last executing test programs: 18m25.409105748s ago: executing program 32 (id=728): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000020040000000800000008"], 0x50) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, 0x0, 0x40081) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0xc0010141, 0x0, 0x9}]}) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f00000024c0)={0x0, @generic={0x28, "5e369c2640841772081f6879367e"}, @l2={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4}, @ax25={0x3, @default, 0x6}, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x100000000, 0x1, 0x4}) fchown(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) getegid() syz_usb_control_io(r1, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r1, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0x21, 0x42, {0x42, 0x7, "374301b1704a78b6ab8fa6023e23463f521021f561fc484c2e9b3379e29920612bf4867b95468758cbc265c2595ebdf8c07071cf030bd33a9d7ac2289e83786b"}}, 0x0}, &(0x7f0000000600)={0x1c, &(0x7f0000000100)={0x40, 0x5921e9310efece5b, 0x7, "fb0e1b4a30d292"}, 0x0, 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x14, &(0x7f00000006c0)=ANY=[@ANYRESDEC, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYBLOB="de1cca1c996ea5bbf77de06ef32d7ad74e1c817a73ac1fd1286de1fb7257ac0e62f3b2142108", @ANYRESOCT], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x9, &(0x7f0000000000)=0x3, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r6}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="30ec0000400007012bbd700000000002017c0000", @ANYRES32, @ANYBLOB="040008"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200), 0x109000, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r9, 0xc01064bd, &(0x7f0000000440)={&(0x7f0000000240)="15", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r9, 0xc00464be, &(0x7f00000000c0)={r10}) ioctl$DRM_IOCTL_MODE_GETPLANE(r9, 0xc02064b6, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="48010000100001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES8=r6, @ANYRES16=r1, @ANYBLOB="ec141400000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000001eb900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000004050000000000000000000000000000000000000200000000000000000000004c001200"], 0x148}}, 0x0) setxattr$security_evm(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000040), &(0x7f0000000100)=ANY=[@ANYBLOB="0303090000000427e8a8d6db771eeb862500710199d0a0c3afb6279faa20724700"], 0x9, 0x1) 15m20.168544831s ago: executing program 5 (id=1293): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x6b, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x0, 0x0, &(0x7f0000000000)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001400b59500000000000000000a000000", @ANYRES32=r6, @ANYBLOB="1400020000000000000000000000ffff000000000800df00700300000d845924caf09a530a9b532ff9"], 0x34}}, 0x0) 15m15.363739558s ago: executing program 5 (id=1310): mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x6000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x221100, 0x240, 0x806, 0x40, 0x548c, 0x0, 0x0, 0x40, 0x7f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x0, 0x0, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x24c01, 0x0) write$FUSE_NOTIFY_STORE(r2, &(0x7f00000003c0)={0x28, 0x4, 0x0, {0x6, 0x3}}, 0x28) dup3(r2, r0, 0x0) 15m14.861228463s ago: executing program 5 (id=1312): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x30000, 0x0, 0x4040000}, 0x20040000) 15m14.034411088s ago: executing program 5 (id=1314): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000300"/14], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x200000) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) memfd_secret(0x0) (async) memfd_secret(0x0) pipe2$9p(&(0x7f0000000140), 0x80000) r4 = syz_io_uring_setup(0x19f2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x14, 0x0, 0x0, 0x0, 0x2b, @empty, @empty}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000180)=ANY=[@ANYRES64=r7], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r8, 0x0, r3}) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r8, 0x0, r3}) io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x103182, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x103182, 0x0) socket(0x1, 0x1, 0x0) (async) socket(0x1, 0x1, 0x0) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89a0, &(0x7f0000000200)={@rand_addr=0x64010100, @empty}) (async) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89a0, &(0x7f0000000200)={@rand_addr=0x64010100, @empty}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121403, 0x0) 15m9.471713814s ago: executing program 5 (id=1327): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x3, 0x10201}, 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, r3, r4, 0x3, 0x0, 0x6, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x412f, 0x3, 0x1000, 0x7f, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) userfaultfd(0x801) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) mount$nfs(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='ac,,']) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x20, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x7ff8, 0x8}, {0xd, 0xb}, {0xfff1, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x24008001) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0) socket$netlink(0x10, 0x3, 0x9) syz_io_uring_setup(0x5b5e, &(0x7f00000004c0)={0x0, 0x1f85, 0x2, 0x3, 0xfffffdfc}, 0x0, 0x0) 15m1.043193785s ago: executing program 5 (id=1348): r0 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r0, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r0, 0x1) poll(&(0x7f0000000000)=[{r0, 0x5248}], 0x1, 0x800) r1 = socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000080000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r6, @ANYBLOB="0100000000000000000017000000500006804c00040067636d286165732900000000000000000000000000000000000000000000000024000000"], 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r8, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r9, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x1c, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @local}}}}}}, 0x0) r10 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r11) kexec_load(0x0, 0x0, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) close(0x4) 14m44.855283587s ago: executing program 33 (id=1348): r0 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r0, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r0, 0x1) poll(&(0x7f0000000000)=[{r0, 0x5248}], 0x1, 0x800) r1 = socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000080000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r6, @ANYBLOB="0100000000000000000017000000500006804c00040067636d286165732900000000000000000000000000000000000000000000000024000000"], 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r8, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r9, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x1c, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @local}}}}}}, 0x0) r10 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r11) kexec_load(0x0, 0x0, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) close(0x4) 14m17.31078459s ago: executing program 6 (id=1476): ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000001c0)) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000180), 0x0}, 0x20) 14m17.082802221s ago: executing program 6 (id=1478): r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r1) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 14m12.759670458s ago: executing program 6 (id=1491): r0 = socket$kcm(0x2, 0xa, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4020, 0x0, 0x0, 0x0, 0xc9}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000b00)}], 0x1, 0x0, 0x0, 0x7}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000100)={0x100, 0x7}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000002000)=""/102400, 0x19000) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x8}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @multicast2, @multicast, @private=0x2}}}}, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"/268], 0x0, 0x1a}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r8, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x44) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r9 = io_uring_setup(0x4f41, &(0x7f0000000080)={0x0, 0xfffffffc, 0x800, 0xfffffffe, 0x800001b4}) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r9, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000003740)=""/4095, 0xfff}], 0x0, 0x1}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000040)={0x1d, r10}, 0x18) connect$can_j1939(r3, &(0x7f00000000c0)={0x1d, r10, 0x800, {0x2, 0xff, 0x3}}, 0x18) writev(r3, &(0x7f0000002ac0)=[{&(0x7f00000003c0)="96", 0x1}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fcdbdf251400000008000300", @ANYRES32=r11, @ANYBLOB="d5b2a5bd71b32177"], 0x24}, 0x1, 0x0, 0x0, 0x4008045}, 0x4004000) 14m11.334939486s ago: executing program 6 (id=1499): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8800) r2 = socket$tipc(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x800000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/../file0/file0\x00') bind$tipc(r2, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x2, 0x1}, 0x200000}}, 0x10) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@updpolicy={0xb8, 0x13, 0x800, 0x0, 0x1, {{@in6=@empty, @in=@private=0xa010102, 0x0, 0x400, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x3b, 0x0, 0xee01}, {}, {0x0, 0x0, 0xd3d}, 0x0, 0x6e6bb8}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="2921fff632"], 0x188}, 0x1, 0x0, 0x0, 0x20008090}, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0) 14m9.774618414s ago: executing program 6 (id=1507): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x84}}, 0x0) (fail_nth: 12) 14m8.946596203s ago: executing program 6 (id=1509): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) fchmodat(0xffffffffffffff9c, 0x0, 0xfffffe09) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x48) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0xe22, 0x3, @empty, 0xffffffff}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r2, 0x1, 0x31, &(0x7f0000001600), 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000005000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r4 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x10, 0x0, 0x0) bind$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r4, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 14m8.498868264s ago: executing program 34 (id=1509): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) fchmodat(0xffffffffffffff9c, 0x0, 0xfffffe09) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x48) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0xe22, 0x3, @empty, 0xffffffff}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r2, 0x1, 0x31, &(0x7f0000001600), 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000005000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r4 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x10, 0x0, 0x0) bind$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r4, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 5m47.572896576s ago: executing program 0 (id=3097): iopl(0x3) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xcc000006, 0x0, {[0x2]}}, 0x0, 0x47, &(0x7f0000000080)) poll(&(0x7f0000000040), 0x0, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x14, 0xa13ca8e5839881a1, 0xd}) r2 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000b00)=[@ioring_restriction_sqe_op], 0x1) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r2, 0xc, 0x0, 0x0) io_uring_enter(r2, 0x2e6f, 0x8555, 0x2, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x418, 0x110, 0x0, 0x0, 0x330, 0x330, 0x330, 0x4, &(0x7f0000000040), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, @empty, @remote, @local, 0x8, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, @mac=@random="5399036a9b63", @dev={0xac, 0x14, 0x14, 0x27}, @remote, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @mac=@local, @empty, @multicast2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 5m47.286156399s ago: executing program 0 (id=3099): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000340)={'gre0\x00', 0x0, 0x10, 0x40, 0xfffe, 0x8000, {{0x9, 0x4, 0x1, 0x7, 0x24, 0x65, 0x0, 0xfe, 0x4, 0x0, @remote, @multicast2, {[@ssrr={0x89, 0xf, 0xf, [@broadcast, @local, @dev={0xac, 0x14, 0x14, 0x36}]}]}}}}}) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x29, 0xce, 0x59, 0x7, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x10, 0x7, 0x9, 0x7}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000340)={'vxcan0\x00', 0x0}) r8 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000480)={0x28, 0x0, 0x2711, @host}, 0x10, 0x0) connect$vsock_stream(r8, &(0x7f00000004c0)={0x28, 0x0, 0x0, @hyper}, 0x10) r9 = syz_open_dev$vcsu(&(0x7f00000006c0), 0x4, 0xa2400) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000940)={'syztnl1\x00', &(0x7f0000000740)={'syztnl0\x00', r7, 0x20, 0x700, 0x80800, 0x1, {{0x65, 0x4, 0x1, 0x26, 0x194, 0x68, 0x0, 0x4, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@timestamp_addr={0x44, 0x3c, 0xbc, 0x1, 0xf, [{@local, 0x2}, {@empty, 0xfc46}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@local, 0x7}, {@empty, 0x3}, {@local, 0xb21}, {@empty, 0x4}]}, @cipso={0x86, 0x5b, 0xfffffffffffffffc, [{0x5, 0x11, "7703327f915bc3db01a07ae5247f7a"}, {0x0, 0xe, "60e491a8764fb927f1f52b70"}, {0x0, 0x7, "e60a2b2037"}, {0x0, 0x6, "eac0e155"}, {0x4, 0x9, "26cd9b334a1857"}, {0x1, 0xd, "5022329c9113e47def162c"}, {0x5, 0x6, "0aa0ca6a"}, {0x2, 0xd, "2036a74a6005828125d657"}]}, @end, @timestamp_prespec={0x44, 0x44, 0x1e, 0x3, 0x3, [{@broadcast, 0x2}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x9}, {@local, 0x6}, {@multicast2, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@empty, 0x7}, {@local, 0xffffffff}, {@loopback, 0x3}]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x6, 0x9, "ec7111990eea6f"}, {0x0, 0xa, "403f57746368190a"}, {0x2, 0x12, "a47a66a55ef6507df54d88726bd306e6"}]}, @timestamp_addr={0x44, 0x14, 0x8a, 0x1, 0x0, [{@multicast2, 0x2}, {@empty, 0x800}]}, @cipso={0x86, 0x40, 0x2, [{0x1, 0x5, "869db4"}, {0x2, 0x7, "1da364df75"}, {0x2, 0x5, "3ef365"}, {0x0, 0x2}, {0x7, 0x6, "7f3a4144"}, {0x1, 0x11, "ddd5750d3ca70cf3caabde6f59793f"}, {0x1, 0x10, "2b855636ec7b83c1d5d7577e9af7"}]}, @timestamp_addr={0x44, 0x24, 0xc8, 0x1, 0x3, [{@rand_addr=0x64010101, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xbf90}, {@empty, 0x8}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x10000}]}]}}}}}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r9, &(0x7f0000000ac0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a80)={&(0x7f0000000e00)=ANY=[@ANYBLOB="e8000000", @ANYRES16=r5, @ANYBLOB="08002dbd7000fddbdf250300000038000680060001000200000014000400fe8000000000000000000000000000aa060001000a000000050002000100000006000100020000002400068008000700", @ANYRES32=r6, @ANYBLOB="060001000a0000000800030000000000060005004e20000038000680060005004e23000008000700", @ANYRES32=r6, @ANYBLOB="050002000000000008000700", @ANYRES32=r7, @ANYBLOB="14000400fe8000000000000000000000000000aa30000680060005004e24000008000700", @ANYRES32=r10, @ANYBLOB="080006c9fc00000014000400fc00000000000000000000000000000108000400faffffff08000300030000003b449ce799c526634daeaf85307b0bc5d44e27b4d23973e43900820b4541f1e876014e52b3b3a3341e77db6dce558f90f32dab838c5b1d79ed570a37e3a6e8845ea128338520fb"], 0xe8}, 0x1, 0x0, 0x0, 0xb0}, 0x4000004) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000b40)={[0x8, 0x7, 0xb, 0x678, 0x3, 0x4, 0x3ff, 0x7, 0x5, 0xe5df, 0x8, 0x3, 0x2, 0x4, 0x6, 0x40], 0x2, 0x6000}) fcntl$getown(r9, 0x9) ioctl$SNDCTL_TMR_STOP(r9, 0x5403) read(r9, &(0x7f0000000c40)=""/147, 0x93) r11 = syz_open_dev$tty1(0xc, 0x4, 0x3) r12 = dup(r11) write$UHID_INPUT(r12, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)=r0}, 0x20) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fcffffff00000000fdffffff850000003600000018110000", @ANYRES32=r15, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94) r16 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpu.stat\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_tracing={0x1a, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000600000000000000030000008510000001800000180000000f00000000000000020000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x8000, 0x0, 0x0, 0x40e00, 0x0, '\x00', r1, 0x1a, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x3, 0x2, 0x5, 0x9}, 0x10, 0x12f41, r3, 0x2, &(0x7f0000000540)=[0x1, r9, r12, 0x1, r13, r14, r15, r16], &(0x7f0000000580)=[{0x4, 0x1, 0x3, 0xf}, {0x0, 0x2, 0x0, 0x7}], 0x10, 0x7}, 0x94) r17 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r17, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 5m47.054978031s ago: executing program 0 (id=3101): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000001340), r1) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001380)=ANY=[@ANYBLOB="2af80080", @ANYRES16=r2, @ANYBLOB="010029bd7000fddbdf25450000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x48000}, 0x20008010) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xfb24}]}, 0x28}, 0x1, 0x0, 0x0, 0x28006}, 0x10) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) tkill(r3, 0x3) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000080)={0x2, 0x2, 0x81}) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x0, 0x5, 0x800}, 0x5, 0x0, 0xffffff3d, 0x6, 0xb, 0x1, 0x10, 0x12, 0x2, 0x4, {0x0, 0xcecc, 0x7, 0x5d, 0xe9, 0x7}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x3b50, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xe, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x3b24, 0x2, [@TCA_U32_SEL={0x114, 0x5, {0xf, 0x5, 0x10, 0x1, 0x1, 0x644e, 0x7, 0x4, [{0xe, 0x7ff, 0x5f, 0x6}, {0x6, 0x101, 0x7d, 0xfffffffa}, {0x3, 0x4, 0x6e86, 0x4}, {0x6, 0x2230, 0x0, 0x8}, {0x7fff, 0x401, 0xffff, 0xff}, {0x1, 0x8, 0xff, 0x4}, {0x8, 0x0, 0x6, 0x8}, {0xf02, 0x7, 0x3, 0xffff}, {0x5, 0x81, 0x2, 0x2}, {0x9, 0x4, 0x216, 0xecb9}, {0x401, 0xdc6, 0xadb, 0x6}, {0x0, 0x2, 0x6, 0x5}, {0x6, 0xa, 0x1, 0x2}, {0x2, 0x79ff, 0x4, 0x4}, {0x101, 0x200, 0xfffffbff, 0x400}, {0x0, 0x0, 0x6, 0x3}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xb, 0xc}}, @TCA_U32_ACT={0x3a04, 0x7, [@m_csum={0xd4, 0xf, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x800, 0xb0a, 0xfffffffffffffff8, 0x2}, 0x5f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xc640, 0x6, 0x7, 0x0, 0xa0bd}, 0x43}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x80, 0x3, 0x20000000, 0x52fdeba5, 0x7}, 0x5b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xe, 0x10001, 0x20000000, 0x5, 0x1000}, 0x9}}]}, {0x35, 0x6, "79d8e14aaada14b5cbbc25d89b525d80a53b2ea6b2f7382a5ef0014c8dca7ed1e29befc13aedb3c1bb11acb5b3f610f58c"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_police={0x54c, 0x4, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x400}, @TCA_POLICE_RATE={0x404, 0x2, [0x24c9, 0x8, 0x4, 0x9, 0x38, 0x8, 0x81, 0xfffffff8, 0x8, 0x9, 0x7, 0x8, 0x401, 0x100, 0xe12, 0xffff5c77, 0x9, 0x5, 0xfffffff7, 0x7ff, 0x4, 0x10001, 0x0, 0x9, 0x8, 0x6c9, 0x84, 0x6, 0xe0, 0xd7d7, 0x7, 0x39, 0xfffffffb, 0x4, 0x200, 0x6, 0x9, 0x2, 0x1ff, 0x0, 0x9, 0xfae, 0xffff, 0x0, 0x6d3f, 0xfffffff7, 0x8, 0x9, 0x8, 0x5, 0xee, 0x100, 0xa1a3, 0x100, 0x9, 0xe, 0x9, 0x2, 0x100, 0x4, 0x0, 0x4, 0x2000, 0x8, 0xa, 0xdd4, 0xfffffffe, 0x1, 0x1, 0x101, 0x5784c4e3, 0x9, 0x0, 0x3, 0x2, 0x9, 0x2, 0x8, 0x2, 0x7, 0x3000000, 0x5, 0x6, 0x8, 0x708, 0xe, 0x3, 0x3, 0x8, 0x5, 0x1, 0x1, 0x10000000, 0x7, 0x2, 0x9, 0xfffffff5, 0x0, 0x800, 0x4, 0x2000000, 0x3, 0x7, 0xfffffff0, 0xfffff801, 0x9, 0x30, 0x352d, 0x1, 0x10001, 0x81, 0x9, 0x9, 0x1, 0x1, 0xfffffff8, 0x1, 0x6, 0x1, 0x8, 0x0, 0x8, 0x2, 0x9, 0x39, 0x4, 0x2, 0x5, 0x7, 0x1, 0x2, 0x101, 0xf0, 0x2, 0x9, 0x8e, 0x7, 0x4, 0x4db, 0x8, 0x800, 0x3, 0x3ff, 0x5, 0x3, 0x8001, 0x55c79c87, 0xd, 0x715f58c0, 0x9, 0x8, 0x8, 0xfffffffc, 0x1, 0x2, 0x3c80, 0x6, 0x2e4e, 0x3, 0x5, 0x9, 0x8001, 0x61, 0x1, 0x0, 0x6, 0x9, 0x6f, 0x40, 0x7, 0xc, 0xb7, 0x4c899d72, 0x4, 0x2, 0x7, 0x1ff, 0x8, 0x0, 0x8, 0x3, 0x1, 0x3, 0x9, 0x9, 0x7, 0x1, 0x400, 0xfffff7c8, 0xff, 0x4, 0xc, 0xc433, 0x9, 0xffffff01, 0x8, 0xc, 0x0, 0x6, 0x165, 0x7, 0xd, 0x400, 0x7, 0x8, 0x0, 0x7ff, 0x2, 0x0, 0x0, 0x8, 0x8, 0x3, 0x19, 0x5, 0x8, 0x0, 0xaa0b, 0x6, 0x8001, 0x6, 0x9, 0x7, 0xa055, 0x1, 0x2, 0x7, 0x0, 0x1000, 0x8001, 0x4, 0x5, 0x3, 0x3, 0x0, 0x51, 0xffc00000, 0xfffffff8, 0x9, 0xb14a, 0xd5f2, 0x1, 0x1, 0x1, 0x800, 0x20000000, 0x10001, 0x7, 0x6, 0x10001, 0x8, 0x4000000, 0x9, 0x5c3a9618, 0x401, 0x4]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffffe}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}]]}, {0xe0, 0x6, "8fc077e97f5e51daa22c6f848a66e4b698f0aa972006d8e2a471b7584cea4c87340f68120a6679c02eb61e3bc00ec5f306269e292cbe2e27d88c52e585696f6cfb982a25038a733fb1ae7684e2278d1653e34c17b3bcf0783970b2736a79422f7d0e56230b8ab4aa7b2165252937c62785217f8702927fe8fce24f21960bdfb8802e13274c1615781b24a4e6a6da6fec53e230ef80b23597cd95302f0c84f9d12b7efb04d45c45e0886ad016abd909c9389a2383baeee11eb3444630f1aeccc6de942adfd4a59d0cb9807773c7326da1f188059761e1219406325fac"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ctinfo={0xd8, 0xe, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}]}, {0xa2, 0x6, "f5b6fdddd27eeed06437fbb5093ed57544d405f6d772c5638b613d989ddf8b17baf231727051628ed19db7207d945358b0fb3892decd91997e3e91f8a3a333b5a150baabc916415301b0013565042749083e0d9d903e2882d557d96f358e77e82b260b7b395d41b0a841e1daa4267514c73e0c212bca889b3e80fbed84d6fc19e412235f423efcaa70c5b5c65d779656842bf94abee6d7bb83e53bdbb4fd"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_pedit={0x2fb4, 0xe, 0x0, 0x0, {{0xa}, {0x2f38, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe80, 0x2, {{{0x8, 0xff, 0x10000000, 0x1, 0x5}, 0x1, 0x10, [{0x7, 0x4, 0x7, 0x9, 0x5, 0x7}, {0xda9, 0x8, 0x1, 0x8, 0x0, 0xfffffff8}, {0xfffffff2, 0x9, 0x0, 0xff, 0xaa, 0xc3}, {0x0, 0x1, 0x54, 0x74be, 0xe, 0x10001}]}, [{0x0, 0x2, 0x4, 0x6, 0x2, 0x7}, {0x8, 0x1, 0x7, 0x9, 0x2, 0x2346}, {0x4, 0x0, 0x24, 0xfffffff7, 0x9, 0x5}, {0x6, 0x1, 0x8, 0x70f1, 0x2, 0x2221}, {0xffffffff, 0xd22e, 0x925, 0x0, 0x47, 0x100}, {0xff, 0x7fffffff, 0x5, 0x8000, 0x6, 0x2}, {0x273, 0x4, 0x2, 0x81, 0x0, 0x6eec0bb6}, {0x3, 0x4, 0xb364, 0x8, 0x40, 0x7}, {0x2, 0x5, 0x1, 0x5, 0x8000, 0x6}, {0x7d, 0x8, 0x3, 0x4, 0x7, 0x8}, {0x3, 0x8, 0x6, 0x4, 0x3, 0xe}, {0xc, 0x45, 0xffffff74, 0x10, 0xfffffff7, 0x9230}, {0x8, 0x7f, 0x1, 0x50, 0xff, 0x5}, {0x7e, 0x6, 0x5, 0x0, 0x4, 0xe}, {0x7fff, 0x0, 0x10, 0x1, 0x4, 0x8}, {0x5ec3, 0x2, 0xffff0000, 0x6146}, {0x0, 0xe0, 0x2, 0x200, 0x144c, 0xb}, {0x4, 0x1ff, 0x7ff, 0x8, 0xfffffffc, 0xfffffff7}, {0x1, 0xbf8b, 0x1000, 0x4, 0x8, 0x1ff}, {0x5, 0xffffffff, 0x2, 0x6, 0x8001, 0x7}, {0x0, 0x7, 0xc000000, 0x7ff, 0x3, 0x8}, {0x4, 0xd, 0x3, 0x0, 0xd955, 0x10000}, {0x7d, 0xb6b, 0x480, 0x8, 0xfffffff7, 0x7}, {0x6, 0x80000000, 0x5, 0xfffffff7, 0x80000000, 0x4}, {0x9, 0x3, 0x3, 0x4, 0x6, 0x6}, {0x4, 0xc, 0x7, 0x2, 0x0, 0x5}, {0x1, 0x8, 0xfffffffd, 0x5, 0xda6a, 0x2}, {0x10001, 0x401, 0x101, 0x40000000, 0x5, 0x8}, {0x100, 0x9, 0x6, 0x0, 0x4, 0x5}, {0x2, 0x3ff, 0x9, 0x5, 0x9, 0x5}, {0x2, 0x7f, 0x1, 0xfe, 0x7, 0x6}, {0x1c3a800, 0x4, 0x5, 0xef, 0x7, 0x8c65}, {0xc, 0x7, 0x0, 0x2, 0x1, 0x5}, {0x4, 0x0, 0x6, 0x8, 0x0, 0x3cd}, {0x9, 0x4, 0x7, 0x9, 0xc85, 0xfd5}, {0x8, 0x20, 0x2c, 0x5, 0x5, 0x6}, {0xe40b, 0x5d44, 0xfffffff9, 0x100, 0x6}, {0x11, 0x0, 0x98, 0x4, 0xfffffffa, 0x3}, {0x1, 0x2, 0x80, 0x21b, 0x1}, {0xfffffff7, 0x3, 0xf, 0x7, 0x4, 0x6}, {0xe9d7, 0x248, 0x6d6a, 0x9, 0x9, 0xfbf}, {0x5, 0x0, 0xdf9f, 0x0, 0x5, 0x8000}, {0x3ff, 0x74, 0x1, 0x80000001, 0xff, 0x80000000}, {0x8bb, 0x6, 0xfffffffb, 0x4, 0x3ff, 0x1ff}, {0x7f, 0x1, 0x0, 0x0, 0x4662, 0x5}, {0x400, 0xa, 0x2, 0x1, 0x9}, {0x6, 0x143, 0x9, 0x3, 0x2, 0x6}, {0x1, 0x0, 0x5, 0x80000001, 0x7, 0x8000}, {0x1, 0x7, 0x401, 0x7ff, 0x5, 0x8}, {0x8, 0x282a48b2, 0x248, 0x0, 0x9}, {0x3, 0xbd9f, 0x3, 0x80000001, 0x8, 0x6}, {0xe2, 0x4, 0x6, 0x200, 0x1, 0x8001}, {0xfffffffc, 0xe, 0x7fff, 0x5, 0x8, 0x1bb6}, {0xffffffff, 0x5, 0x2, 0x7ff, 0x8, 0xbf9f}, {0x4, 0x2, 0x0, 0x400, 0x6, 0x2}, {0x9b0, 0x2, 0x0, 0x9, 0x10, 0x8}, {0x5, 0xb3ec, 0x3ed0, 0xc5, 0xd39, 0x8}, {0x2, 0x3ff, 0x1cd, 0x8, 0x9, 0xffff7fff}, {0x2, 0x8001, 0x5881, 0x3, 0x6, 0x8}, {0x4, 0x101, 0x7, 0x8, 0xfffffffa, 0xeb}, {0x1, 0x7, 0xfffffffc, 0x10, 0xb, 0x5}, {0x12e, 0xa00000, 0x9db9, 0x8000, 0x9caf, 0x2}, {0x3, 0x0, 0x7, 0x9, 0x9, 0x1}, {0x1, 0x1, 0x6, 0x9, 0xafc, 0xc}, {0x5, 0x80, 0x8, 0x740, 0x6, 0x6}, {0x7, 0x15b6, 0x3, 0x1251, 0x2, 0x7}, {0xe, 0x7, 0x8, 0x0, 0x0, 0x5}, {0x3, 0x7, 0x7fffffff, 0xaaa, 0x3, 0x536eddd9}, {0x1, 0x5, 0x9, 0x8, 0xc0, 0xffff}, {0xfffffff9, 0x2, 0x4, 0x6, 0x2, 0x6}, {0x1, 0x7, 0xcfc, 0x9, 0x3, 0xae4}, {0xd0, 0x8, 0x3ff, 0x180000, 0x6fd, 0x4}, {0x4, 0x5, 0x5, 0x10, 0x1ff, 0x4}, {0x7, 0x1000, 0x4, 0x10001, 0x5, 0x2}, {0x0, 0x3, 0x10, 0xf7, 0x5ed, 0x200}, {0xff, 0x101, 0x7, 0x4a, 0x1, 0x2}, {0x0, 0xf, 0x8c, 0xa, 0xfe, 0x8}, {0x3, 0x5, 0xfffffff0, 0x3, 0x7fff, 0x9}, {0x5, 0x8, 0xd2, 0xfff, 0x8001, 0x7}, {0x7f, 0x5, 0x8, 0x3, 0xfffffffc}, {0x9, 0x97, 0x0, 0x82ea, 0x2, 0xd}, {0x6, 0x80, 0x0, 0xb7d, 0x6652, 0x6}, {0x1, 0x1, 0x4, 0x4, 0x2, 0xd186}, {0x8, 0x3, 0x5, 0x8, 0x7fffffff, 0x4}, {0x0, 0xa, 0x7ff, 0x0, 0x0, 0x7}, {0x4, 0x1, 0x2, 0x10000, 0x7, 0xfffffff0}, {0x180, 0x4, 0x6, 0x44, 0x3, 0x1004}, {0x5, 0x7ff, 0x8, 0x800, 0x17, 0xe}, {0x101, 0x8, 0x9, 0xb, 0x9, 0x3}, {0x5, 0x4, 0x40, 0x3, 0xfffffff8, 0x3}, {0x6, 0x3ff, 0x7f, 0x7, 0x3, 0x6}, {0x9, 0x4, 0xe2d9, 0x400, 0x3, 0x8001}, {0x1, 0x689, 0xfffff819, 0x2, 0x54, 0x3}, {0x7, 0x0, 0x9be, 0x5, 0x5, 0x10000}, {0x4, 0xafa, 0x44, 0x3, 0x23, 0x29b}, {0xff, 0x400, 0x24, 0x2, 0x10001, 0x3}, {0xfffffffd, 0x8, 0x4, 0x743, 0xbf, 0x1}, {0x88ca, 0xff, 0x200, 0xd, 0x7fffffff, 0xfffffff7}, {0x3, 0x5, 0x1, 0x1, 0x401, 0x43}, {0xfebe, 0x10001, 0x0, 0x3, 0x4, 0x3ff}, {0x2, 0x6, 0x100, 0x0, 0x3, 0x1}, {0xfffffffc, 0x92d0, 0x2, 0x8, 0x9, 0x4}, {0x8, 0xc, 0x7, 0xfffffff7, 0x200, 0x694}, {0x100, 0x2, 0xd, 0xe, 0x8, 0x9}, {0x360, 0x400, 0x5, 0x200, 0x7, 0x7}, {0x1, 0x0, 0x400, 0xcb, 0x2, 0x1000}, {0x8, 0xc18, 0x1, 0x81, 0x5, 0x4}, {0x8, 0x89, 0x1, 0x0, 0xb, 0x5}, {0xfffffffb, 0x9034, 0xfac, 0x6, 0x3, 0x1000}, {0x1, 0x209, 0x6, 0x0, 0xedf}, {0x374, 0x8, 0x6f, 0x7, 0x6, 0x1}, {0x80e, 0x18000000, 0x2, 0x3, 0x349, 0x10}, {0xae7, 0xa348, 0x75, 0x6, 0x7, 0x5}, {0x2e, 0x2, 0x6, 0xfff, 0x6, 0x40}, {0x0, 0x3, 0x5, 0x8, 0x1, 0x1ff}, {0x7fffffff, 0x0, 0x0, 0x1, 0x8d45, 0xfffffffa}, {0x3, 0x9, 0x8, 0x3, 0x7ff, 0x6}, {0xfff, 0xfffffffb, 0x200, 0x1, 0x1, 0xffffffff}, {0x9, 0x9, 0x2, 0x4, 0xc, 0x9}, {0x800, 0x7, 0x6, 0x1000, 0x0, 0x7}, {0x332, 0xfffffff8, 0x8, 0x0, 0x6c6}, {0xd, 0xfffffffa, 0x7, 0xa, 0x0, 0x1}, {0x7, 0x6, 0xa36, 0x1ff, 0x8d09, 0x1}, {0x6e, 0xdda, 0x6, 0x1, 0x6, 0x9}, {0x8, 0xfff, 0x0, 0x9, 0x2, 0x2}, {0x3, 0xb7, 0x8, 0x0, 0x9, 0x9}, {0x3ff, 0x0, 0x2, 0x4, 0x6}, {0xe3fa, 0x4, 0x80000000, 0x5, 0x4, 0x5}], [{0x4}, {}, {0x5}, {0x5}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x7}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0xb57be1583d90b56a}, {0x5}, {}, {0x5}, {0x1}, {0x4}, {0x3, 0x1}, {0x3, 0x71e03050f343c733}, {0x3}, {0x3}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3}, {0x5}, {0x5}, {0x0, 0x1}, {0x3}, {0x5}, {0x2}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {}, {0x6, 0x1}, {0x2}, {0x2, 0x1}, {0x1}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x5}, {0x1}, {0x7}, {0x1}, {0x1}, {0x0, 0x1}, {0x5}, {}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x3}, {0x5}, {0x5}, {0x0, 0x1}, {0x3}, {}, {0x2}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x5}, {0x4}, {}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x2}, {0x5, 0xb7813701e60b94e4}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x6}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x4}, {0x3}]}}, @TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_KEYS_EX={0xa8, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}]}, @TCA_PEDIT_KEYS_EX={0x114, 0x5, 0x0, 0x1, [{0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}, @TCA_PEDIT_PARMS={0xef8, 0x2, {{{0x7, 0x7, 0x7, 0x6, 0x3}, 0x0, 0x8, [{0x1, 0x2, 0x9, 0x9, 0x9, 0x7f}, {0x4, 0x10, 0x2, 0x23, 0xfe, 0x80000000}, {0xfffffffa, 0x4bead935, 0x5, 0x1, 0x9, 0x1}, {0x1ce, 0x1f7, 0x5, 0x4, 0x6357, 0x7}, {0x2, 0x9, 0x300, 0x6, 0x7, 0x2}, {0x40, 0xfffff000, 0x5, 0x36aa, 0x6, 0x9}, {0x2, 0x401, 0x2, 0x2, 0x7, 0x2}, {0x40, 0xffff2c61, 0xe65cf749, 0x0, 0x1, 0x4}, {0x7, 0x9, 0x2f49, 0x6, 0x4, 0x49af88a3}]}, [{0x1, 0x10, 0x471953a6, 0x4, 0x5}, {0x2, 0x96, 0xd9, 0x0, 0x3, 0x7}, {0x0, 0x2f9, 0x10, 0x1, 0x8, 0x2}, {0x7, 0x8, 0x1, 0x9, 0x3, 0xd}, {0x100, 0x382c000, 0x0, 0x7fffffff, 0x30a649c7, 0x9}, {0x0, 0x5, 0x3, 0x1, 0x5, 0x7}, {0x4, 0x3, 0x1, 0x6, 0x30}, {0x400, 0x4749, 0xb0e, 0x4, 0x8, 0xcc2}, {0x10000, 0xfffffc0c, 0x706, 0x4, 0x7, 0x9}, {0x1, 0x2, 0xa, 0x601d, 0x0, 0x5}, {0x401, 0xffffff00, 0x1, 0x8, 0x8}, {0x5, 0xfffffff6, 0x0, 0x0, 0x1, 0xffff}, {0x1, 0x7, 0x1, 0x1, 0x400, 0xffffffff}, {0x10000, 0x447, 0x7, 0x2b, 0x0, 0xffff}, {0x5, 0x5, 0x8, 0xfff, 0x2, 0x4}, {0x6, 0x7, 0xb, 0xfffffff9, 0x435, 0x3}, {0x7, 0xda5, 0x8, 0x6, 0x80, 0xdd}, {0x8, 0x9, 0x5, 0xed0, 0x800, 0x5}, {0x4, 0x69a, 0x2, 0x0, 0x3, 0xfffffffe}, {0x9, 0x3, 0xffff, 0xca, 0x4, 0x5}, {0xb6c, 0x2, 0xcf3, 0x6, 0x400, 0x8}, {0x5, 0x0, 0x1f, 0x7fffffff}, {0x10001, 0x9, 0x6944, 0x81e, 0xb, 0x7}, {0x5, 0x0, 0x7ff, 0x4, 0x8729, 0xa}, {0x0, 0x2, 0x7, 0x7, 0x1, 0x8}, {0x32ba, 0x2, 0x6, 0x0, 0x2, 0x8}, {0x80000001, 0x3, 0x9, 0x2, 0x9, 0xe}, {0x5, 0x21f, 0x1000, 0x81, 0x449, 0x8000}, {0x7ff, 0x930d, 0x0, 0x2, 0x3, 0xfffffff7}, {0x4, 0x9, 0x4, 0x7, 0xc, 0xfffff001}, {0xc0, 0x6, 0x200, 0x5, 0x3, 0x1}, {0x3, 0x123a, 0x9, 0xce, 0x9, 0xffff}, {0x5, 0x400, 0x56, 0x1ff, 0xf4}, {0x5, 0x2, 0x10001, 0x100, 0xfffffff7, 0x800}, {0x1, 0x0, 0x8, 0x2, 0x3, 0x40}, {0x9, 0x6, 0x8, 0xa, 0xfffffe01, 0x4}, {0x1c0000, 0x4, 0x8, 0x8000, 0x58c, 0xafe8}, {0xb, 0x4000000, 0xd, 0x4, 0x4, 0xfffffffa}, {0x7, 0xeb, 0x3, 0x7, 0x8, 0x6}, {0x92e, 0x4, 0x7, 0x6, 0x6, 0x7}, {0x4, 0x4, 0x8, 0x40, 0x2, 0x6}, {0x7ed8, 0x6, 0x5, 0x8, 0x2, 0xbafdb2f}, {0x3ff, 0x6, 0x9, 0xfffffff7, 0x10000, 0xfe}, {0x4, 0x0, 0x10001, 0xffff, 0xe, 0x7f}, {0xff, 0x226, 0x10000, 0x2, 0x35, 0xd592}, {0x7, 0x2, 0x3, 0x3, 0x2, 0x8001}, {0x5, 0x6, 0x6, 0x6, 0x3ff, 0x6372}, {0x3, 0x8, 0x4, 0x2, 0x401, 0x62ec}, {0xfe6f, 0x2, 0x3, 0x3, 0x3c}, {0x9, 0x1, 0x6, 0x1, 0xccb, 0x9}, {0x3ff, 0x1, 0x2, 0xd, 0x6, 0x3a}, {0xb, 0x1, 0x2, 0x0, 0x7ced2c3d, 0x8}, {0xfffffbff, 0x7cc, 0x8001, 0x400, 0x2, 0x3ff}, {0xa59, 0x1ff, 0x0, 0x10000, 0x4, 0x1}, {0x48c6, 0x4, 0x9, 0x1, 0xb, 0xac}, {0x1, 0x32, 0x8001, 0x40, 0x0, 0xfffffff9}, {0x3, 0x4, 0x6, 0x7, 0x2, 0xf}, {0x1ff, 0x80, 0x3ff, 0x6, 0x2, 0x5}, {0xffff, 0x400, 0x5935, 0x9db, 0x800, 0x9}, {0x80000001, 0x0, 0x9, 0x0, 0x7, 0x4}, {0xffff33e8, 0x586, 0x0, 0x3ff, 0x9, 0x1}, {0x3, 0x10000, 0x6, 0x80000001, 0x5, 0x2}, {0x4, 0xe559, 0x4, 0x2, 0x400, 0x97}, {0x3, 0x8, 0x4, 0x3, 0x80000001, 0x3}, {0x1, 0x9db8, 0x7, 0x6c, 0xa961, 0x6}, {0x8, 0x3, 0x0, 0x6, 0x3, 0x1}, {0x8, 0x40, 0x8, 0x0, 0x628, 0x1}, {0x200, 0x4, 0x1, 0x2, 0xf, 0x1}, {0x6, 0x0, 0xffffffff, 0xa44, 0x6, 0x2}, {0x4, 0x511, 0x4, 0x8, 0x2, 0x9}, {0x5, 0x7, 0x5, 0xa2, 0xfffffc1c, 0x6}, {0x1, 0x10, 0x1, 0x400000, 0x5, 0x7}, {0x7, 0x0, 0xfe9, 0x51, 0x77, 0x8}, {0x200, 0x4, 0x6, 0xb6b, 0xe, 0xffffff7f}, {0x44cb, 0x0, 0x3, 0xffffffff, 0xffff, 0x1}, {0x4734, 0x10000, 0x4, 0x8, 0x7, 0x7}, {0xffff, 0x80, 0x9, 0x7fff, 0x0, 0x4}, {0x4, 0x9f, 0xffff0000, 0x7, 0xc, 0x5}, {0x3, 0x7, 0xe3ea, 0xc111, 0x1, 0x4}, {0x5, 0xa, 0x7d000, 0xfa03, 0x7, 0x100}, {0x0, 0x8, 0x1ff, 0x1717738e, 0xfffffff9, 0xf}, {0xbe9, 0x0, 0x5, 0xffffffff, 0x7fff, 0xa}, {0x6, 0x7, 0x1, 0xe4c4, 0x2, 0x9}, {0xd, 0x7e, 0x2, 0x0, 0x2, 0x4}, {0x7fffffff, 0xf, 0x0, 0x6055, 0x135, 0x2}, {0x0, 0x1, 0x0, 0x2, 0x6ce1, 0x2}, {0x1, 0x2, 0x6, 0xdc85, 0x0, 0x80000001}, {0x5, 0x2ed2, 0x7, 0xffff, 0x6, 0x5}, {0x9, 0x7, 0x1, 0x8, 0x0, 0x9}, {0x6, 0x4, 0x80000000, 0x8, 0x4, 0xc87}, {0x0, 0x8001, 0x9cf7, 0x8, 0x2, 0x4}, {0x1, 0x100, 0x8c7, 0x7, 0x4bc, 0xc}, {0x8, 0xfffffff7, 0x8, 0x3}, {0x3, 0x80000000, 0x6, 0x0, 0x66e9, 0x8}, {0x5, 0x0, 0xe, 0x1, 0x101, 0x10}, {0x2, 0x7ff, 0x2, 0xfffffffc, 0x4, 0x800}, {0xf, 0xe, 0x3ff, 0x57d3, 0x8, 0x10000000}, {0x8, 0x2, 0x3fa, 0x5, 0x7, 0x8}, {0x1, 0x5, 0x6, 0x6, 0x2, 0xada1}, {0x8, 0x8000, 0x80000001, 0x5, 0xe, 0x9}, {0xfffffffd, 0x3, 0x9, 0x4, 0x0, 0x5}, {0x2, 0x7fff, 0xfffffffb, 0x5f, 0x3, 0x3}, {0x6, 0x6, 0x7f, 0x2fe6617e, 0x6, 0x80}, {0x8, 0x8, 0x9, 0x7, 0x6, 0x1}, {0x4, 0x3, 0x1, 0x5, 0x9, 0x4}, {0xeaf, 0xc, 0xb9b, 0x5, 0x4, 0x4}, {0x800000, 0x9, 0x100, 0xbb17, 0xfffff801, 0x7}, {0xff, 0xc, 0x7, 0x53, 0x0, 0x3}, {0x0, 0x7, 0x7, 0xf3d, 0x6075, 0xcf98}, {0x6, 0x7938, 0x2, 0x6, 0x2, 0x2}, {0x3, 0x8, 0x6, 0x800, 0x7, 0x8}, {0xa, 0x80, 0x8, 0x7, 0x2, 0x7fffffff}, {0x6, 0x6, 0x5, 0x7, 0x5, 0x50}, {0x2, 0xdc3a, 0x101, 0x9, 0x0, 0xb75}, {0xbe, 0x1, 0x2, 0x3, 0x4}, {0x7, 0x7, 0x2, 0x4, 0x4, 0xbb5}, {0x4, 0x9, 0x1000, 0x5, 0x7, 0x3}, {0xd8, 0xb548, 0x7f, 0x88, 0x5, 0x8}, {0x11e3, 0x5, 0x81, 0x7, 0x42, 0x5}, {0x7, 0x6, 0x5, 0x2, 0x1, 0x5}, {0x3, 0x6718, 0x3, 0x8fec, 0x7, 0x2}, {0x6, 0x2, 0x38, 0xffff, 0xd464, 0xe000000}, {0x7fff, 0x0, 0xf, 0x3, 0x80000001, 0xffffff33}, {0x2, 0x0, 0x4f35d9a1, 0xfffff25d, 0x5, 0xb}, {0x7, 0xfffffffd, 0x7, 0x100, 0x3, 0x2}, {0x1d2, 0xffffffff, 0xffffffff, 0xf472, 0x2, 0xb4}, {0x10000, 0xc48b, 0x8, 0x4, 0x3, 0x401}, {0xf9ae, 0x8000, 0x665a, 0x3, 0xffff96f3, 0x2}], [{0x3, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {}, {}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x2}, {0x3}, {0x3, 0x56e61edee75ca51a}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x5, 0x1}, {0x5}, {0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {}, {0x3}, {0x3}, {0x1}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x1}, {0x5}, {0x2, 0xca0b2883718f0636}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x1}, {0x1}, {0x1}, {0x2}, {0x3}, {0x1}, {0x3}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x4}, {0x4}]}}, @TCA_PEDIT_PARMS_EX={0xe68, 0x4, {{{0xba9, 0x4, 0xffffffffffffffff, 0x6, 0x6}, 0x0, 0x1, [{0x3, 0x2, 0x6, 0x5, 0xc54d, 0x5}, {0xf4, 0x0, 0x9, 0xbe, 0x6, 0x10001}, {0x4, 0x4, 0x4, 0x3, 0x1, 0x3}]}, [{0x6, 0x101, 0x8, 0x7, 0xfffff6cf}, {0x100, 0x7fffffff, 0x3e, 0x6a76, 0x7e, 0x40e2}, {0x4, 0xc, 0x7, 0x22c8489e, 0x1, 0x80000001}, {0x0, 0x10001, 0x0, 0x6, 0xe75, 0x80000000}, {0x9, 0x5, 0x9, 0x9, 0x5, 0x3}, {0x1, 0xe, 0x6, 0x80, 0xffffff00, 0x80000001}, {0x80, 0x4, 0x800, 0x8, 0x2, 0x4}, {0x657, 0x400, 0x0, 0x2, 0x6, 0x7fff}, {0x7, 0x10001, 0x9fa, 0x4, 0x80000001, 0x1}, {0x1, 0x2, 0x1, 0x1ee2, 0x7, 0x2}, {0x4, 0xa, 0xfff, 0x0, 0x3}, {0x0, 0x2, 0x0, 0x200, 0x4, 0xfff}, {0x4, 0x80000000, 0x8, 0x1, 0x81, 0x5}, {0x4, 0xfffffffb, 0xfffffffe, 0x2, 0x76, 0xbb3b}, {0x7, 0x5, 0xfffffff8, 0x2, 0xd49, 0xfff}, {0x69c, 0x4, 0x46, 0x80000000, 0x0, 0x1}, {0x4, 0x7, 0x1, 0xa7, 0x3, 0x8694}, {0xde2, 0x8, 0x5e, 0x7, 0x2, 0x4}, {0x1, 0x5, 0x8, 0xfffffff8, 0x8001, 0x4}, {0x3, 0x2, 0xa, 0x9, 0xe60, 0x40}, {0x6, 0x80000000, 0x9, 0xfffffffd, 0x2, 0x4d}, {0x5504, 0x80000001, 0x1000, 0x6, 0x8, 0x7d9e03a2}, {0x5, 0x9, 0x5, 0x0, 0x1d61, 0xfffffff9}, {0x80, 0xfff, 0x8, 0x78fd, 0x1, 0xffffffff}, {0x7fffffff, 0x7, 0x2, 0xe, 0x4, 0x5}, {0x7ff, 0x8326, 0x4, 0xfffffe01, 0x2, 0x300}, {0x4, 0x101, 0x7ff, 0x0, 0x4, 0x5d5a}, {0x1000, 0x2, 0xe, 0xffff, 0x8, 0x8}, {0x401, 0x200, 0x3, 0x1, 0x2, 0xfffffffc}, {0x5c, 0x5, 0x8, 0x9, 0x5}, {0x6, 0x4, 0xffff, 0x8, 0x7f, 0x4}, {0x48, 0x6, 0x2, 0x0, 0xfffffff7, 0x5}, {0x1, 0x4e, 0x4, 0x9, 0x40, 0x6}, {0xd3de, 0x40, 0x243, 0x401, 0x3ff, 0x8}, {0x5, 0x1, 0x3, 0x4, 0xea1c, 0xcd0}, {0x40, 0x3372, 0x68e, 0x5, 0x1, 0x80}, {0x0, 0x7f, 0x5, 0x4, 0x9, 0x2}, {0x54, 0x9, 0x2, 0xfff, 0x8bb, 0x81}, {0x2, 0x8, 0x800, 0x5d, 0x3ff, 0x1}, {0x8, 0x1, 0x7, 0x3, 0x0, 0x1}, {0x90e, 0x5, 0x9, 0x68d594fa, 0x1ff, 0xffff}, {0x7, 0xc71, 0x1000, 0x9, 0x2}, {0xeed, 0x9a3e, 0x530, 0x3, 0x0, 0xfffffffb}, {0xc, 0x8, 0x100, 0x3, 0x9, 0x5}, {0xd13, 0xfffffffa, 0x2, 0x7, 0x6, 0x7fffffff}, {0x4, 0x1, 0x2, 0x7, 0x40, 0x6}, {0x7, 0xfff, 0x4, 0x1, 0xfffffff8, 0x7}, {0x3, 0xfffffff8, 0x13, 0x9, 0x80000001, 0x7}, {0x24, 0x83, 0x80000000, 0x40, 0x8, 0xb40}, {0x4, 0xf41, 0x10, 0x8, 0x7fff, 0x293d3a7}, {0x1ff, 0xfffffffb, 0x9, 0x7, 0x80, 0x1}, {0x6, 0x7, 0x101, 0xffff8000, 0xfe, 0xffff}, {0xec, 0x6, 0x8, 0x3, 0x1, 0x5}, {0x7, 0xc53a, 0x2, 0x4, 0x7, 0xffffffff}, {0x0, 0x70a8, 0x8, 0x3, 0x35, 0x43}, {0x6, 0xfffff452, 0xa70, 0xa0e, 0x103a, 0x400}, {0x1, 0x5, 0x5, 0x6, 0xcc0, 0xa2c}, {0x5, 0xfffffff7, 0xd, 0x700000, 0x10001, 0x4}, {0x80000000, 0x4, 0x9, 0x7fffffef, 0x72, 0x2}, {0x20e, 0xd1a4, 0x3, 0x81}, {0x200, 0x1000, 0x7, 0x38, 0xfffffffa, 0x5}, {0x9, 0x8, 0xebb, 0xbf, 0x3, 0x7}, {0xf, 0x1ff, 0x88de, 0x4, 0x5, 0x4a3}, {0x148, 0x6, 0x40, 0x4, 0xcc}, {0xfffffff2, 0x4, 0x1000, 0x4, 0x5, 0x4}, {0x20a9, 0x0, 0x2, 0x4740, 0xbdf, 0x3}, {0x0, 0x8, 0x8, 0x0, 0x5822, 0x4}, {0x7, 0x6, 0x885, 0x8, 0x80000001, 0x8}, {0x7fffffff, 0x55b, 0x529, 0xfff, 0x1, 0x72d}, {0x7, 0x6, 0x6, 0x9, 0x4, 0x2}, {0xeea, 0x170747b7, 0x8001, 0x99, 0xfffffff4, 0xb}, {0x1, 0xac2d, 0x6, 0x0, 0x1, 0xa1}, {0x5, 0x2, 0x4e, 0x10001, 0x624d, 0x3}, {0x102200, 0x2, 0x9, 0x56, 0x1, 0x4}, {0x5, 0x9, 0x3, 0xfff, 0x4, 0x9}, {0x1, 0x7ff, 0x5, 0x5, 0x2, 0x1b74}, {0x5, 0x2, 0xffffffff, 0x6, 0x0, 0x2}, {0x6, 0xb, 0x5, 0x5, 0x7, 0x10000}, {0x1000, 0x7ff, 0xffff, 0x6, 0xefb1}, {0x7, 0x7f00000, 0xf8, 0xffff0000, 0x2, 0x8}, {0x6, 0x5, 0x7b21f6ec, 0x8, 0x7, 0x3ff}, {0x0, 0x7ff, 0x2, 0x988, 0x68, 0x6}, {0x26dd, 0x29, 0x4, 0x98000000, 0x7, 0x8}, {0x7fff, 0x80000000, 0xfffff704, 0x4, 0x10001, 0x7fff}, {0x7ff, 0xd, 0x6, 0x2, 0x7, 0x5}, {0x4, 0x5, 0x6, 0x5, 0x2, 0x6}, {0x8, 0x1, 0x5, 0x1, 0xffffffff, 0xdeb1}, {0xa2b9, 0x3, 0x363, 0x4, 0x7, 0x7}, {0xfffffff8, 0x7, 0x5, 0x5, 0x3, 0x7}, {0x2, 0x773, 0x9, 0xe, 0x8, 0x5}, {0xb93, 0x6, 0x6, 0xffffff01, 0x0, 0xa}, {0x0, 0x0, 0x1, 0xd, 0x80000001, 0xfff}, {0x9, 0x5, 0xa5bd, 0xbaeba23a, 0x81, 0x9}, {0x7f800, 0xff000000, 0x7a, 0xf9, 0x401}, {0x4, 0x1, 0xa, 0xa0, 0x1, 0xaf}, {0x0, 0x6, 0x5, 0x4fd2, 0x6, 0x5}, {0x5, 0x9, 0x4, 0xfffffff4, 0x7, 0x4000}, {0xd, 0x0, 0xf8c, 0x0, 0xfff, 0x24}, {0xd, 0x135, 0x5, 0x75, 0xa, 0x577}, {0x7, 0x10, 0x2, 0x401, 0xfff, 0xf}, {0x1, 0xfffffc01, 0x7, 0x5240ddf5, 0x1, 0x20000}, {0x0, 0x0, 0x9, 0xfff, 0x0, 0xffff}, {0x4, 0x1, 0x4, 0x2940, 0x100, 0xdb}, {0xf550, 0x80000000, 0x5, 0x8001, 0x80, 0x1}, {0x7, 0x7c, 0x8, 0x23, 0x4, 0xff}, {0x2, 0xa, 0x7fff, 0xf, 0xffff, 0x80000000}, {0x9, 0x7ff, 0x8, 0x7, 0x9, 0x17b7}, {0xffff7fff, 0x1, 0x1, 0x2, 0x800, 0x9}, {0xd2b, 0x3, 0x6, 0x1, 0x7fff, 0x68}, {0xa, 0x5, 0x7fff, 0xb67, 0x101, 0xffffffc0}, {0xf64, 0x9, 0x8, 0x7fff, 0x0, 0x1}, {0x0, 0x1, 0x5, 0x7, 0x0, 0xd}, {0x7, 0x1, 0x80, 0x7fffffff, 0x4, 0xdd5}, {0x1, 0x1, 0x2, 0x1, 0x8, 0x4974}, {0xfffffff8, 0x5, 0x9, 0x6, 0x3, 0x7}, {0x6, 0xa4e, 0x4, 0x5, 0x3ff, 0xd0}, {0x40, 0xf, 0x6, 0x312f, 0x5, 0x7}, {0x3, 0xcb, 0x7, 0x5, 0x10001, 0x2}, {0x5, 0x4, 0x2, 0x6b33, 0x80000001, 0x1}, {0xfffffff7, 0x9, 0x0, 0x5, 0x99f8, 0x929}, {0x2, 0x5, 0x7, 0xa, 0x4, 0x8001}, {0x7e3, 0xc0000000, 0x7, 0x0, 0x5, 0x9}, {0x9, 0x8001, 0x7, 0xb, 0x2, 0x1}, {0x5, 0x2, 0x9, 0x2c, 0x3, 0x3}, {0xd3b9, 0x6da, 0xc, 0x2, 0x5, 0x78a1}, {0xfff, 0xab2f, 0x200, 0x3, 0x9, 0x1400}, {0xd7b3, 0x7, 0x80000001, 0x8, 0x2e76, 0x5}, {0x5, 0x3fc, 0x9, 0x8, 0x9, 0x6}], [{0x2, 0x1}, {0x4}, {0x2}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x5}, {0x1}, {0x2}, {0x5}, {0x2, 0x3}, {0x4}, {0x4}, {}, {0x1}, {0x2}, {0x4}, {0x2}, {0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x4, 0x1}, {0x2}, {0x1}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {0x2}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x7, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x4}, {0x2, 0x2}, {0x3}, {0x4, 0x1}, {0x3}, {0x4}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {}, {}, {0x3}, {0x4}, {}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x2}, {0x4}, {0x2}, {0x2}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0xf739c6c9ca269a2a}, {0x2}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x1}, {0x5}, {0x5, 0x1}, {}, {0x0, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x168, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0xa5199c657a1addc}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x83c14036b96c823f}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}]}]}, {0x54, 0x6, "042ecf98e8982bead2bffda16bd6610cc68fb05739a6078351670f721063ffa072725210a68f618ac76c8ae7474e380fb2fd71a9296b7df04b1a6b75365ea8a65fc0474919415c81cef5f4dec7b5d7e9"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_tunnel_key={0x90, 0x2, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x401}]}, {0x55, 0x6, "3c97a293481b59cb016f94be1ec57afd81322a6ac0c6d3abf4d78152e8966667b0672a19589393d064788ff3a6ed6d26968c8e0263ce6c8222144c56ed32839063d12643506cccc382d145f3928995096e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_xt={0x2c4, 0x1b, 0x0, 0x0, {{0x7}, {0x1f0, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TARG={0x3c, 0x6, {0xb, 'filter\x00', 0x1, 0xc11, "ef9a021f9eee19bf2b90111d16d84d1686b4"}}, @TCA_IPT_INDEX={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TARG={0x50, 0x6, {0x7, 'mangle\x00', 0x1, 0xffff, "35407668b92ea37664cec8355a70328969f93f49c56e9685683ba7e241836d6e8b98580d8d58"}}, @TCA_IPT_TARG={0xe1, 0x6, {0x4, 'mangle\x00', 0x3, 0x0, "dc0084d842975603ce854b9650bef3852104fc285774604c194d9362c7103a19fccd13f32eb6699144ef7a54abc08b33c37e81e07262a8ff4b3fbb7c57019f026aea3abe17431c542329f2509bb9a850959f4b99dfacc31822c5f22fce35deeec3a5aca64ee737301198bca211f965e0350837cc8410c16bc98037a6d9af04317292283b8f1192b56969d456ddcf2a26d49359b8111d7bb3794675b6e09b8500eb836f02be6775b77c9440edafc1e541718634eb36faba"}}]}, {0xae, 0x6, "d8ebc101109e7cd1d91a1e51b24f5c1028f60ace21ed7eba5e45f274d962570ff45519e3a0cfa79032105900910f87d7e2ea099dd61f4a224574a5a8b7d90bc94525b304b0a2c5540f7a156a2d4aca8755cb9663ebcf4769b732f2edcc65c3afb779462e1a16a04289a6ac9419679438a5f8eebb47446b4d0c248c0bd320ad2f1ff2e143fbddf494d2690c068f274bd821545280a125c7aa476e7cbd8521ff3137443b8cb9c07638511b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x3b50}}, 0x4080) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) accept4(r0, 0x0, 0x0, 0x80800) 5m46.585389895s ago: executing program 0 (id=3102): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x500, 0x40) r1 = open_tree(r0, &(0x7f0000000300)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xf6ffffff) 5m46.402430512s ago: executing program 0 (id=3103): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x5, &(0x7f0000000d80)=ANY=[@ANYRES16=0x0], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000002c0)="93076eea99", 0x5}], 0x1) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000080)={{&(0x7f0000000000)=""/35, 0x23}, &(0x7f0000000040), 0x10}, 0x20) 5m46.137856378s ago: executing program 0 (id=3107): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f0000003880)=[{{&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000001100)=[{&(0x7f0000000300)=""/190, 0xbe}, {&(0x7f0000003940)=""/108, 0x6c}, {&(0x7f00000008c0)=""/140, 0x8c}, {&(0x7f0000000a40)=""/202, 0xca}, {&(0x7f00000003c0)=""/64, 0x40}, {&(0x7f0000000980)=""/57, 0x39}, {&(0x7f00000039c0)=""/84, 0x54}, {&(0x7f0000000fc0)=""/224, 0xe0}, {&(0x7f00000010c0)}], 0x9, &(0x7f00000011c0)=""/126, 0x7e}, 0x1}, {{&(0x7f0000001240)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000001340)=[{&(0x7f00000012c0)=""/118, 0x76}], 0x1, &(0x7f0000000840)=""/37, 0x25}, 0x3}, {{&(0x7f00000013c0)=@can, 0x80, &(0x7f0000003780)=[{&(0x7f0000001440)=""/241, 0xf1}, {&(0x7f0000001540)=""/149, 0x95}, {&(0x7f0000001600)=""/171, 0xab}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/176, 0xb0}, {&(0x7f0000002780)=""/4096, 0x1000}], 0x6, &(0x7f0000003800)=""/77, 0x4d}, 0x1}], 0x3, 0x40000022, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000"], 0x0, 0x3e}, 0x28) ioctl$KVM_SET_VAPIC_ADDR(r8, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x2, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0x2, 0xfff1}, {0x0, 0xf}}}, 0x24}}, 0x0) ioctl$sock_TIOCOUTQ(r5, 0x5411, &(0x7f0000000200)) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x0, 0x7, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0xffff}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r10, 0x4, 0x0, 0x83, 0xfffffffa, 0xff00, @ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x0, 0x0, 0x300}}) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000000b40)) 5m44.940105648s ago: executing program 35 (id=3107): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f0000003880)=[{{&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000001100)=[{&(0x7f0000000300)=""/190, 0xbe}, {&(0x7f0000003940)=""/108, 0x6c}, {&(0x7f00000008c0)=""/140, 0x8c}, {&(0x7f0000000a40)=""/202, 0xca}, {&(0x7f00000003c0)=""/64, 0x40}, {&(0x7f0000000980)=""/57, 0x39}, {&(0x7f00000039c0)=""/84, 0x54}, {&(0x7f0000000fc0)=""/224, 0xe0}, {&(0x7f00000010c0)}], 0x9, &(0x7f00000011c0)=""/126, 0x7e}, 0x1}, {{&(0x7f0000001240)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000001340)=[{&(0x7f00000012c0)=""/118, 0x76}], 0x1, &(0x7f0000000840)=""/37, 0x25}, 0x3}, {{&(0x7f00000013c0)=@can, 0x80, &(0x7f0000003780)=[{&(0x7f0000001440)=""/241, 0xf1}, {&(0x7f0000001540)=""/149, 0x95}, {&(0x7f0000001600)=""/171, 0xab}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/176, 0xb0}, {&(0x7f0000002780)=""/4096, 0x1000}], 0x6, &(0x7f0000003800)=""/77, 0x4d}, 0x1}], 0x3, 0x40000022, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000"], 0x0, 0x3e}, 0x28) ioctl$KVM_SET_VAPIC_ADDR(r8, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x2, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0x2, 0xfff1}, {0x0, 0xf}}}, 0x24}}, 0x0) ioctl$sock_TIOCOUTQ(r5, 0x5411, &(0x7f0000000200)) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x0, 0x7, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0xffff}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r10, 0x4, 0x0, 0x83, 0xfffffffa, 0xff00, @ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x0, 0x0, 0x300}}) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000000b40)) 2m59.959969122s ago: executing program 8 (id=3723): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) read$watch_queue(r0, &(0x7f0000000140)=""/4096, 0x1000) socket(0x10, 0x803, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x10000000) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000000)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x1, 0x1, &(0x7f0000000380)=""/240, &(0x7f0000000900)=""/103, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000980)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000380)={0x0, 0xcdf, 0xf}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1200e0a0}, 0x890) 2m59.515246022s ago: executing program 8 (id=3726): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)=0x3, 0x4) r1 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x77359400}}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000012c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x9, &(0x7f0000001380)={0x0, 0x3938700}, 0x1, 0x20}) io_uring_enter(r1, 0x4866, 0x0, 0xb, 0x0, 0x0) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}) mount$binder(0x0, 0x0, 0x0, 0xaaca4, &(0x7f0000000200)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./bus\x00', 0x80, 0x141) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x50, &(0x7f0000000540)=ANY=[@ANYBLOB="2700004e16344e46a9157c176b4fcd05a9bae2c24eca328c8037b73b4969f5d08f23e9b0e7c9196bb91f86000000004e0000004e0900004e00d38a99"]) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(0xffffffffffffffff, 0x40084149, 0x0) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000000000000730000408000000081"]) 2m55.728293549s ago: executing program 8 (id=3735): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x48) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x48) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) (async) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, 0x0) (async) 2m55.350374104s ago: executing program 8 (id=3737): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000500)="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", 0xf000}, {0x0, 0x55}], 0x2) unshare(0x20000400) r0 = syz_io_uring_setup(0x10f, &(0x7f0000000300)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x5c, 0x0, 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0xffffffffffffffff, 0x3000}) io_uring_enter(r0, 0x47f5, 0x2000000, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x8600, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xecf86c37d53049cc) close(0xffffffffffffffff) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r6 = syz_open_dev$video4linux(&(0x7f0000001380), 0x101, 0x2501) ioctl$VIDIOC_SUBDEV_S_FMT(r6, 0xc0405626, &(0x7f0000000000)={0x1, 0x0, {0x9, 0x2000006, 0x100c, 0x7, 0x8, 0x1, 0x0, 0x5}}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000005200010030b97000ffdbdf251c"], 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x20044884) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1129, 0x1020}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x40040) 2m54.210928816s ago: executing program 8 (id=3740): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x8, &(0x7f0000000080), &(0x7f0000000300)=""/8, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000003c0)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4083, 0x0) sendfile(r5, r4, 0x0, 0x6) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000500)={0x200, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=[0xd], 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r7, 0x40045569, 0x7) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r7, 0x5501) ioctl$UI_DEV_DESTROY(r7, 0x5502) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff7ffc}, {0x81, 0x0, 0x8, 0x8000}]}) 2m52.194216919s ago: executing program 8 (id=3745): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000), 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)=0x0) sched_setscheduler(r4, 0x5, &(0x7f0000002200)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2, 0x20}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x4a}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x200000, '\x00', 0x0, r6, 0x0, 0x1}, 0x50) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="44000280400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003"], 0x60}, 0x1, 0x0, 0x0, 0x4044}, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x18, 0x0) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r9, r8, &(0x7f00000000c0)=0x58, 0xa) write$UHID_INPUT2(r8, &(0x7f0000000140)={0xc, {0x26, "3c8e8608892c5647f75cd05a3c4e2c9dbeb2699e411f40252375d63c72ff7a14dcca3622c070"}}, 0x2c) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) 2m35.885996632s ago: executing program 36 (id=3745): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000), 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)=0x0) sched_setscheduler(r4, 0x5, &(0x7f0000002200)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2, 0x20}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x4a}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x200000, '\x00', 0x0, r6, 0x0, 0x1}, 0x50) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="44000280400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003"], 0x60}, 0x1, 0x0, 0x0, 0x4044}, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x18, 0x0) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r9, r8, &(0x7f00000000c0)=0x58, 0xa) write$UHID_INPUT2(r8, &(0x7f0000000140)={0xc, {0x26, "3c8e8608892c5647f75cd05a3c4e2c9dbeb2699e411f40252375d63c72ff7a14dcca3622c070"}}, 0x2c) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) 51.975462961s ago: executing program 2 (id=4118): socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB='\x00\b\t\x00\x00\x00\x00\x00', @ANYRESDEC, @ANYRESOCT=0x0], 0x20) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = semget$private(0x0, 0x6, 0x0) semtimedop(r2, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r2, &(0x7f0000001240)=[{0x2, 0x0, 0x2000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='io\x00') preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/230, 0xe6}], 0x1, 0x401, 0x9) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYBLOB="b16950000000000000004a"], 0x14}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x800006, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r6) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x18) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000400)=0xa4, 0x4) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000140)={'team_slave_0\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) 49.953961164s ago: executing program 2 (id=4125): ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000040)={0x8, 0x0, 0x27f}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x8000002000000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xb}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r5 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f000000db40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001340)="27cbb1504134af7a94b21155b9d18c7fe6", 0x11}], 0x1}}], 0x1, 0x40088c0) read$alg(r5, &(0x7f0000002300)=""/4128, 0x1020) sendmmsg$alg(r5, &(0x7f0000007e40)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}], 0x1, 0x20040894) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 49.445195103s ago: executing program 2 (id=4127): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) syz_emit_ethernet(0x86, &(0x7f00000001c0)={@broadcast, @random="67eaa8fce250", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x78, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x4, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x4, "e542d79ab3bd527bdb95e0d565deb47e29f7a7908bcb485e31542c20459fdcfd", ' \x00', {"9849bac2a2f48798402f5299d92e4fc5", "62b2cd0b5ef2f8ad0c8e17f0bd66642d"}}}}}}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000340)=ANY=[@ANYBLOB="0180c2000002bbbbbbbbbbbb080045000078000000020011907800000000000000000000000700649078020000000000000002000000db64c2aabe67442fa1645cf6a026d78ae369ec9b6d955a9b8a61208773f231f6aa207dcced41c42bf28d800463eb7cee4d8086f824dfaa342fd4c638310ca5c3ca288ef9836f712a6149330600000089"], 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_io_uring_setup(0x563c, &(0x7f0000000500)={0x0, 0x7a91, 0x800, 0x0, 0x229, 0x0, r4}, &(0x7f0000000180), &(0x7f0000000300)) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/address_bits', 0x2000, 0x0) sendfile(r6, r7, 0x0, 0x400) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000040)="93d90400000300", 0x7}], 0x1) close(r3) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x20080c4, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r1, 0x0, 0x0}, 0x10) 48.772376637s ago: executing program 2 (id=4131): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x8, &(0x7f0000000080), &(0x7f0000000300)=""/8, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000003c0)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x4083, 0x0) sendfile(r5, r4, 0x0, 0x6) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000500)={0x200, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=[0xd], 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r7, 0x40045569, 0x7) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r7, 0x5501) ioctl$UI_DEV_DESTROY(r7, 0x5502) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff7ffc}, {0x81, 0x0, 0x8, 0x8000}]}) 47.421867612s ago: executing program 2 (id=4132): socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x109002, 0x0) socket(0x1d, 0x2, 0x6) r1 = socket(0x1, 0x1, 0x0) ioctl$SIOCGETSGCNT(r1, 0x89a0, &(0x7f0000000200)={@dev={0xac, 0x14, 0x14, 0x25}, @rand_addr=0x64010125}) r2 = syz_open_procfs(0x0, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, r2, 0x0) madvise(&(0x7f0000ac4000/0x2000)=nil, 0x2000, 0x18) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_io_uring_setup(0x1f65, &(0x7f0000000240)={0x0, 0x6faa, 0x100, 0x4, 0x2}, &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) clock_adjtime(0x0, &(0x7f0000000000)={0xfffd, 0x4, 0xb0000000000, 0x3, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x400000, 0x6, 0x3b9ac9ff, 0x0, 0x81, 0xffffffffffffffff, 0x2000000000000000, 0x5a6c101, 0x3, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x100000000000, 0x7, 0x1ff, 0x4, 0x8}) syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x4000, &(0x7f00000001c0), 0x1, 0x40}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0x0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {r6, r7}}, './file0\x00'}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) 46.494456958s ago: executing program 2 (id=4137): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af24, &(0x7f00000010c0)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000006b40)={0x2020}, 0x206e) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="61ff010000f7"], 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000000010000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0001e8040300"/28], 0x48) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000002740)={0x8, 0x1000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) kexec_load(0x1000d0ffc2, 0x0, 0x0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x2b00, 0x12) r5 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r8, 0x0, 0x2, 0x0) splice(r7, 0x0, r6, 0x0, 0x1c, 0xe) ioctl$sock_qrtr_TIOCINQ(r8, 0x541b, 0x0) 30.267254934s ago: executing program 37 (id=4137): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af24, &(0x7f00000010c0)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000006b40)={0x2020}, 0x206e) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="61ff010000f7"], 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000000010000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0001e8040300"/28], 0x48) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000002740)={0x8, 0x1000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) kexec_load(0x1000d0ffc2, 0x0, 0x0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x2b00, 0x12) r5 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r8, 0x0, 0x2, 0x0) splice(r7, 0x0, r6, 0x0, 0x1c, 0xe) ioctl$sock_qrtr_TIOCINQ(r8, 0x541b, 0x0) 9.982070461s ago: executing program 3 (id=4274): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/ip6_mr_cache\x00') read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x411}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000240)={'\x00', 0x52d35ce30131f272}) bind(r0, &(0x7f00000001c0)=@pptp={0x18, 0x2, {0x3, @multicast1}}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x100) r3 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000180)='user\x00', &(0x7f00000002c0)='\x00\x00E\x01\x00\x00\f\x01\x00\x00\x00\x00\x00\xc1~\x99l\xb7\xd6\xfc\xebw1hn\x1a\xc5\xef\xec,\xa1\xa0\x12\x1c\x7fn\a\\\xec\xd8\x94oh\x1d\xec\xf5jb\xe5\xb2\xa2e\xfd\x9c\xc4\xd22\x9c\xe97#(/\xb1\xe6\x03\xe1\xaa\x96\x92\x8b4}\xc1L\x1b\x9b\xe6n\x97\xc7\x06\xb2Y\xadQ\xa4c\x1b&\x0e?\xc0\x90\xaf\xb29\xf6>\xe1\xe8}D\f\xc1u\xab]$\x1b\x1bt\xda\x9eA\xd3\x1b\x12A\x82\xd5\xa8@\x1eIw\xb2y2F\xe8\xc7\x03e&\x98\"9\t\xe0\x81Pj\xee&\xae{P\xe8\xceL\xe1\xd1V\xc7\xeaF\xd54\x80\xb6%\xaf\xbbK\x85\x95\xf2\x1bG\xf1\xdaq:\xae\xe22\\~j~\xfe\x83\xbb>\xb0\x9b.\xa4\x95\x0eY\xb8j\xe1M\xf5\xa5\x87`\x04\xab\xf1\xc7[\xda{\r\x95\xa4\xea^\xfc\xa7\x8b\x85\xd1ld\xacK\x8aqd\x1d\xaa\x99\xeb\t|@\xd5p\x1d>+\x0e\xec\xe2\xcd\xdc\x8f\x01\xf7\xabH=z\xa5x\x1b\x9f\x95\xd1\x88k\x85L#\x99^p\x18\x98\xec6\xf69y\x052', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='user\x00', &(0x7f00000000c0)='ocfs2\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x164) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 9.900967405s ago: executing program 7 (id=4275): r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x1, 0x100000) ioctl$SNDRV_PCM_IOCTL_XRUN(r0, 0x4148, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r3 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r4}, 0x18) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c501224713450e438cf9bc7fe6ab04613c63202f8131102b6c890af96ca4e35e7dedbf3a4b1bbcdfa23ca2cf97f361a5dbf43e9b48c8510379b93075252735e5718ad66ff055e2e89580a0840b23441b5371d2c86e00dadedbd460543419ee7d3b999dfc4245a0e944e7b64de3ed5e837b36ecbbd78e5e2f3f817ce52b4bd69cb303f02d9c7303f8b55192a6b228081621c5ec2c40", @ANYRES16=r5, @ANYBLOB="270e28bd70000000000004070200"], 0x14}, 0x1, 0x40030000000000}, 0x4000) keyctl$read(0xb, r3, &(0x7f0000000080)=""/11, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000080)=@ethtool_regs={0x12}}) r10 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r10, 0x4048aecb, &(0x7f00000034c0)={{0x1, 0x0, 0x80, {0x2, 0xeeee0000, 0x2}}, "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", "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"}) 9.678798126s ago: executing program 3 (id=4276): r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, 0x0, 0x25, 0xc, @void}, 0x3) r1 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000008c0)={'#! ', './file1/../file0', [{0x20, 'cgroup.st\xc9\x87(\x16\x83!at\x00M\xdc\xac\xa4,h\x84\x9e \xa3\xc9&!\xe6\x9fc\x89\xa0\x9d\x01d\xd3gR\x8dQ!\xb4O\x13m\x90\xa3\x7f\xde\xec\\\xf8\x7f\xd7%p\xb7i\xc1\xf8\xbd&\x8c/\x83\xd9\xbb\xb0\xb8\x0f\x82.>X\xa5d|\x13\xce\fy\xa8\x04\x9e\xfe\x94;l\\\x19>d\xe9\xcf\x9e4`\xa6\xdf\xb33\x90\xca\x93\xc4-\x05H\x00\x00\x00'}, {0x20, '1\x01\x9e\x00\x00\xf6\xb2\xa1\xec\x13\vi\x06\x05cZe\x87\xf6\xbaj\x85+\xbc\xf8T\xc7a\xf0\xe3?\x01\x83\f\x0e\xac\xec8\x8e\x8b\xce\xe6\xc1\xda\xf1\xb6\xfe\xb5D\xf1\xea^\\}]s}\xe4zB|\xd9>.TF\xd3g\x90\xafa\x13\xeb\xbbN\xb7i\v\x82\x02\xfb\x95\f\xe8J\xef\xee\xaf\xea\xf3]<\xd9\xa5\x02\n\xaa\xe2\xcdZ\xda\x85\xdd*\x13\x0e&.\x1a\xaf\"\x11\x97zS\xbc\xaan~/U\xe0>\xfc\x17S\x9b\xf5\xf7\xdb\xbeH\xc2\v\xa3r\a\xdaC\xc9\xee{\xa3\xd2IL\xe4\")\xd9s9Y&UiO\xcd\xf4\xd3>\xd2\x98\x8d\x1d~\xd3}\x90\xb3i=\xfd-\x7f\xb9Jdq(\xd8\xfe\x9cu\x12\xe9\x15y \x91\xc2\xcfN\xc0\x9c\xbb8x#\xc8L\xbcd\x00'/217}, {0x20, ' '}, {0x20, '\x1b_G\x86~)\x18\x95\x96\xb9\xff\xa4W\xf4]\xea\x88\xeb;\n:\x19\xb0\xb5Fn\xae\xbc\x047/\x1d\xe6,b%\xfd_W\x1f\xb8\x0ex\xe5\xdd0\xd2\x11\xc4\xfc\x13\xa7\x1du\xa4\xc8_7Rv\x1e\x02\xca\x1am\xe6uW\xc50\x80F$\x9cXV\xe6c\xb6\xc0\xf3\x17\x93\xe1a_'}, {0x20, '\x7f}'}, {0x20, '#:[(@'}, {0x20, 'D\xd4 ,xq\x92z\x12\xf3q`\xf2\x9f\x04\xca\xdf\x1bpL\xea\xd3\x7f6t8\xc9\xb8\xdc\x1b?s\xaf\a\xf3\x97\xac\xa33\x10\xea\xac\xeb\xd3Uyog\xc6\xcc\xea\xec0\xdfh\xd7\x00\x04E7\x1f/R\xc4\xb1g\xadt\xd3\xb3\xc7J\x15\xe7\r\xee\x99\xd7+\x9a\xafi\t\x19\xc3\x10\xb2Y\xba\xc5O\xca\'\xf4/\xde\v\x04Pzi\x8c(\x84K\x1f\xf9s\xc6\x9d\x92\xca\xac\xbd\xc6\x82\xc8W\x06\xcdC\x9c\xd4=r\a\x90\x87Y\xe15\x11hW\x8d!\xbb\xeb\xfee\xe5+\xc2\x01\x85\xe5\x8b=\xf2y`\x1c\x98\xec$\xdd\xef\x06>\xedd\xa74\x87u\x14J\x96\x1b\xcce\x10\xc1\xac\xbfag/\xf9FM\xa7dN\v\xc7x\x02\x92_\xb8'}]}, 0x284) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000480)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x8, 0x10000000000, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3e06e00d96072081000000000000002000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a03c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6, 0x200000000]}}) bpf$LINK_DETACH(0x22, &(0x7f00000001c0)=r2, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast1}, {0x4e24, 0x17c1, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0xfc}}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x5, 0x6, 0x7, 0x20000, r0, 0x3, '\x00', 0x0, r0, 0x0, 0x3, 0x3, 0xa}, 0x50) r3 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000003c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6000, @fd=r6, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x26c3, 0xdfffeffb, 0x4c, 0x0, 0x1d) r7 = socket$inet6(0xa, 0x3, 0x86) setsockopt$sock_int(r7, 0x1, 0x28, &(0x7f0000000040)=0x8004, 0x4) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) ioctl$RTC_ALM_SET(r8, 0x40247007, &(0x7f00000002c0)={0x14, 0x10, 0x3, 0xb, 0x4, 0x2, 0x3, 0x84, 0x1}) syz_emit_ethernet(0x83, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff020000000000000000000000000001"], 0x0) r9 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000800)={&(0x7f0000ff9000/0x4000)=nil}) r10 = dup(r9) write$P9_RMKNOD(r10, &(0x7f00000000c0)={0x14, 0x13, 0x1, {0x1, 0x2, 0x3}}, 0xfffffd26) write$P9_RMKNOD(r10, &(0x7f0000000040)={0x14, 0x13, 0x2, {0x0, 0x4, 0x6}}, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r0, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x21, &(0x7f0000000380)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x76, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, r10, 0x4, '\x00', r11, r6, 0x1, 0x2, 0x1}, 0x50) 9.434032575s ago: executing program 1 (id=4277): r0 = syz_usb_connect(0x6, 0xd0a, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x87, 0x9a, 0xf5, 0x0, 0x41e, 0x403b, 0x6392, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcf8, 0x4, 0xd, 0xf8, 0xa0, 0xb, [{{0x9, 0x4, 0x84, 0x81, 0x10, 0xa4, 0x1e, 0x2c, 0x5, [@uac_as={[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x5, 0x1ff, 0x7, "87a7a08bcf"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x6, 0x1, 0x6, 0x7, "", "9b6a"}]}], [{{0x9, 0x5, 0x7, 0xc, 0x0, 0x0, 0x17, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5a, 0xaa46}]}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0xd, 0x5, 0x78, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x3}]}}, {{0x9, 0x5, 0x2, 0x10, 0x200, 0x9, 0x5, 0x9, [@generic={0x1f, 0x4, "88b4aa233b39f01d7fc2dc4e1cf830d6f49af75ee9771813a37bfd863a"}]}}, {{0x9, 0x5, 0x4, 0x8, 0x3df, 0x1, 0x7, 0xfd, [@generic={0x56, 0x21, "e05da778d1d7bef76e41a06486dabfbaebb12a5b305246409bfa461d89636a8b76de2e50b920c8ccec4c792eed153b1075d8f7f8fa2ccefe64396b110ebecadb87d91d8c9bedbf0ecdc697f0ec718b8335c893bf"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x7, 0x4, 0x0, [@generic={0x2d, 0xfb8476f41ef3c66f, "cf5e4ef42d4a660a8ad79d97fcfa7f56527fcbbb2684d9f70bf9c167d70971f994589f52243cbfcf202e1b"}]}}, {{0x9, 0x5, 0x80, 0x3, 0x20, 0x18, 0x7, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xbf, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x8}]}}, {{0x9, 0x5, 0x4, 0xc, 0x200, 0x2, 0x6, 0x7f, [@generic={0xd2, 0x2, "b9fe5b861ab1d40c2905be201679dc5a977196ea12aa9aea471c200029f4853d1c0b50a0393ad9a7ab6e2df76d5e80dd78d81d38b7d258d10366ccb0a8ed1aa1fa52311da54f8291dcc360149e8bea664211099b1a18576a4cce1e3c9f1b24ba3b012d9fcfc22917a33320e6d09cf59d5f8dc20758a6948d7250b038e9910dd4e7b9692fef294f6569909ff238e41b892e91c8171956f1b17dae907dd66e87c8f610454590893bd2bf1ff272686b2564e872affcb9fa607dffaa14ab8ad17fe7b5a05de20c12564b1c6c8a8ebe79762a"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x42, 0x1, 0x8, [@generic={0x19, 0x23, "faf4bbb1ceb945050126aecfe2f1aef8fb7c8098387c80"}, @generic={0x9c, 0x24, "2aea90ef9435da51f993e8b67825a386d8421f0f2fb1b80d3ab22df284889e45765cd6685846aa26a1e7bdd580950a8e91503f4506313682acd58cab7d8c4ef895c22cd70a7d9e02f675dc204059553be1245699474d29b457343014f9269afb91287bdd9f31f48e66d02439ab4ea34566a25a39e7a1255a1d9009af4d285df95f7239af855db3cd72ef4c8a197d515d06a8f9995ad6a00ed67b"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0xbd, 0x7f, 0x83, [@generic={0xa7, 0x5, "70592c59afed94700f7c1b2871208729dedb7768cbf30b0ceb6a13104989d7d586c66a94bba9a77c142a4b678f3e5ccefd178e377cb00b5db83968d9dc6d0715af0306f107d04029b8cea03b74508eaff13cc7a28555f03944dabcb9e59314a40ecd46020f01cd7f6b20f6307dacd5a859faff6211bb2fd0f5c3791195d6351e4d80639eeff3bc65d3e732973d2204bec8eaf720f77b5c8de7720b5304f0262841779a7141"}]}}, {{0x9, 0x5, 0xa, 0x8, 0x10, 0x0, 0x8, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x81}]}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x9, 0xc, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x40}]}}, {{0x9, 0x5, 0x5, 0x4, 0x40, 0xf, 0x1e, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x40}]}}, {{0x9, 0x5, 0x1, 0x8, 0x20, 0xfc, 0x3b, 0x8, [@generic={0x20, 0x3, "32619400596e688caca045f45a4a1200d47879d1f19a91c07975e97779b3"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x4, 0xef, 0xe7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x322}]}}, {{0x9, 0x5, 0xf, 0x8, 0x8, 0x8, 0x0, 0x9, [@generic={0xa3, 0x6, "b07b6f78cd1eecbe6400ae49f8f926773f41716767815a0251e5e5ffc402a2f5718d901185217154f6e1c7bb54612aef504dfadf3803cabf6dff31b0b9c34d1b55e592840ccb9e3345f85dadcfa608c344c59372b45ca17a7436130a9e7071e0c9763e280b5fe0fc1e7a9b9ce35681106c92d89ddc297dae9440b200ee09def261d258a806113c0c6925617398970b5904a4d3e9d55a3fe366ad44383d8ea034df"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x8, 0xf2, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x8, 0x1}]}}]}}, {{0x9, 0x4, 0x6d, 0x99, 0x5, 0xff, 0xff, 0xff, 0x20, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "5326cf9a"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0xbe9, 0x1, 0x401, 0x8f}, {0x6, 0x24, 0x1a, 0x95f1, 0x1}, [@mbim_extended={0x8, 0x24, 0x1c, 0xa3b, 0x5}]}], [{{0x9, 0x5, 0x4, 0x0, 0x20, 0x4b, 0x80, 0x3, [@generic={0xd6, 0xf, "1a0499ee177c92d10d2af073e8935c2b7559046178b49c69bc3ff316847e7011ed57a1b81638c912d20a28c2f0e17327e0352aadde80955a3f781c75b5c9bbfe9f283080cad378b6678e52c82c52c73941f7adbb36b6a30a4c410076738aaa5a89b691ec26bc4669433daac126bb399baa91c3dbadff2ce46731d40270477a4a2b7e1767fc12051804f8cec1e444b910f875a817e4363c5dfa17f6b880179398fafb24d76e808ff3cc6fdcd86337af35e36e4c857ac7bfddd200ecc9b15a1a8f6e929ddbd97fbed9ae2110c022fd82302577878c"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x5, 0x4, 0x6, [@generic={0x102, 0x21, "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"}]}}, {{0x9, 0x5, 0x80, 0xb, 0x400, 0x7, 0x0, 0x90, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7a, 0x6}]}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0xb, 0x0, 0x5, [@generic={0x3b, 0x6, "9c905d9900aad56994e394d5dfa9f333e7229144061b96133ffd411e017554ad13a8c961518035c9c9eb474e951e441f96e141af0561af2953"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x3ff, 0xfa, 0x8, 0x8, [@generic={0x3b, 0x10, "883a334a83d42e96da379c8662fd9f16e9c411f1f470f8eefcba0122bb90ea7fd98bdce83d4c3a32de5d9421fb59cb84094782f06430185a6c"}]}}]}}, {{0x9, 0x4, 0xe3, 0xd7, 0xa, 0xb4, 0x74, 0x2c, 0x3, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "11abfe11f82f"}, {0x5, 0x24, 0x0, 0x71a}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x671, 0xf, 0x9d}, {0x6, 0x24, 0x1a, 0x3ac, 0x2}, [@obex={0x5, 0x24, 0x15, 0x9}, @dmm={0x7, 0x24, 0x14, 0x9, 0x81}, @dmm={0x7, 0x24, 0x14, 0xe, 0x3}]}], [{{0x9, 0x5, 0x1, 0x10, 0x3ff, 0xa, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0x5}, @generic={0x46, 0x21, "dbb8638cce60536f72406ecb67cbcfbdbeae9dd8ba88afea1e1e83ec2ef46560bd189bb35a99deb7038efe36f756be8d5d53edb3d41a0961464466d2811cb46a5b6af16b"}]}}, {{0x9, 0x5, 0x8, 0x8, 0x10, 0x4e, 0xb, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x8b}]}}, {{0x9, 0x5, 0x80, 0x10, 0x8, 0xc, 0x8, 0x9, [@generic={0x7, 0x4, "6954f9fa6e"}, @generic={0x55, 0x22, "bfbfd251d9c0153f0b4ecc6d8aaf9c49780e5a99b8f09956c91dc71cd25a8cc1388401d64f24e6262bf4f3571be511ccf89d57c153bddf7a733c122f9a23bc74379660d58dd5369a81ef550d9d49ed0fc71586"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x80, 0xfb, 0x3, [@generic={0xa1, 0x5, "8718d0c3c94409b04b82d5ecdee4d399a23d333975bf03b101015c9e7b5be27c0e2fbdc86b4988a08a874ce97c3b8508456fac3644551c2a20962784da0fbf3f97bc15e0cd3de912a714e43f2231ffe439ef84c50f0c91361de2f696f74e8e80a20618c1671f39c814a5d7b24dd42f35fa6fcaa5fe95e9c989add0abec6d68b7e7988f60a83772aa9a9b6f56a7061b52642f649641222df73f68a2868da92f"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x428, 0xe9, 0xaf, 0xfd, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf0, 0x5}]}}, {{0x9, 0x5, 0xe, 0x3, 0x10, 0xb6, 0x1, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x40, 0x0, 0x4}]}}, {{0x9, 0x5, 0x80, 0x4, 0x8, 0xff, 0x8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x36, 0x1ff}]}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0xc, 0x5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x2}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x39, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0xfff8}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x42, 0xd0a3}]}}, {{0x9, 0x5, 0x4, 0x12, 0x3f7, 0x8, 0x3, 0x4, [@generic={0x10, 0xa, "c92976a920a3db305b6e6ab31dd7"}]}}]}}, {{0x9, 0x4, 0xdd, 0xe, 0x9, 0xfb, 0xfb, 0x9f, 0x2, [@uac_as={[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x2, 0x7, 0x40, "126888"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x2, 0x4, 0xb, 0xf, '\x00'}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0xc7, 0x8, 0x5, "a568e2a1"}]}], [{{0x9, 0x5, 0x4, 0x1, 0x8, 0x7, 0x8, 0x0, [@generic={0xb4, 0x22, "1924cbfbe92634bc818edfcddeb792baa91e76b9684aa117cbfde0d056846237734c200c536a489646ebddff2ee40caf5572cc0d59dea936a6246e51b06e86fddfff5276b48763127d71be65d383e8b515319aa1c4267173e526440fe0e99d4d38401886b77bfbafcbd8d418a18f6d9a1fffdec54f84e2f5a5a34a652f531651283c93f76ca26fd11d1cbbb0f330b5cb9a83b7a46e73bedd324b33a2054ccc1ab7ccbb9cfc5cb06224bf9310eb988cb55db5"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0x0, 0x4, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7f, 0xbea}]}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x5, 0x6, 0xe8, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x40}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x80, 0x9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0xf64}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xf2, 0x2}]}}, {{0x9, 0x5, 0x3, 0x8, 0x0, 0x0, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x40, 0xd6c}]}}, {{0x9, 0x5, 0x6, 0x2, 0x8, 0x1, 0x77, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0xc91}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x0, 0x4, 0x5, [@generic={0xc0, 0x30, "6beb93596b64514f5523f041d88d4ff1053a303f32ef6ff77d686b4b94971552fe9e3249abae1b9700aa7fc39b56508cdf5281252fb7c3d71f2cee15ef77e5c2de1f23dd4db08931feca277273a54acc230d5a3da42ab4fd1f53b0852b5319c53428ba0880da330a221b5cb04122094e60d67bf692a6d64a4eb365a552e37cd410cf88d546129f93a1b0681596dfb3d9665c76144d0cafafd7b12ad85747d299e882408e6a3eade57be9c7f8d8f0109e820ce394b8f5e26a063775c1215b"}]}}, {{0x9, 0x5, 0xb, 0x4, 0x3ff, 0x1, 0x9, 0xff, [@generic={0x6c, 0x11, "94a8b2bcfb222422224588752f92a113dd2b90b4c9f79153273a848918926005777e2f3095cfd8bc9233ed23d94943260abe3a6562418efb6e9e66c4066911ed5a40ac83b4c91a055637cca4f05458052f8176c952771318b29ea1e0911ffd7249b5037426962118d48a"}, @generic={0x2f, 0x21, "5aecfb62a0d29b31b89ef3cba088884ef2a4ae7430b9447b42e2287ec3f5a0385ee39dd366e40ba61b575adf51"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0xf, 0x9c, 0xb, [@generic={0xd8, 0x5, "42cb86e55cb80e14581cda9c216253f9d329dd47036d1a917cb474909a0fb881b22028fe953e12b07470cfa4527859e006a11d6c3c47416ca722bbc529208da566459730e482ee4f802eab14d22f9e4c148a51321fa304da3bf445ef7be782901b6345e7ae1c4341d71be87c99d7d0fcf1a9611f6fa9fdd9ff1e46ae7eb51dd041788a6f2f3e5fa770d61be44136488f436af8d0d6ec2f0380c2957cc315c4c84eb3eaac2e4ac363210bc9c26f29471d728a02259584fa103765e5f99794c0910c6b692c6346e1271bc18624281ad31746ba9d1fdf85"}]}}]}}]}}]}}, &(0x7f0000001080)={0xa, &(0x7f0000000f00)={0xa, 0x6, 0x300, 0x36, 0x2, 0x9, 0xff, 0x23}, 0x33, &(0x7f0000000f40)={0x5, 0xf, 0x33, 0x3, [@ssp_cap={0x24, 0x10, 0xa, 0x6, 0x6, 0x1, 0xff00, 0x7, [0x0, 0x0, 0xff0000, 0x0, 0x0, 0xc0c0]}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x1, 0x5}]}, 0x3, [{0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0x438}}, {0x19, &(0x7f0000000fc0)=@string={0x19, 0x3, "14cf2d60ed04540fe6c86f4182c85947c5442174382148"}}, {0x65, &(0x7f0000001000)=ANY=[@ANYBLOB="65034320c76b2145670eac8703c8fbadae5efccf28a57ffef9b58b052952de37d0abdb4eebe141429a36bf60a2a02ef5ae1738fd1f2da0dc602c6bfc257f2822ff4d1e988d35429d1db463a87ccca8309eedd0ca6ec0e3"]}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb250400000008000400020000000c0005"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x800000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000000)='./file0/../file0\x00') bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8}, [@ldst={0x3, 0x3, 0x3, 0x1c10a1, 0x0, 0x98}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x139, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf7}, 0x48) syz_usb_ep_read(0xffffffffffffffff, 0x5, 0x1000, &(0x7f00000011c0)=""/4096) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xc1, &(0x7f00000010c0)=@generic={0x5, 0x2, 0xb9, "6b0ac1d5", "c7fdabcc9f8369ef33731dc1d26e293501770c29e71032f06a2a445325358af5fe637b73bcdddc0f73912b48fb3100dafbebeb0675f560b3a1f488f956767d0b09568a428b8f35791a10e0b0e33db0bd07f52ef3de7c7a98e0885de17128fa8b0ef84df699518ed6c0018ebecf4d471fbe1f13d1f8669557d9503ccec39effb5c87fb56dc2b9dba85fe9e2b05dbc7a8eefc175566763ae6dd166dc98f32e7653492959c3302b6d75b9094f2cd52e09048ed37cbf26c2d07c36"}) sched_setscheduler(0x0, 0x3, &(0x7f0000000040)=0x7) 9.254421084s ago: executing program 3 (id=4279): pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x4e1, &(0x7f0000000380)={0x0, 0x3284, 0x10100}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x100a}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x4, 0x0, 0xee688c89bc2c4228) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES64=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r8, 0x0, 0x80, 0x4) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000380)=ANY=[], 0x45) r9 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r9, 0x89b0, &(0x7f0000000340)={'macvtap0\x00', &(0x7f00000000c0)=@ethtool_channels={0x1, 0x0, 0x300, 0x0, 0x80000000, 0xfffffffc, 0x0, 0x0, 0x8}}) r10 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r10, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e23, @private=0xa010101}, 0x3, 0x4, 0x1, 0x3}}, 0x26) syz_usb_connect(0x1, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac00090400000107000009090585cf"], 0x0) 7.56564875s ago: executing program 7 (id=4282): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) unshare(0x20000400) r1 = syz_io_uring_setup(0x10f, &(0x7f0000000300)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x5c, 0x0, 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0xffffffffffffffff, 0x3000}) io_uring_enter(r1, 0x47f5, 0x2000000, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x8600, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xecf86c37d53049cc) close(0xffffffffffffffff) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r7 = syz_open_dev$video4linux(&(0x7f0000001380), 0x101, 0x2501) ioctl$VIDIOC_SUBDEV_S_FMT(r7, 0xc0405626, &(0x7f0000000000)={0x1, 0x0, {0x9, 0x2000006, 0x100c, 0x7, 0x8, 0x1, 0x0, 0x5}}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000005200010030b97000ffdbdf251c"], 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x20044884) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1129, 0x1020}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x40040) 6.566326855s ago: executing program 7 (id=4286): futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r2], 0x50}, 0x1, 0xba01}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x80000000, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000180)={0x1, @win={{0x2, 0x6, 0xfffffbff, 0x3}, 0x0, 0x200, &(0x7f0000000100)={{0x9441, 0x0, 0x8, 0x800}, &(0x7f0000000080)={{0x8, 0x1, 0x5, 0x2}}}, 0x2, &(0x7f0000000140)="90980e89411fed75551d3e0e6bf02fc48b82df90d60adfb691c36bff89c251802717b6d0b037ea7834d7ccec34fdd72d6074b010b9fc790e0b0f", 0xac}}) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 6.358472785s ago: executing program 7 (id=4288): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) syz_open_dev$vim2m(0x0, 0x200000001000, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000800)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x0, 0x3b, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='qdisc_create\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x1000000000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r3, r4, 0x4, 0x0, @void}, 0x10) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r6 = dup2(r5, 0xffffffffffffffff) getsockname$packet(r6, 0x0, &(0x7f0000002380)) mknodat$loop(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x40, 0x1) 6.190688819s ago: executing program 1 (id=4289): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x820040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000000000000000000080000008500000017000000850000dd772e8c580000000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x14, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000000401"], 0x1c}, 0x1, 0x0, 0x0, 0x20048805}, 0x0) (async) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) (async) r9 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r10 = fcntl$dupfd(r8, 0x406, r8) ioctl$USBDEVFS_SUBMITURB(r10, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) (async) readv(r9, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/155, 0x79c5}, {0x0, 0x30}], 0x2) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r6}, 0x18) (async, rerun: 32) getitimer(0x0, 0x0) (rerun: 32) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000240)=[@in6={0xa, 0x4e23, 0xff, @mcast2, 0x17d}, @in6={0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xe}, @in6={0xa, 0x4e23, 0x6, @mcast2, 0x3296}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e23, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xf9}], 0x90) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@textreal={0x8, &(0x7f0000000480)="0f00d50f01cfba4100ed66b9800000c00f326635000800000f300f01c9d8ff0f300f019b4b9dc5bf1e6a36f0f6542d", 0x2f}], 0x1, 0x28, 0x0, 0x0) ioctl$EXT4_IOC_GETFSUUID(r3, 0x8008662c, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000000000202020c31af8ff41fffb00bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000065000000a3b53a92b51f9883ce7f66f1997ee720127526d8b0aca89ac1b875c32b8d16733e23ac80d731546c0bc5c47d2daa4ffc010edbe781ce31b27689faab2755ce73c716400f816cafdc3c7b12eeaef24b05aeadca15d5848d99d5d415f1cf5c9282f9053a4c019d3057d10fc5df1c8a98eaba6d806ec714b67e5c9694fb23c193f152a00b7fe2c1832027cad9ca2b3ab6d026c9def91b3a4938a2e5b75b29"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.858557265s ago: executing program 1 (id=4291): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x18) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00') openat2(r2, &(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000380)={0x100, 0x0, 0x8}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x32, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaabb13d9887cfd2488a83d00810005000806000108000604a2e860aeaaaaaabbe000000222ec0e759d39d6021cff"], 0x0) recvmmsg(r5, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sync_file_range(r5, 0x1, 0x2, 0x2) 5.771230783s ago: executing program 9 (id=4292): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = msgget$private(0x0, 0x193) msgrcv(r3, 0x0, 0x0, 0x3, 0x3000) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) modify_ldt$write2(0x11, &(0x7f0000000040)={0x0, 0x20000000, 0xffffffffffffffff}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) modify_ldt$read(0x0, &(0x7f0000001840)=""/4105, 0x1009) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r5, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r9, &(0x7f0000000000), 0x560c89bb) r10 = creat(&(0x7f0000000200)='./file0\x00', 0x20) splice(r8, 0x0, r10, 0x0, 0x8000, 0x0) msgrcv(r3, 0x0, 0x0, 0x0, 0x1000) msgctl$IPC_RMID(r3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1cef000043000701fefffffffcdbdf25027c000004004580040001807458929166a279b2f1b0af0bae5c"], 0x1c}}, 0xc000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000025000a20000000000a01030000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003740000001e0a01020000000000000000010000000900020073797a32001400003400038030000080090006400000000024000b8020000180070001006374000014000280080001400000000008000240000000000900010073797a30"], 0xe4}}, 0x0) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x10) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0) ioctl$PPPIOCATTCHAN(r11, 0x40047438, &(0x7f0000000080)=0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000011c0)=ANY=[@ANYBLOB="4801007fffffff070000000000000000fe88000000000000000000000000000120010000000000000000000000001c0100000000000000000000000000003d16421d77b31c14aac92ad0617b64", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0000000000000000000000000000000000000033000000200100000000000000000000000000020000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffff7f00000000023500000200000700000000000000000c001c00", @ANYRES32=r12, @ANYRES8=r0], 0x148}}, 0x4000) 5.379049377s ago: executing program 7 (id=4293): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) read$FUSE(0xffffffffffffffff, &(0x7f0000000700)={0x2020}, 0x2020) r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r0, 0x0, 0x4000855) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/crash_elfcorehdr_size', 0x5a9282, 0xa4) sendfile(r1, r1, 0x0, 0x68) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0xc080}, 0x4000080) socket(0x2, 0x80805, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000500)={'gre0\x00'}) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3f, 0x2, 0x10, {0x2, 0x4e22, @empty=0x300}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5.010690062s ago: executing program 4 (id=4294): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)={0x18, r1, 0x301, 0x0, 0x0, {0x34}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x4, 0xa8, @random}]}, 0x18}}, 0x4000) 4.83262451s ago: executing program 1 (id=4295): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) syz_io_uring_setup(0x73d3, &(0x7f0000000680)={0x0, 0x10007d89, 0x10100, 0x3, 0x85}, &(0x7f0000000540)=0x0, &(0x7f0000000700)=0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r3, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6}}, 0x20) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000000c0)={r4, r3, 0x4, r3}, 0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200"], 0x0}, 0x94) syz_io_uring_submit(r0, r1, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) r9 = syz_open_dev$loop(&(0x7f0000000080), 0x401, 0x800600) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)) r11 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r11, 0x0, 0x482, &(0x7f0000000040)={0x84, @local, 0x15, 0x3, 'lc\x00', 0x1, 0x4, 0x8}, 0x2c) r12 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r11, 0x0, 0x487, &(0x7f0000000340)={{0x84, @loopback, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x4e23, 0x2, 0x0, 0x12d61, 0xe}}, 0x44) sendmsg$sock(r12, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x20000000) renameat2(r10, &(0x7f00000000c0)='./cgroup\x00', r10, &(0x7f0000000440)='./cgroup\x00', 0x2) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f00000000c0)={0xffffffffffffffff, 0x1000, {0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x1b, 0x15, "54c870a8634edc745dfa1ab0a34a10622e64ee4edb80cc9bd36b93b23733e6180aa539ec68114b5aba1c98911df5ba72296d56740d56ea4d0434aa3592a47913", "fc0177a6f3bb16d5d5568693e0e50bbf206c9d8db97c00040000000000005f8a654e14dc7c4cc6020000003b3acc9f02cd3eac8be657b534bfa1142100696b29", "c921095856cdf9fd8199034f3b875fe5c92394e3c7a178fb1c16c99189819ef4", [0x1, 0x9]}}) 4.808839431s ago: executing program 4 (id=4296): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000cb041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x48) r1 = fsopen(&(0x7f00000002c0)='ntfs3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) r4 = gettid() sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r3, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r4], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r2) r5 = socket(0x400000000010, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="660a00000000000061114c00000000008500000021faf382871484ac40d93ecc80c5519ade0000009500020000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6tnl0\x00', r7, 0x4, 0x8, 0x8, 0x2, 0x10, @dev={0xfe, 0x80, '\x00', 0x37}, @local, 0x8000, 0x40, 0x1, 0xfff}}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r9, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x400) socket$rds(0x15, 0x5, 0x0) socket(0x10, 0x803, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 4.742376265s ago: executing program 9 (id=4297): creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x100, 0x0, 0x1, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x200000c4}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000840)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60ab000100140600fe800000"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$dupfd(r2, 0x0, r2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = msgget(0x0, 0x40) msgctl$MSG_INFO(r3, 0xc, &(0x7f00000000c0)=""/173) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, 0xffffffffffffffff, &(0x7f0000000080), 0x4003) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) fanotify_init(0x10, 0x40000) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) io_setup(0x60, &(0x7f0000000140)=0x0) io_submit(r5, 0x1, &(0x7f0000001400)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}]) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@fallback, 0x2b, 0x1, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x40) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0) 4.703015353s ago: executing program 3 (id=4298): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x2) 3.880984077s ago: executing program 3 (id=4299): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000100)={0x20, 0x38, 0x3, "3bebc6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f00000001c0)={0x0, 0x18, 0x8, "c904dc6be57753dd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.782452245s ago: executing program 4 (id=4300): io_uring_setup(0x6eea, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$USBDEVFS_IOCTL(r0, 0x4004550d, &(0x7f0000000200)=@usbdevfs_disconnect={0x9a}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) signalfd4(r3, &(0x7f0000000140)={[0x72]}, 0x8, 0x0) setsockopt$SO_J1939_PROMISC(r3, 0x6b, 0x2, &(0x7f0000000040), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x18) getdents64(r4, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 3.762755002s ago: executing program 1 (id=4301): socket$tipc(0x1e, 0x5, 0x0) close(0xffffffffffffffff) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x2fff) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x4, 0xe, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNGETVNETBE(r4, 0x800454df, &(0x7f0000000000)) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000000000000b40"], 0x68}, 0x1, 0x0, 0x0, 0x51}, 0x0) 3.055458526s ago: executing program 9 (id=4302): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x2, '\x00', r1, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0xb) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000140)={0x8, 0x100}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, &(0x7f0000000100)) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) r6 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8a170, r6, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8a170, r6, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) (async) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000d3ccb510b1134200292b0102030109021b0001fc00000009040f0001e711e100090583ff03"], 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000280)) (async) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000280)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$setpipe(0xffffffffffffffff, 0x407, 0xc000) (async) fcntl$setpipe(0xffffffffffffffff, 0x407, 0xc000) r9 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(r5, 0x0, &(0x7f00000001c0)=0x808) (async) sched_setscheduler(r5, 0x0, &(0x7f00000001c0)=0x808) getpid() 2.798420175s ago: executing program 7 (id=4303): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x5, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0xe0b, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xd, 0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24020080}, 0x4044080) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r7, @ANYBLOB="0500000000000000000001000000060006004e240000901008809005008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b24000100000000000000000000000000000000000000000000000000000000000000000024000200fcbefe9641719404cc5c9ab2766dd4793e367b0ea55e65e2e3416ac9d4e68841240002001171ee8da334a5099295af229a5d237a7f4102f01f28b34347d6cbbe135d83ec24000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691cb40409807c000080060001000a00000014000200000000000000000000000000000000010500030002000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200ff0100000000000000000000000000010500030001000000060001000200000008000200e00000010500030000000000f4000080060001000a00000014000200fc0000000000000000000000000000000500030001000000060001000a00000014000200fc0200000000000000000000000000010500030000000000060001000200000008000200e00000020500030003000000060001000200000008000200000000000500030000000000060001000200000008000200ac1414bb0500030001000000060001000200000008000200ac1414bb0500030000000000060001000a00000014000200000000000000000000000000000000010500030002000000060001000a00000014000200fc0200000000000000000000000000000500030003000000340000800600010002000000080002000a0101010500030004000000060001000200000008000200ac1414aa050003000300000064000080060001000a00000014000200200100000000000000000000000000000500030002000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200ff010000000000000000000000000001050003000200000094000080060001000200000008000200ac1e00010500030002000000060001000200000008000200e00000010500030002000000060001000a00000014000200fc0000000000000000000000000000000500030002000000060001000200000008000200000000000500030003000000060001000a00000014000200fe80000000000000000000000000000e050003000000000040000080060001000a00000014000200fc0200000000000000000000000000000500030002000000060001000200000008000200ac1414aa050003000000000064000080060001000a00000014000200200100000000000000000000000000020500030001000000060001000a00000014000200fc02000000000000000000000000000105000300020000000600010002000000080002000a010100050003000200000070000080060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000a00000014000200000000000000000000000000000000000500030002000000060001000a0000001400020000000000000000000000000000000001050003000000000000010080060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000200000008000200000000000500030003000000060001000200000008000200640101000500030002000000060001000200000008000200640101010500030001000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fe8000000000000000000000000000bb05000300020000000600010002000000080002007f0000010500030002000000060001000a00000014000200fc0200000000000000000000000000010500030003000000060001000200000008000200640101010500030001000000240002005da952055e5857d673cddd36909746c80efa3ff95c317de1063db32bc80a0b3e1803008024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39220600050005000000e802098058000080060001000200000008000200ac1e00010500030001000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200ffffffff05000300010000007c000080060001000a00000014000200000000000000000000000000000000010500030002000000060001000200000008000200ac1414bb0500030002000000060001000a000000140002000000000000000000000000000000000105000300020000000600010002000000080002000a0101010500030003000000f4000080060001000a0000001400020000000000000000000000ffffac1414aa0500030003000000060001000200000008000200ac1414aa05000300000000000600010002000000080002000a01010205000300020000000600010002000000080002007f00000105000300000000000600010002000000080002000a0101010500030003000000060001000200000008000200e00000010500030003000000060001000a00000014000200fc01000000000000000000000000000005000300010000000600010002000000080002000a0101000500030000000000060001000200000008000200ac1e0101050003000200000094000080060001000a00000014000200fc0200000000000000000000000000010500030002000000060001000a00000014000200ff0100000000000000000000000000010500030001000000060001000200000008000200e00000010500030002000000060001000200000008000200ac1414bb0500030001000000060001000200000008000200ffffffff050003000200000088000080060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fe8800000000000000000000000001010500030002000000060001000a00000014000200ff02000000000000000000000000000105000300020000007c000080200004000a004e2100000006fc0100000000000000000000000000010400000008000a000100000024000100f44da367a88ee6564f020211456727082f5debee8b1bf5eb7337341b459b3922080003000300000024000200379aa288b2244a5b504ba04bea45625d328fb93b62e607a1b2e4da2f7f76a549780000800800030001000000080003000400000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e22000000000000000000000000e4060080dc020980f4000080060001000a00000014000200000000000000000000000000000000000500030002000000060001000a00000014000200fc0000000000000000000000000000000500030001000000060001000200000008000200ffffffff0500030001000000060001000200000008000200ac1e00010500030001000000060001000200000008000200e000000105000300020000000600010002000000080002007f0000010500030002000000060001000a00000014000200000000000000000000000000000000010500030001000000060001000a00000014000200fc010000000000000000000000000001050003000300000034000080060001000200000008000200640101000500030001000000060001000200000008000200ac1414bb050003000200000000010080060001000a00000014000200200100000000000000000000000000010500030000000000060001000200000008000200e000000205000300020000000600010002000000080002006401010005000300020000000600010002000000080002007f00000105000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ffffffff0500030000000000060001000200000008000200e00000010500030003000000060001000a00000014000200fc0100000000000000000000000000010500030000000000940000800600010002000000080002006401010005000300010000000600010002000000080002006401010205000300000000000600010002000000080002007f0000010500030003000000060001000200000008000200e00000020500030003000000060001000200000008000200ac1414120500030002000000060001000200000008000200ac14142d05000300020000001c000080060001000200000008000200ffffffff05000300030000000800030002000000200004000a004e2000000005fc010000000000000000000000000001000000009403098094000080060001000a0000001400020000000000000000000000ffffac1414bb0500030003000000060001000a00000014000200fe8800000000000000000000000000010500030002000000060001000a00000014000200ff0100000000000000000000000000010500030003000000060001000a00000014000200fe880000000000000000000000000101050003000100000064000080060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ac1414bb0500030001000000060001000a0000001400020000000000000000000000ffffe00000020500030003000000f4000080060001000200000008000200000000000500030001000000060001000a00000014000200000000000000000000000000000000010500030003000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe80000000000000000000000000003e05000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200ff0200000000000000000000000000010500030001000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200e0000001050003000000000058000080060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ac1414410500030010000000060001000200000008000200ac1e00010500030001000000f4000080060001000200000008000200640101000500030002000000060001000a00000014000200200100000000000000000000000000000500030000000000060001000a00000014000200fc0200000000000000000000000000010500030003000000060001000a00000014000200fe8000000000000000000000000000aa0500030003000000060001000200000008000200ac1414aa0500030000000000060001000200000008000200000000000500030000000000060001000200000008000200ac1414270500030000000000060001000a0000001400020020010000000000000000000000000002050003000100000058000080060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe8000000000000000000000000000140500030000000000060001000200000008000200e0000001050003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b240002000f1b8b82264208ab1a2dce776c03b9f348f500ef8e7606466943f5ba2ae2881e0c0000800800030006000000060006004e24000008000100", @ANYRES32=r8, @ANYBLOB="240003"], 0x10e0}}, 0x0) bind$packet(r3, &(0x7f0000000c00)={0x11, 0xf7, r8, 0x1, 0x4, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x7, 0x0, &(0x7f0000000900)="e02742e8680d85", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x10) r9 = socket(0x10, 0x803, 0x0) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_connect$cdc_ecm(0x5, 0x5d, &(0x7f0000000480)=ANY=[@ANYBLOB="12010003020000402505a1a440000102030109024b0001010230040904000e020206000708240600003df4cb05240b"], &(0x7f0000000800)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x110, 0x8, 0x12, 0xf8, 0x40, 0x9}, 0x25, &(0x7f0000000680)={0x5, 0xf, 0x25, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x0, 0xfb, 0x5}, @wireless={0xb, 0x10, 0x1, 0x2, 0x20, 0x0, 0x8, 0x9, 0xfa}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x0, 0x2, 0x1, 0x81}]}, 0x6, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x455}}, {0x57, &(0x7f0000000300)=@string={0x57, 0x3, "792579433827bd4e486415acdc480d8c2d93138d27e4756a999bd555d16d23c4cf8edfa1e48255530d7056465ef1a2806d51f9faa876d7657062b92e5fb98c5137e4380136f96ebf5f18c6a256d028ce7e3ba82114"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0xc07}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x44b}}, {0x2, &(0x7f00000005c0)=@string={0x2}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x416}}]}) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io$hid(r10, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="00220f000000040b2100000095f57584"], 0x0}, 0x0) r11 = syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r11, &(0x7f0000000440)={0x14, &(0x7f00000006c0)={0x40, 0xa, 0x84, {0x84, 0xc, "dab1f1201a1f03c1b0e7583bb9907ac57b25061f1e1cb8eddbfe426b21dc44441988d65d7d87d9442ae569e68066d264361e6053785873dadca5053fd4b8dc07bff2c52fe94f3772b9f391cfae37512e55746a4a578c0d00f78cfa8e3d7afb7a201e7e4bede5f92f1e09ec2cb9c25a289897106fdf47126696b4753c51f7437ede6f"}}, &(0x7f0000000980)={0x0, 0x3, 0x7f, @string={0x7f, 0x3, "905b51d08b232ba1c33caf69a35e83afd73aee8c18e3cb01db8b77deeba3866f89dc9b2349236b863fbab8f535082ee3b8c64d77005148883e09d4c5ee1ab0cbf3ce2edf2bfad2c60ca888e2b975798c4dab8fa2c0b5a1c4c3339664267925bed982b2f08520308b4863cfd459be10641a4e7fca80326fc5f7c9fa6b45"}}}, &(0x7f0000000b80)={0x2c, &(0x7f0000000a40)={0x40, 0x31, 0x59, "b3998f08e6c3be4fa1d492a22f2f6237bad7c84b19fec78499c478d54f89506131b258c28d33b68808df5365f81e264e4a54af827cfe3f9342e5022505ebc8c3c3b849dbc0b70f6b9d2b033c01051afec08532e07875e35dd0"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000b00)={0xc0, 0x5, 0x1, "bf"}, &(0x7f0000000b40)={0x40, 0x5, 0x3, "dc4a9d"}}) r12 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGFLAG(r12, 0x8004480e, &(0x7f0000000040)) connect$inet6(r9, &(0x7f00000001c0)={0xa, 0x4e21, 0x80000000, @mcast2, 0x8}, 0x1c) 2.766561496s ago: executing program 4 (id=4304): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000300)={r4}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f00000002c0)={r4}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000005f00)={'wlan1\x00'}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, 0x1, 0x7}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r7, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x5bde, &(0x7f0000000380)={0x0, 0x5f41, 0x80}) ioctl$sock_TIOCINQ(r8, 0x541b, &(0x7f00000001c0)) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r9 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r9, 0x0, 0x0) 1.673681802s ago: executing program 4 (id=4305): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000), 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x5, &(0x7f0000002200)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2, 0x20}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x4a}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x200000, '\x00', 0x0, r5, 0x0, 0x1}, 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) dup(r6) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="44000280400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003"], 0x60}, 0x1, 0x0, 0x0, 0x4044}, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x18, 0x0) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r8, r7, &(0x7f00000000c0)=0x58, 0xa) 1.289173331s ago: executing program 3 (id=4306): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r0, &(0x7f00000001c0), 0x9) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x60, 0xdd, 0x99, 0x20, 0x5e9, 0x9, 0x73db, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb6, 0x7, 0x0, 0x9, 0xbd, 0x2e}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x14, 0x3c, 0x707, 0xfffffffc, 0x25dfdbfc, {0x4, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) syz_usb_control_io(r1, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r1, &(0x7f0000000240)={0x14, &(0x7f00000000c0)={0x0, 0x6, 0x98, {0x98, 0x11, "06526cf41791a8ea440af36387367f311a56dedb9f7e85583f215e4e0bfbf6509aeaf0f53ca982667810e17c8449bb80d94568dc557873d356030015259698ca761f418b3e2cf514036f56d21144cbe8826da62ce0f2f411f481589ca45dbd4e5bf8d36b98229d46d7a2e731504b23a7b287505c560ac1e09fe3ecf0bfb1c72215e50edf2f6234758549cb9486c8b395bc780e868f80"}}, &(0x7f0000000640)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x420}}}, &(0x7f00000002c0)={0x1c, &(0x7f0000000500)={0x0, 0x1, 0x100, "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"}, &(0x7f00000009c0)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000280)={0x21, 0x0, 0x2, "e600"}}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r2) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000e00)={0x3dc, r3, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x13e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc3}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa9c}]}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'ip6gretap0\x00'}}]}, @TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x80, @mcast1, 0xb13}}}}]}, @TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e24, @local}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2070000000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2287}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x288}]}, @TIPC_NLA_BEARER={0xe0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'bond_slave_1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x3, @mcast2, 0x101}}, {0x14, 0x2, @in={0x2, 0x4e24, @private=0xa010102}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xfffffee7, @remote, 0x7}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x80, @empty, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'wlan1\x00'}}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffb}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x20}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x418}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0xbc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x9, 0x3, "d5770244d7"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x401}, @TIPC_NLA_NODE_ID={0x81, 0x3, "86885bd6aaccfd19915bd08530fe3208402c23356332e33b9ded4b2446322937441c2ebf76c903e70e8aa1eac24d9217a4ac83ccac8a0b930084596d278dadd9555620fe3d5844cb5fdeb0d3a30d658e2c31445df9c542cbde67e3789290696b4e68058de4ebafd74b42b90b4d6a67e24ee9215ff9f1e2b894b047bfd0"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}]}]}, 0x3dc}, 0x1, 0x0, 0x0, 0x1}, 0x4000) socket$qrtr(0x2a, 0x2, 0x0) syz_usb_control_io(r1, 0x0, 0x0) 1.214536036s ago: executing program 9 (id=4307): r0 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096101, &(0x7f0000000800)={{}, 0xfe}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c000280050001000000000008000740000000000800034000"], 0x80}, 0x1, 0x0, 0x0, 0x4000010}, 0x4) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000080)=0xf0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 984.469249ms ago: executing program 9 (id=4308): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x130b, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000080)={0xf0f041}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 837.720931ms ago: executing program 9 (id=4309): creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x100, 0x0, 0x1, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x200000c4}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000840)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60ab000100140600fe800000"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$dupfd(r2, 0x0, r2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = msgget(0x0, 0x40) msgctl$MSG_INFO(r3, 0xc, &(0x7f00000000c0)=""/173) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, 0xffffffffffffffff, &(0x7f0000000080), 0x4003) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) fanotify_init(0x10, 0x40000) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) io_setup(0x60, &(0x7f0000000140)=0x0) io_submit(r5, 0x1, &(0x7f0000001400)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}]) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@fallback, 0x2b, 0x1, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x40) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0) 832.613289ms ago: executing program 4 (id=4310): syz_emit_ethernet(0x76, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) getpid() getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = semget$private(0x0, 0x2, 0x2) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000000)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = dup(r5) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000300)={0x60, 0x2, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00002f9000/0x1000)=nil, 0x9, &(0x7f0000000040)=[{0x9, 0x6, 0x5}, {0x1, 0x59b, 0xfffe00}], 0x2, 0x9, 0x4b, 0x26, 0x21, 0xe8}) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)='befs\x00', 0x214003, 0x0) 0s ago: executing program 1 (id=4311): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x8, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x90}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x420300, 0x0) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x4008, r2}, 0x18) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f00000002c0)=r4) clock_adjtime(0x3, &(0x7f0000000140)={0x4, 0x2e, 0x8000000000000000, 0x9, 0xfffffffffffff85c, 0xaaf, 0x0, 0x5, 0x2ba, 0x9, 0xcf, 0x3, 0x0, 0xaed0, 0x6, 0x7, 0x6, 0x4, 0x2d121f4e, 0x6, 0x6, 0x3850, 0xffffffff, 0x200, 0xfffffffffffffffb, 0x8f}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003a80)=@newtfilter={0x4c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @empty}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) kernel console output (not intermixed with test programs): led with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1268.162281][T20947] team0: Port device team_slave_0 added [ 1268.177415][T20947] team0: Port device team_slave_1 added [ 1268.226237][T20947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1268.235028][T20947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1268.260987][ C1] vkms_vblank_simulate: vblank timer overrun [ 1268.296843][T20947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1268.309247][T20947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1268.316317][T20947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1268.351495][T20947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1268.885199][T18869] Bluetooth: hci5: command tx timeout [ 1268.903920][T20947] hsr_slave_0: entered promiscuous mode [ 1268.910732][T20947] hsr_slave_1: entered promiscuous mode [ 1268.919666][T20947] debugfs: 'hsr0' already exists in 'hsr' [ 1268.926929][T20947] Cannot create hsr debugfs directory [ 1268.927276][T20978] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1269.960423][T20983] CUSE: unknown device info "" [ 1269.965379][T20983] CUSE: zero length info key specified [ 1270.103463][T20987] fuse: Bad value for 'fd' [ 1271.161112][T18869] Bluetooth: hci5: command tx timeout [ 1271.509369][T18636] block nbd0: Possible stuck request ffff888058847000: control (read@0,1024B). Runtime 480 seconds [ 1271.520668][T18636] block nbd0: Possible stuck request ffff8880588471c0: control (read@1024,1024B). Runtime 480 seconds [ 1271.531962][T18636] block nbd0: Possible stuck request ffff888058847380: control (read@2048,1024B). Runtime 480 seconds [ 1271.543714][T18636] block nbd0: Possible stuck request ffff888058847540: control (read@3072,1024B). Runtime 480 seconds [ 1271.787786][ T9] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1271.961089][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1271.968861][T20947] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1271.979448][ T9] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1271.989865][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1272.000708][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1272.003632][T20947] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1272.021389][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1272.046022][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1272.056838][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1272.064929][ T9] usb 2-1: Product: syz [ 1272.070085][ T9] usb 2-1: Manufacturer: syz [ 1272.075217][T20947] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1272.093456][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 1272.099760][T18645] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1272.114239][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 1272.117052][T20947] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1272.132698][ T9] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1272.138622][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 1272.247593][T18645] usb 3-1: device descriptor read/64, error -71 [ 1272.314073][T20947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1272.621842][T18645] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1272.721518][T20947] 8021q: adding VLAN 0 to HW filter on device team0 [ 1272.737013][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 1272.744183][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1272.760441][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 1272.767644][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1272.896799][T18645] usb 3-1: device descriptor read/64, error -71 [ 1273.147466][T18645] usb usb3-port1: attempt power cycle [ 1273.182459][T20947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1273.362466][T21029] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1273.375246][T21029] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1273.383241][T18869] Bluetooth: hci5: command tx timeout [ 1273.414620][T20947] veth0_vlan: entered promiscuous mode [ 1273.426790][T20947] veth1_vlan: entered promiscuous mode [ 1273.438008][T21029] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1273.450184][T21029] overlayfs: failed to look up (tracing) for ino (-66) [ 1273.462394][T20947] veth0_macvtap: entered promiscuous mode [ 1273.472479][T20947] veth1_macvtap: entered promiscuous mode [ 1273.496065][T20947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1273.509357][T18645] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1273.520893][T20947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1273.538527][T20534] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.560365][T20534] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.579492][T20534] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.588858][T20534] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.668496][T20534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1273.683983][T20534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1273.746041][T18645] usb 3-1: device not accepting address 63, error -71 [ 1273.819484][T18361] usb 2-1: USB disconnect, device number 67 [ 1274.001947][T17169] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1274.127122][T20534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1274.170368][T20534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1274.216704][T17169] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1274.317055][T21046] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1274.382590][T17169] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1274.404448][T17169] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.416717][T17169] usb 4-1: config 0 descriptor?? [ 1275.209470][ T30] audit: type=1400 audit(1761888151.246:1110): avc: denied { create } for pid=21053 comm="syz.2.3817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1275.275295][ T30] audit: type=1400 audit(1761888151.265:1111): avc: denied { ioctl } for pid=21053 comm="syz.2.3817" path="socket:[98047]" dev="sockfs" ino=98047 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1275.316653][ T30] audit: type=1400 audit(1761888151.293:1112): avc: denied { connect } for pid=21053 comm="syz.2.3817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1275.368894][T17169] keytouch 0003:0926:3333.000B: fixing up Keytouch IEC report descriptor [ 1275.395862][T21061] fuse: Bad value for 'fd' [ 1275.545457][T17169] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.000B/input/input81 [ 1275.582244][T21034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1275.598199][T21034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1275.606102][T18869] Bluetooth: hci5: command tx timeout [ 1275.726839][T21069] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3820'. [ 1275.745904][T18645] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1276.196779][T17169] keytouch 0003:0926:3333.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 1276.220976][T21072] netlink: 'syz.7.3822': attribute type 1 has an invalid length. [ 1276.264149][T21072] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1276.271029][T18645] usb 3-1: Using ep0 maxpacket: 8 [ 1276.277609][T21073] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3822'. [ 1276.280413][T18645] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1276.298146][T18645] usb 3-1: config 4 interface 0 has no altsetting 0 [ 1276.308828][T18645] usb 3-1: string descriptor 0 read error: -22 [ 1276.318490][T18645] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1276.327724][T18645] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.348671][T18645] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1276.396130][T18645] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1276.437568][T18645] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1276.456428][T18645] usb 3-1: media controller created [ 1276.604991][T18645] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1276.700772][ T30] audit: type=1400 audit(1761888152.649:1113): avc: denied { read } for pid=21079 comm="syz.9.3823" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1277.682342][ T5931] usb 4-1: USB disconnect, device number 62 [ 1278.092009][ T30] audit: type=1400 audit(1761888153.949:1114): avc: denied { mount } for pid=21064 comm="syz.2.3821" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 1278.270019][T21073] bond1 (unregistering): Released all slaves [ 1278.530923][T21081] netlink: 108 bytes leftover after parsing attributes in process `syz.9.3823'. [ 1279.061165][T21081] netlink: 108 bytes leftover after parsing attributes in process `syz.9.3823'. [ 1279.072318][T21081] netlink: 48 bytes leftover after parsing attributes in process `syz.9.3823'. [ 1279.098619][T21082] netlink: 108 bytes leftover after parsing attributes in process `syz.9.3823'. [ 1279.115554][T21082] netlink: 108 bytes leftover after parsing attributes in process `syz.9.3823'. [ 1279.126657][T21082] netlink: 48 bytes leftover after parsing attributes in process `syz.9.3823'. [ 1279.313276][ T30] audit: type=1400 audit(1761888155.090:1115): avc: denied { unmount } for pid=18012 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1279.950948][T21101] openvswitch: netlink: Message has 592 unknown bytes. [ 1279.958218][T21101] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1280.033967][T21097] input: syz1 as /devices/virtual/input/input82 [ 1280.218157][T18645] usb 3-1: USB disconnect, device number 65 [ 1280.225289][ T5941] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1280.346672][T21110] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1280.406260][ T5941] usb 10-1: device descriptor read/64, error -71 [ 1281.026762][ T5941] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1281.074294][T21115] vcan0: tx drop: invalid da for name 0x0000000000000800 [ 1281.092181][T21115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3833'. [ 1281.176404][ T5941] usb 10-1: device descriptor read/64, error -71 [ 1281.328838][ T5941] usb usb10-port1: attempt power cycle [ 1281.787118][ T5941] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1281.866198][T21128] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1282.203647][ T5941] usb 10-1: device descriptor read/8, error -71 [ 1282.231467][T21127] netlink: 'syz.1.3836': attribute type 1 has an invalid length. [ 1282.579580][T21134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3836'. [ 1282.598276][ T5941] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1282.631032][ T5941] usb 10-1: device descriptor read/8, error -71 [ 1282.748262][ T5941] usb usb10-port1: unable to enumerate USB device [ 1282.834664][T21127] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1283.910695][T21134] bond1 (unregistering): Released all slaves [ 1284.457042][ T30] audit: type=1400 audit(1761888159.897:1116): avc: denied { setopt } for pid=21160 comm="syz.9.3842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1284.620581][ T30] audit: type=1400 audit(1761888159.897:1117): avc: denied { getopt } for pid=21160 comm="syz.9.3842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1285.649738][T21169] wlan0 speed is unknown, defaulting to 1000 [ 1285.725020][T21174] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1286.469939][T21182] wlan0 speed is unknown, defaulting to 1000 [ 1287.559811][ T9] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1288.245549][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1288.443017][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1288.500037][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1288.655265][ T9] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1288.655286][ T9] usb 4-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0 [ 1288.655298][ T9] usb 4-1: Manufacturer: syz [ 1288.660654][ T9] usb 4-1: config 0 descriptor?? [ 1289.120136][ T9] usbhid 4-1:0.0: can't add hid device: -32 [ 1289.141961][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 1289.259539][ T9] usb 4-1: USB disconnect, device number 63 [ 1289.358117][T21220] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3859'. [ 1289.442979][T21218] netlink: 'syz.1.3858': attribute type 1 has an invalid length. [ 1289.535376][T21221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3858'. [ 1289.639152][T21218] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1290.101340][T21221] bond1 (unregistering): Released all slaves [ 1290.164864][T21233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3861'. [ 1290.746648][T21243] overlayfs: failed to resolve './file0': -2 [ 1291.108676][T21237] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1291.120568][T21237] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1291.129112][T21237] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1291.135985][T21237] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1291.142261][T21237] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1291.494692][T21237] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1291.595259][T21237] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1291.632120][T21237] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1291.717058][T21247] overlayfs: failed to resolve './file1': -2 [ 1292.575988][T21254] overlayfs: failed to resolve './file0': -2 [ 1293.560984][T18869] Bluetooth: hci4: command 0x0405 tx timeout [ 1293.567066][T18869] Bluetooth: hci0: command 0x040f tx timeout [ 1293.573267][T18869] Bluetooth: hci1: command 0x0419 tx timeout [ 1293.579285][T18869] Bluetooth: hci2: command 0x0419 tx timeout [ 1293.587311][T18869] Bluetooth: hci3: command 0x0c1a tx timeout [ 1293.654786][ T5825] Bluetooth: hci5: command 0x0405 tx timeout [ 1293.758570][T21267] vcan0: tx drop: invalid da for name 0x0000000000000800 [ 1293.782596][T21267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3869'. [ 1294.229012][T21260] wlan0 speed is unknown, defaulting to 1000 [ 1294.837633][T21278] exFAT-fs (nullb0): invalid boot record signature [ 1294.844271][T21278] exFAT-fs (nullb0): failed to read boot sector [ 1294.850530][T21278] exFAT-fs (nullb0): failed to recognize exfat type [ 1295.382025][T21279] vcan0: tx drop: invalid da for name 0x0000000000000800 [ 1295.390504][T21279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3874'. [ 1295.575127][ T30] audit: type=1326 audit(1761888170.231:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21271 comm="syz.9.3870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbb8b8efc9 code=0x7fc00000 [ 1295.575424][T21283] vcan0: tx drop: invalid da for name 0x0000000000000800 [ 1295.606791][ T30] audit: type=1326 audit(1761888170.231:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21271 comm="syz.9.3870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdbb8b8efc9 code=0x7fc00000 [ 1295.606987][ T30] audit: type=1326 audit(1761888170.231:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21271 comm="syz.9.3870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbb8b8efc9 code=0x7fc00000 [ 1295.607155][ T30] audit: type=1326 audit(1761888170.231:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21271 comm="syz.9.3870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbb8b8efc9 code=0x7fc00000 [ 1295.607328][ T30] audit: type=1326 audit(1761888170.231:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21271 comm="syz.9.3870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbb8b8efc9 code=0x7fc00000 [ 1295.607464][ T30] audit: type=1326 audit(1761888170.231:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21271 comm="syz.9.3870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbb8b8efc9 code=0x7fc00000 [ 1295.819121][T21282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3872'. [ 1295.878966][ T5825] Bluetooth: hci5: command 0x0405 tx timeout [ 1296.444750][T21302] overlayfs: failed to resolve './file1': -2 [ 1296.900306][T21288] netlink: 'syz.7.3875': attribute type 1 has an invalid length. [ 1297.121397][T21308] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3875'. [ 1297.646282][T21288] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1298.087568][T21321] exFAT-fs (nullb0): invalid boot record signature [ 1298.094184][T21321] exFAT-fs (nullb0): failed to read boot sector [ 1298.100462][T21321] exFAT-fs (nullb0): failed to recognize exfat type [ 1298.179979][T18869] Bluetooth: hci5: command 0x0405 tx timeout [ 1298.656741][T21308] bond1 (unregistering): Released all slaves [ 1298.884485][T21313] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1298.890558][T21313] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1298.912828][T21313] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1298.938687][T21313] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1298.979351][T21313] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1298.984148][T21328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1298.988748][T21313] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1299.215162][ T30] audit: type=1400 audit(1761888173.700:1124): avc: denied { listen } for pid=21327 comm="syz.3.3883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1299.279454][ T5941] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1299.293347][ T30] audit: type=1400 audit(1761888173.700:1125): avc: denied { accept } for pid=21327 comm="syz.3.3883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1299.631893][ T5941] usb 2-1: Using ep0 maxpacket: 8 [ 1299.639870][ T5941] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1299.651173][ T5941] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1299.666332][ T5941] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1299.679194][ T5941] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1299.692978][ T5941] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1299.703685][ T5941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1299.708027][T21342] FAULT_INJECTION: forcing a failure. [ 1299.708027][T21342] name failslab, interval 1, probability 0, space 0, times 0 [ 1299.731980][T21342] CPU: 0 UID: 0 PID: 21342 Comm: syz.7.3887 Not tainted syzkaller #0 PREEMPT(full) [ 1299.732003][T21342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1299.732013][T21342] Call Trace: [ 1299.732019][T21342] [ 1299.732026][T21342] dump_stack_lvl+0x16c/0x1f0 [ 1299.732057][T21342] should_fail_ex+0x512/0x640 [ 1299.732076][T21342] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 1299.732097][T21342] should_failslab+0xc2/0x120 [ 1299.732117][T21342] __kvmalloc_node_noprof+0x141/0x9c0 [ 1299.732135][T21342] ? seq_read_iter+0x830/0x12d0 [ 1299.732167][T21342] ? seq_read_iter+0x830/0x12d0 [ 1299.732190][T21342] seq_read_iter+0x830/0x12d0 [ 1299.732212][T21342] ? find_held_lock+0x2b/0x80 [ 1299.732234][T21342] ? look_up_lock_class+0x59/0x150 [ 1299.732261][T21342] ? register_lock_class+0x41/0x4c0 [ 1299.732282][T21342] seq_read+0x3a3/0x570 [ 1299.732306][T21342] ? __pfx_seq_read+0x10/0x10 [ 1299.732341][T21342] ? avc_policy_seqno+0x9/0x20 [ 1299.732367][T21342] ? __pfx_seq_read+0x10/0x10 [ 1299.732399][T21342] proc_reg_read+0x120/0x330 [ 1299.732422][T21342] ? __pfx_proc_reg_read+0x10/0x10 [ 1299.732447][T21342] vfs_read+0x1e4/0xcf0 [ 1299.732465][T21342] ? __pfx___mutex_lock+0x10/0x10 [ 1299.732481][T21342] ? __pfx_vfs_read+0x10/0x10 [ 1299.732503][T21342] ? __fget_files+0x20e/0x3c0 [ 1299.732528][T21342] ksys_read+0x12a/0x250 [ 1299.732544][T21342] ? __pfx_ksys_read+0x10/0x10 [ 1299.732567][T21342] do_syscall_64+0xcd/0xfa0 [ 1299.732594][T21342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1299.732611][T21342] RIP: 0033:0x7fb69ef8efc9 [ 1299.732625][T21342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1299.732639][T21342] RSP: 002b:00007fb69d1b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1299.732654][T21342] RAX: ffffffffffffffda RBX: 00007fb69f1e6180 RCX: 00007fb69ef8efc9 [ 1299.732664][T21342] RDX: 0000000000002020 RSI: 00002000000044c0 RDI: 0000000000000008 [ 1299.732674][T21342] RBP: 00007fb69d1b4090 R08: 0000000000000000 R09: 0000000000000000 [ 1299.732684][T21342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1299.732693][T21342] R13: 00007fb69f1e6218 R14: 00007fb69f1e6180 R15: 00007ffd2f5a64d8 [ 1299.732719][T21342] [ 1299.803339][ T5825] Bluetooth: hci5: Malformed Event: 0x02 [ 1299.803479][ C0] vkms_vblank_simulate: vblank timer overrun [ 1299.970645][ C0] vkms_vblank_simulate: vblank timer overrun [ 1300.330287][ T5941] usb 2-1: GET_CAPABILITIES returned 0 [ 1300.335839][ T5941] usbtmc 2-1:16.0: can't read capabilities [ 1300.535274][T21345] vcan0: tx drop: invalid da for name 0x0000000000000800 [ 1300.547982][T21345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3888'. [ 1300.679998][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1300.785674][T18645] usb 2-1: USB disconnect, device number 68 [ 1300.842811][T21349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3889'. [ 1300.981117][ T30] audit: type=1400 audit(1761888175.356:1126): avc: denied { unmount } for pid=20947 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 1301.001431][ C0] vkms_vblank_simulate: vblank timer overrun [ 1301.097472][ T5825] Bluetooth: hci0: command 0x040f tx timeout [ 1301.097677][T18869] Bluetooth: hci1: command 0x0419 tx timeout [ 1301.103511][ T5825] Bluetooth: hci2: command 0x0419 tx timeout [ 1301.103541][ T5825] Bluetooth: hci3: command 0x0c1a tx timeout [ 1301.182463][ T5825] Bluetooth: hci5: command 0x0405 tx timeout [ 1301.189069][T12513] Bluetooth: hci4: command 0x0405 tx timeout [ 1301.259670][ T9] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1301.514053][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 1301.525644][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1301.822353][ T9] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1301.838255][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1301.864643][ T9] usb 3-1: config 0 descriptor?? [ 1301.913737][T21361] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3893'. [ 1301.926555][T21361] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3893'. [ 1301.938356][T21361] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3893'. [ 1301.951023][T21361] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3893'. [ 1302.361315][T21352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1302.386442][T21352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1302.409638][T21368] wlan0 speed is unknown, defaulting to 1000 [ 1302.922689][ T9] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1303.256918][ T5941] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1303.427032][T21386] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3902'. [ 1303.448155][ T5941] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1303.469204][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1303.478191][ T5941] usb 4-1: Product: syz [ 1303.487514][ T5941] usb 4-1: Manufacturer: syz [ 1303.499613][ T5941] usb 4-1: SerialNumber: syz [ 1303.916557][T21392] random: crng reseeded on system resumption [ 1304.031370][ T5941] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1304.082955][T18636] block nbd0: Possible stuck request ffff888058847000: control (read@0,1024B). Runtime 510 seconds [ 1304.096337][T18636] block nbd0: Possible stuck request ffff8880588471c0: control (read@1024,1024B). Runtime 510 seconds [ 1304.108042][T18636] block nbd0: Possible stuck request ffff888058847380: control (read@2048,1024B). Runtime 510 seconds [ 1304.119227][T18636] block nbd0: Possible stuck request ffff888058847540: control (read@3072,1024B). Runtime 510 seconds [ 1304.139960][ T5941] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1304.236314][T17169] usb 3-1: USB disconnect, device number 66 [ 1304.496132][T21395] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1304.705719][T21398] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3905'. [ 1304.979491][ T5931] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1305.341908][ T5931] usb 3-1: Using ep0 maxpacket: 16 [ 1305.350435][ T5931] usb 3-1: config 224 has an invalid interface number: 136 but max is 0 [ 1305.365845][ T5931] usb 3-1: config 224 has no interface number 0 [ 1305.384969][ T5931] usb 3-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=bc.ca [ 1305.398651][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.411365][ T5931] usb 3-1: Product: syz [ 1305.415938][ T5931] usb 3-1: Manufacturer: syz [ 1305.421062][ T5931] usb 3-1: SerialNumber: syz [ 1305.654452][ T5931] ftdi_sio 3-1:224.136: FTDI USB Serial Device converter detected [ 1305.685523][ T5931] ftdi_sio ttyUSB0: unknown device type: 0xbcca [ 1305.700471][ T5931] usb 3-1: USB disconnect, device number 67 [ 1305.725719][ T5931] ftdi_sio 3-1:224.136: device disconnected [ 1305.875542][ T30] audit: type=1400 audit(1761888179.929:1127): avc: denied { name_bind } for pid=21421 comm="syz.7.3913" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 1306.313055][T21428] tipc: New replicast peer: 255.255.255.255 [ 1306.331231][T21428] tipc: Enabled bearer , priority 10 [ 1306.515992][T21425] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3914'. [ 1306.596346][T21430] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3915'. [ 1306.605634][T21430] tipc: Disabling bearer [ 1306.625943][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1306.632503][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1306.873883][ T5941] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e4. ret = -EPROTO [ 1307.025674][ T5941] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 1307.038581][ T5941] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1307.050028][ T5941] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1307.058633][T21432] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3916'. [ 1307.068849][ T5941] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1307.084425][ T5941] usb 4-1: USB disconnect, device number 64 [ 1307.821868][T21440] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1309.216906][T21456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3922'. [ 1309.763879][T21458] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1309.775187][T21465] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3925'. [ 1309.785416][T21458] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1309.805340][T21465] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3925'. [ 1309.829054][T21467] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3925'. [ 1309.839207][T21467] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3925'. [ 1310.003828][T21469] tipc: New replicast peer: 255.255.255.255 [ 1310.018027][T21469] tipc: Enabled bearer , priority 10 [ 1310.116173][ T5931] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1310.154248][T21475] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3928'. [ 1310.163923][T21475] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3928'. [ 1310.240311][T21477] tipc: Disabling bearer [ 1310.305606][ T5931] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1310.377157][ T5931] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.419615][ T5931] usb 10-1: Product: syz [ 1310.442076][ T5931] usb 10-1: Manufacturer: syz [ 1310.470446][ T5931] usb 10-1: SerialNumber: syz [ 1310.551042][ T5931] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1310.593550][ T9] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1310.621865][ T5825] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 1310.770452][T21485] Cannot find set identified by id 0 to match [ 1311.108624][T21489] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1311.571151][T21458] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1311.605850][T21458] overlayfs: failed to look up (tracing) for ino (-66) [ 1311.677893][ T5931] usb 10-1: USB disconnect, device number 6 [ 1311.797910][ T9] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 1311.947475][ T9] ath9k_htc: Failed to initialize the device [ 1312.015242][ T30] audit: type=1400 audit(1761888185.662:1128): avc: denied { connect } for pid=21488 comm="syz.1.3933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1312.141574][ T5931] usb 10-1: ath9k_htc: USB layer deinitialized [ 1312.382562][T17169] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1312.595168][T17169] usb 3-1: Using ep0 maxpacket: 32 [ 1312.605567][T17169] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1312.853644][T21514] __nla_validate_parse: 3 callbacks suppressed [ 1312.853661][T21514] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3939'. [ 1312.923572][T17169] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1312.960544][T17169] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1312.983680][T17169] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1313.200111][T17169] usb 3-1: config 0 descriptor?? [ 1313.207450][ T30] audit: type=1400 audit(1761888186.616:1129): avc: denied { write } for pid=21498 comm="syz.7.3937" lport=51752 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1313.332329][ T30] audit: type=1400 audit(1761888186.644:1130): avc: denied { getopt } for pid=21498 comm="syz.7.3937" lport=51752 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1314.138999][T21534] exFAT-fs (nullb0): invalid boot record signature [ 1314.145877][T21534] exFAT-fs (nullb0): failed to read boot sector [ 1314.152146][T21534] exFAT-fs (nullb0): failed to recognize exfat type [ 1314.555570][T17169] hid_parser_main: 26 callbacks suppressed [ 1314.555586][T17169] corsair-cpro 0003:1B1C:0C10.000C: unknown main item tag 0x0 [ 1314.917072][T17169] corsair-cpro 0003:1B1C:0C10.000C: unknown main item tag 0x0 [ 1314.950415][T17169] corsair-cpro 0003:1B1C:0C10.000C: unknown main item tag 0x0 [ 1315.005076][T17169] corsair-cpro 0003:1B1C:0C10.000C: unknown main item tag 0x0 [ 1315.050890][T17169] corsair-cpro 0003:1B1C:0C10.000C: unknown main item tag 0x0 [ 1315.116240][T17169] corsair-cpro 0003:1B1C:0C10.000C: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 1315.161816][T21544] tipc: New replicast peer: 255.255.255.255 [ 1315.176850][T21544] tipc: Enabled bearer , priority 10 [ 1315.194828][T17169] corsair-cpro 0003:1B1C:0C10.000C: probe with driver corsair-cpro failed with error -71 [ 1315.210581][T17169] usb 3-1: USB disconnect, device number 68 [ 1315.785673][T21545] fido_id[21545]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1316.011286][T21550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3947'. [ 1316.020374][T21550] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3947'. [ 1316.098882][T21553] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3946'. [ 1316.108078][T21553] tipc: Disabling bearer [ 1316.842917][T21560] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1316.861904][T21560] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1316.879721][T21562] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1316.993661][T21558] wlan0 speed is unknown, defaulting to 1000 [ 1317.480323][ T30] audit: type=1400 audit(1761888190.787:1131): avc: denied { create } for pid=21564 comm="syz.7.3951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 1317.521464][ T5931] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1317.695572][ T5931] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1317.705778][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.788876][ T5931] usb 2-1: Product: syz [ 1317.803974][ T5931] usb 2-1: Manufacturer: syz [ 1317.808600][ T5931] usb 2-1: SerialNumber: syz [ 1318.378040][ T5931] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1318.399732][ T9] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1318.665294][ T5941] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1318.798559][T21589] overlayfs: failed to resolve './file0': -2 [ 1318.872115][ T5941] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1319.324882][ T5941] usb 4-1: config 0 has an invalid interface number: 144 but max is 1 [ 1319.328347][T21588] netlink: 'syz.7.3956': attribute type 1 has an invalid length. [ 1319.333613][ T5941] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1319.351348][ T5941] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1319.360480][ T5941] usb 4-1: config 0 has no interface number 0 [ 1319.366721][ T5941] usb 4-1: config 0 interface 144 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 1319.383722][ T5941] usb 4-1: config 0 interface 144 has no altsetting 0 [ 1319.393028][ T5941] usb 4-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=d0.ae [ 1319.402311][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1319.418565][T21592] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3956'. [ 1319.518584][ T5941] usb 4-1: Product: syz [ 1319.539528][ T5941] usb 4-1: Manufacturer: syz [ 1319.560667][ T5941] usb 4-1: SerialNumber: syz [ 1319.576014][ T5941] usb 4-1: config 0 descriptor?? [ 1319.585378][T21597] comedi comedi0: pcl818: I/O port conflict (0x4f28,16) [ 1319.638763][ T9] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1319.766839][ T9] ath9k_htc: Failed to initialize the device [ 1320.011782][T21588] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1320.046379][ T9] usb 2-1: ath9k_htc: USB layer deinitialized [ 1320.253456][T17169] usb 2-1: USB disconnect, device number 69 [ 1320.599021][T21608] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1320.736045][ T5941] ims_pcu 4-1:0.144: Missing CDC union descriptor [ 1320.746429][ T5941] ims_pcu 4-1:0.144: probe with driver ims_pcu failed with error -22 [ 1320.764897][ T5941] usb 4-1: USB disconnect, device number 65 [ 1320.924336][T21612] FAULT_INJECTION: forcing a failure. [ 1320.924336][T21612] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1320.963378][T21612] CPU: 1 UID: 0 PID: 21612 Comm: syz.1.3960 Not tainted syzkaller #0 PREEMPT(full) [ 1320.963404][T21612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1320.963414][T21612] Call Trace: [ 1320.963420][T21612] [ 1320.963428][T21612] dump_stack_lvl+0x16c/0x1f0 [ 1320.963460][T21612] should_fail_ex+0x512/0x640 [ 1320.963487][T21612] should_fail_alloc_page+0xe7/0x130 [ 1320.963510][T21612] prepare_alloc_pages+0x3c2/0x610 [ 1320.963536][T21612] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 1320.963561][T21612] ? find_held_lock+0x2b/0x80 [ 1320.963584][T21612] ? is_bpf_text_address+0x8a/0x1a0 [ 1320.963607][T21612] ? bpf_ksym_find+0x127/0x1c0 [ 1320.963631][T21612] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1320.963658][T21612] ? is_bpf_text_address+0x94/0x1a0 [ 1320.963679][T21612] ? kernel_text_address+0x8d/0x100 [ 1320.963698][T21612] ? __kernel_text_address+0xd/0x40 [ 1320.963718][T21612] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1320.963755][T21612] ? __lock_acquire+0x622/0x1c90 [ 1320.963785][T21612] ? __pfx_stack_trace_save+0x10/0x10 [ 1320.963809][T21612] ? stack_depot_save_flags+0x29/0x9c0 [ 1320.963829][T21612] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1320.963853][T21612] ? policy_nodemask+0xea/0x4e0 [ 1320.963876][T21612] alloc_pages_mpol+0x1fb/0x550 [ 1320.963898][T21612] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1320.963927][T21612] alloc_pages_noprof+0x131/0x390 [ 1320.963949][T21612] __pud_alloc+0x3b/0x6b0 [ 1320.963972][T21612] __handle_mm_fault+0x1394/0x2aa0 [ 1320.963999][T21612] ? mt_find+0x3e2/0xa20 [ 1320.964021][T21612] ? __pfx___handle_mm_fault+0x10/0x10 [ 1320.964041][T21612] ? __pfx_mt_find+0x10/0x10 [ 1320.964071][T21612] ? find_vma+0xbf/0x140 [ 1320.964087][T21612] ? __pfx_find_vma+0x10/0x10 [ 1320.964106][T21612] handle_mm_fault+0x589/0xd10 [ 1320.964129][T21612] ? __pkru_allows_pkey+0x11/0xb0 [ 1320.964149][T21612] do_user_addr_fault+0x7a6/0x1370 [ 1320.964170][T21612] ? rcu_is_watching+0x12/0xc0 [ 1320.964195][T21612] exc_page_fault+0x64/0xc0 [ 1320.964222][T21612] asm_exc_page_fault+0x26/0x30 [ 1320.964239][T21612] RIP: 0010:__put_user_4+0xd/0x20 [ 1320.964264][T21612] Code: 66 89 01 31 c9 0f 01 ca e9 c0 80 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 97 80 03 00 0f 1f 80 00 00 00 00 90 90 90 [ 1320.964278][T21612] RSP: 0018:ffffc90003647990 EFLAGS: 00050206 [ 1320.964297][T21612] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000000a00 [ 1320.964308][T21612] RDX: ffff88802f410000 RSI: ffffffff89286b54 RDI: ffffffff8bf06e40 [ 1320.964320][T21612] RBP: 0000000000000000 R08: 007da75da6d4f6ed R09: 0000000000000000 [ 1320.964331][T21612] R10: 0000000000000000 R11: 0000000000000001 R12: 0000200000000a00 [ 1320.964341][T21612] R13: 1ffff920006c8f33 R14: 000000000000541b R15: 0000000000000002 [ 1320.964362][T21612] ? sk_ioctl+0x1c4/0x360 [ 1320.964384][T21612] sk_ioctl+0x1d0/0x360 [ 1320.964401][T21612] ? __pfx_sk_ioctl+0x10/0x10 [ 1320.964415][T21612] ? do_syscall_64+0xcd/0xfa0 [ 1320.964448][T21612] ieee802154_sock_ioctl+0x126/0x450 [ 1320.964478][T21612] ? __pfx_ieee802154_sock_ioctl+0x10/0x10 [ 1320.964519][T21612] sock_do_ioctl+0x118/0x280 [ 1320.964546][T21612] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1320.964574][T21612] ? kasan_quarantine_put+0x10a/0x240 [ 1320.964598][T21612] ? find_held_lock+0x2b/0x80 [ 1320.964623][T21612] sock_ioctl+0x227/0x6b0 [ 1320.964640][T21612] ? __pfx_sock_ioctl+0x10/0x10 [ 1320.964655][T21612] ? avc_has_perm_noaudit+0x149/0x3b0 [ 1320.964683][T21612] ? avc_has_perm+0x144/0x1f0 [ 1320.964707][T21612] ? __pfx_avc_has_perm+0x10/0x10 [ 1320.964732][T21612] ? __pfx_sock_ioctl+0x10/0x10 [ 1320.964749][T21612] do_vfs_ioctl+0x1099/0x14f0 [ 1320.964774][T21612] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1320.964796][T21612] ? inode_has_perm+0x16f/0x1d0 [ 1320.964822][T21612] ? file_has_perm+0x27d/0x350 [ 1320.964849][T21612] ? __pfx_file_has_perm+0x10/0x10 [ 1320.964872][T21612] ? find_held_lock+0x2b/0x80 [ 1320.964904][T21612] ? selinux_file_ioctl+0xb4/0x270 [ 1320.964928][T21612] __x64_sys_ioctl+0x114/0x210 [ 1320.964955][T21612] do_syscall_64+0xcd/0xfa0 [ 1320.964982][T21612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1320.964999][T21612] RIP: 0033:0x7fb4f258efc9 [ 1320.965013][T21612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1320.965030][T21612] RSP: 002b:00007fb4f3382038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1320.965045][T21612] RAX: ffffffffffffffda RBX: 00007fb4f27e5fa0 RCX: 00007fb4f258efc9 [ 1320.965057][T21612] RDX: 0000200000000a00 RSI: 000000000000541b RDI: 0000000000000004 [ 1320.965067][T21612] RBP: 00007fb4f3382090 R08: 0000000000000000 R09: 0000000000000000 [ 1320.965078][T21612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1320.965088][T21612] R13: 00007fb4f27e6038 R14: 00007fb4f27e5fa0 R15: 00007fffad62cde8 [ 1320.965114][T21612] [ 1321.682775][T21615] vcan0: tx drop: invalid da for name 0x0000000000000800 [ 1321.699063][T21615] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3961'. [ 1322.168629][T21622] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1322.503011][T21628] loop4: detected capacity change from 0 to 2560 [ 1322.518057][T17064] Buffer I/O error on dev loop4, logical block 0, async page read [ 1322.529241][ T30] audit: type=1400 audit(1761888195.509:1132): avc: denied { map } for pid=21627 comm="syz.9.3965" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1322.546537][T17064] Buffer I/O error on dev loop4, logical block 0, async page read [ 1322.554853][ T30] audit: type=1400 audit(1761888195.509:1133): avc: denied { execute } for pid=21627 comm="syz.9.3965" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1322.584003][T21627] Buffer I/O error on dev loop4, logical block 0, async page read [ 1322.645993][T21627] Buffer I/O error on dev loop4, logical block 0, async page read [ 1322.655486][T17064] Buffer I/O error on dev loop4, logical block 0, async page read [ 1322.667369][T21627] Buffer I/O error on dev loop4, logical block 0, async page read [ 1322.680292][T17064] Buffer I/O error on dev loop4, logical block 0, async page read [ 1322.693090][T17064] Buffer I/O error on dev loop4, logical block 0, async page read [ 1322.701124][T21628] Buffer I/O error on dev loop4, logical block 0, async page read [ 1322.733902][T21628] Buffer I/O error on dev loop4, logical block 0, async page read [ 1322.816832][T21637] Invalid source name [ 1322.836429][ T30] audit: type=1400 audit(1761888195.790:1134): avc: denied { map } for pid=21629 comm="syz.7.3966" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1322.946535][T21638] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3968'. [ 1322.977403][ T30] audit: type=1400 audit(1761888195.818:1135): avc: denied { write execute } for pid=21629 comm="syz.7.3966" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1323.015768][T21638] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3968'. [ 1323.164039][T21642] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3968'. [ 1323.248284][T21642] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3968'. [ 1323.625960][T21647] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1323.651688][T21647] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1323.685696][T21652] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3970'. [ 1323.705575][T21652] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3970'. [ 1323.926506][ T9] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1323.967330][T21657] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3972'. [ 1323.995576][T21657] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3972'. [ 1324.149627][ T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1324.205249][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1324.386641][ T9] usb 2-1: Product: syz [ 1324.393293][ T9] usb 2-1: Manufacturer: syz [ 1324.398860][ T9] usb 2-1: SerialNumber: syz [ 1324.427033][ T9] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1324.444469][ T976] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1325.006311][ T9] usb 2-1: USB disconnect, device number 70 [ 1325.133022][T21672] netlink: 'syz.9.3976': attribute type 4 has an invalid length. [ 1325.328066][ T5931] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1325.454252][T21677] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1325.513356][T17169] IPVS: starting estimator thread 0... [ 1325.826415][ T976] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1325.835050][ T976] ath9k_htc: Failed to initialize the device [ 1325.849402][ T9] usb 2-1: ath9k_htc: USB layer deinitialized [ 1325.914953][ T5931] usb 3-1: Using ep0 maxpacket: 32 [ 1325.972208][T21678] IPVS: using max 81 ests per chain, 194400 per kthread [ 1325.991319][ T5931] usb 3-1: config 0 has an invalid interface number: 121 but max is 0 [ 1326.257483][T21683] xt_NFQUEUE: number of total queues is 0 [ 1326.417575][ T5931] usb 3-1: config 0 has no interface number 0 [ 1326.483689][ T5931] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1326.503264][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.511666][ T5931] usb 3-1: Product: syz [ 1326.515872][ T5931] usb 3-1: Manufacturer: syz [ 1326.520442][ T5931] usb 3-1: SerialNumber: syz [ 1326.526462][ T5931] usb 3-1: config 0 descriptor?? [ 1326.581580][T21684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3979'. [ 1327.019990][T21670] usb usb8: usbfs: process 21670 (syz.2.3975) did not claim interface 0 before use [ 1327.068227][T21670] usb usb8: usbfs: process 21670 (syz.2.3975) did not claim interface 0 before use [ 1327.240183][T17169] usb 3-1: USB disconnect, device number 69 [ 1327.273028][ T30] audit: type=1400 audit(1761888199.942:1136): avc: denied { write } for pid=21669 comm="syz.2.3975" path="socket:[100628]" dev="sockfs" ino=100628 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1327.326432][ T30] audit: type=1400 audit(1761888199.989:1137): avc: denied { shutdown } for pid=21669 comm="syz.2.3975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1327.474914][T21699] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1327.606669][ T976] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1327.788558][ T976] usb 2-1: Using ep0 maxpacket: 16 [ 1327.825414][ T976] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 1327.958871][ T976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1328.104973][ T976] usb 2-1: Product: syz [ 1328.126211][T21709] fuse: Bad value for 'group_id' [ 1328.131952][T21709] fuse: Bad value for 'group_id' [ 1328.133284][ T976] usb 2-1: Manufacturer: syz [ 1328.153688][ T976] usb 2-1: SerialNumber: syz [ 1328.161491][ T976] usb 2-1: config 0 descriptor?? [ 1328.169943][ T976] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 1328.190360][ T976] usb 2-1: Detected FT-X [ 1328.416286][T21718] netlink: 'syz.2.3986': attribute type 1 has an invalid length. [ 1328.534901][T21727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3986'. [ 1328.585836][T21718] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1328.654565][T21692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1328.697086][T21692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1328.712027][ T976] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1328.788494][ T976] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 1329.010684][T21740] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1329.447648][ T976] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1329.506945][ T976] usb 2-1: USB disconnect, device number 71 [ 1329.576487][ T976] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1329.714212][ T9] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1329.743575][ T976] ftdi_sio 2-1:0.0: device disconnected [ 1330.181729][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1330.233645][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1330.294491][ T9] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1330.332166][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1330.377644][ T9] usb 4-1: config 0 descriptor?? [ 1330.670357][T21727] bond1 (unregistering): Released all slaves [ 1330.741376][T21741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1330.780891][T21741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1330.813855][T21745] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3991'. [ 1330.844040][ T9] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1330.873096][T21765] wlan0 speed is unknown, defaulting to 1000 [ 1332.025418][ T9] usb 4-1: USB disconnect, device number 66 [ 1332.679264][T21793] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1333.931098][T21794] netdevsim netdevsim7: Direct firmware load for . [ 1333.931098][T21794] failed with error -2 [ 1333.971656][ T30] audit: type=1400 audit(1761888206.208:1138): avc: denied { firmware_load } for pid=21778 comm="syz.7.3996" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1334.019711][T21794] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 1334.019711][T21794] [ 1335.345077][T21827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4006'. [ 1335.681740][T21845] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4007'. [ 1335.691393][T21845] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4007'. [ 1335.731678][T21843] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1335.750346][T21843] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1336.065236][T18361] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1336.096768][ T5931] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1336.216567][T21862] exFAT-fs (nullb0): invalid boot record signature [ 1336.216627][T21862] exFAT-fs (nullb0): failed to read boot sector [ 1336.216665][T21862] exFAT-fs (nullb0): failed to recognize exfat type [ 1336.636591][T18361] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1336.636620][T18361] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.636640][T18361] usb 2-1: Product: syz [ 1336.636656][T18361] usb 2-1: Manufacturer: syz [ 1336.636670][T18361] usb 2-1: SerialNumber: syz [ 1336.643047][T18361] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1336.706305][T18636] block nbd0: Possible stuck request ffff888058847000: control (read@0,1024B). Runtime 540 seconds [ 1336.706341][T18636] block nbd0: Possible stuck request ffff8880588471c0: control (read@1024,1024B). Runtime 540 seconds [ 1336.706364][T18636] block nbd0: Possible stuck request ffff888058847380: control (read@2048,1024B). Runtime 540 seconds [ 1336.706386][T18636] block nbd0: Possible stuck request ffff888058847540: control (read@3072,1024B). Runtime 540 seconds [ 1336.706884][ T5931] usb 4-1: Using ep0 maxpacket: 8 [ 1336.716705][T18361] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1336.753681][T21865] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4011'. [ 1336.753706][T21865] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4011'. [ 1336.778980][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1336.876014][T21868] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4011'. [ 1336.884983][T21868] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4011'. [ 1336.902842][ T5931] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1336.913640][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1336.929662][ T5931] usb 4-1: config 0 descriptor?? [ 1337.120318][T21876] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4013'. [ 1337.143373][ T5941] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 1337.271979][ T9] usb 2-1: USB disconnect, device number 72 [ 1337.294232][T21849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1337.303720][T21876] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4013'. [ 1337.326516][T21849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1337.498802][ T5941] usb 3-1: config 5 has an invalid interface number: 208 but max is 0 [ 1337.894143][T18361] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1337.998076][ T5941] usb 3-1: config 5 has no interface number 0 [ 1338.005486][T18361] ath9k_htc: Failed to initialize the device [ 1338.012877][ T5941] usb 3-1: config 5 interface 208 altsetting 102 has an invalid descriptor for endpoint zero, skipping [ 1338.018625][ T5931] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1338.037133][ T5941] usb 3-1: config 5 interface 208 has no altsetting 0 [ 1338.044774][ T9] usb 2-1: ath9k_htc: USB layer deinitialized [ 1338.046692][ T5941] usb 3-1: New USB device found, idVendor=12d1, idProduct=3701, bcdDevice=37.35 [ 1338.082302][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1338.103716][ T5941] usb 3-1: Product: Њ [ 1338.121245][ T5941] usb 3-1: Manufacturer: 율︡氎侠⣮൶滝ﴎᢂ⛖嗧쮠뫅誁ᦱ蓝쁰麍͏薧鰝泠ń幎㋵贗ﵵøᡈ윸풕띻⬀瑯츳ⓐቤ⛢㐼媠犋美褔ꬭ烠ꡯ볁䶇ࢷ݇䓻」ザ犧삪ﾐ䆳⮀彿뿈ጔ⸊圍劅鵍䖲희譶톃ᮝ헰ௐ梥疛鋢ꣵ℺唈鿨ᨛ劢蛳島뢹긟 [ 1338.183067][ T5941] usb 3-1: SerialNumber: syz [ 1338.455938][ T5825] Bluetooth: hci5: unexpected subevent 0x1a length: 10 > 6 [ 1338.463482][ T30] audit: type=1400 audit(1761888210.398:1139): avc: denied { connect } for pid=21887 comm="syz.9.4015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1338.486474][ T30] audit: type=1400 audit(1761888210.398:1140): avc: denied { setopt } for pid=21887 comm="syz.9.4015" laddr=fe80::13 lport=981 faddr=fe80::17 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1338.535721][ T9] usb 4-1: USB disconnect, device number 67 [ 1338.874289][ T5941] option 3-1:5.208: GSM modem (1-port) converter detected [ 1338.891519][ T5941] usb 3-1: USB disconnect, device number 70 [ 1338.901161][ T5941] option 3-1:5.208: device disconnected [ 1339.857755][T21902] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1341.963363][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880566dac00: rx timeout, send abort [ 1341.973869][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880566d9400: rx timeout, send abort [ 1341.982281][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880566dac00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1341.998016][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880566d9400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1342.066020][ T30] audit: type=1400 audit(1761888213.736:1141): avc: denied { read } for pid=5165 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1342.219585][ T30] audit: type=1400 audit(1761888213.736:1142): avc: denied { search } for pid=5165 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1342.241856][ T30] audit: type=1400 audit(1761888213.736:1143): avc: denied { search } for pid=5165 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1342.264587][ T30] audit: type=1400 audit(1761888213.736:1144): avc: denied { add_name } for pid=5165 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1342.308648][ T30] audit: type=1400 audit(1761888213.736:1145): avc: denied { create } for pid=5165 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1342.363444][T21913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4022'. [ 1342.473363][ T30] audit: type=1400 audit(1761888213.736:1146): avc: denied { append open } for pid=5165 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1342.493627][T21925] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4025'. [ 1342.520975][ T30] audit: type=1400 audit(1761888213.736:1147): avc: denied { getattr } for pid=5165 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1343.008766][ T30] audit: type=1400 audit(1761888214.662:1148): avc: denied { bind } for pid=21930 comm="syz.7.4026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1343.366200][T21931] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4026'. [ 1343.399015][T21931] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4026'. [ 1343.669444][ T5941] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 1343.851985][ T5941] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1343.877830][ T5941] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1343.905732][ T5941] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1343.916543][ T5941] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1343.927540][ T5941] usb 10-1: Product: syz [ 1343.936650][ T5941] usb 10-1: Manufacturer: syz [ 1343.947728][ T5941] usb 10-1: SerialNumber: syz [ 1343.974906][T21949] 9pnet_fd: Insufficient options for proto=fd [ 1343.981978][ T30] audit: type=1400 audit(1761888215.560:1149): avc: denied { ioctl } for pid=21948 comm="syz.2.4031" path="socket:[101671]" dev="sockfs" ino=101671 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1343.982618][ T5941] usb 10-1: config 0 descriptor?? [ 1344.007787][ T9] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1344.046588][ T5941] usb 10-1: selecting invalid altsetting 0 [ 1344.096901][T21951] vxcan0: tx drop: invalid da for name 0x0000000000000003 [ 1344.111804][T21951] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4032'. [ 1344.160282][T21953] sctp: [Deprecated]: syz.2.4033 (pid 21953) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1344.160282][T21953] Use struct sctp_sack_info instead [ 1344.187926][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1345.157113][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1345.172846][ T9] usb 2-1: config 0 has no interface number 0 [ 1345.182633][ T9] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1345.191874][ T9] usb 2-1: New USB device strings: Mfr=1, Product=7, SerialNumber=3 [ 1345.204651][ T9] usb 2-1: Product: syz [ 1345.224343][ T9] usb 2-1: Manufacturer: syz [ 1345.229263][ T9] usb 2-1: SerialNumber: syz [ 1346.778409][ T9] usb 2-1: config 0 descriptor?? [ 1346.826425][T18361] usb 10-1: USB disconnect, device number 7 [ 1346.905580][ T9] usb 2-1: can't set config #0, error -71 [ 1346.938948][ T9] usb 2-1: USB disconnect, device number 73 [ 1347.183329][T21966] vcan0: tx drop: invalid da for name 0x0000000000000800 [ 1347.194485][T21966] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4036'. [ 1347.506330][ T30] audit: type=1400 audit(1761888218.871:1150): avc: denied { view } for pid=21965 comm="syz.2.4039" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1347.817542][T21979] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1347.898029][T21981] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4040'. [ 1347.907542][T21981] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4040'. [ 1349.028730][T21998] SET target dimension over the limit! [ 1349.040123][T21998] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4045'. [ 1349.383318][T22007] overlayfs: missing 'lowerdir' [ 1349.460416][ T30] audit: type=1400 audit(1761888220.685:1151): avc: denied { write } for pid=22009 comm="syz.1.4048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1349.480485][T22016] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4048'. [ 1349.484591][T21998] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1349.523865][T22018] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 1349.538216][T22018] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1349.711612][ T30] audit: type=1400 audit(1761888220.928:1152): avc: denied { create } for pid=22013 comm="syz.7.4049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1349.732583][ T30] audit: type=1400 audit(1761888220.928:1153): avc: denied { write } for pid=22013 comm="syz.7.4049" path="socket:[101324]" dev="sockfs" ino=101324 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1350.001763][T22025] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1350.011532][T22025] block device autoloading is deprecated and will be removed. [ 1350.564639][ T30] audit: type=1400 audit(1761888221.040:1154): avc: denied { write } for pid=22021 comm="syz.3.4051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1350.771425][T22031] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=22031 comm=syz.9.4053 [ 1350.802643][T22031] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=22031 comm=syz.9.4053 [ 1350.901958][T22041] vivid-002: disconnect [ 1350.909843][T22039] netlink: 'syz.1.4057': attribute type 3 has an invalid length. [ 1350.958613][T22028] binder_alloc: 22027: pid 22027 spamming oneway? 1 buffers allocated for a total size of 4120 [ 1351.503809][T22027] vivid-002: reconnect [ 1351.792234][T22042] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4054'. [ 1351.812473][T22042] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4054'. [ 1352.276771][T22051] xt_bpf: check failed: parse error [ 1353.656071][T22071] kvm: kvm [22070]: vcpu10, guest rIP: 0x9121 Unhandled WRMSR(0xc2) = 0x600004e0 [ 1353.673904][T22071] kvm: kvm [22070]: vcpu10, guest rIP: 0x9145 Unhandled WRMSR(0xc2) = 0x461 [ 1353.686527][T22071] kvm: kvm [22070]: vcpu10, guest rIP: 0x9121 Unhandled WRMSR(0xc2) = 0x1b31 [ 1353.695512][T22071] kvm: kvm [22070]: vcpu10, guest rIP: 0x9145 Unhandled WRMSR(0xc2) = 0x64d [ 1353.706297][T18361] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1353.710045][T22071] kvm: kvm [22070]: vcpu10, guest rIP: 0x9121 Unhandled WRMSR(0xc2) = 0x18d9 [ 1353.725663][T22071] kvm: kvm [22070]: vcpu10, guest rIP: 0x9145 Unhandled WRMSR(0xc2) = 0xd1c [ 1354.037241][T18361] usb 4-1: Using ep0 maxpacket: 16 [ 1354.069676][T18361] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1354.286828][T18361] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1354.492482][T18361] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1354.507715][T18361] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1354.517588][T18361] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1354.532258][T18361] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1354.552032][T18361] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1354.650259][T18361] usb 4-1: Manufacturer: syz [ 1354.657308][T18361] usb 4-1: config 0 descriptor?? [ 1354.967974][T18361] rc_core: IR keymap rc-hauppauge not found [ 1354.985069][T18361] Registered IR keymap rc-empty [ 1354.992700][T18361] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1355.031671][ T24] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1355.039453][T18361] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1355.086104][T18361] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1355.115730][T18361] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input83 [ 1355.125932][T22064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1355.154796][T18361] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1355.169562][T22064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1355.192096][T18361] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1355.224179][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 1355.230691][T18361] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1355.245305][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1355.273162][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1355.284495][T18361] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1355.343258][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1355.354020][T18361] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1355.363146][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1355.373072][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1355.387532][T18361] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1355.400726][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1355.411430][ T24] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1355.434428][T18361] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1355.472175][ T24] usb 2-1: Manufacturer: syz [ 1355.493618][T18361] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1355.840573][ T24] usb 2-1: config 0 descriptor?? [ 1355.849029][T18361] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1355.876520][T18361] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1355.910706][T18361] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1355.931552][T18361] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1355.976960][T18361] usb 4-1: USB disconnect, device number 68 [ 1356.101016][T22082] netlink: 'syz.1.4069': attribute type 22 has an invalid length. [ 1356.133876][T22096] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4072'. [ 1356.143100][T22096] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4072'. [ 1356.155604][T22094] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4073'. [ 1356.211977][T22094] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4073'. [ 1356.228137][T22099] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4072'. [ 1356.272121][T22099] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4072'. [ 1356.674588][T22107] FAULT_INJECTION: forcing a failure. [ 1356.674588][T22107] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1356.709621][T22107] CPU: 0 UID: 0 PID: 22107 Comm: syz.9.4074 Not tainted syzkaller #0 PREEMPT(full) [ 1356.709646][T22107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1356.709656][T22107] Call Trace: [ 1356.709663][T22107] [ 1356.709670][T22107] dump_stack_lvl+0x16c/0x1f0 [ 1356.709697][T22107] should_fail_ex+0x512/0x640 [ 1356.709721][T22107] _copy_from_user+0x2e/0xd0 [ 1356.709744][T22107] copy_msghdr_from_user+0x98/0x160 [ 1356.709768][T22107] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1356.709800][T22107] ? kfree+0x252/0x6d0 [ 1356.709823][T22107] ? __lock_acquire+0x622/0x1c90 [ 1356.709853][T22107] ___sys_recvmsg+0xdb/0x1a0 [ 1356.709875][T22107] ? __pfx____sys_recvmsg+0x10/0x10 [ 1356.709910][T22107] ? __pfx___might_resched+0x10/0x10 [ 1356.709937][T22107] do_recvmmsg+0x2fe/0x750 [ 1356.709963][T22107] ? __pfx_do_recvmmsg+0x10/0x10 [ 1356.710006][T22107] __x64_sys_recvmmsg+0x22a/0x280 [ 1356.710030][T22107] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1356.710062][T22107] do_syscall_64+0xcd/0xfa0 [ 1356.710090][T22107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1356.710107][T22107] RIP: 0033:0x7fdbb8b8efc9 [ 1356.710123][T22107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1356.710138][T22107] RSP: 002b:00007fdbb998a038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1356.710154][T22107] RAX: ffffffffffffffda RBX: 00007fdbb8de6090 RCX: 00007fdbb8b8efc9 [ 1356.710165][T22107] RDX: 0000000000000360 RSI: 0000200000000b80 RDI: 0000000000000004 [ 1356.710176][T22107] RBP: 00007fdbb998a090 R08: 0000000000000000 R09: 0000000000000000 [ 1356.710186][T22107] R10: 0000000000000120 R11: 0000000000000246 R12: 0000000000000001 [ 1356.710195][T22107] R13: 00007fdbb8de6128 R14: 00007fdbb8de6090 R15: 00007ffe5d323548 [ 1356.710221][T22107] [ 1356.893744][T22109] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1358.143973][ T24] rc_core: IR keymap rc-hauppauge not found [ 1358.243114][T22119] vcan0: tx drop: invalid da for name 0x0000000000000800 [ 1358.255482][T22119] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4077'. [ 1358.426275][ T24] Registered IR keymap rc-empty [ 1358.468230][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1358.487582][T22122] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1358.548617][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1358.555941][T22122] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4079'. [ 1358.606626][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1358.688656][ T30] audit: type=1400 audit(1761888229.308:1155): avc: denied { ioctl } for pid=22115 comm="syz.1.4078" path="socket:[102548]" dev="sockfs" ino=102548 ioctlcmd=0x9428 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1358.700954][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input84 [ 1358.950285][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1359.430124][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1359.480911][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1359.512492][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1359.589866][T22137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1359.694120][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1359.801757][T22150] input: syz1 as /devices/virtual/input/input85 [ 1360.023887][T22152] input: syz1 as /devices/virtual/input/input86 [ 1360.100615][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1360.131912][T22137] bond0: (slave rose0): Enslaving as an active interface with an up link [ 1360.156363][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1360.166840][ T30] audit: type=1400 audit(1761888230.710:1156): avc: denied { connect } for pid=22136 comm="syz.9.4084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1360.207129][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1360.249871][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1360.325172][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1360.422913][ T24] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 1360.450991][ T30] audit: type=1326 audit(1761888230.972:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22139 comm="syz.3.4085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3470f8efc9 code=0x7fc00000 [ 1360.474542][ T24] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1360.478124][ T24] usb 2-1: USB disconnect, device number 74 [ 1360.493905][T15688] udevd[15688]: failed to send result of seq 26803 to main daemon: Connection refused [ 1360.554657][T22167] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4087'. [ 1360.680518][T22167] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4087'. [ 1361.566093][ T30] audit: type=1400 audit(1761888232.010:1158): avc: denied { setattr } for pid=22177 comm="chmod" name="resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1361.661330][T22187] (syz.7.4091,22187,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 1362.300334][T22187] (syz.7.4091,22187,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 1362.308779][T22187] (syz.7.4091,22187,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1362.317587][T22187] (syz.7.4091,22187,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 1363.172600][T22197] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1363.628424][ T30] audit: type=1400 audit(1761888233.937:1159): avc: denied { setopt } for pid=22208 comm="syz.9.4096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1363.791235][T22190] wlan0 speed is unknown, defaulting to 1000 [ 1364.082348][T11294] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1364.098207][T11294] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1364.126592][T11294] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1364.143187][ T9] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1364.159302][T11294] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1364.189455][T11294] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1364.217976][T11294] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1364.242886][T11294] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1364.273180][T11294] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1364.430743][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 1364.437597][ T9] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1364.461503][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1364.808427][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1364.815567][ T9] pvrusb2: ********** [ 1364.821688][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1364.832098][ T9] pvrusb2: Important functionality might not be entirely working. [ 1364.841889][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1364.855209][ T9] pvrusb2: ********** [ 1365.062498][ T2336] pvrusb2: Invalid write control endpoint [ 1365.178111][T22258] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1365.271899][ T2336] pvrusb2: Invalid write control endpoint [ 1365.277986][T22258] overlayfs: failed to set xattr on upper [ 1365.284650][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1365.294810][T22258] overlayfs: ...falling back to redirect_dir=nofollow. [ 1365.301785][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1365.311091][T22258] overlayfs: ...falling back to index=off. [ 1365.316994][T22258] overlayfs: ...falling back to uuid=null. [ 1365.326293][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1365.343589][T22258] overlayfs: ...falling back to xino=off. [ 1365.356230][ T2336] pvrusb2: Device being rendered inoperable [ 1365.362621][T22258] overlayfs: conflicting lowerdir path [ 1365.412239][T22220] pvrusb2: Attempted to execute control transfer when device not ok [ 1365.422444][T22262] pvrusb2: Attempted to execute control transfer when device not ok [ 1365.442042][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1366.311728][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 1366.424557][ T2336] pvrusb2: Attached sub-driver cx25840 [ 1366.440936][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1366.458758][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1366.493939][T18361] usb 10-1: USB disconnect, device number 8 [ 1366.573842][T22281] FAULT_INJECTION: forcing a failure. [ 1366.573842][T22281] name failslab, interval 1, probability 0, space 0, times 0 [ 1366.637197][T22281] CPU: 0 UID: 0 PID: 22281 Comm: syz.9.4106 Not tainted syzkaller #0 PREEMPT(full) [ 1366.637220][T22281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1366.637230][T22281] Call Trace: [ 1366.637236][T22281] [ 1366.637243][T22281] dump_stack_lvl+0x16c/0x1f0 [ 1366.637270][T22281] should_fail_ex+0x512/0x640 [ 1366.637289][T22281] ? __kmalloc_noprof+0xca/0x880 [ 1366.637315][T22281] should_failslab+0xc2/0x120 [ 1366.637335][T22281] __kmalloc_noprof+0xdd/0x880 [ 1366.637360][T22281] ? lsm_blob_alloc+0x68/0x90 [ 1366.637389][T22281] ? lsm_blob_alloc+0x68/0x90 [ 1366.637409][T22281] lsm_blob_alloc+0x68/0x90 [ 1366.637430][T22281] security_sk_alloc+0x30/0x270 [ 1366.637447][T22281] sk_prot_alloc+0xfb/0x2a0 [ 1366.637465][T22281] sk_alloc+0x36/0xc20 [ 1366.637478][T22281] inet_create+0x3a1/0x1040 [ 1366.637491][T22281] ? inet_create+0x93/0x1040 [ 1366.637505][T22281] __sock_create+0x338/0x8d0 [ 1366.637518][T22281] udp_sock_create4+0xa6/0x450 [ 1366.637534][T22281] ? __pfx_udp_sock_create4+0x10/0x10 [ 1366.637556][T22281] fou_create.constprop.0+0x752/0x910 [ 1366.637571][T22281] ? __pfx_fou_create.constprop.0+0x10/0x10 [ 1366.637584][T22281] ? parse_nl_config+0x15b/0xa90 [ 1366.637603][T22281] fou_nl_add_doit+0xcf/0x130 [ 1366.637615][T22281] ? __pfx_fou_nl_add_doit+0x10/0x10 [ 1366.637630][T22281] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1366.637649][T22281] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1366.637669][T22281] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1366.637687][T22281] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1366.637710][T22281] ? bpf_lsm_capable+0x9/0x10 [ 1366.637722][T22281] ? security_capable+0x7e/0x260 [ 1366.637740][T22281] genl_rcv_msg+0x55c/0x800 [ 1366.637752][T22281] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1366.637762][T22281] ? __pfx_fou_nl_add_doit+0x10/0x10 [ 1366.637780][T22281] netlink_rcv_skb+0x158/0x420 [ 1366.637795][T22281] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1366.637806][T22281] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1366.637829][T22281] ? netlink_deliver_tap+0x1ae/0xd30 [ 1366.637846][T22281] genl_rcv+0x28/0x40 [ 1366.637860][T22281] netlink_unicast+0x5aa/0x870 [ 1366.637877][T22281] ? __pfx_netlink_unicast+0x10/0x10 [ 1366.637897][T22281] netlink_sendmsg+0x8c8/0xdd0 [ 1366.637914][T22281] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1366.637935][T22281] ____sys_sendmsg+0xa98/0xc70 [ 1366.637955][T22281] ? copy_msghdr_from_user+0x10a/0x160 [ 1366.637968][T22281] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1366.637991][T22281] ___sys_sendmsg+0x134/0x1d0 [ 1366.638005][T22281] ? __pfx____sys_sendmsg+0x10/0x10 [ 1366.638017][T22281] ? __lock_acquire+0x622/0x1c90 [ 1366.638052][T22281] __sys_sendmsg+0x16d/0x220 [ 1366.638066][T22281] ? __pfx___sys_sendmsg+0x10/0x10 [ 1366.638089][T22281] do_syscall_64+0xcd/0xfa0 [ 1366.638106][T22281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1366.638116][T22281] RIP: 0033:0x7fdbb8b8efc9 [ 1366.638126][T22281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1366.638136][T22281] RSP: 002b:00007fdbb99ab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1366.638147][T22281] RAX: ffffffffffffffda RBX: 00007fdbb8de5fa0 RCX: 00007fdbb8b8efc9 [ 1366.638154][T22281] RDX: 0000000004000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 1366.638160][T22281] RBP: 00007fdbb99ab090 R08: 0000000000000000 R09: 0000000000000000 [ 1366.638166][T22281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1366.638172][T22281] R13: 00007fdbb8de6038 R14: 00007fdbb8de5fa0 R15: 00007ffe5d323548 [ 1366.638188][T22281] [ 1366.643037][T22284] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4103'. [ 1367.013046][T22284] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4103'. [ 1367.494943][ T30] audit: type=1400 audit(1761888237.556:1160): avc: denied { map } for pid=22294 comm="syz.3.4108" path="socket:[102964]" dev="sockfs" ino=102964 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1367.603479][ T30] audit: type=1400 audit(1761888237.593:1161): avc: denied { read accept } for pid=22294 comm="syz.3.4108" path="socket:[102964]" dev="sockfs" ino=102964 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1367.845147][T22298] netlink: 212916 bytes leftover after parsing attributes in process `syz.1.4109'. [ 1368.157087][T22307] netlink: 64 bytes leftover after parsing attributes in process `syz.9.4110'. [ 1368.279040][ T5825] Bluetooth: hci5: unexpected event for opcode 0x0000 [ 1368.899679][ T30] audit: type=1800 audit(1761888238.762:1162): pid=22313 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.4112" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1368.979694][T10107] block nbd0: Possible stuck request ffff888058847000: control (read@0,1024B). Runtime 570 seconds [ 1368.990678][T10107] block nbd0: Possible stuck request ffff8880588471c0: control (read@1024,1024B). Runtime 570 seconds [ 1369.001644][T10107] block nbd0: Possible stuck request ffff888058847380: control (read@2048,1024B). Runtime 570 seconds [ 1369.013845][T10107] block nbd0: Possible stuck request ffff888058847540: control (read@3072,1024B). Runtime 570 seconds [ 1369.941509][T22327] vcan0: tx drop: invalid da for name 0x0000000000000800 [ 1371.036117][T22348] netlink: 56 bytes leftover after parsing attributes in process `syz.7.4120'. [ 1371.428673][T22356] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4121'. [ 1371.439066][T22356] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4121'. [ 1371.529759][T22357] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1372.114933][T22357] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1372.134918][T22357] overlayfs: failed to look up (tracing) for ino (-66) [ 1372.277110][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1372.283622][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1372.707271][ T5825] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1372.717228][ T5825] Bluetooth: hci5: Injecting HCI hardware error event [ 1372.732535][ T5825] Bluetooth: hci5: hardware error 0x00 [ 1373.359311][T18645] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 1373.644771][T22395] netlink: 200 bytes leftover after parsing attributes in process `syz.3.4129'. [ 1373.756780][T22396] input: syz1 as /devices/virtual/input/input87 [ 1374.541256][T18645] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1374.552551][T18645] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1374.653388][ T9] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1374.878752][T18645] usb 10-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 1374.892945][T18645] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1374.920540][ T5825] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1374.929495][T18645] usb 10-1: config 0 descriptor?? [ 1374.942179][T22402] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4133'. [ 1374.951290][T22402] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4133'. [ 1374.972807][T22402] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4133'. [ 1374.973934][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 1375.007351][T22402] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4133'. [ 1375.007844][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1375.102305][ T9] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1375.133595][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1375.182512][ T9] usb 2-1: config 0 descriptor?? [ 1375.395590][T18645] waltop 0003:172F:0500.000D: hidraw0: USB HID v0.00 Device [HID 172f:0500] on usb-dummy_hcd.9-1/input0 [ 1375.413664][ T9] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1375.691841][T22411] usb usb8: usbfs: process 22411 (syz.3.4134) did not claim interface 0 before use [ 1375.701548][T22411] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1376.035425][T22381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1376.051989][T22381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1376.146745][ T30] audit: type=1400 audit(1761888252.649:1163): avc: denied { read } for pid=22414 comm="syz.2.4137" path="socket:[103261]" dev="sockfs" ino=103261 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1376.485798][T22422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4138'. [ 1376.600495][T22423] xt_hashlimit: max too large, truncated to 1048576 [ 1376.632173][T22423] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1376.837207][ T24] usb 2-1: USB disconnect, device number 75 [ 1376.893345][ T30] audit: type=1400 audit(1761888253.351:1164): avc: denied { listen } for pid=22426 comm="syz.3.4140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1377.684317][ T24] usb 10-1: USB disconnect, device number 9 [ 1378.234061][T22443] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1378.315338][T22443] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1378.353684][T22443] UDF-fs: Scanning with blocksize 512 failed [ 1378.361127][T22443] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1378.411538][T22443] UDF-fs: Scanning with blocksize 1024 failed [ 1378.445175][T22443] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1378.471996][T22443] UDF-fs: Scanning with blocksize 2048 failed [ 1378.503690][T22443] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1378.537720][T22443] UDF-fs: Scanning with blocksize 4096 failed [ 1379.228740][T22465] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4147'. [ 1379.456186][ T30] audit: type=1400 audit(1761888255.735:1165): avc: denied { map } for pid=22474 comm="syz.3.4149" path="/dev/sg0" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1379.520260][T22476] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1379.610993][ T30] audit: type=1400 audit(1761888255.753:1166): avc: denied { execute } for pid=22474 comm="syz.3.4149" path="/dev/sg0" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1379.669210][ T30] audit: type=1400 audit(1761888255.940:1167): avc: denied { write } for pid=22477 comm="syz.1.4150" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1381.295536][ T5931] usb 4-1: new low-speed USB device number 69 using dummy_hcd [ 1381.415730][T22517] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4159'. [ 1381.425318][T22517] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4159'. [ 1381.442982][T22517] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4159'. [ 1381.573700][T22517] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4159'. [ 1381.683036][ T5931] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 4096, setting to 8 [ 1381.724652][ T5931] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1381.741199][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1381.771577][T22522] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1381.782782][T22522] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1382.046547][ T5931] usb 4-1: string descriptor 0 read error: -71 [ 1382.053806][ T5931] hub 4-1:32.0: USB hub found [ 1382.060437][ T5931] hub 4-1:32.0: config failed, can't read hub descriptor (err -22) [ 1382.109802][ T5931] usb 4-1: USB disconnect, device number 69 [ 1382.524127][T22531] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4164'. [ 1382.627322][T22532] befs: (nullb0): invalid magic header [ 1384.277908][T22541] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4169'. [ 1384.566329][ T30] audit: type=1400 audit(1761888260.522:1168): avc: denied { transfer } for pid=22543 comm="syz.1.4168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1385.371966][T22553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4171'. [ 1385.706451][T22561] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1385.718004][T22561] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1385.780469][T22564] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1386.453393][T22568] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1386.862032][ T5931] IPVS: starting estimator thread 0... [ 1386.893434][T22571] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4176'. [ 1386.909881][T22571] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4176'. [ 1386.963217][T22569] IPVS: using max 47 ests per chain, 112800 per kthread [ 1387.273672][ T30] audit: type=1400 audit(1761888263.046:1169): avc: denied { read } for pid=22578 comm="syz.9.4179" path="socket:[103875]" dev="sockfs" ino=103875 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1387.297318][ C0] vkms_vblank_simulate: vblank timer overrun [ 1387.316660][T22575] tipc: Enabled bearer , priority 0 [ 1387.327840][T22575] syzkaller0: entered promiscuous mode [ 1387.335843][T22575] syzkaller0: entered allmulticast mode [ 1387.720793][T22575] tipc: Resetting bearer [ 1387.804537][T22574] tipc: Resetting bearer [ 1387.830397][T22574] tipc: Disabling bearer [ 1388.000724][ T9] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1388.097370][T22597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4185'. [ 1388.175731][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1388.235344][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1388.243734][ T9] usb 4-1: Product: syz [ 1388.248162][ T9] usb 4-1: Manufacturer: syz [ 1388.252817][ T9] usb 4-1: SerialNumber: syz [ 1388.264905][T22602] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1388.348472][T22603] befs: (nullb0): invalid magic header [ 1388.863031][T22612] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1388.874461][T22612] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1388.997751][T22614] vivid-003: disconnect [ 1389.003504][T22614] binder_alloc: 22613: pid 22613 spamming oneway? 1 buffers allocated for a total size of 4120 [ 1389.015531][T22613] vivid-003: reconnect [ 1389.141877][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1389.156191][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1389.166008][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1389.190011][ T9] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 1389.341227][T22620] input: syz1 as /devices/virtual/input/input88 [ 1390.137851][T22630] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4196'. [ 1390.146960][T22630] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4196'. [ 1391.021366][ T9] usb 4-1: USB disconnect, device number 70 [ 1391.087099][T22646] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1391.093626][T22646] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1391.123868][T22646] vhci_hcd vhci_hcd.0: Device attached [ 1391.153327][T22647] vhci_hcd: connection closed [ 1391.158055][ T64] vhci_hcd: stop threads [ 1391.170002][ T64] vhci_hcd: release socket [ 1391.174516][ T64] vhci_hcd: disconnect device [ 1391.447412][T22657] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 1391.464307][T22657] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4202'. [ 1392.076273][T22662] vivid-004: disconnect [ 1392.081089][T22661] binder_alloc: 22660: pid 22660 spamming oneway? 1 buffers allocated for a total size of 4120 [ 1392.092334][T22660] vivid-004: reconnect [ 1392.173664][T22657] Process accounting resumed [ 1392.219614][T12513] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1392.230082][T12513] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1392.239984][T12513] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1392.254286][T12513] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1392.261928][T12513] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1392.286969][T22667] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4205'. [ 1392.307286][T22667] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4205'. [ 1392.339132][T22665] wlan0 speed is unknown, defaulting to 1000 [ 1393.073228][T22665] chnl_net:caif_netlink_parms(): no params data found [ 1393.176741][T22665] bridge0: port 1(bridge_slave_0) entered blocking state [ 1393.184287][T22665] bridge0: port 1(bridge_slave_0) entered disabled state [ 1393.191653][T22665] bridge_slave_0: entered allmulticast mode [ 1393.198637][T22665] bridge_slave_0: entered promiscuous mode [ 1393.206087][T22665] bridge0: port 2(bridge_slave_1) entered blocking state [ 1393.213226][T22665] bridge0: port 2(bridge_slave_1) entered disabled state [ 1393.220907][T22665] bridge_slave_1: entered allmulticast mode [ 1393.227657][T22665] bridge_slave_1: entered promiscuous mode [ 1393.255211][T22665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1393.266477][T22665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1393.292468][T22665] team0: Port device team_slave_0 added [ 1393.300182][T22665] team0: Port device team_slave_1 added [ 1393.320722][T22665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1393.328360][T22665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1393.356455][T22665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1393.368874][T22665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1393.377592][T22665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1393.403932][T22665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1393.414623][ T5931] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1393.441825][T22665] hsr_slave_0: entered promiscuous mode [ 1393.449571][T22665] hsr_slave_1: entered promiscuous mode [ 1393.455837][T22665] debugfs: 'hsr0' already exists in 'hsr' [ 1393.461601][T22665] Cannot create hsr debugfs directory [ 1393.649003][ T5931] usb 10-1: Using ep0 maxpacket: 32 [ 1393.661579][ T5931] usb 10-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1393.678276][ T5931] usb 10-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1393.691910][ T5931] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1393.702621][ T5931] usb 10-1: New USB device found, idVendor=0079, idProduct=1803, bcdDevice= 0.00 [ 1393.713375][ T5931] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1393.747866][ T5931] usb 10-1: config 0 descriptor?? [ 1394.432187][ T5825] Bluetooth: hci6: command tx timeout [ 1394.653523][T18645] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1394.722933][ T5931] usbhid 10-1:0.0: can't add hid device: -71 [ 1394.729546][ T9] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1394.777133][ T5931] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1394.843587][ T5931] usb 10-1: USB disconnect, device number 10 [ 1394.890802][T18645] usb 2-1: Using ep0 maxpacket: 32 [ 1394.904568][T18645] usb 2-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1394.918723][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1394.928077][T22665] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1394.970704][ T9] usb 4-1: config 6 has an invalid interface number: 2 but max is 0 [ 1394.979022][T18645] usb 2-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1394.999913][ T9] usb 4-1: config 6 has no interface number 0 [ 1395.027833][T22665] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1395.053367][T18645] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1395.060513][ T9] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1395.073380][T22665] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1395.097698][T18645] usb 2-1: New USB device found, idVendor=0079, idProduct=1803, bcdDevice= 0.00 [ 1395.107619][ T9] usb 4-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1395.120195][T18645] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1395.124994][T22665] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1395.136018][ T9] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1395.154265][T18645] usb 2-1: config 0 descriptor?? [ 1395.163851][ T9] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1395.271251][ T9] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1395.282088][ T9] usb 4-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 1395.366455][T22717] wlan0 speed is unknown, defaulting to 1000 [ 1395.376854][ T9] usb 4-1: Product: syz [ 1395.397108][ T9] usb 4-1: Manufacturer: syz [ 1395.416216][ T9] usb 4-1: SerialNumber: syz [ 1395.489019][ T9] hso 4-1:6.2: Failed to find BULK IN ep [ 1395.822125][T22705] mkiss: ax0: crc mode is auto. [ 1395.873771][T22665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1395.963190][T18361] usb 4-1: USB disconnect, device number 71 [ 1395.971164][T22665] 8021q: adding VLAN 0 to HW filter on device team0 [ 1396.020272][T11290] bridge0: port 1(bridge_slave_0) entered blocking state [ 1396.027420][T11290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1396.089582][T18645] usbhid 2-1:0.0: can't add hid device: -71 [ 1396.095581][T18645] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1396.208021][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1396.215132][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1396.408464][T18645] usb 2-1: USB disconnect, device number 76 [ 1396.462575][T22744] fuse: Bad value for 'fd' [ 1396.653905][ T5825] Bluetooth: hci6: command tx timeout [ 1396.671211][T22748] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1396.699639][T22754] bond1: option mode: unable to set because the bond device is up [ 1396.933713][T22752] cgroup: fork rejected by pids controller in /syz9 [ 1397.266643][T22665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1397.808427][T23635] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4226'. [ 1398.356421][T23645] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 1398.370192][T23645] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 1398.393912][T23645] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 1398.405460][T23645] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 1398.422146][T23645] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 1398.433240][T23645] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 1398.450334][T23645] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 1398.461256][T23645] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 1398.470789][T23645] UDF-fs: warning (device nbd9): udf_fill_super: No partition found (1) [ 1398.618960][T23647] usb usb8: usbfs: process 23647 (syz.7.4228) did not claim interface 0 before use [ 1398.664026][T23617] wlan0 speed is unknown, defaulting to 1000 [ 1398.784923][T23650] fuse: Bad value for 'fd' [ 1398.879055][ T5825] Bluetooth: hci6: command tx timeout [ 1399.083387][T23654] tipc: New replicast peer: 255.255.255.255 [ 1399.090383][T23654] tipc: Enabled bearer , priority 10 [ 1399.146911][T23656] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4231'. [ 1399.194935][T22665] veth0_vlan: entered promiscuous mode [ 1399.210717][T23656] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4231'. [ 1399.222153][T22665] veth1_vlan: entered promiscuous mode [ 1399.286693][T22665] veth0_macvtap: entered promiscuous mode [ 1399.309704][T22665] veth1_macvtap: entered promiscuous mode [ 1399.343948][T22665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1399.376671][T22665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1399.405995][T11295] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.424439][T11295] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.435560][T11295] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.459646][T11295] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.479537][T18645] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1399.575375][T18148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1399.589417][T18148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1399.630752][T23671] dlm: no locking on control device [ 1399.674850][T23673] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4230'. [ 1399.681978][T18148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1399.693269][T23673] tipc: Disabling bearer [ 1399.696459][T18645] usb 10-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1399.733684][T18148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1399.742199][T18645] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1399.751543][T18645] usb 10-1: Product: syz [ 1399.757922][T18645] usb 10-1: Manufacturer: syz [ 1399.769926][T18645] usb 10-1: SerialNumber: syz [ 1399.777149][T18645] usb 10-1: config 0 descriptor?? [ 1399.783693][T18645] hub 10-1:0.0: bad descriptor, ignoring hub [ 1399.789900][T18645] hub 10-1:0.0: probe with driver hub failed with error -5 [ 1400.013566][T18645] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1400.039082][T23685] netlink: 'syz.4.4233': attribute type 1 has an invalid length. [ 1400.047904][T18645] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1400.063138][T23685] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4233'. [ 1400.097058][T18645] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1400.118621][T18645] usb 10-1: media controller created [ 1400.154475][T18645] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1400.284127][T18645] DVB: Unable to find symbol dib7000p_attach() [ 1400.290565][T18645] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1400.452359][T18645] rc_core: IR keymap rc-dib0700-rc5 not found [ 1400.462702][T18645] Registered IR keymap rc-empty [ 1400.467785][T18645] dvb-usb: could not initialize remote control. [ 1400.474148][T18645] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1400.730099][T23702] input: syz1 as /devices/virtual/input/input90 [ 1401.102515][ T5825] Bluetooth: hci6: command tx timeout [ 1401.183539][ T30] audit: type=1400 audit(1761888276.015:1170): avc: denied { read } for pid=23655 comm="syz.9.4231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1401.513174][T23711] FAULT_INJECTION: forcing a failure. [ 1401.513174][T23711] name failslab, interval 1, probability 0, space 0, times 0 [ 1401.583213][T23714] dlm: non-version read from control device 8224 [ 1401.727311][T10107] block nbd0: Possible stuck request ffff888058847000: control (read@0,1024B). Runtime 600 seconds [ 1401.738398][T10107] block nbd0: Possible stuck request ffff8880588471c0: control (read@1024,1024B). Runtime 600 seconds [ 1401.751370][T10107] block nbd0: Possible stuck request ffff888058847380: control (read@2048,1024B). Runtime 600 seconds [ 1401.751702][T18645] usb 10-1: USB disconnect, device number 11 [ 1401.762368][T10107] block nbd0: Possible stuck request ffff888058847540: control (read@3072,1024B). Runtime 600 seconds [ 1401.774377][T23711] CPU: 1 UID: 0 PID: 23711 Comm: syz.3.4236 Not tainted syzkaller #0 PREEMPT(full) [ 1401.774400][T23711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1401.774408][T23711] Call Trace: [ 1401.774414][T23711] [ 1401.774420][T23711] dump_stack_lvl+0x16c/0x1f0 [ 1401.774447][T23711] should_fail_ex+0x512/0x640 [ 1401.774465][T23711] ? fs_reclaim_acquire+0xae/0x150 [ 1401.774485][T23711] should_failslab+0xc2/0x120 [ 1401.774503][T23711] __kmalloc_noprof+0xdd/0x880 [ 1401.774524][T23711] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1401.774547][T23711] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1401.774563][T23711] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1401.774583][T23711] ? tomoyo_profile+0x47/0x60 [ 1401.774604][T23711] tomoyo_path_number_perm+0x245/0x580 [ 1401.774626][T23711] ? tomoyo_path_number_perm+0x237/0x580 [ 1401.774650][T23711] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1401.774674][T23711] ? find_held_lock+0x2b/0x80 [ 1401.774720][T23711] ? find_held_lock+0x2b/0x80 [ 1401.774738][T23711] ? hook_file_ioctl_common+0x145/0x410 [ 1401.774762][T23711] ? __fget_files+0x20e/0x3c0 [ 1401.774782][T23711] security_file_ioctl+0x9b/0x240 [ 1401.774800][T23711] __x64_sys_ioctl+0xb7/0x210 [ 1401.774823][T23711] do_syscall_64+0xcd/0xfa0 [ 1401.774846][T23711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1401.774860][T23711] RIP: 0033:0x7f3470f8efc9 [ 1401.774873][T23711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1401.774887][T23711] RSP: 002b:00007f3471ee8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1401.774902][T23711] RAX: ffffffffffffffda RBX: 00007f34711e5fa0 RCX: 00007f3470f8efc9 [ 1401.774912][T23711] RDX: 0000200000000140 RSI: 00000000000007b1 RDI: 0000000000000003 [ 1401.774921][T23711] RBP: 00007f3471ee8090 R08: 0000000000000000 R09: 0000000000000000 [ 1401.774930][T23711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1401.774939][T23711] R13: 00007f34711e6038 R14: 00007f34711e5fa0 R15: 00007ffdc9a81958 [ 1401.774962][T23711] [ 1401.774969][T23711] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1402.068190][T23721] FAULT_INJECTION: forcing a failure. [ 1402.068190][T23721] name failslab, interval 1, probability 0, space 0, times 0 [ 1402.111788][T23721] CPU: 1 UID: 0 PID: 23721 Comm: syz.1.4238 Not tainted syzkaller #0 PREEMPT(full) [ 1402.111812][T23721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1402.111822][T23721] Call Trace: [ 1402.111828][T23721] [ 1402.111835][T23721] dump_stack_lvl+0x16c/0x1f0 [ 1402.111866][T23721] should_fail_ex+0x512/0x640 [ 1402.111887][T23721] ? fs_reclaim_acquire+0xae/0x150 [ 1402.111909][T23721] should_failslab+0xc2/0x120 [ 1402.111930][T23721] __kmalloc_noprof+0xdd/0x880 [ 1402.111954][T23721] ? tomoyo_encode2+0x100/0x3e0 [ 1402.111979][T23721] ? tomoyo_encode2+0x100/0x3e0 [ 1402.111997][T23721] tomoyo_encode2+0x100/0x3e0 [ 1402.112019][T23721] tomoyo_encode+0x29/0x50 [ 1402.112037][T23721] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1402.112065][T23721] tomoyo_path_number_perm+0x245/0x580 [ 1402.112091][T23721] ? tomoyo_path_number_perm+0x237/0x580 [ 1402.112120][T23721] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1402.112148][T23721] ? lockdep_hardirqs_on+0x7c/0x110 [ 1402.112198][T23721] ? find_held_lock+0x2b/0x80 [ 1402.112220][T23721] ? hook_file_ioctl_common+0x145/0x410 [ 1402.112247][T23721] ? __fget_files+0x20e/0x3c0 [ 1402.112269][T23721] security_file_ioctl+0x9b/0x240 [ 1402.112290][T23721] __x64_sys_ioctl+0xb7/0x210 [ 1402.112316][T23721] do_syscall_64+0xcd/0xfa0 [ 1402.112342][T23721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1402.112360][T23721] RIP: 0033:0x7fb4f258efc9 [ 1402.112374][T23721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1402.112390][T23721] RSP: 002b:00007fb4f3340038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1402.112408][T23721] RAX: ffffffffffffffda RBX: 00007fb4f27e6180 RCX: 00007fb4f258efc9 [ 1402.112420][T23721] RDX: 00002000000000c0 RSI: 00000000c018643a RDI: 0000000000000009 [ 1402.112431][T23721] RBP: 00007fb4f3340090 R08: 0000000000000000 R09: 0000000000000000 [ 1402.112441][T23721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1402.112451][T23721] R13: 00007fb4f27e6218 R14: 00007fb4f27e6180 R15: 00007fffad62cde8 [ 1402.112476][T23721] [ 1402.117619][T23721] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1402.352161][T18645] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1402.390950][T23727] loop2: detected capacity change from 0 to 7 [ 1402.398042][T23727] Dev loop2: unable to read RDB block 7 [ 1402.403578][T23727] loop2: AHDI p1 p2 p3 [ 1402.409780][T23727] loop2: partition table partially beyond EOD, truncated [ 1402.416823][T23727] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1402.424076][T23727] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1402.526258][ T9] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 1402.713746][T23735] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4241'. [ 1402.857719][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1402.869706][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1402.902375][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1402.925383][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1402.937574][ T9] usb 5-1: SerialNumber: syz [ 1403.034237][ T9] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 1403.045069][ T9] usb-storage 5-1:1.0: USB Mass Storage device detected [ 1403.055787][ T9] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1403.070878][ T9] scsi host1: usb-storage 5-1:1.0 [ 1403.185447][ T30] audit: type=1400 audit(1761888277.913:1171): avc: denied { bind } for pid=23736 comm="syz.3.4242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1403.692097][ T30] audit: type=1400 audit(1761888277.922:1172): avc: denied { node_bind } for pid=23736 comm="syz.3.4242" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 1404.061154][T23762] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1404.329614][T23762] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1404.349602][T23762] overlayfs: failed to look up (tracing) for ino (-66) [ 1405.075769][T18645] usb 5-1: USB disconnect, device number 25 [ 1405.372439][T23779] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1405.379568][ C0] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1407.174038][ T30] audit: type=1400 audit(1761888281.625:1173): avc: denied { accept } for pid=23784 comm="syz.4.4250" lport=45190 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1407.284428][T23792] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1407.898262][T23809] MPI: mpi too large (130952 bits) [ 1408.379101][ T24] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1408.641702][ T24] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1408.685227][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1408.694619][ T24] usb 2-1: Product: syz [ 1408.698933][ T24] usb 2-1: Manufacturer: syz [ 1408.703611][ T24] usb 2-1: SerialNumber: syz [ 1409.272810][T23840] --map-set only usable from mangle table [ 1409.513093][ T24] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1409.526323][T23845] netlink: 'syz.7.4260': attribute type 7 has an invalid length. [ 1409.534604][T23845] usb usb5: usbfs: process 23845 (syz.7.4260) did not claim interface 0 before use [ 1409.618357][ T24] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1409.652671][ T24] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1409.685828][ T24] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 1410.102868][T23853] vcan0: tx drop: invalid da for name 0x0000000000000800 [ 1411.095988][T23887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4267'. [ 1411.111093][T23889] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1411.672756][ T5941] usb 2-1: USB disconnect, device number 77 [ 1411.859635][T23914] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4270'. [ 1412.214856][ T9] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1412.388661][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 1412.407209][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1412.424536][ T9] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1412.435279][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1412.446258][ T9] usb 10-1: config 0 descriptor?? [ 1412.636893][T23940] loop8: detected capacity change from 0 to 1 [ 1412.711304][T23940] Dev loop8: unable to read RDB block 1 [ 1412.730533][T23940] loop8: unable to read partition table [ 1412.736456][T23940] loop8: partition table beyond EOD, truncated [ 1412.744155][T23940] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1413.043745][ T9] mcp2221 0003:04D8:00DD.000E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.9-1/input0 [ 1414.667782][ T9] usb 10-1: USB disconnect, device number 12 [ 1414.799497][T23973] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4282'. [ 1415.227231][T18645] IPVS: starting estimator thread 0... [ 1415.239813][T23983] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1415.297131][T23986] netlink: 'syz.9.4284': attribute type 1 has an invalid length. [ 1415.327884][T23984] IPVS: using max 47 ests per chain, 112800 per kthread [ 1415.328733][T23986] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1415.363958][T23986] bond1: (slave geneve2): making interface the new active one [ 1415.373306][T23986] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1415.427508][ T9] usb 4-1: new low-speed USB device number 72 using dummy_hcd [ 1415.456546][T23989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1415.471350][T23989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1415.483022][T23989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1415.494653][T23989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1415.506600][T23989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1415.520822][T23989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1415.606434][ T9] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 4096, setting to 8 [ 1415.617645][ T9] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1415.644781][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1415.723046][T23991] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4286'. [ 1415.988763][T23996] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4287'. [ 1416.739331][T24011] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4292'. [ 1417.184676][ T9] usb 4-1: string descriptor 0 read error: -71 [ 1417.214875][ T9] hub 4-1:32.0: USB hub found [ 1417.248413][ T9] hub 4-1:32.0: config failed, can't read hub descriptor (err -22) [ 1417.460230][ T9] usb 4-1: USB disconnect, device number 72 [ 1417.877037][T24034] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1418.539607][T24030] wlan0 speed is unknown, defaulting to 1000 [ 1418.984760][ T24] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1419.078239][T24047] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1419.246537][T24041] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1419.256666][T24041] overlayfs: failed to look up (tracing) for ino (-66) [ 1419.362587][ T24] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1419.372246][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1419.380758][ T24] usb 4-1: Product: syz [ 1419.385026][ T24] usb 4-1: Manufacturer: syz [ 1419.389662][ T24] usb 4-1: SerialNumber: syz [ 1419.425066][ T24] usb 4-1: config 0 descriptor?? [ 1419.441899][T24051] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4303'. [ 1419.476933][ T5941] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1419.649860][ T5941] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1419.661445][ T5941] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1419.671652][ T5941] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1419.682886][ T5941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1419.696720][T24049] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1419.706212][ T5941] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1419.840201][T22215] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1419.876787][ T24] usb 4-1: Firmware: major: 59, minor: 235, hardware type: UNKNOWN (198) [ 1420.022087][T22215] usb 10-1: Using ep0 maxpacket: 16 [ 1420.037695][T22215] usb 10-1: config 252 has an invalid interface number: 15 but max is 0 [ 1420.075330][T22215] usb 10-1: config 252 has no interface number 0 [ 1420.099662][ T24] usb 4-1: no permanent extended address found, random address set [ 1420.107681][T22215] usb 10-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1420.121423][ T24] usb 4-1: atusb_probe: initialization failed, error = -524 [ 1420.130798][T22215] usb 10-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 1420.147707][ T24] atusb 4-1:0.0: probe with driver atusb failed with error -524 [ 1420.155730][T22215] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1420.167660][T22215] usb 10-1: Product: syz [ 1420.175250][T22215] usb 10-1: Manufacturer: syz [ 1420.180160][T22215] usb 10-1: SerialNumber: syz [ 1420.198750][T22215] usb 10-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1420.354331][T22215] usb 4-1: USB disconnect, device number 73 [ 1420.406564][T11295] usb 10-1: Failed to submit usb control message: -71 [ 1420.414203][ T24] usb 10-1: USB disconnect, device number 13 [ 1420.425911][T11295] usb 10-1: unable to send the bmi data to the device: -71 [ 1420.439387][T11295] usb 10-1: unable to get target info from device [ 1420.450914][T11295] usb 10-1: could not get target info (-71) [ 1420.457095][T11295] usb 10-1: could not probe fw (-71) [ 1420.672391][T24067] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4305'. [ 1420.682036][T24067] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4305'. [ 1421.134356][T24072] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4307'. [ 1421.339635][ T24] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1421.339774][T24074] vivid-004: disconnect [ 1421.367006][T24074] binder_alloc: 24073: pid 24073 spamming oneway? 1 buffers allocated for a total size of 4120 [ 1421.384446][T24073] vivid-004: reconnect [ 1421.584061][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 1421.591101][ T24] usb 4-1: config 0 has an invalid interface number: 182 but max is 0 [ 1421.600583][ T24] usb 4-1: config 0 has no interface number 0 [ 1421.607045][ T24] usb 4-1: config 0 interface 182 has no altsetting 0 [ 1421.617237][ T24] usb 4-1: New USB device found, idVendor=05e9, idProduct=0009, bcdDevice=73.db [ 1421.626441][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.708440][T24080] befs: (nullb0): invalid magic header [ 1422.012777][ T24] usb 4-1: Product: syz [ 1422.017500][ T24] usb 4-1: Manufacturer: syz [ 1422.022250][ T24] usb 4-1: SerialNumber: syz [ 1422.053296][ T24] usb 4-1: config 0 descriptor?? [ 1422.067625][ T24] hub 4-1:0.182: bad descriptor, ignoring hub [ 1422.073989][ T24] hub 4-1:0.182: probe with driver hub failed with error -5 [ 1422.117486][T24081] wlan0 speed is unknown, defaulting to 1000 [ 1422.233826][ T5941] usb 2-1: USB disconnect, device number 78 [ 1422.240101][ T31] INFO: task syz.8.3745:20748 blocked for more than 143 seconds. [ 1422.252882][ T31] Not tainted syzkaller #0 [ 1422.276739][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1422.337962][ T24] kaweth 4-1:0.182: Firmware present in device. [ 1422.498915][ T31] task:syz.8.3745 state:D stack:24968 pid:20748 tgid:20746 ppid:18356 task_flags:0x400140 flags:0x00080003 [ 1422.589691][ T31] Call Trace: [ 1422.611452][ T31] [ 1422.614655][ T24] kaweth 4-1:0.182: Statistics collection: 0 [ 1422.620677][ T31] __schedule+0x1190/0x5de0 [ 1422.625294][ T31] ? __pfx___schedule+0x10/0x10 [ 1422.630212][ T24] kaweth 4-1:0.182: Multicast filter limit: 0 [ 1422.642413][ T31] ? find_held_lock+0x2b/0x80 [ 1422.663798][ T24] kaweth 4-1:0.182: MTU: 0 [ 1422.676353][ T31] ? schedule+0x2d7/0x3a0 [ 1422.685137][ T31] schedule+0xe7/0x3a0 [ 1422.686662][ T24] kaweth 4-1:0.182: Read MAC address 00:00:00:00:00:00 [ 1422.690446][ T31] io_schedule+0xbf/0x130 [ 1422.711382][ T31] folio_wait_bit_common+0x3d5/0x9e0 [ 1422.723075][ T31] ? folio_wait_bit_common+0x13a/0x9e0 [ 1422.733439][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1422.739379][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 1422.746157][ T31] ? __pfx___might_resched+0x10/0x10 [ 1422.752190][ T31] ? compaction_free+0x148/0x3c0 [ 1422.757844][ T31] migrate_pages_batch+0x1487/0x3bb0 [ 1422.763646][ T31] ? __pfx_compaction_alloc+0x10/0x10 [ 1422.769646][ T31] ? __pfx_compaction_free+0x10/0x10 [ 1422.775144][ T31] ? __pfx_migrate_pages_batch+0x10/0x10 [ 1422.780897][ T31] migrate_pages_sync+0x4c5/0x8a0 [ 1422.787509][ T31] ? __pfx_compaction_alloc+0x10/0x10 [ 1422.793977][ T31] ? __pfx_compaction_free+0x10/0x10 [ 1422.801827][ T31] ? css_rstat_updated+0x1c2/0x510 [ 1422.807519][ T31] ? __pfx_migrate_pages_sync+0x10/0x10 [ 1422.813128][ T31] ? __pfx_css_rstat_updated+0x10/0x10 [ 1422.818774][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1422.824241][ T31] migrate_pages+0x1b5f/0x23a0 [ 1422.831343][ T31] ? __pfx_compaction_alloc+0x10/0x10 [ 1422.840762][ T31] ? __pfx_compaction_free+0x10/0x10 [ 1422.846636][ T31] ? __pfx_migrate_pages+0x10/0x10 [ 1422.852966][ T31] ? __pfx_isolate_migratepages_block+0x10/0x10 [ 1422.863756][ T31] ? pfn_to_online_page+0x1de/0x560 [ 1422.874535][ T31] compact_zone+0x2018/0x4750 [ 1422.880068][ T31] ? __pfx_compact_zone+0x10/0x10 [ 1422.885325][ T31] ? __flush_work+0xa48/0xcc0 [ 1422.890335][ T31] compact_node+0x1a3/0x2c0 [ 1422.896129][ T31] ? __pfx_compact_node+0x10/0x10 [ 1422.907074][ T31] ? __lru_add_drain_all+0xec/0x6f0 [ 1422.918862][ T31] sysctl_compaction_handler+0x141/0x210 [ 1422.925522][ T31] proc_sys_call_handler+0x445/0x570 [ 1422.934579][ T31] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 1422.940460][ T31] ? splice_from_pipe_next+0x1f7/0x5d0 [ 1422.950036][ T31] iter_file_splice_write+0xa24/0x12e0 [ 1422.960959][ T31] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1422.971622][ T31] ? __pfx_copy_splice_read+0x10/0x10 [ 1422.983225][ T31] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1422.993182][ T31] direct_splice_actor+0x192/0x6c0 [ 1423.000489][ T31] splice_direct_to_actor+0x345/0xa30 [ 1423.006315][ T31] ? __pfx_direct_splice_actor+0x10/0x10 [ 1423.014752][ T31] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1423.025859][ T31] do_splice_direct+0x174/0x240 [ 1423.036319][ T31] ? __pfx_do_splice_direct+0x10/0x10 [ 1423.047058][ T31] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1423.054009][ T31] ? rw_verify_area+0xcf/0x6c0 [ 1423.058890][ T31] do_sendfile+0xb06/0xe50 [ 1423.068188][ T31] ? __pfx_do_sendfile+0x10/0x10 [ 1423.074441][ T31] __x64_sys_sendfile64+0x154/0x220 [ 1423.079718][ T31] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1423.090331][ T31] do_syscall_64+0xcd/0xfa0 [ 1423.100999][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1423.107574][ T31] RIP: 0033:0x7f4ad5d8efc9 [ 1423.112044][ T31] RSP: 002b:00007f4ad3ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1423.122539][ T31] RAX: ffffffffffffffda RBX: 00007f4ad5fe6090 RCX: 00007f4ad5d8efc9 [ 1423.133313][ T31] RDX: 00002000000000c0 RSI: 0000000000000008 RDI: 0000000000000009 [ 1423.144090][ T31] RBP: 00007f4ad5e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1423.154867][ T31] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000000 [ 1423.165655][ T31] R13: 00007f4ad5fe6128 R14: 00007f4ad5fe6090 R15: 00007ffc4f34fef8 [ 1423.173777][ T31] [ 1423.177341][ T31] [ 1423.177341][ T31] Showing all locks held in the system: [ 1423.185626][ T31] 5 locks held by kworker/1:0/24: [ 1423.199119][ T31] #0: ffff888022aad948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1423.210909][ T31] #1: ffffc900001e7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1423.222241][ T31] #2: ffff888145b6d198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fe0 [ 1423.231221][ T31] #3: ffff888021fea198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 1423.242378][ T24] kaweth 4-1:0.182: Error setting receive filter [ 1423.243121][ T31] #4: ffff888054af3160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 1423.249181][ T24] kaweth 4-1:0.182: probe with driver kaweth failed with error -5 [ 1423.258101][ T31] 1 lock held by khungtaskd/31: [ 1423.271388][ T31] #0: ffffffff8e3c4460 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1423.281397][ T31] 2 locks held by getty/5570: [ 1423.286268][ T31] #0: ffff88814e1c50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1423.296621][ T24] usb 4-1: USB disconnect, device number 74 [ 1423.296632][ T31] #1: ffffc9000362c2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 1423.313151][ T31] 1 lock held by udevd/14192: [ 1423.317915][ T31] #0: ffff888056eb8358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1423.327254][ T31] 3 locks held by kworker/u8:1/18148: [ 1423.332618][ T31] #0: ffff88813ff29948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1423.343968][ T31] #1: ffffc9000cda7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1423.355383][ T31] #2: ffffffff900e6848 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 1423.364567][ T31] 1 lock held by syz.8.3745/20748: [ 1423.369713][ T31] #0: ffff8880297ba420 (sb_writers#3){.+.+}-{0:0}, at: splice_direct_to_actor+0x345/0xa30 [ 1423.379722][ T31] 6 locks held by syz.2.4137/22418: [ 1423.384911][ T31] #0: ffff8880322b7278 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 1423.393987][ T31] #1: ffff888035f1c420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1423.402989][ T31] #2: ffff88803e768488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 1423.412767][ T31] #3: ffff888140e81878 (kn->active#71){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 1423.422906][ T31] #4: ffffffff8e287968 (system_transition_mutex){+.+.}-{4:4}, at: software_resume+0x65/0x4e0 [ 1423.433317][ T31] #5: ffff888056eb8358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xa2/0xe40 [ 1423.442731][ T31] 2 locks held by syz.1.4311/24084: [ 1423.448141][ T31] #0: ffffffff900e6848 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 1423.458032][ T31] #1: ffffffff8e3cf9f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 1423.468133][ T31] [ 1423.470468][ T31] ============================================= [ 1423.470468][ T31] [ 1423.479056][ T31] NMI backtrace for cpu 0 [ 1423.479068][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1423.479088][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1423.479098][ T31] Call Trace: [ 1423.479103][ T31] [ 1423.479109][ T31] dump_stack_lvl+0x116/0x1f0 [ 1423.479138][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1423.479155][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 1423.479177][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1423.479200][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1423.479221][ T31] watchdog+0xf3f/0x1170 [ 1423.479243][ T31] ? rcu_is_watching+0x12/0xc0 [ 1423.479264][ T31] ? __pfx_watchdog+0x10/0x10 [ 1423.479282][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1423.479306][ T31] ? __kthread_parkme+0x19e/0x250 [ 1423.479325][ T31] ? __pfx_watchdog+0x10/0x10 [ 1423.479342][ T31] kthread+0x3c5/0x780 [ 1423.479355][ T31] ? __pfx_kthread+0x10/0x10 [ 1423.479369][ T31] ? rcu_is_watching+0x12/0xc0 [ 1423.479385][ T31] ? __pfx_kthread+0x10/0x10 [ 1423.479398][ T31] ret_from_fork+0x675/0x7d0 [ 1423.479410][ T31] ? __pfx_kthread+0x10/0x10 [ 1423.479422][ T31] ret_from_fork_asm+0x1a/0x30 [ 1423.479451][ T31] [ 1423.479461][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1423.606838][ C1] NMI backtrace for cpu 1 [ 1423.606852][ C1] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) [ 1423.606870][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1423.606880][ C1] Workqueue: wg-crypt-wg2 wg_packet_tx_worker [ 1423.606904][ C1] RIP: 0010:wg_packet_tx_worker+0x151/0x810 [ 1423.606923][ C1] Code: fb 83 fb 01 0f 85 99 05 00 00 e8 1a 4c 6f fb 4c 89 f7 e8 e2 cd ff ff 4c 89 f7 e8 ba cb ff ff 4c 89 f8 48 c1 e8 03 80 3c 28 00 <0f> 85 2c 06 00 00 49 8b 1f 45 31 ed e8 ee 4b 6f fb 49 8d 7f 70 48 [ 1423.606936][ C1] RSP: 0018:ffffc900001e7be8 EFLAGS: 00000246 [ 1423.606946][ C1] RAX: 1ffff1100cc47078 RBX: 0000000000000001 RCX: ffffffff81a8f863 [ 1423.606955][ C1] RDX: ffff88801d6f8000 RSI: ffffffff81a8f815 RDI: 0000000000000001 [ 1423.606965][ C1] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1423.606973][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000001 [ 1423.606981][ C1] R13: 0000000000000000 R14: ffff888051884f40 R15: ffff8880662383c0 [ 1423.606989][ C1] FS: 0000000000000000(0000) GS:ffff888124b0a000(0000) knlGS:0000000000000000 [ 1423.607004][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1423.607012][ C1] CR2: 00007ffe5d321ff8 CR3: 0000000087b9a000 CR4: 00000000003526f0 [ 1423.607022][ C1] Call Trace: [ 1423.607026][ C1] [ 1423.607035][ C1] process_one_work+0x9cf/0x1b70 [ 1423.607053][ C1] ? __pfx_wg_packet_encrypt_worker+0x10/0x10 [ 1423.607073][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1423.607090][ C1] ? assign_work+0x1a0/0x250 [ 1423.607104][ C1] worker_thread+0x6c8/0xf10 [ 1423.607122][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1423.607137][ C1] kthread+0x3c5/0x780 [ 1423.607150][ C1] ? __pfx_kthread+0x10/0x10 [ 1423.607163][ C1] ? rcu_is_watching+0x12/0xc0 [ 1423.607179][ C1] ? __pfx_kthread+0x10/0x10 [ 1423.607192][ C1] ret_from_fork+0x675/0x7d0 [ 1423.607205][ C1] ? __pfx_kthread+0x10/0x10 [ 1423.607217][ C1] ret_from_fork_asm+0x1a/0x30 [ 1423.607244][ C1]