a23ac5bf27ed78d25d1a54c16ca4287126736c2f17ab73e683798c29d16481775ada8e20d94b00b6b29654b18f60e2853fdc7d3ba55d7df660db90288b6f440efd19f0478047b12c7b07ab2b1c9529597e6462d20612e6c3b6d1b1d11305f8ddc811860450504b7cbf9794edd0d07c25ab6307d74afdce958355eb919dcb1fcb8038c6dd5e774ee398dc8553a9ddeb551f", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x18, 0x0, 0x7f, {0xfffffffc}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r5, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) dup3(r2, r5, 0x6700000000000000) write$P9_RWALK(r1, &(0x7f0000000240)={0x4a, 0x6f, 0x1, {0x5, [{0x0, 0x0, 0x5}, {0x0, 0x1, 0x2}, {0x40, 0x4, 0x2}, {0x40, 0x2, 0x6}, {0x10, 0x3, 0x7}]}}, 0x4a) close_range(r0, 0xffffffffffffffff, 0x0) 6.320324382s ago: executing program 1 (id=1306): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x418, 0x208, 0x208, 0xffffffff, 0x2b0, 0x168, 0x380, 0x380, 0xffffffff, 0x380, 0x380, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x130, 0x168, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "48ae43e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e22, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {0xff}}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x1, &(0x7f0000000100)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x6, 0x8, 0x94, 0x7fff0000}, {0x84f8, 0x9, 0x7, 0x4}]}) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x1000003, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c0}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r13, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xd}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x800}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0xc890) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller0\x00', @broadcast}) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x401, 0x8001, 0x400}, 0xa4, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r14 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_RANGEINFO(r14, 0x80106408, &(0x7f0000000440)={0x20000007, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 6.313313747s ago: executing program 3 (id=1307): syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2800) r0 = syz_clone(0x23100000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x66, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[], 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x100000000000001, r3, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) r4 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) fsopen(0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0xfa) getpgrp(r4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000700)="580000001500add427323b472545b45602117fffffff81000e220e2280007f000001e801000500000000003ac7100003ffffffffd3daffffffffffe7ee000000deff000000ddbd57cff2ffe293a2afebd998c88d5d6b3710", 0x58}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd788}, 0x94) ptrace$setopts(0x4206, r0, 0x0, 0xe) ptrace(0x4207, r0) prlimit64(r0, 0x6, &(0x7f0000000000)={0x2, 0x9}, &(0x7f0000000040)) 5.181684794s ago: executing program 3 (id=1308): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x60, 0x887}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000c80)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = io_uring_setup(0x2f35, &(0x7f0000000000)={0x0, 0xfca1, 0x2, 0x2, 0x1e}) io_uring_register$IORING_REGISTER_RING_FDS(r5, 0x13, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x48004}, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000000)={0xfffffffe, 0x0}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xe) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@ipv4_getnexthop={0x20, 0x6a, 0x605, 0x70bd2c, 0x25dfdbfc, {}, [@NHA_MASTER={0x8, 0xa, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$XFS_IOC_ERROR_INJECTION(r5, 0x40085874, &(0x7f0000000c40)={0xffffffffffffffff, 0x5}) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_emit_vhci(&(0x7f0000002840)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0x8}}}, 0x6) r7 = syz_open_procfs(0x0, 0x0) preadv(r7, &(0x7f0000003d40)=[{0x0}], 0x1, 0x33, 0xf7) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x824400, 0x0) sendto$inet6(r6, &(0x7f0000000180)='N', 0x1, 0x880, 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r7, &(0x7f0000000a80)={&(0x7f0000000640), 0xc, &(0x7f0000000a40)={&(0x7f0000000680)={0x28, 0x3f7, 0x202, 0x70bd2d, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x2000000}, 0x8080) syz_open_dev$usbfs(&(0x7f0000000280), 0x7, 0x82) 5.096597296s ago: executing program 0 (id=1309): openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x88000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) futex(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) ptrace(0x10, 0x0) ptrace(0x10, 0x0) r2 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x1000)=nil, 0x4000) shmctl$IPC_RMID(r2, 0x0) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0)) move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x4) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000004000/0x4000)=nil) openat$kvm(0xffffffffffffff9c, 0x0, 0x129a00, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x260280, 0x0) r4 = openat$btrfs_control(0xffffff9c, &(0x7f0000000300), 0x200c80, 0x0) sendto$inet(r4, &(0x7f0000000340)="852e05f9fb18fdf852e338a74f626aba0c9cd648dc878064cd0ca5185683839431ad3f3a3bfa9be505163f19fb7e036c779764b143fb90d59b96a3996c147a3d859e5db8c86d1353d181a0cab4fb46b93563718eddf729547c591accfa85b802478c89ac4f7b52e0f8936dc1eee50f0a24959ea626ea32fb09b73dfc39f5209e004361579a", 0x85, 0x40014, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r5, 0xc208ae62, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x6) 4.728892496s ago: executing program 5 (id=1310): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x103482) ioctl$LOOP_CHANGE_FD(r1, 0x4c08, r1) file_getattr(0xffffffffffffff9c, 0x0, 0xfffffffffffffffc, 0x46, 0x1000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r4, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0xce22, 0x6, @mcast1, 0x5}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000040)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="140000000000000029"], 0x18}, 0x800) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0000000000000000000200000000000000", @ANYRES32=r3, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000080026006c090000"], 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, 0x0, 0x0) bind$inet6(r6, 0x0, 0x0) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000200)={&(0x7f0000000080)=[{0x50, 0x8001, 0x0, 0x0}], 0x1}) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000400)={0x3, 0xe, 0x74, 0x10b, 0x200}, 0x14) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f00000005c0)={0x6, [0x9, 0x9, 0x54f, 0x3, 0x7, 0x3]}, &(0x7f0000000600)=0x10) syz_io_uring_complete(0x0, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f00000051c0)=@data_frame={@msdu=@type00={{0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9b8}, @device_b, @device_b, @initial, {0x8, 0x6}, "", @value={0x7, 0x0, 0x0, 0x0, 0x5}, @value=@ver_80211n={0x0, 0xd5, 0x3, 0x3}}, @a_msdu=[{@device_a, @device_b, 0x3a, "110558a52c137f7c8f401d9145745a7fcf8294e3c916af2c984dd1ee365b090e8db5b3959868abfd54be4f48f83d8623c358feeff6ae9d2a0b00"}, {@device_a, @broadcast, 0x1000, "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"}, {@broadcast, @device_a, 0x60, "22761953e7d0ae2051dd56c86d366a653564561b8e30570900d1fa4e03077231a1444dc7e3c8a8c22611309a7ff3421cc3267ac5ba5cb4afb57f5764629749d42cf800a804b8dfb671ac9daecd686b104a2974bb32627716cace7c1fa921e4f1"}, {@device_b, @device_a, 0xf7, "622198a61865cfabbd15f2a7e93f82e2a6eaba07fd775a70c00b90c6e6f73e1fefda9e56be1e2220a3ba52ae31e8c80b3a5d5dd3385dd909a6212814ef3bd520cba15c2fd27e99723a152d0499f376e253b4f54872826e62e67232f4ed7c65c48a1bdfa42946b3b15d20e0a13034fde8e12d59dba688deedac282d0eaf44bd8ed25daea76ad9b4eca8974b85fb18ad2ed3ae1c3cd056cffba845faf44846f92b88707838150cb5379cf537b9354589fe7c74b9c3b35763e679e4521e94c32ee5ad84f82342ab0db6efa9e317bac57c46af17cf881f0ee33528c2894f422a955b77cac338b13b82a860078ef4395dff6eed061494ecae10"}, {@broadcast, @device_b, 0x9b, "89c9fbfe9c723a39f636edd3f4b00ca7f98534b17e7a600752a2ca774ab2a06c62c0bb9b6df89426840df8cc38c473919208ec31b5ce5c62f2baa4314c19abe14a5cc353ed5f7463db74dc2263c0d890b019418eb4fa84f3f37d2b995fe0d67fef41627961af417ef4b9c83519ec8b2d88642f285c584ebdcc671fb6917ff31d985618876aadade22846c23b912d18efdbdc06333fd5c003e143e6"}, {@device_a, @broadcast, 0xd8, "9a70fa1218c38627bccacb1d10ba3af32e153ce7647fd6817b1aba74b651c447660f8011bc62ad60132ce63fbec10d1854947b53cbbbe1ee514c059a8dde11845780763b1c2b8b40996e6463157fabb4316735c8c8ae62a60851250bdf608c5f348ab921e40759fb649bce61d3faa5c5d1f42f3062f28dc86a4d19aab03dff0fae6cb6d5f6cb4144d0fa64f0887a4c2092dd8676f822a749a6dc715b638199a08a92b0f1e99584cd0f8f69719ab72af50abe18f5b664763e315793854448b27e36c010a4b04ca19c59c228e9ae5287c0bf712308641bb73f"}, {@device_b, @device_b, 0xea, "41aab27224c7831f03faae0cdbee88c370e42e2505606252e4c780e640014f685dba42072bb0fdd1d49b0493827bb621207d8212cb11534ec70d0bf9aa2a2cb19042af286f94dac702442300c72fcc189597f2f57c63f8623f153e54e9f1199368eccfbd5d11234eb07a624cc70639ae32d9640d9c05af49e939685c9769690da80f73f3fa2a92bd3880173b8a2f5bac6ce0f3d129bf244f82458eaa1061986fdcb917f5eca49e1635105bdca9ba93e31a4f4e8db75c81c4adf426c790b14f5bf8fe70cb598de4212d95a108ec504ed12c82892c134c52491757260c2f083714215dca1a92ff0cfa3c50"}, {@device_b, @device_b, 0x1000, "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"}]}, 0x248a) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f0000000540)=@broadcast, &(0x7f0000000580)=@ctrl_frame=@ack={{}, {0x6}}, 0xa) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 4.54227343s ago: executing program 1 (id=1311): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_TSC_KHZ_cpu(r2, 0xaea3) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x4d, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0x10, 0xffff}, {0xfff3, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x4000010) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"}) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) openat$vnet(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0xfdef) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r6 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$6lowpan_enable(r6, &(0x7f00000001c0)='1', 0x1) write$6lowpan_control(r5, &(0x7f0000000280)='connect aa:aa:aa:aa:aa:10 2', 0x1b) 4.351973783s ago: executing program 2 (id=1312): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40180, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x7, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x40008c0}, 0x10000000) close(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x1000000, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x6, 0x2, 0x80000000, 0x0, 0x10001, 0x2, 0x0, 0x86b}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8001}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05031400d1fd140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 4.346086297s ago: executing program 1 (id=1313): syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0xc}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1c}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x30000802}, 0x90) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 4.246822864s ago: executing program 1 (id=1314): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) syz_open_dev$usbfs(0x0, 0x200, 0xa0402) mlock(&(0x7f000000b000/0x3000)=nil, 0x3000) syz_usb_disconnect(r1) 4.230734085s ago: executing program 0 (id=1315): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x4048aecb, 0x0) pipe(0x0) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x10, 0x81, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x7, 0x1, 0x2, 0xa8, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x4, 0xe}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x7, 0x89, 0x8}}]}}}]}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x3401}}, {0x0, 0x0}, {0xea, &(0x7f0000000600)=@string={0xea, 0x3, "055b34e90a4aa6874cc5f2b52da9e4e662c335514692aef903ff3268fcadadd8e77ab34a54332dc724184c95f339e9db19e95c855779eb9928da5ca01c4471bdf6299fc64cc198ed49686601a28aedfadac217b7d1d190f4e82d031b0745ce8a2e33b9fbbbb98bb9c3976fec8020976f877d216c37be190854b6fbbb66400d5c02f35090cc451e684f27b57e9f2063388491045d7c653a146e8313ad0b80880fd74221036fbe33c168d22683f817dede85334bd884dcbe61aa6a7f939cf3d97fe77baa84c153eac70cd2fe45611ed13abe8b7fed9e99d58c126e8b35a802b6aedca3bf24025a6d8b"}}, {0x0, 0x0}, {0x1f, &(0x7f0000000780)=@string={0x1f, 0x3, "0bff07d41ae01fb939010bbe0010b2c46b1437f4621e71379538e183ca"}}]}) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x9c}}, 0x0) 4.124757997s ago: executing program 2 (id=1316): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0/../file0/file0\x00'}, 0x6e) ptrace$peek(0x1, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0x2b}}, &(0x7f0000000040)=0x20) write(r2, &(0x7f0000000000)="2e000000010002", 0x7) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="f00000001000010029bd7100ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="c5af07000f0e0000140003007465616d3000000000000000000000000a0001"], 0xf0}}, 0x0) 3.183177394s ago: executing program 2 (id=1317): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000140)) socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, 0x0, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) syz_emit_ethernet(0x72, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60e400ff003c3a00fc020000000000000000000000000000ff0200000000000000000000000000010200907800000000600000000000110000000000000000000000000000000000000000080072f8315bb213a77231eb9d109d150000000000e000000117c17f0791710007002b000000000000"], 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x7, 0x6, 0xfffa}, 0x2b, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0xb, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x45, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x7, 0x5, 0x10, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10002, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x6, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0xfd71, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x7, 0x0, 0xd, 0x3a3, 0x66abcbd2, 0xea4, 0x0, 0x0, 0x6, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x800, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x4381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0x3, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x2, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xfffff800, 0x40000005, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0x8, 0xbb, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x4, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0x6, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0xf7fffffc, 0xa, 0x5, 0x3, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x1, 0x1, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x5, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f0000000200)={0x72be92819639f682, 0xb9cd8224dab94072}) syz_emit_vhci(&(0x7f0000000740)=ANY=[@ANYBLOB="0404040000000000000057c801"], 0xd) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x25, 0x4, @val=@tracing={0x0, 0xfffffffffffffffc}}, 0x20) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) nanosleep(&(0x7f0000000000)={0x0, 0x3938700}, &(0x7f0000000080)) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaacdaafad1e048716e08060001080006040001bbbbbbbbbbd08cca700114afc8fc925fac141419"], 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) r6 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYRES8], 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) 1.695042891s ago: executing program 0 (id=1318): syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2800) r0 = syz_clone(0x23100000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x66, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[], 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x100000000000001, r3, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) r4 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) fsopen(0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0xfa) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000700)="580000001500add427323b472545b45602117fffffff81000e220e2280007f000001e801000500000000003ac7100003ffffffffd3daffffffffffe7ee000000deff000000ddbd57cff2ffe293a2afebd998c88d5d6b3710", 0x58}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd788}, 0x94) ptrace$setopts(0x4206, r0, 0x0, 0xe) ptrace(0x4207, r0) prlimit64(r0, 0x6, &(0x7f0000000000)={0x2, 0x9}, &(0x7f0000000040)) 1.664638641s ago: executing program 5 (id=1319): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_SECUREBITS(0x1c, 0x7) setfsuid(0xee00) prlimit64(0x0, 0xe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mount$cgroup(0xee00, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x10012, &(0x7f0000000800)={[{@subsystem='perf_event'}]}) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000300)='romfs\x00', 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) 1.495873164s ago: executing program 3 (id=1320): syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x80) syz_open_dev$loop(&(0x7f0000000040), 0x9, 0x2240) r0 = socket$unix(0x1, 0x2, 0x0) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e00), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x8001, &(0x7f00000001c0)=ANY=[]) removexattr(0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x8640, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) 900.326235ms ago: executing program 1 (id=1321): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_TSC_KHZ_cpu(r2, 0xaea3) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x4d, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0x10, 0xffff}, {0xfff3, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x4000010) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"}) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) openat$vnet(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x4c, r6, 0x400, 0x70bd25, 0x25dfdc00, {{}, {@val={0x8, 0x1, 0x4d}, @val={0x8}, @val={0xc, 0x99, {0x803, 0x56}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="10002dbd7000fddbdf255500dbe1d4542bc439c74e070000000300850ec8ef26ff42b254eb7507111060e4fd4dc070ea94bc49cb8bfe733070a09c77710e942843194d1b999b7c84dc553c75213aa5fc1b00c4557a0212e97f7dea1953bdd3014e06d8692cd7b2ea281abc65e329a1b278fe01057f719a87e08b357b5d49c998a43d539528654dbcd94c78e86f0358bc8115c2ca2b", @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20001810) r7 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$6lowpan_control(r7, &(0x7f0000000280)='connect aa:aa:aa:aa:aa:10 2', 0x1b) 477.597498ms ago: executing program 5 (id=1322): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x7fff}}, './file0\x00'}) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f00000004c0)={0x0, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4e21, @rand_addr=0x64010101}, 0x40, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000400)='gretap0\x00', 0x20c, 0x3, 0x6}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000030a010200000000000000000200000680000000000000000000000026000300fd02b21edf8b721e23f25f47a7af48fbb07c400faffd8d27130601205b56f46dc2de0000140000001100010000000000000000000000000a482b6f6ce8cc41258b05ba688c8a8c099c985d8bfe48583ea1f19e6b1b38d29336c14d34a41bd38079"], 0x70}}, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) sendmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000001001000001000000ec"], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) r3 = mq_open(&(0x7f00000013c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5\x00\x02\x00\x00\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x00\x00\x00\x00\x00\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\xac8t\xc5\xd7Q?\xb4\xeex@\xe4\xcc\xfe\x98\xf63\xde\xcd\x1841\x93\xe5\xb7D\xd49\"\f<\x8d\xa5m\x883\xcf\xc7\xe5Y\xb6H\xa4\xc4_Q|\v\x06:\xdap48T\xa6\xcb:+\x7f\x9771fK=\xc2)\xa60\x1d>\xd2\xe8\xc0\x03\xa7e\xbeo\x8d\xe3\x854\x11\xc5d\xcb\x82', 0x42, 0x48, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r3) close(r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c0000000406010800000000000000000200000205000100070000008d19e0da1eab44795dee96d502b9dd1c0facca66750302e07ad5035f33ea1709268fc24f1c6db1613898b0be3c12717a4c679f"], 0x1c}, 0x1, 0x0, 0x0, 0x20000810}, 0x80d0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c000280140003002000000000000000030007116b61979e0c000100636c75737465720008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r7 = syz_open_dev$loop(&(0x7f00000001c0), 0x3, 0x2000) ioctl$LOOP_SET_CAPACITY(r7, 0x4c07) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000000306010200000000000000000a0000040500010007000000050001000700000005000100070000000500010007000000e3ff01000700000005000100070000000500010007000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44080) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r8, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2404a004}, 0x4) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a40000000060a010400000000000000000a0000010900010073797a310000000014000480100001800a00010072656469720000000900020073797a3200000000200000000e0a01040000000000000000070000050900010073797a3000000000140000001100010000000000000000000100000ac9d9cc1c00e7"], 0x88}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 295.183384ms ago: executing program 3 (id=1323): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x418, 0x208, 0x208, 0xffffffff, 0x2b0, 0x168, 0x380, 0x380, 0xffffffff, 0x380, 0x380, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x130, 0x168, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "48ae43e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e22, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {0xff}}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x1, &(0x7f0000000100)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x6, 0x8, 0x94, 0x7fff0000}, {0x84f8, 0x9, 0x7, 0x4}]}) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x1000003, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c0}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r11, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xd}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x800}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0xc890) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller0\x00', @broadcast}) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 187.994019ms ago: executing program 0 (id=1324): syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0xc}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1c}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x30000802}, 0x90) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB='\\\x00\x00'], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 112.291845ms ago: executing program 1 (id=1325): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) add_key$fscrypt_v1(0x0, &(0x7f0000000040)={'fscrypt:', @desc1}, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$vsock_stream(0x28, 0x1, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff}, 0x80) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r4) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r3, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e2fa08", 0x1c, 0x6, 0x0, @private0, @mcast1, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x22, 0x8, "dcd75ebedc1a"}]}}}}}}}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x8, &(0x7f0000000040)=0xffffffffffffffff, 0x57) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000), 0x8) sendmmsg$inet6(r0, &(0x7f0000004780)=[{{&(0x7f0000000440)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000040)="a5", 0x1}], 0x1}}], 0x1, 0x0) 18.714974ms ago: executing program 5 (id=1326): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r1], 0x1}) 0s ago: executing program 0 (id=1327): timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x2, @thr={&(0x7f0000000340)="4443bf8fdac8638855b14bec07b5c1aa8994fcb9562affabcb86bc5c89ae51a3e10219a5a126701ddc543f800c8d52f68211b2a562a4de1a99adfe6f84f86bbc36faf7a196f895e7dddef2032dff298d6cab4b8be6fe", &(0x7f00000003c0)="0585a12d5c6b128476a78fceea5a46989d4ab16614bf2a2e1db5bdcf89e092891e775e80ab2fa321684074a43066daa22bbaacb68edd9a3ecbf898885351eb296eb117455564ddca0f3cc4d181d959737c32ac55c70751e2628db5c04687b5e57c76734fefcf3386f741f0719303d66de3c9f5529eb7f850342c79cb78c7c2bea45ff4ac44ff2a6a88128161eeaea6fdf5a23ea68cffd1392f5598e2e9f86f41e19965e7e89a608f6a49d6378ca9e37e6bf312b1ba31528b"}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0xa) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = timerfd_create(0x0, 0x0) readv(r1, &(0x7f0000000040)=[{0x0}], 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000540), r2) syz_emit_ethernet(0x6a, &(0x7f0000000900)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c5819c", 0x34, 0x3a, 0x0, @dev, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "5ad10a", 0x0, 0x2b, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, [], "aaa12ba2"}}}}}}}, 0x0) syz_extract_tcp_res(&(0x7f0000000040), 0x0, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$6lowpan_control(r3, &(0x7f0000000280)='connect aa:aa:aa:aa:aa:10 2', 0x1b) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r5, 0x0, 0x40) flock(0xffffffffffffffff, 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r6, 0x2) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) kernel console output (not intermixed with test programs): HID v0.00 Device [syz1] on syz0 [ 368.542322][ T9304] Option 'D' to dns_resolver key: bad/missing value [ 368.593013][ T9314] fido_id[9314]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 368.742153][ T9320] netlink: 'syz.1.954': attribute type 49 has an invalid length. [ 368.810403][ T9322] netlink: 132 bytes leftover after parsing attributes in process `syz.0.941'. [ 368.842170][ T5694] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 368.850011][ T9285] netlink: 196 bytes leftover after parsing attributes in process `syz.0.941'. [ 368.912309][ T804] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 369.098283][ T9] uvcvideo 3-1:0.31: Found Unit with invalid ID 0 [ 369.111769][ T9] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 369.141514][ T9320] bond0: (slave bond_slave_0): Releasing backup interface [ 369.154566][ T9] uvcvideo 3-1:0.31: No valid video chain found. [ 369.173144][ T9] usb 3-1: USB disconnect, device number 39 [ 369.199900][ T804] usb 5-1: unable to get BOS descriptor or descriptor too short [ 369.237923][ T804] usb 5-1: not running at top speed; connect to a high speed hub [ 369.279101][ T804] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 369.291610][ T5733] legousbtower 1-1:14.228: LEGO USB Tower firmware version is 138.15 build 55360 [ 369.306403][ T804] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 369.321352][ T5733] legousbtower 1-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 369.330882][ T9320] bond_slave_0: entered promiscuous mode [ 369.347460][ T9320] bond_slave_0: entered allmulticast mode [ 369.367291][ T804] usb 5-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 370.433588][ T804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.454918][ T804] usb 5-1: Product: syz [ 370.466089][ T804] usb 5-1: Manufacturer: syz [ 370.476283][ T804] usb 5-1: SerialNumber: syz [ 370.532125][ T9] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 370.715620][ T9] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 370.738202][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.788156][ T9] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 370.794948][ T804] usb 5-1: USB disconnect, device number 48 [ 371.242383][ T9] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 371.251049][ T9] usb 3-1: Manufacturer: syz [ 371.270202][ T9] usb 3-1: config 0 descriptor?? [ 371.319957][ T5868] udevd[5868]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 371.360664][ T30] kauditd_printk_skb: 265 callbacks suppressed [ 371.360680][ T30] audit: type=1400 audit(1780692881.292:891): avc: denied { unmount } for pid=5622 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 371.404941][ T9] rc_core: IR keymap rc-hauppauge not found [ 371.458885][ T5829] usb 1-1: USB disconnect, device number 39 [ 371.469907][ T5829] legousbtower 1-1:14.228: LEGO USB Tower #-160 now disconnected [ 371.512070][ T9] Registered IR keymap rc-empty [ 371.542791][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 371.582583][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input20 [ 371.666272][ T5628] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 371.998116][ T9356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.006728][ T9356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.347858][ T30] audit: type=1400 audit(1780692882.282:892): avc: denied { write } for pid=9336 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 372.624246][ T30] audit: type=1400 audit(1780692882.562:893): avc: denied { write } for pid=9368 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 372.774042][ T30] audit: type=1400 audit(1780692882.652:894): avc: denied { name_bind } for pid=9373 comm="syz.3.958" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 372.996201][ T30] audit: type=1326 audit(1780692882.932:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9373 comm="syz.3.958" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faf4bb9ce59 code=0x7dc00000 [ 373.303712][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.465939][ T9] usb 3-1: USB disconnect, device number 40 [ 373.750595][ T804] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 374.947307][ T9375] SELinux: failed to load policy [ 375.042125][ T804] usb 2-1: Using ep0 maxpacket: 8 [ 375.048774][ T804] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 375.057014][ T804] usb 2-1: config 0 has no interface number 0 [ 375.069976][ T804] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 375.079292][ T804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.092192][ T804] usb 2-1: Product: syz [ 375.096459][ T804] usb 2-1: Manufacturer: syz [ 375.108372][ T804] usb 2-1: SerialNumber: syz [ 375.129587][ T804] usb 2-1: config 0 descriptor?? [ 375.180176][ T30] audit: type=1400 audit(1780692885.112:896): avc: denied { write } for pid=9380 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 375.381261][ T30] audit: type=1400 audit(1780692885.312:897): avc: denied { write } for pid=9382 comm="syz.1.966" name="route" dev="proc" ino=4026532985 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 375.452581][ T30] audit: type=1400 audit(1780692885.352:898): avc: denied { write } for pid=9401 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 375.481048][ T804] uvcvideo 2-1:0.31: Found Unit with invalid ID 0 [ 375.482735][ T9] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 375.492138][ T804] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 375.524605][ T804] uvcvideo 2-1:0.31: No valid video chain found. [ 375.538377][ T9403] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 375.574712][ T804] usb 2-1: USB disconnect, device number 42 [ 375.628348][ T30] audit: type=1400 audit(1780692885.562:899): avc: denied { accept } for pid=9395 comm="syz.2.968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 375.724008][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 375.745593][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 375.758878][ T9] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 375.768124][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.790319][ T9] usb 5-1: Product: syz [ 375.803579][ T9] usb 5-1: Manufacturer: syz [ 375.828098][ T9] usb 5-1: SerialNumber: syz [ 375.842751][ T9] usb 5-1: config 0 descriptor?? [ 375.863287][ T9] hub 5-1:0.0: bad descriptor, ignoring hub [ 375.875531][ T9] hub 5-1:0.0: probe with driver hub failed with error -5 [ 375.901536][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 375.902135][ T5616] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 376.072248][ T5616] usb 3-1: Using ep0 maxpacket: 16 [ 376.108081][ T5616] usb 3-1: unable to get BOS descriptor or descriptor too short [ 376.119004][ T5616] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 202, changing to 7 [ 376.155027][ T5616] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 26, changing to 7 [ 376.180688][ T5616] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1032, setting to 1024 [ 376.210545][ T5616] usb 3-1: New USB device found, idVendor=09e8, idProduct=0021, bcdDevice= 0.40 [ 376.673322][ T9414] futex_wake_op: syz.1.972 tries to shift op by 36; fix this program [ 377.217040][ T5616] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.236737][ T5616] usb 3-1: Product: syz [ 377.246973][ T5616] usb 3-1: Manufacturer: syz [ 377.517528][ T5616] usb 3-1: SerialNumber: syz [ 377.765209][ T5628] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 377.827868][ T5616] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 377.943028][ T5616] usb 3-1: MIDIStreaming interface descriptor not found [ 378.035976][ T5616] usb 3-1: USB disconnect, device number 41 [ 378.216205][ T7130] udevd[7130]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 378.674216][ T9] usb 5-1: USB disconnect, device number 49 [ 379.224300][ T30] audit: type=1400 audit(1780692889.012:900): avc: denied { name_bind } for pid=9440 comm="syz.1.977" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 379.822236][ T5694] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 380.208778][ T5694] usb 3-1: Using ep0 maxpacket: 32 [ 380.261934][ T5694] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 380.304978][ T5694] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 380.359625][ T5694] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 380.426532][ T5694] usb 3-1: config 1 has no interface number 0 [ 380.508550][ T5694] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 380.576592][ T9452] netlink: 'syz.1.980': attribute type 2 has an invalid length. [ 380.584416][ T5694] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 380.598603][ T9452] netlink: 60 bytes leftover after parsing attributes in process `syz.1.980'. [ 380.607921][ T5694] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 380.617670][ T5694] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.670879][ T5694] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 380.790328][ T30] audit: type=1400 audit(1780692890.722:901): avc: denied { setopt } for pid=9459 comm="syz.3.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 380.870226][ T9446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.893281][ T9446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.903668][ T9467] netlink: 36 bytes leftover after parsing attributes in process `syz.3.983'. [ 380.924453][ T9467] netlink: 24 bytes leftover after parsing attributes in process `syz.3.983'. [ 380.938345][ T5694] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 380.952530][ T5616] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 381.101801][ T9470] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 381.574746][ T5694] usb 3-1: USB disconnect, device number 42 [ 381.725034][ T5694] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 382.572555][ T5616] usb 5-1: Using ep0 maxpacket: 8 [ 382.586542][ T5616] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 382.596371][ T5616] usb 5-1: config 0 has no interface number 0 [ 382.619228][ T5616] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 382.629581][ T5616] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.639799][ T5616] usb 5-1: Product: syz [ 382.646856][ T5616] usb 5-1: Manufacturer: syz [ 382.673924][ T5616] usb 5-1: SerialNumber: syz [ 382.755864][ T5616] usb 5-1: config 0 descriptor?? [ 383.004422][ T9486] netlink: 65185 bytes leftover after parsing attributes in process `syz.1.990'. [ 383.016494][ T9486] veth0_to_bond: default FDB implementation only supports local addresses [ 383.454606][ T5616] uvcvideo 5-1:0.31: Found Unit with invalid ID 0 [ 383.454990][ T5616] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 383.455451][ T5616] uvcvideo 5-1:0.31: No valid video chain found. [ 383.479179][ T5616] usb 5-1: USB disconnect, device number 50 [ 383.698104][ T30] audit: type=1400 audit(1780692893.632:902): avc: denied { mount } for pid=9485 comm="syz.2.991" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 383.877350][ T9501] FAULT_INJECTION: forcing a failure. [ 383.877350][ T9501] name failslab, interval 1, probability 0, space 0, times 0 [ 383.877402][ T9501] CPU: 1 UID: 0 PID: 9501 Comm: syz.0.993 Tainted: G L syzkaller #0 PREEMPT(full) [ 383.877418][ T9501] Tainted: [L]=SOFTLOCKUP [ 383.877421][ T9501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 383.877427][ T9501] Call Trace: [ 383.877431][ T9501] [ 383.877436][ T9501] dump_stack_lvl+0x100/0x190 [ 383.877453][ T9501] should_fail_ex.cold+0x5/0xa [ 383.877469][ T9501] should_failslab+0xc2/0x120 [ 383.877483][ T9501] __kmalloc_cache_noprof+0x7a/0x6f0 [ 383.877498][ T9501] ? create_io_worker+0xc6/0x5b0 [ 383.877513][ T9501] ? find_held_lock+0x2b/0x80 [ 383.877523][ T9501] ? create_io_worker+0x17/0x5b0 [ 383.877539][ T9501] create_io_worker+0xc6/0x5b0 [ 383.877554][ T9501] io_wq_enqueue+0x4d8/0x970 [ 383.877569][ T9501] ? __pfx_io_wq_enqueue+0x10/0x10 [ 383.877583][ T9501] ? __pfx_io_wq_work_match_item+0x10/0x10 [ 383.877597][ T9501] ? io_prep_async_work+0x3ab/0x720 [ 383.877612][ T9501] io_queue_iowq+0x232/0x5c0 [ 383.877626][ T9501] io_queue_sqe_fallback+0x16b/0x210 [ 383.877642][ T9501] io_submit_sqes+0x15a8/0x24b0 [ 383.877663][ T9501] __do_sys_io_uring_enter+0xa88/0x1b50 [ 383.877681][ T9501] ? __fget_files+0x21f/0x3d0 [ 383.877695][ T9501] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 383.877712][ T9501] ? fput+0x79/0x100 [ 383.877728][ T9501] ? ksys_write+0x1ac/0x250 [ 383.877739][ T9501] ? __pfx_ksys_write+0x10/0x10 [ 383.877752][ T9501] ? rcu_is_watching+0x12/0xc0 [ 383.877770][ T9501] do_syscall_64+0x115/0x870 [ 383.877785][ T9501] ? clear_bhb_loop+0x40/0x90 [ 383.877798][ T9501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.877809][ T9501] RIP: 0033:0x7fceb4f9ce59 [ 383.877822][ T9501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.877838][ T9501] RSP: 002b:00007fceb31cd028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 383.877854][ T9501] RAX: ffffffffffffffda RBX: 00007fceb5216090 RCX: 00007fceb4f9ce59 [ 383.877865][ T9501] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 383.877874][ T9501] RBP: 00007fceb31cd090 R08: 0000000000000000 R09: 0000000000000000 [ 383.877884][ T9501] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 383.877893][ T9501] R13: 00007fceb5216128 R14: 00007fceb5216090 R15: 00007ffea6a6e818 [ 383.877916][ T9501] [ 384.172666][ T9486] netlink: 80 bytes leftover after parsing attributes in process `syz.1.990'. [ 384.308739][ T30] audit: type=1400 audit(1780692894.242:903): avc: denied { ioctl } for pid=9516 comm="syz.4.998" path="/dev/ptyqc" dev="devtmpfs" ino=131 ioctlcmd=0x5431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 384.658414][ T9518] futex_wake_op: syz.2.996 tries to shift op by 36; fix this program [ 385.383954][ T9532] netlink: 'syz.3.1000': attribute type 49 has an invalid length. [ 385.837034][ T9540] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1003'. [ 385.882269][ T5694] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 386.183331][ T5694] usb 2-1: Using ep0 maxpacket: 32 [ 386.320582][ T5694] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 386.329061][ T5694] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 386.356462][ T5694] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 386.377503][ T5694] usb 2-1: config 1 has no interface number 0 [ 386.398176][ T5694] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 386.458720][ T9495] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 386.471197][ T5694] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 386.499206][ T5694] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 386.518044][ T5694] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.566799][ T5694] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 386.589992][ T30] audit: type=1326 audit(1780692896.522:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9536 comm="syz.0.1002" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb4f9ce59 code=0x7ffc0000 [ 386.622748][ T30] audit: type=1326 audit(1780692896.522:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9536 comm="syz.0.1002" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb4f9ce59 code=0x7ffc0000 [ 386.765339][ T9534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.789771][ T9534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.947032][ T5694] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 387.070487][ T9554] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 387.120530][ T9554] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 387.592307][ T30] audit: type=1326 audit(1780692896.522:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9536 comm="syz.0.1002" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb4f9ce59 code=0x7ffc0000 [ 387.619746][ T5694] usb 2-1: USB disconnect, device number 43 [ 387.626456][ T5694] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 387.637677][ T30] audit: type=1326 audit(1780692896.592:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9536 comm="syz.0.1002" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb4f9ce59 code=0x7ffc0000 [ 387.664218][ T30] audit: type=1326 audit(1780692896.592:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9536 comm="syz.0.1002" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fceb4f9ce59 code=0x7ffc0000 [ 387.692750][ T30] audit: type=1326 audit(1780692896.592:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9536 comm="syz.0.1002" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb4f9ce59 code=0x7ffc0000 [ 387.721017][ T30] audit: type=1326 audit(1780692896.612:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9536 comm="syz.0.1002" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb4f9ce59 code=0x7ffc0000 [ 387.749394][ T30] audit: type=1326 audit(1780692896.612:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9536 comm="syz.0.1002" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb4f9ce59 code=0x7ffc0000 [ 387.800280][ T30] audit: type=1326 audit(1780692896.622:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9536 comm="syz.0.1002" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb4f9ce59 code=0x7ffc0000 [ 388.986058][ T9573] futex_wake_op: syz.4.1009 tries to shift op by 36; fix this program [ 389.428400][ T9576] FAULT_INJECTION: forcing a failure. [ 389.428400][ T9576] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 389.676964][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 389.677012][ T30] audit: type=1400 audit(1780692899.602:918): avc: denied { connect } for pid=9578 comm="syz.3.1014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 389.719531][ T9576] CPU: 0 UID: 0 PID: 9576 Comm: syz.0.1012 Tainted: G L syzkaller #0 PREEMPT(full) [ 389.719551][ T9576] Tainted: [L]=SOFTLOCKUP [ 389.719554][ T9576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 389.719560][ T9576] Call Trace: [ 389.719564][ T9576] [ 389.719568][ T9576] dump_stack_lvl+0x100/0x190 [ 389.719584][ T9576] should_fail_ex.cold+0x5/0xa [ 389.719600][ T9576] _copy_from_user+0x2e/0xd0 [ 389.719614][ T9576] move_addr_to_kernel+0x65/0x170 [ 389.719629][ T9576] __sys_connect+0xb5/0x170 [ 389.719644][ T9576] ? __pfx___sys_connect+0x10/0x10 [ 389.719658][ T9576] ? __fget_files+0x21f/0x3d0 [ 389.719676][ T9576] ? __pfx_ksys_write+0x10/0x10 [ 389.719688][ T9576] ? trace_irq_enable.constprop.0+0x31/0x160 [ 389.719705][ T9576] __x64_sys_connect+0x72/0xb0 [ 389.719720][ T9576] ? lockdep_hardirqs_on+0x78/0x100 [ 389.719734][ T9576] do_syscall_64+0x115/0x870 [ 389.719748][ T9576] ? clear_bhb_loop+0x40/0x90 [ 389.719761][ T9576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.719772][ T9576] RIP: 0033:0x7fceb4f9ce59 [ 389.719781][ T9576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.719791][ T9576] RSP: 002b:00007fceb31ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 389.719803][ T9576] RAX: ffffffffffffffda RBX: 00007fceb5215fa0 RCX: 00007fceb4f9ce59 [ 389.719809][ T9576] RDX: 0000000000000010 RSI: 00002000000021c0 RDI: 0000000000000004 [ 389.719816][ T9576] RBP: 00007fceb31ee090 R08: 0000000000000000 R09: 0000000000000000 [ 389.719822][ T9576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.719828][ T9576] R13: 00007fceb5216038 R14: 00007fceb5215fa0 R15: 00007ffea6a6e818 [ 389.719841][ T9576] [ 390.231172][ T30] audit: type=1400 audit(1780692900.162:919): avc: denied { write } for pid=9555 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 390.276604][ T9588] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1016'. [ 390.322119][ T5694] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 390.339475][ T9588] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1016'. [ 390.472198][ T5694] usb 4-1: Using ep0 maxpacket: 16 [ 390.525049][ T5694] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 390.567035][ T9593] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 390.610997][ T5694] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 390.685248][ T5694] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.798643][ T5694] usb 4-1: config 0 descriptor?? [ 391.887820][ T30] audit: type=1400 audit(1780692901.822:920): avc: denied { write } for pid=9597 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 392.173056][ T5714] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 392.321652][ T30] audit: type=1400 audit(1780692902.252:921): avc: denied { read } for pid=9608 comm="syz.0.1020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 392.379072][ T5714] usb 2-1: Using ep0 maxpacket: 8 [ 392.396051][ T5714] usb 2-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 0.04 [ 392.414814][ T5714] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.439650][ T5714] usb 2-1: config 0 descriptor?? [ 392.456494][ T5714] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 392.479322][ T5714] usb 2-1: Detected SIO [ 392.527911][ T5714] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 392.582865][ T5694] usb 4-1: USB disconnect, device number 46 [ 392.653345][ T5829] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 392.971620][ T5829] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.006540][ T5829] usb 3-1: config 0 has no interfaces? [ 393.026945][ T5829] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 393.065815][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.212620][ T5829] usb 3-1: config 0 descriptor?? [ 393.355563][ T9605] SELinux: failed to load policy [ 393.439875][ T30] audit: type=1400 audit(1780692903.372:922): avc: denied { create } for pid=9613 comm="syz.2.1021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 393.441708][ T9614] ieee802154 phy1 wpan1: encryption failed: -22 [ 393.499607][ T5694] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 393.546803][ T30] audit: type=1400 audit(1780692903.372:923): avc: denied { write } for pid=9613 comm="syz.2.1021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 393.591278][ T5829] usb 3-1: USB disconnect, device number 43 [ 393.682197][ T5694] usb 4-1: Using ep0 maxpacket: 32 [ 393.690904][ T5694] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 393.708629][ T5694] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 393.744303][ T5694] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 393.766806][ T5694] usb 4-1: config 1 has no interface number 0 [ 393.792931][ T5694] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 394.284093][ T9624] futex_wake_op: syz.4.1024 tries to shift op by 36; fix this program [ 394.855235][ T5694] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 394.868196][ T5694] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 394.987897][ T9] usb 2-1: USB disconnect, device number 44 [ 395.012691][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 395.022143][ T5694] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.035161][ T9] ftdi_sio 2-1:0.0: device disconnected [ 395.049723][ T5694] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 395.227068][ T9629] binder: 9627:9629 ioctl 40186f02 200000000180 returned -22 [ 395.262530][ T9620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.296906][ T9620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.334265][ T5694] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 395.466126][ T9631] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 396.072039][ T5714] usb 4-1: USB disconnect, device number 47 [ 396.093529][ T5714] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 396.182975][ T5830] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 396.344952][ T5830] usb 3-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 396.399600][ T5830] usb 3-1: config 1 interface 0 has no altsetting 0 [ 396.424889][ T5830] usb 3-1: string descriptor 0 read error: -22 [ 396.431375][ T5830] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 396.452073][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.736418][ T9642] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.862526][ T9637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1029'. [ 396.939453][ T5830] keytouch 0003:0926:3333.000C: fixing up Keytouch IEC report descriptor [ 396.991145][ T5830] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:0926:3333.000C/input/input21 [ 397.302098][ T5741] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 397.330163][ T5830] keytouch 0003:0926:3333.000C: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 397.389908][ T5830] usb 3-1: USB disconnect, device number 44 [ 397.493054][ T5741] usb 1-1: Using ep0 maxpacket: 16 [ 397.507027][ T5741] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 397.529002][ T5741] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 397.531394][ T9649] fido_id[9649]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 397.540770][ T5741] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.610790][ T5741] usb 1-1: config 0 descriptor?? [ 398.396086][ T9664] qnx6: unable to read the first superblock [ 398.404957][ T9664] qnx6: unable to read the first superblock [ 398.411720][ T9664] qnx6: unable to read the first superblock [ 399.401960][ T30] audit: type=1400 audit(1780692909.332:924): avc: denied { create } for pid=9662 comm="syz.1.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 399.478110][ T30] audit: type=1400 audit(1780692909.362:925): avc: denied { ioctl } for pid=9662 comm="syz.1.1036" path="socket:[26170]" dev="sockfs" ino=26170 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 399.772764][ T5628] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 399.951019][ T5714] usb 1-1: USB disconnect, device number 40 [ 400.316012][ T9683] cgroup: fork rejected by pids controller in /syz0 [ 406.062268][ T5830] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 408.473261][ T9734] futex_wake_op: syz.2.1045 tries to shift op by 36; fix this program [ 410.256623][ T9745] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1048'. [ 413.312132][ T9] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 413.432558][ T5714] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 413.472239][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 413.481410][ T9] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 413.490092][ T9] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 413.512614][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 413.522004][ T9] usb 3-1: config 1 has no interface number 0 [ 413.528796][ T9] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 413.542508][ T9] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 413.559848][ T9] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 413.569315][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.592247][ T9] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 413.604708][ T5714] usb 4-1: Using ep0 maxpacket: 16 [ 413.616215][ T5714] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 413.627423][ T5714] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 413.636897][ T5714] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.653548][ T5714] usb 4-1: config 0 descriptor?? [ 413.792135][ T9766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.807706][ T9766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.821687][ T9] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 414.571581][ T804] usb 3-1: USB disconnect, device number 45 [ 414.589973][ T804] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 414.820107][ T5626] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 414.830220][ T5626] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 414.841545][ T5626] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 414.851308][ T5626] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 414.858914][ T5626] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 416.011264][ T5616] usb 4-1: USB disconnect, device number 48 [ 416.120647][ T9802] FAULT_INJECTION: forcing a failure. [ 416.120647][ T9802] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 416.172524][ T5830] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 416.190229][ T9802] CPU: 1 UID: 0 PID: 9802 Comm: syz.3.1065 Tainted: G L syzkaller #0 PREEMPT(full) [ 416.190259][ T9802] Tainted: [L]=SOFTLOCKUP [ 416.190264][ T9802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 416.190274][ T9802] Call Trace: [ 416.190280][ T9802] [ 416.190287][ T9802] dump_stack_lvl+0x100/0x190 [ 416.190313][ T9802] should_fail_ex.cold+0x5/0xa [ 416.190337][ T9802] _copy_from_user+0x2e/0xd0 [ 416.190359][ T9802] __sys_bpf+0x243/0x4b90 [ 416.190389][ T9802] ? __pfx___sys_bpf+0x10/0x10 [ 416.190413][ T9802] ? proc_fail_nth_write+0x9f/0x220 [ 416.190433][ T9802] ? find_held_lock+0x2b/0x80 [ 416.190456][ T9802] ? find_held_lock+0x2b/0x80 [ 416.190476][ T9802] ? ksys_write+0x190/0x250 [ 416.190494][ T9802] ? ksys_write+0x190/0x250 [ 416.190517][ T9802] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 416.190540][ T9802] ? kernel_write+0x673/0x6c0 [ 416.190558][ T9802] ? __fget_files+0x215/0x3d0 [ 416.190592][ T9802] ? fput+0x79/0x100 [ 416.190615][ T9802] ? ksys_write+0x1ac/0x250 [ 416.190633][ T9802] ? __pfx_ksys_write+0x10/0x10 [ 416.190657][ T9802] __x64_sys_bpf+0x7b/0xc0 [ 416.190673][ T9802] ? lockdep_hardirqs_on+0x78/0x100 [ 416.190696][ T9802] do_syscall_64+0x115/0x870 [ 416.190718][ T9802] ? clear_bhb_loop+0x40/0x90 [ 416.190740][ T9802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.190757][ T9802] RIP: 0033:0x7faf4bb9ce59 [ 416.190772][ T9802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.190788][ T9802] RSP: 002b:00007faf4ca0a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 416.190804][ T9802] RAX: ffffffffffffffda RBX: 00007faf4be15fa0 RCX: 00007faf4bb9ce59 [ 416.190815][ T9802] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 416.190825][ T9802] RBP: 00007faf4ca0a090 R08: 0000000000000000 R09: 0000000000000000 [ 416.190835][ T9802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.190845][ T9802] R13: 00007faf4be16038 R14: 00007faf4be15fa0 R15: 00007ffca01625e8 [ 416.190868][ T9802] [ 416.732098][ T5830] usb 2-1: Using ep0 maxpacket: 16 [ 416.760234][ T5830] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.777951][ T5830] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.812226][ T5830] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 416.960083][ T5830] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 416.973100][ T5628] Bluetooth: hci5: command tx timeout [ 417.005252][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.016164][ T9812] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 417.022520][ T5830] usb 2-1: config 0 descriptor?? [ 417.209927][ T30] audit: type=1400 audit(1780692927.142:926): avc: denied { sys_module } for pid=9788 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 417.757854][ T5830] input: HID 054c:03d5 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:03D5.000D/input/input22 [ 417.780427][ T149] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.898722][ T5830] sony 0003:054C:03D5.000D: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.1-1/input0 [ 418.948560][ T5830] usb 2-1: USB disconnect, device number 46 [ 419.052141][ T5628] Bluetooth: hci5: command tx timeout [ 419.087113][ T9829] fido_id[9829]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 419.107654][ T149] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.212607][ T5714] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 420.232118][ T5714] usb 3-1: device descriptor read/64, error -71 [ 420.278626][ T149] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.472482][ T5714] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 420.622145][ T5714] usb 3-1: device descriptor read/64, error -71 [ 420.710843][ T149] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.868783][ T5714] usb usb3-port1: attempt power cycle [ 420.915194][ T9845] futex_wake_op: syz.0.1071 tries to shift op by 36; fix this program [ 421.141100][ T5628] Bluetooth: hci5: command tx timeout [ 421.423231][ T5714] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 421.443213][ T30] audit: type=1400 audit(1780692931.372:927): avc: denied { mount } for pid=9851 comm="syz.3.1075" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 421.479542][ T5714] usb 3-1: device descriptor read/8, error -71 [ 421.541897][ T30] audit: type=1400 audit(1780692931.402:928): avc: denied { mounton } for pid=9851 comm="syz.3.1075" path="/222/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 421.632536][ T5741] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 421.742311][ T5714] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 421.774174][ T5714] usb 3-1: device descriptor read/8, error -71 [ 421.894756][ T5714] usb usb3-port1: unable to enumerate USB device [ 422.072252][ T5714] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 422.231572][ T30] audit: type=1400 audit(1780692932.162:929): avc: denied { unmount } for pid=5612 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 422.265041][ T9788] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.273758][ T9788] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.282534][ T9788] bridge_slave_0: entered allmulticast mode [ 422.291484][ T9788] bridge_slave_0: entered promiscuous mode [ 422.299886][ T9788] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.307341][ T9788] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.314564][ T9788] bridge_slave_1: entered allmulticast mode [ 422.322192][ T9788] bridge_slave_1: entered promiscuous mode [ 422.362484][ T5741] usb 2-1: Using ep0 maxpacket: 16 [ 422.375183][ T5741] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.385882][ T5741] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 422.395646][ T5741] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.407927][ T5741] usb 2-1: config 0 descriptor?? [ 422.423071][ T5714] usb 1-1: Using ep0 maxpacket: 8 [ 422.443498][ T9788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.450483][ T30] audit: type=1326 audit(1780692932.382:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9861 comm="syz.3.1077" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf4bb9ce59 code=0x7ffc0000 [ 422.481987][ T30] audit: type=1326 audit(1780692932.412:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9861 comm="syz.3.1077" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7faf4bb9ce59 code=0x7ffc0000 [ 422.491115][ T5714] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 422.509384][ T30] audit: type=1326 audit(1780692932.412:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9861 comm="syz.3.1077" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf4bb9ce59 code=0x7ffc0000 [ 422.550406][ T9788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.878964][ T30] audit: type=1326 audit(1780692932.412:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9861 comm="syz.3.1077" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7faf4bb9ce59 code=0x7ffc0000 [ 422.933114][ T5714] usb 1-1: config 0 has no interface number 0 [ 422.952188][ T9788] team0: Port device team_slave_0 added [ 422.978894][ T30] audit: type=1326 audit(1780692932.412:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9861 comm="syz.3.1077" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf4bb9ce59 code=0x7ffc0000 [ 423.006676][ T9788] team0: Port device team_slave_1 added [ 423.058284][ T5714] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 423.097263][ T5714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.097335][ T9788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.114793][ T30] audit: type=1326 audit(1780692932.412:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9861 comm="syz.3.1077" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7faf4bb9ce59 code=0x7ffc0000 [ 423.157815][ T9788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.200268][ T5714] usb 1-1: Product: syz [ 423.200272][ T30] audit: type=1326 audit(1780692932.412:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9861 comm="syz.3.1077" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf4bb9ce59 code=0x7ffc0000 [ 423.200314][ T30] audit: type=1326 audit(1780692932.412:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9861 comm="syz.3.1077" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faf4bb9ce59 code=0x7ffc0000 [ 423.212337][ T5628] Bluetooth: hci5: command tx timeout [ 423.262559][ T5714] usb 1-1: Manufacturer: syz [ 423.267234][ T5714] usb 1-1: SerialNumber: syz [ 423.294085][ T5714] usb 1-1: config 0 descriptor?? [ 423.316794][ T9788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.731899][ T9788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.742825][ T30] audit: type=1326 audit(1780692932.412:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9861 comm="syz.3.1077" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf4bb9ce59 code=0x7ffc0000 [ 423.769212][ T9788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.817053][ T9788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.090975][ T5714] uvcvideo 1-1:0.31: Found Unit with invalid ID 0 [ 424.106390][ T5741] usb 2-1: USB disconnect, device number 47 [ 424.120047][ T5714] uvcvideo 1-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 424.145743][ T5714] uvcvideo 1-1:0.31: No valid video chain found. [ 424.169035][ T5714] usb 1-1: USB disconnect, device number 41 [ 424.186962][ T9788] hsr_slave_0: entered promiscuous mode [ 424.224073][ T9874] SET target dimension over the limit! [ 424.235146][ T9788] hsr_slave_1: entered promiscuous mode [ 424.269553][ T9788] debugfs: 'hsr0' already exists in 'hsr' [ 424.293931][ T9788] Cannot create hsr debugfs directory [ 424.331097][ T9874] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1080'. [ 424.376444][ T9880] xt_hashlimit: size too large, truncated to 1048576 [ 424.387576][ T9888] SELinux: policydb magic number 0x8902 does not match expected magic number 0xf97cff8c [ 424.408647][ T9880] xt_NFQUEUE: number of queues (10) out of range (got 65542) [ 424.437322][ T9888] SELinux: failed to load policy [ 425.025208][ T149] bridge_slave_1: left allmulticast mode [ 425.068075][ T149] bridge_slave_1: left promiscuous mode [ 425.118324][ T149] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.311733][ T149] bridge_slave_0: left allmulticast mode [ 425.373119][ T149] bridge_slave_0: left promiscuous mode [ 425.443704][ T149] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.686319][ T5628] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 426.340968][ T5628] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 426.693551][ T9927] netlink: 'syz.3.1087': attribute type 4 has an invalid length. [ 426.716943][ T9927] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1087'. [ 427.052245][ T10] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 427.085444][ T149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.133071][ T149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 427.167043][ T149] bond0 (unregistering): Released all slaves [ 427.198855][ T149] bond1 (unregistering): Released all slaves [ 427.222685][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 427.240122][ T10] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 427.243482][ T149] bond2 (unregistering): Released all slaves [ 427.279247][ T10] usb 4-1: config 0 has no interface number 0 [ 427.307320][ T10] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 427.325814][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.346234][ T10] usb 4-1: Product: syz [ 427.355216][ T10] usb 4-1: Manufacturer: syz [ 427.378088][ T10] usb 4-1: SerialNumber: syz [ 427.393254][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 427.454998][ T10] usb 4-1: config 0 descriptor?? [ 427.480508][ T10] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 427.503108][ T804] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 427.562506][ T149] tipc: Left network mode [ 427.663279][ T804] usb 2-1: Using ep0 maxpacket: 16 [ 428.285909][ T10] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 428.505122][ T10] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 428.517166][ T804] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 428.548453][ T9931] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=9931 comm=syz.3.1087 [ 428.580853][ T804] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 428.594714][ T804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.611317][ T804] usb 2-1: config 0 descriptor?? [ 429.402936][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 429.429441][ T804] usb 4-1: USB disconnect, device number 49 [ 429.781742][ T804] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 429.840169][ T804] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 429.889156][ T804] quatech2 4-1:0.51: device disconnected [ 430.004315][ T9788] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 430.038136][ T10] usb 2-1: USB disconnect, device number 48 [ 430.079204][ T9788] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 430.135835][ T9788] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 430.199631][ T9788] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 430.269510][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 430.269524][ T30] audit: type=1400 audit(1780692940.202:952): avc: denied { write } for pid=9954 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 430.310175][ T149] hsr_slave_0: left promiscuous mode [ 430.340755][ T9985] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1100'. [ 430.372337][ T149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 430.388390][ T149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.417137][ T149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.440764][ T149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.458812][ T30] audit: type=1400 audit(1780692940.392:953): avc: denied { write } for pid=9989 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 430.983228][ T9997] futex_wake_op: syz.0.1102 tries to shift op by 36; fix this program [ 431.492129][ T149] veth1_macvtap: left promiscuous mode [ 431.492200][ T149] veth0_macvtap: left promiscuous mode [ 431.492295][ T149] veth1_vlan: left promiscuous mode [ 431.492344][ T149] veth0_vlan: left promiscuous mode [ 431.982242][ T5829] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 432.612209][ T5829] usb 3-1: Using ep0 maxpacket: 16 [ 432.662164][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 432.662197][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 432.670518][ T5829] usb 3-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=82.8f [ 432.723102][ T5829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.731134][ T5829] usb 3-1: Product: syz [ 432.736385][ T5829] usb 3-1: Manufacturer: syz [ 432.741202][ T5829] usb 3-1: SerialNumber: syz [ 432.750262][ T5829] usb 3-1: config 0 descriptor?? [ 432.761174][ T5829] kobil_sct 3-1:0.0: KOBIL USB smart card terminal converter detected [ 432.771629][ T5829] usb 3-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 433.142632][ T5829] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 433.462078][ T5829] usb 1-1: Using ep0 maxpacket: 16 [ 433.463260][ T5829] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 433.463285][ T5829] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 433.463298][ T5829] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.464830][ T5829] usb 1-1: config 0 descriptor?? [ 433.635750][ T149] team0 (unregistering): Port device team_slave_1 removed [ 433.647907][ T149] team0 (unregistering): Port device team_slave_0 removed [ 434.022173][ T5628] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 434.326089][ T9788] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 434.347696][ T9788] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 434.368286][ T9788] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 434.403300][ T9788] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 434.425752][ T10] usb 3-1: USB disconnect, device number 50 [ 434.432889][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 434.457984][T10017] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 434.517665][ T10] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 434.555528][ T10] kobil_sct 3-1:0.0: device disconnected [ 434.711115][T10036] FAULT_INJECTION: forcing a failure. [ 434.711115][T10036] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 434.739804][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 434.770222][ T9788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.792589][T10036] CPU: 1 UID: 0 PID: 10036 Comm: syz.1.1110 Tainted: G L syzkaller #0 PREEMPT(full) [ 434.792617][T10036] Tainted: [L]=SOFTLOCKUP [ 434.792624][T10036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 434.792634][T10036] Call Trace: [ 434.792640][T10036] [ 434.792647][T10036] dump_stack_lvl+0x100/0x190 [ 434.792672][T10036] should_fail_ex.cold+0x5/0xa [ 434.792698][T10036] _copy_to_user+0x32/0xd0 [ 434.792722][T10036] simple_read_from_buffer+0xcb/0x170 [ 434.792746][T10036] proc_fail_nth_read+0x1af/0x230 [ 434.792766][T10036] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 434.792787][T10036] ? rw_verify_area+0xce/0x6d0 [ 434.792804][T10036] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 434.792823][T10036] vfs_read+0x1e4/0xb30 [ 434.792845][T10036] ? __pfx_vfs_read+0x10/0x10 [ 434.792863][T10036] ? __fget_files+0x215/0x3d0 [ 434.792890][T10036] ? __fget_files+0x21f/0x3d0 [ 434.792919][T10036] ksys_read+0x12a/0x250 [ 434.792938][T10036] ? __pfx_ksys_read+0x10/0x10 [ 434.792959][T10036] ? rcu_is_watching+0x12/0xc0 [ 434.792987][T10036] do_syscall_64+0x115/0x870 [ 434.793010][T10036] ? clear_bhb_loop+0x40/0x90 [ 434.793032][T10036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.793051][T10036] RIP: 0033:0x7ff11ef5d68e [ 434.793067][T10036] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 434.793085][T10036] RSP: 002b:00007ff11fe08fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 434.793103][T10036] RAX: ffffffffffffffda RBX: 00007ff11fe096c0 RCX: 00007ff11ef5d68e [ 434.793114][T10036] RDX: 000000000000000f RSI: 00007ff11fe090a0 RDI: 0000000000000009 [ 434.793125][T10036] RBP: 00007ff11fe09090 R08: 0000000000000000 R09: 0000000000000000 [ 434.793135][T10036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.793145][T10036] R13: 00007ff11f216038 R14: 00007ff11f215fa0 R15: 00007ffc4073cd98 [ 434.793169][T10036] [ 435.370226][ T5616] usb 1-1: USB disconnect, device number 42 [ 435.765914][ T9788] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.857427][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.864592][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.875633][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.882705][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.912691][ T9788] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 436.137754][ T30] audit: type=1400 audit(1780692946.072:954): avc: denied { connect } for pid=10056 comm="syz.1.1113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 436.322181][ T804] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 436.372917][ T30] audit: type=1400 audit(1780692946.312:955): avc: denied { write } for pid=10037 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 436.483965][ T804] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 436.501947][ T804] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 436.537112][ T804] usb 3-1: config 0 has no interface number 0 [ 436.555186][ T804] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 436.570922][ T804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.594258][ T804] usb 3-1: Product: syz [ 436.605785][ T804] usb 3-1: Manufacturer: syz [ 436.618038][ T804] usb 3-1: SerialNumber: syz [ 436.738647][ T804] usb 3-1: config 0 descriptor?? [ 437.054297][ T804] hub 3-1:0.31: bad descriptor, ignoring hub [ 437.065675][ T804] hub 3-1:0.31: probe with driver hub failed with error -5 [ 437.087328][ T804] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 437.097459][ T804] uvcvideo 3-1:0.31: Entity type for entity Output 32774 was not initialized! [ 437.137371][ T30] audit: type=1400 audit(1780692947.072:956): avc: denied { write } for pid=10072 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 437.160005][ T804] uvcvideo 3-1:0.31: Failed to create links for entity 32774 [ 437.188773][ T804] uvcvideo 3-1:0.31: Failed to register entities (-22). [ 437.331872][ T9788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.454886][ T5278] 8021q: adding VLAN 0 to HW filter on device eth3 [ 437.461479][ T5741] usb 3-1: USB disconnect, device number 51 [ 438.273312][T10099] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1119'. [ 439.565708][ T5628] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 439.703207][ T9788] veth0_vlan: entered promiscuous mode [ 439.791215][T10120] netlink: 'syz.2.1120': attribute type 2 has an invalid length. [ 439.870566][T10121] netlink: 'syz.2.1120': attribute type 2 has an invalid length. [ 442.173479][ T30] audit: type=1400 audit(1780692952.062:957): avc: denied { write } for pid=10098 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 442.246919][ T30] audit: type=1400 audit(1780692952.152:958): avc: denied { write } for pid=10136 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 442.546820][ T9788] veth1_vlan: entered promiscuous mode [ 442.609048][ T5278] 8021q: adding VLAN 0 to HW filter on device eth4 [ 442.706383][ T9788] veth0_macvtap: entered promiscuous mode [ 442.716977][ T9788] veth1_macvtap: entered promiscuous mode [ 444.128930][ T9788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 444.633509][ T9788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 444.854486][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.864590][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.937309][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.100559][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.214355][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.323912][ T30] audit: type=1326 audit(1780692955.262:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10165 comm="syz.0.1130" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb4f9ce59 code=0x7ffc0000 [ 445.391361][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.389298][ T30] audit: type=1326 audit(1780692955.262:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10165 comm="syz.0.1130" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb4f9ce59 code=0x7ffc0000 [ 446.508081][ T30] audit: type=1326 audit(1780692955.292:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10165 comm="syz.0.1130" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fceb4f9ce59 code=0x7ffc0000 [ 446.600969][ T5873] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.656358][ T5873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.714100][ T30] audit: type=1326 audit(1780692955.292:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10165 comm="syz.0.1130" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb4f9ce59 code=0x7ffc0000 [ 446.832983][ T30] audit: type=1326 audit(1780692955.292:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10165 comm="syz.0.1130" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb4f9ce59 code=0x7ffc0000 [ 446.950479][ T30] audit: type=1326 audit(1780692955.292:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10165 comm="syz.0.1130" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fceb4f9ce59 code=0x7ffc0000 [ 447.048320][ T30] audit: type=1326 audit(1780692955.292:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10165 comm="syz.0.1130" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb4f9ce59 code=0x7ffc0000 [ 447.164470][ T30] audit: type=1326 audit(1780692955.292:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10165 comm="syz.0.1130" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb4f9ce59 code=0x7ffc0000 [ 447.254822][ T30] audit: type=1326 audit(1780692955.292:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10165 comm="syz.0.1130" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fceb4f9ce59 code=0x7ffc0000 [ 447.297485][ T30] audit: type=1326 audit(1780692955.292:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10165 comm="syz.0.1130" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb4f9ce59 code=0x7ffc0000 [ 447.326373][ T30] audit: type=1326 audit(1780692955.292:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10165 comm="syz.0.1130" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb4f9ce59 code=0x7ffc0000 [ 447.412702][ T30] audit: type=1326 audit(1780692955.292:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10165 comm="syz.0.1130" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fceb4f9ce59 code=0x7ffc0000 [ 447.456501][ T30] audit: type=1326 audit(1780692955.292:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10165 comm="syz.0.1130" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb4f9ce59 code=0x7ffc0000 [ 447.754471][ T30] audit: type=1326 audit(1780692955.292:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10165 comm="syz.0.1130" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb4f9ce59 code=0x7ffc0000 [ 447.977665][ T30] audit: type=1326 audit(1780692955.292:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10165 comm="syz.0.1130" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fceb4f9ce59 code=0x7ffc0000 [ 448.139265][ T30] audit: type=1326 audit(1780692955.292:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10165 comm="syz.0.1130" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb4f9ce59 code=0x7ffc0000 [ 448.238419][ T30] audit: type=1326 audit(1780692955.292:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10165 comm="syz.0.1130" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb4f9ce59 code=0x7ffc0000 [ 448.297407][ T30] audit: type=1326 audit(1780692955.292:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10165 comm="syz.0.1130" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fceb4f9ce59 code=0x7ffc0000 [ 448.328069][ T5694] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 448.510001][ T5694] usb 3-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=a4.46 [ 448.519229][ T5694] usb 3-1: New USB device strings: Mfr=133, Product=2, SerialNumber=0 [ 448.530151][ T5694] usb 3-1: Product: syz [ 448.540382][ T5694] usb 3-1: Manufacturer: syz [ 448.577202][ T5694] usb 3-1: config 0 descriptor?? [ 448.697053][ T5694] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 448.709983][ T5694] ftdi_sio ttyUSB0: unknown device type: 0xa446 [ 449.153761][ T5694] usb 3-1: USB disconnect, device number 52 [ 449.199949][ T5694] ftdi_sio 3-1:0.0: device disconnected [ 449.971834][T10216] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 451.165192][T10224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1142'. [ 451.874139][ T10] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 452.029314][T10224] 8021q: adding VLAN 0 to HW filter on device bond1 [ 452.162071][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 452.174038][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 452.191356][ T10] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 452.230494][ T10] usb 2-1: string descriptor 0 read error: -22 [ 452.241729][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 452.268035][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.357389][ T10] snd-ua101 2-1:1.0: invalid num_altsetting [ 452.492160][ T5741] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 452.628719][T10224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1142'. [ 452.649446][T10224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1142'. [ 452.692638][T10224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 452.716755][T10228] netlink: 'syz.1.1142': attribute type 10 has an invalid length. [ 452.739696][T10224] bond1: (slave bond0): making interface the new active one [ 452.765053][T10224] bond1: (slave bond0): Enslaving as an active interface with an up link [ 452.824559][T10228] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 452.901213][ T10] usb 2-1: USB disconnect, device number 49 [ 454.674672][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 454.674687][ T30] audit: type=1400 audit(1780692964.612:985): avc: denied { create } for pid=10259 comm="syz.1.1150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 455.162194][ T9] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 455.315479][ T9] usb 3-1: config 5 has an invalid interface number: 59 but max is 2 [ 455.329033][ T9] usb 3-1: config 5 has an invalid interface number: 7 but max is 2 [ 456.463062][ T9] usb 3-1: config 5 has an invalid interface number: 171 but max is 2 [ 456.471284][ T9] usb 3-1: config 5 has an invalid interface number: 203 but max is 2 [ 456.481724][ T9] usb 3-1: config 5 has 4 interfaces, different from the descriptor's value: 3 [ 456.490929][ T9] usb 3-1: config 5 has no interface number 0 [ 456.497260][ T9] usb 3-1: config 5 has no interface number 1 [ 456.503531][ T9] usb 3-1: config 5 has no interface number 2 [ 456.513600][ T9] usb 3-1: config 5 has no interface number 3 [ 456.519749][ T9] usb 3-1: config 5 interface 59 altsetting 8 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 456.530785][ T9] usb 3-1: config 5 interface 59 altsetting 8 endpoint 0xD has an invalid bInterval 129, changing to 11 [ 456.542115][ T9] usb 3-1: config 5 interface 59 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 456.710800][T10283] netlink: 'syz.0.1154': attribute type 1 has an invalid length. [ 456.719233][T10283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1154'. [ 456.920594][ T9] usb 3-1: config 5 interface 7 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 456.944367][ T9] usb 3-1: config 5 interface 7 altsetting 1 bulk endpoint 0x8 has invalid maxpacket 24 [ 457.020951][ T9] usb 3-1: config 5 interface 7 altsetting 1 has a duplicate endpoint with address 0x8, skipping [ 457.042700][ T9] usb 3-1: config 5 interface 171 altsetting 220 has an invalid descriptor for endpoint zero, skipping [ 457.083466][ T9] usb 3-1: config 5 interface 171 altsetting 220 has an invalid descriptor for endpoint zero, skipping [ 457.126427][ T9] usb 3-1: config 5 interface 171 altsetting 220 has a duplicate endpoint with address 0x4, skipping [ 457.226964][ T9] usb 3-1: config 5 interface 171 altsetting 220 has an endpoint descriptor with address 0xCD, changing to 0x8D [ 457.318166][ T9] usb 3-1: config 5 interface 171 altsetting 220 endpoint 0x8D has an invalid bInterval 149, changing to 11 [ 457.369705][ T9] usb 3-1: config 5 interface 171 altsetting 220 endpoint 0x8D has invalid maxpacket 17079, setting to 1024 [ 457.421651][ T9] usb 3-1: config 5 interface 171 altsetting 220 endpoint 0x2 has invalid maxpacket 18564, setting to 64 [ 457.530707][ T9] usb 3-1: config 5 interface 171 altsetting 220 has a duplicate endpoint with address 0xC, skipping [ 457.607223][ T9] usb 3-1: config 5 interface 171 altsetting 220 has a duplicate endpoint with address 0x4, skipping [ 457.620748][ T9] usb 3-1: config 5 interface 171 altsetting 220 has an endpoint descriptor with address 0x93, changing to 0x83 [ 457.637757][ T9] usb 3-1: config 5 interface 171 altsetting 220 has a duplicate endpoint with address 0x83, skipping [ 457.693029][ T9] usb 3-1: config 5 interface 171 altsetting 220 has a duplicate endpoint with address 0x7, skipping [ 457.737321][ T9] usb 3-1: config 5 interface 171 altsetting 220 has 13 endpoint descriptors, different from the interface descriptor's value: 11 [ 457.758479][ T9] usb 3-1: too many endpoints for config 5 interface 203 altsetting 55: 180, using maximum allowed: 30 [ 457.769862][ T9] usb 3-1: config 5 interface 203 altsetting 55 has 0 endpoint descriptors, different from the interface descriptor's value: 180 [ 457.808036][T10305] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 457.820144][ T30] audit: type=1400 audit(1780692967.722:986): avc: denied { mount } for pid=10304 comm="syz.5.1158" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 457.854853][ T9] usb 3-1: config 5 interface 59 has no altsetting 0 [ 457.882163][ T9] usb 3-1: config 5 interface 7 has no altsetting 0 [ 457.896994][T10305] netlink: 'syz.5.1158': attribute type 29 has an invalid length. [ 457.909355][ T9] usb 3-1: config 5 interface 171 has no altsetting 0 [ 457.920732][ T30] audit: type=1400 audit(1780692967.732:987): avc: denied { mounton } for pid=10304 comm="syz.5.1158" path="/8/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 457.947523][ T9] usb 3-1: config 5 interface 203 has no altsetting 0 [ 457.956746][ T9] usb 3-1: string descriptor 0 read error: -71 [ 457.984542][ T30] audit: type=1400 audit(1780692967.902:988): avc: denied { write } for pid=10286 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 458.010261][T10305] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1158'. [ 458.019832][ T9] usb 3-1: New USB device found, idVendor=04bf, idProduct=030a, bcdDevice=f6.3a [ 458.044069][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.053096][ T9] usb 3-1: can't set config #5, error -71 [ 458.057129][ T9] usb 3-1: USB disconnect, device number 53 [ 458.089690][ T30] audit: type=1400 audit(1780692968.022:989): avc: denied { unmount } for pid=9788 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 458.903263][ T10] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 458.905400][ T30] audit: type=1400 audit(1780692968.842:990): avc: denied { write } for pid=10322 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 459.052489][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 459.054269][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 459.054299][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 459.068032][ T10] usb 1-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=82.8f [ 459.068063][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.068083][ T10] usb 1-1: Product: syz [ 459.068097][ T10] usb 1-1: Manufacturer: syz [ 459.068112][ T10] usb 1-1: SerialNumber: syz [ 459.070282][ T10] usb 1-1: config 0 descriptor?? [ 459.098830][ T10] kobil_sct 1-1:0.0: KOBIL USB smart card terminal converter detected [ 459.116066][ T10] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 459.182096][ T5829] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 459.332265][ T5829] usb 2-1: Using ep0 maxpacket: 32 [ 459.333912][ T5829] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 459.333937][ T5829] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 459.333955][ T5829] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 459.333974][ T5829] usb 2-1: config 1 has no interface number 0 [ 459.334005][ T5829] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 459.334028][ T5829] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 459.334061][ T5829] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 459.334081][ T5829] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.363839][ T5829] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 459.435901][T10217] syz.3.1131 (10217): drop_caches: 1 [ 459.629131][ T5829] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 459.685876][T10351] netlink: 'syz.5.1166': attribute type 1 has an invalid length. [ 459.685897][T10351] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1166'. [ 459.702572][ T30] audit: type=1400 audit(1780692969.642:991): avc: denied { create } for pid=10349 comm="syz.3.1167" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 459.705444][ T30] audit: type=1400 audit(1780692969.642:992): avc: denied { map } for pid=10349 comm="syz.3.1167" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=29550 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 459.706437][ T30] audit: type=1400 audit(1780692969.642:993): avc: denied { read write } for pid=10349 comm="syz.3.1167" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=29550 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 460.150188][ T5616] usb 2-1: USB disconnect, device number 50 [ 460.178054][ T5616] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 460.911127][ T30] audit: type=1400 audit(1780692970.532:994): avc: denied { write } for pid=10335 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 462.946813][ T30] audit: type=1400 audit(1780692972.882:995): avc: denied { write } for pid=10367 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 463.825265][T10381] futex_wake_op: syz.2.1173 tries to shift op by 36; fix this program [ 464.222061][ T9] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 464.522052][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 464.523905][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 464.524785][ T9] usb 4-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 8 [ 464.524812][ T9] usb 4-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 1023 [ 464.524836][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 464.530473][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 464.530499][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.530518][ T9] usb 4-1: Product: 嬅䨊螦알뗲꤭썢儵鉆瑩＃栲근竧䪳㍔윭ᠤ镌㧳蕜祗駫ꁜ䐜뵱⧶욟셌桉Ŧ誢﫭싚뜗퇑ⷨᬃ䔇諎㌮﮹릻릋韃₀澗綇氡븷࠙뙔믻䁦對遐䗌栞❏纵₟㡣醄崄敼ᐺ荮괓耋ྈ䋗̡빯섳퉨茦៸㎅𢲄憾檪鍿翙篧蒪叁쟪툌䗾ṡ㫑设馞賕渒㖋ʨ꺶ꏜⒿ娂譭 [ 464.538438][T10383] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 464.538549][T10383] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 465.583997][ T9] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 50 if 0 alt 5 proto 2 vid 0x0525 pid 0xA4A8 [ 465.592572][ T9] usb 4-1: USB disconnect, device number 50 [ 465.604787][ T9] usblp0: removed [ 465.895832][ T5733] usb 1-1: USB disconnect, device number 43 [ 465.903734][ T5733] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 465.930175][ T5733] kobil_sct 1-1:0.0: device disconnected [ 465.979005][ T30] audit: type=1400 audit(1780692975.912:996): avc: denied { write } for pid=10388 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 466.090790][ T30] audit: type=1400 audit(1780692976.022:997): avc: denied { write } for pid=10417 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 466.404210][ T9] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 466.425975][ T30] audit: type=1400 audit(1780692976.362:998): avc: denied { write } for pid=10429 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 466.473563][ T5733] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 466.497026][ T30] audit: type=1400 audit(1780692976.432:999): avc: denied { write } for pid=10442 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 466.552090][ T5694] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 466.584097][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 466.592664][ T9] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 466.601366][ T9] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 466.610010][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 466.619115][ T9] usb 4-1: config 1 has no interface number 0 [ 466.625800][ T9] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 466.636822][ T9] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 466.649833][ T9] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 466.659022][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.669604][ T5733] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 466.680132][ T5733] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.690872][ T9] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 466.697233][ T5733] usb 1-1: Product: syz [ 466.701544][ T5733] usb 1-1: Manufacturer: syz [ 466.706287][ T5733] usb 1-1: SerialNumber: syz [ 466.715434][ T5733] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 466.725567][ T5694] usb 6-1: Using ep0 maxpacket: 16 [ 466.734281][ T5694] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 466.749374][ T5694] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 466.765118][ T5694] usb 6-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=82.8f [ 466.776960][ T5694] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.785238][ T5694] usb 6-1: Product: syz [ 466.789456][ T5694] usb 6-1: Manufacturer: syz [ 466.794224][ T5694] usb 6-1: SerialNumber: syz [ 466.803242][ T5694] usb 6-1: config 0 descriptor?? [ 466.810632][ T10] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 466.823150][ T5694] kobil_sct 6-1:0.0: KOBIL USB smart card terminal converter detected [ 466.833549][ T5694] usb 6-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 466.892691][T10424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.903425][T10424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.915099][ T9] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 466.985267][ T30] audit: type=1400 audit(1780692976.922:1000): avc: denied { mounton } for pid=10445 comm="syz.1.1183" path="/245/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 468.049340][ T5616] usb 4-1: USB disconnect, device number 51 [ 468.387129][ T5616] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 468.398260][ T30] audit: type=1400 audit(1780692978.332:1001): avc: denied { ioctl } for pid=10414 comm="syz.0.1179" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 468.424576][ T9] usb 6-1: USB disconnect, device number 3 [ 468.432700][ T10] usb 1-1: Service connection timeout for: 256 [ 468.508158][ T10] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 468.521972][ T9] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 468.539264][ T9] kobil_sct 6-1:0.0: device disconnected [ 468.559344][ T10] ath9k_htc: Failed to initialize the device [ 468.571730][ T10] usb 1-1: ath9k_htc: USB layer deinitialized [ 468.812088][ T5741] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 468.975964][ T5741] usb 2-1: Using ep0 maxpacket: 16 [ 468.979308][ T5741] usb 2-1: config 0 has an invalid descriptor of length 212, skipping remainder of the config [ 469.002750][ T5741] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 469.015383][ T5741] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 469.032532][ T5741] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 469.044484][ T5741] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 469.123124][ T5741] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 469.207907][ T5741] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 469.238663][ T5741] usb 2-1: Manufacturer: syz [ 469.286011][ T5741] usb 2-1: config 0 descriptor?? [ 469.330780][T10455] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1186'. [ 469.477373][ T9] usb 1-1: USB disconnect, device number 44 [ 471.763711][ T5741] rc_core: IR keymap rc-hauppauge not found [ 471.774030][ T5741] Registered IR keymap rc-empty [ 471.780328][ T5741] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 471.802153][ T5741] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 471.823053][ T5741] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 471.851431][ T5741] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input23 [ 471.875263][ T5741] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 471.902114][ T5741] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 471.942728][ T5741] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 471.962363][ T5741] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 472.002184][ T5741] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 472.042943][ T5741] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 472.073622][ T5741] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 472.092195][ T5741] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 472.126402][ T5741] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 472.152142][ T5741] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 472.174641][ T5741] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 472.184062][ T5741] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 472.203377][ T5741] usb 2-1: USB disconnect, device number 51 [ 472.302080][ T10] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 472.452404][T10483] netlink: 'syz.0.1189': attribute type 1 has an invalid length. [ 472.460338][T10483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1189'. [ 472.484164][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 472.495112][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 472.507344][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 472.523014][T10486] FAULT_INJECTION: forcing a failure. [ 472.523014][T10486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 472.536545][T10486] CPU: 0 UID: 0 PID: 10486 Comm: syz.5.1190 Tainted: G L syzkaller #0 PREEMPT(full) [ 472.536569][T10486] Tainted: [L]=SOFTLOCKUP [ 472.536575][T10486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 472.536584][T10486] Call Trace: [ 472.536589][T10486] [ 472.536595][T10486] dump_stack_lvl+0x100/0x190 [ 472.536619][T10486] should_fail_ex.cold+0x5/0xa [ 472.536645][T10486] _copy_from_user+0x2e/0xd0 [ 472.536666][T10486] copy_msghdr_from_user+0x9f/0x4f0 [ 472.536685][T10486] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 472.536705][T10486] ___sys_sendmsg+0x106/0x1e0 [ 472.536719][T10486] ? __pfx____sys_sendmsg+0x10/0x10 [ 472.536749][T10486] __sys_sendmsg+0x170/0x220 [ 472.536766][T10486] ? __pfx___sys_sendmsg+0x10/0x10 [ 472.536789][T10486] ? rcu_is_watching+0x12/0xc0 [ 472.536808][T10486] do_syscall_64+0x115/0x870 [ 472.536822][T10486] ? clear_bhb_loop+0x40/0x90 [ 472.536835][T10486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.536852][T10486] RIP: 0033:0x7fdaff19ce59 [ 472.536862][T10486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 472.536873][T10486] RSP: 002b:00007fdafd3f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 472.536883][T10486] RAX: ffffffffffffffda RBX: 00007fdaff416090 RCX: 00007fdaff19ce59 [ 472.536890][T10486] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 472.536896][T10486] RBP: 00007fdafd3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 472.536902][T10486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 472.536908][T10486] R13: 00007fdaff416128 R14: 00007fdaff416090 R15: 00007ffe8846c6a8 [ 472.536922][T10486] [ 472.539792][ T10] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 472.750079][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.758450][ T10] usb 4-1: Product: syz [ 472.763342][ T10] usb 4-1: Manufacturer: syz [ 472.768574][ T10] usb 4-1: SerialNumber: syz [ 472.784324][ T10] usb 4-1: config 0 descriptor?? [ 472.790792][T10476] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 472.798916][T10476] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 472.823845][ T10] usb 4-1: ucan: probing device on interface #0 [ 473.332135][T10489] futex_wake_op: syz.5.1194 tries to shift op by 36; fix this program [ 474.083715][ T5628] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 474.242097][ T5694] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 474.290482][T10499] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1198'. [ 474.315603][ T10] ucan 4-1:0.0 can0: registered device [ 474.412661][ T5694] usb 3-1: Using ep0 maxpacket: 32 [ 474.421816][ T5694] usb 3-1: unable to get BOS descriptor or descriptor too short [ 474.435238][ T5694] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 474.444026][ T5694] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 474.452701][ T5694] usb 3-1: config 14 has no interface number 0 [ 474.460025][ T5694] usb 3-1: config 14 has no interface number 1 [ 474.470428][ T5694] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 474.481900][ T5694] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 474.494144][ T5694] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 474.505956][ T5694] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 474.518617][ T10] ucan 4-1:0.0 can0: firmware string: v [ 474.534903][ T5694] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 474.546721][ T5694] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 474.560267][ T5694] usb 3-1: config 14 interface 57 has no altsetting 0 [ 474.567316][ T5694] usb 3-1: config 14 interface 228 has no altsetting 0 [ 474.583875][ T5694] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 474.593165][ T5694] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.601560][ T5694] usb 3-1: Product: ⫅寏혝鱟燢杳䤼㙇ꧏ팽턨㷧䲙湙鬚턦㉑顳괈싊︕ڇ䵲ᇗ䣣￘ૺ꡺藑蚹ڑ釞峥倃媾惜ﾗ᫘郙푡⸁棨ၰ놯ꫝⲌ覡椓㪈郐矧䇺꣝귫㔤⎫嶮≷ [ 474.630149][ T5694] usb 3-1: Manufacturer: Ղ妜찼켤誯촋ᩨ☊ﶼ꣧딍荞㖝带션뜀ㅻ鰵䇏ꔞイ嶺ὼ⺒Ό뤻漕㻟薬ᓆ鳻퐭奵䆦䯳⃵磰듕횰슶㷠㵊휧嫋䜉ౙ㾤ʽᶮ钟쒬粷ᾕ狚䖺끑뎐脤䀮 [ 474.652898][ T5694] usb 3-1: SerialNumber: 杽脥ⵌ⯚ὕ쓽䬥핯ꕎ孍ௗ䁮劒椡ඏꫩ␡ꀡ쵽ឭ樖煲쨐Ǻ떗᫿㬷䝤䓳쳘缟⪖౮྄蕧쒒ꎻ枋鞫곚도䳅욾뵭厕ỜꞾધ訚訞⌫江훃䅓꿝긴빂態ꛅ勔탷턌࠰⫝̸ꃡ⛱ꭠꦯ礐꽎ُ옻尖買珜쪞䌼㗍曣 [ 474.740932][ T5616] usb 4-1: USB disconnect, device number 52 [ 476.058480][ T5694] legousbtower 3-1:14.57: interrupt endpoints not found [ 476.259010][T10493] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1195'. [ 477.823345][ T30] audit: type=1400 audit(1780692987.752:1002): avc: denied { append } for pid=10530 comm="syz.0.1204" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 477.866706][ T5694] legousbtower 3-1:14.228: get version request failed: -71 [ 477.905410][ T5694] legousbtower 3-1:14.228: probe with driver legousbtower failed with error -71 [ 477.965871][ T5694] usb 3-1: USB disconnect, device number 54 [ 477.966771][ T30] audit: type=1400 audit(1780692987.902:1003): avc: denied { write } for pid=10508 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 478.008809][T10536] 9p: Bad value for 'rfdno' [ 478.432158][T10534] futex_wake_op: syz.3.1206 tries to shift op by 36; fix this program [ 478.640279][ T30] audit: type=1400 audit(1780692987.942:1004): avc: denied { map } for pid=10530 comm="syz.0.1204" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 479.943571][ T30] audit: type=1400 audit(1780692989.882:1005): avc: denied { write } for pid=10542 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 481.108475][ T30] audit: type=1400 audit(1780692991.042:1006): avc: denied { write } for pid=10547 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 481.370243][T10569] xt_ecn: cannot match TCP bits for non-tcp packets [ 482.634987][ T5741] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 482.665860][ T30] audit: type=1400 audit(1780692992.592:1007): avc: denied { write } for pid=10573 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 482.696106][T10578] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1207'. [ 482.742212][T10582] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1209'. [ 482.863597][ T5741] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 482.895893][ T5741] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 482.994889][ T5741] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 483.026142][ T5741] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.068206][ T5741] usb 6-1: Product: syz [ 483.107243][ T5741] usb 6-1: Manufacturer: syz [ 483.129656][ T5741] usb 6-1: SerialNumber: syz [ 483.246603][ T5741] usb 6-1: config 0 descriptor?? [ 483.268045][T10572] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 483.292180][T10572] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 483.525898][T10572] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 483.533584][T10572] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 483.622106][ T5694] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 483.672114][ T5733] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 483.681302][ T5829] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 483.784626][ T5694] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 483.792723][ T5694] usb 2-1: config 0 has no interface number 0 [ 483.800856][ T5694] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 483.810048][ T5694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.818210][ T5694] usb 2-1: Product: syz [ 483.822484][ T5694] usb 2-1: Manufacturer: syz [ 483.827096][ T5694] usb 2-1: SerialNumber: syz [ 483.832268][ T5829] usb 3-1: Using ep0 maxpacket: 32 [ 483.838371][ T5694] usb 2-1: config 0 descriptor?? [ 483.839698][ T5829] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 483.843421][ T5733] usb 4-1: Using ep0 maxpacket: 16 [ 483.851939][ T5829] usb 3-1: config 0 has no interface number 0 [ 483.861418][ T5733] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 483.873502][ T5733] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 483.882631][ T5829] usb 3-1: config 0 interface 184 has no altsetting 0 [ 483.891246][ T5733] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.891909][ T5829] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 483.911398][ T5733] usb 4-1: config 0 descriptor?? [ 483.919402][ T5829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.934704][ T5829] usb 3-1: Product: syz [ 483.940894][ T5829] usb 3-1: Manufacturer: syz [ 483.951142][ T5829] usb 3-1: SerialNumber: syz [ 483.961014][ T5829] usb 3-1: config 0 descriptor?? [ 484.062524][ T5694] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 484.078278][ T5694] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 484.088735][ T5694] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 484.096788][ T5694] usb 2-1: media controller created [ 484.109481][ T5694] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 484.587463][T10572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.603707][T10572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.617080][ T5694] usb 2-1: USB disconnect, device number 52 [ 484.685545][ T5628] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 485.260414][ T30] audit: type=1400 audit(1780692995.162:1008): avc: denied { call } for pid=10596 comm="syz.2.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 486.497334][ T5694] usb 4-1: USB disconnect, device number 53 [ 486.561276][ T5829] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 486.625154][T10619] FAULT_INJECTION: forcing a failure. [ 486.625154][T10619] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 486.639593][T10619] CPU: 0 UID: 0 PID: 10619 Comm: syz.1.1223 Tainted: G L syzkaller #0 PREEMPT(full) [ 486.639620][T10619] Tainted: [L]=SOFTLOCKUP [ 486.639626][T10619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 486.639636][T10619] Call Trace: [ 486.639642][T10619] [ 486.639648][T10619] dump_stack_lvl+0x100/0x190 [ 486.639672][T10619] should_fail_ex.cold+0x5/0xa [ 486.639692][T10619] ? prepare_alloc_pages+0x16d/0x5f0 [ 486.639716][T10619] should_fail_alloc_page+0xeb/0x140 [ 486.639737][T10619] prepare_alloc_pages+0x1f0/0x5f0 [ 486.639762][T10619] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 486.639802][T10619] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 486.639832][T10619] ? __lock_acquire+0x4a5/0x2630 [ 486.639853][T10619] ? __lock_acquire+0x4a5/0x2630 [ 486.639872][T10619] ? __css_rstat_updated+0x1ce/0x5a0 [ 486.639900][T10619] ? lock_acquire+0x1b1/0x370 [ 486.639920][T10619] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 486.639941][T10619] ? policy_nodemask+0xed/0x4f0 [ 486.639963][T10619] alloc_pages_mpol+0x1fb/0x540 [ 486.639984][T10619] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 486.640006][T10619] ? __lock_acquire+0x4a5/0x2630 [ 486.640028][T10619] folio_alloc_mpol_noprof+0x36/0x260 [ 486.640053][T10619] vma_alloc_folio_noprof+0xed/0x1d0 [ 486.640075][T10619] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 486.640106][T10619] do_anonymous_page+0xb46/0x2050 [ 486.640132][T10619] ? rcu_read_unlock+0x2d/0xb0 [ 486.640163][T10619] __handle_mm_fault+0x1d2c/0x2a00 [ 486.640190][T10619] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 486.640217][T10619] ? __pfx___handle_mm_fault+0x10/0x10 [ 486.640243][T10619] ? pte_offset_map_lock+0x174/0x320 [ 486.640261][T10619] ? find_held_lock+0x2b/0x80 [ 486.640289][T10619] ? follow_page_pte+0x4d0/0x13f0 [ 486.640313][T10619] handle_mm_fault+0x37b/0xa30 [ 486.640342][T10619] __get_user_pages+0x1178/0x32a0 [ 486.640369][T10619] ? down_read_killable+0x307/0x4b0 [ 486.640402][T10619] ? __pfx___get_user_pages+0x10/0x10 [ 486.640430][T10619] __gup_longterm_locked+0x87d/0x16f0 [ 486.640458][T10619] ? __pfx___gup_longterm_locked+0x10/0x10 [ 486.640482][T10619] ? find_held_lock+0x2b/0x80 [ 486.640497][T10619] ? gup_fast_fallback+0x7e8/0x2790 [ 486.640516][T10619] ? sanity_check_pinned_pages+0x4f2/0x8b0 [ 486.640535][T10619] ? rcu_is_watching+0x12/0xc0 [ 486.640563][T10619] gup_fast_fallback+0x16dc/0x2790 [ 486.640598][T10619] ? __pfx_gup_fast_fallback+0x10/0x10 [ 486.640618][T10619] ? bpf_ksym_find+0x128/0x1c0 [ 486.640643][T10619] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 486.640662][T10619] ? is_bpf_text_address+0x94/0x1a0 [ 486.640684][T10619] ? kernel_text_address+0x8d/0x100 [ 486.640710][T10619] pin_user_pages_fast+0xa7/0xf0 [ 486.640731][T10619] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 486.640751][T10619] ? __lock_acquire+0x4a5/0x2630 [ 486.640778][T10619] iov_iter_extract_pages+0xa0d/0x1ef0 [ 486.640805][T10619] ? register_lock_class+0x40/0x560 [ 486.640826][T10619] ? find_held_lock+0x2b/0x80 [ 486.640841][T10619] ? ima_match_policy+0x8b8/0x2340 [ 486.640858][T10619] ? ima_match_policy+0x8b8/0x2340 [ 486.640874][T10619] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 486.640897][T10619] ? __lock_acquire+0x4a5/0x2630 [ 486.640922][T10619] iov_iter_extract_bvecs+0x10b/0xa60 [ 486.640945][T10619] ? find_held_lock+0x2b/0x80 [ 486.640958][T10619] ? bio_associate_blkg_from_css+0x394/0x13f0 [ 486.640980][T10619] ? bio_associate_blkg_from_css+0x394/0x13f0 [ 486.641001][T10619] ? __pfx_iov_iter_extract_bvecs+0x10/0x10 [ 486.641026][T10619] ? find_held_lock+0x2b/0x80 [ 486.641044][T10619] bio_iov_iter_get_pages+0x26f/0x670 [ 486.641071][T10619] __blkdev_direct_IO_simple+0x3a7/0x890 [ 486.641099][T10619] ? __pfx___blkdev_direct_IO_simple+0x10/0x10 [ 486.641141][T10619] ? rcu_is_watching+0x12/0xc0 [ 486.641165][T10619] ? ktime_get_coarse_real_ts64_mg+0x235/0x300 [ 486.641191][T10619] blkdev_direct_IO+0xc76/0x1fb0 [ 486.641215][T10619] ? current_time+0x29f/0x3b0 [ 486.641241][T10619] ? __pfx_current_time+0x10/0x10 [ 486.641270][T10619] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 486.641294][T10619] ? atime_needs_update+0x8b/0x6b0 [ 486.641315][T10619] ? touch_atime+0xa5/0x7a0 [ 486.641332][T10619] ? __pfx__kstrtoull+0x10/0x10 [ 486.641360][T10619] blkdev_read_iter+0x225/0x4f0 [ 486.641389][T10619] do_iter_readv_writev+0x60d/0x920 [ 486.641415][T10619] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 486.641431][T10619] ? avc_policy_seqno+0x9/0x20 [ 486.641449][T10619] ? selinux_file_permission+0x8f/0x6d0 [ 486.641479][T10619] ? bpf_lsm_file_permission+0x9/0x10 [ 486.641505][T10619] ? security_file_permission+0x76/0x210 [ 486.641533][T10619] ? rw_verify_area+0xce/0x6d0 [ 486.641552][T10619] vfs_readv+0x4d3/0x8d0 [ 486.641575][T10619] ? __pfx_vfs_readv+0x10/0x10 [ 486.641592][T10619] ? find_held_lock+0x2b/0x80 [ 486.641625][T10619] ? __fget_files+0x21f/0x3d0 [ 486.641653][T10619] ? do_preadv+0x1ac/0x270 [ 486.641669][T10619] do_preadv+0x1ac/0x270 [ 486.641688][T10619] ? __pfx_do_preadv+0x10/0x10 [ 486.641706][T10619] ? ksys_write+0x1ac/0x250 [ 486.641724][T10619] ? __pfx_ksys_write+0x10/0x10 [ 486.641747][T10619] __x64_sys_preadv2+0xef/0x160 [ 486.641771][T10619] do_syscall_64+0x115/0x870 [ 486.641792][T10619] ? clear_bhb_loop+0x40/0x90 [ 486.641814][T10619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.641832][T10619] RIP: 0033:0x7ff11ef9ce59 [ 486.641847][T10619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.641863][T10619] RSP: 002b:00007ff11fe09028 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 486.641881][T10619] RAX: ffffffffffffffda RBX: 00007ff11f215fa0 RCX: 00007ff11ef9ce59 [ 486.641892][T10619] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 486.641902][T10619] RBP: 00007ff11fe09090 R08: 0000000000000000 R09: 0000000000000008 [ 486.641912][T10619] R10: 0000000000003000 R11: 0000000000000246 R12: 0000000000000001 [ 486.641922][T10619] R13: 00007ff11f216038 R14: 00007ff11f215fa0 R15: 00007ffc4073cd98 [ 486.641947][T10619] [ 487.220025][ T5829] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 487.236457][ T5829] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 487.317786][T10628] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1226'. [ 487.351623][ T5741] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 487.360474][ T5829] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 487.439349][ T30] audit: type=1400 audit(1780692997.312:1009): avc: denied { ioctl } for pid=10620 comm="syz.0.1225" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=31312 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 487.568991][ T5829] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 487.603972][ T5741] dm9601 6-1:0.0 eth5: register 'dm9601' at usb-dummy_hcd.5-1, Davicom DM96xx USB 10/100 Ethernet, 22:0e:48:b5:7b:9b [ 487.623992][ T5829] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 487.901811][ T5829] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 487.911966][ T5741] usb 6-1: USB disconnect, device number 4 [ 487.951727][ T5741] dm9601 6-1:0.0 eth5: unregister 'dm9601' usb-dummy_hcd.5-1, Davicom DM96xx USB 10/100 Ethernet [ 488.017616][ T5829] usb 3-1: USB disconnect, device number 55 [ 491.902992][ T30] audit: type=1400 audit(1780693001.842:1010): avc: denied { unmount } for pid=5620 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 493.000727][ T9] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 493.034275][T10684] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1239'. [ 493.184686][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 493.205103][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 493.225163][ T9] usb 2-1: config 0 has no interface number 0 [ 493.238301][ T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.723225][T10690] futex_wake_op: syz.0.1242 tries to shift op by 36; fix this program [ 494.203574][ T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 494.213396][ T9] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 494.222941][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.241572][ T9] usb 2-1: config 0 descriptor?? [ 494.959091][T10704] netlink: 'syz.5.1245': attribute type 1 has an invalid length. [ 494.970954][ T9] uclogic 0003:28BD:0071.000E: pen parameters not found [ 495.058310][T10704] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1245'. [ 495.178047][ T9] uclogic 0003:28BD:0071.000E: interface is invalid, ignoring [ 495.207519][ T9] usb 2-1: USB disconnect, device number 53 [ 496.458264][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 497.051874][T10731] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1252'. [ 497.282183][T10729] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1254'. [ 498.116496][ T9] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 499.220144][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 499.231112][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 499.268165][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 499.294549][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 499.346525][ T9] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 499.659665][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.734758][T10769] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 499.745333][ T9] usb 2-1: config 0 descriptor?? [ 499.812721][ T30] audit: type=1400 audit(1780693009.752:1011): avc: denied { append } for pid=10770 comm="syz.5.1264" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 499.838700][ T30] audit: type=1400 audit(1780693009.772:1012): avc: denied { execute } for pid=10770 comm="syz.5.1264" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 500.173739][ T9] holtek_kbd 0003:04D9:A055.000F: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.1-1/input0 [ 500.350304][T10785] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1268'. [ 500.405118][ T5694] usb 2-1: USB disconnect, device number 54 [ 501.590010][T10781] fido_id[10781]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 501.702332][T10798] netlink: 'syz.1.1271': attribute type 1 has an invalid length. [ 501.710156][T10798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1271'. [ 502.579125][ T804] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 503.550030][ T30] audit: type=1400 audit(1780693013.482:1013): avc: denied { bind } for pid=10810 comm="syz.2.1276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 503.602123][ T804] usb 2-1: Using ep0 maxpacket: 8 [ 503.624858][ T804] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 503.650184][ T804] usb 2-1: config 0 has no interface number 0 [ 503.673401][ T804] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 503.703606][ T804] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 503.725300][ T804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.743303][ T804] usb 2-1: config 0 descriptor?? [ 503.771844][ T804] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 503.968699][ T9] usb 2-1: USB disconnect, device number 55 [ 504.062083][ T5733] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 504.072922][ T804] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 504.232096][ T5733] usb 6-1: Using ep0 maxpacket: 8 [ 504.242296][ T804] usb 3-1: Using ep0 maxpacket: 8 [ 504.248950][ T5733] usb 6-1: unable to get BOS descriptor or descriptor too short [ 504.251934][ T804] usb 3-1: unable to get BOS descriptor or descriptor too short [ 504.267004][ T5733] usb 6-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 8 [ 504.274127][ T804] usb 3-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 8 [ 504.304476][ T5733] usb 6-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 1023 [ 504.304480][ T804] usb 3-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 1023 [ 504.304505][ T804] usb 3-1: config 1 interface 0 has no altsetting 0 [ 504.341547][ T5733] usb 6-1: config 1 interface 0 has no altsetting 0 [ 504.345113][ T804] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 504.359762][ T804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.370718][ T804] usb 3-1: Product: 嬅䨊螦알뗲꤭썢儵鉆瑩＃栲근竧䪳㍔윭ᠤ镌㧳蕜祗駫ꁜ䐜뵱⧶욟셌桉Ŧ誢﫭싚뜗퇑ⷨᬃ䔇諎㌮﮹릻릋韃₀澗綇氡븷࠙뙔믻䁦對遐䗌栞❏纵₟㡣醄崄敼ᐺ荮괓耋ྈ䋗̡빯섳퉨茦៸㎅𢲄憾檪鍿翙篧蒪叁쟪툌䗾ṡ㫑设馞賕渒㖋ʨ꺶ꏜⒿ娂譭 [ 504.409025][ T5733] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 504.418290][ T5733] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.426487][ T5733] usb 6-1: Product: 嬅䨊螦알뗲꤭썢儵鉆瑩＃栲근竧䪳㍔윭ᠤ镌㧳蕜祗駫ꁜ䐜뵱⧶욟셌桉Ŧ誢﫭싚뜗퇑ⷨᬃ䔇諎㌮﮹릻릋韃₀澗綇氡븷࠙뙔믻䁦對遐䗌栞❏纵₟㡣醄崄敼ᐺ荮괓耋ྈ䋗̡빯섳퉨茦៸㎅𢲄憾檪鍿翙篧蒪叁쟪툌䗾ṡ㫑设馞賕渒㖋ʨ꺶ꏜⒿ娂譭 [ 504.472928][T10815] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 504.512150][T10815] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 504.547208][T10813] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 504.555367][T10813] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 504.815847][ T804] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 56 if 0 alt 5 proto 2 vid 0x0525 pid 0xA4A8 [ 504.834818][ T804] usb 3-1: USB disconnect, device number 56 [ 504.858824][ T5733] usblp 6-1:1.0: usblp1: USB Bidirectional printer dev 5 if 0 alt 5 proto 2 vid 0x0525 pid 0xA4A8 [ 504.859450][ T804] usblp0: removed [ 505.829823][ T5733] usb 6-1: USB disconnect, device number 5 [ 506.057303][ T5694] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 506.085585][ T5733] usblp1: removed [ 506.626049][ T5694] usb 2-1: Using ep0 maxpacket: 16 [ 506.660352][T10834] futex_wake_op: syz.3.1282 tries to shift op by 36; fix this program [ 506.679863][T10834] kvm: pic: non byte write [ 506.688417][T10834] kvm: pic: non byte write [ 506.693724][T10834] kvm: pic: non byte write [ 506.748729][ T5694] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 506.937854][ T5694] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 506.948699][ T5694] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.057609][ T5694] usb 2-1: config 0 descriptor?? [ 507.058700][T10838] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1284'. [ 508.152141][ T804] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 508.214428][T10854] IPVS: dh: FWM 3 0x00000003 - no destination available [ 508.593827][ T804] usb 6-1: device descriptor read/64, error -71 [ 508.662192][ T5694] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 508.792061][ T5694] usb 3-1: device descriptor read/64, error -71 [ 508.866826][ T804] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 509.024297][ T5733] usb 2-1: USB disconnect, device number 56 [ 509.033243][ T804] usb 6-1: device descriptor read/64, error -71 [ 509.183551][ T804] usb usb6-port1: attempt power cycle [ 509.425644][ T5694] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 509.612283][ T804] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 509.733682][ T804] usb 6-1: device descriptor read/8, error -71 [ 510.076098][ T804] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 510.309708][ T804] usb 6-1: device descriptor read/8, error -71 [ 510.582176][ T804] usb usb6-port1: unable to enumerate USB device [ 511.025310][ T5694] usb 3-1: device descriptor read/64, error -71 [ 511.194507][ T5694] usb usb3-port1: attempt power cycle [ 511.812084][ T5694] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 512.300361][ T5694] usb 3-1: device not accepting address 59, error -71 [ 512.326079][T10887] futex_wake_op: syz.1.1294 tries to shift op by 36; fix this program [ 512.908507][T10890] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1298'. [ 513.305439][ T5741] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 513.429545][T10901] netlink: 'syz.2.1300': attribute type 2 has an invalid length. [ 513.438167][T10901] netlink: 'syz.2.1300': attribute type 1 has an invalid length. [ 513.446634][T10901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1300'. [ 513.482092][ T5741] usb 1-1: Using ep0 maxpacket: 8 [ 513.761828][ T5741] usb 1-1: unable to get BOS descriptor or descriptor too short [ 513.782453][ T5741] usb 1-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 8 [ 513.792264][ T5741] usb 1-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 1023 [ 513.824008][ T5741] usb 1-1: config 1 interface 0 has no altsetting 0 [ 513.847533][ T5741] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 513.860015][ T5741] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.874641][ T5741] usb 1-1: Product: 嬅䨊螦알뗲꤭썢儵鉆瑩＃栲근竧䪳㍔윭ᠤ镌㧳蕜祗駫ꁜ䐜뵱⧶욟셌桉Ŧ誢﫭싚뜗퇑ⷨᬃ䔇諎㌮﮹릻릋韃₀澗綇氡븷࠙뙔믻䁦對遐䗌栞❏纵₟㡣醄崄敼ᐺ荮괓耋ྈ䋗̡빯섳퉨茦៸㎅𢲄憾檪鍿翙篧蒪叁쟪툌䗾ṡ㫑设馞賕渒㖋ʨ꺶ꏜⒿ娂譭 [ 513.991121][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 514.034659][T10892] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 514.045949][T10892] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 514.309918][ T5741] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 45 if 0 alt 5 proto 2 vid 0x0525 pid 0xA4A8 [ 514.996366][ T5741] usb 1-1: USB disconnect, device number 45 [ 515.016750][ T5741] usblp0: removed [ 515.042071][ T5829] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 515.172187][ T5829] usb 3-1: device descriptor read/64, error -71 [ 515.412073][ T5829] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 515.437203][T10925] syzkaller0: entered promiscuous mode [ 515.457888][T10925] syzkaller0: entered allmulticast mode [ 516.456586][ T5829] usb 3-1: device descriptor read/64, error -71 [ 516.594939][ T5829] usb usb3-port1: attempt power cycle [ 516.851464][T10937] Cannot find add_set index 65532 as target [ 516.938136][T10937] syzkaller0: entered promiscuous mode [ 516.943752][ T5829] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 516.958681][T10937] syzkaller0: entered allmulticast mode [ 516.976732][T10937] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 516.984844][ T5829] usb 3-1: device descriptor read/8, error -71 [ 517.006075][ T30] audit: type=1400 audit(1780693026.942:1014): avc: denied { write } for pid=10938 comm="syz.5.1310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 517.083044][T10940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 517.149964][T10942] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1311'. [ 517.222136][ T5829] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 517.254129][ T5829] usb 3-1: device descriptor read/8, error -71 [ 517.318859][T10947] syzkaller0: entered promiscuous mode [ 517.330234][T10947] syzkaller0: entered allmulticast mode [ 517.362228][T10607] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 517.376321][ T5829] usb usb3-port1: unable to enumerate USB device [ 517.879583][T10958] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1316'. [ 518.474667][T10607] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 518.488250][T10607] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 518.497648][T10607] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 518.506858][T10607] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.522741][T10607] usb 6-1: config 0 descriptor?? [ 518.539392][T10607] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 518.548951][T10607] dvb-usb: bulk message failed: -22 (3/0) [ 518.563994][T10607] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 518.589365][T10607] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 518.603610][T10607] usb 6-1: media controller created [ 518.604780][ T5694] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 518.622188][T10607] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 518.659870][T10607] dvb-usb: bulk message failed: -22 (6/0) [ 518.682943][T10607] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 518.702937][T10607] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input24 [ 518.722198][ T5733] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 518.747512][T10607] dvb-usb: schedule remote query interval to 150 msecs. [ 518.766726][T10607] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 518.784967][ T5694] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 518.815840][ T5694] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 518.856554][ T5694] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 518.874827][ T5694] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.897115][ T5733] usb 1-1: Using ep0 maxpacket: 8 [ 518.907139][ T5694] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 518.921794][T10939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.934240][ T5694] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 518.934555][T10607] dvb-usb: bulk message failed: -22 (1/0) [ 518.957735][ T5694] usb 2-1: Product: syz [ 518.962324][ T5733] usb 1-1: unable to get BOS descriptor or descriptor too short [ 518.962997][T10939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.970137][ T5694] usb 2-1: Manufacturer: syz [ 518.991829][ T5733] usb 1-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 8 [ 519.004447][ T5733] usb 1-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 1023 [ 519.007462][T10607] dvb-usb: error while querying for an remote control event. [ 519.021165][ T5733] usb 1-1: config 1 interface 0 has no altsetting 0 [ 519.037552][ T5694] cdc_wdm 2-1:1.0: skipping garbage [ 519.044517][ T5694] cdc_wdm 2-1:1.0: skipping garbage [ 519.054137][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 519.083299][ T5733] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 519.099863][ T5694] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 519.112555][ T5713] usb 6-1: USB disconnect, device number 10 [ 519.118809][ T5733] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.130201][ T5694] cdc_wdm 2-1:1.0: Unknown control protocol [ 519.140161][ T5733] usb 1-1: Product: 嬅䨊螦알뗲꤭썢儵鉆瑩＃栲근竧䪳㍔윭ᠤ镌㧳蕜祗駫ꁜ䐜뵱⧶욟셌桉Ŧ誢﫭싚뜗퇑ⷨᬃ䔇諎㌮﮹릻릋韃₀澗綇氡븷࠙뙔믻䁦對遐䗌栞❏纵₟㡣醄崄敼ᐺ荮괓耋ྈ䋗̡빯섳퉨茦៸㎅𢲄憾檪鍿翙篧蒪叁쟪툌䗾ṡ㫑设馞賕渒㖋ʨ꺶ꏜⒿ娂譭 [ 519.186440][T10953] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 519.195700][T10953] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 519.226959][ T5713] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 519.322971][T10607] usb 2-1: USB disconnect, device number 57 [ 519.513981][ T5733] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 46 if 0 alt 5 proto 2 vid 0x0525 pid 0xA4A8 [ 519.863735][ T5733] usb 1-1: USB disconnect, device number 46 [ 519.887003][ T5733] usblp0: removed [ 520.092238][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 520.242960][T10973] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 520.260275][T10973] VFS: Can't find a romfs filesystem on dev nullb0. [ 520.260275][T10973] [ 520.556571][T10607] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 521.132562][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 521.220534][ T30] audit: type=1400 audit(1780693031.142:1015): avc: denied { append } for pid=10977 comm="syz.3.1320" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 521.244519][T10982] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1322'. [ 521.254651][T10983] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1321'. [ 521.421653][T10982] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1322'. [ 521.477586][T10982] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10982 comm=syz.5.1322 [ 521.478303][T10991] Cannot find add_set index 65532 as target [ 521.503223][T10966] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 521.522222][T10966] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 521.557145][T10993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1324'. [ 521.577438][T10966] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 521.587081][T10991] syzkaller0: entered promiscuous mode [ 521.603513][T10966] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 521.640018][T10991] syzkaller0: entered allmulticast mode [ 521.687890][T10966] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 521.722345][T10966] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 521.942011][ C0] ------------[ cut here ]------------ [ 521.947734][ C0] workqueue: cannot queue hci_cmd_timeout on wq hci2 [ 521.954389][ C0] WARNING: kernel/workqueue.c:2297 at __queue_work+0xcee/0x1270, CPU#0: kworker/0:2H/9673 [ 521.964259][ C0] Modules linked in: [ 521.968299][ C0] CPU: 0 UID: 0 PID: 9673 Comm: kworker/0:2H Tainted: G L syzkaller #0 PREEMPT(full) [ 521.979302][ C0] Tainted: [L]=SOFTLOCKUP [ 521.983609][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 521.993638][ C0] Workqueue: events_highpri snd_vmidi_output_work [ 522.000063][ C0] RIP: 0010:__queue_work+0xcf2/0x1270 [ 522.005416][ C0] Code: 00 00 00 fc ff df 49 8d 94 24 70 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 3d 05 00 00 48 8d 3d 72 0e 0b 0f 48 8b 75 18 <67> 48 0f b9 3a 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 [ 522.025005][ C0] RSP: 0018:ffffc90000007bd0 EFLAGS: 00010046 [ 522.031050][ C0] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff1100bbf914e [ 522.038999][ C0] RDX: ffff8880734d2970 RSI: ffffffff8a7eb4b0 RDI: ffffffff90da2880 [ 522.046950][ C0] RBP: ffff88805dfc8a58 R08: 0000000000000005 R09: 0000000000000000 [ 522.054901][ C0] R10: 0000000000000100 R11: 0000000000000000 R12: ffff8880734d2800 [ 522.062851][ C0] R13: 1ffff92000000f8d R14: ffffffff81cf1fa0 R15: 0000000000000001 [ 522.070802][ C0] FS: 0000000000000000(0000) GS:ffff888124387000(0000) knlGS:0000000000000000 [ 522.079712][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 522.086275][ C0] CR2: 0000200000003000 CR3: 0000000022b19000 CR4: 00000000003526f0 [ 522.094232][ C0] Call Trace: [ 522.097489][ C0] [ 522.100320][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 522.106111][ C0] call_timer_fn+0x19a/0x640 [ 522.110683][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 522.115775][ C0] ? __run_timers+0x573/0xaf0 [ 522.120432][ C0] ? __run_timers+0x573/0xaf0 [ 522.125092][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 522.130882][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 522.136670][ C0] __run_timers+0x583/0xaf0 [ 522.141159][ C0] ? __pfx___run_timers+0x10/0x10 [ 522.146170][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 522.151180][ C0] run_timer_base+0x114/0x190 [ 522.155838][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 522.161021][ C0] run_timer_softirq+0x1a/0x50 [ 522.165764][ C0] handle_softirqs+0x1ea/0xa00 [ 522.170516][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 522.175785][ C0] ? _raw_spin_unlock+0x28/0x50 [ 522.180629][ C0] ? __hrtimer_rearm_deferred+0x9b/0x740 [ 522.186248][ C0] __irq_exit_rcu+0x162/0x210 [ 522.190911][ C0] irq_exit_rcu+0x9/0x30 [ 522.195136][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 522.200752][ C0] [ 522.203661][ C0] [ 522.206572][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 522.212548][ C0] RIP: 0010:finish_task_switch.isra.0+0x2d3/0x1010 [ 522.219036][ C0] Code: 2f 0a 00 00 41 c7 87 e0 0d 00 00 00 00 00 00 e9 0f 04 00 00 49 8d 7f 48 e8 ea 1b b7 09 e8 35 9e 3b 00 fb 48 8d bb c8 16 00 00 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84 [ 522.238622][ C0] RSP: 0018:ffffc90003d2f8e0 EFLAGS: 00000206 [ 522.244669][ C0] RAX: 0000000000418581 RBX: ffff888033bc4a80 RCX: 0000000000000040 [ 522.252619][ C0] RDX: 0000000000000000 RSI: ffffffff8df0fbf2 RDI: ffff888033bc6148 [ 522.260568][ C0] RBP: ffffc90003d2f938 R08: 0000000000000001 R09: 0000000000000000 [ 522.268518][ C0] R10: 0000000000000001 R11: ffffffff81d553f2 R12: ffff88804993a540 [ 522.276468][ C0] R13: 0000000000000001 R14: ffffffff90d74ce4 R15: ffff8880b843b480 [ 522.284421][ C0] ? finish_task_switch.isra.0+0x152/0x1010 [ 522.290316][ C0] __schedule+0x129d/0x67a0 [ 522.294802][ C0] ? try_to_wake_up+0x5ec/0x1900 [ 522.299736][ C0] ? try_to_wake_up+0x5ec/0x1900 [ 522.304669][ C0] ? __pfx___schedule+0x10/0x10 [ 522.309502][ C0] ? __wake_up+0x3f/0x60 [ 522.313723][ C0] ? __wake_up+0x3f/0x60 [ 522.317946][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 522.323309][ C0] preempt_schedule_common+0x42/0xc0 [ 522.328577][ C0] preempt_schedule_thunk+0x16/0x30 [ 522.333764][ C0] _raw_spin_unlock_irqrestore+0x61/0x80 [ 522.339380][ C0] snd_rawmidi_transmit+0xfb/0x140 [ 522.344478][ C0] snd_vmidi_output_work+0x111/0x390 [ 522.349746][ C0] ? __pfx_snd_vmidi_output_work+0x10/0x10 [ 522.355545][ C0] ? rcu_is_watching+0x12/0xc0 [ 522.360298][ C0] process_one_work+0xa0e/0x1980 [ 522.365233][ C0] ? __pfx_process_one_work+0x10/0x10 [ 522.370592][ C0] ? __pfx_snd_vmidi_output_work+0x10/0x10 [ 522.376382][ C0] worker_thread+0x5ef/0xe50 [ 522.380971][ C0] ? __pfx_worker_thread+0x10/0x10 [ 522.386065][ C0] ? kthread+0x13a/0x450 [ 522.390289][ C0] ? __pfx_worker_thread+0x10/0x10 [ 522.395386][ C0] kthread+0x370/0x450 [ 522.399434][ C0] ? __pfx_kthread+0x10/0x10 [ 522.404007][ C0] ret_from_fork+0x72b/0xd50 [ 522.408582][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 522.413677][ C0] ? __switch_to+0x800/0x1100 [ 522.418340][ C0] ? __pfx_kthread+0x10/0x10 [ 522.422912][ C0] ret_from_fork_asm+0x1a/0x30 [ 522.427670][ C0] [ 522.430669][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 522.437929][ C0] CPU: 0 UID: 0 PID: 9673 Comm: kworker/0:2H Tainted: G L syzkaller #0 PREEMPT(full) [ 522.448929][ C0] Tainted: [L]=SOFTLOCKUP [ 522.453227][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 522.463277][ C0] Workqueue: events_highpri snd_vmidi_output_work [ 522.469676][ C0] Call Trace: [ 522.472933][ C0] [ 522.475757][ C0] dump_stack_lvl+0x100/0x190 [ 522.480416][ C0] vpanic+0x552/0x970 [ 522.484377][ C0] ? __pfx_vpanic+0x10/0x10 [ 522.488863][ C0] panic+0xd1/0xe0 [ 522.492564][ C0] ? __pfx_panic+0x10/0x10 [ 522.496964][ C0] ? check_panic_on_warn+0x1f/0x90 [ 522.502064][ C0] check_panic_on_warn.cold+0x19/0x34 [ 522.507416][ C0] ? __queue_work+0xcee/0x1270 [ 522.512161][ C0] __warn.cold+0x191/0x328 [ 522.516558][ C0] __report_bug+0x296/0x3d0 [ 522.521046][ C0] ? __queue_work+0xcee/0x1270 [ 522.525792][ C0] ? __pfx___report_bug+0x10/0x10 [ 522.530798][ C0] ? __lock_acquire+0x4a5/0x2630 [ 522.535719][ C0] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 522.540989][ C0] ? snd_seq_timer_get_cur_time+0x14f/0x2f0 [ 522.546861][ C0] ? look_up_lock_class+0x64/0x120 [ 522.551958][ C0] report_bug_entry+0xe1/0x290 [ 522.556708][ C0] ? __queue_work+0xcf2/0x1270 [ 522.561453][ C0] handle_bug+0x1cd/0x2a0 [ 522.565769][ C0] exc_invalid_op+0x17/0x50 [ 522.570257][ C0] asm_exc_invalid_op+0x1a/0x20 [ 522.575087][ C0] RIP: 0010:__queue_work+0xcf2/0x1270 [ 522.580441][ C0] Code: 00 00 00 fc ff df 49 8d 94 24 70 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 3d 05 00 00 48 8d 3d 72 0e 0b 0f 48 8b 75 18 <67> 48 0f b9 3a 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 [ 522.600026][ C0] RSP: 0018:ffffc90000007bd0 EFLAGS: 00010046 [ 522.606073][ C0] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff1100bbf914e [ 522.614022][ C0] RDX: ffff8880734d2970 RSI: ffffffff8a7eb4b0 RDI: ffffffff90da2880 [ 522.621971][ C0] RBP: ffff88805dfc8a58 R08: 0000000000000005 R09: 0000000000000000 [ 522.629926][ C0] R10: 0000000000000100 R11: 0000000000000000 R12: ffff8880734d2800 [ 522.637874][ C0] R13: 1ffff92000000f8d R14: ffffffff81cf1fa0 R15: 0000000000000001 [ 522.645827][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 522.651637][ C0] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 522.656912][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 522.662701][ C0] call_timer_fn+0x19a/0x640 [ 522.667273][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 522.672368][ C0] ? __run_timers+0x573/0xaf0 [ 522.677025][ C0] ? __run_timers+0x573/0xaf0 [ 522.681681][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 522.687468][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 522.693260][ C0] __run_timers+0x583/0xaf0 [ 522.697750][ C0] ? __pfx___run_timers+0x10/0x10 [ 522.702762][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 522.707772][ C0] run_timer_base+0x114/0x190 [ 522.712429][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 522.717610][ C0] run_timer_softirq+0x1a/0x50 [ 522.722353][ C0] handle_softirqs+0x1ea/0xa00 [ 522.727107][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 522.732376][ C0] ? _raw_spin_unlock+0x28/0x50 [ 522.737207][ C0] ? __hrtimer_rearm_deferred+0x9b/0x740 [ 522.742829][ C0] __irq_exit_rcu+0x162/0x210 [ 522.747493][ C0] irq_exit_rcu+0x9/0x30 [ 522.751717][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 522.757344][ C0] [ 522.760256][ C0] [ 522.763168][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 522.769130][ C0] RIP: 0010:finish_task_switch.isra.0+0x2d3/0x1010 [ 522.775618][ C0] Code: 2f 0a 00 00 41 c7 87 e0 0d 00 00 00 00 00 00 e9 0f 04 00 00 49 8d 7f 48 e8 ea 1b b7 09 e8 35 9e 3b 00 fb 48 8d bb c8 16 00 00 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84 [ 522.795206][ C0] RSP: 0018:ffffc90003d2f8e0 EFLAGS: 00000206 [ 522.801250][ C0] RAX: 0000000000418581 RBX: ffff888033bc4a80 RCX: 0000000000000040 [ 522.809201][ C0] RDX: 0000000000000000 RSI: ffffffff8df0fbf2 RDI: ffff888033bc6148 [ 522.817151][ C0] RBP: ffffc90003d2f938 R08: 0000000000000001 R09: 0000000000000000 [ 522.825100][ C0] R10: 0000000000000001 R11: ffffffff81d553f2 R12: ffff88804993a540 [ 522.833049][ C0] R13: 0000000000000001 R14: ffffffff90d74ce4 R15: ffff8880b843b480 [ 522.841002][ C0] ? finish_task_switch.isra.0+0x152/0x1010 [ 522.846892][ C0] __schedule+0x129d/0x67a0 [ 522.851377][ C0] ? try_to_wake_up+0x5ec/0x1900 [ 522.856301][ C0] ? try_to_wake_up+0x5ec/0x1900 [ 522.861238][ C0] ? __pfx___schedule+0x10/0x10 [ 522.866071][ C0] ? __wake_up+0x3f/0x60 [ 522.870299][ C0] ? __wake_up+0x3f/0x60 [ 522.874538][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 522.879904][ C0] preempt_schedule_common+0x42/0xc0 [ 522.885172][ C0] preempt_schedule_thunk+0x16/0x30 [ 522.890361][ C0] _raw_spin_unlock_irqrestore+0x61/0x80 [ 522.895974][ C0] snd_rawmidi_transmit+0xfb/0x140 [ 522.901070][ C0] snd_vmidi_output_work+0x111/0x390 [ 522.906342][ C0] ? __pfx_snd_vmidi_output_work+0x10/0x10 [ 522.912130][ C0] ? rcu_is_watching+0x12/0xc0 [ 522.916883][ C0] process_one_work+0xa0e/0x1980 [ 522.921811][ C0] ? __pfx_process_one_work+0x10/0x10 [ 522.927171][ C0] ? __pfx_snd_vmidi_output_work+0x10/0x10 [ 522.932960][ C0] worker_thread+0x5ef/0xe50 [ 522.937538][ C0] ? __pfx_worker_thread+0x10/0x10 [ 522.942632][ C0] ? kthread+0x13a/0x450 [ 522.946854][ C0] ? __pfx_worker_thread+0x10/0x10 [ 522.951945][ C0] kthread+0x370/0x450 [ 522.956000][ C0] ? __pfx_kthread+0x10/0x10 [ 522.960574][ C0] ret_from_fork+0x72b/0xd50 [ 522.965148][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 522.970241][ C0] ? __switch_to+0x800/0x1100 [ 522.974905][ C0] ? __pfx_kthread+0x10/0x10 [ 522.979480][ C0] ret_from_fork_asm+0x1a/0x30 [ 522.984237][ C0] [ 522.987426][ C0] Kernel Offset: disabled [ 522.991724][ C0] Rebooting in 86400 seconds..