last executing test programs: 5m55.297843949s ago: executing program 1 (id=17): openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400100bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000007, 0x1010, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000a65000/0x1000)=nil, 0x1000}}) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, &(0x7f0000000240)=[{0x0}, {0x0, 0xffffffffffffff6c}], 0x2, &(0x7f00000002c0)=ANY=[], 0x30}], 0x1, 0x200048c0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @broadcast}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[], 0x28}}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x40025}, 0x0) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000380), 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000200)={0x8f, 0x0, 0xe}) 5m53.881191908s ago: executing program 1 (id=22): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) modify_ldt$write(0x1, &(0x7f00000001c0)={0xffe, 0x100000, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x10) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de20102030109021200010000000009040000000206"], 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000d80)={0x44, &(0x7f0000000b40)=ANY=[@ANYBLOB="230b0400000092102ef7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_usb_connect$cdc_ncm(0x3, 0x6f, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x2, 0x1, 0x7, 0x80, 0xc6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "fa"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x101, 0x1000, 0xc0}, {0x6, 0x24, 0x1a, 0x6, 0x20}}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0xff, 0x5, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x5, 0x0, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x5, 0x9, 0x40}}}}}}}]}}, &(0x7f0000000f80)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x8b, 0x2, 0xa8, 0xff, 0x7}, 0x15d, &(0x7f0000000340)={0x5, 0xf, 0x15d, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x2, 0x2, 0x7}, @generic={0x8a, 0x10, 0x1, "6345537fc12ce39361cba960b01e375264201a29292312bd03d9591c7f8d4fcac3c3c7fd6ae8268fec52145e1fc2aa3dbe8ba2753ee62a550c841ce28d0af27bc0d914e6b9534b74ec208dfb6a059822dddb62fa1195fcd99723e5854fc18b3f5fc39150d44cbdac7b74cde778cc45817913bcd04bde46fc41bec439eb5e337f47111d759df37b"}, @ptm_cap={0x3}, @generic={0xb7, 0x10, 0x4, "2bc7e2775587bc15ffaa3faefdd205c307bec8e2b7248c7595e9a5b6fddf74e1993333976bdc22fda4def36a7b85bb4fec8db58d0961fc08b131549344dcd0247aef5b7da74acdcb1829f51a59c2b812ed260dddab695b2a346dab7accb40644beda3abdfcbba47ac0701df283752f4fc1c5cea1e10c112cc78e5741c35ebed33c82f20d17a318ca06f98f270fd6e9c00702c10c5d7a3b04c72935dab9196525bfb54f54f18ca11afe1344c46ed45180a2b9f961"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0x8, 0x2, 0x3}]}, 0x6, [{0x48, &(0x7f0000000280)=@string={0x48, 0x3, "54279bf648dc41b81149ab1318ffa10d6d751f5a57bd73e384d6c6c35b0819151ff95aab728c64c59c3c46b06ec16a6ac6632984bdaf2574f4a7f82f51d29a2434026dffbf80"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x42c}}, {0x3b, &(0x7f00000004c0)=@string={0x3b, 0x3, "174ab8844afd769097d02ba84555a2407bb27ac13512f24f06fd7f60516a4f8d03a485c69f2c17615f20e91e9d3fc5418ec8c21233516ad0b4"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x801}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x408}}, {0xc4, &(0x7f0000000e80)=@string={0xc4, 0x3, "db81fe2233b864e13fe77f15df8c6f9a43cf5a22f3e539b9e3d6082d3e09051f8ef37458deb6dbf26eabac640b069c04c6df4bde4f3b279be1948758ae2068fcfb7a286cabab4eef037668229040a6bd9114e5274aac9fbbcf7ac84d2c094f76bc11426d4c48d663ed10c1f637e71463260af771162aa3f15fb90fd9aca037d898652d5dc1d017b3dee5fa32b2caaf2bd34777eba71f11751a8486731e18e8b132d0fbbcd56f5f8506601fa93709f18190533658e9e5c042ccc351d17741e7778519"}}]}) read$FUSE(r0, &(0x7f0000003ec0)={0x2020}, 0x2020) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x4, @loopback}, 0x1c) socket(0x400000000010, 0x3, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x240) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fanotify_init(0xf00, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) write$cgroup_int(r4, &(0x7f0000000000)=0xfe8e, 0x12) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 5m49.530254343s ago: executing program 1 (id=33): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000100)='ecryptfs\x00', 0x0, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x18}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4}, 0x94) 5m48.590214384s ago: executing program 1 (id=37): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x8000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dedb505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d5e02bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdc9e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef1054282201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42735b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705079f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c36768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6e37cc3c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65bf667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff759fc677a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339ac2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebce31d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e402b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10fd534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e17910744d3e63e2ca6deb21e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb75bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90b14da4697d0c0a6d74774c94c52d8ecb694eec747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9c6b6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc8bcccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c4d42b032000a10d7a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0xfffffffffffffffc, {0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x1fd, &(0x7f0000000480)=0x0) io_submit(r3, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0xf0, r2, &(0x7f00000000c0)='!', 0xb7f40}]) dup3(r2, r0, 0x80000) io_uring_setup(0x497c, &(0x7f00000001c0)) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x14d800) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1}}) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000088fe508a8500000004000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000003c0)='sys_enter\x00', r6}, 0x18) getpgid(0x0) readv(r4, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x8}], 0x2) sched_setscheduler(r5, 0x0, &(0x7f0000000040)=0xfffffffc) 5m48.144795338s ago: executing program 1 (id=39): ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0xdc, 0x0, 0x2, 0x0, 0x8}) r0 = openat$cuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002300)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, r1) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_setup(0x6, 0x0) io_submit(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000600)={0x32}, 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) 5m47.848397329s ago: executing program 1 (id=40): openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400100bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000007, 0x1010, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000a65000/0x1000)=nil, 0x1000}}) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, &(0x7f0000000240)=[{0x0}, {0x0, 0xffffffffffffff6c}], 0x2, &(0x7f00000002c0)=ANY=[], 0x30}], 0x1, 0x200048c0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @broadcast}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[], 0x28}}, 0x40) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 5m47.703228607s ago: executing program 32 (id=40): openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400100bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000007, 0x1010, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000a65000/0x1000)=nil, 0x1000}}) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, &(0x7f0000000240)=[{0x0}, {0x0, 0xffffffffffffff6c}], 0x2, &(0x7f00000002c0)=ANY=[], 0x30}], 0x1, 0x200048c0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @broadcast}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[], 0x28}}, 0x40) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 2m23.045013745s ago: executing program 3 (id=598): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000061070000000400009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2c8, 0xffffffff, 0x98, 0x98, 0x198, 0xffffffff, 0xffffffff, 0x250, 0x250, 0x250, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 'netpci0\x00', 'syzkaller1\x00', {}, {}, 0x6, 0x1}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'ip6_vti0\x00'}, 0x0, 0xa0, 0x100, 0x0, {0x60010000}, [@common=@unspec=@connmark={{0x30}, {0x0, 0x0, 0x41}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x0, 0xfffc, [0x16, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100]}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r2, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r2, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r2, r2, 0x3, 0x1, 0x3fff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x1, @remote}, 0xa}}, 0x26) sendmmsg$inet(r5, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)}}], 0x1a000, 0x8040) 1m55.017296052s ago: executing program 3 (id=598): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000061070000000400009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2c8, 0xffffffff, 0x98, 0x98, 0x198, 0xffffffff, 0xffffffff, 0x250, 0x250, 0x250, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 'netpci0\x00', 'syzkaller1\x00', {}, {}, 0x6, 0x1}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'ip6_vti0\x00'}, 0x0, 0xa0, 0x100, 0x0, {0x60010000}, [@common=@unspec=@connmark={{0x30}, {0x0, 0x0, 0x41}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x0, 0xfffc, [0x16, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100]}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r2, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r2, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r2, r2, 0x3, 0x1, 0x3fff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x1, @remote}, 0xa}}, 0x26) sendmmsg$inet(r5, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)}}], 0x1a000, 0x8040) 1m35.032230348s ago: executing program 3 (id=598): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000061070000000400009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2c8, 0xffffffff, 0x98, 0x98, 0x198, 0xffffffff, 0xffffffff, 0x250, 0x250, 0x250, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 'netpci0\x00', 'syzkaller1\x00', {}, {}, 0x6, 0x1}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'ip6_vti0\x00'}, 0x0, 0xa0, 0x100, 0x0, {0x60010000}, [@common=@unspec=@connmark={{0x30}, {0x0, 0x0, 0x41}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x0, 0xfffc, [0x16, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100]}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r2, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r2, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r2, r2, 0x3, 0x1, 0x3fff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x1, @remote}, 0xa}}, 0x26) sendmmsg$inet(r5, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)}}], 0x1a000, 0x8040) 1m7.031974547s ago: executing program 3 (id=598): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000061070000000400009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2c8, 0xffffffff, 0x98, 0x98, 0x198, 0xffffffff, 0xffffffff, 0x250, 0x250, 0x250, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 'netpci0\x00', 'syzkaller1\x00', {}, {}, 0x6, 0x1}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'ip6_vti0\x00'}, 0x0, 0xa0, 0x100, 0x0, {0x60010000}, [@common=@unspec=@connmark={{0x30}, {0x0, 0x0, 0x41}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x0, 0xfffc, [0x16, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100]}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r2, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r2, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r2, r2, 0x3, 0x1, 0x3fff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x1, @remote}, 0xa}}, 0x26) sendmmsg$inet(r5, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)}}], 0x1a000, 0x8040) 42.987000398s ago: executing program 3 (id=598): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000061070000000400009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2c8, 0xffffffff, 0x98, 0x98, 0x198, 0xffffffff, 0xffffffff, 0x250, 0x250, 0x250, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 'netpci0\x00', 'syzkaller1\x00', {}, {}, 0x6, 0x1}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'ip6_vti0\x00'}, 0x0, 0xa0, 0x100, 0x0, {0x60010000}, [@common=@unspec=@connmark={{0x30}, {0x0, 0x0, 0x41}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x0, 0xfffc, [0x16, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100]}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r2, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r2, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r2, r2, 0x3, 0x1, 0x3fff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x1, @remote}, 0xa}}, 0x26) sendmmsg$inet(r5, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)}}], 0x1a000, 0x8040) 21.960236193s ago: executing program 2 (id=1004): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)={0x3, @default, r0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x442000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000340)={{0x1, 0x3, 0x7, 0x1, 0x8}}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) futex(0x0, 0x189, 0x0, 0x0, 0x0, 0x1) 21.932348035s ago: executing program 3 (id=598): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000061070000000400009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2c8, 0xffffffff, 0x98, 0x98, 0x198, 0xffffffff, 0xffffffff, 0x250, 0x250, 0x250, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 'netpci0\x00', 'syzkaller1\x00', {}, {}, 0x6, 0x1}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'ip6_vti0\x00'}, 0x0, 0xa0, 0x100, 0x0, {0x60010000}, [@common=@unspec=@connmark={{0x30}, {0x0, 0x0, 0x41}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x0, 0xfffc, [0x16, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100]}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r2, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r2, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r2, r2, 0x3, 0x1, 0x3fff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x1, @remote}, 0xa}}, 0x26) sendmmsg$inet(r5, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)}}], 0x1a000, 0x8040) 20.170934279s ago: executing program 2 (id=1007): r0 = socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) listen(r0, 0xda90) accept4(r0, 0x0, 0x0, 0x0) 18.684998354s ago: executing program 2 (id=1009): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000cc0)=@phonet={0x23, 0x0, 0x0, 0x37}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000740)="27050200000000000600002fb96d02000000000000008100", 0x18}, {&(0x7f0000000040)="543c6ac3", 0x4}], 0x2}, 0x20000000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000fc0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs(r3, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r1, 0x0) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000300)={0x1b, 0xa, 0x2, "ba2000fc0000000000ffff00"}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r8 = getpid() r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = dup(r10) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r11, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x1d, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x4) move_pages(r8, 0x7, &(0x7f00000001c0)=[&(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff2000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil], &(0x7f0000000540)=[0x1, 0x4, 0x977, 0x10], &(0x7f0000000580)=[0x0, 0x0, 0x0], 0x0) sched_getaffinity(r3, 0x8, &(0x7f00000005c0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/220, 0xdc, 0x1, 0x29}, @fda={0x66646185, 0x5, 0x1, 0x18}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 18.161857643s ago: executing program 2 (id=1012): ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0xdc, 0x0, 0x2, 0x0, 0x8}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, r0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_setup(0x6, 0x0) io_submit(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) 17.164433484s ago: executing program 2 (id=1013): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000040)={0x1, @raw_data="dfab4d85d47fab3f5852323481422e0f382a7fff4f2f6544e6018dbd8ab7448ced0cb6d971aa93e8b234fd2ceb6c160545bc47d95cb6f68a98ee9ea4686093a60d1e90430c08857fd0c428cdd40ea133631f9993733758d144b78ac24b59a54138ada8c18089c1250c7de9ef6ad3b2f7f28322211b5313b263f34c07a174f7d1d0f000f2bd2a60f9e4f18a82318f990d85778a2b77c73764d2d187c87800f0905ca84dbdd9002b572b0928a92da591fbaa566464e5cb6dbaf6a6945d91b66259944c62c5090ca50c"}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r6, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x87fff, 0x3, 0x3e, 0xffffffec, 0x39a, 0x40, 0x56, 0x0, 0x0, 0x38, 0x1, 0x0, 0x2}, [{0x3, 0x5, 0x4, 0x40000000200d, 0x1c8, 0xe2, 0x4, 0x2}]}, 0xffffffffffffff5b) close(r6) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r7 = accept(r1, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18}], 0x18}], 0x1, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') readlinkat(r8, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000002780)=""/4112, 0x1010) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r9, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="7152b635375ea0c7314f7f5863154818000000181100000000000000200000000000006831d8c7d2144e75608500"/76, @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000016000000bf090000000000005509010000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x8) 15.670891921s ago: executing program 2 (id=1019): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) r1 = syz_io_uring_setup(0x38a9, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200c08a5}, 0x8000) socket$can_raw(0x1d, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r7, {0x7, 0x6}, {0xffff}, {0x1}}}, 0x24}}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r0}) io_uring_enter(r1, 0x44fd, 0x3, 0x1, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) 12.286348128s ago: executing program 4 (id=1022): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000013c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x350, 0x120, 0x1170, 0x1398, 0x0, 0x1170, 0x2a8, 0x1398, 0x1398, 0x2a8, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6, 0x0, 0x3, 0x41}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @private0, @private0, @loopback}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ppoll(&(0x7f00000000c0)=[{r2, 0xb}], 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xea8643a92eb67ed, 0x11, r2, 0x240000) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007"], 0x6c}}, 0x8000) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x19}, 0x7}, 0x1c) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvfrom$inet6(r4, &(0x7f00000004c0)=""/209, 0xd1, 0x100, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) 7.409119178s ago: executing program 0 (id=1030): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x5d2c}, @L2TP_ATTR_FD={0x8}]}, 0x24}}, 0x40000) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0x0, 0x0, 0xa5, 0xfd, 0x9, 0xa9, 0x4, 0x0, 0x2, 0x40000000}, {0x8, 0x4005, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x3fe, 0x4, 0x0, 0x5e, 0x0, 0x0, 0xb3, 0x0, 0x3, 0xfe, 0x80, 0xf6, 0x7}], 0x5}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0) 6.972563567s ago: executing program 4 (id=1032): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$dri(0x0, 0x29, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0x5]}, 0x8) name_to_handle_at(r4, &(0x7f0000004740)='\x00', &(0x7f0000004780)=@fuse={0xc}, &(0x7f00000047c0), 0x1200) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() socket$inet6_tcp(0xa, 0x1, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb000000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xf, 0xfff1}, {0xfff3, 0x2}, {0xd, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040801}, 0x20000000) 5.895448282s ago: executing program 0 (id=1033): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f00000003c0), &(0x7f0000000400)=0x8) socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000e00), r3) sendmsg$NFC_CMD_LLC_SDREQ(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000140)=ANY=[@ANYRES16=r4, @ANYBLOB="8100251300000000000000000000ee0e0fee4fcb2e0793d7e8e5fbfbf1df3ef94ce78a67875fe5"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) socket$packet(0x11, 0x3, 0x300) r8 = socket$netlink(0x10, 0x3, 0x400000000000004) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r9, 0x11b, 0x3, &(0x7f00000001c0)=0x100000, 0x4) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) setsockopt$XDP_TX_RING(r9, 0x11b, 0x3, &(0x7f0000000040), 0x4) preadv(r5, &(0x7f00000014c0), 0x0, 0x4a9a8af7, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r10, r2, 0x25, 0x0, @val=@netfilter={0xa, 0x1, 0x1}}, 0x20) syz_emit_ethernet(0x119a, &(0x7f0000000300)=ANY=[], 0x0) r11 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x40b00, 0x0) ioctl$PTP_PIN_GETFUNC2(r11, 0xc0603d0f, &(0x7f0000000040)={'\x00', 0x4, 0x3, 0x1}) getegid() socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x32, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaeaaaaaaaa0180c20000000080490000240000000000879078ac1414bbac1414358907efe0000201860600000000000000"], 0x0) 5.234534004s ago: executing program 4 (id=1034): syz_usb_connect(0x3, 0x34, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000092df5510ac05269289b201020301090222000100000000090400000103e900000907000000000000000705d77b5d"], 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000080)={0x8, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, 0xfffffffffffffffe) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=@newchain={0x8dbc, 0x64, 0x624, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x5}, {0xc, 0xf}, {0x8, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffeff}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_cgroup={{0xb}, {0x5f14, 0x2, [@TCA_CGROUP_EMATCHES={0x12c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x120, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x8, 0x2, 0x6}, {0xfff7, 0x4, 0x0, "db6c2b3f"}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x40, 0x7, 0x4}, {{0x3, 0x1, 0x1}, {0x4, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0xa0, 0x3, 0x0, 0x0, {{0x7fff, 0x4, 0x2}, [@TCA_EM_META_LVALUE={0x29, 0x2, [@TCF_META_TYPE_VAR="ee9e0186cd9b01d451", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="5b1b43055c6973d8", @TCF_META_TYPE_VAR="f4c7e141a9dc6f01", @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_LVALUE={0xf, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="52434fea9a9d4c", @TCF_META_TYPE_VAR]}, @TCA_EM_META_RVALUE={0x10, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR]}, @TCA_EM_META_RVALUE={0x13, 0x3, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR='QN', @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="e7", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x7}, {0x6, 0x6, 0x2}}}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_LVALUE={0xd, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR='r', @TCF_META_TYPE_INT=0x1]}]}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0xd0d8, 0x2, 0x8000}, {0xf, 0x1, 0x2, "b8"}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x7, 0x7, 0x3}, {{0x4, 0x0, 0x1, 0x1}, {0x2, 0x1, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x6, 0x3, 0x2}, {0x8, 0x10000, 0x2, 0x4}}}, @TCF_EM_NBYTE={0x10, 0x3, 0x0, 0x0, {{}, {0x11}}}]}]}, @TCA_CGROUP_POLICE={0x414, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x8, 0x5, 0xc13, 0xfffffff8, 0x7, 0xff, 0xd5, 0x2, 0x4, 0x8, 0xfffffff2, 0x8, 0x4, 0x0, 0xd, 0xffffffff, 0x8, 0xffffff00, 0x8, 0x3a0, 0x0, 0x8, 0x1, 0x10000, 0xdda8, 0x7, 0x9, 0x8, 0xf, 0xffffffff, 0x80, 0x0, 0x7, 0x1, 0x5, 0x8, 0x80000001, 0xd, 0x0, 0xb4, 0x10000, 0xe, 0x9512, 0xb, 0xda2, 0x9, 0x80000000, 0x7, 0x5, 0x7, 0x1, 0x0, 0x8f2d, 0xfffffffa, 0x8, 0x5, 0x1, 0x1, 0x5, 0xf936, 0x9, 0xe, 0x2994, 0x1, 0x200, 0xc52, 0x2b, 0x200, 0x1, 0x6, 0x9, 0x9, 0x80000001, 0xffe00000, 0x6, 0x6, 0x8, 0x8, 0x101, 0x8, 0x0, 0x40000000, 0x6, 0xa, 0x80, 0x4, 0xc8, 0x0, 0x6, 0x8, 0x800, 0xffffffff, 0x7, 0x3, 0x5323, 0x5, 0x5, 0x6, 0x3, 0x5, 0x1, 0x9, 0x7, 0x9, 0x0, 0x7fff, 0x2, 0x4, 0x200, 0x101, 0x10, 0x1, 0x4, 0x729b, 0x17, 0x1, 0x1a, 0x6, 0x6, 0xfffffffe, 0x0, 0x4, 0x40, 0x1, 0x8001, 0x0, 0x2, 0xd79, 0x80, 0xb, 0x0, 0x6, 0x3, 0x38, 0xa07, 0x8, 0x2, 0x200, 0x0, 0x10001, 0x3a, 0x6, 0x5, 0x7, 0xa, 0x5, 0x7, 0x7, 0x800, 0xfb, 0x1, 0x6dd, 0x100, 0x3, 0x40, 0xffffffff, 0x3, 0x8039, 0x0, 0xc3a, 0x1ff, 0x8b4, 0x43d, 0xffffbd37, 0x2, 0x3, 0x4, 0x3, 0x1, 0x8, 0x9, 0xfffffffc, 0x2, 0x1, 0xffffff49, 0xca, 0x10001, 0x8, 0x7, 0xff, 0x0, 0x6, 0x100, 0x10, 0x32, 0x100, 0x80000000, 0x0, 0x13f9, 0x2, 0x32ea, 0x800, 0x2, 0x4, 0x1, 0x6, 0xffffffff, 0x1, 0x6, 0x269, 0x10001, 0x8, 0x2, 0x1d2f, 0x4, 0x4, 0x6, 0x1ff, 0x100, 0x1, 0xb, 0x6, 0x5, 0x8, 0x88, 0x6, 0x7f, 0x1, 0x8001, 0x4, 0x12000, 0x4892, 0x8, 0x73662477, 0x7, 0x7fffffff, 0x5, 0x9, 0xfffffffe, 0x0, 0x7, 0x80000001, 0xe2, 0x4, 0x2a9, 0x5, 0xcf, 0x5, 0x1, 0x0, 0xfff, 0x0, 0x7fffffff, 0xfffffd4e, 0x6, 0x1, 0x9d, 0x7b72bbbc, 0x200, 0x0, 0x2, 0x1, 0x401, 0x7, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3e}]}, @TCA_CGROUP_EMATCHES={0x1448, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1234, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x120, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x6}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0xf0, 0x5, "b382fc0de4ab80f7a47ec5a5f6831e0b44ce2a04effccec22e269b84bf07fa3b641c3ad108d7a2ddce399b44323a85d1af0fe24f2812d9da2f2bb71399e9c488716b0d8092cef62ce39e127f0b08b121ae0dd5e05f229933d28edb76e29b2c0849dbd08615c279c5cf878b70589bbcb6595dd1f9270d299d13b0265640990b0cb00f64fdc8ad8e4cc2223fa74143528da4877464b692c8e3e1c0a3ef845f847b5449e9b73aa2cac25c42a19b34b0a39024131f4d58109ecc2c420ededafffb65eba0075cc4cee6acc79fc64e5f84f622eae2d189d516f8afaa1347d48322bff483536932646132f530bd244f"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x8}, @TCA_EM_IPT_HOOK={0x8}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x1, 0x1, 0x3}, {0x8, 0x3ff, 0x40, 0x4, 0xd, 0x2, 0x2}}}, @TCF_EM_IPT={0xa8, 0x1, 0x0, 0x0, {{0x2, 0x9, 0x9}, [@TCA_EM_IPT_MATCH_DATA={0x29, 0x5, "4459c7e8cb6e6cf36846e0c7146383c12d0661a78bf8d77566e9e978e1cea0a290538bc94f"}, @TCA_EM_IPT_MATCH_DATA={0x2f, 0x5, "eedb08c67e30f89e44cb223841d592f6084913673406f81914798c88ab30923f4ffd6bb282045b04c3747f"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_MATCH_DATA={0xb, 0x5, "7f172484a720bb"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_NBYTE={0x1c, 0x2, 0x0, 0x0, {{0x800, 0x2, 0x469}, {0x8001, 0xa, 0x0, "31930fb0d06ccedf6420"}}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x8, 0x2, 0x5e}, {0x7, 0x1, 0x2, "d8"}}}, @TCF_EM_CONTAINER={0x100c, 0x9, 0x0, 0x0, {{0x1, 0x0, 0x2}, "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"}}, @TCF_EM_IPT={0x14, 0x3, 0x0, 0x0, {{0xf7f, 0x9, 0x3}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x5}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_LIST={0x9c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x88, 0x3, 0x0, 0x0, {{0x100, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x40, 0x1}, {0x8, 0x2, 0x1}}}, @TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_RVALUE={0x12, 0x3, [@TCF_META_TYPE_VAR="afea8c1a2c", @TCF_META_TYPE_VAR="e6813b10a63f202e03"]}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_LVALUE={0xe, 0x2, [@TCF_META_TYPE_VAR="39ce", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_RVALUE={0x11, 0x3, [@TCF_META_TYPE_VAR="2c7cde02e2f12c3dc5", @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1000, 0x9, 0x2}, {0x8, 0xe1, 0x1}}}, @TCA_EM_META_LVALUE={0xf, 0x2, [@TCF_META_TYPE_VAR="9c5c", @TCF_META_TYPE_VAR="d4f0687bca", @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0x6, 0x2}, {0xa3, 0x8, 0x1}}}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x26b9, 0x8, 0x5be9}, {0x4, 0x6, 0x3}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_LIST={0xf8, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x48, 0x3, 0x0, 0x0, {{0x0, 0x0, 0x7ff}, "8ff44e07889f6e891958c69bd46afd1c8def317bbb5690121d7777bf9801bfae5da7cc537ef749b5592dc5eb1d1bb530d93bdfedca658c4c7c18"}}, @TCF_EM_CONTAINER={0x98, 0x3, 0x0, 0x0, {{0x4, 0x0, 0x2}, "8c8ff5bb71a905aae19017e90c23f6bd14c13f08e0f9813e41192ee47999ec80cdc607d687af73729c30ead006c7604cae15cbf495b817d1716651680e84dd8080281969616bd435421d649e05d3142f92cf5645bc52b9e458d01960ba62464efea4337c7f4ba167f9d0deb14db3ca9dfaa4e0948c07ebd60aec40fe2ecbd6990da315749992caeffa71c27b"}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x8, 0x7, 0xfffb}, {{0x3, 0x1, 0x0, 0x1}, {0x3, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x60, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{}, {0x1000, 0xff, 0x2, 0x1}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x8, 0x7, 0x8000}, {{0x2, 0x0, 0x1}, {0x0, 0x0, 0x1}}}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x1, 0x2, 0x1}, {0x0, 0x2, 0x1, 'QJ'}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x3, 0x1, 0x3}, {0xf6, 0x100, 0x6, 0x2, 0xa, 0x2, 0x1}}}]}]}, @TCA_CGROUP_EMATCHES={0x24c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x248, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x7, 0x7, 0x4}, {{0x4, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}, @TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x40, 0x4, 0xe}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x6b, 0x3, 0x4}, {0x9, 0x5, 0xdd3, 0x1}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x9, 0x3, 0x2}, {0x6, 0x200, 0x0, 0x5}}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x3ff}, {0x4, 0x2, 0x2, 'Yh'}}}, @TCF_EM_IPT={0x130, 0x2, 0x0, 0x0, {{0x80, 0x9, 0x7}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xff}, @TCA_EM_IPT_MATCH_DATA={0xbc, 0x5, "06ecb287c9f13c09cf23fa941dd62a99c6870d2d264827919cef82907c461bb55ac03ecf990f3bbc0e64d2ce0b9e2ab31f0144bce050cbad46944c511932a3faf9af396236dfd222c17590ce329a9a6fefa0f8cfb5ced5919b8429b787985beee030dd38103aa936feabfad1dcbd61f383d9d83302e7037fc6f8b7f766cb7509a3c50ffd83dc028b292421058e0b43faaa91b02c1d867d7591ab473eeea2b98da372cc93ece659b9748a4526c7a34bd31ad4970ace679f96"}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_DATA={0x49, 0x5, "7dc2e4c4ba5812d784e0d61b139a9168561fff0f1d95a30db6078bc018a791f464fc2973f8db2e97723567a4b9273859ac465205b19fcccae4d7bf83512c4fa512e144e1be"}]}}, @TCF_EM_META={0x24, 0x1, 0x0, 0x0, {{0x5, 0x4, 0xf}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x5, 0x2}, {0x7, 0xff, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0x9, 0x1}, {0x9, 0x1, 0x2}}}]}}, @TCF_EM_META={0x84, 0x1, 0x0, 0x0, {{0xa23, 0x4, 0x2}, [@TCA_EM_META_LVALUE={0x11, 0x2, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="518aaf3b0cf45ee321", @TCF_META_TYPE_VAR]}, @TCA_EM_META_RVALUE={0xf, 0x3, [@TCF_META_TYPE_VAR="152040a246b2d8", @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_RVALUE={0x2a, 0x3, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="dccde933b2", @TCF_META_TYPE_VAR="48ebe55afbd9", @TCF_META_TYPE_VAR="c6a9d2f773b9e4b882e0", @TCF_META_TYPE_VAR="8b01ef411adfb25cfa", @TCF_META_TYPE_VAR]}, @TCA_EM_META_LVALUE={0x28, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="0f48", @TCF_META_TYPE_VAR="c042a29acb", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="6da47467c9"]}]}}]}]}, @TCA_CGROUP_ACT={0x433c, 0x1, [@m_pedit={0x2db8, 0x16, 0x0, 0x0, {{0xa}, {0x2cd8, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe68, 0x2, {{{0x4, 0x9, 0x5, 0x2, 0x5}, 0xf, 0x5, [{0xf, 0xffff, 0x10001, 0xffff8001, 0xfffffffe, 0x9}, {0x5, 0x9, 0xfffffff7, 0x9, 0x5cf, 0x100}, {0x5, 0x200, 0x6, 0xffffffff, 0x2, 0x7}]}, [{0x1, 0x8, 0x9, 0x53, 0x903, 0x1c79}, {0x7fffffff, 0x9, 0x8, 0x8, 0x0, 0x190}, {0xff, 0xffff789b, 0x81, 0x5, 0x5, 0x8}, {0x400, 0x8001, 0x9, 0x2, 0x3, 0x5}, {0x7f, 0x8, 0x7fffffff, 0x3, 0x9f1, 0x5}, {0x0, 0x3, 0x7, 0x3, 0x5, 0x3}, {0x1, 0x901, 0x7fffffff, 0x200, 0x80000001}, {0xa98e, 0x80000000, 0xb2, 0xc4e, 0xfa, 0x3}, {0x4, 0x14d6, 0x0, 0x9, 0x1, 0x7}, {0x7f, 0x2, 0x7, 0x10, 0x7, 0x4}, {0x6, 0x5, 0x1, 0x5, 0x2, 0x2}, {0x8, 0x5, 0xffffffff, 0xaa, 0x1d, 0x2}, {0x4, 0x5, 0x18b, 0xfffffffb, 0x6, 0x2}, {0x8, 0x1, 0xf, 0xde, 0x80000000, 0x7579b502}, {0x4, 0x4, 0x6637, 0x5, 0x1, 0x2}, {0x8001, 0x6, 0x3, 0xff, 0x7ff, 0x1}, {0x4, 0x3, 0xfffffffd, 0x5520, 0x5, 0xfff}, {0x2c5, 0x3, 0x6, 0xa, 0x4, 0x10}, {0x1, 0x0, 0x72f2, 0x578, 0xb2, 0xffffffff}, {0x80000000, 0x1, 0xfffffffd, 0xfffffffd, 0x123, 0x8aa7}, {0xbb1e, 0x6, 0x200, 0x8, 0x5, 0x6}, {0x3, 0x3, 0x7, 0x2, 0x7f, 0x7}, {0x101, 0x98, 0xe1c5, 0x7121, 0xed, 0xa0}, {0x0, 0x3, 0x5e33eeb9, 0x5, 0x2, 0x7f68}, {0x40, 0xa, 0x0, 0x2, 0x15b1, 0x293}, {0xba8, 0x1ff, 0x1, 0x8, 0x1, 0x3}, {0x4, 0x9, 0x4, 0x0, 0xfff, 0x510104ab}, {0x3, 0xfffffffc, 0x1, 0x8, 0x3, 0x8b}, {0x9, 0x4, 0xd80, 0x4, 0xdc, 0x2}, {0x3, 0xffffffff, 0x100, 0xf6, 0x9, 0x3cd}, {0x0, 0x0, 0x10001, 0x5, 0x80, 0xf}, {0x8, 0x81, 0x4, 0x800, 0x8, 0x33b}, {0xdfa, 0x3, 0x5, 0x8, 0x1, 0x9}, {0x2, 0x2, 0x6, 0x2, 0x1, 0x1}, {0x4, 0x6, 0x7, 0x6, 0xb, 0x80000001}, {0x4, 0x0, 0x2, 0xf0ae}, {0x6, 0x1, 0xd4e, 0x57, 0xb7c, 0x5a9}, {0xc00000, 0x3, 0x80000000, 0x8, 0xff, 0x9}, {0x3, 0xffff, 0x2, 0x10, 0x4, 0xa273}, {0xd1c, 0x4, 0x36, 0x9, 0x6, 0x81}, {0xa70, 0x10000, 0x5, 0x40, 0x1, 0x2}, {0x10000, 0x773c, 0x3, 0x9b46, 0x5, 0x9}, {0x800, 0x8, 0x5, 0x7fff, 0x1, 0x1}, {0x0, 0x3, 0xffff, 0x80000001, 0x5, 0xa297}, {0xff, 0xffffffff, 0xfffffffb, 0x7f, 0x9b, 0xe3b}, {0xef, 0x20, 0x3, 0x1000, 0x3b0b, 0x4}, {0xffffffff, 0x80, 0x40, 0x7, 0x6, 0xd}, {0x4, 0x32d, 0x1, 0x1, 0x3, 0x200}, {0x5, 0x1ff, 0x101, 0x1, 0xb, 0x5}, {0x8001, 0x101, 0xe58, 0x100, 0x6, 0xffffffff}, {0x6, 0x8001, 0x3, 0x8, 0xa4fb, 0xbbdb}, {0x0, 0x1, 0x10000, 0x6, 0x9, 0x2}, {0x51, 0x5, 0x917, 0x8, 0x5, 0x4741}, {0xd3e9, 0x5, 0xff, 0x0, 0x5, 0x8}, {0x7, 0x6, 0x2, 0x9, 0xfff, 0x1}, {0xe04, 0xd7, 0x0, 0x1ff, 0x9, 0x6}, {0x0, 0x7, 0x0, 0x2, 0xfffffff8, 0x400}, {0x1, 0x6f, 0x3, 0xfffffffa, 0x3, 0x800}, {0x5, 0x7, 0x4, 0x30, 0xfffffff8}, {0x2, 0x89, 0x9, 0x2, 0xfffffffc}, {0x40, 0x7f, 0x6, 0x8, 0x400, 0x9}, {0x5, 0xff, 0x8df7, 0x401, 0x10, 0x6}, {0x2, 0x0, 0x0, 0x7, 0x800, 0x9}, {0x7ab, 0x5, 0xa0, 0x101, 0x9, 0x200}, {0x38, 0x10001, 0x2, 0x1, 0x2, 0x1}, {0x7, 0x40, 0xffffffff, 0x8, 0x6, 0x10000}, {0xfffffffa, 0x61be, 0x7fffffff, 0x300, 0x80000001, 0x7fff}, {0x9, 0x9, 0xffc00000, 0x9, 0x4, 0x5}, {0x7, 0x5, 0xbf, 0x2, 0xf60, 0x1}, {0x29, 0x1, 0x1, 0x101, 0x4, 0x9}, {0x6, 0x2f, 0x96b4, 0x5, 0x4, 0xffff8a4c}, {0x97a, 0xf, 0xd3, 0x0, 0x3, 0x7}, {0x200, 0x3, 0x3, 0xdc4, 0x43b, 0x6}, {0x6, 0x10, 0x200, 0x9}, {0x6d, 0x9, 0x6, 0x9, 0x6, 0xfff}, {0x631, 0x2, 0x10000, 0x1, 0x1ff, 0xdd}, {0x10001, 0x9, 0x0, 0x800, 0x9, 0x4}, {0x2, 0x5, 0x4, 0xffffffff, 0x2, 0x7}, {0x400, 0x8, 0xf9f2, 0x4, 0x500, 0xc}, {0x4, 0x40, 0xd72c, 0x6, 0x3, 0x5}, {0x3b, 0x2, 0x4, 0x3, 0xd62, 0x8}, {0x7fffffff, 0x101, 0x7fff, 0xc00000, 0x874, 0x7fffffff}, {0xc6d3, 0xfffffff8, 0x9, 0x7, 0x6, 0x5}, {0x3, 0x8, 0x81, 0x200b, 0xb7c8, 0x7}, {0x3, 0x7f, 0x6, 0x9, 0xb, 0x5}, {0x6, 0x4, 0x6, 0x5, 0x0, 0x8}, {0x5, 0x1e56, 0x8001, 0x4, 0x1, 0x6}, {0x5, 0x1, 0x6, 0x8001, 0x3, 0x6}, {0x0, 0x7, 0x9, 0x9, 0xffffffff, 0x4}, {0x4, 0x3ff, 0x7, 0x9, 0x0, 0x9}, {0x3, 0x5, 0x2, 0x4, 0x8000000, 0x3ff}, {0x6, 0x1, 0x8, 0x2, 0x8000, 0x8}, {0x36, 0x23, 0x4, 0x0, 0x2, 0x5}, {0x4, 0x2, 0x2, 0x6a6, 0xff, 0x6}, {0x8d, 0x10, 0x9, 0xe, 0xc96, 0x1000}, {0x9, 0xffffe28e, 0xe, 0xfc, 0x70, 0x200}, {0x7, 0xe36e, 0x80000001, 0x8, 0x7}, {0x9e3, 0x8, 0x46, 0x30, 0xfffffff5, 0x3}, {0x87c, 0x3963, 0x20, 0xb47, 0x2, 0x7}, {0x8, 0x4a, 0x4, 0x5, 0x81, 0x3}, {0x9, 0x2, 0x56ac, 0x8, 0x10001, 0x1}, {0x3519, 0x7, 0xff, 0x1, 0x8, 0x3}, {0xef, 0x3b, 0x793, 0x2, 0xfff, 0x2}, {0x0, 0xb, 0x4, 0x4, 0x7, 0x10001}, {0x8000, 0x9, 0x2, 0x1000, 0x800}, {0x100, 0x7f, 0x3, 0x800, 0xd, 0xfffffffa}, {0x0, 0x9, 0x72a, 0x0, 0xffff, 0x8}, {0x6, 0x6, 0xf, 0x180000, 0x643, 0x37041fbf}, {0x6, 0xd, 0x2, 0xc30, 0x7f, 0x2}, {0x3, 0x2, 0xfff, 0x8000, 0x8000, 0x1}, {0xa, 0x3, 0x1, 0x2, 0x6, 0x200}, {0x7, 0x3, 0xffff, 0x3, 0x2, 0x17}, {0x7, 0xe338, 0x5, 0x9, 0x4, 0x7}, {0x5, 0x80000001, 0x3, 0x4, 0x40, 0x6}, {0xd65, 0x0, 0x4, 0x3, 0x7, 0x9}, {0x7, 0x2, 0x8000, 0x5, 0x8, 0x8}, {0xd7ea, 0x0, 0x900, 0x6, 0x6, 0x96}, {0x80000000, 0x2, 0x10, 0x400, 0xffff8001, 0xffffffff}, {0x9, 0x2, 0x1, 0xef22, 0x10, 0x7}, {0x3, 0x5, 0x2, 0x8001, 0x0, 0x3}, {0xfffffffa, 0x7, 0x3ff, 0xfffffffe, 0x1d10, 0x4}, {0x9, 0x400, 0x8, 0x3ff, 0x2, 0x9}, {0x7, 0x2, 0x3, 0x8, 0x38a, 0xcb}, {0xfffff133, 0x9, 0x8, 0x6f6b, 0x8001, 0x9}, {0x498, 0x25, 0x4, 0x6, 0x1, 0x6}, {0xd238, 0xc7c, 0x5a, 0xffff, 0x1, 0x6f}, {0x7, 0x2, 0x1ff, 0x1, 0x3, 0x2400}, {0x4, 0xf, 0x2, 0xfffffff8, 0x3, 0x8001}], [{0x5, 0x1}, {0x5}, {}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x4}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x5}, {0x2}, {0x0, 0x1}, {}, {}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x4}, {0x5, 0x1}, {0x2}, {0x3}, {0x1}, {0x2}, {0x5, 0x1}, {}, {0x4, 0x1}, {0xd}, {0x1}, {0x4, 0x1}, {0x5}, {0x5, 0x1}, {0x5}, {0x5}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x2}, {0x3, 0x1}, {0x4, 0xf960f3f2676ad380}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {}, {0x1}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x1}, {0x1}, {0x3}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x5}, {}, {0x2, 0x1}, {0x4, 0x1}, {}, {}, {0x5}, {}, {0x1}, {0x1}, {0x3, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x2}, {0x1}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x3}, {0x2}, {0x1}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x1}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xec8, 0x4, {{{0x401, 0x8, 0x1, 0x6, 0x90000}, 0xe, 0xb, [{0x1, 0xf3, 0x7, 0x55, 0x8, 0x4}, {0x7, 0xffffffff, 0xfffffffa, 0x9, 0x47c, 0xd}, {0x101, 0x9, 0x5, 0x9a, 0x4, 0x10001}, {0x22ae, 0x19, 0x10001, 0x0, 0x8, 0x5}, {0x5, 0x100, 0x4, 0x0, 0x3}, {0x10, 0x8, 0x401, 0x9, 0xe, 0xaea}, {0x49c, 0xf89f, 0x10000, 0x0, 0x4, 0x3f}]}, [{0x4, 0xffff6afd, 0x9, 0x7ff, 0x4, 0x8a}, {0x200, 0x101, 0x3, 0x3, 0x9d2, 0x7}, {0x6, 0xfffffffc, 0x4, 0xd, 0x7, 0x4}, {0x1, 0x94, 0x2, 0x56db, 0x8, 0x56}, {0x8, 0x8, 0x5, 0xc38, 0x7fff, 0x9}, {0x1, 0x1a76, 0x2, 0x1, 0xb1, 0x9}, {0x4, 0x8000, 0x9, 0x0, 0x400, 0x8}, {0x7, 0xb168, 0x2, 0x6, 0xd, 0x9}, {0x2, 0xff, 0xf7d, 0x8, 0x6e5b, 0x6}, {0xaf, 0x3, 0x6, 0x5, 0x1, 0x81}, {0x9, 0x3, 0x3, 0x9, 0x10000, 0x9}, {0x1, 0x3, 0x8, 0xdfdf, 0x2, 0x8}, {0x3ff, 0x8, 0x2, 0xfffffff8, 0x6, 0x14a}, {0x2, 0x3, 0x3d, 0x1, 0x5, 0x3}, {0x100, 0x9, 0x4, 0x4, 0x80, 0x2}, {0x6, 0x6, 0x365e, 0xff, 0x19, 0x7ff}, {0x4e83, 0xfc23555, 0xd93, 0x1, 0x9, 0x4}, {0x180, 0x646a, 0x0, 0x8, 0x0, 0x40}, {0xffff, 0x400, 0x1, 0x80000000, 0x9, 0x8}, {0x4, 0x6b, 0x4, 0x8000, 0x5, 0x3}, {0x2, 0x6, 0x1, 0x6, 0x6, 0x9}, {0xb, 0xc44, 0x1, 0xcdc, 0x9, 0x1}, {0xff, 0x80, 0x0, 0x82a7, 0x1b, 0x6}, {0x1000, 0x9, 0x8, 0xf1, 0x6ede, 0xffffffff}, {0x3, 0x5, 0x3, 0x380, 0x5, 0x1}, {0x6, 0x8, 0x8, 0x7, 0x1ff, 0xffffff00}, {0xc, 0x3, 0x5, 0x6, 0x8, 0x5}, {0x1, 0x1, 0x9, 0x401, 0x7ff, 0x1}, {0x1, 0x4, 0x8, 0xbc9, 0xf, 0x3}, {0x7fff, 0x2, 0x9, 0x7f, 0x10001, 0x1c4a2465}, {0xfffffbff, 0x8, 0x1, 0x1, 0x1, 0x5}, {0x6, 0x5, 0x5, 0x1c0, 0xd2, 0x9}, {0x9, 0x2, 0x7f, 0x9, 0x7, 0x1}, {0x0, 0x38a, 0x4, 0x9, 0x3}, {0x7, 0xffffffff, 0xffff, 0x3, 0x9, 0xded7}, {0x0, 0x6, 0x0, 0x1, 0xfffffff8, 0x2}, {0x3, 0x49bf, 0xc, 0x1000, 0x7, 0x97}, {0x6, 0x7, 0x12000, 0xb, 0x4, 0xf0}, {0x5, 0xb, 0xff, 0x4e, 0x0, 0x400}, {0xfffffff6, 0x6, 0x3, 0x0, 0xe, 0x5}, {0x9, 0x4, 0x7, 0x0, 0x5, 0x8000}, {0x6, 0x2, 0xcd, 0x5, 0x7, 0x7}, {0x5, 0x6, 0x1, 0x8, 0xd48, 0x3}, {0x2, 0xfffffe00, 0x4, 0x0, 0x7f, 0x4}, {0x1, 0x1ff, 0xfffffff8, 0xd4, 0x8000, 0x6}, {0x10001, 0xfffffffc, 0x5, 0x1, 0x3, 0x4}, {0xc, 0x9, 0x10000, 0x4, 0x10001, 0xfff}, {0x4, 0x5, 0xa, 0x9, 0xfffffffa, 0x7ff}, {0x5, 0x90, 0x4, 0x8001, 0xdfe, 0x101}, {0x9, 0x0, 0x1, 0x1000, 0xe1d, 0x3}, {0x5, 0x58, 0x6, 0x7000, 0xd, 0x2}, {0x279, 0xb, 0x0, 0xa25f, 0x10000, 0x80000000}, {0x800, 0x100, 0xfffffff9, 0x8, 0x7fffffff, 0x10000}, {0x7, 0xc5, 0x8001, 0x6, 0xbb, 0x6}, {0x6, 0xfff, 0x4, 0x753, 0x8, 0xfffffffd}, {0xff, 0xfffffffd, 0x7fffffff, 0x6, 0x8, 0x5}, {0x7, 0x2, 0xfffffff8, 0x200, 0x435, 0xffffffff}, {0x0, 0x80, 0x9, 0xffffffff, 0x4, 0x5}, {0x57af, 0x5, 0x0, 0x6, 0x40, 0x4}, {0x7, 0x2, 0x3a, 0x4, 0x0, 0xac}, {0x5, 0x9, 0x6, 0x30000, 0x1, 0x7}, {0x2, 0x0, 0x4, 0xd, 0x2e7dc14c, 0x5}, {0xfffffffb, 0x10001, 0x1, 0x0, 0x5, 0x1}, {0x8001, 0x20080, 0x4, 0x0, 0x800, 0x1}, {0x8, 0xfffffffb, 0xfc, 0x7, 0x9, 0x1}, {0x50000, 0x1, 0x0, 0x5, 0x1, 0x4}, {0x0, 0x1, 0x1, 0x8, 0x7e2ff8d8, 0x66fa}, {0x0, 0xa340, 0xad, 0x0, 0x8001, 0x1}, {0x7d, 0x8000, 0x30e, 0x4f, 0x1, 0x5}, {0x1ff, 0x4, 0x7, 0x9, 0x1, 0x1ff}, {0x7959428a, 0x5, 0x6, 0x3, 0x2, 0x5}, {0xf, 0xb1f0, 0x3, 0x7f, 0x7, 0x280}, {0xe3cd, 0x9, 0x20, 0x100, 0x8001, 0x9290}, {0xe000000, 0x5, 0x2, 0x3, 0x8001, 0xff}, {0x9, 0xe, 0xb, 0x200, 0x70b8, 0x4}, {0x6, 0x57f, 0x8, 0x3, 0x400, 0x4}, {0xe94, 0x5, 0x0, 0x0, 0xcf0, 0x9}, {0xff, 0x0, 0x0, 0xb, 0x1200, 0x81}, {0x5, 0xd, 0x100, 0x7, 0x6, 0x8000}, {0x1ff, 0x6, 0xfa8d, 0x4, 0x5, 0x6}, {0x1c0c, 0x6, 0xf086, 0x1, 0x5, 0x40}, {0x1, 0x5, 0x4, 0x401, 0x10000, 0x8}, {0x5, 0x7, 0x8, 0x80, 0x8, 0x200}, {0x0, 0xe0, 0x6, 0x10, 0xca, 0x100}, {0x8, 0x9, 0x0, 0x7, 0xe, 0x2}, {0x912, 0x0, 0x0, 0x729, 0x0, 0x7fffffff}, {0x40, 0x4, 0x80000001, 0x1, 0x0, 0x5}, {0x10, 0x3, 0x0, 0x9, 0x1, 0x2}, {0x6, 0xc20a, 0x4, 0x3a, 0x680, 0x78}, {0x0, 0x4, 0xff, 0x9, 0x3, 0x10001}, {0x5, 0x800, 0x4, 0x8000, 0x3, 0x4}, {0x9, 0x7, 0x3, 0x1ff, 0xffff, 0xfffffffb}, {0x6, 0xab, 0x7, 0x9}, {0x9, 0xf94, 0x9, 0xe, 0x8001, 0x4}, {0xe603, 0xe32, 0x3, 0x8, 0x5, 0x7}, {0x9, 0x8, 0x4, 0x7fff, 0xfd9}, {0xffff3de6, 0x4, 0x10000, 0x8000, 0x0, 0x1}, {0x16b, 0x0, 0x1, 0x6, 0x2, 0xfffffffd}, {0x4, 0x3, 0x3, 0x3, 0x10001, 0x4e}, {0x7d, 0x4, 0x6, 0x4a7, 0xd, 0x101}, {0x9, 0x4, 0x6b83f558, 0x8, 0x9286, 0x8}, {0x100, 0x873a, 0x7, 0x8, 0x8, 0x5}, {0x9f5d, 0x3, 0xa, 0x6f0, 0xbcd6, 0x8}, {0x2, 0x4, 0xe, 0x40, 0x3}, {0x4, 0x70000000, 0x3, 0x57ba, 0x3, 0x7}, {0x2, 0x4, 0x4, 0x1, 0xffffffff, 0x1ff}, {0x872, 0xfffffffe, 0x200000, 0x9, 0xe769, 0x10000000}, {0x1000, 0x7, 0x5, 0x5, 0xc0b, 0x10001}, {0x80, 0x4d, 0x1ff, 0xff, 0x6, 0x2}, {0xffff7fff, 0x10, 0x5, 0x1, 0x2, 0x8}, {0x3, 0x4a, 0x2, 0x401, 0x2, 0x2}, {0x401, 0x9, 0x0, 0x9, 0x7fffffff}, {0x0, 0x1, 0x86, 0x2, 0x4, 0x1}, {0x0, 0x9, 0xa522, 0x4f5, 0x200, 0xc}, {0x9, 0x8, 0x0, 0x9, 0xfffff23a, 0x7}, {0x10001, 0x8, 0x9, 0x9, 0x5, 0x6}, {0x7, 0x9, 0xd, 0xffffffff, 0xf, 0x1e00000}, {0xf1, 0x7f, 0x1, 0xb211, 0x0, 0x1ff}, {0x817, 0xb, 0x1, 0xfff, 0x7, 0xffff}, {0x5, 0x3, 0xb31, 0x5, 0x401, 0x6534}, {0xffffa090, 0x8000, 0x80, 0xe, 0x0, 0x4}, {0x7, 0x9, 0xff, 0xd29, 0xa4, 0x4}, {0x7, 0x1, 0x10, 0xffffff00, 0x5, 0x6}, {0x77685658, 0x9, 0xfff, 0x61d, 0x3}, {0x401, 0x18f, 0x4, 0x0, 0xa33, 0x7828}, {0x9, 0xb, 0x6, 0x1000, 0xf5, 0x8}, {0x1, 0x0, 0x4, 0x31340, 0xfe, 0x7}, {0x0, 0xffffffff, 0x9, 0xa, 0x3, 0xfffffffc}], [{0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x3}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x7}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0xcf09e43012d19209, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x5}, {0x5}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {0xaeaf4b5f968acd1, 0x1}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x2}, {0x2}, {0x3}, {0x2, 0x1}, {}, {0x2}, {0x2, 0x1}, {}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x1}, {}, {0x1}, {0x7}, {0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x1}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x1}, {0x74ac6dac56f48bd, 0x1}, {}, {0x3, 0x1}, {0x4}, {0x4}, {0x4, 0x2}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x5eda26ee74667cb0}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {}, {0x2}]}}, @TCA_PEDIT_PARMS_EX={0xeb0, 0x4, {{{0x7, 0x200, 0x0, 0xfffff800, 0x101}, 0x61, 0x40, [{0x9, 0x491f, 0x2, 0xe, 0x5, 0xd}, {0x6, 0xffff8000, 0xffff8000, 0x7, 0xfffffff8, 0x7}, {0x6, 0x0, 0x0, 0xf310bc7, 0x17, 0x8}, {0x7f, 0x7, 0xffff8001, 0x7f, 0x7f, 0x9}, {0x5, 0x6, 0x1, 0x8, 0x808, 0x5703}, {0x5, 0x8000, 0x0, 0x3, 0xffffffff, 0x7}]}, [{0x7, 0xd86, 0x200, 0x9, 0xe42b, 0x10001}, {0xf7, 0x4, 0x803, 0x4, 0x1, 0xfffffffc}, {0x8, 0x5, 0x7, 0x9, 0x100, 0x8}, {0x8001, 0x1, 0x2, 0x6, 0xfffffff9, 0x9}, {0x9, 0xffffffff, 0x400, 0x5, 0xc017, 0x10001}, {0x80008000, 0x3, 0xff2, 0xfd, 0x8, 0xfffffffc}, {0x5, 0x6, 0x5, 0x7, 0x5e7, 0x5}, {0x9e, 0x8, 0x101, 0x9, 0xfffffffa, 0x7}, {0x1, 0x7, 0x148bb77f, 0x2, 0x595, 0x81}, {0xfffffffa, 0x7, 0x1, 0x2, 0xfffffffa, 0xd}, {0x3, 0xa, 0x9, 0x8, 0x4f, 0x3}, {0xa, 0x2, 0x7, 0xd, 0x401, 0x9}, {0x4, 0xe, 0x7918effe, 0x0, 0x400, 0x8}, {0x1ff, 0x0, 0x5, 0x200, 0x68e7, 0x7}, {0x1, 0x5, 0x0, 0x3, 0x4, 0x62b6}, {0x7, 0x2, 0x25, 0x7fff, 0xee5b, 0x44}, {0x9, 0x1, 0x0, 0x7fff, 0x8001, 0xaa}, {0x9, 0x7, 0x3, 0x100, 0xf92, 0x7}, {0xc, 0x4, 0x8, 0x3, 0x0, 0x3}, {0x2e90, 0x2da, 0x4, 0x1, 0x7, 0x10000}, {0x2, 0x49, 0x9, 0x7, 0x4, 0x100}, {0xd4c0, 0x0, 0x5cbb, 0x6, 0xfffffffa, 0x5}, {0x6, 0xff, 0x8d5, 0x7, 0xfffff001, 0xfc}, {0xfffffffc, 0xffff, 0x4, 0x0, 0x3, 0x2}, {0x10001, 0x400, 0x3, 0xd9d, 0x4, 0x10}, {0xc, 0xa, 0x1, 0x98, 0x0, 0x8}, {0x2, 0x9, 0x6, 0x8, 0x0, 0xc}, {0xb1e, 0x1, 0x7, 0xfff, 0x8000, 0x80000000}, {0x40, 0xa, 0xffffffe0, 0x7fffffff, 0x80f49f60, 0x9c11}, {0xae, 0xffffffff, 0x2, 0x7fff, 0x65d841a1, 0x3}, {0x3ff, 0x28fc, 0x10001, 0xc7, 0x8, 0x100}, {0x80, 0x8000, 0xfffff800, 0x3ff, 0x7, 0x7}, {0x6, 0x3, 0x7, 0x3, 0x0, 0x1ff}, {0x7fffffff, 0x2, 0x9, 0x0, 0x5c5, 0x3}, {0x1, 0x20, 0x3105, 0x6, 0xc, 0x5}, {0x6002, 0x5, 0x100, 0x4, 0x4, 0xffffff57}, {0x9, 0x400, 0x4, 0x9bf, 0x7, 0x7}, {0x4, 0x4, 0x4, 0xb6d, 0xfffff801, 0xa53}, {0x54092f56, 0x20a, 0x3, 0x1, 0x7, 0x8}, {0x3, 0x2, 0x1000000, 0xc, 0x3e3, 0xe}, {0x5, 0x3f4, 0x2d, 0xfffff9bc, 0x0, 0x8}, {0x7ff, 0x400, 0x2, 0x3, 0x7, 0x200}, {0x4, 0x4, 0x0, 0x8001, 0x4, 0x7}, {0x80000000, 0xb, 0xa, 0xfffffffc, 0x8000, 0xe5}, {0x3, 0x200, 0xa, 0x1, 0x5, 0x4613}, {0x8001, 0x1, 0x7, 0x7, 0x7f, 0x4}, {0xc09, 0x2fa, 0x748d2a56, 0x9, 0x7, 0x5a}, {0x2, 0x7092, 0x3, 0xe, 0x9, 0xb}, {0x95, 0x10001, 0xd1, 0x8, 0x4, 0x2}, {0x8, 0x5, 0x100, 0x9, 0x8000}, {0x6, 0x4, 0x9, 0x3, 0x2, 0x5}, {0x7, 0x2, 0x0, 0x6}, {0x1ff, 0x9, 0x8, 0x7fffffff, 0xac9, 0x3}, {0x9, 0x7f, 0x80000001, 0x2, 0x400, 0x6}, {0x0, 0x4, 0x2, 0x6, 0x1, 0x7}, {0x8, 0x0, 0xa03, 0x1, 0x7, 0x2}, {0x40, 0x7, 0x17438e83, 0x99fb88d8, 0x168b, 0x48}, {0xffffffff, 0xd, 0x10001, 0x7, 0x6, 0x4}, {0xd9, 0x7, 0x8, 0x80000000, 0xfffffffa, 0x5}, {0x3, 0x8, 0x1, 0x4, 0x7, 0xffffffb7}, {0xda04, 0xd3ec, 0x0, 0x7, 0x2, 0xd5}, {0x80000001, 0x2, 0x9, 0x5, 0x6, 0x9}, {0x6, 0x8783, 0x3, 0xffffffff, 0xad, 0x8001}, {0x401, 0x5, 0x2, 0x0, 0x5, 0xe69}, {0x4f24, 0xc2d4, 0x10f, 0x1, 0x7e0bcc0f, 0x4}, {0x6, 0x80, 0x1, 0xb04, 0x4, 0x6de1}, {0x4, 0x0, 0xa1f, 0x0, 0x8, 0x4}, {0x0, 0x6, 0x4, 0x0, 0x80, 0x80000000}, {0x454, 0xb6700000, 0x1ff, 0xffff, 0x2, 0x80}, {0x7, 0x8, 0x3, 0xa0, 0x480, 0x6}, {0x7ff, 0x2, 0x0, 0x3, 0x7, 0x1000}, {0xc3, 0x6, 0x5, 0x1, 0x2, 0xa}, {0x0, 0x6c4d, 0x3, 0x40, 0xf, 0x4}, {0x8, 0x7f, 0x0, 0x4, 0x9, 0x3ff}, {0x5, 0x6, 0x586, 0x3, 0x9, 0xa}, {0x2, 0x3, 0x6, 0x7, 0x160, 0x1}, {0x1200, 0xff, 0x3, 0x100, 0x937b, 0x9}, {0xfffffff7, 0xe3, 0x1f, 0x5, 0x6, 0x8}, {0x987, 0x8, 0x7, 0xd, 0x3, 0x1cff}, {0x3c, 0x8883, 0xfffffff3, 0x6, 0x44, 0x1}, {0x5, 0x4, 0x80, 0x2, 0x1ff}, {0x4, 0x1, 0x2, 0x10001, 0x8001, 0x765f}, {0xc67, 0x6, 0x9, 0x2, 0xf4e, 0x7fff}, {0x79ff, 0xffffff00, 0x7ff0000, 0x7, 0x4, 0x8}, {0x8, 0x6, 0x5f, 0x3, 0x5, 0x8}, {0x4, 0x0, 0x80000000, 0xe58, 0x9}, {0x9, 0x6, 0x80000001, 0x4, 0x9a, 0x71b}, {0x1, 0x8, 0x9, 0x8, 0x1, 0x7fff}, {0x6, 0x8, 0x8001, 0x0, 0x0, 0x40}, {0x3, 0x90000, 0x5, 0x4, 0x101, 0xf80}, {0x9, 0x0, 0x2, 0xe, 0x5, 0x8}, {0x0, 0x5, 0x40, 0x2, 0x3, 0x2}, {0x3ff, 0x1, 0x3, 0x4b, 0xdf1, 0x7}, {0xffffffff, 0x1000, 0x200, 0x5, 0x80000001, 0x1}, {0x6, 0x401, 0x5, 0x2, 0x9, 0xf0d}, {0x8f6b, 0x5, 0x81, 0x1e, 0xd0c, 0x1}, {0xd0, 0x3, 0xff, 0x9, 0x5}, {0x3, 0x3, 0x5, 0x2, 0x0, 0x4}, {0x2, 0xfffffffe, 0xfe, 0xffff, 0x49208480, 0x9}, {0x0, 0x4, 0x7, 0x4d, 0x6e4f, 0x51ed}, {0x101, 0x3, 0xc0000000, 0x8, 0x1ba8, 0x7}, {0x7fff, 0x7fff, 0x6, 0x201c00, 0x2490, 0x2}, {0x6, 0x8, 0x2, 0x6, 0x7, 0x81}, {0x0, 0xffffffff, 0x8, 0xcd59, 0x100, 0x92e}, {0xe, 0x2, 0x6, 0x2, 0x10001, 0xfffffffd}, {0x6, 0x40, 0xb720, 0x0, 0x2, 0x7fff}, {0x1f, 0x5, 0x2, 0x10000, 0x10, 0x9}, {0x2d78, 0x2, 0x10001, 0x6, 0xd64, 0x8}, {0x40, 0x10001, 0x4, 0x8, 0xf, 0x7}, {0x8, 0x1, 0x3, 0xffff, 0x7, 0x8}, {0x2, 0x1ff, 0x2, 0xf, 0xffff, 0x3}, {0x2, 0xfffffe00, 0x4, 0x40, 0xffffffff, 0xc}, {0x8, 0x3, 0x4e, 0xb38, 0xe795, 0x2}, {0x8, 0x1, 0x4, 0xa6, 0x2, 0x7}, {0x6, 0x6, 0x6, 0xf83b, 0x1, 0x9}, {0x7fff, 0x2, 0x3, 0x9, 0x4, 0x6}, {0x4, 0x3, 0x7fffffff, 0x7, 0x3, 0x9}, {0x5, 0xfffffffd, 0xc, 0x2, 0x0, 0x3f}, {0x9, 0xff, 0x9, 0x2, 0x8, 0x2}, {0x5, 0x0, 0x2, 0x2, 0xaf2, 0x1}, {0x42c9, 0x2, 0x2, 0x1ff, 0xffffffff, 0x6}, {0xa1, 0x4, 0x0, 0xa, 0x7, 0xd}, {0x80, 0x12f9, 0x401, 0x0, 0x8, 0x3}, {0x69, 0x3, 0x8, 0x1, 0x4, 0xe6}, {0x5, 0x7f, 0x10001, 0x5, 0x4, 0xbf5}, {0xca7, 0xddc, 0x9, 0x9, 0x36d5, 0x5}, {0xa, 0x100, 0x49, 0x3, 0x0, 0x9}, {0x3703, 0x8, 0x8, 0x3, 0x7fff, 0xa}], [{0x5, 0x1}, {0x3}, {}, {}, {0x0, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x1}, {0x2, 0x1}, {0x564a3e0eaffaa83a}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x3}, {0x1}, {0x8e8b213735b9be42}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {}, {0x0, 0x1}, {0x5}, {0x2}, {0x630deaccd43d048c}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x2}, {0x4}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1}, {}, {0x0, 0x1}, {}, {0x3}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x4}, {0x1}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x1}, {}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {0x1}, {0x3}, {0x0, 0x1}, {0x6, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x8d4631a3141ea32f}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0xf4, 0x5, 0x0, 0x1, [{0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0xb5, 0x6, "1912273a2021b2fb8b729f2b079cbef01609fa7126356777164c00c5226cf1725e8ec4d1b9a9c3f26865fb40c7dfe3155a7a1a8c1f33b5bf67bed67f707630603c81efed840cccf0a4cad718acfb7be31fac9c5ca2952debf198a04fdae896a085ff0d8d3aa22b5b4a43576d391401b679df47a2ca115421ee115143ca143ca2fd7894faeebb00d1536890e5edc6ba94d3428fcde4babdffb8004e8e5ba3b9d66216ebb7ee49baca939c739d7f25329da0"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_connmark={0x1a8, 0x5, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x400, 0x4, 0x5, 0x7}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x7, 0x0, 0x2, 0x2}, 0xe8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0xc879, 0x1, 0x0, 0x49d1}, 0xea}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x101, 0x4, 0x3, 0x4, 0xb2}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x19, 0x4c, 0x4, 0xa782, 0x4}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80000001, 0x1, 0x0, 0x0, 0x5}}}]}, {0xcf, 0x6, "50f28291d469eb3d4ea07e1f6c7a9f3b70ceb04338886793047e65c482979e07e10ed2a7f95eab156aa2803e7269954eeda9164200ab392ceef3995914dcfb32aee52fff4a904089e899486c1075cce1de69b7e439d36d56759f32d3421a50c49376cd52fc68708e95c0d511b6e1ea2597da094756bc53c936fc0fc44cc4eaebcd4cd447f1f1293cee500db41c844b75ed4104f375f91261e802d05646322fe4eeb8d043cc56d3f83c8f451c9ce89583d3b933cb51924021cc1368feabdb6aab2cdaa6c4e82ecea3f24f43"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_mpls={0x11c, 0x1f, 0x0, 0x0, {{0x9}, {0x44, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5}, @TCA_MPLS_TTL={0x5, 0x7, 0x7}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8917}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_LABEL={0x8, 0x5, 0xabf12}, @TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_BOS={0x5}]}, {0xad, 0x6, "8ed30b26f09749ecb6eb69392bd50ad4e264763a117b69e5ed9fc8450063e112be74c551e39f9e7787a344b2be15221ad727b810696eda1e297d1e3d19fbc49a86e52d32ff4f011a7375f6de4965d6e7d554fba0ca65e6195a24a188d68c333c0c2ff1b03844e13e6ea8e82cfa4f134d7a1b69a6210b4e42566c40d04651b2d5706c995457d48d1d50a1ef7a17c55410956b3ae752b345dbd22b450b8b99b55c5600bf7a52f900d5e4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_xt={0x1090, 0x10, 0x0, 0x0, {{0x7}, {0x68, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x955}, @TCA_IPT_TARG={0x53, 0x6, {0x0, 'nat\x00', 0x0, 0xfff, "86ceb253185af2afcf7b2c827eac1b26b68f04a0f7a8e2a653727d7ca686e83de9861e5ad20c938e84"}}, @TCA_IPT_INDEX={0x8, 0x3, 0xb}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_vlan={0x13c, 0x2, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x5d5}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x6db}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x6, 0x118, 0x2, 0x315, 0x7}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}]}, {0xb9, 0x6, "bd0c8fb0ea928f9ccec23a2d5a966240bc74e56685e1ddbb8ea1de56244228e2a65502f5ca069bb0b4997f2c49e8da2f1b061d0c8242cca8d44e520f8d461c636706b4689c9de0c9fd9c538e2330a74bc3df23db924a6f7ee9898933fd6ebc719aaf08f8bc856a91b30870fcec846687c4a05c40afbb14715aee6cb57468b9030ab132d388ded4db6b3134cbb24f8f004c52b13559c9a8d4d6f32920db8834277457df4b2b43d3d057527d52250720ef8a369a5ae1"}, {0xc}, {0xc, 0x8, {0x3, 0x6}}}}, @m_simple={0xf0, 0x1e, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x7, 0x3, '/[\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x88, 0x7, 0x10000000, 0x10000, 0xf}}, @TCA_DEF_PARMS={0x18, 0x2, {0x40, 0x85, 0x2, 0x3, 0x9}}]}, {0x8a, 0x6, "5428fd19288da8c406b1d56c7aeeae4b8e737a00115d4d965d784bd1a118073d574e61d3a68f332740dd2c66dbe110c33ea7d550135a6b47a7d0c7e40b9796d0d37d4e620b0fe6cd5a65b0d1692a053e02358127c5224bbf51acf244e2039f55fdbb58627260690311a4ae71679767155f1f62979867f1704a1da022b81d467f14e305099742"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}, @filter_kind_options=@f_route={{0xa}, {0x428, 0x2, [@TCA_ROUTE4_POLICE={0x424, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0xffffffff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0xd82d, 0x1, 0xa, 0xfffffff4, 0x4, 0x6, 0x3, 0x6, 0x3, 0x1, 0x5, 0x9, 0x7, 0x0, 0x1, 0x113e, 0x7ff, 0x10001, 0x2, 0xe, 0x9076, 0x2805, 0x9, 0x4, 0x2, 0x2, 0x2, 0x3, 0x0, 0x4, 0x8001, 0x1, 0x4, 0x3, 0xb, 0xa, 0x3, 0x7, 0x80000000, 0x7ff, 0x2, 0x6, 0x5, 0x4261, 0x5, 0x10, 0x8, 0x3, 0xf, 0x10, 0x1, 0x0, 0x8, 0x7, 0xa, 0xf5f, 0x8, 0x9, 0x2b, 0x4db2, 0x3e, 0x1000, 0x10000, 0xc, 0x5, 0x7, 0xffffff80, 0x0, 0x10, 0xd, 0x9, 0x90, 0x400, 0x9, 0x9, 0x10001, 0x81, 0x9, 0x10, 0xa, 0x175e232f, 0x6, 0x9, 0x9, 0x1, 0x0, 0x0, 0xffff0000, 0x591d, 0x5, 0x9, 0x800, 0x5, 0x9, 0x9, 0x2, 0x2, 0xffffffff, 0x8, 0x7, 0x90, 0x1000, 0x8, 0x0, 0x8, 0x1, 0x4, 0x0, 0x1, 0xfffffffb, 0x6, 0x8, 0xfffff800, 0xffffffff, 0x8, 0xb, 0x6, 0x0, 0x13, 0x9, 0x7, 0x6, 0xb, 0xffffffff, 0xd28, 0x9, 0x3, 0xffff, 0x6, 0x6, 0x4, 0x7, 0xffffffff, 0x5, 0xf, 0x9af, 0x6, 0x2, 0x9, 0x7, 0x5, 0x6510, 0x4, 0x7fff, 0x8, 0x6, 0x80, 0x6, 0x3, 0x9, 0x0, 0x7, 0x4c3, 0x7f, 0x4, 0xfffffffc, 0x2, 0x401, 0x3, 0x29, 0x0, 0xfffffe00, 0x3, 0x8, 0x10, 0x8, 0x8, 0x265, 0x2, 0x7, 0x8, 0x7, 0x1, 0x78c, 0x775867cf, 0x6, 0x3, 0xfffffff8, 0x3d5, 0x3, 0xf8, 0x2, 0x6, 0x6, 0xdb, 0x2, 0x7, 0x5, 0xfffffffb, 0x5, 0x4, 0x1, 0x4, 0x8, 0xb60a, 0x3, 0x6, 0x7fff, 0xbd7, 0x8, 0x4, 0x4, 0x6, 0x9c, 0x3, 0x0, 0xbd, 0xfffffffb, 0xfffffffd, 0xffff, 0x6, 0x7ff, 0x21, 0x9, 0x6, 0xc, 0x80000000, 0x4, 0xffff8001, 0xfff, 0x1, 0x0, 0xffc00000, 0x9, 0x4, 0x9, 0x5, 0xaca, 0x2, 0x2, 0x4, 0xb6, 0x9, 0x7, 0x86, 0x3, 0x14603057, 0x1ff, 0x1, 0x7f, 0x2, 0x8, 0xfffffffd, 0x7, 0x9, 0x0, 0x7, 0x4, 0x6, 0x200, 0x6, 0x4, 0x5, 0x8001, 0xe3fe, 0x8001]}]}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x2a24, 0x2, [@TCA_BPF_ACT={0x1490, 0x1, [@m_mirred={0xe4, 0x19, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x4, 0x6, 0x80, 0x7}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x7, 0xffffffffffffffff, 0x400, 0xffff}, 0x3}}]}, {0x77, 0x6, "f3e8c6f06558f78f55cc2f68f3a8e5babce010a4842a5d7a49964a604d85419e481da8016f7589e262c423b093b46e7d6061f6ba10b9f46dab2459045861086345380fd33f42dd5dc77c49ecb5d1f45dc95f54de497079a00b4581ac35d8778d42076313a555f5bee185550fa44299696a6703"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x7, 0x1}}}}, @m_ctinfo={0x1058, 0x1f, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x4}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7ff}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3ff}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xfffb}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x400}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_ife={0xd8, 0x18, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x400, 0x5, 0x1, 0x9}}}]}, {0x93, 0x6, "46e1f9af26753980f1f4f78f20048ecdb573a4e12f682f4c8e70e2ff5ff7f1a4d07457af0adaf5416b16d9e0ee4324cf78254205528f1d4503ce86072b626cf3654d80087456fe62da9bdb804b857adbd3f52c60e262cd8540be086d551e86f9a5458c471f3c0ecc59ebbaf0f5647a610bb8e3784be6cfa156bb7771535e9aaf90264136ef7ae3664306addc115c6e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mirred={0x108, 0x12, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x7fffffff, 0x6, 0x3, 0x6}, 0x2}}]}, {0xbc, 0x6, "0de69e14cd99197b90362c0098c115396a890510414a70e42fd8d824f7c440712e4ff8f1a03cb8177a0597e22bb73ab9830ab3aefd631d99a7ae50749f6e4d422ca5a2c44279a13fd82771562cd83bd6e7139044f0672a83f0bac6b589e71bbfa75f1e6d0c79a6ad7ba806e12b18d5aeb3a7bbccdb3acdac053946c126cc4d5e6cfc97efeff32a3987f2df51e03492b73d00482cdc0b58415e033d7a51c23998c1612771584f8d75ff045d0128790d4170e276d77b55a435"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_tunnel_key={0x90, 0xa, 0x0, 0x0, {{0xf}, {0x4c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast1}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}}]}, {0x18, 0x6, "9670edd0f08bec90255b4df7d6c86c36786366d6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_sample={0xe0, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xfff, 0x200, 0x6, 0x9, 0x7}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0xf, 0x7, 0xfffffff8, 0x200}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}]}, {0x72, 0x6, "083d66476852d3c443f3c37f0dd25727dce8dd4b63c25df530782ac6ee490356eef7c0a1c3fb8b1e5d4af344fb68005f3f4f37126abba83212cf70a5c724af2894a2fcad60d2b8ef37b0c4931a84632646c170775237635617fb83e0f447303851c26654cf97169e1355af21ae56"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x8}, @TCA_BPF_FD={0x8}, @TCA_BPF_OPS={{0x6, 0x4, 0x9}, {0x4c, 0x5, [{0x71, 0xc0, 0x50, 0xc3}, {0x3ff, 0x80, 0x1, 0x3ff}, {0x5, 0x0, 0x33, 0x91}, {0x4, 0x9, 0x6, 0x9}, {0x7, 0xd, 0x9, 0x10}, {0x6, 0xf, 0x5, 0x5}, {0x4, 0x8a, 0x8, 0x5}, {0x4, 0x2, 0x1e, 0xb}, {0xee, 0x2, 0x80, 0x8000}]}}, @TCA_BPF_ACT={0x105c, 0x1, [@m_ctinfo={0x1058, 0x9, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x4, 0x0, 0x1, 0xb}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x4}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x8}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_POLICE={0x4bc, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7f, 0x4, 0x6, 0x3, 0xa, {0x5, 0x0, 0x40, 0xcc, 0x120, 0x1}, {0x6, 0x2, 0x6, 0x7, 0xffff, 0xe}, 0x3, 0xa, 0x6}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x401}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffffffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x20000000, 0x2f, 0x8, 0x6, {0x8, 0x1, 0x7, 0x8, 0x6, 0x8}, {0x1, 0x2, 0x6, 0x3, 0xe, 0x72dbcf65}, 0x4, 0x3, 0x49e6}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1ff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x9, 0x6, 0x8, 0x4, 0x401, 0x4000, 0x0, 0xffffffff, 0xfffffffc, 0x592, 0x46, 0x8, 0x1d35143f, 0x2, 0x6, 0x4, 0x8000, 0x10000, 0x8, 0x0, 0x3, 0x10001, 0xffff0001, 0x0, 0xa, 0x1, 0x7, 0x3, 0x4, 0x1000000, 0x2, 0x7, 0x7f, 0xa0, 0x4, 0xfffffffd, 0x1, 0x101, 0x6, 0xbffd, 0x6, 0xad5, 0x6, 0x1395, 0x5, 0x663, 0x8, 0x0, 0x81, 0x9, 0x3, 0x6, 0x4, 0x4, 0x9, 0x1, 0x4, 0x4, 0x8001, 0x5, 0x81, 0x9, 0x3563, 0xa, 0x2, 0x5ae5ff7, 0x4, 0x6dfc79d5, 0x1, 0xffffbe54, 0x4, 0xfb, 0x0, 0x8, 0x101, 0xb4d, 0x6, 0x6, 0xb, 0x9, 0x8, 0x401, 0x27, 0xffffcc4e, 0x9, 0x4, 0x5, 0x8, 0x9, 0x8, 0x0, 0x8, 0x3, 0x0, 0x6, 0x2, 0x6, 0xf419, 0x9, 0x6, 0x4, 0x6, 0x3, 0xcb, 0xe0, 0x6, 0xffffffd9, 0x7c, 0x10000, 0xffffffff, 0x6, 0x1, 0x9, 0x3, 0xb3, 0x6, 0x6, 0x3, 0x0, 0xa, 0xc7e8, 0x400, 0x80000001, 0x0, 0x8, 0x9, 0x3ff, 0x1, 0x6, 0x4a1b, 0x0, 0x7, 0x3d21, 0xfe9, 0x9, 0x0, 0xfffffc00, 0x0, 0x7, 0x4e, 0x80000000, 0x8, 0xfffffc00, 0x8, 0x80, 0x8, 0x4d, 0x66d, 0x9, 0x7, 0x2, 0x8001, 0x3ba, 0x1, 0x5, 0x3, 0x7, 0xec, 0xf, 0x8000000, 0x7ff, 0x8, 0x7, 0xaa, 0xffff4b4c, 0x18a, 0x401, 0x0, 0x8, 0xa, 0x7, 0x0, 0xc8a, 0x7, 0x1, 0x52, 0x800, 0x3, 0x8, 0x2, 0x2, 0x3, 0x7fff, 0x7, 0x4, 0xf6, 0x8, 0x24, 0x9, 0x7, 0x0, 0x3, 0x9, 0xffff, 0x2d, 0x5, 0x800000, 0x4f35, 0x358, 0x40000, 0x3, 0x5, 0x9, 0x6, 0x9, 0x200, 0x6, 0x4, 0x5, 0xe, 0x0, 0x10000, 0x200, 0x101, 0x7fff, 0x3, 0xf4, 0xb175, 0x7, 0x9, 0x2, 0x80000001, 0x80000000, 0x4, 0x6ac, 0x3, 0x2, 0xff1, 0x7, 0x6, 0x0, 0x5, 0xfa16, 0x9, 0x0, 0x7, 0x1, 0x9, 0x0, 0x4, 0x10, 0xffffff69, 0x83f2, 0x5, 0x9, 0x8, 0xfffffffc, 0x1, 0x7, 0x0, 0xfffffffa, 0xdb, 0x1, 0x9, 0x3]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0xff}]}, 0x8dbc}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = epoll_create1(0x0) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000000)={0x90000001}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000000000)={0x1a, {"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", 0x1000}}, 0x1006) 4.543523866s ago: executing program 0 (id=1036): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @private}}, 0x80, 0x0, 0xe, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000010010000010000008c0fbd205e6d"], 0x10}, 0x8000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3c085789408059ce, 0x12, r0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40046f41, &(0x7f0000000440)=0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000280)='rxrpc_local\x00', r4, 0x0, 0x5}, 0xfffffe2e) kexec_load(0x0, 0x0, &(0x7f0000000000), 0x320000) r5 = socket$inet6(0xa, 0x80002, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0xffff, 0x3, 0x3, 0x8, 0x0, @local}, 0x10) sendmmsg$inet6(r5, &(0x7f0000003cc0), 0x0, 0x4001c00) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000500)={[&(0x7f0000000000)='.+-:\x00', &(0x7f0000000540)=' T\xfc\x81\x8e\x9f5\x0e \x043[B\xad\x13\x9f\xae\x8f\xbb\x9a\x0f\x9f\x13\xa5\xfc9\xbb\xa4.\xf4\xeb\x03\xf1\xb6\x8c\xc4E\x93\n&k\xec\xc8\\h\xd6\x1e\xcb\fA\\da/O\xdcn7\x1b@\xbf\xfb\x17J\xaaD\xe4\x01\xbc\xdc\n\x88\xfc\xcci\xc1\xe8\xf8\x1e6&\bE\x8f\x9b\xc6\x8d0\xa7 -\xecC8O*7\xfa&\xf9\aC\xab\x03g\x06\xda\x8c)\xae\xe3\x16\x9dz\x87\xd6OZX\xa4\xee\xa7\xebe\x14Qp\x96\x00\xd0VK\xe2$i\xd4\xcb-\xd4\x82w\x13\x98\xfcW\x9d\xff\xed\xd4\x14;]\xf8\xccS\xddl\x96v\x97\x988\xa7sQ\x1aN\xbdU.\x89\\\xfa\xc2\xcd\xde', &(0x7f0000000300)='urity.\x15\x00\x00_\x1b\xcf\xff\xf9G\x84\x87D\x91\xff\xe0\xf3b\xe2\x8di\xc8qk\x80F\x86F\x9a\xc7\xe9\xec?\b\xe5\x93\x0e!P$D?(C\xc4\x87_\x9d\xe2S1\x0fV\xab*\xe9\xdfu\x8e\x1d\xe3\x82R\x82\x0f\xd6\xadb\xd7\xad\n\t\xb2\x06\xa5UK\xaa\xdc<\xc8\xfa\x17t\x15 Ui\xd9\xfd\xd0\xe9\xe8\xcc7\x10Bf\xc2\x8f\x85\x04\x0f\xf9\xac\x0e\xce\x93mJU\x03\xef[d\xdf\xbd)\xc6T\xc1y\x03\xd8(H\xa2~aP\x98\x01\vpi\x03\xac\xdcj5a\xc9\ru\x19La\xe8Y\xc3\x85\x01\xc1G*8\x04\xc9\x11\xab\xbd\v\x9d\xbfy\xfd\xc55\t\x11', &(0x7f0000000440)='\x00']}) openat$fuse(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) 3.934748624s ago: executing program 5 (id=1037): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2$watch_queue(0x0, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x10) openat$dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x8b540, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x29) r5 = open_tree(r4, &(0x7f0000000280)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3.538511608s ago: executing program 0 (id=1038): r0 = syz_socket_connect_nvme_tcp() sendto$inet_nvme_pdu(r0, &(0x7f00000001c0)=@data_h2c={{0x6, 0x0, 0x18, 0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, "cfbf3586"}, 0x80, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="2021cd000000cd0b7f0c274e1fa96eb96a944c541ad3bf9a1b66ede4aa27884f9d3e4eb0ebaa329a9131ccd5a9b50c933d476485cb09bec60b7879f11dd00458d4035aaade3a4aafd7d5bb16d5af449c95e538316fe98837c82789566d9dd7d9f2d21f477c9074252b5aae4b69fccde938cf8f7a8328051188c774aaad8536d12fde01ae69cb44b90db9961c1de0dff3e5c7bcd90ffac3b9a5392dffc91a3a9c6fab66d833515b9d1a"], 0x0}, 0x0) epoll_create1(0x0) wait4(0x0, 0x0, 0x1000000, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000180)={0x0, 0x0, 0xfffffffd}) 3.47304805s ago: executing program 5 (id=1039): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)) (fail_nth: 3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83b, 0x10, 0x2}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r2, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') creat(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x94) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xe) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f00000001c0)='./file0\x00') setuid(0xee01) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x1e, 0x800, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg(r6, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/82, 0x52}], 0x1}, 0x81}], 0x1, 0x2000, 0x0) recvmmsg$unix(r6, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmmsg(r6, 0x0, 0x0, 0x9200000020004800) syz_init_net_socket$ax25(0x3, 0x2, 0xcf) 3.007970001s ago: executing program 5 (id=1040): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, 0x0) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)={0x3, @default, r0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x442000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000340)={{0x1, 0x3, 0x7, 0x1, 0x8}}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) futex(0x0, 0x189, 0x0, 0x0, 0x0, 0x1) 2.545380765s ago: executing program 5 (id=1041): r0 = socket(0x1e, 0x1, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000040)={@host}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x6d91fb6102d8d9cc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f000840031b000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) creat(0x0, 0x0) syz_io_uring_setup(0x85e, 0x0, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000080), 0x0) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0xc0403d08, 0xffffffffffffffff) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) chdir(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r1, 0x7b2, &(0x7f0000000000)={&(0x7f0000000a80)=[0x6, 0x4, 0x1, 0x200, 0x7, 0x8001, 0x3, 0x24, 0x1000, 0x800, 0x9, 0x2, 0x8, 0x6a58000, 0x0, 0x2, 0xc, 0x0, 0x8, 0x6, 0x0, 0x80000000, 0x7, 0x3, 0x9, 0x9, 0x940, 0x1, 0xfffff001, 0x99, 0x0, 0x3, 0xf64, 0x4, 0x800, 0x81, 0x1, 0x9, 0x9, 0xffffff00, 0x3, 0x1, 0x0, 0x1, 0xe41, 0x7, 0x1, 0x2, 0xd35, 0x7fffffff, 0x8, 0x4, 0x5, 0x48, 0x0, 0xa0, 0x1, 0x7, 0x12, 0x200, 0x7, 0x4f8, 0xfffffff9, 0x509, 0x3, 0x9, 0x7, 0x2, 0x2be, 0x4321, 0x9, 0xfff, 0x2542, 0x1000, 0x2, 0x1, 0x5, 0x7f, 0x40, 0x3, 0x1, 0x0, 0xc, 0x7, 0x7, 0x3, 0xfff, 0xe318, 0x8, 0x7fff, 0x3, 0x5, 0x0, 0xa, 0x9, 0x75d68c4, 0x80000000, 0x0, 0x200, 0x1, 0xf, 0x9, 0x1, 0x7, 0x40, 0xc4, 0x5, 0x8, 0x2, 0x7, 0x10001, 0x8da, 0x5, 0x6, 0x3d5b, 0x5, 0x7, 0x80000000, 0x7fff, 0x6, 0x1d000, 0x2, 0x6, 0x400, 0x2, 0x401, 0x867, 0x4, 0x2, 0x3, 0x5, 0x9, 0x8, 0xffffffc8, 0x1, 0xffff, 0x0, 0x0, 0xd, 0x4, 0x5, 0x4, 0x0, 0x0, 0x1, 0x400, 0x7e8, 0x7, 0x5, 0x0, 0x7ff, 0x3, 0x6, 0x1, 0xd, 0x1, 0x6, 0x8001, 0x10000, 0x4, 0x2, 0xff, 0x36eb0703, 0x400, 0x4, 0x0, 0x7fffffff, 0x401, 0x7ff, 0x2, 0x3089, 0x9, 0xffffff02, 0xffffffb8, 0x6, 0x8, 0x5, 0x3, 0x538, 0x9, 0xff, 0x9, 0x2, 0x1, 0x4, 0xd, 0x36, 0x9, 0x0, 0x10, 0xd, 0x0, 0x6, 0xfffffff2, 0xfffffffb, 0x9, 0xdf7f, 0x9, 0xfffffffd, 0x3, 0x16c, 0x26, 0x6ce92041, 0x3, 0x1, 0x800, 0x1, 0x3, 0xba2, 0x7, 0x7, 0x6, 0x9, 0x2, 0x0, 0xfffff800, 0x4, 0xb67, 0x7fffffff, 0x2, 0x40, 0x9, 0x3, 0x5, 0xfffffff7, 0x4, 0x4, 0x10001, 0x2ae3, 0x4, 0x8, 0x6, 0x7, 0x7, 0xffffae52, 0x6, 0x5, 0x1, 0x9, 0x7ff, 0x7ff, 0xe, 0x0, 0x9, 0x0, 0x0, 0x9, 0x8000, 0x40, 0x2, 0xf, 0x7fffffff, 0x4, 0x0, 0x672, 0x9, 0x69d, 0x3, 0x3, 0x88bc, 0x1, 0x8, 0x1, 0x5, 0xb, 0x1, 0x401, 0x10000, 0x8001, 0x305f, 0x4, 0x8001, 0x38f53ed, 0x4, 0x70ec, 0x5, 0x3, 0x7, 0x0, 0x5, 0x5, 0x3a, 0x0, 0x80, 0x1, 0x4363, 0x4, 0x2f1e, 0x4, 0x8000, 0x8, 0x2, 0x5, 0x7, 0xffff, 0x80000000, 0x101, 0x6, 0x1, 0xbf7, 0x8, 0x80, 0x80000000, 0x2, 0xa, 0x6, 0x81, 0x3, 0x0, 0x4, 0x4b8d2812, 0xff, 0x1, 0x12d, 0x9, 0x1e, 0x6, 0x5, 0x7, 0x8, 0x5, 0x80, 0x7b, 0x2, 0x4, 0x7d, 0x40, 0x26, 0xfffffffe, 0x7fffffff, 0x2, 0x8, 0x3, 0x5, 0x6, 0x6, 0x9df, 0x9, 0x9, 0x7, 0x3, 0x4, 0xd8, 0x3ff, 0x53, 0x80000000, 0x8, 0xfd, 0x6, 0x0, 0x0, 0x10, 0x5, 0x7, 0xfffffff0, 0x800, 0x9, 0xd33, 0x10, 0x8, 0x36, 0xc04b, 0xff, 0x3, 0xf0000000, 0x3, 0xffffb67c, 0x5, 0xc, 0xfffffff6, 0x32, 0x2, 0x2, 0x2, 0x3ff, 0x9, 0x80000001, 0x9, 0x4, 0x4, 0x7, 0xa, 0x1, 0x54c8, 0x100, 0x45, 0x8, 0x0, 0x3, 0x4d, 0x3, 0x4, 0x8, 0x7ff, 0x40, 0x1, 0x55a, 0x7, 0x1, 0x4ea, 0x81, 0x7, 0x3, 0x5, 0x8000, 0x8000, 0x3, 0x5, 0xa, 0x933b, 0x0, 0xffffff01, 0x8e5, 0x5, 0xef8, 0x4, 0xa4, 0x4, 0x8ec0, 0x1000, 0xf, 0x3, 0xf, 0x6, 0x81000, 0x3, 0x5, 0x1, 0x5, 0xffffff85, 0xb264, 0x1, 0xfffff053, 0x0, 0x8, 0x1, 0xe16, 0x8, 0xffff279f, 0x53d, 0x2, 0x3, 0x6, 0x0, 0x3, 0x0, 0x7, 0x3, 0xa, 0xfffffffd, 0x6, 0x7, 0x5, 0x2, 0x81, 0x26f, 0x7, 0xfff, 0x6, 0xffffffff, 0x7, 0x3, 0x7, 0x6, 0x8, 0x5, 0x5efc, 0xffffffff, 0xe, 0x61b, 0xffc00000, 0x8, 0xfff, 0x3, 0x9, 0x2, 0x9, 0x4, 0x6, 0xca, 0x9, 0x0, 0x10001, 0x3, 0x59, 0x80000000, 0x0, 0x3ff, 0x4, 0x7, 0x7, 0x0, 0xbb, 0x6, 0xd4b0, 0x7, 0x3, 0x40000, 0x5c6, 0x3, 0x4, 0x3, 0x9, 0x80, 0xfffffff9, 0x5, 0x7, 0x200, 0x4e, 0x7f, 0x1, 0xfe, 0x1, 0x422a, 0x6, 0x8, 0x3, 0x4ee3, 0x1, 0x1, 0xffffffff, 0x559, 0x6, 0x507, 0x3, 0x5, 0x9f7, 0xbfc3, 0xf, 0x9, 0x68, 0x40, 0xfda5, 0x9, 0x829f, 0x7, 0x9, 0x10, 0x40, 0x4, 0x7, 0x7, 0x287, 0x0, 0x8, 0x2, 0x80000001, 0x3, 0x6, 0xf, 0x8, 0x6, 0x3, 0xdb86, 0xfffffffa, 0x1, 0x1, 0x9, 0x8, 0x2, 0x80000000, 0x28e, 0x9, 0x6, 0x1, 0x4, 0x7, 0x4, 0x2, 0x6, 0xffffffff, 0x5, 0x4c0, 0x6, 0x8001, 0x3ff, 0xfffff000, 0x9, 0x5, 0x7, 0x4, 0xe8da, 0x3, 0x5, 0x80000001, 0x10, 0x7fff, 0x9, 0x7bb9, 0xfffffff5, 0x200, 0x2, 0x3e, 0x0, 0xfffffff7, 0x81, 0x6, 0x9, 0x10000, 0x401, 0x1, 0xc82, 0x8, 0xdc1d, 0x1, 0xf, 0x4, 0x3ff, 0x5, 0x7, 0x4, 0x1, 0x57, 0x81, 0xa, 0xf4, 0x9, 0x5, 0x7, 0x9, 0x7ff, 0x8, 0x6, 0x3ff, 0x80, 0x1, 0x7, 0x9, 0x9, 0x5, 0x9, 0x6, 0x3ff, 0x10, 0x4, 0x8, 0xb7e, 0x9b, 0xfffffffe, 0x9, 0xfffffffa, 0x2, 0x3, 0x7ff, 0x4, 0x3, 0x40, 0xc, 0x4, 0x7bef, 0x1, 0x80, 0x3, 0xffffff00, 0x2a, 0x200, 0x4, 0x1, 0x5, 0x0, 0x7, 0x2, 0x2ca, 0xb6, 0x8000000, 0xffffff6c, 0xfffffffa, 0x59, 0x8, 0x2, 0x8, 0x3, 0xffffff13, 0x3, 0x9, 0xb, 0x5, 0x7, 0x401, 0xf, 0x8, 0x1, 0x3, 0x1, 0x10001, 0x9, 0x38, 0xe, 0x3f8f, 0x9, 0x8, 0x9ee3, 0x2, 0x2, 0x80000000, 0x3ff, 0xfffff9c1, 0x873c, 0x80000001, 0x0, 0x0, 0x126, 0x40b927a2, 0x5, 0x5, 0x0, 0x8, 0x3, 0x5, 0x3, 0x5, 0x8, 0x5, 0xf, 0x80, 0x8, 0x200, 0x6f, 0x7f, 0x2, 0x6e, 0xa, 0x7, 0xf, 0x803c, 0x5, 0x3, 0x8, 0x1, 0x10001, 0x80, 0x5, 0x0, 0x1, 0x9, 0x0, 0x81, 0x5, 0x8, 0x1000, 0x7, 0x0, 0x401, 0x1, 0xa, 0x6, 0x1, 0xfffffff8, 0x3d, 0x10, 0x6, 0x9, 0xfffffffd, 0xffffffff, 0xd6a, 0x8, 0x8, 0x7c, 0x7fff, 0xeb, 0x7, 0xa9, 0x6, 0x6, 0xc77, 0x2, 0x0, 0xfff, 0x1, 0x9, 0x5, 0x6, 0x1, 0x0, 0x1, 0x6, 0x5, 0x6, 0x9, 0x1, 0xc77e, 0x0, 0x1, 0x381074c1, 0xfffffff8, 0x4, 0x4, 0x10001, 0xc0, 0x3ba5, 0x1, 0x7fff, 0x5233, 0xfffffffa, 0x6, 0xffff8001, 0x6, 0x7, 0x3, 0x5, 0x7fff, 0x4, 0x6, 0x3, 0x3, 0x2, 0x0, 0x9, 0x8, 0x7, 0x3, 0x4, 0x252, 0x1, 0x5, 0x101, 0x8, 0xd, 0x0, 0x1, 0x481a4b2, 0x9, 0x8, 0x400, 0xffff, 0x7, 0x6, 0x8, 0x3, 0x85f, 0xfffffffd, 0xa, 0x6de, 0x8, 0x4, 0x3ff, 0x0, 0x401, 0x905, 0x3, 0xffff, 0x17, 0x776bf1bd, 0x9, 0x8, 0x8, 0x2, 0x1e6, 0x6, 0x5, 0x9, 0x5, 0x10, 0x8000, 0x8001, 0x3, 0x2fff, 0x7, 0x401, 0x2, 0x0, 0x78, 0x6, 0xca, 0x3ff, 0x3, 0x4, 0xd, 0x7ff, 0xc, 0x80000000, 0x8001, 0xa, 0x7f, 0x2, 0x9, 0x5, 0x50, 0xfffffffd, 0x774c, 0xcf6, 0x9, 0x8, 0x9, 0x8, 0xa9, 0x5, 0x2, 0x5, 0x9, 0xb4, 0xfffffff9, 0x7, 0x400, 0x8, 0x3f, 0x7fff, 0x80, 0x254, 0x8, 0x5, 0x2, 0x3, 0x2, 0x687a, 0x5, 0x80, 0x2, 0x5, 0x7, 0x3ff, 0x4, 0xf095, 0x16c, 0x5, 0xe8b3, 0x3, 0x6, 0xfffffff7, 0x6, 0x0, 0x80000000, 0x1, 0x10000, 0x2, 0x7f, 0x0, 0x6, 0xfb, 0x25a2, 0x3aa6, 0xfffffff3, 0x5, 0x401, 0xa, 0xa59f, 0x5, 0x4, 0xa203, 0x7, 0xffffffff, 0x7, 0x0, 0x3, 0x3, 0x4b, 0x2, 0x7fffffff, 0xff, 0x3, 0x80, 0x1, 0xffff0001, 0xfffffffd, 0x80000000, 0x2, 0x7, 0x6e8, 0x5, 0x192, 0x3, 0x9, 0x200, 0xba, 0x71, 0xe6, 0x9b7, 0x4, 0xf, 0x3, 0x2, 0x81, 0x1, 0x4, 0x10, 0x149, 0x2, 0x100, 0xffffffff, 0x7, 0x6, 0x7, 0x2, 0x3, 0x7, 0x2, 0xe81, 0x100, 0x8, 0x200, 0x6, 0x8, 0xa, 0x0, 0xfffffffd, 0x7, 0x1, 0x7, 0xdf08, 0x6, 0x4, 0x0, 0x1, 0x7, 0x4, 0x6, 0x100, 0x7, 0x7, 0x100, 0x6, 0x400, 0x13, 0x4b77, 0x8, 0x6, 0x1, 0x200, 0x9, 0x3ff, 0x400, 0x5, 0x8, 0xfffffffe], 0x2, 0x400, 0x8}) listen(r0, 0x0) 1.891833247s ago: executing program 5 (id=1042): mkdir(0x0, 0x0) open(0x0, 0x400, 0x43) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x8) socket$rxrpc(0x21, 0x2, 0x2) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) read$alg(r3, &(0x7f00000012c0)=""/4109, 0x100d) sendmmsg$alg(r3, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000002540)=[{&(0x7f00000002c0)="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", 0xa68}, {&(0x7f00000000c0)}, {0x0}], 0x3, 0x0, 0x0, 0x20000000}], 0x1, 0x4000080) 1.735237855s ago: executing program 4 (id=1043): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) r1 = socket$inet6(0xa, 0xa, 0x400000) sendmmsg$inet6(r1, 0x0, 0x0, 0xc8000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000002d80)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SG_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000340)={'\x00', 0x0, 0x3, 0x0, 0xb, 0x5}) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, &(0x7f00000004c0), 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x80000000, 0x3, 0x9, 0xfffffffffeffff83, 0x3, 0x1, {0xffffffffffffffff, 0x3ff, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d615, 0x3fb, 0x7, 0x6, 0x1000, 0x8, 0x0, 0x0, 0x3ff, 0x6}}, {0x0, 0xc}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f04) read$FUSE(r3, &(0x7f0000002080)={0x2020, 0x0, 0x0}, 0x2020) r5 = socket(0x10, 0x2, 0x4) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0xfffffffc, {0x2, 0x0, 0x0, 0x0, {0xd, 0xffff}, {0xb, 0x1}, {0x4, 0x8}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0xfc, 0x3, 0xa, 0x1, 0x0, 0x7c}}, {0x4}}, {{0x1c, 0x1, {0x6, 0x49, 0x6, 0x1, 0x2, 0x10001, 0x7f}}, {0x4}}]}]}, 0x68}}, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x2, 0x0, 0x5, 0x7a880bb668777da9}, 0x9c) sendmsg$inet_sctp(r3, &(0x7f00000006c0)={&(0x7f00000000c0)=@in6={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000700)="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", 0x100}, {&(0x7f00000005c0)}], 0x2, &(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000008400000700000000ff0200000000000000000000000000011c000000840000000200000006000400b899", @ANYBLOB="31a5f1d9e9f012798dcaa1e562057ee840310a4773451c8d2f7a530e0fe0609e2c11a5ac91f8f7905ca9f672dd76e45ccd3634acd9d32b38f673da619e8a2aea70f487a511b4a2c2bc5e6cf11f7a24c84883b58f0ae688a600a61ad090fd191a48db5172dddf0d20944ac5993477842693fb506062056296c6297eeeaa07be7ac51aa880b8a844bd84e65807a59cbe4b63a97c561a05e221042ac155d0d7756e383b7eb3a326fc9911c4c86748330342d3a5", @ANYBLOB="1000000084000000060000000400000010000000840000000600000040000000"], 0x58, 0x40400d4}, 0x44040) write$FUSE_WRITE(r3, &(0x7f0000000000)={0x18, 0x0, r4, {0x2}}, 0x18) write$vhost_msg_v2(r0, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) 1.121142183s ago: executing program 4 (id=1044): openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffff9c, 0x0, 0x41, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400100bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000007, 0x1010, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000a65000/0x1000)=nil, 0x1000}}) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, &(0x7f0000000240)=[{0x0}, {0x0, 0xffffffffffffff6c}], 0x2, &(0x7f00000002c0)=ANY=[], 0x30}], 0x1, 0x200048c0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @broadcast}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[], 0x28}}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x40025}, 0x0) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8400, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000380), 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000200)={0x8f, 0x0, 0xe}) 1.061063629s ago: executing program 0 (id=1045): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) setrlimit(0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000780), 0xffffffffffffffff, 0x2}}, 0x18) (fail_nth: 3) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) 535.592712ms ago: executing program 0 (id=1046): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3b071, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000180)={0x0, 0x2, 0x80000, 0xb3}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socket$kcm(0x11, 0xa, 0x300) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x200}}, './file0\x00'}) write$UHID_INPUT(r1, &(0x7f00000005c0)={0x8, {"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", 0x1000}}, 0x1006) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000200000000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x5, 0xe, 0x0, &(0x7f0000000000)="255161fc12e31d068d10d1c2bd39", 0x0, 0x1f, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) mmap(&(0x7f000030b000/0x1000)=nil, 0x1000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r7, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0xfffffffffffffda1, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r7, {0xa, 0x9}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x4) 230.763158ms ago: executing program 33 (id=1019): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) r1 = syz_io_uring_setup(0x38a9, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200c08a5}, 0x8000) socket$can_raw(0x1d, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r7, {0x7, 0x6}, {0xffff}, {0x1}}}, 0x24}}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r0}) io_uring_enter(r1, 0x44fd, 0x3, 0x1, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) 119.204798ms ago: executing program 4 (id=1048): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000600), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2800, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r1, 0x0) dup3(r1, r0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1f, 0x12, 0xffffffffffffffff, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x1358, 0x2) userfaultfd(0x80001) syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) listen(0xffffffffffffffff, 0x1) shutdown(0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r4 = dup(r3) syz_io_uring_setup(0x4b5e, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r4}, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) 0s ago: executing program 5 (id=1049): listen(0xffffffffffffffff, 0x7ff) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002840)={0x14, 0x1e, 0x201}, 0x14}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0xfffffff3}]}}]}, 0x38}}, 0x0) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x4200, 0x0) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0) write$binfmt_script(r6, &(0x7f0000000100)={'#! ', './file0', [{0x20, '/dev/snd/midiC#D#\x00'}, {0x20, '.\'-+.'}], 0xa, "37f9c7a03be172284c1d513d1297c9767fcec735612bc896fa795a1fbda088e1f7442f3fcb7bf96a9c4ae5cfd690ea0b51eb573910c482f9c19b3a733db64ba26848d04edc1795eafcc93244e409d64a87e795e1cf5a577ad462ba7a17c111c9c24cadf68646c9c494dca3c06588cdd05741fb6beffb35308e391ff974d41ec3b01409ef97533844957001d4c603569de0979f9f27601b2d18efc21d0729d0bdb86726aee0fbe5390d96fdd2c8e3f411dba54dc0a5717912733d77c6d8bd30b12a902b34efdaa0060d5d0fb90e4eac4abafbf4ce46df5ffc61ae1be2c87b21"}, 0x103) write$selinux_load(r5, &(0x7f0000000000)=ANY=[], 0xfdb7) kernel console output (not intermixed with test programs): : 00007ffe48029458 [ 281.891880][ T8629] [ 282.549950][ T30] audit: type=1400 audit(1751340138.427:441): avc: denied { module_request } for pid=8634 comm="syz.2.694" kmod="netdev-bridge0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 282.601114][ T3669] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 282.721185][ T30] audit: type=1400 audit(1751340138.597:442): avc: denied { connect } for pid=8634 comm="syz.2.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 282.762229][ T3669] usb 1-1: Using ep0 maxpacket: 8 [ 282.781839][ T3669] usb 1-1: unable to get BOS descriptor or descriptor too short [ 282.828095][ T3669] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 282.866542][ T8495] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 282.904903][ T5822] Bluetooth: hci1: command 0x0406 tx timeout [ 283.012621][ T3669] usb 1-1: can't read configurations, error -71 [ 283.041133][ T5822] Bluetooth: hci4: command 0x0c1a tx timeout [ 283.047432][ T51] Bluetooth: hci2: command 0x0405 tx timeout [ 283.053943][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 283.201657][ T30] audit: type=1400 audit(1751340139.047:443): avc: denied { execheap } for pid=8640 comm="syz.5.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 283.396319][ T8495] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 283.467700][ T8495] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 283.531163][ T8495] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 283.821019][ T30] audit: type=1400 audit(1751340139.647:444): avc: denied { read } for pid=8649 comm="syz.0.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 285.101062][ T5822] Bluetooth: hci2: command 0x0405 tx timeout [ 285.242776][ T5822] Bluetooth: hci3: command 0x0406 tx timeout [ 285.260937][ T8668] input: syz0 as /devices/virtual/input/input40 [ 285.274920][ T8495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.294402][ T8495] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.393087][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.400307][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.418495][ T5822] Bluetooth: hci4: command 0x0c1a tx timeout [ 285.452874][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.460177][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.439205][ T8495] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 286.450168][ T8495] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 286.538202][ T8675] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.184710][ T5822] Bluetooth: hci2: command 0x0405 tx timeout [ 287.482466][ T5822] Bluetooth: hci4: command 0x0c1a tx timeout [ 287.761986][ T8695] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 288.244709][ T8495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.315710][ T8495] veth0_vlan: entered promiscuous mode [ 288.329176][ T8495] veth1_vlan: entered promiscuous mode [ 288.352494][ T8699] FAULT_INJECTION: forcing a failure. [ 288.352494][ T8699] name failslab, interval 1, probability 0, space 0, times 0 [ 288.371378][ T8699] CPU: 0 UID: 0 PID: 8699 Comm: syz.4.707 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 288.371410][ T8699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 288.371421][ T8699] Call Trace: [ 288.371426][ T8699] [ 288.371431][ T8699] dump_stack_lvl+0x16c/0x1f0 [ 288.371457][ T8699] should_fail_ex+0x512/0x640 [ 288.371475][ T8699] ? fs_reclaim_acquire+0xae/0x150 [ 288.371489][ T8699] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 288.371507][ T8699] should_failslab+0xc2/0x120 [ 288.371536][ T8699] __kmalloc_noprof+0xd2/0x510 [ 288.371555][ T8699] tomoyo_realpath_from_path+0xc2/0x6e0 [ 288.371572][ T8699] ? tomoyo_profile+0x47/0x60 [ 288.371590][ T8699] tomoyo_path_number_perm+0x245/0x580 [ 288.371602][ T8699] ? tomoyo_path_number_perm+0x237/0x580 [ 288.371616][ T8699] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 288.371627][ T8699] ? stack_trace_save+0x8e/0xc0 [ 288.371644][ T8699] ? __pfx_stack_trace_save+0x10/0x10 [ 288.371662][ T8699] ? __lock_acquire+0xb8a/0x1c90 [ 288.371687][ T8699] ? __pfx___might_resched+0x10/0x10 [ 288.371707][ T8699] ? down_write_killable+0x154/0x250 [ 288.371719][ T8699] ? __pfx_down_write_killable+0x10/0x10 [ 288.371728][ T8699] ? mnt_get_write_access+0x20c/0x300 [ 288.371741][ T8699] security_path_chmod+0x121/0x2c0 [ 288.371757][ T8699] chmod_common+0x179/0x480 [ 288.371780][ T8699] ? rcu_is_watching+0x12/0xc0 [ 288.371795][ T8699] ? __pfx_chmod_common+0x10/0x10 [ 288.371816][ T8699] ? putname+0x154/0x1a0 [ 288.371835][ T8699] __x64_sys_chmod+0x107/0x1c0 [ 288.371851][ T8699] ? __pfx___x64_sys_chmod+0x10/0x10 [ 288.371868][ T8699] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 288.371885][ T8699] do_syscall_64+0xcd/0x4c0 [ 288.371902][ T8699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.371915][ T8699] RIP: 0033:0x7f7c09b8e929 [ 288.371925][ T8699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.371939][ T8699] RSP: 002b:00007f7c0a92e038 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 288.371957][ T8699] RAX: ffffffffffffffda RBX: 00007f7c09db6080 RCX: 00007f7c09b8e929 [ 288.371968][ T8699] RDX: 0000000000000000 RSI: 0000000000000147 RDI: 0000200000000000 [ 288.371977][ T8699] RBP: 00007f7c0a92e090 R08: 0000000000000000 R09: 0000000000000000 [ 288.371986][ T8699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.371996][ T8699] R13: 0000000000000000 R14: 00007f7c09db6080 R15: 00007fff299800d8 [ 288.372019][ T8699] [ 288.372495][ T8699] ERROR: Out of memory at tomoyo_realpath_from_path. [ 288.694683][ T8495] veth0_macvtap: entered promiscuous mode [ 288.727796][ T8495] veth1_macvtap: entered promiscuous mode [ 289.117534][ T8495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.294384][ T8495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.446666][ T8495] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.458026][ T8495] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.468427][ T8495] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.477209][ T8495] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.556779][ T3459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.576335][ T3459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.655167][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.668867][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.074712][ T8708] 9pnet_fd: Insufficient options for proto=fd [ 290.997579][ T8720] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 292.109999][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.218451][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.418305][ T8733] FAULT_INJECTION: forcing a failure. [ 292.418305][ T8733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 292.431657][ T8733] CPU: 0 UID: 0 PID: 8733 Comm: syz.0.715 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 292.431683][ T8733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 292.431694][ T8733] Call Trace: [ 292.431701][ T8733] [ 292.431708][ T8733] dump_stack_lvl+0x16c/0x1f0 [ 292.431743][ T8733] should_fail_ex+0x512/0x640 [ 292.431772][ T8733] _copy_from_user+0x2e/0xd0 [ 292.431799][ T8733] inet6_ioctl+0x232/0x2b0 [ 292.431829][ T8733] ? __pfx_inet6_ioctl+0x10/0x10 [ 292.431859][ T8733] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 292.431879][ T8733] sock_do_ioctl+0x115/0x280 [ 292.431896][ T8733] ? __pfx_sock_do_ioctl+0x10/0x10 [ 292.431913][ T8733] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 292.431936][ T8733] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 292.431956][ T8733] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 292.431978][ T8733] sock_ioctl+0x227/0x6b0 [ 292.431992][ T8733] ? __pfx_sock_ioctl+0x10/0x10 [ 292.432005][ T8733] ? hook_file_ioctl_common+0x145/0x410 [ 292.432034][ T8733] ? selinux_file_ioctl+0x180/0x270 [ 292.432050][ T8733] ? selinux_file_ioctl+0xb4/0x270 [ 292.432068][ T8733] ? __pfx_sock_ioctl+0x10/0x10 [ 292.432083][ T8733] __x64_sys_ioctl+0x18b/0x210 [ 292.432101][ T8733] do_syscall_64+0xcd/0x4c0 [ 292.432122][ T8733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.432136][ T8733] RIP: 0033:0x7f9264f8e929 [ 292.432149][ T8733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.432162][ T8733] RSP: 002b:00007f9262df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 292.432176][ T8733] RAX: ffffffffffffffda RBX: 00007f92651b6080 RCX: 00007f9264f8e929 [ 292.432185][ T8733] RDX: 0000200000005fc0 RSI: 000000000000890c RDI: 0000000000000007 [ 292.432202][ T8733] RBP: 00007f9262df6090 R08: 0000000000000000 R09: 0000000000000000 [ 292.432210][ T8733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.432218][ T8733] R13: 0000000000000000 R14: 00007f92651b6080 R15: 00007ffe48029458 [ 292.432237][ T8733] [ 293.201775][ T8744] netlink: 'syz.0.718': attribute type 1 has an invalid length. [ 294.292970][ T8744] 8021q: adding VLAN 0 to HW filter on device bond5 [ 294.647682][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.734716][ T30] audit: type=1400 audit(1751340150.617:445): avc: denied { bind } for pid=8754 comm="syz.4.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 294.736931][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 294.814580][ T30] audit: type=1400 audit(1751340150.617:446): avc: denied { name_bind } for pid=8754 comm="syz.4.723" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 294.886678][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 294.899513][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 295.891763][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 295.899401][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 295.906786][ T30] audit: type=1400 audit(1751340150.617:447): avc: denied { node_bind } for pid=8754 comm="syz.4.723" saddr=2001::2 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 296.287997][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.905097][ T13] bridge_slave_1: left allmulticast mode [ 296.918725][ T13] bridge_slave_1: left promiscuous mode [ 296.938964][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.015917][ T13] bridge_slave_0: left allmulticast mode [ 297.022680][ T13] bridge_slave_0: left promiscuous mode [ 297.035348][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.097481][ T8790] netlink: 'syz.0.731': attribute type 1 has an invalid length. [ 298.256986][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.270352][ T8791] block device autoloading is deprecated and will be removed. [ 298.282263][ T976] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 298.301899][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.316102][ T13] bond0 (unregistering): Released all slaves [ 298.445075][ T51] Bluetooth: hci4: command tx timeout [ 298.454366][ T976] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.576533][ T976] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 299.265060][ T976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.275818][ T976] usb 5-1: config 0 descriptor?? [ 299.286843][ T976] pwc: Askey VC010 type 2 USB webcam detected. [ 299.537828][ T8758] chnl_net:caif_netlink_parms(): no params data found [ 299.637584][ T13] hsr_slave_0: left promiscuous mode [ 299.638029][ T8809] random: crng reseeded on system resumption [ 299.657780][ T13] hsr_slave_1: left promiscuous mode [ 299.666343][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.676082][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.687648][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.695732][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.703532][ T976] pwc: recv_control_msg error -32 req 02 val 2b00 [ 299.712035][ T976] pwc: recv_control_msg error -32 req 02 val 2700 [ 299.719483][ T976] pwc: recv_control_msg error -32 req 02 val 2c00 [ 299.730532][ T976] pwc: recv_control_msg error -32 req 04 val 1000 [ 299.738709][ T976] pwc: recv_control_msg error -32 req 04 val 1300 [ 299.747909][ T976] pwc: recv_control_msg error -32 req 04 val 1400 [ 299.765200][ T13] veth1_macvtap: left promiscuous mode [ 299.783773][ T13] veth0_macvtap: left promiscuous mode [ 299.789484][ T13] veth1_vlan: left promiscuous mode [ 299.897782][ T8816] FAULT_INJECTION: forcing a failure. [ 299.897782][ T8816] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.911126][ T8816] CPU: 1 UID: 0 PID: 8816 Comm: syz.0.737 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 299.911153][ T8816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 299.911164][ T8816] Call Trace: [ 299.911171][ T8816] [ 299.911179][ T8816] dump_stack_lvl+0x16c/0x1f0 [ 299.911215][ T8816] should_fail_ex+0x512/0x640 [ 299.911244][ T8816] _copy_to_user+0x32/0xd0 [ 299.911272][ T8816] simple_read_from_buffer+0xcb/0x170 [ 299.911301][ T8816] proc_fail_nth_read+0x197/0x270 [ 299.911327][ T8816] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 299.911350][ T8816] ? rw_verify_area+0xcf/0x680 [ 299.911371][ T8816] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 299.911392][ T8816] vfs_read+0x1e4/0xc60 [ 299.911416][ T8816] ? __pfx___mutex_lock+0x10/0x10 [ 299.911443][ T8816] ? __pfx_vfs_read+0x10/0x10 [ 299.911471][ T8816] ? __fget_files+0x20e/0x3c0 [ 299.911503][ T8816] ksys_read+0x12a/0x250 [ 299.911524][ T8816] ? __pfx_ksys_read+0x10/0x10 [ 299.911552][ T8816] do_syscall_64+0xcd/0x4c0 [ 299.911581][ T8816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.911601][ T8816] RIP: 0033:0x7f9264f8d33c [ 299.911617][ T8816] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 299.911635][ T8816] RSP: 002b:00007f9262df6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 299.911652][ T8816] RAX: ffffffffffffffda RBX: 00007f92651b6080 RCX: 00007f9264f8d33c [ 299.911663][ T8816] RDX: 000000000000000f RSI: 00007f9262df60a0 RDI: 0000000000000009 [ 299.911680][ T8816] RBP: 00007f9262df6090 R08: 0000000000000000 R09: 0000000000000000 [ 299.911690][ T8816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.911700][ T8816] R13: 0000000000000000 R14: 00007f92651b6080 R15: 00007ffe48029458 [ 299.911725][ T8816] [ 300.091470][ C1] vkms_vblank_simulate: vblank timer overrun [ 300.108234][ T8785] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 300.125933][ T976] pwc: recv_control_msg error -71 req 02 val 2100 [ 300.132711][ T13] veth0_vlan: left promiscuous mode [ 300.139527][ T976] pwc: recv_control_msg error -71 req 04 val 1500 [ 300.146549][ T976] pwc: recv_control_msg error -71 req 02 val 2500 [ 300.153571][ T976] pwc: recv_control_msg error -71 req 02 val 2400 [ 300.160580][ T976] pwc: recv_control_msg error -71 req 02 val 2600 [ 300.167570][ T976] pwc: recv_control_msg error -71 req 02 val 2900 [ 300.174559][ T976] pwc: recv_control_msg error -71 req 02 val 2800 [ 300.181655][ T976] pwc: recv_control_msg error -71 req 04 val 1100 [ 300.188646][ T976] pwc: recv_control_msg error -71 req 04 val 1200 [ 300.200744][ T976] pwc: Registered as video103. [ 300.207306][ T976] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input42 [ 300.375327][ T976] usb 5-1: USB disconnect, device number 21 [ 300.472001][ T8825] syz.0.740: attempt to access beyond end of device [ 300.472001][ T8825] nbd0: rw=0, sector=6, nr_sectors = 2 limit=0 [ 300.485172][ T8825] ADFS-fs (nbd0): error: unable to read block 3, try 0 [ 300.541402][ T51] Bluetooth: hci4: command tx timeout [ 300.959499][ T30] audit: type=1400 audit(1751340156.827:448): avc: denied { ioctl } for pid=8829 comm="syz.0.742" path="socket:[21949]" dev="sockfs" ino=21949 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 301.075315][ T30] audit: type=1400 audit(1751340156.937:449): avc: denied { write } for pid=8829 comm="syz.0.742" path="socket:[21949]" dev="sockfs" ino=21949 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 302.541472][ T8839] netlink: 'syz.0.745': attribute type 1 has an invalid length. [ 302.682057][ T51] Bluetooth: hci4: command tx timeout [ 302.851056][ T30] audit: type=1400 audit(1751340158.727:450): avc: denied { ioctl } for pid=8835 comm="syz.2.743" path="socket:[21962]" dev="sockfs" ino=21962 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 302.968131][ T30] audit: type=1400 audit(1751340158.847:451): avc: denied { create } for pid=8835 comm="syz.2.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 303.047095][ T30] audit: type=1400 audit(1751340158.877:452): avc: denied { read } for pid=8835 comm="syz.2.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 303.085528][ T30] audit: type=1400 audit(1751340158.877:453): avc: denied { nlmsg_write } for pid=8835 comm="syz.2.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 303.130156][ T30] audit: type=1400 audit(1751340158.877:454): avc: denied { audit_write } for pid=8835 comm="syz.2.743" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 303.195836][ T30] audit: type=1107 audit(1751340158.877:455): pid=8835 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 303.593196][ T13] team0 (unregistering): Port device team_slave_1 removed [ 303.685224][ C1] vkms_vblank_simulate: vblank timer overrun [ 303.785107][ T13] team0 (unregistering): Port device team_slave_0 removed [ 304.440556][ T8855] FAULT_INJECTION: forcing a failure. [ 304.440556][ T8855] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.457509][ T8855] CPU: 1 UID: 0 PID: 8855 Comm: syz.4.748 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 304.457542][ T8855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 304.457552][ T8855] Call Trace: [ 304.457560][ T8855] [ 304.457569][ T8855] dump_stack_lvl+0x16c/0x1f0 [ 304.457604][ T8855] should_fail_ex+0x512/0x640 [ 304.457633][ T8855] _copy_to_user+0x32/0xd0 [ 304.457657][ T8855] simple_read_from_buffer+0xcb/0x170 [ 304.457681][ T8855] proc_fail_nth_read+0x197/0x270 [ 304.457703][ T8855] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 304.457724][ T8855] ? rw_verify_area+0xcf/0x680 [ 304.457741][ T8855] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 304.457759][ T8855] vfs_read+0x1e4/0xc60 [ 304.457782][ T8855] ? __pfx___mutex_lock+0x10/0x10 [ 304.457805][ T8855] ? __pfx_vfs_read+0x10/0x10 [ 304.457830][ T8855] ? __fget_files+0x20e/0x3c0 [ 304.457858][ T8855] ksys_read+0x12a/0x250 [ 304.457876][ T8855] ? __pfx_ksys_read+0x10/0x10 [ 304.457895][ T8855] ? fput+0x70/0xf0 [ 304.457921][ T8855] do_syscall_64+0xcd/0x4c0 [ 304.457957][ T8855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.457975][ T8855] RIP: 0033:0x7f7c09b8d33c [ 304.457991][ T8855] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 304.458007][ T8855] RSP: 002b:00007f7c0a94f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 304.458024][ T8855] RAX: ffffffffffffffda RBX: 00007f7c09db5fa0 RCX: 00007f7c09b8d33c [ 304.458035][ T8855] RDX: 000000000000000f RSI: 00007f7c0a94f0a0 RDI: 0000000000000006 [ 304.458044][ T8855] RBP: 00007f7c0a94f090 R08: 0000000000000000 R09: 0000000000000000 [ 304.458053][ T8855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.458061][ T8855] R13: 0000000000000000 R14: 00007f7c09db5fa0 R15: 00007fff299800d8 [ 304.458082][ T8855] [ 304.644832][ C1] vkms_vblank_simulate: vblank timer overrun [ 304.774613][ T51] Bluetooth: hci4: command tx timeout [ 305.203713][ T8839] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 305.636319][ T8868] netlink: 12 bytes leftover after parsing attributes in process `syz.0.751'. [ 305.664790][ T8758] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.680436][ T8758] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.690146][ T8758] bridge_slave_0: entered allmulticast mode [ 305.701019][ T8868] netlink: 16 bytes leftover after parsing attributes in process `syz.0.751'. [ 305.737482][ T8758] bridge_slave_0: entered promiscuous mode [ 305.755991][ T8758] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.764339][ T8758] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.791168][ T8758] bridge_slave_1: entered allmulticast mode [ 305.807950][ T8758] bridge_slave_1: entered promiscuous mode [ 305.882376][ T8870] bridge0: left promiscuous mode [ 306.029642][ T8870] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 306.653120][ T8758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.678111][ T8758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.224599][ T8758] team0: Port device team_slave_0 added [ 307.899140][ T8758] team0: Port device team_slave_1 added [ 308.213898][ T8758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.314352][ T8891] futex_wake_op: syz.0.757 tries to shift op by -1; fix this program [ 309.596132][ T8758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.631388][ T8894] syz.2.756: attempt to access beyond end of device [ 309.631388][ T8894] nbd2: rw=0, sector=6, nr_sectors = 2 limit=0 [ 309.648537][ T8894] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 309.807848][ T8758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.878789][ T8758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.887608][ T8758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.096335][ T8758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.351347][ T3669] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 310.542040][ T3669] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.565678][ T8903] netlink: 'syz.5.761': attribute type 1 has an invalid length. [ 310.594061][ T8758] hsr_slave_0: entered promiscuous mode [ 310.600272][ T3669] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 310.618299][ T8758] hsr_slave_1: entered promiscuous mode [ 310.624269][ T3669] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 310.651732][ T8758] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 310.659398][ T8758] Cannot create hsr debugfs directory [ 310.665341][ T3669] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.755746][ T3669] usb 1-1: config 0 descriptor?? [ 310.764988][ T3669] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 310.782936][ T3669] dvb-usb: bulk message failed: -22 (3/0) [ 310.818773][ T3669] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 310.847064][ T3669] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 310.854640][ T8903] 8021q: adding VLAN 0 to HW filter on device bond6 [ 310.871910][ T3669] usb 1-1: media controller created [ 310.882845][ T3669] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 310.912175][ T3669] dvb-usb: bulk message failed: -22 (6/0) [ 310.929237][ T3669] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 310.939241][ T3669] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input43 [ 310.962073][ T3669] dvb-usb: schedule remote query interval to 150 msecs. [ 310.969698][ T3669] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 311.025101][ T30] audit: type=1400 audit(1751340166.907:456): avc: denied { setopt } for pid=8912 comm="syz.5.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 311.201504][ T3669] dvb-usb: bulk message failed: -22 (1/0) [ 312.093052][ T3669] dvb-usb: error while querying for an remote control event. [ 312.170276][ T30] audit: type=1326 audit(1751340168.047:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8912 comm="syz.5.765" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f574b78e929 code=0x0 [ 312.227402][ T976] usb 1-1: USB disconnect, device number 26 [ 312.283609][ T976] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 312.561677][ T8926] futex_wake_op: syz.2.768 tries to shift op by -1; fix this program [ 314.031059][ T3669] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 314.215216][ T3669] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 314.244317][ T3669] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 314.263468][ T8758] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 314.267878][ T3669] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 314.285769][ T8758] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 314.289966][ T3669] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 314.306502][ T8758] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 314.311300][ T3669] usb 6-1: SerialNumber: syz [ 314.324172][ T8758] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 314.361036][ T5873] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 314.442347][ T8758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.463953][ T8758] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.478435][ T972] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.485630][ T972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.520000][ T972] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.527211][ T972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.547097][ T5873] usb 1-1: Using ep0 maxpacket: 8 [ 314.564322][ T5873] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 314.581093][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.612132][ T5873] pvrusb2: Hardware description: Terratec Grabster AV400 [ 314.631316][ T5873] pvrusb2: ********** [ 314.635478][ T5873] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 314.663676][ T8933] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 314.673077][ T5873] pvrusb2: Important functionality might not be entirely working. [ 314.690872][ T5873] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 314.718764][ T3669] usb 6-1: 0:2 : does not exist [ 314.738804][ T5873] pvrusb2: ********** [ 314.766298][ T3669] usb 6-1: USB disconnect, device number 19 [ 314.950096][ T8758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.050332][ T8758] veth0_vlan: entered promiscuous mode [ 315.083628][ T8758] veth1_vlan: entered promiscuous mode [ 315.139895][ T8958] ubi31: attaching mtd0 [ 315.147542][ T8958] ubi31: scanning is finished [ 315.155371][ T8758] veth0_macvtap: entered promiscuous mode [ 315.179157][ T8758] veth1_macvtap: entered promiscuous mode [ 315.215746][ T8758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.240046][ T2339] pvrusb2: Invalid write control endpoint [ 315.242384][ T8758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.247792][ T5873] usb 1-1: USB disconnect, device number 27 [ 315.267748][ T8758] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.301469][ T8758] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.310264][ T8758] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.331001][ T3669] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 315.340797][ T8758] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.352034][ T2339] pvrusb2: Invalid write control endpoint [ 315.357805][ T2339] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 315.389631][ T2339] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 315.397491][ T8958] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 315.405443][ T2339] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 315.435444][ T8958] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 315.453415][ T2339] pvrusb2: Device being rendered inoperable [ 315.459492][ T2339] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 315.472498][ T972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.483003][ T2339] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 315.486071][ T8958] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 315.511852][ T972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.513712][ T2339] pvrusb2: Attached sub-driver cx25840 [ 315.531216][ T3669] usb 5-1: Using ep0 maxpacket: 32 [ 315.545826][ T972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.554053][ T2339] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 315.554070][ T2339] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 315.557202][ T3669] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 315.569373][ T972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.580960][ T8958] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 315.610307][ T3669] usb 5-1: config 0 has no interface number 0 [ 315.619417][ T3669] usb 5-1: config 0 interface 89 has no altsetting 0 [ 315.720436][ T8958] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 315.839121][ T3669] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 315.918322][ T3669] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.924272][ T8958] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 315.968438][ T3669] usb 5-1: Product: syz [ 316.011350][ T3669] usb 5-1: Manufacturer: syz [ 316.026401][ T3669] usb 5-1: SerialNumber: syz [ 316.041740][ T8958] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 976934728 [ 316.072406][ T3669] usb 5-1: config 0 descriptor?? [ 316.078514][ T8958] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 316.088905][ T8961] ubi31: background thread "ubi_bgt31d" started, PID 8961 [ 316.201144][ T43] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 316.411902][ T8955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.422470][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 316.422813][ T8955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.433184][ T43] usb 3-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 316.463223][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.471569][ T43] usb 3-1: Product: syz [ 316.475864][ T43] usb 3-1: Manufacturer: syz [ 316.480515][ T43] usb 3-1: SerialNumber: syz [ 316.518014][ T8971] futex_wake_op: syz.0.777 tries to shift op by -1; fix this program [ 316.730088][ T43] usb 3-1: config 0 descriptor?? [ 316.960595][ T8955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.184155][ T43] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 317.191673][ T8955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.233918][ T5873] usb 5-1: USB disconnect, device number 22 [ 317.915454][ T8978] netlink: 132 bytes leftover after parsing attributes in process `syz.0.779'. [ 318.121987][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.150025][ T8980] Attempt to restore checkpoint with obsolete wellknown handles [ 318.332529][ T43] gspca_sonixj: reg_r err -110 [ 318.337457][ T43] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 318.378314][ T8982] netlink: 'syz.4.780': attribute type 1 has an invalid length. [ 318.404407][ T8982] 8021q: adding VLAN 0 to HW filter on device bond4 [ 318.435332][ T8982] bond4: (slave ip6erspan0): making interface the new active one [ 318.446067][ T8982] bond4: (slave ip6erspan0): Enslaving as an active interface with an up link [ 318.467058][ T30] audit: type=1400 audit(1751340174.337:458): avc: denied { execstack } for pid=8981 comm="syz.4.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 318.911356][ T5873] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 319.411766][ T5873] usb 5-1: Using ep0 maxpacket: 16 [ 319.425067][ T5873] usb 5-1: config index 0 descriptor too short (expected 59154, got 18) [ 319.470403][ T5873] usb 5-1: config 0 has an invalid interface number: 255 but max is -1 [ 319.567438][ T5873] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 319.619920][ T5873] usb 5-1: config 0 has no interface number 0 [ 319.664534][ T5873] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 319.737430][ T5873] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 319.790710][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.828071][ T5873] usb 5-1: config 0 interface 255 has no altsetting 0 [ 319.865719][ T5873] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 319.909726][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.960917][ T5873] usb 5-1: Product: syz [ 320.001523][ T5873] usb 5-1: Manufacturer: syz [ 320.006187][ T5873] usb 5-1: SerialNumber: syz [ 320.074162][ T5873] usb 5-1: config 0 descriptor?? [ 320.114825][ T5873] ssu100 5-1:0.255: Quatech SSU-100 USB to Serial Driver converter detected [ 320.395956][ T10] usb 3-1: USB disconnect, device number 20 [ 321.021568][ T5925] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 321.133847][ T5873] ssu100 5-1:0.255: probe with driver ssu100 failed with error -71 [ 321.223622][ T5873] usb 5-1: USB disconnect, device number 23 [ 321.259641][ T5925] usb 6-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 321.316741][ T5925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.325372][ T5925] usb 6-1: Product: syz [ 321.329698][ T5925] usb 6-1: Manufacturer: syz [ 321.334587][ T5925] usb 6-1: SerialNumber: syz [ 321.343639][ T5925] r8152-cfgselector 6-1: Unknown version 0x0000 [ 321.350160][ T5925] r8152-cfgselector 6-1: config 0 descriptor?? [ 321.399364][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.540206][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.592121][ T5822] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 321.605278][ T5822] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 321.616511][ T5822] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 321.636137][ T5822] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 321.647387][ T5822] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 321.691419][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.769228][ T30] audit: type=1400 audit(1751340177.647:459): avc: denied { append } for pid=9001 comm="syz.2.788" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 321.839377][ T9002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.849447][ T9002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.204976][ T49] bridge_slave_1: left allmulticast mode [ 322.210747][ T49] bridge_slave_1: left promiscuous mode [ 322.304632][ T9019] futex_wake_op: syz.4.789 tries to shift op by -1; fix this program [ 322.568901][ T5873] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 323.012393][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.063686][ T49] bridge_slave_0: left allmulticast mode [ 323.077983][ T49] bridge_slave_0: left promiscuous mode [ 323.094029][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.541366][ T5873] usb 1-1: Using ep0 maxpacket: 32 [ 323.683359][ T5873] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 323.748402][ T5822] Bluetooth: hci4: command tx timeout [ 323.808550][ T5873] usb 1-1: config 0 has no interface number 0 [ 323.828968][ T5873] usb 1-1: config 0 interface 89 has no altsetting 0 [ 323.838813][ T5873] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 323.851161][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.860170][ T5873] usb 1-1: Product: syz [ 323.875135][ T5873] usb 1-1: Manufacturer: syz [ 323.897485][ T5873] usb 1-1: SerialNumber: syz [ 323.970034][ T5873] usb 1-1: config 0 descriptor?? [ 324.018834][ T976] r8152-cfgselector 6-1: USB disconnect, device number 20 [ 324.185494][ T9012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.202488][ T9012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.222394][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.222598][ T9012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.239846][ T9012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.248282][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.262414][ T49] bond0 (unregistering): Released all slaves [ 324.361929][ T5873] usb 1-1: USB disconnect, device number 28 [ 324.641231][ T9006] chnl_net:caif_netlink_parms(): no params data found [ 324.953826][ T9039] netlink: 36 bytes leftover after parsing attributes in process `syz.2.793'. [ 325.541124][ T49] hsr_slave_0: left promiscuous mode [ 325.556302][ T49] hsr_slave_1: left promiscuous mode [ 325.563090][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.570551][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.716731][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.747528][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.800927][ T5822] Bluetooth: hci4: command tx timeout [ 325.893301][ T49] veth1_macvtap: left promiscuous mode [ 325.912355][ T49] veth0_macvtap: left promiscuous mode [ 325.946041][ T49] veth1_vlan: left promiscuous mode [ 325.959399][ T49] veth0_vlan: left promiscuous mode [ 326.043286][ T43] libceph: connect (1)[c::]:6789 error -101 [ 326.050080][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 326.105793][ T43] libceph: connect (1)[c::]:6789 error -101 [ 326.113366][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 326.192346][ T9053] ceph: No mds server is up or the cluster is laggy [ 326.440945][ T10] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 326.605737][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.628237][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 326.652021][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 326.662541][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 326.675780][ T10] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 326.685849][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.738013][ T10] usb 1-1: config 0 descriptor?? [ 326.746073][ T10] gspca_main: spca561-2.14.0 probing abcd:cdee [ 326.784347][ T49] team0 (unregistering): Port device team_slave_1 removed [ 326.882082][ T49] team0 (unregistering): Port device team_slave_0 removed [ 326.957305][ T10] spca561 1-1:0.0: probe with driver spca561 failed with error -22 [ 326.978313][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 326.998477][ T10] usb 1-1: MIDIStreaming interface descriptor not found [ 327.103211][ T10] usb 1-1: USB disconnect, device number 29 [ 327.881695][ T5822] Bluetooth: hci4: command tx timeout [ 328.045831][ T30] audit: type=1400 audit(1751340183.927:460): avc: denied { mounton } for pid=9068 comm="syz.0.801" path="/proc/563/task" dev="proc" ino=23721 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 328.630687][ T9006] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.648713][ T9006] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.662531][ T9006] bridge_slave_0: entered allmulticast mode [ 328.693239][ T9006] bridge_slave_0: entered promiscuous mode [ 328.714839][ T9006] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.767815][ T9006] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.788222][ T9006] bridge_slave_1: entered allmulticast mode [ 328.805182][ T9006] bridge_slave_1: entered promiscuous mode [ 329.112532][ T9077] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 329.225436][ T9006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.244445][ T9006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.331992][ T9081] netlink: 'syz.4.802': attribute type 1 has an invalid length. [ 329.545312][ T9084] hfs: can't find a HFS filesystem on dev nullb0 [ 329.971875][ T5822] Bluetooth: hci4: command tx timeout [ 329.985862][ T9081] 8021q: adding VLAN 0 to HW filter on device bond5 [ 330.466013][ T9006] team0: Port device team_slave_0 added [ 330.499550][ T9080] syz.5.804 (9080) used greatest stack depth: 20584 bytes left [ 330.547107][ T9093] ubi31: detaching mtd0 [ 330.565606][ T9006] team0: Port device team_slave_1 added [ 330.577113][ T9093] ubi31: mtd0 is detached [ 330.674547][ T9006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.685969][ T9006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.712554][ T9006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.979784][ T10] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 331.076938][ T9006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.085080][ T9006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.115217][ T9006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.199229][ T30] audit: type=1400 audit(1751340187.077:461): avc: denied { setopt } for pid=9103 comm="syz.5.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 331.242816][ T10] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 331.257530][ T9006] hsr_slave_0: entered promiscuous mode [ 331.263774][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.271969][ T10] usb 5-1: Product: syz [ 331.278018][ T9006] hsr_slave_1: entered promiscuous mode [ 331.284156][ T10] usb 5-1: Manufacturer: syz [ 331.289896][ T9006] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 331.309382][ T10] usb 5-1: SerialNumber: syz [ 331.320765][ T9006] Cannot create hsr debugfs directory [ 331.332826][ T10] r8152-cfgselector 5-1: Unknown version 0x0000 [ 331.339424][ T10] r8152-cfgselector 5-1: config 0 descriptor?? [ 331.481905][ T976] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 331.622744][ T5873] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 331.654564][ T976] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 331.670339][ T976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.686668][ T976] usb 1-1: Product: syz [ 331.691142][ T976] usb 1-1: Manufacturer: syz [ 331.695927][ T976] usb 1-1: SerialNumber: syz [ 331.707054][ T976] r8152-cfgselector 1-1: Unknown version 0x0000 [ 331.715033][ T976] r8152-cfgselector 1-1: config 0 descriptor?? [ 331.780552][ T9095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.789140][ T5873] usb 3-1: Using ep0 maxpacket: 32 [ 331.795048][ T9095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.808281][ T5873] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 331.822974][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.831987][ T5873] usb 3-1: Product: syz [ 331.836296][ T5873] usb 3-1: Manufacturer: syz [ 331.844260][ T5873] usb 3-1: SerialNumber: syz [ 331.855555][ T5873] usb 3-1: config 0 descriptor?? [ 331.864692][ T5873] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 331.901202][ T9006] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 331.916674][ T9006] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 331.937840][ T9006] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 331.956214][ T9006] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 332.120604][ T5873] gspca_topro: reg_w err -71 [ 332.150596][ T9105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.164273][ T5873] gspca_topro: Sensor soi763a [ 332.234921][ T9105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.278293][ T5873] usb 3-1: USB disconnect, device number 21 [ 332.621905][ T9006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.708083][ T9006] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.502909][ T9126] netlink: 'syz.2.815': attribute type 1 has an invalid length. [ 333.508117][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.517861][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.574827][ T9123] hfs: can't find a HFS filesystem on dev nullb0 [ 333.628343][ T9126] 8021q: adding VLAN 0 to HW filter on device bond4 [ 333.676109][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.683385][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.703720][ T976] r8152-cfgselector 5-1: USB disconnect, device number 24 [ 333.762720][ T30] audit: type=1400 audit(1751340189.647:462): avc: denied { sqpoll } for pid=9135 comm="syz.5.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 334.009885][ T9147] FAULT_INJECTION: forcing a failure. [ 334.009885][ T9147] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 334.029673][ T9147] CPU: 0 UID: 0 PID: 9147 Comm: syz.5.820 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 334.029705][ T9147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 334.029717][ T9147] Call Trace: [ 334.029724][ T9147] [ 334.029732][ T9147] dump_stack_lvl+0x16c/0x1f0 [ 334.029770][ T9147] should_fail_ex+0x512/0x640 [ 334.029803][ T9147] _copy_to_user+0x32/0xd0 [ 334.029831][ T9147] simple_read_from_buffer+0xcb/0x170 [ 334.029857][ T9147] proc_fail_nth_read+0x197/0x270 [ 334.029882][ T9147] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 334.029904][ T9147] ? rw_verify_area+0xcf/0x680 [ 334.029924][ T9147] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 334.029946][ T9147] vfs_read+0x1e4/0xc60 [ 334.029971][ T9147] ? __pfx___mutex_lock+0x10/0x10 [ 334.030015][ T9147] ? __pfx_vfs_read+0x10/0x10 [ 334.030043][ T9147] ? __fget_files+0x20e/0x3c0 [ 334.030074][ T9147] ksys_read+0x12a/0x250 [ 334.030095][ T9147] ? __pfx_ksys_read+0x10/0x10 [ 334.030123][ T9147] do_syscall_64+0xcd/0x4c0 [ 334.030151][ T9147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.030171][ T9147] RIP: 0033:0x7f574b78d33c [ 334.030187][ T9147] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 334.030205][ T9147] RSP: 002b:00007f574c540030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 334.030223][ T9147] RAX: ffffffffffffffda RBX: 00007f574b9b5fa0 RCX: 00007f574b78d33c [ 334.030234][ T9147] RDX: 000000000000000f RSI: 00007f574c5400a0 RDI: 0000000000000005 [ 334.030243][ T9147] RBP: 00007f574c540090 R08: 0000000000000000 R09: 0000000000000000 [ 334.030252][ T9147] R10: 000000007ffff004 R11: 0000000000000246 R12: 0000000000000001 [ 334.030260][ T9147] R13: 0000000000000000 R14: 00007f574b9b5fa0 R15: 00007ffc9855bac8 [ 334.030281][ T9147] [ 334.308901][ T9006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.350047][ T9006] veth0_vlan: entered promiscuous mode [ 334.362321][ T9006] veth1_vlan: entered promiscuous mode [ 334.390543][ T9006] veth0_macvtap: entered promiscuous mode [ 334.419299][ T9006] veth1_macvtap: entered promiscuous mode [ 334.459168][ T9006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.461400][ T5873] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 334.470622][ T9006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.533034][ T43] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 334.787030][ T43] usb 6-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 334.858705][ T5873] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 334.877963][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.881521][ T9006] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.895116][ T5873] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 334.906769][ T43] usb 6-1: Product: syz [ 334.907263][ T9006] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.913388][ T43] usb 6-1: Manufacturer: syz [ 334.922985][ T9006] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.925115][ T5873] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 334.934278][ T9006] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.946064][ T3669] r8152-cfgselector 1-1: USB disconnect, device number 30 [ 334.963076][ T43] usb 6-1: SerialNumber: syz [ 334.976271][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.985899][ T43] r8152-cfgselector 6-1: Unknown version 0x0000 [ 334.992375][ T43] r8152-cfgselector 6-1: config 0 descriptor?? [ 335.008323][ T9148] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 335.025556][ T5873] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 335.245609][ T9159] syz.0.824: attempt to access beyond end of device [ 335.245609][ T9159] nbd0: rw=0, sector=6, nr_sectors = 2 limit=0 [ 335.291722][ T9159] ADFS-fs (nbd0): error: unable to read block 3, try 0 [ 335.389797][ T972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.542386][ T972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.583485][ T9162] netlink: 132 bytes leftover after parsing attributes in process `syz.4.825'. [ 335.778321][ T9163] Attempt to restore checkpoint with obsolete wellknown handles [ 335.844631][ T9167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.885709][ T9167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.945851][ T43] usb 3-1: USB disconnect, device number 22 [ 335.974838][ T3503] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.990980][ T30] audit: type=1400 audit(1751340191.857:463): avc: denied { map } for pid=9169 comm="syz.0.826" path="socket:[25450]" dev="sockfs" ino=25450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 336.025962][ T3503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.847286][ T55] libceph: connect (1)[c::]:6789 error -101 [ 336.854344][ T55] libceph: mon0 (1)[c::]:6789 connect error [ 336.956665][ T9175] ceph: No mds server is up or the cluster is laggy [ 337.949985][ T9201] netlink: 'syz.0.833': attribute type 1 has an invalid length. [ 338.102424][ T9202] hfs: can't find a HFS filesystem on dev nullb0 [ 338.232070][ T9201] 8021q: adding VLAN 0 to HW filter on device bond6 [ 338.264419][ T5881] r8152-cfgselector 6-1: USB disconnect, device number 21 [ 338.310653][ T9205] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 338.387834][ T9207] netlink: 'syz.4.834': attribute type 1 has an invalid length. [ 338.729450][ T9209] hfs: can't find a HFS filesystem on dev nullb0 [ 338.759192][ T9207] 8021q: adding VLAN 0 to HW filter on device bond6 [ 339.007547][ T9217] netlink: 'syz.2.837': attribute type 1 has an invalid length. [ 339.063514][ T9218] hfs: can't find a HFS filesystem on dev nullb0 [ 339.072500][ T5925] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 339.343555][ T6165] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.455678][ T9221] netlink: 'syz.5.836': attribute type 1 has an invalid length. [ 339.525320][ T5925] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 339.550714][ T9222] hfs: can't find a HFS filesystem on dev nullb0 [ 339.733729][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.757529][ T9217] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 339.758240][ T5925] usb 1-1: Product: syz [ 339.791595][ T5925] usb 1-1: Manufacturer: syz [ 339.796285][ T5925] usb 1-1: SerialNumber: syz [ 339.843918][ T5925] r8152-cfgselector 1-1: Unknown version 0x0000 [ 339.871499][ T5925] r8152-cfgselector 1-1: config 0 descriptor?? [ 339.879981][ T9221] 8021q: adding VLAN 0 to HW filter on device bond7 [ 339.945425][ T6165] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.026548][ T6165] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.095710][ T6165] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.185104][ T6165] bridge_slave_1: left allmulticast mode [ 340.191850][ T6165] bridge_slave_1: left promiscuous mode [ 340.197575][ T6165] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.207161][ T6165] bridge_slave_0: left allmulticast mode [ 340.213258][ T6165] bridge_slave_0: left promiscuous mode [ 340.218976][ T6165] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.380448][ T9225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.402198][ T9225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.515158][ T9238] netlink: 132 bytes leftover after parsing attributes in process `syz.2.839'. [ 341.621303][ T9239] netlink: 132 bytes leftover after parsing attributes in process `syz.5.838'. [ 342.011728][ T9233] Attempt to restore checkpoint with obsolete wellknown handles [ 342.135554][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 342.149161][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 342.158841][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 342.167002][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 342.167249][ T6165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.190154][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 342.213100][ T6165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 342.223845][ T6165] bond0 (unregistering): Released all slaves [ 343.244278][ T9263] futex_wake_op: syz.4.843 tries to shift op by -1; fix this program [ 344.281093][ T5822] Bluetooth: hci4: command tx timeout [ 344.294298][ T9257] netlink: 'syz.2.842': attribute type 1 has an invalid length. [ 344.355795][ T9267] sd 0:0:1:0: device reset [ 344.419538][ T9269] hfs: can't find a HFS filesystem on dev nullb0 [ 344.441848][ T9257] 8021q: adding VLAN 0 to HW filter on device bond5 [ 344.455650][ T9245] chnl_net:caif_netlink_parms(): no params data found [ 344.491217][ T5881] r8152-cfgselector 1-1: USB disconnect, device number 31 [ 345.781948][ T9276] FAULT_INJECTION: forcing a failure. [ 345.781948][ T9276] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 345.795522][ T9276] CPU: 0 UID: 0 PID: 9276 Comm: syz.4.847 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 345.795543][ T9276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 345.795551][ T9276] Call Trace: [ 345.795559][ T9276] [ 345.795564][ T9276] dump_stack_lvl+0x16c/0x1f0 [ 345.795597][ T9276] should_fail_ex+0x512/0x640 [ 345.795620][ T9276] _copy_from_user+0x2e/0xd0 [ 345.795642][ T9276] udmabuf_ioctl+0x115/0x310 [ 345.795662][ T9276] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 345.795681][ T9276] ? selinux_file_ioctl+0xb4/0x270 [ 345.795698][ T9276] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 345.795712][ T9276] __x64_sys_ioctl+0x18b/0x210 [ 345.795730][ T9276] do_syscall_64+0xcd/0x4c0 [ 345.795747][ T9276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.795760][ T9276] RIP: 0033:0x7f7c09b8e929 [ 345.795771][ T9276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.795782][ T9276] RSP: 002b:00007f7c0a94f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 345.795793][ T9276] RAX: ffffffffffffffda RBX: 00007f7c09db5fa0 RCX: 00007f7c09b8e929 [ 345.795800][ T9276] RDX: 0000200000000100 RSI: 0000000040187542 RDI: 0000000000000004 [ 345.795806][ T9276] RBP: 00007f7c0a94f090 R08: 0000000000000000 R09: 0000000000000000 [ 345.795812][ T9276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.795818][ T9276] R13: 0000000000000000 R14: 00007f7c09db5fa0 R15: 00007fff299800d8 [ 345.795834][ T9276] [ 346.066909][ T9284] netlink: 'syz.0.846': attribute type 1 has an invalid length. [ 346.135522][ T9286] hfs: can't find a HFS filesystem on dev nullb0 [ 346.414296][ T5822] Bluetooth: hci4: command tx timeout [ 346.445679][ T9284] 8021q: adding VLAN 0 to HW filter on device bond7 [ 346.656301][ T6165] hsr_slave_0: left promiscuous mode [ 346.672429][ T6165] hsr_slave_1: left promiscuous mode [ 346.679956][ T6165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.754450][ T9299] FAULT_INJECTION: forcing a failure. [ 346.754450][ T9299] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 346.768109][ T9299] CPU: 0 UID: 0 PID: 9299 Comm: syz.4.850 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 346.768136][ T9299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 346.768149][ T9299] Call Trace: [ 346.768157][ T9299] [ 346.768164][ T9299] dump_stack_lvl+0x16c/0x1f0 [ 346.768202][ T9299] should_fail_ex+0x512/0x640 [ 346.768231][ T9299] _copy_from_user+0x2e/0xd0 [ 346.768258][ T9299] dma_buf_ioctl+0x3c6/0x8d0 [ 346.768282][ T9299] ? rcu_is_watching+0x12/0xc0 [ 346.768307][ T9299] ? __pfx_dma_buf_ioctl+0x10/0x10 [ 346.768335][ T9299] ? selinux_file_ioctl+0x180/0x270 [ 346.768360][ T9299] ? selinux_file_ioctl+0xb4/0x270 [ 346.768385][ T9299] ? __pfx_dma_buf_ioctl+0x10/0x10 [ 346.768406][ T9299] __x64_sys_ioctl+0x18b/0x210 [ 346.768430][ T9299] do_syscall_64+0xcd/0x4c0 [ 346.768458][ T9299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.768478][ T9299] RIP: 0033:0x7f7c09b8e929 [ 346.768495][ T9299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.768513][ T9299] RSP: 002b:00007f7c079f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 346.768530][ T9299] RAX: ffffffffffffffda RBX: 00007f7c09db6160 RCX: 00007f7c09b8e929 [ 346.768542][ T9299] RDX: 0000200000000080 RSI: 0000000040086200 RDI: 000000000000000b [ 346.768552][ T9299] RBP: 00007f7c079f6090 R08: 0000000000000000 R09: 0000000000000000 [ 346.768562][ T9299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.768572][ T9299] R13: 0000000000000000 R14: 00007f7c09db6160 R15: 00007fff299800d8 [ 346.768595][ T9299] [ 346.936361][ T6165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.011106][ T9300] netlink: 132 bytes leftover after parsing attributes in process `syz.0.851'. [ 347.017944][ T6165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.141711][ T6165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.429260][ T6165] veth1_macvtap: left promiscuous mode [ 347.450937][ T6165] veth0_macvtap: left promiscuous mode [ 347.463245][ T6165] veth1_vlan: left promiscuous mode [ 347.530990][ T6165] veth0_vlan: left promiscuous mode [ 347.947452][ T976] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 348.183103][ T976] usb 6-1: Using ep0 maxpacket: 16 [ 348.190612][ T976] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 348.216865][ T976] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 348.311403][ T976] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 348.331623][ T976] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 348.350905][ T976] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 348.358980][ T976] usb 6-1: SerialNumber: syz [ 348.378040][ T9296] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 348.532316][ T5822] Bluetooth: hci4: command tx timeout [ 350.616460][ T5822] Bluetooth: hci4: command tx timeout [ 350.894076][ T55] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 351.088082][ T55] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 351.120755][ T55] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.187698][ T55] usb 3-1: Product: syz [ 351.198442][ T55] usb 3-1: Manufacturer: syz [ 351.236156][ T55] usb 3-1: SerialNumber: syz [ 351.398624][ T55] r8152-cfgselector 3-1: Unknown version 0x0000 [ 351.433032][ T55] r8152-cfgselector 3-1: config 0 descriptor?? [ 351.795977][ T6165] team0 (unregistering): Port device team_slave_1 removed [ 351.903803][ T6165] team0 (unregistering): Port device team_slave_0 removed [ 351.979416][ T9333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.988689][ T9333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.736921][ T43] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 352.914579][ T43] usb 5-1: config 0 interface 0 has no altsetting 0 [ 352.921494][ T43] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 352.930762][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.947593][ T43] usb 5-1: config 0 descriptor?? [ 352.999509][ T9294] netlink: 8 bytes leftover after parsing attributes in process `syz.5.849'. [ 353.032304][ T976] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 353.052616][ T9245] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.068186][ T9245] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.078812][ T9245] bridge_slave_0: entered allmulticast mode [ 353.091986][ T9245] bridge_slave_0: entered promiscuous mode [ 353.099176][ T976] usb 6-1: USB disconnect, device number 22 [ 353.100924][ T9245] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.117464][ T9245] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.125448][ T9245] bridge_slave_1: entered allmulticast mode [ 353.134404][ T9245] bridge_slave_1: entered promiscuous mode [ 353.158297][ T43] (null): keene_cmd_main failed (-71) [ 353.233695][ T43] video4linux radio48: keene_cmd_main failed (-71) [ 353.266729][ T43] radio-keene 5-1:0.0: V4L2 device registered as radio48 [ 353.557631][ T43] usb 5-1: USB disconnect, device number 25 [ 353.602517][ T30] audit: type=1400 audit(1751340209.477:464): avc: denied { accept } for pid=9338 comm="syz.5.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 353.637659][ T9245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.687010][ T9245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.749843][ T9245] team0: Port device team_slave_0 added [ 353.770317][ T9245] team0: Port device team_slave_1 added [ 353.825955][ T9245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.833464][ T9245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.893840][ T9245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.920432][ T9245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.026043][ T9245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.092921][ T9245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.187674][ T9351] futex_wake_op: syz.4.863 tries to shift op by -1; fix this program [ 355.504565][ T55] r8152-cfgselector 3-1: USB disconnect, device number 23 [ 355.555295][ T9245] hsr_slave_0: entered promiscuous mode [ 355.759309][ T9245] hsr_slave_1: entered promiscuous mode [ 355.765750][ T9245] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 355.773450][ T9245] Cannot create hsr debugfs directory [ 358.498230][ T9384] netlink: 132 bytes leftover after parsing attributes in process `syz.2.872'. [ 358.571165][ T5881] libceph: connect (1)[c::]:6789 error -101 [ 358.641898][ T5881] libceph: mon0 (1)[c::]:6789 connect error [ 358.994776][ T5881] libceph: connect (1)[c::]:6789 error -101 [ 359.005825][ T5881] libceph: mon0 (1)[c::]:6789 connect error [ 359.014747][ T9385] ceph: No mds server is up or the cluster is laggy [ 359.148143][ T9245] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 359.172113][ T9245] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 359.204233][ T9245] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 359.689542][ T9245] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 359.721187][ T5881] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 359.729086][ T55] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 359.945378][ T9411] netlink: 'syz.5.877': attribute type 1 has an invalid length. [ 360.006813][ T55] usb 3-1: device descriptor read/64, error -71 [ 360.040125][ T5881] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 360.151475][ T5881] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.179239][ T5881] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.205391][ T5881] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 360.208806][ T9411] 8021q: adding VLAN 0 to HW filter on device bond8 [ 360.239939][ T5881] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 360.249371][ T5881] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 360.286287][ T9245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.293290][ T55] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 360.303653][ T5881] usb 1-1: Manufacturer: syz [ 360.312544][ T5881] usb 1-1: config 0 descriptor?? [ 360.346272][ T9245] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.365083][ T6165] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.372336][ T6165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.484044][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.491238][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.563739][ T9418] futex_wake_op: syz.4.878 tries to shift op by -1; fix this program [ 361.453452][ T55] usb 3-1: device descriptor read/64, error -71 [ 361.494233][ T9245] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 361.701131][ T9245] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 362.438667][ T55] usb usb3-port1: attempt power cycle [ 362.447826][ T5881] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 362.470188][ T5881] appleir 0003:05AC:8243.0005: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 362.970007][ T9432] syz.2.881: attempt to access beyond end of device [ 362.970007][ T9432] nbd2: rw=0, sector=6, nr_sectors = 2 limit=0 [ 362.984846][ T9432] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 363.052789][ T5881] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 363.298775][ T9245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.306750][ T5881] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 363.322271][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.348079][ T5881] usb 5-1: Product: syz [ 363.816741][ T10] usb 1-1: USB disconnect, device number 32 [ 363.841299][ T5881] usb 5-1: Manufacturer: syz [ 363.846001][ T5881] usb 5-1: SerialNumber: syz [ 363.862480][ T5881] r8152-cfgselector 5-1: Unknown version 0x0000 [ 363.878846][ T5881] r8152-cfgselector 5-1: config 0 descriptor?? [ 363.903750][ T9245] veth0_vlan: entered promiscuous mode [ 363.948218][ T9245] veth1_vlan: entered promiscuous mode [ 365.061163][ T9447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.070020][ T9447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.071040][ T9245] veth0_macvtap: entered promiscuous mode [ 365.088715][ T9245] veth1_macvtap: entered promiscuous mode [ 365.124209][ T9245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.169186][ T9245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.249526][ T9245] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.303613][ T9454] netlink: 'syz.5.885': attribute type 1 has an invalid length. [ 365.501769][ T9457] hfs: can't find a HFS filesystem on dev nullb0 [ 366.144047][ T9245] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.152885][ T9245] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.161754][ T9245] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.177666][ T9454] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 366.307849][ T976] libceph: connect (1)[c::]:6789 error -101 [ 366.322492][ T976] libceph: mon0 (1)[c::]:6789 connect error [ 366.420148][ T9465] netlink: 'syz.5.888': attribute type 1 has an invalid length. [ 366.428096][ T9465] netlink: 224 bytes leftover after parsing attributes in process `syz.5.888'. [ 366.461667][ T6165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.475850][ T6165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.520633][ T3428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.535481][ T3428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.568351][ T10] r8152-cfgselector 5-1: USB disconnect, device number 26 [ 366.606992][ T976] libceph: connect (1)[c::]:6789 error -101 [ 366.624698][ T976] libceph: mon0 (1)[c::]:6789 connect error [ 367.011518][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.120288][ T9461] ceph: No mds server is up or the cluster is laggy [ 367.142020][ T976] libceph: connect (1)[c::]:6789 error -101 [ 367.161550][ T976] libceph: mon0 (1)[c::]:6789 connect error [ 367.214102][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.333550][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.420036][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.719619][ T12] bridge_slave_1: left allmulticast mode [ 367.725681][ T12] bridge_slave_1: left promiscuous mode [ 367.731566][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.740334][ T12] bridge_slave_0: left allmulticast mode [ 367.746386][ T12] bridge_slave_0: left promiscuous mode [ 367.752347][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.748965][ T9486] netlink: 'syz.5.894': attribute type 1 has an invalid length. [ 368.882878][ T9492] hfs: can't find a HFS filesystem on dev nullb0 [ 369.795742][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 369.815359][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 369.827041][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 369.837481][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 369.845743][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 370.401698][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 370.434460][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 370.464540][ T12] bond0 (unregistering): Released all slaves [ 370.529616][ T9486] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 370.570496][ T9507] netlink: 'syz.4.899': attribute type 1 has an invalid length. [ 370.586710][ T9507] netlink: 224 bytes leftover after parsing attributes in process `syz.4.899'. [ 370.688293][ T9512] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 3946 [ 370.921013][ T10] usb 6-1: new low-speed USB device number 23 using dummy_hcd [ 370.990446][ T9519] futex_wake_op: syz.4.902 tries to shift op by -1; fix this program [ 371.738518][ T5925] libceph: connect (1)[c::]:6789 error -101 [ 371.748346][ T5925] libceph: mon0 (1)[c::]:6789 connect error [ 371.835910][ T9529] FAULT_INJECTION: forcing a failure. [ 371.835910][ T9529] name failslab, interval 1, probability 0, space 0, times 0 [ 371.850877][ T9529] CPU: 1 UID: 0 PID: 9529 Comm: syz.2.905 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 371.850908][ T9529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 371.850922][ T9529] Call Trace: [ 371.850931][ T9529] [ 371.850940][ T9529] dump_stack_lvl+0x16c/0x1f0 [ 371.850983][ T9529] should_fail_ex+0x512/0x640 [ 371.851011][ T9529] ? __kmalloc_noprof+0xbf/0x510 [ 371.851043][ T9529] ? alloc_pipe_info+0x1ec/0x590 [ 371.851072][ T9529] should_failslab+0xc2/0x120 [ 371.851102][ T9529] __kmalloc_noprof+0xd2/0x510 [ 371.851133][ T9529] alloc_pipe_info+0x1ec/0x590 [ 371.851165][ T9529] splice_direct_to_actor+0x77d/0xa30 [ 371.851194][ T9529] ? __pfx_direct_splice_actor+0x10/0x10 [ 371.851223][ T9529] ? find_held_lock+0x2b/0x80 [ 371.851249][ T9529] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 371.851273][ T9529] ? get_pid_task+0xfc/0x250 [ 371.851311][ T9529] do_splice_direct+0x174/0x240 [ 371.851337][ T9529] ? __pfx_do_splice_direct+0x10/0x10 [ 371.851362][ T9529] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 371.851392][ T9529] ? rw_verify_area+0xcf/0x680 [ 371.851423][ T9529] do_sendfile+0xb06/0xe50 [ 371.851452][ T9529] ? __pfx_do_sendfile+0x10/0x10 [ 371.851485][ T9529] __x64_sys_sendfile64+0x154/0x220 [ 371.851513][ T9529] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 371.851546][ T9529] do_syscall_64+0xcd/0x4c0 [ 371.851586][ T9529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.851604][ T9529] RIP: 0033:0x7fbda958e929 [ 371.851622][ T9529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 371.851640][ T9529] RSP: 002b:00007fbdaa3b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 371.851659][ T9529] RAX: ffffffffffffffda RBX: 00007fbda97b5fa0 RCX: 00007fbda958e929 [ 371.851670][ T9529] RDX: 0000200000000080 RSI: 0000000000000003 RDI: 0000000000000003 [ 371.851681][ T9529] RBP: 00007fbdaa3b6090 R08: 0000000000000000 R09: 0000000000000000 [ 371.851691][ T9529] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000001 [ 371.851701][ T9529] R13: 0000000000000000 R14: 00007fbda97b5fa0 R15: 00007ffc733991e8 [ 371.851725][ T9529] [ 372.073342][ C1] vkms_vblank_simulate: vblank timer overrun [ 372.083692][ T51] Bluetooth: hci4: command tx timeout [ 372.101541][ T5925] libceph: connect (1)[c::]:6789 error -101 [ 372.108731][ T5925] libceph: mon0 (1)[c::]:6789 connect error [ 372.233001][ T10] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 372.252295][ T10] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 372.267924][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 372.291700][ T10] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 372.308262][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 372.351109][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 372.361064][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 372.383759][ T10] usb 6-1: string descriptor 0 read error: -22 [ 372.390107][ T10] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 372.401050][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.412239][ T10] usb 6-1: config 0 descriptor?? [ 372.529433][ T9524] ceph: No mds server is up or the cluster is laggy [ 372.561637][ T10] hub 6-1:0.0: bad descriptor, ignoring hub [ 372.577870][ T10] hub 6-1:0.0: probe with driver hub failed with error -5 [ 372.625793][ T43] libceph: connect (1)[c::]:6789 error -101 [ 372.627650][ T10] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input45 [ 372.636076][ T9500] chnl_net:caif_netlink_parms(): no params data found [ 372.768032][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 372.890503][ T12] hsr_slave_0: left promiscuous mode [ 372.928090][ T12] hsr_slave_1: left promiscuous mode [ 372.939539][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 372.957049][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 372.973673][ T9511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.336623][ T9511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.735128][ T55] usb 6-1: USB disconnect, device number 23 [ 373.955457][ T9544] Sensor A: ================= START STATUS ================= [ 373.973460][ T9544] Sensor A: Test Pattern: 75% Colorbar [ 373.979028][ T9544] Sensor A: Show Information: All [ 373.991095][ T9544] Sensor A: Vertical Flip: false [ 373.996324][ T9544] Sensor A: Horizontal Flip: false [ 373.999129][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.001763][ T9544] Sensor A: Brightness: [ 374.010058][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 374.022709][ T9544] 128 [ 374.025345][ T9544] Sensor A: Contrast: 128 [ 374.037199][ T9544] Sensor A: Hue: 0 [ 374.050938][ T9544] Sensor A: Saturation: 128 [ 374.060292][ T9544] Sensor A: ================== END STATUS ================== [ 374.066686][ T12] veth1_macvtap: left promiscuous mode [ 374.073537][ T12] veth0_macvtap: left promiscuous mode [ 374.079173][ T12] veth1_vlan: left promiscuous mode [ 374.084880][ T12] veth0_vlan: left promiscuous mode [ 374.186853][ T51] Bluetooth: hci4: command tx timeout [ 374.281730][ T10] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 374.897217][ T10] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 374.906452][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.921782][ T10] usb 5-1: config 0 descriptor?? [ 375.199305][ T9558] netlink: 'syz.5.912': attribute type 1 has an invalid length. [ 375.325023][ T9559] hfs: can't find a HFS filesystem on dev nullb0 [ 375.756587][ T12] team0 (unregistering): Port device team_slave_1 removed [ 375.810641][ T12] team0 (unregistering): Port device team_slave_0 removed [ 376.201484][ T51] Bluetooth: hci4: command tx timeout [ 376.376373][ T43] usb 5-1: USB disconnect, device number 27 [ 376.395300][ T9558] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 376.659104][ T9576] netlink: 'syz.5.915': attribute type 1 has an invalid length. [ 376.737260][ T9572] netlink: 'syz.0.913': attribute type 1 has an invalid length. [ 376.781244][ T9578] hfs: can't find a HFS filesystem on dev nullb0 [ 376.963833][ T9580] hfs: can't find a HFS filesystem on dev nullb0 [ 377.128060][ T9576] 8021q: adding VLAN 0 to HW filter on device bond9 [ 377.532313][ T9572] 8021q: adding VLAN 0 to HW filter on device bond8 [ 377.677070][ T9500] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.696163][ T9500] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.711537][ T9500] bridge_slave_0: entered allmulticast mode [ 377.719345][ T9500] bridge_slave_0: entered promiscuous mode [ 377.730583][ T9500] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.742069][ T9500] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.750713][ T9500] bridge_slave_1: entered allmulticast mode [ 377.767319][ T9500] bridge_slave_1: entered promiscuous mode [ 378.015552][ T9500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.277490][ T9500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.293215][ T51] Bluetooth: hci4: command tx timeout [ 378.606074][ T9500] team0: Port device team_slave_0 added [ 378.669306][ T9500] team0: Port device team_slave_1 added [ 379.065279][ T9500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.073921][ T9500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.101501][ T9500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.115086][ T9500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.122773][ T9500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.123742][ T10] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 379.149627][ T9500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.219963][ T9500] hsr_slave_0: entered promiscuous mode [ 379.230313][ T9500] hsr_slave_1: entered promiscuous mode [ 379.236889][ T9500] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 379.263765][ T9500] Cannot create hsr debugfs directory [ 379.448746][ T10] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 379.460923][ T10] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 379.469187][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 379.487136][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.500252][ T10] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 379.516877][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 379.526967][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 379.544991][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 379.696454][ T10] usb 5-1: string descriptor 0 read error: -22 [ 379.744499][ T10] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 379.828254][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.957505][ T10] usb 5-1: config 0 descriptor?? [ 379.983825][ T10] hub 5-1:0.0: bad descriptor, ignoring hub [ 380.002168][ T10] hub 5-1:0.0: probe with driver hub failed with error -5 [ 380.019590][ T10] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input48 [ 380.888436][ T9598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.897327][ T9598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.024054][ T9621] input: syz0 as /devices/virtual/input/input49 [ 381.091154][ T5925] usb 5-1: USB disconnect, device number 28 [ 381.208740][ T9500] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 381.220118][ T9500] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 381.239899][ T9500] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 381.353907][ T9630] netlink: 'syz.2.927': attribute type 1 has an invalid length. [ 381.478143][ T9500] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 381.667825][ T9632] hfs: can't find a HFS filesystem on dev nullb0 [ 382.353104][ T9630] 8021q: adding VLAN 0 to HW filter on device bond6 [ 382.374748][ T9639] Sensor A: ================= START STATUS ================= [ 382.452709][ T9639] Sensor A: Test Pattern: 75% Colorbar [ 382.460983][ T9639] Sensor A: Show Information: All [ 382.550994][ T9639] Sensor A: Vertical Flip: false [ 382.556267][ T9639] Sensor A: Horizontal Flip: false [ 382.566343][ T9639] Sensor A: Brightness: 128 [ 382.574050][ T9639] Sensor A: Contrast: 128 [ 382.580361][ T9639] Sensor A: Hue: 0 [ 382.588749][ T9639] Sensor A: Saturation: 128 [ 382.593681][ T9639] Sensor A: ================== END STATUS ================== [ 383.309145][ T10] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 383.563806][ T9500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.564236][ T10] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 383.615003][ T9500] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.700416][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.784344][ T8247] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.798692][ T8247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.876446][ T9662] netlink: 'syz.0.934': attribute type 1 has an invalid length. [ 383.968587][ T10] usb 6-1: config 0 descriptor?? [ 383.969608][ T9663] hfs: can't find a HFS filesystem on dev nullb0 [ 384.119335][ T9662] 8021q: adding VLAN 0 to HW filter on device bond9 [ 384.138597][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.145883][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.396068][ T10] usb 6-1: USB disconnect, device number 24 [ 386.202901][ T9500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.229324][ T9500] veth0_vlan: entered promiscuous mode [ 387.267394][ T9500] veth1_vlan: entered promiscuous mode [ 387.749247][ T9500] veth0_macvtap: entered promiscuous mode [ 387.763835][ T9500] veth1_macvtap: entered promiscuous mode [ 387.833611][ T9500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.104148][ T9500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.115022][ T9500] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.134538][ T9500] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.611047][ T9500] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.631490][ T9500] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.874243][ T9710] input: syz1 as /devices/virtual/input/input50 [ 389.048522][ T9717] netlink: 'syz.5.948': attribute type 1 has an invalid length. [ 389.062048][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.069969][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.295734][ T9714] hfs: can't find a HFS filesystem on dev nullb0 [ 389.445587][ T9717] 8021q: adding VLAN 0 to HW filter on device bond10 [ 389.504708][ T9724] Sensor A: ================= START STATUS ================= [ 389.516652][ T9724] Sensor A: Test Pattern: 75% Colorbar [ 389.523387][ T9724] Sensor A: Show Information: All [ 389.534021][ T9724] Sensor A: Vertical Flip: false [ 389.539133][ T9724] Sensor A: Horizontal Flip: false [ 389.546378][ T9724] Sensor A: Brightness: 128 [ 389.612000][ T9724] Sensor A: Contrast: 128 [ 389.638941][ T8247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.649972][ T9724] Sensor A: Hue: 0 [ 389.656921][ T8247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.667373][ T9724] Sensor A: Saturation: 128 [ 389.678568][ T9724] Sensor A: ================== END STATUS ================== [ 390.351448][ T5873] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 390.738350][ T5873] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 390.889089][ T5873] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.932427][ T5873] usb 6-1: config 0 descriptor?? [ 392.309006][ T8247] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.498345][ T8247] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.533117][ T10] usb 6-1: USB disconnect, device number 25 [ 392.594053][ T8247] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.678473][ T8247] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.778444][ T8247] bridge_slave_1: left allmulticast mode [ 392.784192][ T8247] bridge_slave_1: left promiscuous mode [ 392.790723][ T8247] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.799490][ T8247] bridge_slave_0: left allmulticast mode [ 392.805625][ T8247] bridge_slave_0: left promiscuous mode [ 392.811500][ T8247] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.209017][ T8247] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 393.241407][ T8247] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.289289][ T8247] bond0 (unregistering): Released all slaves [ 393.382035][ T9756] netlink: 'syz.0.957': attribute type 1 has an invalid length. [ 393.471900][ T9758] syz.5.958: attempt to access beyond end of device [ 393.471900][ T9758] nbd5: rw=0, sector=6, nr_sectors = 2 limit=0 [ 393.515199][ T9759] hfs: can't find a HFS filesystem on dev nullb0 [ 393.667200][ T9758] ADFS-fs (nbd5): error: unable to read block 3, try 0 [ 393.947662][ T9756] 8021q: adding VLAN 0 to HW filter on device bond10 [ 394.468248][ T30] audit: type=1400 audit(1751340250.067:465): avc: denied { read write } for pid=9761 comm="syz.4.961" name="file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 394.573561][ T30] audit: type=1400 audit(1751340250.067:466): avc: denied { open } for pid=9761 comm="syz.4.961" path="/210/file0/file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 395.763672][ T5822] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 395.787706][ T5822] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 395.798233][ T5822] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 395.817315][ T5822] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 395.825640][ T5822] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 395.990398][ T8247] hsr_slave_0: left promiscuous mode [ 396.063129][ T9780] futex_wake_op: syz.4.964 tries to shift op by -1; fix this program [ 397.117031][ T8247] hsr_slave_1: left promiscuous mode [ 397.123756][ T8247] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 397.133781][ T8247] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 397.275349][ T8247] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 397.295215][ T8247] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.338799][ T8247] veth1_macvtap: left promiscuous mode [ 397.344534][ T8247] veth0_macvtap: left promiscuous mode [ 397.351448][ T8247] veth1_vlan: left promiscuous mode [ 397.368390][ T8247] veth0_vlan: left promiscuous mode [ 398.082864][ T5822] Bluetooth: hci4: command tx timeout [ 398.688429][ T9799] Sensor A: ================= START STATUS ================= [ 398.696909][ T9799] Sensor A: Test Pattern: 75% Colorbar [ 398.705989][ T9799] Sensor A: Show Information: All [ 398.711421][ T9799] Sensor A: Vertical Flip: false [ 398.716474][ T9799] Sensor A: Horizontal Flip: false [ 398.723228][ T9799] Sensor A: Brightness: 128 [ 398.727805][ T9799] Sensor A: Contrast: 128 [ 398.733217][ T9799] Sensor A: Hue: 0 [ 398.737187][ T9799] Sensor A: Saturation: 128 [ 398.741831][ T9799] Sensor A: ================== END STATUS ================== [ 398.837634][ T8247] team0 (unregistering): Port device team_slave_1 removed [ 398.881538][ T3669] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 398.891473][ T8247] team0 (unregistering): Port device team_slave_0 removed [ 399.000960][ T5873] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 399.034298][ T3669] usb 6-1: device descriptor read/64, error -71 [ 399.177055][ T5873] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 399.187165][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.205073][ T5873] usb 3-1: config 0 descriptor?? [ 399.301011][ T3669] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 399.466866][ T3669] usb 6-1: device descriptor read/64, error -71 [ 399.611972][ T3669] usb usb6-port1: attempt power cycle [ 399.638716][ T9807] input: syz1 as /devices/virtual/input/input51 [ 399.896192][ T9773] chnl_net:caif_netlink_parms(): no params data found [ 399.991007][ T3669] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 400.028441][ T9773] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.037501][ T9773] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.046209][ T9773] bridge_slave_0: entered allmulticast mode [ 400.056199][ T9773] bridge_slave_0: entered promiscuous mode [ 400.123937][ T5822] Bluetooth: hci4: command tx timeout [ 400.144695][ T3669] usb 6-1: device descriptor read/8, error -71 [ 400.218072][ T9773] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.384864][ T9773] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.428169][ T3669] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 400.437078][ T9773] bridge_slave_1: entered allmulticast mode [ 400.462498][ T9773] bridge_slave_1: entered promiscuous mode [ 400.484111][ T3669] usb 6-1: device descriptor read/8, error -71 [ 400.546764][ T9773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.623103][ T3669] usb usb6-port1: unable to enumerate USB device [ 400.624038][ T9773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.645657][ T9820] netlink: 'syz.0.973': attribute type 1 has an invalid length. [ 400.714380][ T9822] hfs: can't find a HFS filesystem on dev nullb0 [ 400.758213][ T9820] 8021q: adding VLAN 0 to HW filter on device bond11 [ 401.002100][ T9773] team0: Port device team_slave_0 added [ 401.018903][ T9773] team0: Port device team_slave_1 added [ 401.223480][ T3669] usb 3-1: USB disconnect, device number 27 [ 401.243816][ T9773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.258172][ T9773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.285210][ T9773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.550980][ T9773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.558169][ T9773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.587542][ T9773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.867729][ T9773] hsr_slave_0: entered promiscuous mode [ 401.892005][ T9773] hsr_slave_1: entered promiscuous mode [ 402.016412][ T9773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 402.172086][ T9773] Cannot create hsr debugfs directory [ 402.201377][ T5822] Bluetooth: hci4: command tx timeout [ 402.613252][ T9845] FAULT_INJECTION: forcing a failure. [ 402.613252][ T9845] name failslab, interval 1, probability 0, space 0, times 0 [ 402.626871][ T9845] CPU: 1 UID: 0 PID: 9845 Comm: syz.2.978 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 402.626899][ T9845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 402.626912][ T9845] Call Trace: [ 402.626919][ T9845] [ 402.626926][ T9845] dump_stack_lvl+0x16c/0x1f0 [ 402.626970][ T9845] should_fail_ex+0x512/0x640 [ 402.626998][ T9845] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 402.627029][ T9845] should_failslab+0xc2/0x120 [ 402.627056][ T9845] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 402.627079][ T9845] ? getname_flags.part.0+0x4c/0x550 [ 402.627102][ T9845] getname_flags.part.0+0x4c/0x550 [ 402.627124][ T9845] getname_flags+0x93/0xf0 [ 402.627146][ T9845] __x64_sys_symlinkat+0x86/0xc0 [ 402.627173][ T9845] do_syscall_64+0xcd/0x4c0 [ 402.627201][ T9845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.627223][ T9845] RIP: 0033:0x7fbda958e929 [ 402.627240][ T9845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.627262][ T9845] RSP: 002b:00007fbdaa374038 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 402.627281][ T9845] RAX: ffffffffffffffda RBX: 00007fbda97b6160 RCX: 00007fbda958e929 [ 402.627292][ T9845] RDX: 0000200000000140 RSI: 0000000000000006 RDI: 00002000000001c0 [ 402.627304][ T9845] RBP: 00007fbdaa374090 R08: 0000000000000000 R09: 0000000000000000 [ 402.627314][ T9845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.627324][ T9845] R13: 0000000000000000 R14: 00007fbda97b6160 R15: 00007ffc733991e8 [ 402.627348][ T9845] [ 403.558659][ T9852] netlink: 132 bytes leftover after parsing attributes in process `syz.2.980'. [ 403.678549][ T9853] Attempt to restore checkpoint with obsolete wellknown handles [ 404.290911][ T5822] Bluetooth: hci4: command tx timeout [ 404.491623][ T9773] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 404.511742][ T9773] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 404.535326][ T9773] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 404.557723][ T9773] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 404.895727][ T9773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.359831][ T9773] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.374429][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.381662][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.551478][ T3669] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 405.603381][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.610639][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.712708][ T3669] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 405.740675][ T3669] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 405.774555][ T3669] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 405.792709][ T3669] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 405.801829][ T3669] usb 6-1: SerialNumber: syz [ 405.826300][ T3669] usb 6-1: bad CDC descriptors [ 405.844038][ T3669] usb-storage 6-1:1.0: USB Mass Storage device detected [ 405.871712][ T5873] usb 3-1: new low-speed USB device number 28 using dummy_hcd [ 405.890650][ T3669] usb-storage 6-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 405.927633][ T3669] scsi host1: usb-storage 6-1:1.0 [ 406.091615][ T5873] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 406.100128][ T5873] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 406.395108][ T5873] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 406.411938][ T5873] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 406.424275][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 406.425513][ T976] usb 6-1: USB disconnect, device number 30 [ 406.448453][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 406.459504][ T5873] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 406.476136][ T5873] usb 3-1: string descriptor 0 read error: -22 [ 406.484850][ T5873] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 406.494237][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.519076][ T5873] usb 3-1: config 0 descriptor?? [ 406.527476][ T5873] hub 3-1:0.0: bad descriptor, ignoring hub [ 406.540375][ T5873] hub 3-1:0.0: probe with driver hub failed with error -5 [ 406.569905][ T5873] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input53 [ 406.658489][ T9773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.760043][ T9882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.816660][ T9882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.829522][ T9773] veth0_vlan: entered promiscuous mode [ 407.149621][ T5873] usb 3-1: USB disconnect, device number 28 [ 407.168900][ T9773] veth1_vlan: entered promiscuous mode [ 407.266905][ T9773] veth0_macvtap: entered promiscuous mode [ 407.287716][ T9773] veth1_macvtap: entered promiscuous mode [ 407.333272][ T9899] Attempt to restore checkpoint with obsolete wellknown handles [ 407.749602][ T9773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.798823][ T9773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.825379][ T9773] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.863781][ T9773] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.894989][ T9773] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.921555][ T9773] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.090688][ T9923] netlink: 132 bytes leftover after parsing attributes in process `syz.4.997'. [ 408.935249][ T9931] netlink: 124 bytes leftover after parsing attributes in process `syz.5.998'. [ 408.944811][ T9931] netlink: 72 bytes leftover after parsing attributes in process `syz.5.998'. [ 409.453902][ T9971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.498346][ T9971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.521299][ T3428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.529202][ T3428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.695816][ T60] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.937805][ T60] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.094016][ T60] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.361657][ T60] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.615011][ T60] bridge_slave_1: left allmulticast mode [ 413.623706][ T60] bridge_slave_1: left promiscuous mode [ 413.629551][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.652374][ T60] bridge_slave_0: left allmulticast mode [ 413.667708][ T60] bridge_slave_0: left promiscuous mode [ 413.679829][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.280583][ T30] audit: type=1400 audit(1751340272.159:467): avc: denied { view } for pid=10012 comm="syz.2.1009" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 415.596453][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 415.613395][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 415.624990][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 415.634782][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 415.642675][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 417.019805][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 417.414667][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 417.432195][ T60] bond0 (unregistering): Released all slaves [ 417.734014][ T5822] Bluetooth: hci4: command tx timeout [ 418.447534][T10052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1019'. [ 418.503307][T10046] vxcan1 speed is unknown, defaulting to 1000 [ 418.705979][T10046] vxcan1 speed is unknown, defaulting to 1000 [ 418.766990][T10019] chnl_net:caif_netlink_parms(): no params data found [ 418.782996][ T60] hsr_slave_0: left promiscuous mode [ 418.796722][ T60] hsr_slave_1: left promiscuous mode [ 418.808023][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.815846][ T5925] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 418.833796][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.850464][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 418.861804][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.888299][ T60] veth1_macvtap: left promiscuous mode [ 418.897773][ T60] veth0_macvtap: left promiscuous mode [ 418.906854][ T60] veth1_vlan: left promiscuous mode [ 419.000749][ T5925] usb 5-1: config 0 has no interfaces? [ 419.020965][ T5925] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 419.031365][ T60] veth0_vlan: left promiscuous mode [ 419.081703][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.094679][ T5925] usb 5-1: Product: syz [ 419.098956][ T5925] usb 5-1: Manufacturer: syz [ 419.133681][ T5925] usb 5-1: SerialNumber: syz [ 419.183969][ T5925] usb 5-1: config 0 descriptor?? [ 419.443371][T10058] program syz.4.1020 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 419.464403][ T30] audit: type=1400 audit(1751340276.319:468): avc: denied { append } for pid=10053 comm="syz.4.1020" name="sg0" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 419.549869][ T30] audit: type=1400 audit(1751340276.339:469): avc: denied { write } for pid=10053 comm="syz.4.1020" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 419.816612][ T5822] Bluetooth: hci4: command tx timeout [ 420.679672][ T30] audit: type=1400 audit(1751340277.559:470): avc: denied { create } for pid=10064 comm="syz.5.1021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 420.712573][ T30] audit: type=1400 audit(1751340277.599:471): avc: denied { setopt } for pid=10064 comm="syz.5.1021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 420.937929][ T60] team0 (unregistering): Port device team_slave_1 removed [ 421.054939][ T60] team0 (unregistering): Port device team_slave_0 removed [ 421.540034][ T10] usb 5-1: USB disconnect, device number 29 [ 421.887804][ T5822] Bluetooth: hci4: command tx timeout [ 421.968658][T10075] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1023'. [ 422.033556][ T10] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 422.312454][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.324996][T10046] vxcan1 speed is unknown, defaulting to 1000 [ 422.341228][ T10] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 422.372660][T10069] C: renamed from team_slave_0 (while UP) [ 422.386318][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.420122][T10069] netlink: 'syz.5.1021': attribute type 1 has an invalid length. [ 422.445445][ T10] usb 5-1: config 0 descriptor?? [ 422.450192][T10069] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1021'. [ 422.461098][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 422.470325][T10069] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 422.599868][T10046] infiniband syz2: set down [ 422.606963][T10046] infiniband syz2: added vxcan1 [ 422.614087][T10046] syz2: rxe_create_cq: returned err = -12 [ 422.622173][T10046] infiniband syz2: Couldn't create ib_mad CQ [ 422.628353][T10046] infiniband syz2: Couldn't open port 1 [ 422.653699][T10046] RDS/IB: syz2: added [ 422.658416][T10046] smc: adding ib device syz2 with port count 1 [ 422.665316][T10046] smc: ib device syz2 port 1 has pnetid [ 422.680936][ T976] vxcan1 speed is unknown, defaulting to 1000 [ 422.690930][ T5881] vxcan1 speed is unknown, defaulting to 1000 [ 422.699857][T10046] vxcan1 speed is unknown, defaulting to 1000 [ 422.869872][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 422.904228][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 422.912665][T10019] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.921599][T10019] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.928888][T10019] bridge_slave_0: entered allmulticast mode [ 422.941779][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 422.959294][T10019] bridge_slave_0: entered promiscuous mode [ 422.968245][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 422.979296][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 423.012141][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 423.042410][T10019] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.212522][ T30] audit: type=1400 audit(1751340280.099:472): avc: denied { execute } for pid=10071 comm="syz.4.1022" path="/dev/video7" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 423.260931][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 423.293383][T10019] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.432753][ T10] pwc: recv_control_msg error -32 req 02 val 2100 [ 423.448931][T10019] bridge_slave_1: entered allmulticast mode [ 423.458586][T10019] bridge_slave_1: entered promiscuous mode [ 423.491354][ T10] pwc: recv_control_msg error -32 req 04 val 1500 [ 423.508501][ T30] audit: type=1400 audit(1751340280.389:473): avc: denied { map } for pid=10086 comm="syz.0.1026" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 423.535143][ T10] pwc: recv_control_msg error -32 req 02 val 2500 [ 423.556304][ T10] pwc: recv_control_msg error -32 req 02 val 2400 [ 423.605318][ T10] pwc: recv_control_msg error -32 req 02 val 2600 [ 423.982559][ T5822] Bluetooth: hci4: command tx timeout [ 424.454416][ T10] pwc: recv_control_msg error -32 req 02 val 2900 [ 424.582565][T10046] vxcan1 speed is unknown, defaulting to 1000 [ 424.706410][T10019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.773957][T10100] tipc: Started in network mode [ 424.798246][T10100] tipc: Node identity ac14140c, cluster identity 4711 [ 424.842112][T10101] xt_TCPMSS: Only works on TCP SYN packets [ 425.023338][T10100] tipc: New replicast peer: 255.255.255.255 [ 426.049259][T10100] tipc: Enabled bearer , priority 10 [ 426.057359][T10103] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1029'. [ 426.066804][T10103] tipc: Disabling bearer [ 426.324976][T10019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.550085][T10019] team0: Port device team_slave_0 added [ 426.703794][T10019] team0: Port device team_slave_1 added [ 426.821299][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 426.842097][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 427.033316][ T10] pwc: Registered as video103. [ 427.201678][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input55 [ 427.229235][T10019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.230183][ T10] usb 5-1: USB disconnect, device number 30 [ 427.239577][T10019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.379834][T10019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.391519][T10046] vxcan1 speed is unknown, defaulting to 1000 [ 427.921008][T10114] futex_wake_op: syz.4.1032 tries to shift op by -1; fix this program [ 428.354987][T10019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.432846][T10110] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1031'. [ 428.471819][T10019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.672049][T10019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.800651][T10019] hsr_slave_0: entered promiscuous mode [ 428.820963][T10019] hsr_slave_1: entered promiscuous mode [ 428.826958][T10019] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 428.862738][T10019] Cannot create hsr debugfs directory [ 429.011002][ T3669] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 429.070081][T10046] vxcan1 speed is unknown, defaulting to 1000 [ 429.171223][ T3669] usb 5-1: Using ep0 maxpacket: 16 [ 429.185586][ T3669] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 429.217793][ T3669] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 429.263587][ T3669] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 429.274054][ T3669] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.299643][ T3669] usb 5-1: Product: syz [ 429.332835][ T3669] usb 5-1: Manufacturer: syz [ 429.342284][ T3669] usb 5-1: SerialNumber: syz [ 429.377818][ T3669] usb 5-1: config 0 descriptor?? [ 429.494674][T10046] vxcan1 speed is unknown, defaulting to 1000 [ 429.644458][T10131] FAULT_INJECTION: forcing a failure. [ 429.644458][T10131] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 429.658574][T10131] CPU: 1 UID: 0 PID: 10131 Comm: syz.5.1035 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 429.658602][T10131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 429.658614][T10131] Call Trace: [ 429.658633][T10131] [ 429.658640][T10131] dump_stack_lvl+0x16c/0x1f0 [ 429.658679][T10131] should_fail_ex+0x512/0x640 [ 429.658709][T10131] _copy_to_user+0x32/0xd0 [ 429.658738][T10131] simple_read_from_buffer+0xcb/0x170 [ 429.658767][T10131] proc_fail_nth_read+0x197/0x270 [ 429.658793][T10131] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 429.658816][T10131] ? rw_verify_area+0xcf/0x680 [ 429.658837][T10131] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 429.658858][T10131] vfs_read+0x1e4/0xc60 [ 429.658883][T10131] ? __pfx___mutex_lock+0x10/0x10 [ 429.658912][T10131] ? __pfx_vfs_read+0x10/0x10 [ 429.658940][T10131] ? __fget_files+0x20e/0x3c0 [ 429.658963][T10131] ? rcu_watching_snap_stopped_since+0x100/0x110 [ 429.659000][T10131] ksys_read+0x12a/0x250 [ 429.659020][T10131] ? __pfx_ksys_read+0x10/0x10 [ 429.659049][T10131] do_syscall_64+0xcd/0x4c0 [ 429.659077][T10131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.659096][T10131] RIP: 0033:0x7f574b78d33c [ 429.659111][T10131] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 429.659128][T10131] RSP: 002b:00007f57495f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 429.659146][T10131] RAX: ffffffffffffffda RBX: 00007f574b9b6160 RCX: 00007f574b78d33c [ 429.659158][T10131] RDX: 000000000000000f RSI: 00007f57495f60a0 RDI: 000000000000000a [ 429.659175][T10131] RBP: 00007f57495f6090 R08: 0000000000000000 R09: 0000000000000000 [ 429.659185][T10131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.659195][T10131] R13: 0000000000000000 R14: 00007f574b9b6160 R15: 00007ffc9855bac8 [ 429.659220][T10131] [ 429.849157][ T3669] appledisplay 5-1:0.0: Error while getting initial brightness: -110 [ 429.863207][ T3669] appledisplay 5-1:0.0: probe with driver appledisplay failed with error -110 [ 430.296494][ T9969] smc: removing ib device syz2 [ 430.535254][T10140] FAULT_INJECTION: forcing a failure. [ 430.535254][T10140] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 430.565075][T10140] CPU: 1 UID: 0 PID: 10140 Comm: syz.5.1039 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 430.565116][T10140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 430.565128][T10140] Call Trace: [ 430.565134][T10140] [ 430.565141][T10140] dump_stack_lvl+0x16c/0x1f0 [ 430.565174][T10140] should_fail_ex+0x512/0x640 [ 430.565203][T10140] _copy_from_user+0x2e/0xd0 [ 430.565231][T10140] vhost_net_ioctl+0x47c/0x1710 [ 430.565266][T10140] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 430.565289][T10140] ? hook_file_ioctl_common+0x145/0x410 [ 430.565330][T10140] ? selinux_file_ioctl+0xb4/0x270 [ 430.565358][T10140] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 430.565382][T10140] __x64_sys_ioctl+0x18b/0x210 [ 430.565406][T10140] do_syscall_64+0xcd/0x4c0 [ 430.565441][T10140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.565460][T10140] RIP: 0033:0x7f574b78e929 [ 430.565494][T10140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.565512][T10140] RSP: 002b:00007f574c540038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 430.565530][T10140] RAX: ffffffffffffffda RBX: 00007f574b9b5fa0 RCX: 00007f574b78e929 [ 430.565542][T10140] RDX: 0000200000000000 RSI: 000000004008af30 RDI: 0000000000000003 [ 430.565553][T10140] RBP: 00007f574c540090 R08: 0000000000000000 R09: 0000000000000000 [ 430.565563][T10140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.565573][T10140] R13: 0000000000000000 R14: 00007f574b9b5fa0 R15: 00007ffc9855bac8 [ 430.565597][T10140] [ 431.521140][T10149] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1041'. [ 431.733174][T10152] Attempt to restore checkpoint with obsolete wellknown handles [ 432.008779][ T5873] usb 5-1: USB disconnect, device number 31 [ 432.208289][T10019] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 432.248500][T10019] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 432.680034][T10019] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 432.818873][T10019] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 433.016994][T10169] FAULT_INJECTION: forcing a failure. [ 433.016994][T10169] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 433.030682][T10169] CPU: 0 UID: 0 PID: 10169 Comm: syz.0.1045 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 433.030699][T10169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 433.030707][T10169] Call Trace: [ 433.030711][T10169] [ 433.030715][T10169] dump_stack_lvl+0x16c/0x1f0 [ 433.030740][T10169] should_fail_ex+0x512/0x640 [ 433.030767][T10169] _copy_to_user+0x32/0xd0 [ 433.030790][T10169] simple_read_from_buffer+0xcb/0x170 [ 433.030814][T10169] proc_fail_nth_read+0x197/0x270 [ 433.030836][T10169] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 433.030856][T10169] ? rw_verify_area+0xcf/0x680 [ 433.030874][T10169] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 433.030891][T10169] vfs_read+0x1e4/0xc60 [ 433.030913][T10169] ? __pfx___mutex_lock+0x10/0x10 [ 433.030937][T10169] ? __pfx_vfs_read+0x10/0x10 [ 433.030956][T10169] ? __fget_files+0x20e/0x3c0 [ 433.030975][T10169] ksys_read+0x12a/0x250 [ 433.030987][T10169] ? __pfx_ksys_read+0x10/0x10 [ 433.031004][T10169] do_syscall_64+0xcd/0x4c0 [ 433.031021][T10169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.031034][T10169] RIP: 0033:0x7f9264f8d33c [ 433.031046][T10169] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 433.031057][T10169] RSP: 002b:00007f9265d22030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 433.031070][T10169] RAX: ffffffffffffffda RBX: 00007f92651b5fa0 RCX: 00007f9264f8d33c [ 433.031079][T10169] RDX: 000000000000000f RSI: 00007f9265d220a0 RDI: 0000000000000006 [ 433.031088][T10169] RBP: 00007f9265d22090 R08: 0000000000000000 R09: 0000000000000000 [ 433.031096][T10169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.031102][T10169] R13: 0000000000000000 R14: 00007f92651b5fa0 R15: 00007ffe48029458 [ 433.031116][T10169] [ 433.257417][T10019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.276245][T10019] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.293832][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.301241][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.324971][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.332463][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.676334][T10176] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1046'. [ 433.723230][T10019] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 433.749967][T10019] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 433.885441][ T31] INFO: task kworker/0:0:9 blocked for more than 143 seconds. [ 433.914662][ T31] Not tainted 6.16.0-rc4-syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 433.935192][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 433.974380][ T31] task:kworker/0:0 state:D stack:24152 pid:9 tgid:9 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 434.427389][ T31] Workqueue: usb_hub_wq hub_event [ 435.859985][ T31] Call Trace: [ 435.873670][ T31] [ 435.876728][ T31] __schedule+0x116a/0x5de0 [ 435.920902][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 435.926045][ T31] ? __pfx___schedule+0x10/0x10 [ 435.974133][ T31] ? find_held_lock+0x2b/0x80 [ 435.978914][ T31] ? schedule+0x2d7/0x3a0 [ 435.984662][ T31] schedule+0xe7/0x3a0 [ 435.988794][ T31] schedule_preempt_disabled+0x13/0x30 [ 435.994632][ T31] __mutex_lock+0x6c7/0xb90 [ 435.999177][ T31] ? hub_event+0x2434/0x4fa0 [ 436.004722][ T31] ? hub_event+0x292b/0x4fa0 [ 436.009369][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 436.014972][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 436.021843][ T31] ? hub_ext_port_status+0x1fa/0x670 [ 436.027207][ T31] ? hub_event+0x292b/0x4fa0 [ 436.032252][ T31] hub_event+0x292b/0x4fa0 [ 436.036730][ T31] ? __pfx_hub_event+0x10/0x10 [ 436.041708][ T31] ? __list_add_valid_or_report+0xe0/0x190 [ 436.047569][ T31] ? rcu_is_watching+0x12/0xc0 [ 436.052823][ T31] process_one_work+0x9cf/0x1b70 [ 436.057797][ T31] ? __pfx_hcd_resume_work+0x10/0x10 [ 436.063358][ T31] ? __pfx_process_one_work+0x10/0x10 [ 436.068763][ T31] ? assign_work+0x1a0/0x250 [ 436.073413][ T31] worker_thread+0x6c8/0xf10 [ 436.078033][ T31] ? __pfx_worker_thread+0x10/0x10 [ 436.084222][ T31] kthread+0x3c2/0x780 [ 436.087773][ T8518] vhci_hcd: connection closed [ 436.090995][ T8516] vhci_hcd: connection closed [ 436.092803][ T972] vhci_hcd: stop threads [ 436.100599][ T8514] vhci_hcd: connection closed [ 436.105177][ T31] ? __pfx_kthread+0x10/0x10 [ 436.105228][ T31] ? rcu_is_watching+0x12/0xc0 [ 436.105253][ T31] ? __pfx_kthread+0x10/0x10 [ 436.105282][ T31] ret_from_fork+0x5d4/0x6f0 [ 436.105312][ T31] ? __pfx_kthread+0x10/0x10 [ 436.105329][ T31] ret_from_fork_asm+0x1a/0x30 [ 436.121659][ T8510] vhci_hcd: connection closed [ 436.128044][ T8506] vhci_hcd: connection reset by peer [ 436.149828][ T31] [ 436.153423][ T31] [ 436.153423][ T31] Showing all locks held in the system: [ 436.154057][ T972] vhci_hcd: release socket [ 436.161546][ T31] 5 locks held by kworker/0:0/9: [ 436.161562][ T31] #0: ffff88814469a948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 436.210906][ T31] #1: ffffc900000e7d10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 436.229658][ T972] vhci_hcd: disconnect device [ 436.229664][ T31] #2: ffff888145b30198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 436.236731][ T972] vhci_hcd: stop threads [ 436.246068][ T31] #3: ffff888145b33510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2906/0x4fa0 [ 436.251816][ T972] vhci_hcd: release socket [ 436.259557][ T31] #4: ffff888144fc4c68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x292b/0x4fa0 [ 436.267410][ T972] vhci_hcd: disconnect device [ 436.274265][ T31] 1 lock held by khungtaskd/31: [ 436.279127][ T972] vhci_hcd: stop threads [ 436.286165][ T31] #0: ffffffff8e5c4940 (rcu_read_lock [ 436.288239][ T972] vhci_hcd: release socket [ 436.288389][ T972] vhci_hcd: disconnect device [ 436.294466][ T31] ){....}-{1:3} [ 436.302622][ T972] vhci_hcd: stop threads [ 436.306073][ T31] , at: debug_show_all_locks+0x36/0x1c0 [ 436.306372][ T972] vhci_hcd: release socket [ 436.311637][ T31] 8 locks held by kworker/u8:5/972: [ 436.318049][ T972] vhci_hcd: disconnect device [ 436.326382][ T31] 2 locks held by kworker/u8:9/3503: [ 436.336511][ T31] #0: ffff88801df8f948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 436.336757][ T972] vhci_hcd: stop threads [ 436.351093][ T31] #1: ffffc9000ca67d10 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 436.351844][ T972] vhci_hcd: release socket [ 436.367519][ T31] 2 locks held by getty/5587: [ 436.371204][ T972] vhci_hcd: disconnect device [ 436.372858][ T31] #0: ffff888032b3b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 436.387773][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 436.398138][ T31] 1 lock held by syz-executor/5817: [ 436.403510][ T31] #0: ffffffff9034c628 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 436.414319][ T31] 6 locks held by kworker/1:3/5826: [ 436.419547][ T31] #0: ffff88814469a948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 436.430497][ T31] #1: ffffc90003117d10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 436.441643][ T5826] vhci_hcd: vhci_device speed not set [ 436.442170][ T31] #2: ffff8881457db198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 436.458174][ T31] #3: ffff888145b03510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2906/0x4fa0 [ 436.468618][ T31] #4: ffff888144fc4c68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x292b/0x4fa0 [ 436.478387][ T31] #5: ffffffff8f930270 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x1a1/0x1cb0 [ 436.488986][ T31] 2 locks held by kworker/0:4/5881: [ 436.494249][ T31] #0: ffff88801b878d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 436.504777][ T31] #1: ffffc90002fb7d10 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 436.515107][ T31] 3 locks held by kworker/1:6/5925: [ 436.520353][ T31] #0: ffff88801b878d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 436.531823][ T31] #1: ffffc9000465fd10 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 436.543955][ T31] #2: ffff888056b22240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1bb/0x2e80 [ 436.554219][ T31] 1 lock held by syz.4.663/8522: [ 436.559154][ T31] #0: ffff88805a6f2c08 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 436.570332][ T31] 5 locks held by kworker/u8:22/9969: [ 436.575845][ T31] 2 locks held by syz.0.1046/10173: [ 436.581179][ T31] #0: ffff8880754edc08 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 436.591869][ T31] #1: ffffffff8e5cff38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 436.602110][ T31] 1 lock held by syz.4.1048/10182: [ 436.607236][ T31] #0: ffffffff8e5cff38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 436.617945][ T31] 1 lock held by syz.5.1049/10188: [ 436.623139][ T31] #0: ffffffff9034c628 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x371/0xe90 [ 436.632693][ T31] [ 436.672196][ T31] ============================================= [ 436.672196][ T31] [ 436.900866][ T31] NMI backtrace for cpu 0 [ 436.900895][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 436.900921][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 436.900932][ T31] Call Trace: [ 436.900940][ T31] [ 436.900948][ T31] dump_stack_lvl+0x116/0x1f0 [ 436.900989][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 436.901011][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 436.901038][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 436.901067][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 436.901092][ T31] watchdog+0xf70/0x12c0 [ 436.901121][ T31] ? __pfx_watchdog+0x10/0x10 [ 436.901140][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 436.901169][ T31] ? __kthread_parkme+0x19e/0x250 [ 436.901198][ T31] ? __pfx_watchdog+0x10/0x10 [ 436.901218][ T31] kthread+0x3c2/0x780 [ 436.901236][ T31] ? __pfx_kthread+0x10/0x10 [ 436.901254][ T31] ? rcu_is_watching+0x12/0xc0 [ 436.901278][ T31] ? __pfx_kthread+0x10/0x10 [ 436.901303][ T31] ret_from_fork+0x5d4/0x6f0 [ 436.901329][ T31] ? __pfx_kthread+0x10/0x10 [ 436.901347][ T31] ret_from_fork_asm+0x1a/0x30 [ 436.901388][ T31] [ 436.901395][ T31] Sending NMI from CPU 0 to CPUs 1: [ 437.027543][ C1] NMI backtrace for cpu 1 [ 437.027564][ C1] CPU: 1 UID: 0 PID: 9969 Comm: kworker/u8:22 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 437.027585][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 437.027596][ C1] Workqueue: bat_events batadv_nc_worker [ 437.027626][ C1] RIP: 0010:hlock_class+0x13/0x70 [ 437.027647][ C1] Code: 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f b7 47 20 66 25 ff 1f 0f b7 c0 48 0f a3 05 0d 9b 3b 14 <73> 15 48 8d 04 80 48 8d 04 80 48 8d 04 c5 60 a9 d3 95 c3 cc cc cc [ 437.027662][ C1] RSP: 0018:ffffc90004c579e0 EFLAGS: 00000003 [ 437.027673][ C1] RAX: 0000000000000007 RBX: 0000000000000002 RCX: 0000000000020000 [ 437.027682][ C1] RDX: 0000000000000007 RSI: 0000000000000000 RDI: ffff888079bcaf80 [ 437.027690][ C1] RBP: ffff888079bca440 R08: 0000000000000000 R09: 0000000000000000 [ 437.027699][ C1] R10: 0000000000000050 R11: 0000000000000001 R12: ffff888079bcaf30 [ 437.027709][ C1] R13: ffff888079bcaf80 R14: 0000000000000003 R15: ffffffff8e5c4940 [ 437.027718][ C1] FS: 0000000000000000(0000) GS:ffff888124852000(0000) knlGS:0000000000000000 [ 437.027733][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 437.027743][ C1] CR2: 0000001b2f3ed000 CR3: 000000000e382000 CR4: 00000000003526f0 [ 437.027754][ C1] Call Trace: [ 437.027759][ C1] [ 437.027764][ C1] __lock_acquire+0x249/0x1c90 [ 437.027797][ C1] lock_acquire+0x179/0x350 [ 437.027819][ C1] ? batadv_nc_worker+0x159/0x1030 [ 437.027839][ C1] ? batadv_nc_worker+0x895/0x1030 [ 437.027860][ C1] batadv_nc_worker+0x16a/0x1030 [ 437.027879][ C1] ? batadv_nc_worker+0x159/0x1030 [ 437.027896][ C1] ? x86_vector_alloc_irqs+0x15f/0xa60 [ 437.027919][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 437.027943][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 437.027965][ C1] ? rcu_is_watching+0x12/0xc0 [ 437.027985][ C1] process_one_work+0x9cf/0x1b70 [ 437.028005][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 437.028022][ C1] ? __pfx_process_one_work+0x10/0x10 [ 437.028039][ C1] ? assign_work+0x1a0/0x250 [ 437.028063][ C1] worker_thread+0x6c8/0xf10 [ 437.028081][ C1] ? __pfx_worker_thread+0x10/0x10 [ 437.028095][ C1] kthread+0x3c2/0x780 [ 437.028110][ C1] ? __pfx_kthread+0x10/0x10 [ 437.028123][ C1] ? rcu_is_watching+0x12/0xc0 [ 437.028140][ C1] ? __pfx_kthread+0x10/0x10 [ 437.028153][ C1] ret_from_fork+0x5d4/0x6f0 [ 437.028174][ C1] ? __pfx_kthread+0x10/0x10 [ 437.028186][ C1] ret_from_fork_asm+0x1a/0x30 [ 437.028205][ C1] [ 437.280346][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 437.287224][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 437.297271][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 437.307306][ T31] Call Trace: [ 437.310568][ T31] [ 437.313480][ T31] dump_stack_lvl+0x3d/0x1f0 [ 437.318060][ T31] panic+0x71c/0x800 [ 437.321949][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 437.327823][ T31] ? __pfx_panic+0x10/0x10 [ 437.332231][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 437.337591][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 437.343555][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 437.348924][ T31] ? watchdog+0xdda/0x12c0 [ 437.353319][ T31] ? watchdog+0xdcd/0x12c0 [ 437.357715][ T31] watchdog+0xdeb/0x12c0 [ 437.361936][ T31] ? __pfx_watchdog+0x10/0x10 [ 437.366606][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 437.371789][ T31] ? __kthread_parkme+0x19e/0x250 [ 437.376796][ T31] ? __pfx_watchdog+0x10/0x10 [ 437.381455][ T31] kthread+0x3c2/0x780 [ 437.385505][ T31] ? __pfx_kthread+0x10/0x10 [ 437.390076][ T31] ? rcu_is_watching+0x12/0xc0 [ 437.394833][ T31] ? __pfx_kthread+0x10/0x10 [ 437.399397][ T31] ret_from_fork+0x5d4/0x6f0 [ 437.403995][ T31] ? __pfx_kthread+0x10/0x10 [ 437.408870][ T31] ret_from_fork_asm+0x1a/0x30 [ 437.413640][ T31] [ 437.416915][ T31] Kernel Offset: disabled [ 437.421238][ T31] Rebooting in 86400 seconds..