Extracting prog: 24m1.764949311s Minimizing prog: 38m26.913373486s Simplifying prog options: 3m25.766284583s Extracting C: 45.264836123s Simplifying C: 0s extracting reproducer from 30 programs first checking the prog from the crash report single: executing 1 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$userio-write$USERIO_CMD_SET_PORT_TYPE-write$USERIO_CMD_REGISTER-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-mkdirat-mount-openat-write detailed listing: executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000204)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000208)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000214)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000220)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000002c0)={0x2, 0xfa}, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/serio/devices/serio2/drvctl\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='psmouse\x00', 0x8) program did not crash single: failed to extract reproducer bisect: bisecting 30 programs with base timeout 30s testing program (duration=37s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [13, 13, 13, 29, 28, 12, 13, 13, 12, 13, 13, 13, 13, 12, 13, 13, 30, 13, 13, 13, 12, 13, 13, 13, 13, 28, 13, 30, 13, 12] detailed listing: executing program 0: socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x20a00, 0x0) ioctl$PTP_EXTTS_REQUEST2(r3, 0x43403d0e, 0x0) executing program 1: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x400}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) msgget(0x0, 0x11) lstat(0x0, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) pipe2(0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x10000, 0x1) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0x9, 0x5fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0xc}, {}, {0xf, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8, 0x3, 0x7, 0x6, 0x0, 0x6, 0x40, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f9, 0xd6, 0x4, 0x8, 0x7, 0xfffffffd, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x3, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0x3, 0x1, 0x180, 0x5f09973, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x80000007, 0x80000001, 0x0, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x400009, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x0, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7f, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x40101, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000002, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x7ffffffc, 0x0, 0x200, 0x8, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa81, 0x80000040, 0x2, 0x7, 0x7, 0x108, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x4006, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0x2, 0xd4c, 0x0, 0x0, 0x2, 0x1000, 0x8, 0x3, 0x0, 0x800, 0x2, 0x88, 0x7ff, 0x1, 0xd, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0xe, 0x8, 0x42ba, 0x4, 0x1009, 0x3, 0x76, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xffb, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0x4, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x2, 0x9, 0x9a6, 0x245, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x8, 0x7, 0x5, 0x2, 0x7b, 0xfffffefe, 0x6, 0x6, 0xc, 0x401000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x4, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0x13}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000010) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x128242, 0x0) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=r1], 0x3c}}, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000"], &(0x7f0000000140)='GPL\x00'}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x30, r4, 0x1, 0x70bd2c, 0xffe, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0xdc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000080)=0x1) write(r5, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) unshare(0x40000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r7, &(0x7f00000000c0)='1 1\x00', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dbg\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dbg\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dbg/netdevsim/netdevsim1/hwstats/l3/enable_ifindex\x00', 0x1, 0x0) write(r8, &(0x7f00000001c0)='2\x00', 0x1) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="240000005f00050000000000000000000000000002000000000000000500020001000000", 0x24}], 0x1}, 0x0) sendmsg$sock(r9, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/ptp/ptp0/max_vclocks\x00', 0x2, 0x41) bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x128242, 0x0) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=r1], 0x3c}}, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x30, r4, 0x1, 0x70bd2c, 0xffe, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0xdc) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000080)=0x1) write(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) unshare(0x40000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r5, &(0x7f00000000c0)='1 1\x00', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dbg\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dbg\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dbg/netdevsim/netdevsim1/hwstats/l3/enable_ifindex\x00', 0x1, 0x0) write(r6, &(0x7f00000001c0)='2\x00', 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="240000005f00050000000000000000000000000002000000000000000500020001000000", 0x24}], 0x1}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/ptp/ptp0/max_vclocks\x00', 0x2, 0x41) bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2c2, 0xca) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4090, &(0x7f00000010c0)=0xffa) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x1000000000000008, 0x2, 0x4000000000000e52, 0x1, 0xf, 0x1043, 0x200000000006, 0x10, 0x1, 0xfffffffffffffffe, 0x100000000, 0x9ca6, 0x1, 0x8000000000005, 0x5c], 0x8080000, 0x42590}) ioctl$KVM_RUN(r3, 0xae80, 0x0) executing program 4: semop(0x0, &(0x7f0000000200), 0x53) unshare(0x4c020c00) r0 = socket$nl_generic(0x10, 0x3, 0x10) accept(r0, 0x0, &(0x7f0000000140)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x80800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r4) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x98, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x59, 0xe, {{{}, {}, @device_a, @device_a, @from_mac}, 0x8, @default, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @val={0x5, 0x3, {0x7, 0xc9, 0x6}}, @void, @void, @void, @val={0x2d, 0x1a, {0x2ff, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_BEACON_TAIL={0x8, 0xf, [@supported_rates={0x1, 0x2, [{0x0, 0x1}, {0x18, 0x1}]}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x98}}, 0x20000014) socket$netlink(0x10, 0x3, 0x0) executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) recvmmsg(r0, &(0x7f0000008580)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1}, 0x4e}], 0x2, 0x1100, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_emit_vhci(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x9801) preadv(r1, &(0x7f0000000580)=[{&(0x7f0000000000)=""/42, 0x2a}], 0x1, 0x7, 0x800) executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000100)="64f080620c00d9f40f20d86635200000000f22d86766c7442400009000006766c7442402000800006766c744240600000000670f011c2466b8000000000f23d00f21f86635200000040f23f866b9800000c00f326635004000000f3066b9800000c00f326635002000000f300f090fc79ce6ff0ff95500", 0x77}], 0x1, 0x30, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b800000100265d7aeabbc900bbc9000f30300f272d9d53bf0000c4b9e16dc30101220f01c3", 0xfffffffffffffdab}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) executing program 0: mkdir(&(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdir(0x0, 0x1ff) close(0xffffffffffffffff) symlink(&(0x7f0000000380)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x100, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x1, 0x0) write(r1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/os_desc/qw_sign\x00', 0x1, 0x0) symlink(&(0x7f0000000580)='./config/usb_gadget/g1/configs/c.1\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') read$FUSE(r2, 0x0, 0x0) executing program 0: syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000001080)=[@uexit={0x0, 0x18, 0x800}], 0x18}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="00082dbd"], 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0xa4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x3, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x7f, 0x7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) mount(&(0x7f0000000240)=@filename='none\x00', &(0x7f0000000280)='./debug\x00', &(0x7f00000002c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)='gr_udc\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/platform/drivers/gr_udc/bind\x00', 0x1, 0x0) write(r1, &(0x7f00000003c0)='pcspkr\x00', 0x7) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/usb/pcspkr/gr_udc_state\x00', 0x0, 0x0) read(r2, &(0x7f0000000600)=""/1024, 0x400) close(r2) executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000004500)=@deltfilter={0x2138, 0x2d, 0x400, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe0}, {0xa, 0x3}, {0x6, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x7}}, @filter_kind_options=@f_basic={{0xa}, {0x2100, 0x2, [@TCA_BASIC_ACT={0x1cc, 0x3, [@m_csum={0x108, 0x5, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0xffffff75, 0x8, 0x44, 0x10000}, 0x4f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x94, 0x1, 0xffffffffffffffff, 0x25027dcc, 0xf}, 0x4e}}]}, {0xa1, 0x6, "a65466d155423b8b5c6eecd904bd21b671369fe2a52d8d56dd8cd96cdf6eefe59e0f44b674364b059b7d2020ad54f9597f816654dc72723ebba599657a042ee9a699fc1208705147a8d68cbd6bf6af72760ee1e00665f87bfa4cecccaf6c8e22aaab8c1e0e603e3eae600596482436bd715f0caa8c3fc079664a70469d2b1e8fec2c076bac77d0f87ddd8ef75f785e2c43a0d6e12f106ba76480e31abb"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0x48, 0x9, 0x0, 0x0, {{0xf}, {0x14, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}]}, {0x5, 0x6, '|'}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ctinfo={0x78, 0x1b, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x456b}, @TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x32ad, 0x4, 0x8, 0x7}}]}, {0x29, 0x6, "cca6d64a9ee07471d810117d70950bf00d0e4e6fb8a44ba03fe155c8087719eb2c893bb1a3"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_BASIC_ACT={0x1f30, 0x3, [@m_skbedit={0x60, 0x0, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffff}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x40}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x9}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xd, 0x10}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_nat={0x48, 0x12, 0x0, 0x0, {{0x8}, {0x4}, {0x1d, 0x6, "17a16fd19550b83696f9163949364946a374312d113f4d7d56"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_ife={0xf0, 0x19, 0x0, 0x0, {{0x8}, {0x74, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x1, 0xfffffffa, 0x5}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0xea7, 0xfffffffffffffff9, 0xa, 0xc}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_SMAC={0xa}, @TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x8}, @IFE_META_PRIO={0x4, 0x3, @void}]}]}, {0x55, 0x6, "1ee868ef8aeffbdb4688e12d0164ecc0e94b9f3e051e0acade5f1f68473c6e507642a9e35cb16c8cced3d5efcd3200997b16d681cf1f1b88606574afd4edc89b1f2038806c7019ab79065db83371c7c3c4"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_pedit={0x1d94, 0x8, 0x0, 0x0, {{0xa}, {0x1d68, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0xffff, 0x80000001, 0x10000000, 0x9, 0x1}, 0xff, 0x8, [{0x38952188, 0xc, 0x800, 0x1, 0x5, 0x4}]}, [{0x9, 0x8, 0x10000, 0x6, 0x1, 0x9}, {0x9, 0x2, 0x2, 0x19b, 0x5, 0x8001}, {0x7fe0000, 0x5, 0x2, 0xfffffffe, 0x9, 0x100}, {0x9, 0x23a0, 0xfffffff5, 0x2, 0xfffffff5, 0x5}, {0x31a4, 0x6bdda5e0, 0x4, 0x3ff, 0x1, 0x5}, {0x2, 0x9, 0x7, 0x1, 0x4, 0x3}, {0xfffffff6, 0x3, 0x2, 0x6, 0xffff1762, 0xdd}, {0x4, 0x2, 0x4, 0x8, 0x0, 0x3}, {0x1, 0x1ff, 0x8001, 0x0, 0x2e, 0x5}, {0x37c, 0x4, 0x7, 0x0, 0x300, 0x3}, {0x6, 0x0, 0x1, 0x4d2, 0x2, 0x6}, {0x80000001, 0x9, 0x8, 0x3, 0x7, 0x10000}, {0x9, 0x605, 0xffffffff, 0xf4a, 0x9, 0x4}, {0x8, 0x6, 0x0, 0x9, 0x8, 0x100}, {0x18, 0x6, 0x1, 0x5, 0x4, 0x8}, {0x8de, 0xfffffffb, 0x7fffffff, 0x2, 0xc49, 0xfffffff8}, {0x4, 0xe, 0xfffffc01, 0xfffffff8, 0x9db1, 0x7}, {0x8, 0x8, 0xd1, 0x9, 0xfffffffd, 0xfff}, {0x9, 0x8, 0x5, 0x80, 0x2, 0x401}, {0x1000, 0x7, 0xee, 0x9, 0x16, 0x2}, {0x4, 0x80000001, 0xc43, 0xca2, 0xfffffff8, 0x9}, {0x3, 0x9, 0x51, 0x9, 0x4, 0x6}, {0xd, 0xfffff77f, 0x100, 0xff, 0x8, 0x7ca7}, {0xacda, 0x81, 0xd10, 0x9, 0x7, 0x9f9}, {0xa, 0x100, 0xe52a482d, 0x5, 0x6, 0x1}, {0x29e2, 0x80000000, 0x1, 0x8, 0xfff, 0xd6}, {0x4, 0x8, 0x7, 0x3ff, 0xe, 0x7f}, {0xc7d, 0x6, 0x7, 0x6, 0x0, 0x5}, {0x0, 0xd, 0x9, 0x0, 0x9}, {0xc34a, 0x6, 0x1db, 0xff}, {0x7, 0x0, 0xffff92b0, 0x7, 0x5, 0x1}, {0x2, 0x401, 0x8, 0x7, 0x5, 0x3}, {0x10001, 0x5c9, 0x3, 0x8, 0x1, 0x8}, {0x1, 0x4, 0x0, 0x5, 0x9, 0x5}, {0x0, 0x1, 0x0, 0x1, 0x5, 0x873}, {0x10001, 0x4, 0x3, 0x28aea28f, 0x8f, 0x960}, {0x674, 0x4, 0x7, 0x2f6d158c, 0x9, 0x35}, {0x7f, 0x5, 0x5, 0x6, 0x2, 0x4}, {0x2, 0x0, 0x8, 0x2858fbb, 0x9179, 0x1}, {0x4, 0x1, 0x80000000, 0x57, 0x2a, 0x8}, {0x5, 0x79, 0x7fff, 0x6, 0x4, 0xfffff000}, {0x6, 0x3, 0x33c, 0x5, 0x4, 0x3}, {0x6, 0x9, 0x101, 0xbb15, 0x401, 0x3d8}, {0x5b, 0x0, 0x33, 0xb, 0x34, 0xff}, {0x5, 0x8, 0x5b, 0x401, 0x2, 0x5c}, {0x6, 0xfffffffd, 0x7, 0x0, 0xdeb, 0x80}, {0x87, 0x9, 0x9, 0x5, 0x3, 0x634}, {0x10001, 0x7fff, 0x0, 0x0, 0x14f4, 0x7}, {0x4, 0x3, 0x5b7, 0x4, 0x7e7f0037, 0x566a}, {0x1, 0x7f, 0x8, 0xdd5, 0xe35, 0xac}, {0x5, 0x6, 0x3cf, 0x3, 0x6, 0x400}, {0x7, 0x1, 0x26c00, 0x80000001, 0x5, 0x5}, {0x297791bf, 0x5, 0x9, 0x7, 0x0, 0x7}, {0x7, 0x5, 0xa, 0x4, 0x4, 0x986a}, {0x200, 0xee, 0x401, 0x6, 0x6, 0x6}, {0x4, 0x0, 0x5, 0x7, 0x7fffffff, 0x3}, {0x7, 0x10001, 0x10001, 0x86, 0x7, 0xfffffff7}, {0x3, 0x6, 0xcc1, 0x0, 0x2, 0x2}, {0x5, 0x3, 0x10001, 0x92, 0x0, 0x1}, {0x7, 0x2, 0xfffffff2, 0xffffffff, 0x2, 0x2}, {0x7fffffff, 0xa619, 0x81, 0x0, 0x100, 0x7}, {0x4, 0x8000, 0x52b, 0x8, 0x9241, 0x1}, {0x3, 0x9, 0x4, 0x80, 0x7fffffff, 0xfff}, {0x6, 0x1ff, 0x7, 0x1, 0xffffffff, 0x22944000}, {0x8, 0xc, 0xb, 0x3ff, 0x5, 0x3}, {0x0, 0x8, 0x7, 0x0, 0xfffffff8, 0x8}, {0xfffffc01, 0x6, 0x10000, 0xfffffe00, 0x3ff, 0x7ff}, {0xfae2, 0x6, 0x81, 0x0, 0x5, 0x3}, {0x9c, 0x6, 0x81, 0x9, 0x2, 0x5}, {0x3, 0x8, 0xaa97, 0x7, 0x7, 0xfffffffa}, {0x101, 0x3, 0x69, 0x1001, 0x0, 0x7}, {0x7d32fd1c, 0x3, 0xfffffffa, 0xfc12, 0x0, 0x3}, {0x1ff, 0x9, 0x6, 0xd581, 0x85, 0xc}, {0xffff, 0x7, 0x2, 0x6, 0x9, 0x7}, {0x6, 0x69dd, 0x0, 0x800, 0x20, 0x1}, {0x198, 0x0, 0x5, 0x4, 0x4e, 0xe}, {0x2, 0x400, 0x7, 0x6, 0x2, 0x8}, {0xa, 0x4, 0x81, 0xffffff53, 0x3, 0x10001}, {0x6, 0xf8f, 0x6, 0x7, 0x3, 0x51}, {0x8, 0xd7, 0x7cb, 0x1, 0xf, 0x6}, {0x80000001, 0x7, 0x0, 0x1, 0x8573, 0x78}, {0x8, 0x100, 0xa8c, 0x5, 0x4, 0xa}, {0x2, 0x2, 0xc, 0xfffffffc, 0x88, 0x1}, {0x7c, 0xfffffff7, 0xf, 0x4, 0xff, 0x8000}, {0xffff, 0x607, 0x400, 0x9, 0x1, 0x75}, {0xffff, 0x0, 0x5, 0x1, 0x5b, 0x7}, {0x6df, 0x1000, 0x101, 0x80, 0x7, 0x3}, {0x3, 0x3, 0x0, 0x38, 0x6, 0xe}, {0x4, 0x8, 0x6, 0x3}, {0x6, 0x6, 0x9, 0x10000000, 0x6, 0x1}, {0x4, 0x8, 0x8, 0x1, 0x6}, {0x2a6, 0x4053, 0x7f, 0x0, 0x9c6, 0x3}, {0x0, 0x400, 0x2, 0x800, 0x200, 0x7}, {0x7fff, 0x2, 0x2, 0x2, 0x8001, 0x80000001}, {0x8000, 0xbba0, 0x2, 0x2, 0x67, 0x40}, {0x5, 0x4, 0x6, 0xe8, 0x6, 0x800}, {0x6, 0xfffffffa, 0x4, 0x3b60, 0xbb, 0x14000000}, {0x9, 0x0, 0x4, 0x52e5, 0x3, 0xe}, {0x80000000, 0xffffffff, 0x2066, 0x9, 0x5, 0x9}, {0x6, 0x8, 0x7, 0x1000000, 0x6, 0x5743}, {0x8001, 0x7fff, 0x4, 0x71, 0x7f, 0x8}, {0xbd, 0x6, 0x252e, 0xb, 0x1000, 0x7}, {0xa170, 0x6, 0x80000001, 0x7, 0x10, 0xdd65}, {0x8, 0x8000, 0x1, 0x0, 0x5}, {0xfffffffd, 0x9, 0x5, 0x1, 0xe67, 0xfff}, {0x9, 0x2e3c, 0x8, 0x8001, 0x9, 0x7}, {0x100000, 0x9, 0x5, 0x0, 0x8, 0x9}, {0x9, 0x3, 0x3, 0x3, 0x9, 0x5}, {0x7, 0x3, 0x2, 0x0, 0x6ba, 0x1}, {0x9, 0xb, 0x0, 0x0, 0x9c, 0x7}, {0x7f, 0x8, 0x8, 0xeca3, 0x3, 0x4}, {0x101, 0x5, 0x7fffffff, 0x40, 0xf6c4, 0x4}, {0x7, 0x5, 0x7, 0x6, 0x2, 0x3}, {0xe0dd, 0x408, 0x7ff, 0x1, 0x5}, {0x2, 0x504, 0x6, 0x2, 0x3, 0x2}, {0x7, 0x5, 0x1, 0x30, 0x1, 0x80000000}, {0xcba, 0x3, 0xffffff00, 0x7, 0x8, 0x7}, {0x2, 0x9, 0xfffffffc, 0x9, 0x6, 0xfff}, {0x8000, 0xffe8, 0xffffffe7, 0x7fff, 0x8, 0xfff}, {0xb, 0x2, 0x7, 0x9e1, 0xfffffffe, 0x1}, {0x1, 0x2, 0x46, 0xd0d, 0xc, 0x8e9}, {0x192c, 0x5, 0x81, 0x6, 0x5, 0x80000000}, {0x2, 0x8, 0x4, 0x1, 0x6, 0x2}, {0x8, 0x3, 0xa, 0x80000001, 0x4, 0x6}, {0x7ff, 0x8, 0x0, 0x6, 0x5, 0xc}, {0x401, 0xd, 0x8, 0x3ff, 0x5}, {0x410237b4, 0x1, 0x7ff, 0x4, 0x8, 0x10000}, {0x5, 0x9, 0x5, 0x7, 0x1, 0x1}], [{0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0xb}, {0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x2}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x3}, {0x3}, {0x4}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x1}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x5}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x5}, {0x4}, {0x2}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {}, {0x6}, {0x5, 0x1}, {}, {0x5}, {0x1}, {0x3, 0x1}, {0x1eebfa374e9b39d1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {}, {0x5}, {0x3}, {0x3}, {0x6}, {0x2}, {}, {0x4}, {0x6}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4}]}}, @TCA_PEDIT_KEYS_EX={0xf4, 0x5, 0x0, 0x1, [{0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x4}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS={0xe38, 0x2, {{{0xfffffbff, 0x5, 0x5, 0x0, 0x1}, 0xf, 0x9, [{0x6, 0x8000, 0x6, 0x7fff, 0x1, 0xb}]}, [{0x6, 0x9, 0x8, 0x3, 0xa, 0x5}, {0x4, 0x2, 0x2, 0x8, 0x6, 0xfffffffd}, {0xfffffff9, 0x6, 0x4, 0x7, 0x7, 0x22}, {0xb, 0x1000, 0x1000, 0x400, 0x7, 0x23e8}, {0x10, 0xa6e, 0x1, 0x1, 0x5, 0x800}, {0xc, 0x3, 0xfffffffa, 0x101, 0x5, 0x2}, {0xfffffffa, 0x586, 0x8, 0x10001, 0x101, 0x80000000}, {0x7b5, 0x9, 0x3, 0x8001, 0xc, 0x7}, {0x20000000, 0x3, 0xbe, 0x800, 0x8, 0x6}, {0x4, 0x800, 0x2, 0x1, 0x5, 0x5}, {0x1, 0x4, 0x2, 0x3, 0x614c, 0x54}, {0x9, 0x7c14, 0x13, 0x1, 0x2, 0x80000001}, {0xf, 0x2d2, 0x80000001, 0x6, 0x9, 0x2}, {0x7, 0x7b, 0x2, 0x1, 0x200}, {0xb, 0x81, 0x1f7c, 0x3, 0x9, 0xfa9}, {0x8, 0x5a0, 0x29, 0x9, 0x6, 0x80}, {0x2, 0x5cbc, 0x400, 0x2, 0x3, 0x7}, {0x400, 0x1ff, 0x6, 0x10000, 0xe000, 0x1534}, {0x800, 0x200, 0x5, 0x4, 0x6b, 0xf}, {0xd, 0x6, 0xbc8a, 0x7, 0x1, 0x2}, {0x7f, 0xc, 0x1, 0x515a, 0x6, 0x9}, {0x7, 0xe0, 0xfd, 0xe672, 0x4, 0x9}, {0x9, 0x5, 0xbb7d, 0x8000}, {0x9, 0x87f, 0x9, 0x9}, {0x1, 0x20000000, 0x5, 0x3, 0x1000000, 0x7c}, {0x2, 0xd, 0x7, 0x10, 0x4, 0x4}, {0x7, 0x0, 0x83b, 0x6, 0x8, 0x6}, {0x1, 0x5, 0xef, 0xfb90, 0x2, 0xff}, {0x4, 0x7, 0x8, 0x0, 0x1, 0xfffffffe}, {0x7c5, 0xa02, 0x2, 0x1, 0x4, 0x9f}, {0x7fffffff, 0x5, 0x0, 0x1, 0x8, 0xffff9e42}, {0x8001, 0xfffffff7, 0xa, 0x7fff, 0x800, 0x800}, {0x5, 0x9, 0xb41, 0x5, 0x9}, {0x8, 0x4, 0x7, 0x2, 0x5cc, 0x1}, {0x9, 0x8, 0x84, 0x5, 0x3, 0x594}, {0x2, 0x7, 0x1, 0x1, 0x40, 0x1}, {0x5, 0x3b, 0x6, 0xc133, 0x0, 0x18b3}, {0x2, 0x3, 0x6, 0x10000, 0xfffffff9, 0x7}, {0x2, 0xcb8, 0x1, 0x81, 0xd, 0x4}, {0x6, 0x99c8, 0x4, 0x7, 0x3, 0xb91}, {0x43d7, 0x3be, 0x2, 0x78, 0xffffffff, 0xf}, {0x5, 0x9, 0x9, 0x6b, 0x7f, 0x20000000}, {0x7, 0x2, 0xfffffbff, 0x9, 0x7, 0x2}, {0x96a2, 0x5, 0x8, 0xf, 0x5, 0x4}, {0x4, 0x5, 0x4, 0x0, 0x8, 0x8}, {0x200, 0x435d, 0x400, 0x81, 0x9, 0x79}, {0x0, 0x8, 0x4, 0x6, 0x9, 0x8001}, {0x1ff, 0x5, 0x9, 0x2, 0x7fff, 0x9161843a}, {0x4d, 0x7f, 0x2, 0x3, 0x0, 0x200}, {0xf, 0x3, 0x3, 0x2, 0x6, 0x10001}, {0x7, 0x8, 0xe728, 0xacb, 0x400, 0x8}, {0xfffffffa, 0x1, 0x80000001, 0x217d, 0x7, 0x599}, {0x3, 0x10, 0x0, 0xa5, 0x400}, {0x2, 0x9a, 0x6, 0x3, 0x4, 0x7}, {0xb, 0xfffffff3, 0xbd, 0xb1, 0x5, 0x4}, {0x823, 0x0, 0xce, 0xfffffff7, 0x1, 0x9}, {0x3, 0x8, 0x6, 0x4ac, 0x6, 0x4}, {0x400, 0x7, 0xfffffffe, 0x6, 0x0, 0xfffffffc}, {0x3, 0x2, 0x8, 0xffff, 0x8}, {0x0, 0x0, 0x2000000, 0x9, 0xa, 0x8}, {0x800, 0x8, 0x2, 0x121, 0x1000, 0xfffffff7}, {0x81, 0x92, 0x4, 0x6, 0xffff02d0, 0x7}, {0x100, 0x0, 0xb, 0x2, 0x53f}, {0x8, 0x1bf, 0xe5b, 0x2, 0x4, 0x4}, {0x400, 0x9, 0x6, 0x7, 0x2, 0x7fff}, {0x2, 0xa, 0x9, 0x7, 0x3}, {0x4, 0x1, 0x3, 0xf7, 0x4, 0x1ff}, {0x6, 0x0, 0x41, 0x5, 0xfffff800, 0x2}, {0x3, 0xd, 0x5, 0x5, 0x6, 0x5}, {0x5, 0x3, 0x4, 0x9de7, 0x10, 0xfff}, {0x9, 0xb04, 0x4, 0xf4, 0x3, 0x9}, {0x4, 0xfffffffa, 0x8, 0x5, 0x4, 0xf}, {0x9, 0x1, 0x7fff, 0x0, 0x8, 0x2}, {0x4, 0x6, 0x8, 0x3, 0x2, 0x1}, {0x6, 0x7fffffff, 0x7, 0xc5, 0x7, 0x2}, {0x8, 0xffffffa0, 0x8, 0x10001, 0x8, 0x800}, {0x71d, 0x3, 0x3, 0x8, 0x401, 0x2}, {0x9, 0x2, 0x2, 0xc, 0x3, 0x400}, {0x2f78, 0x50, 0xb0, 0x6e8, 0x5d, 0x8}, {0x8, 0x7, 0x8, 0x7, 0x40, 0x1000}, {0x3, 0xf68, 0x0, 0x2, 0x8001}, {0x0, 0x0, 0x1ff, 0x9f8, 0x4, 0xffffffff}, {0x7fffffff, 0xf9f, 0x4, 0x9, 0x5, 0xa5}, {0x32521048, 0xa, 0xfffffffd, 0x1, 0x4, 0x1}, {0x2000, 0x4ff, 0xb7b, 0xe02, 0x9, 0x2}, {0x8, 0x5, 0x5, 0x7, 0x0, 0x7}, {0x1, 0xc, 0x2, 0x43, 0xfffffff9, 0x40}, {0xb, 0xb, 0xd, 0x5, 0x15, 0x1}, {0x2, 0xb9, 0x8, 0x3, 0x1ea2, 0xe4b}, {0x0, 0x3, 0x9, 0x0, 0x7, 0xf3}, {0x0, 0x2, 0x0, 0x5, 0x81, 0x6}, {0x7, 0x8, 0x6, 0x91f2, 0x8001, 0xe7c4}, {0x69f6836a, 0x4, 0xffff, 0xf108, 0x4, 0x1}, {0x7, 0xff, 0x4, 0x5, 0x7ff, 0x5}, {0xfff, 0xd3a, 0x7, 0x0, 0x32c2, 0x3}, {0x0, 0x7, 0x1, 0xff, 0x3, 0x1ec7}, {0x2, 0x3, 0x7, 0x10001, 0x5, 0xb7c3}, {0x1, 0x5, 0x1, 0xfe7f, 0x2, 0x8}, {0x5, 0x4, 0x7, 0x1, 0x0, 0x4}, {0xfffffff6, 0x3d, 0x6, 0x6eaf, 0x37f, 0x9}, {0x4, 0x0, 0x1000, 0x2, 0x5, 0xfffff328}, {0xfffffffc, 0x5, 0x3, 0x8, 0x3, 0x8}, {0x6, 0x0, 0x1, 0x7, 0x8, 0x1}, {0x7, 0x9, 0xa7, 0x2, 0x0, 0xf}, {0x5, 0x7, 0x3, 0x2, 0x2}, {0x8, 0x4, 0x2, 0x5, 0xe27, 0x4}, {0x5, 0x800, 0x3ee1, 0x3, 0x5, 0x8}, {0x40, 0x7, 0xf, 0x0, 0x1, 0x4}, {0x0, 0x4000000, 0x1, 0x1, 0x28, 0x5}, {0x10001, 0x6, 0x4, 0xec, 0x3, 0xd}, {0x0, 0x9, 0x1, 0x3, 0x2f78, 0x7}, {0x7, 0x400, 0x8, 0x7ff, 0x0, 0x8}, {0x1, 0x1, 0x100008, 0x6, 0x1, 0x9}, {0x4, 0xa91, 0x6, 0xb, 0xf6, 0x7}, {0x8, 0x40, 0x82a, 0x64f, 0x2, 0x100}, {0x8, 0x5c, 0x6, 0x9, 0xfffffffd, 0xa3}, {0x8, 0x3, 0x401, 0x678, 0x8, 0xff}, {0x1, 0x4, 0x9, 0x0, 0x2b, 0x4}, {0xfff, 0x4, 0x8, 0x3, 0x2, 0x7}, {0x1, 0x9, 0x401, 0x6, 0x101, 0x1}, {0x793, 0x8, 0x33, 0x8000, 0x6909efb1, 0x95}, {0xfffffff7, 0xd0b, 0x5, 0x661800, 0x0, 0x1}, {0x1000, 0xffff, 0x4, 0x6055, 0x8, 0x2}, {0x2, 0xb, 0x7, 0x7, 0xe, 0x8000}, {0x10, 0xfffffff9, 0x2, 0x7, 0x80000001, 0x3}, {0xa, 0xfffffffb, 0x8, 0x7, 0x1, 0x3}, {0xfffff57d, 0x7f, 0xb, 0x5, 0x9, 0x49df}, {0x2, 0x4, 0x4, 0xe, 0x14b2, 0x6}], [{0x2}, {0x1}, {0x8, 0x1}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x5}, {0x2}, {}, {0x4}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x5}, {}, {0x2}, {0x5}, {0x4}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x7}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {}, {0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x7}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x5}, {0x2}, {0x1}, {0x5}, {0x5, 0x1}, {}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0xf}, {}, {0x1}, {0x4}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x5}, {0x2}, {0x5}, {0x2}, {0x2, 0x1}, {0x4}, {0x2}, {0x2}, {0x0, 0x1}, {}, {0x2}, {0x7, 0x1}, {0x6, 0x1}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x4}, {0x5, 0x1}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x2138}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0x11) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) pipe2(&(0x7f00000000c0), 0x80000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x5, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x9) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x8, 0x2, 0x0, 0x200, 0xa, "2b35740e4f4e6c04704020dd9636bce158a556"}) executing program 2: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x279, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8924, 0x0) sendmmsg(r4, &(0x7f0000007fc0), 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000000000)={0x1, 0x1, 0x2, 0x9, 0x4}) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./my_sysfs\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./my_sysfs\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000600)='./my_dev\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./my_dev\x00', &(0x7f0000000800)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000900)='./my_configfs/dlm/cluster1\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./my_configfs/dlm/cluster1/cluster_name\x00', 0x2, 0x0) write(r6, &(0x7f0000000b00)='cluster1\x00', 0x9) mkdir(&(0x7f0000000d00)='./my_configfs/dlm/cluster1/comms/1\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./my_configfs/dlm/cluster1/comms/1/local\x00', 0x2, 0x0) write(r7, 0x0, 0x0) executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x50424752, 0x0, 0x0, 0x0, 0x1, 0xfeedcafe, 0x3, 0x0, 0x0, 0x6}}) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xff00) executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2a, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xa0}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter\x00') syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) capset(0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x7, 0x3000001, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x390, 0x0, 0x5802, 0x294, 0x1d0, 0x294, 0x2c0, 0x378, 0x378, 0x2c0, 0x378, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, [0xffffff00, 0xff000000, 0xffffff00, 0xff000000], [0xffffffff, 0x0, 0xffffffff, 0xffffff00], 'wg2\x00', 'ip6gre0\x00', {}, {0xff}, 0x62, 0x8, 0x3, 0x4a}, 0x0, 0xa8, 0x1d0, 0x52020000}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xe5f6, 'system_u:object_r:etc_aliases_t:s0\x00'}}}, {{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffff00, 0xffffff00, 0x0, 0x52f1fc93a83a0023], [0xff000000, 0x0, 0xff000000, 0xffffffff], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {0xff}, 0x8, 0x81, 0x40681f015a70b21b}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private=0xa010100, 'erspan0\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x240000c8}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xd50, 0xfffffffffffffee0, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x7, 0xfff3}, {0xb, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x201, 0x0) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x40082, 0x509cb86664327f4) write$dsp(r2, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) executing program 3: socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000400)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x80000001, 0x3e}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000580)=""/226, 0xe2, 0x1, 0x17}, @fda={0x66646185, 0x9, 0x1, 0xb4}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0}) executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200", 0x4}], 0x1}, 0x4005) executing program 3: socket$unix(0x1, 0x2, 0x0) landlock_create_ruleset(&(0x7f0000000140)={0x10895, 0x3, 0x2}, 0x18, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x185042, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000a80)={0x0, 0xabba, 0x400, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f00000006c0)=0x0, &(0x7f0000000580)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}}, 0x20}}, 0x8000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x3c00, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10008003, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x20419, 0xfffffffe, 0x21}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x1, 0x366, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x24c, 0x0, r6}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[], 0x0}, 0x94) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x128242, 0x0) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=r1], 0x3c}}, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x30, r4, 0x1, 0x70bd2c, 0xffe, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0xdc) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000080)=0x1) write(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) unshare(0x40000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r5, &(0x7f00000000c0)='1 1\x00', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dbg\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dbg\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dbg/netdevsim/netdevsim1/hwstats/l3/enable_ifindex\x00', 0x1, 0x0) write(r6, &(0x7f00000001c0)='2\x00', 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="240000005f00050000000000000000000000000002000000000000000500020001000000", 0x24}], 0x1}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/ptp/ptp0/max_vclocks\x00', 0x2, 0x41) bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000204)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000208)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000214)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000220)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000002c0)={0x2, 0xfa}, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/serio/devices/serio2/drvctl\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='psmouse\x00', 0x8) executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8924, 0x0) sendmmsg(r4, &(0x7f0000007fc0), 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000000000)={0x1, 0x1, 0x2, 0x9, 0x4}) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./my_sysfs\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./my_sysfs\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000600)='./my_dev\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./my_dev\x00', &(0x7f0000000800)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000900)='./my_configfs/dlm/cluster1\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./my_configfs/dlm/cluster1/cluster_name\x00', 0x2, 0x0) write(r6, &(0x7f0000000b00)='cluster1\x00', 0x9) mkdir(&(0x7f0000000d00)='./my_configfs/dlm/cluster1/comms/1\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./my_configfs/dlm/cluster1/comms/1/local\x00', 0x2, 0x0) write(r7, 0x0, 0x0) executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x58, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x64}]}}}]}, 0x58}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000200), 0xc, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'syzkaller0\x00'}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x64}]}}}]}, 0x58}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bond0/bonding/mode\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='0\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/class/net/bond0/bonding/arp_interval\x00', 0x1, 0x0) write(r2, &(0x7f0000000480)='100\x00', 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000004c0)={'bond0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', 0x1}) nanosleep(&(0x7f0000000540)={0x1}, 0x0) executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='devtmpfs\x00', &(0x7f0000000080)='./dev_mnt\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000200000040990a01000000010200010902190001010080320904000001ff00000007058103400001"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev_mnt/ttyUSB0\x00', 0x802, 0x0) syz_usb_ep_write(r0, 0x81, 0x10, &(0x7f0000000400)='0123456789abcdef') nanosleep(&(0x7f0000000300)={0x1}, 0x0) read(r1, &(0x7f0000000500)=""/64, 0x40) syz_usb_ep_write(r0, 0x81, 0x10, &(0x7f0000000400)='0123456789abcdef') nanosleep(&(0x7f0000000300)={0x1}, 0x0) read(r1, &(0x7f0000000500)=""/64, 0x40) close(r1) program did not crash replaying the whole log did not cause a kernel crash single: executing 1 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$userio-write$USERIO_CMD_SET_PORT_TYPE-write$USERIO_CMD_REGISTER-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-mkdirat-mount-openat-write detailed listing: executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000204)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000208)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000214)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000220)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000002c0)={0x2, 0xfa}, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/serio/devices/serio2/drvctl\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='psmouse\x00', 0x8) program did not crash single: failed to extract reproducer bisect: bisecting 30 programs with base timeout 1m40s testing program (duration=1m47s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [13, 13, 13, 29, 28, 12, 13, 13, 12, 13, 13, 13, 13, 12, 13, 13, 30, 13, 13, 13, 12, 13, 13, 13, 13, 28, 13, 30, 13, 12] detailed listing: executing program 0: socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x20a00, 0x0) ioctl$PTP_EXTTS_REQUEST2(r3, 0x43403d0e, 0x0) executing program 1: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x400}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) msgget(0x0, 0x11) lstat(0x0, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) pipe2(0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x10000, 0x1) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0x9, 0x5fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0xc}, {}, {0xf, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8, 0x3, 0x7, 0x6, 0x0, 0x6, 0x40, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f9, 0xd6, 0x4, 0x8, 0x7, 0xfffffffd, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x3, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0x3, 0x1, 0x180, 0x5f09973, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x80000007, 0x80000001, 0x0, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x400009, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x0, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7f, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x40101, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000002, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x7ffffffc, 0x0, 0x200, 0x8, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa81, 0x80000040, 0x2, 0x7, 0x7, 0x108, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x4006, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0x2, 0xd4c, 0x0, 0x0, 0x2, 0x1000, 0x8, 0x3, 0x0, 0x800, 0x2, 0x88, 0x7ff, 0x1, 0xd, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0xe, 0x8, 0x42ba, 0x4, 0x1009, 0x3, 0x76, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xffb, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0x4, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x2, 0x9, 0x9a6, 0x245, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x8, 0x7, 0x5, 0x2, 0x7b, 0xfffffefe, 0x6, 0x6, 0xc, 0x401000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x4, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0x13}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000010) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x128242, 0x0) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=r1], 0x3c}}, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000"], &(0x7f0000000140)='GPL\x00'}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x30, r4, 0x1, 0x70bd2c, 0xffe, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0xdc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000080)=0x1) write(r5, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) unshare(0x40000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r7, &(0x7f00000000c0)='1 1\x00', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dbg\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dbg\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dbg/netdevsim/netdevsim1/hwstats/l3/enable_ifindex\x00', 0x1, 0x0) write(r8, &(0x7f00000001c0)='2\x00', 0x1) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="240000005f00050000000000000000000000000002000000000000000500020001000000", 0x24}], 0x1}, 0x0) sendmsg$sock(r9, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/ptp/ptp0/max_vclocks\x00', 0x2, 0x41) bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x128242, 0x0) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=r1], 0x3c}}, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x30, r4, 0x1, 0x70bd2c, 0xffe, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0xdc) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000080)=0x1) write(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) unshare(0x40000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r5, &(0x7f00000000c0)='1 1\x00', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dbg\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dbg\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dbg/netdevsim/netdevsim1/hwstats/l3/enable_ifindex\x00', 0x1, 0x0) write(r6, &(0x7f00000001c0)='2\x00', 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="240000005f00050000000000000000000000000002000000000000000500020001000000", 0x24}], 0x1}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/ptp/ptp0/max_vclocks\x00', 0x2, 0x41) bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2c2, 0xca) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4090, &(0x7f00000010c0)=0xffa) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x1000000000000008, 0x2, 0x4000000000000e52, 0x1, 0xf, 0x1043, 0x200000000006, 0x10, 0x1, 0xfffffffffffffffe, 0x100000000, 0x9ca6, 0x1, 0x8000000000005, 0x5c], 0x8080000, 0x42590}) ioctl$KVM_RUN(r3, 0xae80, 0x0) executing program 4: semop(0x0, &(0x7f0000000200), 0x53) unshare(0x4c020c00) r0 = socket$nl_generic(0x10, 0x3, 0x10) accept(r0, 0x0, &(0x7f0000000140)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x80800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r4) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x98, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x59, 0xe, {{{}, {}, @device_a, @device_a, @from_mac}, 0x8, @default, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @val={0x5, 0x3, {0x7, 0xc9, 0x6}}, @void, @void, @void, @val={0x2d, 0x1a, {0x2ff, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_BEACON_TAIL={0x8, 0xf, [@supported_rates={0x1, 0x2, [{0x0, 0x1}, {0x18, 0x1}]}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x98}}, 0x20000014) socket$netlink(0x10, 0x3, 0x0) executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) recvmmsg(r0, &(0x7f0000008580)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1}, 0x4e}], 0x2, 0x1100, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_emit_vhci(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x9801) preadv(r1, &(0x7f0000000580)=[{&(0x7f0000000000)=""/42, 0x2a}], 0x1, 0x7, 0x800) executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000100)="64f080620c00d9f40f20d86635200000000f22d86766c7442400009000006766c7442402000800006766c744240600000000670f011c2466b8000000000f23d00f21f86635200000040f23f866b9800000c00f326635004000000f3066b9800000c00f326635002000000f300f090fc79ce6ff0ff95500", 0x77}], 0x1, 0x30, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b800000100265d7aeabbc900bbc9000f30300f272d9d53bf0000c4b9e16dc30101220f01c3", 0xfffffffffffffdab}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) executing program 0: mkdir(&(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdir(0x0, 0x1ff) close(0xffffffffffffffff) symlink(&(0x7f0000000380)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x100, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x1, 0x0) write(r1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/os_desc/qw_sign\x00', 0x1, 0x0) symlink(&(0x7f0000000580)='./config/usb_gadget/g1/configs/c.1\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') read$FUSE(r2, 0x0, 0x0) executing program 0: syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000001080)=[@uexit={0x0, 0x18, 0x800}], 0x18}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="00082dbd"], 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0xa4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x3, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x7f, 0x7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) mount(&(0x7f0000000240)=@filename='none\x00', &(0x7f0000000280)='./debug\x00', &(0x7f00000002c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)='gr_udc\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/platform/drivers/gr_udc/bind\x00', 0x1, 0x0) write(r1, &(0x7f00000003c0)='pcspkr\x00', 0x7) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/usb/pcspkr/gr_udc_state\x00', 0x0, 0x0) read(r2, &(0x7f0000000600)=""/1024, 0x400) close(r2) executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000004500)=@deltfilter={0x2138, 0x2d, 0x400, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe0}, {0xa, 0x3}, {0x6, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x7}}, @filter_kind_options=@f_basic={{0xa}, {0x2100, 0x2, [@TCA_BASIC_ACT={0x1cc, 0x3, [@m_csum={0x108, 0x5, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0xffffff75, 0x8, 0x44, 0x10000}, 0x4f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x94, 0x1, 0xffffffffffffffff, 0x25027dcc, 0xf}, 0x4e}}]}, {0xa1, 0x6, "a65466d155423b8b5c6eecd904bd21b671369fe2a52d8d56dd8cd96cdf6eefe59e0f44b674364b059b7d2020ad54f9597f816654dc72723ebba599657a042ee9a699fc1208705147a8d68cbd6bf6af72760ee1e00665f87bfa4cecccaf6c8e22aaab8c1e0e603e3eae600596482436bd715f0caa8c3fc079664a70469d2b1e8fec2c076bac77d0f87ddd8ef75f785e2c43a0d6e12f106ba76480e31abb"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0x48, 0x9, 0x0, 0x0, {{0xf}, {0x14, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}]}, {0x5, 0x6, '|'}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ctinfo={0x78, 0x1b, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x456b}, @TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x32ad, 0x4, 0x8, 0x7}}]}, {0x29, 0x6, "cca6d64a9ee07471d810117d70950bf00d0e4e6fb8a44ba03fe155c8087719eb2c893bb1a3"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_BASIC_ACT={0x1f30, 0x3, [@m_skbedit={0x60, 0x0, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffff}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x40}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x9}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xd, 0x10}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_nat={0x48, 0x12, 0x0, 0x0, {{0x8}, {0x4}, {0x1d, 0x6, "17a16fd19550b83696f9163949364946a374312d113f4d7d56"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_ife={0xf0, 0x19, 0x0, 0x0, {{0x8}, {0x74, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x1, 0xfffffffa, 0x5}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0xea7, 0xfffffffffffffff9, 0xa, 0xc}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_SMAC={0xa}, @TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x8}, @IFE_META_PRIO={0x4, 0x3, @void}]}]}, {0x55, 0x6, "1ee868ef8aeffbdb4688e12d0164ecc0e94b9f3e051e0acade5f1f68473c6e507642a9e35cb16c8cced3d5efcd3200997b16d681cf1f1b88606574afd4edc89b1f2038806c7019ab79065db83371c7c3c4"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_pedit={0x1d94, 0x8, 0x0, 0x0, {{0xa}, {0x1d68, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0xffff, 0x80000001, 0x10000000, 0x9, 0x1}, 0xff, 0x8, [{0x38952188, 0xc, 0x800, 0x1, 0x5, 0x4}]}, [{0x9, 0x8, 0x10000, 0x6, 0x1, 0x9}, {0x9, 0x2, 0x2, 0x19b, 0x5, 0x8001}, {0x7fe0000, 0x5, 0x2, 0xfffffffe, 0x9, 0x100}, {0x9, 0x23a0, 0xfffffff5, 0x2, 0xfffffff5, 0x5}, {0x31a4, 0x6bdda5e0, 0x4, 0x3ff, 0x1, 0x5}, {0x2, 0x9, 0x7, 0x1, 0x4, 0x3}, {0xfffffff6, 0x3, 0x2, 0x6, 0xffff1762, 0xdd}, {0x4, 0x2, 0x4, 0x8, 0x0, 0x3}, {0x1, 0x1ff, 0x8001, 0x0, 0x2e, 0x5}, {0x37c, 0x4, 0x7, 0x0, 0x300, 0x3}, {0x6, 0x0, 0x1, 0x4d2, 0x2, 0x6}, {0x80000001, 0x9, 0x8, 0x3, 0x7, 0x10000}, {0x9, 0x605, 0xffffffff, 0xf4a, 0x9, 0x4}, {0x8, 0x6, 0x0, 0x9, 0x8, 0x100}, {0x18, 0x6, 0x1, 0x5, 0x4, 0x8}, {0x8de, 0xfffffffb, 0x7fffffff, 0x2, 0xc49, 0xfffffff8}, {0x4, 0xe, 0xfffffc01, 0xfffffff8, 0x9db1, 0x7}, {0x8, 0x8, 0xd1, 0x9, 0xfffffffd, 0xfff}, {0x9, 0x8, 0x5, 0x80, 0x2, 0x401}, {0x1000, 0x7, 0xee, 0x9, 0x16, 0x2}, {0x4, 0x80000001, 0xc43, 0xca2, 0xfffffff8, 0x9}, {0x3, 0x9, 0x51, 0x9, 0x4, 0x6}, {0xd, 0xfffff77f, 0x100, 0xff, 0x8, 0x7ca7}, {0xacda, 0x81, 0xd10, 0x9, 0x7, 0x9f9}, {0xa, 0x100, 0xe52a482d, 0x5, 0x6, 0x1}, {0x29e2, 0x80000000, 0x1, 0x8, 0xfff, 0xd6}, {0x4, 0x8, 0x7, 0x3ff, 0xe, 0x7f}, {0xc7d, 0x6, 0x7, 0x6, 0x0, 0x5}, {0x0, 0xd, 0x9, 0x0, 0x9}, {0xc34a, 0x6, 0x1db, 0xff}, {0x7, 0x0, 0xffff92b0, 0x7, 0x5, 0x1}, {0x2, 0x401, 0x8, 0x7, 0x5, 0x3}, {0x10001, 0x5c9, 0x3, 0x8, 0x1, 0x8}, {0x1, 0x4, 0x0, 0x5, 0x9, 0x5}, {0x0, 0x1, 0x0, 0x1, 0x5, 0x873}, {0x10001, 0x4, 0x3, 0x28aea28f, 0x8f, 0x960}, {0x674, 0x4, 0x7, 0x2f6d158c, 0x9, 0x35}, {0x7f, 0x5, 0x5, 0x6, 0x2, 0x4}, {0x2, 0x0, 0x8, 0x2858fbb, 0x9179, 0x1}, {0x4, 0x1, 0x80000000, 0x57, 0x2a, 0x8}, {0x5, 0x79, 0x7fff, 0x6, 0x4, 0xfffff000}, {0x6, 0x3, 0x33c, 0x5, 0x4, 0x3}, {0x6, 0x9, 0x101, 0xbb15, 0x401, 0x3d8}, {0x5b, 0x0, 0x33, 0xb, 0x34, 0xff}, {0x5, 0x8, 0x5b, 0x401, 0x2, 0x5c}, {0x6, 0xfffffffd, 0x7, 0x0, 0xdeb, 0x80}, {0x87, 0x9, 0x9, 0x5, 0x3, 0x634}, {0x10001, 0x7fff, 0x0, 0x0, 0x14f4, 0x7}, {0x4, 0x3, 0x5b7, 0x4, 0x7e7f0037, 0x566a}, {0x1, 0x7f, 0x8, 0xdd5, 0xe35, 0xac}, {0x5, 0x6, 0x3cf, 0x3, 0x6, 0x400}, {0x7, 0x1, 0x26c00, 0x80000001, 0x5, 0x5}, {0x297791bf, 0x5, 0x9, 0x7, 0x0, 0x7}, {0x7, 0x5, 0xa, 0x4, 0x4, 0x986a}, {0x200, 0xee, 0x401, 0x6, 0x6, 0x6}, {0x4, 0x0, 0x5, 0x7, 0x7fffffff, 0x3}, {0x7, 0x10001, 0x10001, 0x86, 0x7, 0xfffffff7}, {0x3, 0x6, 0xcc1, 0x0, 0x2, 0x2}, {0x5, 0x3, 0x10001, 0x92, 0x0, 0x1}, {0x7, 0x2, 0xfffffff2, 0xffffffff, 0x2, 0x2}, {0x7fffffff, 0xa619, 0x81, 0x0, 0x100, 0x7}, {0x4, 0x8000, 0x52b, 0x8, 0x9241, 0x1}, {0x3, 0x9, 0x4, 0x80, 0x7fffffff, 0xfff}, {0x6, 0x1ff, 0x7, 0x1, 0xffffffff, 0x22944000}, {0x8, 0xc, 0xb, 0x3ff, 0x5, 0x3}, {0x0, 0x8, 0x7, 0x0, 0xfffffff8, 0x8}, {0xfffffc01, 0x6, 0x10000, 0xfffffe00, 0x3ff, 0x7ff}, {0xfae2, 0x6, 0x81, 0x0, 0x5, 0x3}, {0x9c, 0x6, 0x81, 0x9, 0x2, 0x5}, {0x3, 0x8, 0xaa97, 0x7, 0x7, 0xfffffffa}, {0x101, 0x3, 0x69, 0x1001, 0x0, 0x7}, {0x7d32fd1c, 0x3, 0xfffffffa, 0xfc12, 0x0, 0x3}, {0x1ff, 0x9, 0x6, 0xd581, 0x85, 0xc}, {0xffff, 0x7, 0x2, 0x6, 0x9, 0x7}, {0x6, 0x69dd, 0x0, 0x800, 0x20, 0x1}, {0x198, 0x0, 0x5, 0x4, 0x4e, 0xe}, {0x2, 0x400, 0x7, 0x6, 0x2, 0x8}, {0xa, 0x4, 0x81, 0xffffff53, 0x3, 0x10001}, {0x6, 0xf8f, 0x6, 0x7, 0x3, 0x51}, {0x8, 0xd7, 0x7cb, 0x1, 0xf, 0x6}, {0x80000001, 0x7, 0x0, 0x1, 0x8573, 0x78}, {0x8, 0x100, 0xa8c, 0x5, 0x4, 0xa}, {0x2, 0x2, 0xc, 0xfffffffc, 0x88, 0x1}, {0x7c, 0xfffffff7, 0xf, 0x4, 0xff, 0x8000}, {0xffff, 0x607, 0x400, 0x9, 0x1, 0x75}, {0xffff, 0x0, 0x5, 0x1, 0x5b, 0x7}, {0x6df, 0x1000, 0x101, 0x80, 0x7, 0x3}, {0x3, 0x3, 0x0, 0x38, 0x6, 0xe}, {0x4, 0x8, 0x6, 0x3}, {0x6, 0x6, 0x9, 0x10000000, 0x6, 0x1}, {0x4, 0x8, 0x8, 0x1, 0x6}, {0x2a6, 0x4053, 0x7f, 0x0, 0x9c6, 0x3}, {0x0, 0x400, 0x2, 0x800, 0x200, 0x7}, {0x7fff, 0x2, 0x2, 0x2, 0x8001, 0x80000001}, {0x8000, 0xbba0, 0x2, 0x2, 0x67, 0x40}, {0x5, 0x4, 0x6, 0xe8, 0x6, 0x800}, {0x6, 0xfffffffa, 0x4, 0x3b60, 0xbb, 0x14000000}, {0x9, 0x0, 0x4, 0x52e5, 0x3, 0xe}, {0x80000000, 0xffffffff, 0x2066, 0x9, 0x5, 0x9}, {0x6, 0x8, 0x7, 0x1000000, 0x6, 0x5743}, {0x8001, 0x7fff, 0x4, 0x71, 0x7f, 0x8}, {0xbd, 0x6, 0x252e, 0xb, 0x1000, 0x7}, {0xa170, 0x6, 0x80000001, 0x7, 0x10, 0xdd65}, {0x8, 0x8000, 0x1, 0x0, 0x5}, {0xfffffffd, 0x9, 0x5, 0x1, 0xe67, 0xfff}, {0x9, 0x2e3c, 0x8, 0x8001, 0x9, 0x7}, {0x100000, 0x9, 0x5, 0x0, 0x8, 0x9}, {0x9, 0x3, 0x3, 0x3, 0x9, 0x5}, {0x7, 0x3, 0x2, 0x0, 0x6ba, 0x1}, {0x9, 0xb, 0x0, 0x0, 0x9c, 0x7}, {0x7f, 0x8, 0x8, 0xeca3, 0x3, 0x4}, {0x101, 0x5, 0x7fffffff, 0x40, 0xf6c4, 0x4}, {0x7, 0x5, 0x7, 0x6, 0x2, 0x3}, {0xe0dd, 0x408, 0x7ff, 0x1, 0x5}, {0x2, 0x504, 0x6, 0x2, 0x3, 0x2}, {0x7, 0x5, 0x1, 0x30, 0x1, 0x80000000}, {0xcba, 0x3, 0xffffff00, 0x7, 0x8, 0x7}, {0x2, 0x9, 0xfffffffc, 0x9, 0x6, 0xfff}, {0x8000, 0xffe8, 0xffffffe7, 0x7fff, 0x8, 0xfff}, {0xb, 0x2, 0x7, 0x9e1, 0xfffffffe, 0x1}, {0x1, 0x2, 0x46, 0xd0d, 0xc, 0x8e9}, {0x192c, 0x5, 0x81, 0x6, 0x5, 0x80000000}, {0x2, 0x8, 0x4, 0x1, 0x6, 0x2}, {0x8, 0x3, 0xa, 0x80000001, 0x4, 0x6}, {0x7ff, 0x8, 0x0, 0x6, 0x5, 0xc}, {0x401, 0xd, 0x8, 0x3ff, 0x5}, {0x410237b4, 0x1, 0x7ff, 0x4, 0x8, 0x10000}, {0x5, 0x9, 0x5, 0x7, 0x1, 0x1}], [{0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0xb}, {0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x2}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x3}, {0x3}, {0x4}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x1}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x5}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x5}, {0x4}, {0x2}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {}, {0x6}, {0x5, 0x1}, {}, {0x5}, {0x1}, {0x3, 0x1}, {0x1eebfa374e9b39d1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {}, {0x5}, {0x3}, {0x3}, {0x6}, {0x2}, {}, {0x4}, {0x6}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4}]}}, @TCA_PEDIT_KEYS_EX={0xf4, 0x5, 0x0, 0x1, [{0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x4}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS={0xe38, 0x2, {{{0xfffffbff, 0x5, 0x5, 0x0, 0x1}, 0xf, 0x9, [{0x6, 0x8000, 0x6, 0x7fff, 0x1, 0xb}]}, [{0x6, 0x9, 0x8, 0x3, 0xa, 0x5}, {0x4, 0x2, 0x2, 0x8, 0x6, 0xfffffffd}, {0xfffffff9, 0x6, 0x4, 0x7, 0x7, 0x22}, {0xb, 0x1000, 0x1000, 0x400, 0x7, 0x23e8}, {0x10, 0xa6e, 0x1, 0x1, 0x5, 0x800}, {0xc, 0x3, 0xfffffffa, 0x101, 0x5, 0x2}, {0xfffffffa, 0x586, 0x8, 0x10001, 0x101, 0x80000000}, {0x7b5, 0x9, 0x3, 0x8001, 0xc, 0x7}, {0x20000000, 0x3, 0xbe, 0x800, 0x8, 0x6}, {0x4, 0x800, 0x2, 0x1, 0x5, 0x5}, {0x1, 0x4, 0x2, 0x3, 0x614c, 0x54}, {0x9, 0x7c14, 0x13, 0x1, 0x2, 0x80000001}, {0xf, 0x2d2, 0x80000001, 0x6, 0x9, 0x2}, {0x7, 0x7b, 0x2, 0x1, 0x200}, {0xb, 0x81, 0x1f7c, 0x3, 0x9, 0xfa9}, {0x8, 0x5a0, 0x29, 0x9, 0x6, 0x80}, {0x2, 0x5cbc, 0x400, 0x2, 0x3, 0x7}, {0x400, 0x1ff, 0x6, 0x10000, 0xe000, 0x1534}, {0x800, 0x200, 0x5, 0x4, 0x6b, 0xf}, {0xd, 0x6, 0xbc8a, 0x7, 0x1, 0x2}, {0x7f, 0xc, 0x1, 0x515a, 0x6, 0x9}, {0x7, 0xe0, 0xfd, 0xe672, 0x4, 0x9}, {0x9, 0x5, 0xbb7d, 0x8000}, {0x9, 0x87f, 0x9, 0x9}, {0x1, 0x20000000, 0x5, 0x3, 0x1000000, 0x7c}, {0x2, 0xd, 0x7, 0x10, 0x4, 0x4}, {0x7, 0x0, 0x83b, 0x6, 0x8, 0x6}, {0x1, 0x5, 0xef, 0xfb90, 0x2, 0xff}, {0x4, 0x7, 0x8, 0x0, 0x1, 0xfffffffe}, {0x7c5, 0xa02, 0x2, 0x1, 0x4, 0x9f}, {0x7fffffff, 0x5, 0x0, 0x1, 0x8, 0xffff9e42}, {0x8001, 0xfffffff7, 0xa, 0x7fff, 0x800, 0x800}, {0x5, 0x9, 0xb41, 0x5, 0x9}, {0x8, 0x4, 0x7, 0x2, 0x5cc, 0x1}, {0x9, 0x8, 0x84, 0x5, 0x3, 0x594}, {0x2, 0x7, 0x1, 0x1, 0x40, 0x1}, {0x5, 0x3b, 0x6, 0xc133, 0x0, 0x18b3}, {0x2, 0x3, 0x6, 0x10000, 0xfffffff9, 0x7}, {0x2, 0xcb8, 0x1, 0x81, 0xd, 0x4}, {0x6, 0x99c8, 0x4, 0x7, 0x3, 0xb91}, {0x43d7, 0x3be, 0x2, 0x78, 0xffffffff, 0xf}, {0x5, 0x9, 0x9, 0x6b, 0x7f, 0x20000000}, {0x7, 0x2, 0xfffffbff, 0x9, 0x7, 0x2}, {0x96a2, 0x5, 0x8, 0xf, 0x5, 0x4}, {0x4, 0x5, 0x4, 0x0, 0x8, 0x8}, {0x200, 0x435d, 0x400, 0x81, 0x9, 0x79}, {0x0, 0x8, 0x4, 0x6, 0x9, 0x8001}, {0x1ff, 0x5, 0x9, 0x2, 0x7fff, 0x9161843a}, {0x4d, 0x7f, 0x2, 0x3, 0x0, 0x200}, {0xf, 0x3, 0x3, 0x2, 0x6, 0x10001}, {0x7, 0x8, 0xe728, 0xacb, 0x400, 0x8}, {0xfffffffa, 0x1, 0x80000001, 0x217d, 0x7, 0x599}, {0x3, 0x10, 0x0, 0xa5, 0x400}, {0x2, 0x9a, 0x6, 0x3, 0x4, 0x7}, {0xb, 0xfffffff3, 0xbd, 0xb1, 0x5, 0x4}, {0x823, 0x0, 0xce, 0xfffffff7, 0x1, 0x9}, {0x3, 0x8, 0x6, 0x4ac, 0x6, 0x4}, {0x400, 0x7, 0xfffffffe, 0x6, 0x0, 0xfffffffc}, {0x3, 0x2, 0x8, 0xffff, 0x8}, {0x0, 0x0, 0x2000000, 0x9, 0xa, 0x8}, {0x800, 0x8, 0x2, 0x121, 0x1000, 0xfffffff7}, {0x81, 0x92, 0x4, 0x6, 0xffff02d0, 0x7}, {0x100, 0x0, 0xb, 0x2, 0x53f}, {0x8, 0x1bf, 0xe5b, 0x2, 0x4, 0x4}, {0x400, 0x9, 0x6, 0x7, 0x2, 0x7fff}, {0x2, 0xa, 0x9, 0x7, 0x3}, {0x4, 0x1, 0x3, 0xf7, 0x4, 0x1ff}, {0x6, 0x0, 0x41, 0x5, 0xfffff800, 0x2}, {0x3, 0xd, 0x5, 0x5, 0x6, 0x5}, {0x5, 0x3, 0x4, 0x9de7, 0x10, 0xfff}, {0x9, 0xb04, 0x4, 0xf4, 0x3, 0x9}, {0x4, 0xfffffffa, 0x8, 0x5, 0x4, 0xf}, {0x9, 0x1, 0x7fff, 0x0, 0x8, 0x2}, {0x4, 0x6, 0x8, 0x3, 0x2, 0x1}, {0x6, 0x7fffffff, 0x7, 0xc5, 0x7, 0x2}, {0x8, 0xffffffa0, 0x8, 0x10001, 0x8, 0x800}, {0x71d, 0x3, 0x3, 0x8, 0x401, 0x2}, {0x9, 0x2, 0x2, 0xc, 0x3, 0x400}, {0x2f78, 0x50, 0xb0, 0x6e8, 0x5d, 0x8}, {0x8, 0x7, 0x8, 0x7, 0x40, 0x1000}, {0x3, 0xf68, 0x0, 0x2, 0x8001}, {0x0, 0x0, 0x1ff, 0x9f8, 0x4, 0xffffffff}, {0x7fffffff, 0xf9f, 0x4, 0x9, 0x5, 0xa5}, {0x32521048, 0xa, 0xfffffffd, 0x1, 0x4, 0x1}, {0x2000, 0x4ff, 0xb7b, 0xe02, 0x9, 0x2}, {0x8, 0x5, 0x5, 0x7, 0x0, 0x7}, {0x1, 0xc, 0x2, 0x43, 0xfffffff9, 0x40}, {0xb, 0xb, 0xd, 0x5, 0x15, 0x1}, {0x2, 0xb9, 0x8, 0x3, 0x1ea2, 0xe4b}, {0x0, 0x3, 0x9, 0x0, 0x7, 0xf3}, {0x0, 0x2, 0x0, 0x5, 0x81, 0x6}, {0x7, 0x8, 0x6, 0x91f2, 0x8001, 0xe7c4}, {0x69f6836a, 0x4, 0xffff, 0xf108, 0x4, 0x1}, {0x7, 0xff, 0x4, 0x5, 0x7ff, 0x5}, {0xfff, 0xd3a, 0x7, 0x0, 0x32c2, 0x3}, {0x0, 0x7, 0x1, 0xff, 0x3, 0x1ec7}, {0x2, 0x3, 0x7, 0x10001, 0x5, 0xb7c3}, {0x1, 0x5, 0x1, 0xfe7f, 0x2, 0x8}, {0x5, 0x4, 0x7, 0x1, 0x0, 0x4}, {0xfffffff6, 0x3d, 0x6, 0x6eaf, 0x37f, 0x9}, {0x4, 0x0, 0x1000, 0x2, 0x5, 0xfffff328}, {0xfffffffc, 0x5, 0x3, 0x8, 0x3, 0x8}, {0x6, 0x0, 0x1, 0x7, 0x8, 0x1}, {0x7, 0x9, 0xa7, 0x2, 0x0, 0xf}, {0x5, 0x7, 0x3, 0x2, 0x2}, {0x8, 0x4, 0x2, 0x5, 0xe27, 0x4}, {0x5, 0x800, 0x3ee1, 0x3, 0x5, 0x8}, {0x40, 0x7, 0xf, 0x0, 0x1, 0x4}, {0x0, 0x4000000, 0x1, 0x1, 0x28, 0x5}, {0x10001, 0x6, 0x4, 0xec, 0x3, 0xd}, {0x0, 0x9, 0x1, 0x3, 0x2f78, 0x7}, {0x7, 0x400, 0x8, 0x7ff, 0x0, 0x8}, {0x1, 0x1, 0x100008, 0x6, 0x1, 0x9}, {0x4, 0xa91, 0x6, 0xb, 0xf6, 0x7}, {0x8, 0x40, 0x82a, 0x64f, 0x2, 0x100}, {0x8, 0x5c, 0x6, 0x9, 0xfffffffd, 0xa3}, {0x8, 0x3, 0x401, 0x678, 0x8, 0xff}, {0x1, 0x4, 0x9, 0x0, 0x2b, 0x4}, {0xfff, 0x4, 0x8, 0x3, 0x2, 0x7}, {0x1, 0x9, 0x401, 0x6, 0x101, 0x1}, {0x793, 0x8, 0x33, 0x8000, 0x6909efb1, 0x95}, {0xfffffff7, 0xd0b, 0x5, 0x661800, 0x0, 0x1}, {0x1000, 0xffff, 0x4, 0x6055, 0x8, 0x2}, {0x2, 0xb, 0x7, 0x7, 0xe, 0x8000}, {0x10, 0xfffffff9, 0x2, 0x7, 0x80000001, 0x3}, {0xa, 0xfffffffb, 0x8, 0x7, 0x1, 0x3}, {0xfffff57d, 0x7f, 0xb, 0x5, 0x9, 0x49df}, {0x2, 0x4, 0x4, 0xe, 0x14b2, 0x6}], [{0x2}, {0x1}, {0x8, 0x1}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x5}, {0x2}, {}, {0x4}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x5}, {}, {0x2}, {0x5}, {0x4}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x7}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {}, {0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x7}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x5}, {0x2}, {0x1}, {0x5}, {0x5, 0x1}, {}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0xf}, {}, {0x1}, {0x4}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x5}, {0x2}, {0x5}, {0x2}, {0x2, 0x1}, {0x4}, {0x2}, {0x2}, {0x0, 0x1}, {}, {0x2}, {0x7, 0x1}, {0x6, 0x1}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x4}, {0x5, 0x1}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x2138}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0x11) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) pipe2(&(0x7f00000000c0), 0x80000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x5, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x9) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x8, 0x2, 0x0, 0x200, 0xa, "2b35740e4f4e6c04704020dd9636bce158a556"}) executing program 2: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x279, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8924, 0x0) sendmmsg(r4, &(0x7f0000007fc0), 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000000000)={0x1, 0x1, 0x2, 0x9, 0x4}) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./my_sysfs\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./my_sysfs\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000600)='./my_dev\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./my_dev\x00', &(0x7f0000000800)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000900)='./my_configfs/dlm/cluster1\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./my_configfs/dlm/cluster1/cluster_name\x00', 0x2, 0x0) write(r6, &(0x7f0000000b00)='cluster1\x00', 0x9) mkdir(&(0x7f0000000d00)='./my_configfs/dlm/cluster1/comms/1\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./my_configfs/dlm/cluster1/comms/1/local\x00', 0x2, 0x0) write(r7, 0x0, 0x0) executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x50424752, 0x0, 0x0, 0x0, 0x1, 0xfeedcafe, 0x3, 0x0, 0x0, 0x6}}) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xff00) executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2a, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xa0}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter\x00') syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) capset(0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x7, 0x3000001, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x390, 0x0, 0x5802, 0x294, 0x1d0, 0x294, 0x2c0, 0x378, 0x378, 0x2c0, 0x378, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, [0xffffff00, 0xff000000, 0xffffff00, 0xff000000], [0xffffffff, 0x0, 0xffffffff, 0xffffff00], 'wg2\x00', 'ip6gre0\x00', {}, {0xff}, 0x62, 0x8, 0x3, 0x4a}, 0x0, 0xa8, 0x1d0, 0x52020000}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xe5f6, 'system_u:object_r:etc_aliases_t:s0\x00'}}}, {{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffff00, 0xffffff00, 0x0, 0x52f1fc93a83a0023], [0xff000000, 0x0, 0xff000000, 0xffffffff], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {0xff}, 0x8, 0x81, 0x40681f015a70b21b}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private=0xa010100, 'erspan0\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x240000c8}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xd50, 0xfffffffffffffee0, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x7, 0xfff3}, {0xb, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x201, 0x0) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x40082, 0x509cb86664327f4) write$dsp(r2, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) executing program 3: socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000400)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x80000001, 0x3e}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000580)=""/226, 0xe2, 0x1, 0x17}, @fda={0x66646185, 0x9, 0x1, 0xb4}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0}) executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200", 0x4}], 0x1}, 0x4005) executing program 3: socket$unix(0x1, 0x2, 0x0) landlock_create_ruleset(&(0x7f0000000140)={0x10895, 0x3, 0x2}, 0x18, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x185042, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000a80)={0x0, 0xabba, 0x400, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f00000006c0)=0x0, &(0x7f0000000580)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}}, 0x20}}, 0x8000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x3c00, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10008003, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x20419, 0xfffffffe, 0x21}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x1, 0x366, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x24c, 0x0, r6}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[], 0x0}, 0x94) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x128242, 0x0) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=r1], 0x3c}}, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x30, r4, 0x1, 0x70bd2c, 0xffe, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0xdc) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000080)=0x1) write(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) unshare(0x40000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r5, &(0x7f00000000c0)='1 1\x00', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dbg\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dbg\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dbg/netdevsim/netdevsim1/hwstats/l3/enable_ifindex\x00', 0x1, 0x0) write(r6, &(0x7f00000001c0)='2\x00', 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="240000005f00050000000000000000000000000002000000000000000500020001000000", 0x24}], 0x1}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/ptp/ptp0/max_vclocks\x00', 0x2, 0x41) bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000204)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000208)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000214)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000220)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000002c0)={0x2, 0xfa}, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/serio/devices/serio2/drvctl\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='psmouse\x00', 0x8) executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8924, 0x0) sendmmsg(r4, &(0x7f0000007fc0), 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000000000)={0x1, 0x1, 0x2, 0x9, 0x4}) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./my_sysfs\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./my_sysfs\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000600)='./my_dev\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./my_dev\x00', &(0x7f0000000800)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000900)='./my_configfs/dlm/cluster1\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./my_configfs/dlm/cluster1/cluster_name\x00', 0x2, 0x0) write(r6, &(0x7f0000000b00)='cluster1\x00', 0x9) mkdir(&(0x7f0000000d00)='./my_configfs/dlm/cluster1/comms/1\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./my_configfs/dlm/cluster1/comms/1/local\x00', 0x2, 0x0) write(r7, 0x0, 0x0) executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x58, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x64}]}}}]}, 0x58}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000200), 0xc, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'syzkaller0\x00'}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x64}]}}}]}, 0x58}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bond0/bonding/mode\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='0\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/class/net/bond0/bonding/arp_interval\x00', 0x1, 0x0) write(r2, &(0x7f0000000480)='100\x00', 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000004c0)={'bond0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', 0x1}) nanosleep(&(0x7f0000000540)={0x1}, 0x0) executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='devtmpfs\x00', &(0x7f0000000080)='./dev_mnt\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000200000040990a01000000010200010902190001010080320904000001ff00000007058103400001"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev_mnt/ttyUSB0\x00', 0x802, 0x0) syz_usb_ep_write(r0, 0x81, 0x10, &(0x7f0000000400)='0123456789abcdef') nanosleep(&(0x7f0000000300)={0x1}, 0x0) read(r1, &(0x7f0000000500)=""/64, 0x40) syz_usb_ep_write(r0, 0x81, 0x10, &(0x7f0000000400)='0123456789abcdef') nanosleep(&(0x7f0000000300)={0x1}, 0x0) read(r1, &(0x7f0000000500)=""/64, 0x40) close(r1) program did not crash replaying the whole log did not cause a kernel crash single: executing 1 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$userio-write$USERIO_CMD_SET_PORT_TYPE-write$USERIO_CMD_REGISTER-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-mkdirat-mount-openat-write detailed listing: executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000204)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000208)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000214)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000220)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000002c0)={0x2, 0xfa}, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/serio/devices/serio2/drvctl\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='psmouse\x00', 0x8) program did not crash single: failed to extract reproducer bisect: bisecting 30 programs with base timeout 6m0s testing program (duration=6m7s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [13, 13, 13, 29, 28, 12, 13, 13, 12, 13, 13, 13, 13, 12, 13, 13, 30, 13, 13, 13, 12, 13, 13, 13, 13, 28, 13, 30, 13, 12] detailed listing: executing program 0: socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x20a00, 0x0) ioctl$PTP_EXTTS_REQUEST2(r3, 0x43403d0e, 0x0) executing program 1: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x400}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) msgget(0x0, 0x11) lstat(0x0, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) pipe2(0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x10000, 0x1) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0x9, 0x5fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0xc}, {}, {0xf, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8, 0x3, 0x7, 0x6, 0x0, 0x6, 0x40, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f9, 0xd6, 0x4, 0x8, 0x7, 0xfffffffd, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x3, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0x3, 0x1, 0x180, 0x5f09973, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x80000007, 0x80000001, 0x0, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x400009, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x0, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7f, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x40101, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000002, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x7ffffffc, 0x0, 0x200, 0x8, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa81, 0x80000040, 0x2, 0x7, 0x7, 0x108, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x4006, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0x2, 0xd4c, 0x0, 0x0, 0x2, 0x1000, 0x8, 0x3, 0x0, 0x800, 0x2, 0x88, 0x7ff, 0x1, 0xd, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0xe, 0x8, 0x42ba, 0x4, 0x1009, 0x3, 0x76, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xffb, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0x4, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x2, 0x9, 0x9a6, 0x245, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x8, 0x7, 0x5, 0x2, 0x7b, 0xfffffefe, 0x6, 0x6, 0xc, 0x401000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x4, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0x13}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000010) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x128242, 0x0) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=r1], 0x3c}}, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000"], &(0x7f0000000140)='GPL\x00'}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x30, r4, 0x1, 0x70bd2c, 0xffe, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0xdc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000080)=0x1) write(r5, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) unshare(0x40000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r7, &(0x7f00000000c0)='1 1\x00', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dbg\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dbg\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dbg/netdevsim/netdevsim1/hwstats/l3/enable_ifindex\x00', 0x1, 0x0) write(r8, &(0x7f00000001c0)='2\x00', 0x1) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="240000005f00050000000000000000000000000002000000000000000500020001000000", 0x24}], 0x1}, 0x0) sendmsg$sock(r9, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/ptp/ptp0/max_vclocks\x00', 0x2, 0x41) bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x128242, 0x0) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=r1], 0x3c}}, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x30, r4, 0x1, 0x70bd2c, 0xffe, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0xdc) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000080)=0x1) write(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) unshare(0x40000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r5, &(0x7f00000000c0)='1 1\x00', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dbg\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dbg\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dbg/netdevsim/netdevsim1/hwstats/l3/enable_ifindex\x00', 0x1, 0x0) write(r6, &(0x7f00000001c0)='2\x00', 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="240000005f00050000000000000000000000000002000000000000000500020001000000", 0x24}], 0x1}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/ptp/ptp0/max_vclocks\x00', 0x2, 0x41) bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2c2, 0xca) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4090, &(0x7f00000010c0)=0xffa) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x1000000000000008, 0x2, 0x4000000000000e52, 0x1, 0xf, 0x1043, 0x200000000006, 0x10, 0x1, 0xfffffffffffffffe, 0x100000000, 0x9ca6, 0x1, 0x8000000000005, 0x5c], 0x8080000, 0x42590}) ioctl$KVM_RUN(r3, 0xae80, 0x0) executing program 4: semop(0x0, &(0x7f0000000200), 0x53) unshare(0x4c020c00) r0 = socket$nl_generic(0x10, 0x3, 0x10) accept(r0, 0x0, &(0x7f0000000140)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x80800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r4) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x98, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x59, 0xe, {{{}, {}, @device_a, @device_a, @from_mac}, 0x8, @default, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @val={0x5, 0x3, {0x7, 0xc9, 0x6}}, @void, @void, @void, @val={0x2d, 0x1a, {0x2ff, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_BEACON_TAIL={0x8, 0xf, [@supported_rates={0x1, 0x2, [{0x0, 0x1}, {0x18, 0x1}]}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x98}}, 0x20000014) socket$netlink(0x10, 0x3, 0x0) executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) recvmmsg(r0, &(0x7f0000008580)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1}, 0x4e}], 0x2, 0x1100, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_emit_vhci(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x9801) preadv(r1, &(0x7f0000000580)=[{&(0x7f0000000000)=""/42, 0x2a}], 0x1, 0x7, 0x800) executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000100)="64f080620c00d9f40f20d86635200000000f22d86766c7442400009000006766c7442402000800006766c744240600000000670f011c2466b8000000000f23d00f21f86635200000040f23f866b9800000c00f326635004000000f3066b9800000c00f326635002000000f300f090fc79ce6ff0ff95500", 0x77}], 0x1, 0x30, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b800000100265d7aeabbc900bbc9000f30300f272d9d53bf0000c4b9e16dc30101220f01c3", 0xfffffffffffffdab}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) executing program 0: mkdir(&(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdir(0x0, 0x1ff) close(0xffffffffffffffff) symlink(&(0x7f0000000380)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x100, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x1, 0x0) write(r1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/os_desc/qw_sign\x00', 0x1, 0x0) symlink(&(0x7f0000000580)='./config/usb_gadget/g1/configs/c.1\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') read$FUSE(r2, 0x0, 0x0) executing program 0: syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000001080)=[@uexit={0x0, 0x18, 0x800}], 0x18}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="00082dbd"], 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0xa4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x3, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x7f, 0x7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) mount(&(0x7f0000000240)=@filename='none\x00', &(0x7f0000000280)='./debug\x00', &(0x7f00000002c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)='gr_udc\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/platform/drivers/gr_udc/bind\x00', 0x1, 0x0) write(r1, &(0x7f00000003c0)='pcspkr\x00', 0x7) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/usb/pcspkr/gr_udc_state\x00', 0x0, 0x0) read(r2, &(0x7f0000000600)=""/1024, 0x400) close(r2) executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000004500)=@deltfilter={0x2138, 0x2d, 0x400, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe0}, {0xa, 0x3}, {0x6, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x7}}, @filter_kind_options=@f_basic={{0xa}, {0x2100, 0x2, [@TCA_BASIC_ACT={0x1cc, 0x3, [@m_csum={0x108, 0x5, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0xffffff75, 0x8, 0x44, 0x10000}, 0x4f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x94, 0x1, 0xffffffffffffffff, 0x25027dcc, 0xf}, 0x4e}}]}, {0xa1, 0x6, "a65466d155423b8b5c6eecd904bd21b671369fe2a52d8d56dd8cd96cdf6eefe59e0f44b674364b059b7d2020ad54f9597f816654dc72723ebba599657a042ee9a699fc1208705147a8d68cbd6bf6af72760ee1e00665f87bfa4cecccaf6c8e22aaab8c1e0e603e3eae600596482436bd715f0caa8c3fc079664a70469d2b1e8fec2c076bac77d0f87ddd8ef75f785e2c43a0d6e12f106ba76480e31abb"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0x48, 0x9, 0x0, 0x0, {{0xf}, {0x14, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}]}, {0x5, 0x6, '|'}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ctinfo={0x78, 0x1b, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x456b}, @TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x32ad, 0x4, 0x8, 0x7}}]}, {0x29, 0x6, "cca6d64a9ee07471d810117d70950bf00d0e4e6fb8a44ba03fe155c8087719eb2c893bb1a3"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_BASIC_ACT={0x1f30, 0x3, [@m_skbedit={0x60, 0x0, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffff}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x40}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x9}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xd, 0x10}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_nat={0x48, 0x12, 0x0, 0x0, {{0x8}, {0x4}, {0x1d, 0x6, "17a16fd19550b83696f9163949364946a374312d113f4d7d56"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_ife={0xf0, 0x19, 0x0, 0x0, {{0x8}, {0x74, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x1, 0xfffffffa, 0x5}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0xea7, 0xfffffffffffffff9, 0xa, 0xc}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_SMAC={0xa}, @TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x8}, @IFE_META_PRIO={0x4, 0x3, @void}]}]}, {0x55, 0x6, "1ee868ef8aeffbdb4688e12d0164ecc0e94b9f3e051e0acade5f1f68473c6e507642a9e35cb16c8cced3d5efcd3200997b16d681cf1f1b88606574afd4edc89b1f2038806c7019ab79065db83371c7c3c4"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_pedit={0x1d94, 0x8, 0x0, 0x0, {{0xa}, {0x1d68, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0xffff, 0x80000001, 0x10000000, 0x9, 0x1}, 0xff, 0x8, [{0x38952188, 0xc, 0x800, 0x1, 0x5, 0x4}]}, [{0x9, 0x8, 0x10000, 0x6, 0x1, 0x9}, {0x9, 0x2, 0x2, 0x19b, 0x5, 0x8001}, {0x7fe0000, 0x5, 0x2, 0xfffffffe, 0x9, 0x100}, {0x9, 0x23a0, 0xfffffff5, 0x2, 0xfffffff5, 0x5}, {0x31a4, 0x6bdda5e0, 0x4, 0x3ff, 0x1, 0x5}, {0x2, 0x9, 0x7, 0x1, 0x4, 0x3}, {0xfffffff6, 0x3, 0x2, 0x6, 0xffff1762, 0xdd}, {0x4, 0x2, 0x4, 0x8, 0x0, 0x3}, {0x1, 0x1ff, 0x8001, 0x0, 0x2e, 0x5}, {0x37c, 0x4, 0x7, 0x0, 0x300, 0x3}, {0x6, 0x0, 0x1, 0x4d2, 0x2, 0x6}, {0x80000001, 0x9, 0x8, 0x3, 0x7, 0x10000}, {0x9, 0x605, 0xffffffff, 0xf4a, 0x9, 0x4}, {0x8, 0x6, 0x0, 0x9, 0x8, 0x100}, {0x18, 0x6, 0x1, 0x5, 0x4, 0x8}, {0x8de, 0xfffffffb, 0x7fffffff, 0x2, 0xc49, 0xfffffff8}, {0x4, 0xe, 0xfffffc01, 0xfffffff8, 0x9db1, 0x7}, {0x8, 0x8, 0xd1, 0x9, 0xfffffffd, 0xfff}, {0x9, 0x8, 0x5, 0x80, 0x2, 0x401}, {0x1000, 0x7, 0xee, 0x9, 0x16, 0x2}, {0x4, 0x80000001, 0xc43, 0xca2, 0xfffffff8, 0x9}, {0x3, 0x9, 0x51, 0x9, 0x4, 0x6}, {0xd, 0xfffff77f, 0x100, 0xff, 0x8, 0x7ca7}, {0xacda, 0x81, 0xd10, 0x9, 0x7, 0x9f9}, {0xa, 0x100, 0xe52a482d, 0x5, 0x6, 0x1}, {0x29e2, 0x80000000, 0x1, 0x8, 0xfff, 0xd6}, {0x4, 0x8, 0x7, 0x3ff, 0xe, 0x7f}, {0xc7d, 0x6, 0x7, 0x6, 0x0, 0x5}, {0x0, 0xd, 0x9, 0x0, 0x9}, {0xc34a, 0x6, 0x1db, 0xff}, {0x7, 0x0, 0xffff92b0, 0x7, 0x5, 0x1}, {0x2, 0x401, 0x8, 0x7, 0x5, 0x3}, {0x10001, 0x5c9, 0x3, 0x8, 0x1, 0x8}, {0x1, 0x4, 0x0, 0x5, 0x9, 0x5}, {0x0, 0x1, 0x0, 0x1, 0x5, 0x873}, {0x10001, 0x4, 0x3, 0x28aea28f, 0x8f, 0x960}, {0x674, 0x4, 0x7, 0x2f6d158c, 0x9, 0x35}, {0x7f, 0x5, 0x5, 0x6, 0x2, 0x4}, {0x2, 0x0, 0x8, 0x2858fbb, 0x9179, 0x1}, {0x4, 0x1, 0x80000000, 0x57, 0x2a, 0x8}, {0x5, 0x79, 0x7fff, 0x6, 0x4, 0xfffff000}, {0x6, 0x3, 0x33c, 0x5, 0x4, 0x3}, {0x6, 0x9, 0x101, 0xbb15, 0x401, 0x3d8}, {0x5b, 0x0, 0x33, 0xb, 0x34, 0xff}, {0x5, 0x8, 0x5b, 0x401, 0x2, 0x5c}, {0x6, 0xfffffffd, 0x7, 0x0, 0xdeb, 0x80}, {0x87, 0x9, 0x9, 0x5, 0x3, 0x634}, {0x10001, 0x7fff, 0x0, 0x0, 0x14f4, 0x7}, {0x4, 0x3, 0x5b7, 0x4, 0x7e7f0037, 0x566a}, {0x1, 0x7f, 0x8, 0xdd5, 0xe35, 0xac}, {0x5, 0x6, 0x3cf, 0x3, 0x6, 0x400}, {0x7, 0x1, 0x26c00, 0x80000001, 0x5, 0x5}, {0x297791bf, 0x5, 0x9, 0x7, 0x0, 0x7}, {0x7, 0x5, 0xa, 0x4, 0x4, 0x986a}, {0x200, 0xee, 0x401, 0x6, 0x6, 0x6}, {0x4, 0x0, 0x5, 0x7, 0x7fffffff, 0x3}, {0x7, 0x10001, 0x10001, 0x86, 0x7, 0xfffffff7}, {0x3, 0x6, 0xcc1, 0x0, 0x2, 0x2}, {0x5, 0x3, 0x10001, 0x92, 0x0, 0x1}, {0x7, 0x2, 0xfffffff2, 0xffffffff, 0x2, 0x2}, {0x7fffffff, 0xa619, 0x81, 0x0, 0x100, 0x7}, {0x4, 0x8000, 0x52b, 0x8, 0x9241, 0x1}, {0x3, 0x9, 0x4, 0x80, 0x7fffffff, 0xfff}, {0x6, 0x1ff, 0x7, 0x1, 0xffffffff, 0x22944000}, {0x8, 0xc, 0xb, 0x3ff, 0x5, 0x3}, {0x0, 0x8, 0x7, 0x0, 0xfffffff8, 0x8}, {0xfffffc01, 0x6, 0x10000, 0xfffffe00, 0x3ff, 0x7ff}, {0xfae2, 0x6, 0x81, 0x0, 0x5, 0x3}, {0x9c, 0x6, 0x81, 0x9, 0x2, 0x5}, {0x3, 0x8, 0xaa97, 0x7, 0x7, 0xfffffffa}, {0x101, 0x3, 0x69, 0x1001, 0x0, 0x7}, {0x7d32fd1c, 0x3, 0xfffffffa, 0xfc12, 0x0, 0x3}, {0x1ff, 0x9, 0x6, 0xd581, 0x85, 0xc}, {0xffff, 0x7, 0x2, 0x6, 0x9, 0x7}, {0x6, 0x69dd, 0x0, 0x800, 0x20, 0x1}, {0x198, 0x0, 0x5, 0x4, 0x4e, 0xe}, {0x2, 0x400, 0x7, 0x6, 0x2, 0x8}, {0xa, 0x4, 0x81, 0xffffff53, 0x3, 0x10001}, {0x6, 0xf8f, 0x6, 0x7, 0x3, 0x51}, {0x8, 0xd7, 0x7cb, 0x1, 0xf, 0x6}, {0x80000001, 0x7, 0x0, 0x1, 0x8573, 0x78}, {0x8, 0x100, 0xa8c, 0x5, 0x4, 0xa}, {0x2, 0x2, 0xc, 0xfffffffc, 0x88, 0x1}, {0x7c, 0xfffffff7, 0xf, 0x4, 0xff, 0x8000}, {0xffff, 0x607, 0x400, 0x9, 0x1, 0x75}, {0xffff, 0x0, 0x5, 0x1, 0x5b, 0x7}, {0x6df, 0x1000, 0x101, 0x80, 0x7, 0x3}, {0x3, 0x3, 0x0, 0x38, 0x6, 0xe}, {0x4, 0x8, 0x6, 0x3}, {0x6, 0x6, 0x9, 0x10000000, 0x6, 0x1}, {0x4, 0x8, 0x8, 0x1, 0x6}, {0x2a6, 0x4053, 0x7f, 0x0, 0x9c6, 0x3}, {0x0, 0x400, 0x2, 0x800, 0x200, 0x7}, {0x7fff, 0x2, 0x2, 0x2, 0x8001, 0x80000001}, {0x8000, 0xbba0, 0x2, 0x2, 0x67, 0x40}, {0x5, 0x4, 0x6, 0xe8, 0x6, 0x800}, {0x6, 0xfffffffa, 0x4, 0x3b60, 0xbb, 0x14000000}, {0x9, 0x0, 0x4, 0x52e5, 0x3, 0xe}, {0x80000000, 0xffffffff, 0x2066, 0x9, 0x5, 0x9}, {0x6, 0x8, 0x7, 0x1000000, 0x6, 0x5743}, {0x8001, 0x7fff, 0x4, 0x71, 0x7f, 0x8}, {0xbd, 0x6, 0x252e, 0xb, 0x1000, 0x7}, {0xa170, 0x6, 0x80000001, 0x7, 0x10, 0xdd65}, {0x8, 0x8000, 0x1, 0x0, 0x5}, {0xfffffffd, 0x9, 0x5, 0x1, 0xe67, 0xfff}, {0x9, 0x2e3c, 0x8, 0x8001, 0x9, 0x7}, {0x100000, 0x9, 0x5, 0x0, 0x8, 0x9}, {0x9, 0x3, 0x3, 0x3, 0x9, 0x5}, {0x7, 0x3, 0x2, 0x0, 0x6ba, 0x1}, {0x9, 0xb, 0x0, 0x0, 0x9c, 0x7}, {0x7f, 0x8, 0x8, 0xeca3, 0x3, 0x4}, {0x101, 0x5, 0x7fffffff, 0x40, 0xf6c4, 0x4}, {0x7, 0x5, 0x7, 0x6, 0x2, 0x3}, {0xe0dd, 0x408, 0x7ff, 0x1, 0x5}, {0x2, 0x504, 0x6, 0x2, 0x3, 0x2}, {0x7, 0x5, 0x1, 0x30, 0x1, 0x80000000}, {0xcba, 0x3, 0xffffff00, 0x7, 0x8, 0x7}, {0x2, 0x9, 0xfffffffc, 0x9, 0x6, 0xfff}, {0x8000, 0xffe8, 0xffffffe7, 0x7fff, 0x8, 0xfff}, {0xb, 0x2, 0x7, 0x9e1, 0xfffffffe, 0x1}, {0x1, 0x2, 0x46, 0xd0d, 0xc, 0x8e9}, {0x192c, 0x5, 0x81, 0x6, 0x5, 0x80000000}, {0x2, 0x8, 0x4, 0x1, 0x6, 0x2}, {0x8, 0x3, 0xa, 0x80000001, 0x4, 0x6}, {0x7ff, 0x8, 0x0, 0x6, 0x5, 0xc}, {0x401, 0xd, 0x8, 0x3ff, 0x5}, {0x410237b4, 0x1, 0x7ff, 0x4, 0x8, 0x10000}, {0x5, 0x9, 0x5, 0x7, 0x1, 0x1}], [{0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0xb}, {0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x2}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x3}, {0x3}, {0x4}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x1}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x5}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x5}, {0x4}, {0x2}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {}, {0x6}, {0x5, 0x1}, {}, {0x5}, {0x1}, {0x3, 0x1}, {0x1eebfa374e9b39d1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {}, {0x5}, {0x3}, {0x3}, {0x6}, {0x2}, {}, {0x4}, {0x6}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4}]}}, @TCA_PEDIT_KEYS_EX={0xf4, 0x5, 0x0, 0x1, [{0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x4}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS={0xe38, 0x2, {{{0xfffffbff, 0x5, 0x5, 0x0, 0x1}, 0xf, 0x9, [{0x6, 0x8000, 0x6, 0x7fff, 0x1, 0xb}]}, [{0x6, 0x9, 0x8, 0x3, 0xa, 0x5}, {0x4, 0x2, 0x2, 0x8, 0x6, 0xfffffffd}, {0xfffffff9, 0x6, 0x4, 0x7, 0x7, 0x22}, {0xb, 0x1000, 0x1000, 0x400, 0x7, 0x23e8}, {0x10, 0xa6e, 0x1, 0x1, 0x5, 0x800}, {0xc, 0x3, 0xfffffffa, 0x101, 0x5, 0x2}, {0xfffffffa, 0x586, 0x8, 0x10001, 0x101, 0x80000000}, {0x7b5, 0x9, 0x3, 0x8001, 0xc, 0x7}, {0x20000000, 0x3, 0xbe, 0x800, 0x8, 0x6}, {0x4, 0x800, 0x2, 0x1, 0x5, 0x5}, {0x1, 0x4, 0x2, 0x3, 0x614c, 0x54}, {0x9, 0x7c14, 0x13, 0x1, 0x2, 0x80000001}, {0xf, 0x2d2, 0x80000001, 0x6, 0x9, 0x2}, {0x7, 0x7b, 0x2, 0x1, 0x200}, {0xb, 0x81, 0x1f7c, 0x3, 0x9, 0xfa9}, {0x8, 0x5a0, 0x29, 0x9, 0x6, 0x80}, {0x2, 0x5cbc, 0x400, 0x2, 0x3, 0x7}, {0x400, 0x1ff, 0x6, 0x10000, 0xe000, 0x1534}, {0x800, 0x200, 0x5, 0x4, 0x6b, 0xf}, {0xd, 0x6, 0xbc8a, 0x7, 0x1, 0x2}, {0x7f, 0xc, 0x1, 0x515a, 0x6, 0x9}, {0x7, 0xe0, 0xfd, 0xe672, 0x4, 0x9}, {0x9, 0x5, 0xbb7d, 0x8000}, {0x9, 0x87f, 0x9, 0x9}, {0x1, 0x20000000, 0x5, 0x3, 0x1000000, 0x7c}, {0x2, 0xd, 0x7, 0x10, 0x4, 0x4}, {0x7, 0x0, 0x83b, 0x6, 0x8, 0x6}, {0x1, 0x5, 0xef, 0xfb90, 0x2, 0xff}, {0x4, 0x7, 0x8, 0x0, 0x1, 0xfffffffe}, {0x7c5, 0xa02, 0x2, 0x1, 0x4, 0x9f}, {0x7fffffff, 0x5, 0x0, 0x1, 0x8, 0xffff9e42}, {0x8001, 0xfffffff7, 0xa, 0x7fff, 0x800, 0x800}, {0x5, 0x9, 0xb41, 0x5, 0x9}, {0x8, 0x4, 0x7, 0x2, 0x5cc, 0x1}, {0x9, 0x8, 0x84, 0x5, 0x3, 0x594}, {0x2, 0x7, 0x1, 0x1, 0x40, 0x1}, {0x5, 0x3b, 0x6, 0xc133, 0x0, 0x18b3}, {0x2, 0x3, 0x6, 0x10000, 0xfffffff9, 0x7}, {0x2, 0xcb8, 0x1, 0x81, 0xd, 0x4}, {0x6, 0x99c8, 0x4, 0x7, 0x3, 0xb91}, {0x43d7, 0x3be, 0x2, 0x78, 0xffffffff, 0xf}, {0x5, 0x9, 0x9, 0x6b, 0x7f, 0x20000000}, {0x7, 0x2, 0xfffffbff, 0x9, 0x7, 0x2}, {0x96a2, 0x5, 0x8, 0xf, 0x5, 0x4}, {0x4, 0x5, 0x4, 0x0, 0x8, 0x8}, {0x200, 0x435d, 0x400, 0x81, 0x9, 0x79}, {0x0, 0x8, 0x4, 0x6, 0x9, 0x8001}, {0x1ff, 0x5, 0x9, 0x2, 0x7fff, 0x9161843a}, {0x4d, 0x7f, 0x2, 0x3, 0x0, 0x200}, {0xf, 0x3, 0x3, 0x2, 0x6, 0x10001}, {0x7, 0x8, 0xe728, 0xacb, 0x400, 0x8}, {0xfffffffa, 0x1, 0x80000001, 0x217d, 0x7, 0x599}, {0x3, 0x10, 0x0, 0xa5, 0x400}, {0x2, 0x9a, 0x6, 0x3, 0x4, 0x7}, {0xb, 0xfffffff3, 0xbd, 0xb1, 0x5, 0x4}, {0x823, 0x0, 0xce, 0xfffffff7, 0x1, 0x9}, {0x3, 0x8, 0x6, 0x4ac, 0x6, 0x4}, {0x400, 0x7, 0xfffffffe, 0x6, 0x0, 0xfffffffc}, {0x3, 0x2, 0x8, 0xffff, 0x8}, {0x0, 0x0, 0x2000000, 0x9, 0xa, 0x8}, {0x800, 0x8, 0x2, 0x121, 0x1000, 0xfffffff7}, {0x81, 0x92, 0x4, 0x6, 0xffff02d0, 0x7}, {0x100, 0x0, 0xb, 0x2, 0x53f}, {0x8, 0x1bf, 0xe5b, 0x2, 0x4, 0x4}, {0x400, 0x9, 0x6, 0x7, 0x2, 0x7fff}, {0x2, 0xa, 0x9, 0x7, 0x3}, {0x4, 0x1, 0x3, 0xf7, 0x4, 0x1ff}, {0x6, 0x0, 0x41, 0x5, 0xfffff800, 0x2}, {0x3, 0xd, 0x5, 0x5, 0x6, 0x5}, {0x5, 0x3, 0x4, 0x9de7, 0x10, 0xfff}, {0x9, 0xb04, 0x4, 0xf4, 0x3, 0x9}, {0x4, 0xfffffffa, 0x8, 0x5, 0x4, 0xf}, {0x9, 0x1, 0x7fff, 0x0, 0x8, 0x2}, {0x4, 0x6, 0x8, 0x3, 0x2, 0x1}, {0x6, 0x7fffffff, 0x7, 0xc5, 0x7, 0x2}, {0x8, 0xffffffa0, 0x8, 0x10001, 0x8, 0x800}, {0x71d, 0x3, 0x3, 0x8, 0x401, 0x2}, {0x9, 0x2, 0x2, 0xc, 0x3, 0x400}, {0x2f78, 0x50, 0xb0, 0x6e8, 0x5d, 0x8}, {0x8, 0x7, 0x8, 0x7, 0x40, 0x1000}, {0x3, 0xf68, 0x0, 0x2, 0x8001}, {0x0, 0x0, 0x1ff, 0x9f8, 0x4, 0xffffffff}, {0x7fffffff, 0xf9f, 0x4, 0x9, 0x5, 0xa5}, {0x32521048, 0xa, 0xfffffffd, 0x1, 0x4, 0x1}, {0x2000, 0x4ff, 0xb7b, 0xe02, 0x9, 0x2}, {0x8, 0x5, 0x5, 0x7, 0x0, 0x7}, {0x1, 0xc, 0x2, 0x43, 0xfffffff9, 0x40}, {0xb, 0xb, 0xd, 0x5, 0x15, 0x1}, {0x2, 0xb9, 0x8, 0x3, 0x1ea2, 0xe4b}, {0x0, 0x3, 0x9, 0x0, 0x7, 0xf3}, {0x0, 0x2, 0x0, 0x5, 0x81, 0x6}, {0x7, 0x8, 0x6, 0x91f2, 0x8001, 0xe7c4}, {0x69f6836a, 0x4, 0xffff, 0xf108, 0x4, 0x1}, {0x7, 0xff, 0x4, 0x5, 0x7ff, 0x5}, {0xfff, 0xd3a, 0x7, 0x0, 0x32c2, 0x3}, {0x0, 0x7, 0x1, 0xff, 0x3, 0x1ec7}, {0x2, 0x3, 0x7, 0x10001, 0x5, 0xb7c3}, {0x1, 0x5, 0x1, 0xfe7f, 0x2, 0x8}, {0x5, 0x4, 0x7, 0x1, 0x0, 0x4}, {0xfffffff6, 0x3d, 0x6, 0x6eaf, 0x37f, 0x9}, {0x4, 0x0, 0x1000, 0x2, 0x5, 0xfffff328}, {0xfffffffc, 0x5, 0x3, 0x8, 0x3, 0x8}, {0x6, 0x0, 0x1, 0x7, 0x8, 0x1}, {0x7, 0x9, 0xa7, 0x2, 0x0, 0xf}, {0x5, 0x7, 0x3, 0x2, 0x2}, {0x8, 0x4, 0x2, 0x5, 0xe27, 0x4}, {0x5, 0x800, 0x3ee1, 0x3, 0x5, 0x8}, {0x40, 0x7, 0xf, 0x0, 0x1, 0x4}, {0x0, 0x4000000, 0x1, 0x1, 0x28, 0x5}, {0x10001, 0x6, 0x4, 0xec, 0x3, 0xd}, {0x0, 0x9, 0x1, 0x3, 0x2f78, 0x7}, {0x7, 0x400, 0x8, 0x7ff, 0x0, 0x8}, {0x1, 0x1, 0x100008, 0x6, 0x1, 0x9}, {0x4, 0xa91, 0x6, 0xb, 0xf6, 0x7}, {0x8, 0x40, 0x82a, 0x64f, 0x2, 0x100}, {0x8, 0x5c, 0x6, 0x9, 0xfffffffd, 0xa3}, {0x8, 0x3, 0x401, 0x678, 0x8, 0xff}, {0x1, 0x4, 0x9, 0x0, 0x2b, 0x4}, {0xfff, 0x4, 0x8, 0x3, 0x2, 0x7}, {0x1, 0x9, 0x401, 0x6, 0x101, 0x1}, {0x793, 0x8, 0x33, 0x8000, 0x6909efb1, 0x95}, {0xfffffff7, 0xd0b, 0x5, 0x661800, 0x0, 0x1}, {0x1000, 0xffff, 0x4, 0x6055, 0x8, 0x2}, {0x2, 0xb, 0x7, 0x7, 0xe, 0x8000}, {0x10, 0xfffffff9, 0x2, 0x7, 0x80000001, 0x3}, {0xa, 0xfffffffb, 0x8, 0x7, 0x1, 0x3}, {0xfffff57d, 0x7f, 0xb, 0x5, 0x9, 0x49df}, {0x2, 0x4, 0x4, 0xe, 0x14b2, 0x6}], [{0x2}, {0x1}, {0x8, 0x1}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x5}, {0x2}, {}, {0x4}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x5}, {}, {0x2}, {0x5}, {0x4}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x7}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {}, {0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x7}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x5}, {0x2}, {0x1}, {0x5}, {0x5, 0x1}, {}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0xf}, {}, {0x1}, {0x4}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x5}, {0x2}, {0x5}, {0x2}, {0x2, 0x1}, {0x4}, {0x2}, {0x2}, {0x0, 0x1}, {}, {0x2}, {0x7, 0x1}, {0x6, 0x1}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x4}, {0x5, 0x1}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x2138}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0x11) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) pipe2(&(0x7f00000000c0), 0x80000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x5, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x9) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x8, 0x2, 0x0, 0x200, 0xa, "2b35740e4f4e6c04704020dd9636bce158a556"}) executing program 2: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x279, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8924, 0x0) sendmmsg(r4, &(0x7f0000007fc0), 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000000000)={0x1, 0x1, 0x2, 0x9, 0x4}) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./my_sysfs\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./my_sysfs\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000600)='./my_dev\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./my_dev\x00', &(0x7f0000000800)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000900)='./my_configfs/dlm/cluster1\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./my_configfs/dlm/cluster1/cluster_name\x00', 0x2, 0x0) write(r6, &(0x7f0000000b00)='cluster1\x00', 0x9) mkdir(&(0x7f0000000d00)='./my_configfs/dlm/cluster1/comms/1\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./my_configfs/dlm/cluster1/comms/1/local\x00', 0x2, 0x0) write(r7, 0x0, 0x0) executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x50424752, 0x0, 0x0, 0x0, 0x1, 0xfeedcafe, 0x3, 0x0, 0x0, 0x6}}) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xff00) executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2a, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xa0}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter\x00') syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) capset(0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x7, 0x3000001, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x390, 0x0, 0x5802, 0x294, 0x1d0, 0x294, 0x2c0, 0x378, 0x378, 0x2c0, 0x378, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, [0xffffff00, 0xff000000, 0xffffff00, 0xff000000], [0xffffffff, 0x0, 0xffffffff, 0xffffff00], 'wg2\x00', 'ip6gre0\x00', {}, {0xff}, 0x62, 0x8, 0x3, 0x4a}, 0x0, 0xa8, 0x1d0, 0x52020000}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xe5f6, 'system_u:object_r:etc_aliases_t:s0\x00'}}}, {{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffff00, 0xffffff00, 0x0, 0x52f1fc93a83a0023], [0xff000000, 0x0, 0xff000000, 0xffffffff], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {0xff}, 0x8, 0x81, 0x40681f015a70b21b}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private=0xa010100, 'erspan0\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x240000c8}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xd50, 0xfffffffffffffee0, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x7, 0xfff3}, {0xb, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x201, 0x0) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x40082, 0x509cb86664327f4) write$dsp(r2, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) executing program 3: socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000400)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x80000001, 0x3e}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000580)=""/226, 0xe2, 0x1, 0x17}, @fda={0x66646185, 0x9, 0x1, 0xb4}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0}) executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200", 0x4}], 0x1}, 0x4005) executing program 3: socket$unix(0x1, 0x2, 0x0) landlock_create_ruleset(&(0x7f0000000140)={0x10895, 0x3, 0x2}, 0x18, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x185042, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000a80)={0x0, 0xabba, 0x400, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f00000006c0)=0x0, &(0x7f0000000580)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}}, 0x20}}, 0x8000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x3c00, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10008003, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x20419, 0xfffffffe, 0x21}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x1, 0x366, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x24c, 0x0, r6}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[], 0x0}, 0x94) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x128242, 0x0) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=r1], 0x3c}}, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x30, r4, 0x1, 0x70bd2c, 0xffe, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0xdc) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000080)=0x1) write(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) unshare(0x40000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r5, &(0x7f00000000c0)='1 1\x00', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dbg\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dbg\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dbg/netdevsim/netdevsim1/hwstats/l3/enable_ifindex\x00', 0x1, 0x0) write(r6, &(0x7f00000001c0)='2\x00', 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="240000005f00050000000000000000000000000002000000000000000500020001000000", 0x24}], 0x1}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/ptp/ptp0/max_vclocks\x00', 0x2, 0x41) bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000204)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000208)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000214)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000220)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000002c0)={0x2, 0xfa}, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/serio/devices/serio2/drvctl\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='psmouse\x00', 0x8) executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8924, 0x0) sendmmsg(r4, &(0x7f0000007fc0), 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000000000)={0x1, 0x1, 0x2, 0x9, 0x4}) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./my_sysfs\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./my_sysfs\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000600)='./my_dev\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./my_dev\x00', &(0x7f0000000800)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000900)='./my_configfs/dlm/cluster1\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./my_configfs/dlm/cluster1/cluster_name\x00', 0x2, 0x0) write(r6, &(0x7f0000000b00)='cluster1\x00', 0x9) mkdir(&(0x7f0000000d00)='./my_configfs/dlm/cluster1/comms/1\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./my_configfs/dlm/cluster1/comms/1/local\x00', 0x2, 0x0) write(r7, 0x0, 0x0) executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x58, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x64}]}}}]}, 0x58}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000200), 0xc, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'syzkaller0\x00'}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x64}]}}}]}, 0x58}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bond0/bonding/mode\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='0\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/class/net/bond0/bonding/arp_interval\x00', 0x1, 0x0) write(r2, &(0x7f0000000480)='100\x00', 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000004c0)={'bond0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', 0x1}) nanosleep(&(0x7f0000000540)={0x1}, 0x0) executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='devtmpfs\x00', &(0x7f0000000080)='./dev_mnt\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000200000040990a01000000010200010902190001010080320904000001ff00000007058103400001"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev_mnt/ttyUSB0\x00', 0x802, 0x0) syz_usb_ep_write(r0, 0x81, 0x10, &(0x7f0000000400)='0123456789abcdef') nanosleep(&(0x7f0000000300)={0x1}, 0x0) read(r1, &(0x7f0000000500)=""/64, 0x40) syz_usb_ep_write(r0, 0x81, 0x10, &(0x7f0000000400)='0123456789abcdef') nanosleep(&(0x7f0000000300)={0x1}, 0x0) read(r1, &(0x7f0000000500)=""/64, 0x40) close(r1) program crashed: KASAN: slab-use-after-free Read in atkbd_set_repeat_rate bisect: bisecting 30 programs bisect: split chunks (needed=false): <29> bisect: split chunk #0 of len 29 into 3 parts bisect: testing without sub-chunk 1/3 testing program (duration=6m5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [13, 13, 13, 12, 13, 13, 30, 13, 13, 13, 12, 13, 13, 13, 13, 28, 13, 30, 13, 12] detailed listing: executing program 0: mkdir(&(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdir(0x0, 0x1ff) close(0xffffffffffffffff) symlink(&(0x7f0000000380)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x100, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x1, 0x0) write(r1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/os_desc/qw_sign\x00', 0x1, 0x0) symlink(&(0x7f0000000580)='./config/usb_gadget/g1/configs/c.1\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') read$FUSE(r2, 0x0, 0x0) executing program 0: syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000001080)=[@uexit={0x0, 0x18, 0x800}], 0x18}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="00082dbd"], 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0xa4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x3, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x7f, 0x7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) mount(&(0x7f0000000240)=@filename='none\x00', &(0x7f0000000280)='./debug\x00', &(0x7f00000002c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)='gr_udc\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/platform/drivers/gr_udc/bind\x00', 0x1, 0x0) write(r1, &(0x7f00000003c0)='pcspkr\x00', 0x7) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/usb/pcspkr/gr_udc_state\x00', 0x0, 0x0) read(r2, &(0x7f0000000600)=""/1024, 0x400) close(r2) executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000004500)=@deltfilter={0x2138, 0x2d, 0x400, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe0}, {0xa, 0x3}, {0x6, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x7}}, @filter_kind_options=@f_basic={{0xa}, {0x2100, 0x2, [@TCA_BASIC_ACT={0x1cc, 0x3, [@m_csum={0x108, 0x5, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0xffffff75, 0x8, 0x44, 0x10000}, 0x4f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x94, 0x1, 0xffffffffffffffff, 0x25027dcc, 0xf}, 0x4e}}]}, {0xa1, 0x6, "a65466d155423b8b5c6eecd904bd21b671369fe2a52d8d56dd8cd96cdf6eefe59e0f44b674364b059b7d2020ad54f9597f816654dc72723ebba599657a042ee9a699fc1208705147a8d68cbd6bf6af72760ee1e00665f87bfa4cecccaf6c8e22aaab8c1e0e603e3eae600596482436bd715f0caa8c3fc079664a70469d2b1e8fec2c076bac77d0f87ddd8ef75f785e2c43a0d6e12f106ba76480e31abb"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0x48, 0x9, 0x0, 0x0, {{0xf}, {0x14, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}]}, {0x5, 0x6, '|'}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ctinfo={0x78, 0x1b, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x456b}, @TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x32ad, 0x4, 0x8, 0x7}}]}, {0x29, 0x6, "cca6d64a9ee07471d810117d70950bf00d0e4e6fb8a44ba03fe155c8087719eb2c893bb1a3"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_BASIC_ACT={0x1f30, 0x3, [@m_skbedit={0x60, 0x0, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffff}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x40}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x9}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xd, 0x10}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_nat={0x48, 0x12, 0x0, 0x0, {{0x8}, {0x4}, {0x1d, 0x6, "17a16fd19550b83696f9163949364946a374312d113f4d7d56"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_ife={0xf0, 0x19, 0x0, 0x0, {{0x8}, {0x74, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x1, 0xfffffffa, 0x5}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0xea7, 0xfffffffffffffff9, 0xa, 0xc}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_SMAC={0xa}, @TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x8}, @IFE_META_PRIO={0x4, 0x3, @void}]}]}, {0x55, 0x6, "1ee868ef8aeffbdb4688e12d0164ecc0e94b9f3e051e0acade5f1f68473c6e507642a9e35cb16c8cced3d5efcd3200997b16d681cf1f1b88606574afd4edc89b1f2038806c7019ab79065db83371c7c3c4"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_pedit={0x1d94, 0x8, 0x0, 0x0, {{0xa}, {0x1d68, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0xffff, 0x80000001, 0x10000000, 0x9, 0x1}, 0xff, 0x8, [{0x38952188, 0xc, 0x800, 0x1, 0x5, 0x4}]}, [{0x9, 0x8, 0x10000, 0x6, 0x1, 0x9}, {0x9, 0x2, 0x2, 0x19b, 0x5, 0x8001}, {0x7fe0000, 0x5, 0x2, 0xfffffffe, 0x9, 0x100}, {0x9, 0x23a0, 0xfffffff5, 0x2, 0xfffffff5, 0x5}, {0x31a4, 0x6bdda5e0, 0x4, 0x3ff, 0x1, 0x5}, {0x2, 0x9, 0x7, 0x1, 0x4, 0x3}, {0xfffffff6, 0x3, 0x2, 0x6, 0xffff1762, 0xdd}, {0x4, 0x2, 0x4, 0x8, 0x0, 0x3}, {0x1, 0x1ff, 0x8001, 0x0, 0x2e, 0x5}, {0x37c, 0x4, 0x7, 0x0, 0x300, 0x3}, {0x6, 0x0, 0x1, 0x4d2, 0x2, 0x6}, {0x80000001, 0x9, 0x8, 0x3, 0x7, 0x10000}, {0x9, 0x605, 0xffffffff, 0xf4a, 0x9, 0x4}, {0x8, 0x6, 0x0, 0x9, 0x8, 0x100}, {0x18, 0x6, 0x1, 0x5, 0x4, 0x8}, {0x8de, 0xfffffffb, 0x7fffffff, 0x2, 0xc49, 0xfffffff8}, {0x4, 0xe, 0xfffffc01, 0xfffffff8, 0x9db1, 0x7}, {0x8, 0x8, 0xd1, 0x9, 0xfffffffd, 0xfff}, {0x9, 0x8, 0x5, 0x80, 0x2, 0x401}, {0x1000, 0x7, 0xee, 0x9, 0x16, 0x2}, {0x4, 0x80000001, 0xc43, 0xca2, 0xfffffff8, 0x9}, {0x3, 0x9, 0x51, 0x9, 0x4, 0x6}, {0xd, 0xfffff77f, 0x100, 0xff, 0x8, 0x7ca7}, {0xacda, 0x81, 0xd10, 0x9, 0x7, 0x9f9}, {0xa, 0x100, 0xe52a482d, 0x5, 0x6, 0x1}, {0x29e2, 0x80000000, 0x1, 0x8, 0xfff, 0xd6}, {0x4, 0x8, 0x7, 0x3ff, 0xe, 0x7f}, {0xc7d, 0x6, 0x7, 0x6, 0x0, 0x5}, {0x0, 0xd, 0x9, 0x0, 0x9}, {0xc34a, 0x6, 0x1db, 0xff}, {0x7, 0x0, 0xffff92b0, 0x7, 0x5, 0x1}, {0x2, 0x401, 0x8, 0x7, 0x5, 0x3}, {0x10001, 0x5c9, 0x3, 0x8, 0x1, 0x8}, {0x1, 0x4, 0x0, 0x5, 0x9, 0x5}, {0x0, 0x1, 0x0, 0x1, 0x5, 0x873}, {0x10001, 0x4, 0x3, 0x28aea28f, 0x8f, 0x960}, {0x674, 0x4, 0x7, 0x2f6d158c, 0x9, 0x35}, {0x7f, 0x5, 0x5, 0x6, 0x2, 0x4}, {0x2, 0x0, 0x8, 0x2858fbb, 0x9179, 0x1}, {0x4, 0x1, 0x80000000, 0x57, 0x2a, 0x8}, {0x5, 0x79, 0x7fff, 0x6, 0x4, 0xfffff000}, {0x6, 0x3, 0x33c, 0x5, 0x4, 0x3}, {0x6, 0x9, 0x101, 0xbb15, 0x401, 0x3d8}, {0x5b, 0x0, 0x33, 0xb, 0x34, 0xff}, {0x5, 0x8, 0x5b, 0x401, 0x2, 0x5c}, {0x6, 0xfffffffd, 0x7, 0x0, 0xdeb, 0x80}, {0x87, 0x9, 0x9, 0x5, 0x3, 0x634}, {0x10001, 0x7fff, 0x0, 0x0, 0x14f4, 0x7}, {0x4, 0x3, 0x5b7, 0x4, 0x7e7f0037, 0x566a}, {0x1, 0x7f, 0x8, 0xdd5, 0xe35, 0xac}, {0x5, 0x6, 0x3cf, 0x3, 0x6, 0x400}, {0x7, 0x1, 0x26c00, 0x80000001, 0x5, 0x5}, {0x297791bf, 0x5, 0x9, 0x7, 0x0, 0x7}, {0x7, 0x5, 0xa, 0x4, 0x4, 0x986a}, {0x200, 0xee, 0x401, 0x6, 0x6, 0x6}, {0x4, 0x0, 0x5, 0x7, 0x7fffffff, 0x3}, {0x7, 0x10001, 0x10001, 0x86, 0x7, 0xfffffff7}, {0x3, 0x6, 0xcc1, 0x0, 0x2, 0x2}, {0x5, 0x3, 0x10001, 0x92, 0x0, 0x1}, {0x7, 0x2, 0xfffffff2, 0xffffffff, 0x2, 0x2}, {0x7fffffff, 0xa619, 0x81, 0x0, 0x100, 0x7}, {0x4, 0x8000, 0x52b, 0x8, 0x9241, 0x1}, {0x3, 0x9, 0x4, 0x80, 0x7fffffff, 0xfff}, {0x6, 0x1ff, 0x7, 0x1, 0xffffffff, 0x22944000}, {0x8, 0xc, 0xb, 0x3ff, 0x5, 0x3}, {0x0, 0x8, 0x7, 0x0, 0xfffffff8, 0x8}, {0xfffffc01, 0x6, 0x10000, 0xfffffe00, 0x3ff, 0x7ff}, {0xfae2, 0x6, 0x81, 0x0, 0x5, 0x3}, {0x9c, 0x6, 0x81, 0x9, 0x2, 0x5}, {0x3, 0x8, 0xaa97, 0x7, 0x7, 0xfffffffa}, {0x101, 0x3, 0x69, 0x1001, 0x0, 0x7}, {0x7d32fd1c, 0x3, 0xfffffffa, 0xfc12, 0x0, 0x3}, {0x1ff, 0x9, 0x6, 0xd581, 0x85, 0xc}, {0xffff, 0x7, 0x2, 0x6, 0x9, 0x7}, {0x6, 0x69dd, 0x0, 0x800, 0x20, 0x1}, {0x198, 0x0, 0x5, 0x4, 0x4e, 0xe}, {0x2, 0x400, 0x7, 0x6, 0x2, 0x8}, {0xa, 0x4, 0x81, 0xffffff53, 0x3, 0x10001}, {0x6, 0xf8f, 0x6, 0x7, 0x3, 0x51}, {0x8, 0xd7, 0x7cb, 0x1, 0xf, 0x6}, {0x80000001, 0x7, 0x0, 0x1, 0x8573, 0x78}, {0x8, 0x100, 0xa8c, 0x5, 0x4, 0xa}, {0x2, 0x2, 0xc, 0xfffffffc, 0x88, 0x1}, {0x7c, 0xfffffff7, 0xf, 0x4, 0xff, 0x8000}, {0xffff, 0x607, 0x400, 0x9, 0x1, 0x75}, {0xffff, 0x0, 0x5, 0x1, 0x5b, 0x7}, {0x6df, 0x1000, 0x101, 0x80, 0x7, 0x3}, {0x3, 0x3, 0x0, 0x38, 0x6, 0xe}, {0x4, 0x8, 0x6, 0x3}, {0x6, 0x6, 0x9, 0x10000000, 0x6, 0x1}, {0x4, 0x8, 0x8, 0x1, 0x6}, {0x2a6, 0x4053, 0x7f, 0x0, 0x9c6, 0x3}, {0x0, 0x400, 0x2, 0x800, 0x200, 0x7}, {0x7fff, 0x2, 0x2, 0x2, 0x8001, 0x80000001}, {0x8000, 0xbba0, 0x2, 0x2, 0x67, 0x40}, {0x5, 0x4, 0x6, 0xe8, 0x6, 0x800}, {0x6, 0xfffffffa, 0x4, 0x3b60, 0xbb, 0x14000000}, {0x9, 0x0, 0x4, 0x52e5, 0x3, 0xe}, {0x80000000, 0xffffffff, 0x2066, 0x9, 0x5, 0x9}, {0x6, 0x8, 0x7, 0x1000000, 0x6, 0x5743}, {0x8001, 0x7fff, 0x4, 0x71, 0x7f, 0x8}, {0xbd, 0x6, 0x252e, 0xb, 0x1000, 0x7}, {0xa170, 0x6, 0x80000001, 0x7, 0x10, 0xdd65}, {0x8, 0x8000, 0x1, 0x0, 0x5}, {0xfffffffd, 0x9, 0x5, 0x1, 0xe67, 0xfff}, {0x9, 0x2e3c, 0x8, 0x8001, 0x9, 0x7}, {0x100000, 0x9, 0x5, 0x0, 0x8, 0x9}, {0x9, 0x3, 0x3, 0x3, 0x9, 0x5}, {0x7, 0x3, 0x2, 0x0, 0x6ba, 0x1}, {0x9, 0xb, 0x0, 0x0, 0x9c, 0x7}, {0x7f, 0x8, 0x8, 0xeca3, 0x3, 0x4}, {0x101, 0x5, 0x7fffffff, 0x40, 0xf6c4, 0x4}, {0x7, 0x5, 0x7, 0x6, 0x2, 0x3}, {0xe0dd, 0x408, 0x7ff, 0x1, 0x5}, {0x2, 0x504, 0x6, 0x2, 0x3, 0x2}, {0x7, 0x5, 0x1, 0x30, 0x1, 0x80000000}, {0xcba, 0x3, 0xffffff00, 0x7, 0x8, 0x7}, {0x2, 0x9, 0xfffffffc, 0x9, 0x6, 0xfff}, {0x8000, 0xffe8, 0xffffffe7, 0x7fff, 0x8, 0xfff}, {0xb, 0x2, 0x7, 0x9e1, 0xfffffffe, 0x1}, {0x1, 0x2, 0x46, 0xd0d, 0xc, 0x8e9}, {0x192c, 0x5, 0x81, 0x6, 0x5, 0x80000000}, {0x2, 0x8, 0x4, 0x1, 0x6, 0x2}, {0x8, 0x3, 0xa, 0x80000001, 0x4, 0x6}, {0x7ff, 0x8, 0x0, 0x6, 0x5, 0xc}, {0x401, 0xd, 0x8, 0x3ff, 0x5}, {0x410237b4, 0x1, 0x7ff, 0x4, 0x8, 0x10000}, {0x5, 0x9, 0x5, 0x7, 0x1, 0x1}], [{0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0xb}, {0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x2}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x3}, {0x3}, {0x4}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x1}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x5}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x5}, {0x4}, {0x2}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {}, {0x6}, {0x5, 0x1}, {}, {0x5}, {0x1}, {0x3, 0x1}, {0x1eebfa374e9b39d1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {}, {0x5}, {0x3}, {0x3}, {0x6}, {0x2}, {}, {0x4}, {0x6}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4}]}}, @TCA_PEDIT_KEYS_EX={0xf4, 0x5, 0x0, 0x1, [{0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x4}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS={0xe38, 0x2, {{{0xfffffbff, 0x5, 0x5, 0x0, 0x1}, 0xf, 0x9, [{0x6, 0x8000, 0x6, 0x7fff, 0x1, 0xb}]}, [{0x6, 0x9, 0x8, 0x3, 0xa, 0x5}, {0x4, 0x2, 0x2, 0x8, 0x6, 0xfffffffd}, {0xfffffff9, 0x6, 0x4, 0x7, 0x7, 0x22}, {0xb, 0x1000, 0x1000, 0x400, 0x7, 0x23e8}, {0x10, 0xa6e, 0x1, 0x1, 0x5, 0x800}, {0xc, 0x3, 0xfffffffa, 0x101, 0x5, 0x2}, {0xfffffffa, 0x586, 0x8, 0x10001, 0x101, 0x80000000}, {0x7b5, 0x9, 0x3, 0x8001, 0xc, 0x7}, {0x20000000, 0x3, 0xbe, 0x800, 0x8, 0x6}, {0x4, 0x800, 0x2, 0x1, 0x5, 0x5}, {0x1, 0x4, 0x2, 0x3, 0x614c, 0x54}, {0x9, 0x7c14, 0x13, 0x1, 0x2, 0x80000001}, {0xf, 0x2d2, 0x80000001, 0x6, 0x9, 0x2}, {0x7, 0x7b, 0x2, 0x1, 0x200}, {0xb, 0x81, 0x1f7c, 0x3, 0x9, 0xfa9}, {0x8, 0x5a0, 0x29, 0x9, 0x6, 0x80}, {0x2, 0x5cbc, 0x400, 0x2, 0x3, 0x7}, {0x400, 0x1ff, 0x6, 0x10000, 0xe000, 0x1534}, {0x800, 0x200, 0x5, 0x4, 0x6b, 0xf}, {0xd, 0x6, 0xbc8a, 0x7, 0x1, 0x2}, {0x7f, 0xc, 0x1, 0x515a, 0x6, 0x9}, {0x7, 0xe0, 0xfd, 0xe672, 0x4, 0x9}, {0x9, 0x5, 0xbb7d, 0x8000}, {0x9, 0x87f, 0x9, 0x9}, {0x1, 0x20000000, 0x5, 0x3, 0x1000000, 0x7c}, {0x2, 0xd, 0x7, 0x10, 0x4, 0x4}, {0x7, 0x0, 0x83b, 0x6, 0x8, 0x6}, {0x1, 0x5, 0xef, 0xfb90, 0x2, 0xff}, {0x4, 0x7, 0x8, 0x0, 0x1, 0xfffffffe}, {0x7c5, 0xa02, 0x2, 0x1, 0x4, 0x9f}, {0x7fffffff, 0x5, 0x0, 0x1, 0x8, 0xffff9e42}, {0x8001, 0xfffffff7, 0xa, 0x7fff, 0x800, 0x800}, {0x5, 0x9, 0xb41, 0x5, 0x9}, {0x8, 0x4, 0x7, 0x2, 0x5cc, 0x1}, {0x9, 0x8, 0x84, 0x5, 0x3, 0x594}, {0x2, 0x7, 0x1, 0x1, 0x40, 0x1}, {0x5, 0x3b, 0x6, 0xc133, 0x0, 0x18b3}, {0x2, 0x3, 0x6, 0x10000, 0xfffffff9, 0x7}, {0x2, 0xcb8, 0x1, 0x81, 0xd, 0x4}, {0x6, 0x99c8, 0x4, 0x7, 0x3, 0xb91}, {0x43d7, 0x3be, 0x2, 0x78, 0xffffffff, 0xf}, {0x5, 0x9, 0x9, 0x6b, 0x7f, 0x20000000}, {0x7, 0x2, 0xfffffbff, 0x9, 0x7, 0x2}, {0x96a2, 0x5, 0x8, 0xf, 0x5, 0x4}, {0x4, 0x5, 0x4, 0x0, 0x8, 0x8}, {0x200, 0x435d, 0x400, 0x81, 0x9, 0x79}, {0x0, 0x8, 0x4, 0x6, 0x9, 0x8001}, {0x1ff, 0x5, 0x9, 0x2, 0x7fff, 0x9161843a}, {0x4d, 0x7f, 0x2, 0x3, 0x0, 0x200}, {0xf, 0x3, 0x3, 0x2, 0x6, 0x10001}, {0x7, 0x8, 0xe728, 0xacb, 0x400, 0x8}, {0xfffffffa, 0x1, 0x80000001, 0x217d, 0x7, 0x599}, {0x3, 0x10, 0x0, 0xa5, 0x400}, {0x2, 0x9a, 0x6, 0x3, 0x4, 0x7}, {0xb, 0xfffffff3, 0xbd, 0xb1, 0x5, 0x4}, {0x823, 0x0, 0xce, 0xfffffff7, 0x1, 0x9}, {0x3, 0x8, 0x6, 0x4ac, 0x6, 0x4}, {0x400, 0x7, 0xfffffffe, 0x6, 0x0, 0xfffffffc}, {0x3, 0x2, 0x8, 0xffff, 0x8}, {0x0, 0x0, 0x2000000, 0x9, 0xa, 0x8}, {0x800, 0x8, 0x2, 0x121, 0x1000, 0xfffffff7}, {0x81, 0x92, 0x4, 0x6, 0xffff02d0, 0x7}, {0x100, 0x0, 0xb, 0x2, 0x53f}, {0x8, 0x1bf, 0xe5b, 0x2, 0x4, 0x4}, {0x400, 0x9, 0x6, 0x7, 0x2, 0x7fff}, {0x2, 0xa, 0x9, 0x7, 0x3}, {0x4, 0x1, 0x3, 0xf7, 0x4, 0x1ff}, {0x6, 0x0, 0x41, 0x5, 0xfffff800, 0x2}, {0x3, 0xd, 0x5, 0x5, 0x6, 0x5}, {0x5, 0x3, 0x4, 0x9de7, 0x10, 0xfff}, {0x9, 0xb04, 0x4, 0xf4, 0x3, 0x9}, {0x4, 0xfffffffa, 0x8, 0x5, 0x4, 0xf}, {0x9, 0x1, 0x7fff, 0x0, 0x8, 0x2}, {0x4, 0x6, 0x8, 0x3, 0x2, 0x1}, {0x6, 0x7fffffff, 0x7, 0xc5, 0x7, 0x2}, {0x8, 0xffffffa0, 0x8, 0x10001, 0x8, 0x800}, {0x71d, 0x3, 0x3, 0x8, 0x401, 0x2}, {0x9, 0x2, 0x2, 0xc, 0x3, 0x400}, {0x2f78, 0x50, 0xb0, 0x6e8, 0x5d, 0x8}, {0x8, 0x7, 0x8, 0x7, 0x40, 0x1000}, {0x3, 0xf68, 0x0, 0x2, 0x8001}, {0x0, 0x0, 0x1ff, 0x9f8, 0x4, 0xffffffff}, {0x7fffffff, 0xf9f, 0x4, 0x9, 0x5, 0xa5}, {0x32521048, 0xa, 0xfffffffd, 0x1, 0x4, 0x1}, {0x2000, 0x4ff, 0xb7b, 0xe02, 0x9, 0x2}, {0x8, 0x5, 0x5, 0x7, 0x0, 0x7}, {0x1, 0xc, 0x2, 0x43, 0xfffffff9, 0x40}, {0xb, 0xb, 0xd, 0x5, 0x15, 0x1}, {0x2, 0xb9, 0x8, 0x3, 0x1ea2, 0xe4b}, {0x0, 0x3, 0x9, 0x0, 0x7, 0xf3}, {0x0, 0x2, 0x0, 0x5, 0x81, 0x6}, {0x7, 0x8, 0x6, 0x91f2, 0x8001, 0xe7c4}, {0x69f6836a, 0x4, 0xffff, 0xf108, 0x4, 0x1}, {0x7, 0xff, 0x4, 0x5, 0x7ff, 0x5}, {0xfff, 0xd3a, 0x7, 0x0, 0x32c2, 0x3}, {0x0, 0x7, 0x1, 0xff, 0x3, 0x1ec7}, {0x2, 0x3, 0x7, 0x10001, 0x5, 0xb7c3}, {0x1, 0x5, 0x1, 0xfe7f, 0x2, 0x8}, {0x5, 0x4, 0x7, 0x1, 0x0, 0x4}, {0xfffffff6, 0x3d, 0x6, 0x6eaf, 0x37f, 0x9}, {0x4, 0x0, 0x1000, 0x2, 0x5, 0xfffff328}, {0xfffffffc, 0x5, 0x3, 0x8, 0x3, 0x8}, {0x6, 0x0, 0x1, 0x7, 0x8, 0x1}, {0x7, 0x9, 0xa7, 0x2, 0x0, 0xf}, {0x5, 0x7, 0x3, 0x2, 0x2}, {0x8, 0x4, 0x2, 0x5, 0xe27, 0x4}, {0x5, 0x800, 0x3ee1, 0x3, 0x5, 0x8}, {0x40, 0x7, 0xf, 0x0, 0x1, 0x4}, {0x0, 0x4000000, 0x1, 0x1, 0x28, 0x5}, {0x10001, 0x6, 0x4, 0xec, 0x3, 0xd}, {0x0, 0x9, 0x1, 0x3, 0x2f78, 0x7}, {0x7, 0x400, 0x8, 0x7ff, 0x0, 0x8}, {0x1, 0x1, 0x100008, 0x6, 0x1, 0x9}, {0x4, 0xa91, 0x6, 0xb, 0xf6, 0x7}, {0x8, 0x40, 0x82a, 0x64f, 0x2, 0x100}, {0x8, 0x5c, 0x6, 0x9, 0xfffffffd, 0xa3}, {0x8, 0x3, 0x401, 0x678, 0x8, 0xff}, {0x1, 0x4, 0x9, 0x0, 0x2b, 0x4}, {0xfff, 0x4, 0x8, 0x3, 0x2, 0x7}, {0x1, 0x9, 0x401, 0x6, 0x101, 0x1}, {0x793, 0x8, 0x33, 0x8000, 0x6909efb1, 0x95}, {0xfffffff7, 0xd0b, 0x5, 0x661800, 0x0, 0x1}, {0x1000, 0xffff, 0x4, 0x6055, 0x8, 0x2}, {0x2, 0xb, 0x7, 0x7, 0xe, 0x8000}, {0x10, 0xfffffff9, 0x2, 0x7, 0x80000001, 0x3}, {0xa, 0xfffffffb, 0x8, 0x7, 0x1, 0x3}, {0xfffff57d, 0x7f, 0xb, 0x5, 0x9, 0x49df}, {0x2, 0x4, 0x4, 0xe, 0x14b2, 0x6}], [{0x2}, {0x1}, {0x8, 0x1}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x5}, {0x2}, {}, {0x4}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x5}, {}, {0x2}, {0x5}, {0x4}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x7}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {}, {0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x7}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x5}, {0x2}, {0x1}, {0x5}, {0x5, 0x1}, {}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0xf}, {}, {0x1}, {0x4}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x5}, {0x2}, {0x5}, {0x2}, {0x2, 0x1}, {0x4}, {0x2}, {0x2}, {0x0, 0x1}, {}, {0x2}, {0x7, 0x1}, {0x6, 0x1}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x4}, {0x5, 0x1}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x2138}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0x11) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) pipe2(&(0x7f00000000c0), 0x80000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x5, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x9) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x8, 0x2, 0x0, 0x200, 0xa, "2b35740e4f4e6c04704020dd9636bce158a556"}) executing program 2: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x279, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8924, 0x0) sendmmsg(r4, &(0x7f0000007fc0), 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000000000)={0x1, 0x1, 0x2, 0x9, 0x4}) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./my_sysfs\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./my_sysfs\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000600)='./my_dev\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./my_dev\x00', &(0x7f0000000800)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000900)='./my_configfs/dlm/cluster1\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./my_configfs/dlm/cluster1/cluster_name\x00', 0x2, 0x0) write(r6, &(0x7f0000000b00)='cluster1\x00', 0x9) mkdir(&(0x7f0000000d00)='./my_configfs/dlm/cluster1/comms/1\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./my_configfs/dlm/cluster1/comms/1/local\x00', 0x2, 0x0) write(r7, 0x0, 0x0) executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x50424752, 0x0, 0x0, 0x0, 0x1, 0xfeedcafe, 0x3, 0x0, 0x0, 0x6}}) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xff00) executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2a, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xa0}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter\x00') syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) capset(0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x7, 0x3000001, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x390, 0x0, 0x5802, 0x294, 0x1d0, 0x294, 0x2c0, 0x378, 0x378, 0x2c0, 0x378, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, [0xffffff00, 0xff000000, 0xffffff00, 0xff000000], [0xffffffff, 0x0, 0xffffffff, 0xffffff00], 'wg2\x00', 'ip6gre0\x00', {}, {0xff}, 0x62, 0x8, 0x3, 0x4a}, 0x0, 0xa8, 0x1d0, 0x52020000}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xe5f6, 'system_u:object_r:etc_aliases_t:s0\x00'}}}, {{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffff00, 0xffffff00, 0x0, 0x52f1fc93a83a0023], [0xff000000, 0x0, 0xff000000, 0xffffffff], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {0xff}, 0x8, 0x81, 0x40681f015a70b21b}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private=0xa010100, 'erspan0\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x240000c8}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xd50, 0xfffffffffffffee0, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x7, 0xfff3}, {0xb, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x201, 0x0) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x40082, 0x509cb86664327f4) write$dsp(r2, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) executing program 3: socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000400)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x80000001, 0x3e}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000580)=""/226, 0xe2, 0x1, 0x17}, @fda={0x66646185, 0x9, 0x1, 0xb4}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0}) executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200", 0x4}], 0x1}, 0x4005) executing program 3: socket$unix(0x1, 0x2, 0x0) landlock_create_ruleset(&(0x7f0000000140)={0x10895, 0x3, 0x2}, 0x18, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x185042, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000a80)={0x0, 0xabba, 0x400, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f00000006c0)=0x0, &(0x7f0000000580)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}}, 0x20}}, 0x8000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x3c00, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10008003, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x20419, 0xfffffffe, 0x21}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x1, 0x366, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x24c, 0x0, r6}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[], 0x0}, 0x94) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x128242, 0x0) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=r1], 0x3c}}, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x30, r4, 0x1, 0x70bd2c, 0xffe, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0xdc) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000080)=0x1) write(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) unshare(0x40000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r5, &(0x7f00000000c0)='1 1\x00', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dbg\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dbg\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dbg/netdevsim/netdevsim1/hwstats/l3/enable_ifindex\x00', 0x1, 0x0) write(r6, &(0x7f00000001c0)='2\x00', 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="240000005f00050000000000000000000000000002000000000000000500020001000000", 0x24}], 0x1}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/ptp/ptp0/max_vclocks\x00', 0x2, 0x41) bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000204)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000208)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000214)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000220)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000002c0)={0x2, 0xfa}, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/serio/devices/serio2/drvctl\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='psmouse\x00', 0x8) executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8924, 0x0) sendmmsg(r4, &(0x7f0000007fc0), 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000000000)={0x1, 0x1, 0x2, 0x9, 0x4}) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./my_sysfs\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./my_sysfs\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000600)='./my_dev\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./my_dev\x00', &(0x7f0000000800)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000900)='./my_configfs/dlm/cluster1\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./my_configfs/dlm/cluster1/cluster_name\x00', 0x2, 0x0) write(r6, &(0x7f0000000b00)='cluster1\x00', 0x9) mkdir(&(0x7f0000000d00)='./my_configfs/dlm/cluster1/comms/1\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./my_configfs/dlm/cluster1/comms/1/local\x00', 0x2, 0x0) write(r7, 0x0, 0x0) executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x58, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x64}]}}}]}, 0x58}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000200), 0xc, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'syzkaller0\x00'}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x64}]}}}]}, 0x58}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bond0/bonding/mode\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='0\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/class/net/bond0/bonding/arp_interval\x00', 0x1, 0x0) write(r2, &(0x7f0000000480)='100\x00', 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000004c0)={'bond0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', 0x1}) nanosleep(&(0x7f0000000540)={0x1}, 0x0) executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='devtmpfs\x00', &(0x7f0000000080)='./dev_mnt\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000200000040990a01000000010200010902190001010080320904000001ff00000007058103400001"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev_mnt/ttyUSB0\x00', 0x802, 0x0) syz_usb_ep_write(r0, 0x81, 0x10, &(0x7f0000000400)='0123456789abcdef') nanosleep(&(0x7f0000000300)={0x1}, 0x0) read(r1, &(0x7f0000000500)=""/64, 0x40) syz_usb_ep_write(r0, 0x81, 0x10, &(0x7f0000000400)='0123456789abcdef') nanosleep(&(0x7f0000000300)={0x1}, 0x0) read(r1, &(0x7f0000000500)=""/64, 0x40) close(r1) program crashed: KASAN: slab-use-after-free Read in atkbd_set_repeat_rate bisect: the chunk can be dropped bisect: testing without sub-chunk 2/3 testing program (duration=6m2s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 13, 13, 13, 13, 28, 13, 30, 13, 12] detailed listing: executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) capset(0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x7, 0x3000001, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x390, 0x0, 0x5802, 0x294, 0x1d0, 0x294, 0x2c0, 0x378, 0x378, 0x2c0, 0x378, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, [0xffffff00, 0xff000000, 0xffffff00, 0xff000000], [0xffffffff, 0x0, 0xffffffff, 0xffffff00], 'wg2\x00', 'ip6gre0\x00', {}, {0xff}, 0x62, 0x8, 0x3, 0x4a}, 0x0, 0xa8, 0x1d0, 0x52020000}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xe5f6, 'system_u:object_r:etc_aliases_t:s0\x00'}}}, {{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffff00, 0xffffff00, 0x0, 0x52f1fc93a83a0023], [0xff000000, 0x0, 0xff000000, 0xffffffff], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {0xff}, 0x8, 0x81, 0x40681f015a70b21b}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private=0xa010100, 'erspan0\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x240000c8}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xd50, 0xfffffffffffffee0, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x7, 0xfff3}, {0xb, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x201, 0x0) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x40082, 0x509cb86664327f4) write$dsp(r2, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) executing program 3: socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000400)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x80000001, 0x3e}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000580)=""/226, 0xe2, 0x1, 0x17}, @fda={0x66646185, 0x9, 0x1, 0xb4}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0}) executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200", 0x4}], 0x1}, 0x4005) executing program 3: socket$unix(0x1, 0x2, 0x0) landlock_create_ruleset(&(0x7f0000000140)={0x10895, 0x3, 0x2}, 0x18, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x185042, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000a80)={0x0, 0xabba, 0x400, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f00000006c0)=0x0, &(0x7f0000000580)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}}, 0x20}}, 0x8000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x3c00, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10008003, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x20419, 0xfffffffe, 0x21}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x1, 0x366, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x24c, 0x0, r6}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[], 0x0}, 0x94) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x128242, 0x0) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=r1], 0x3c}}, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x30, r4, 0x1, 0x70bd2c, 0xffe, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0xdc) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000080)=0x1) write(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) unshare(0x40000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r5, &(0x7f00000000c0)='1 1\x00', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dbg\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dbg\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dbg/netdevsim/netdevsim1/hwstats/l3/enable_ifindex\x00', 0x1, 0x0) write(r6, &(0x7f00000001c0)='2\x00', 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="240000005f00050000000000000000000000000002000000000000000500020001000000", 0x24}], 0x1}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/ptp/ptp0/max_vclocks\x00', 0x2, 0x41) bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000204)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000208)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000214)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000220)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000002c0)={0x2, 0xfa}, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/serio/devices/serio2/drvctl\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='psmouse\x00', 0x8) executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8924, 0x0) sendmmsg(r4, &(0x7f0000007fc0), 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000000000)={0x1, 0x1, 0x2, 0x9, 0x4}) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./my_sysfs\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./my_sysfs\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000600)='./my_dev\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./my_dev\x00', &(0x7f0000000800)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000900)='./my_configfs/dlm/cluster1\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./my_configfs/dlm/cluster1/cluster_name\x00', 0x2, 0x0) write(r6, &(0x7f0000000b00)='cluster1\x00', 0x9) mkdir(&(0x7f0000000d00)='./my_configfs/dlm/cluster1/comms/1\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./my_configfs/dlm/cluster1/comms/1/local\x00', 0x2, 0x0) write(r7, 0x0, 0x0) executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x58, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x64}]}}}]}, 0x58}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000200), 0xc, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'syzkaller0\x00'}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x64}]}}}]}, 0x58}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bond0/bonding/mode\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='0\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/class/net/bond0/bonding/arp_interval\x00', 0x1, 0x0) write(r2, &(0x7f0000000480)='100\x00', 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000004c0)={'bond0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', 0x1}) nanosleep(&(0x7f0000000540)={0x1}, 0x0) executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='devtmpfs\x00', &(0x7f0000000080)='./dev_mnt\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000200000040990a01000000010200010902190001010080320904000001ff00000007058103400001"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev_mnt/ttyUSB0\x00', 0x802, 0x0) syz_usb_ep_write(r0, 0x81, 0x10, &(0x7f0000000400)='0123456789abcdef') nanosleep(&(0x7f0000000300)={0x1}, 0x0) read(r1, &(0x7f0000000500)=""/64, 0x40) syz_usb_ep_write(r0, 0x81, 0x10, &(0x7f0000000400)='0123456789abcdef') nanosleep(&(0x7f0000000300)={0x1}, 0x0) read(r1, &(0x7f0000000500)=""/64, 0x40) close(r1) program crashed: KASAN: slab-use-after-free Read in atkbd_set_repeat_rate bisect: the chunk can be dropped bisect: testing without sub-chunk 3/3 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$userio-write$USERIO_CMD_SET_PORT_TYPE-write$USERIO_CMD_REGISTER-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-mkdirat-mount-openat-write detailed listing: executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000204)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000208)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000214)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000220)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000002c0)={0x2, 0xfa}, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/serio/devices/serio2/drvctl\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='psmouse\x00', 0x8) program crashed: possible deadlock in __kernfs_remove bisect: the chunk can be dropped bisect: 1 programs left: executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000204)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000208)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000214)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000220)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000002c0)={0x2, 0xfa}, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/serio/devices/serio2/drvctl\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='psmouse\x00', 0x8) bisect: trying to concatenate bisect: concatenate 1 entries testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$userio-write$USERIO_CMD_SET_PORT_TYPE-write$USERIO_CMD_REGISTER-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-mkdirat-mount-openat-write detailed listing: executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000204)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000208)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000214)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000220)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000002c0)={0x2, 0xfa}, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/serio/devices/serio2/drvctl\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='psmouse\x00', 0x8) program crashed: possible deadlock in __kernfs_remove bisect: concatenation succeeded found reproducer with 13 syscalls minimizing guilty program testing program (duration=1m19.085335184s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$userio-write$USERIO_CMD_SET_PORT_TYPE-write$USERIO_CMD_REGISTER-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-mkdirat-mount-openat detailed listing: executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000204)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000208)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000214)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000220)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000002c0)={0x2, 0xfa}, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/serio/devices/serio2/drvctl\x00', 0x1, 0x0) program did not crash testing program (duration=1m19.085335184s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$userio-write$USERIO_CMD_SET_PORT_TYPE-write$USERIO_CMD_REGISTER-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-mkdirat-mount-write detailed listing: executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000204)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000208)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000214)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000220)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000002c0)={0x2, 0xfa}, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0)='psmouse\x00', 0x8) program did not crash testing program (duration=1m19.085335184s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$userio-write$USERIO_CMD_SET_PORT_TYPE-write$USERIO_CMD_REGISTER-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-mkdirat-openat-write detailed listing: executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000204)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000208)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000214)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000220)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000002c0)={0x2, 0xfa}, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/serio/devices/serio2/drvctl\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='psmouse\x00', 0x8) program did not crash testing program (duration=1m19.085335184s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$userio-write$USERIO_CMD_SET_PORT_TYPE-write$USERIO_CMD_REGISTER-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-mount-openat-write detailed listing: executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000204)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000208)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000214)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000220)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000002c0)={0x2, 0xfa}, 0x2) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/serio/devices/serio2/drvctl\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='psmouse\x00', 0x8) program did not crash testing program (duration=1m19.085335184s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$userio-write$USERIO_CMD_SET_PORT_TYPE-write$USERIO_CMD_REGISTER-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-mkdirat-mount-openat-write detailed listing: executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000204)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000208)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000214)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000220)={0x2, 0xfa}, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/serio/devices/serio2/drvctl\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='psmouse\x00', 0x8) program crashed: possible deadlock in __kernfs_remove testing program (duration=1m19.085335184s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$userio-write$USERIO_CMD_SET_PORT_TYPE-write$USERIO_CMD_REGISTER-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-mkdirat-mount-openat-write detailed listing: executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000204)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000208)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000214)={0x2, 0xfa}, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/serio/devices/serio2/drvctl\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='psmouse\x00', 0x8) program crashed: possible deadlock in __kernfs_remove testing program (duration=1m19.085335184s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$userio-write$USERIO_CMD_SET_PORT_TYPE-write$USERIO_CMD_REGISTER-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-mkdirat-mount-openat-write detailed listing: executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000204)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000208)={0x2, 0xfa}, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/serio/devices/serio2/drvctl\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='psmouse\x00', 0x8) program did not crash testing program (duration=1m19.085335184s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$userio-write$USERIO_CMD_SET_PORT_TYPE-write$USERIO_CMD_REGISTER-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-mkdirat-mount-openat-write detailed listing: executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000204)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000214)={0x2, 0xfa}, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/serio/devices/serio2/drvctl\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='psmouse\x00', 0x8) program crashed: possible deadlock in __kernfs_remove testing program (duration=1m19.085335184s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$userio-write$USERIO_CMD_SET_PORT_TYPE-write$USERIO_CMD_REGISTER-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-mkdirat-mount-openat-write detailed listing: executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000214)={0x2, 0xfa}, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/serio/devices/serio2/drvctl\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='psmouse\x00', 0x8) program did not crash testing program (duration=1m19.085335184s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$userio-write$USERIO_CMD_SET_PORT_TYPE-write$USERIO_CMD_REGISTER-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-mkdirat-mount-openat-write detailed listing: executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000204)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000214)={0x2, 0xfa}, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/serio/devices/serio2/drvctl\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='psmouse\x00', 0x8) program did not crash testing program (duration=1m19.085335184s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$userio-write$USERIO_CMD_SET_PORT_TYPE-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-mkdirat-mount-openat-write detailed listing: executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000204)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000214)={0x2, 0xfa}, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/serio/devices/serio2/drvctl\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='psmouse\x00', 0x8) program did not crash testing program (duration=1m19.085335184s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$userio-write$USERIO_CMD_REGISTER-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-mkdirat-mount-openat-write detailed listing: executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000204)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000214)={0x2, 0xfa}, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/serio/devices/serio2/drvctl\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='psmouse\x00', 0x8) program did not crash testing program (duration=1m19.085335184s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): write$USERIO_CMD_SET_PORT_TYPE-write$USERIO_CMD_REGISTER-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-mkdirat-mount-openat-write detailed listing: executing program 0: write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000080), 0x2) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000204)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000214)={0x2, 0xfa}, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/serio/devices/serio2/drvctl\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='psmouse\x00', 0x8) program did not crash testing program (duration=1m19.085335184s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$userio-write$USERIO_CMD_SET_PORT_TYPE-write$USERIO_CMD_REGISTER-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-mkdirat-mount-openat-write detailed listing: executing program 0: r0 = openat$userio(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000204)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000214)={0x2, 0xfa}, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/serio/devices/serio2/drvctl\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='psmouse\x00', 0x8) program did not crash testing program (duration=1m19.085335184s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$userio-write$USERIO_CMD_SET_PORT_TYPE-write$USERIO_CMD_REGISTER-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-mkdirat-mount-openat-write detailed listing: executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, 0x0, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000204)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000214)={0x2, 0xfa}, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/serio/devices/serio2/drvctl\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='psmouse\x00', 0x8) program did not crash testing program (duration=1m19.085335184s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$userio-write$USERIO_CMD_SET_PORT_TYPE-write$USERIO_CMD_REGISTER-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-mkdirat-mount-openat-write detailed listing: executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000204)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000214)={0x2, 0xfa}, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/serio/devices/serio2/drvctl\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='psmouse\x00', 0x8) program did not crash testing program (duration=1m19.085335184s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$userio-write$USERIO_CMD_SET_PORT_TYPE-write$USERIO_CMD_REGISTER-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-mkdirat-mount-openat-write detailed listing: executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000214)={0x2, 0xfa}, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/serio/devices/serio2/drvctl\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='psmouse\x00', 0x8) program crashed: possible deadlock in __kernfs_remove testing program (duration=1m19.085335184s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$userio-write$USERIO_CMD_SET_PORT_TYPE-write$USERIO_CMD_REGISTER-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-mkdirat-mount-openat-write detailed listing: executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/serio/devices/serio2/drvctl\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='psmouse\x00', 0x8) program crashed: possible deadlock in __kernfs_remove testing program (duration=1m19.085335184s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$userio-write$USERIO_CMD_SET_PORT_TYPE-write$USERIO_CMD_REGISTER-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-mkdirat-mount-openat-write detailed listing: executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/serio/devices/serio2/drvctl\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='psmouse\x00', 0x8) program did not crash testing program (duration=1m19.085335184s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$userio-write$USERIO_CMD_SET_PORT_TYPE-write$USERIO_CMD_REGISTER-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-mkdirat-mount-openat-write detailed listing: executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/serio/devices/serio2/drvctl\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='psmouse\x00', 0x8) program did not crash testing program (duration=1m19.085335184s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$userio-write$USERIO_CMD_SET_PORT_TYPE-write$USERIO_CMD_REGISTER-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-mkdirat-mount-openat-write detailed listing: executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/serio/devices/serio2/drvctl\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='psmouse\x00', 0x8) program did not crash testing program (duration=1m19.085335184s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$userio-write$USERIO_CMD_SET_PORT_TYPE-write$USERIO_CMD_REGISTER-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-mkdirat-mount-openat-write detailed listing: executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f00000001c0)='psmouse\x00', 0x8) program did not crash testing program (duration=1m19.085335184s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$userio-write$USERIO_CMD_SET_PORT_TYPE-write$USERIO_CMD_REGISTER-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-mkdirat-mount-openat-write detailed listing: executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/serio/devices/serio2/drvctl\x00', 0x1, 0x0) write(r1, 0x0, 0x0) program did not crash testing program (duration=1m19.085335184s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$userio-write$USERIO_CMD_SET_PORT_TYPE-write$USERIO_CMD_REGISTER-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-mkdirat-mount-openat-write detailed listing: executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/serio/devices/serio2/drvctl\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0), 0x0) program did not crash extracting C reproducer testing compiled C program (duration=1m19.085335184s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$userio-write$USERIO_CMD_SET_PORT_TYPE-write$USERIO_CMD_REGISTER-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-mkdirat-mount-openat-write program did not crash simplifying guilty program options testing program (duration=1m19.085335184s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$userio-write$USERIO_CMD_SET_PORT_TYPE-write$USERIO_CMD_REGISTER-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-mkdirat-mount-openat-write detailed listing: executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/serio/devices/serio2/drvctl\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='psmouse\x00', 0x8) program did not crash testing program (duration=1m19.085335184s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$userio-write$USERIO_CMD_SET_PORT_TYPE-write$USERIO_CMD_REGISTER-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-mkdirat-mount-openat-write detailed listing: executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/serio/devices/serio2/drvctl\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='psmouse\x00', 0x8) program did not crash testing program (duration=1m19.085335184s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$userio-write$USERIO_CMD_SET_PORT_TYPE-write$USERIO_CMD_REGISTER-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-mkdirat-mount-openat-write detailed listing: executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/serio/devices/serio2/drvctl\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='psmouse\x00', 0x8) program crashed: possible deadlock in __kernfs_remove validation run: crashed=true testing program (duration=1m19.085335184s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$userio-write$USERIO_CMD_SET_PORT_TYPE-write$USERIO_CMD_REGISTER-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-mkdirat-mount-openat-write detailed listing: executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/serio/devices/serio2/drvctl\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='psmouse\x00', 0x8) program crashed: possible deadlock in __kernfs_remove validation run: crashed=true testing program (duration=1m19.085335184s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$userio-write$USERIO_CMD_SET_PORT_TYPE-write$USERIO_CMD_REGISTER-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-mkdirat-mount-openat-write detailed listing: executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/serio/devices/serio2/drvctl\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='psmouse\x00', 0x8) program did not crash validation run: crashed=false testing program (duration=1m19.085335184s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$userio-write$USERIO_CMD_SET_PORT_TYPE-write$USERIO_CMD_REGISTER-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-write$USERIO_CMD_SEND_INTERRUPT-mkdirat-mount-openat-write detailed listing: executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/serio/devices/serio2/drvctl\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='psmouse\x00', 0x8) program crashed: possible deadlock in __kernfs_remove validation run: crashed=true reproducing took 1h11m34.094795034s repro crashed as (corrupted=false): ====================================================== WARNING: possible circular locking dependency detected syzkaller #0 Not tainted ------------------------------------------------------ syz.1.18/5975 is trying to acquire lock: ffff888037c870f8 (kn->active#59){++++}-{0:0}, at: __kernfs_remove+0x34c/0xb80 fs/kernfs/dir.c:1579 but task is already holding lock: ffffffff904d00c0 (serio_mutex){+.+.}-{4:4}, at: class_mutex_constructor include/linux/mutex.h:253 [inline] ffffffff904d00c0 (serio_mutex){+.+.}-{4:4}, at: serio_unregister_port+0x1b/0x40 drivers/input/serio/serio.c:677 which lock already depends on the new lock. the existing dependency chain (in reverse order) is: -> #1 (serio_mutex){+.+.}-{4:4}: lock_acquire kernel/locking/lockdep.c:5886 [inline] lock_acquire+0x1b9/0x370 kernel/locking/lockdep.c:5843 __mutex_lock_common kernel/locking/mutex.c:646 [inline] __mutex_lock+0x1a4/0x1bc0 kernel/locking/mutex.c:821 class_mutex_intr_constructor include/linux/mutex.h:255 [inline] drvctl_store+0x3c/0x350 drivers/input/serio/serio.c:360 dev_attr_store+0x58/0x80 drivers/base/core.c:2509 sysfs_kf_write+0xf2/0x150 fs/sysfs/file.c:145 kernfs_fop_write_iter+0x3e0/0x5f0 fs/kernfs/file.c:345 new_sync_write fs/read_write.c:595 [inline] vfs_write+0x6af/0x1050 fs/read_write.c:687 ksys_write+0x12a/0x250 fs/read_write.c:739 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x123/0x790 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f -> #0 (kn->active#59){++++}-{0:0}: check_prev_add+0xeb/0xe60 kernel/locking/lockdep.c:3181 check_prevs_add kernel/locking/lockdep.c:3300 [inline] validate_chain kernel/locking/lockdep.c:3924 [inline] __lock_acquire+0x1492/0x1ec0 kernel/locking/lockdep.c:5253 lock_acquire kernel/locking/lockdep.c:5886 [inline] lock_acquire+0x1b9/0x370 kernel/locking/lockdep.c:5843 kernfs_drain+0x4f0/0x600 fs/kernfs/dir.c:532 __kernfs_remove+0x34c/0xb80 fs/kernfs/dir.c:1579 kernfs_remove_by_name_ns+0x7c/0x120 fs/kernfs/dir.c:1797 kernfs_remove_by_name include/linux/kernfs.h:644 [inline] remove_files+0x96/0x1c0 fs/sysfs/group.c:28 sysfs_remove_group+0x8b/0x1b0 fs/sysfs/group.c:328 sysfs_remove_groups fs/sysfs/group.c:352 [inline] sysfs_remove_groups+0x60/0xb0 fs/sysfs/group.c:344 device_remove_groups drivers/base/core.c:2918 [inline] device_remove_attrs+0x192/0x290 drivers/base/core.c:3048 device_del+0x36e/0x9b0 drivers/base/core.c:3964 serio_destroy_port+0x476/0x590 drivers/input/serio/serio.c:543 serio_unregister_port+0x2b/0x40 drivers/input/serio/serio.c:680 userio_char_release+0x91/0xe0 drivers/input/serio/userio.c:105 __fput+0x3ff/0xb50 fs/file_table.c:512 task_work_run+0x150/0x240 kernel/task_work.c:233 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] __exit_to_user_mode_loop kernel/entry/common.c:70 [inline] exit_to_user_mode_loop+0x1d8/0x700 kernel/entry/common.c:101 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline] syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:230 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:336 [inline] do_syscall_64+0x661/0x790 arch/x86/entry/syscall_64.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f other info that might help us debug this: Possible unsafe locking scenario: CPU0 CPU1 ---- ---- lock(serio_mutex); lock(kn->active#59); lock(serio_mutex); lock(kn->active#59); *** DEADLOCK *** locks held by syz.1.18/5975: 1, last CPU#0: #0: ffffffff904d00c0 (serio_mutex){+.+.}-{4:4}, at: class_mutex_constructor include/linux/mutex.h:253 [inline] #0: ffffffff904d00c0 (serio_mutex){+.+.}-{4:4}, at: serio_unregister_port+0x1b/0x40 drivers/input/serio/serio.c:677 stack backtrace: CPU: 0 UID: 0 PID: 5975 Comm: syz.1.18 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120 print_circular_bug.cold+0x178/0x1be kernel/locking/lockdep.c:2059 check_noncircular+0x146/0x160 kernel/locking/lockdep.c:2191 check_prev_add+0xeb/0xe60 kernel/locking/lockdep.c:3181 check_prevs_add kernel/locking/lockdep.c:3300 [inline] validate_chain kernel/locking/lockdep.c:3924 [inline] __lock_acquire+0x1492/0x1ec0 kernel/locking/lockdep.c:5253 lock_acquire kernel/locking/lockdep.c:5886 [inline] lock_acquire+0x1b9/0x370 kernel/locking/lockdep.c:5843 kernfs_drain+0x4f0/0x600 fs/kernfs/dir.c:532 __kernfs_remove+0x34c/0xb80 fs/kernfs/dir.c:1579 kernfs_remove_by_name_ns+0x7c/0x120 fs/kernfs/dir.c:1797 kernfs_remove_by_name include/linux/kernfs.h:644 [inline] remove_files+0x96/0x1c0 fs/sysfs/group.c:28 sysfs_remove_group+0x8b/0x1b0 fs/sysfs/group.c:328 sysfs_remove_groups fs/sysfs/group.c:352 [inline] sysfs_remove_groups+0x60/0xb0 fs/sysfs/group.c:344 device_remove_groups drivers/base/core.c:2918 [inline] device_remove_attrs+0x192/0x290 drivers/base/core.c:3048 device_del+0x36e/0x9b0 drivers/base/core.c:3964 serio_destroy_port+0x476/0x590 drivers/input/serio/serio.c:543 serio_unregister_port+0x2b/0x40 drivers/input/serio/serio.c:680 userio_char_release+0x91/0xe0 drivers/input/serio/userio.c:105 __fput+0x3ff/0xb50 fs/file_table.c:512 task_work_run+0x150/0x240 kernel/task_work.c:233 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] __exit_to_user_mode_loop kernel/entry/common.c:70 [inline] exit_to_user_mode_loop+0x1d8/0x700 kernel/entry/common.c:101 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline] syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:230 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:336 [inline] do_syscall_64+0x661/0x790 arch/x86/entry/syscall_64.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fbe2239e0d9 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffdd9c8b7c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 RAX: 0000000000000000 RBX: 00007fbe22627da0 RCX: 00007fbe2239e0d9 RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 RBP: 00007fbe22627da0 R08: 0000000000000006 R09: 0000000000000000 R10: 00007fbe22627cb0 R11: 0000000000000246 R12: 000000000002058b R13: 00007fbe22625fac R14: 00000000000202f1 R15: 00007ffdd9c8b8d0 final repro crashed as (corrupted=false): ====================================================== WARNING: possible circular locking dependency detected syzkaller #0 Not tainted ------------------------------------------------------ syz.1.18/5975 is trying to acquire lock: ffff888037c870f8 (kn->active#59){++++}-{0:0}, at: __kernfs_remove+0x34c/0xb80 fs/kernfs/dir.c:1579 but task is already holding lock: ffffffff904d00c0 (serio_mutex){+.+.}-{4:4}, at: class_mutex_constructor include/linux/mutex.h:253 [inline] ffffffff904d00c0 (serio_mutex){+.+.}-{4:4}, at: serio_unregister_port+0x1b/0x40 drivers/input/serio/serio.c:677 which lock already depends on the new lock. the existing dependency chain (in reverse order) is: -> #1 (serio_mutex){+.+.}-{4:4}: lock_acquire kernel/locking/lockdep.c:5886 [inline] lock_acquire+0x1b9/0x370 kernel/locking/lockdep.c:5843 __mutex_lock_common kernel/locking/mutex.c:646 [inline] __mutex_lock+0x1a4/0x1bc0 kernel/locking/mutex.c:821 class_mutex_intr_constructor include/linux/mutex.h:255 [inline] drvctl_store+0x3c/0x350 drivers/input/serio/serio.c:360 dev_attr_store+0x58/0x80 drivers/base/core.c:2509 sysfs_kf_write+0xf2/0x150 fs/sysfs/file.c:145 kernfs_fop_write_iter+0x3e0/0x5f0 fs/kernfs/file.c:345 new_sync_write fs/read_write.c:595 [inline] vfs_write+0x6af/0x1050 fs/read_write.c:687 ksys_write+0x12a/0x250 fs/read_write.c:739 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x123/0x790 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f -> #0 (kn->active#59){++++}-{0:0}: check_prev_add+0xeb/0xe60 kernel/locking/lockdep.c:3181 check_prevs_add kernel/locking/lockdep.c:3300 [inline] validate_chain kernel/locking/lockdep.c:3924 [inline] __lock_acquire+0x1492/0x1ec0 kernel/locking/lockdep.c:5253 lock_acquire kernel/locking/lockdep.c:5886 [inline] lock_acquire+0x1b9/0x370 kernel/locking/lockdep.c:5843 kernfs_drain+0x4f0/0x600 fs/kernfs/dir.c:532 __kernfs_remove+0x34c/0xb80 fs/kernfs/dir.c:1579 kernfs_remove_by_name_ns+0x7c/0x120 fs/kernfs/dir.c:1797 kernfs_remove_by_name include/linux/kernfs.h:644 [inline] remove_files+0x96/0x1c0 fs/sysfs/group.c:28 sysfs_remove_group+0x8b/0x1b0 fs/sysfs/group.c:328 sysfs_remove_groups fs/sysfs/group.c:352 [inline] sysfs_remove_groups+0x60/0xb0 fs/sysfs/group.c:344 device_remove_groups drivers/base/core.c:2918 [inline] device_remove_attrs+0x192/0x290 drivers/base/core.c:3048 device_del+0x36e/0x9b0 drivers/base/core.c:3964 serio_destroy_port+0x476/0x590 drivers/input/serio/serio.c:543 serio_unregister_port+0x2b/0x40 drivers/input/serio/serio.c:680 userio_char_release+0x91/0xe0 drivers/input/serio/userio.c:105 __fput+0x3ff/0xb50 fs/file_table.c:512 task_work_run+0x150/0x240 kernel/task_work.c:233 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] __exit_to_user_mode_loop kernel/entry/common.c:70 [inline] exit_to_user_mode_loop+0x1d8/0x700 kernel/entry/common.c:101 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline] syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:230 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:336 [inline] do_syscall_64+0x661/0x790 arch/x86/entry/syscall_64.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f other info that might help us debug this: Possible unsafe locking scenario: CPU0 CPU1 ---- ---- lock(serio_mutex); lock(kn->active#59); lock(serio_mutex); lock(kn->active#59); *** DEADLOCK *** locks held by syz.1.18/5975: 1, last CPU#0: #0: ffffffff904d00c0 (serio_mutex){+.+.}-{4:4}, at: class_mutex_constructor include/linux/mutex.h:253 [inline] #0: ffffffff904d00c0 (serio_mutex){+.+.}-{4:4}, at: serio_unregister_port+0x1b/0x40 drivers/input/serio/serio.c:677 stack backtrace: CPU: 0 UID: 0 PID: 5975 Comm: syz.1.18 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120 print_circular_bug.cold+0x178/0x1be kernel/locking/lockdep.c:2059 check_noncircular+0x146/0x160 kernel/locking/lockdep.c:2191 check_prev_add+0xeb/0xe60 kernel/locking/lockdep.c:3181 check_prevs_add kernel/locking/lockdep.c:3300 [inline] validate_chain kernel/locking/lockdep.c:3924 [inline] __lock_acquire+0x1492/0x1ec0 kernel/locking/lockdep.c:5253 lock_acquire kernel/locking/lockdep.c:5886 [inline] lock_acquire+0x1b9/0x370 kernel/locking/lockdep.c:5843 kernfs_drain+0x4f0/0x600 fs/kernfs/dir.c:532 __kernfs_remove+0x34c/0xb80 fs/kernfs/dir.c:1579 kernfs_remove_by_name_ns+0x7c/0x120 fs/kernfs/dir.c:1797 kernfs_remove_by_name include/linux/kernfs.h:644 [inline] remove_files+0x96/0x1c0 fs/sysfs/group.c:28 sysfs_remove_group+0x8b/0x1b0 fs/sysfs/group.c:328 sysfs_remove_groups fs/sysfs/group.c:352 [inline] sysfs_remove_groups+0x60/0xb0 fs/sysfs/group.c:344 device_remove_groups drivers/base/core.c:2918 [inline] device_remove_attrs+0x192/0x290 drivers/base/core.c:3048 device_del+0x36e/0x9b0 drivers/base/core.c:3964 serio_destroy_port+0x476/0x590 drivers/input/serio/serio.c:543 serio_unregister_port+0x2b/0x40 drivers/input/serio/serio.c:680 userio_char_release+0x91/0xe0 drivers/input/serio/userio.c:105 __fput+0x3ff/0xb50 fs/file_table.c:512 task_work_run+0x150/0x240 kernel/task_work.c:233 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] __exit_to_user_mode_loop kernel/entry/common.c:70 [inline] exit_to_user_mode_loop+0x1d8/0x700 kernel/entry/common.c:101 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline] syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:230 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:336 [inline] do_syscall_64+0x661/0x790 arch/x86/entry/syscall_64.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fbe2239e0d9 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffdd9c8b7c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 RAX: 0000000000000000 RBX: 00007fbe22627da0 RCX: 00007fbe2239e0d9 RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 RBP: 00007fbe22627da0 R08: 0000000000000006 R09: 0000000000000000 R10: 00007fbe22627cb0 R11: 0000000000000246 R12: 000000000002058b R13: 00007fbe22625fac R14: 00000000000202f1 R15: 00007ffdd9c8b8d0