last executing test programs: 3m10.081184878s ago: executing program 4 (id=443): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000380)={{0x2, 0x4e22, @rand_addr=0x64010100}, {0x0, @multicast}, 0x44, {0x2, 0x4e20, @local}, 'syz_tun\x00'}) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000400)=[@mss, @sack_perm, @sack_perm, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp, @mss={0x2, 0x4}], 0x8) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x100000ee) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x434, 0x3d, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0x1c, 0x1, 0x0, 0x1, [@nested={0x18, 0x10, 0x0, 0x1, [@typed={0xc, 0xf, 0x0, 0x0, @u64=0x9}, @typed={0x8, 0x1, 0x0, 0x0, @ipv4=@multicast1}]}]}, @generic="1bd32fc1df86c5716a50cf33dc616a6b2aed847870e5def24b9e51601d4f24359e6c25403a710d038458b034f825dd3459fd786fc694af04d8e21b8848ae754f598a7a2dffecdd65df0f80f4113f3801b78ffd525e80489c0575dcf40631171c7e09e9c6a5f8a2a1e30fd23a2d8ce41f094ec19c54cde2a94a887bb233cf5e24db0ee633a1cadc8e5f972df3b2e5e29450541bbae85c556411051adf26c7038052a445de74046f78370a477b0435f8ae531c906aa3e08835541a693820488a7552e6012cc33b994d65735456b6cb20538e8c", @nested={0x4, 0x68}, @generic, @nested={0xad, 0x6, 0x0, 0x1, [@generic="954dcbc748be1df20399bf0bb5a9021c09c42e1e9da6c432e1c38560550eb20b43c9860ed9375544a5c81ace77c510b1ab31bb379ce3e2f946f83d0f141715e405b04493b8601c4a08eaa71f9109f5f85ac1f86f286ac89598ae7b12ec8d2f2b3921a56f05a6d7d9637cc0127eadfb2f2a69fac446ee691ea55c67df6c090cae0c7367689dbd749d491dcc4826c8dc0acb9af480b18314bdbd76f9279ec92d880f41e5fa39ce90fc31"]}, @generic, @typed={0x278, 0xd3, 0x0, 0x0, @binary="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"}]}, 0x434}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000003ac0)={0x0, 0x0, &(0x7f0000003a80)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000001b7c193f3c9cf2", @ANYRES16=r4, @ANYBLOB="010029bd7000fbdbdf251b0000000400cc0008009a0002000000"], 0x20}}, 0x240148d0) 3m9.180711087s ago: executing program 4 (id=445): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4b4, 0xde64, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x14, 0xea, 0x7}}]}}}]}}]}}, 0x0) pipe2(&(0x7f0000000080), 0x80000) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="2021070000000700406116ea"], 0x0, 0x0, 0x0, 0x0}, 0x0) 3m6.834960939s ago: executing program 4 (id=455): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$UFFDIO_CONTINUE(r3, 0xc028aa05, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1000000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m4.396553053s ago: executing program 4 (id=463): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './cgroup/../file0/file0\x00'}) ftruncate(r0, 0x8) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x16) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f00000001c0)='./cgroup/../file0/file0/file0\x00', &(0x7f0000000100)='./file0\x00') unlink(&(0x7f0000000580)='./bus\x00') sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x1) socket$kcm(0xf, 0x3, 0x2) socket$kcm(0x10, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) socket$kcm(0xf, 0x3, 0x2) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000040), 0x12) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair(0xf, 0x3, 0x2, 0x0) r5 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="6419c6527320"], 0x6) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 3m3.593682729s ago: executing program 4 (id=466): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000002c0)={0x0, 0x0, r0}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x58b200) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0x34}}, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) read$FUSE(r1, 0x0, 0x600) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x2}, 0x1c) listen(r2, 0x5) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000240)={0x4, &(0x7f0000000200)=[{0x9, 0x3, 0x9, 0x8130}, {0xff, 0x0, 0x3, 0x4}, {0x3, 0x11, 0x2, 0x97e}, {0x9, 0x6, 0xcf, 0x8001}]}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r4 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) r5 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x4b, &(0x7f0000000080)=0x9, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0xffffffff, @private1={0xfc, 0x1, '\x00', 0x1}, 0xa}, 0x1c) fcntl$setlease(r4, 0x400, 0x0) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) 3m3.162025623s ago: executing program 4 (id=468): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000380)={{0x2, 0x4e22, @rand_addr=0x64010100}, {0x0, @multicast}, 0x44, {0x2, 0x4e20, @local}, 'syz_tun\x00'}) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000400)=[@mss, @sack_perm, @sack_perm, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp, @mss={0x2, 0x4}], 0x8) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x100000ee) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x420, 0x3d, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="1bd32fc1df86c5716a50cf33dc616a6b2aed847870e5def24b9e51601d4f24359e6c25403a710d038458b034f825dd3459fd786fc694af04d8e21b8848ae754f598a7a2dffecdd65df0f80f4113f3801b78ffd525e80489c0575dcf40631171c7e09e9c6a5f8a2a1e30fd23a2d8ce41f094ec19c54cde2a94a887bb233cf5e24db0ee633a1cadc8e5f972df3b2e5e29450541bbae85c556411051adf26c7038052a445de74046f78370a477b0435f8ae531c906aa3e08835541a693820488a7552e6012cc33b994d65735456b6cb20538e8c", @nested={0x4, 0x68}, @generic, @nested={0xad, 0x6, 0x0, 0x1, [@generic="954dcbc748be1df20399bf0bb5a9021c09c42e1e9da6c432e1c38560550eb20b43c9860ed9375544a5c81ace77c510b1ab31bb379ce3e2f946f83d0f141715e405b04493b8601c4a08eaa71f9109f5f85ac1f86f286ac89598ae7b12ec8d2f2b3921a56f05a6d7d9637cc0127eadfb2f2a69fac446ee691ea55c67df6c090cae0c7367689dbd749d491dcc4826c8dc0acb9af480b18314bdbd76f9279ec92d880f41e5fa39ce90fc31"]}, @generic, @typed={0x278, 0xd3, 0x0, 0x0, @binary="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"}]}, 0x420}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000003ac0)={0x0, 0x0, &(0x7f0000003a80)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000001b7c193f3c9cf2", @ANYRES16=r4, @ANYBLOB="010029bd7000fbdbdf251b0000000400cc0008009a0002000000"], 0x20}}, 0x240148d0) 3m2.810645124s ago: executing program 32 (id=468): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000380)={{0x2, 0x4e22, @rand_addr=0x64010100}, {0x0, @multicast}, 0x44, {0x2, 0x4e20, @local}, 'syz_tun\x00'}) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000400)=[@mss, @sack_perm, @sack_perm, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp, @mss={0x2, 0x4}], 0x8) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x100000ee) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x420, 0x3d, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="1bd32fc1df86c5716a50cf33dc616a6b2aed847870e5def24b9e51601d4f24359e6c25403a710d038458b034f825dd3459fd786fc694af04d8e21b8848ae754f598a7a2dffecdd65df0f80f4113f3801b78ffd525e80489c0575dcf40631171c7e09e9c6a5f8a2a1e30fd23a2d8ce41f094ec19c54cde2a94a887bb233cf5e24db0ee633a1cadc8e5f972df3b2e5e29450541bbae85c556411051adf26c7038052a445de74046f78370a477b0435f8ae531c906aa3e08835541a693820488a7552e6012cc33b994d65735456b6cb20538e8c", @nested={0x4, 0x68}, @generic, @nested={0xad, 0x6, 0x0, 0x1, [@generic="954dcbc748be1df20399bf0bb5a9021c09c42e1e9da6c432e1c38560550eb20b43c9860ed9375544a5c81ace77c510b1ab31bb379ce3e2f946f83d0f141715e405b04493b8601c4a08eaa71f9109f5f85ac1f86f286ac89598ae7b12ec8d2f2b3921a56f05a6d7d9637cc0127eadfb2f2a69fac446ee691ea55c67df6c090cae0c7367689dbd749d491dcc4826c8dc0acb9af480b18314bdbd76f9279ec92d880f41e5fa39ce90fc31"]}, @generic, @typed={0x278, 0xd3, 0x0, 0x0, @binary="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"}]}, 0x420}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000003ac0)={0x0, 0x0, &(0x7f0000003a80)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000001b7c193f3c9cf2", @ANYRES16=r4, @ANYBLOB="010029bd7000fbdbdf251b0000000400cc0008009a0002000000"], 0x20}}, 0x240148d0) 2m38.157099948s ago: executing program 0 (id=545): r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)=ANY=[@ANYBLOB="12011001000000202505a8a4720b1c25030109021f000101ff8008090400fd01070101010905010220"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003620000000003"]}, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r2, &(0x7f0000001640)=[{{0x0, 0x0, 0xffffffffffffffff}}, {{&(0x7f0000000240)={0x2, 0x4e20, @broadcast}, 0x10, 0x0}}], 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000000000140006"], 0x58}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x40001}, 0x1) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x28}}, 0x0) r4 = socket(0x1000000010, 0x80802, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) syz_usb_control_io(r0, &(0x7f00000015c0)={0x2c, 0x0, &(0x7f0000001480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, 0x0, 0x0, 0x0}, 0x0) r5 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902380001000000"], 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r6, 0x6, 0x2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, &(0x7f0000000180)={0x14, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0xc38, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000040)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b29ab", 0x0, 0x11, 0x0, @private1, @empty, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x32}]}], "fb36eeca6fad50b340972a584d16ca55"}}}}}}}, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) recvfrom$x25(r7, &(0x7f0000000300)=""/246, 0xf6, 0x40000000, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003d00)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003a00)={0x20, 0x0, 0x4, {0x2, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r8, &(0x7f0000006800)="10", 0x1) write$char_usb(r8, 0x0, 0x0) write$char_usb(r8, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, &(0x7f0000000a40)={0x14, &(0x7f00000009c0)={0x20, 0xa, 0x2, {0x2, 0xf}}, &(0x7f0000000a00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000bc0)={0x1c, &(0x7f0000000a80)={0x20, 0x17, 0x9e, "902ceb50731b4877a4f21e2f8df6cfce90804498283ba7708ec9c919557af973443496e8ef228bdf07adb51f7f98a6984073a39a2252a13cc5e019631b3ddd8b55775f522eb48a01705fd2bea0f31fd8398f0c59b963a14d4803a01a173264bf843be61303ec4104c13445873fc3b0f12b6502ea27210b7fa23dc23b8d4792f037126a2039c92c912cba870e80ae7c29588320a7bbbcf10fea7ea19b9ae5"}, &(0x7f0000000b40)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000b80)={0x0, 0x8, 0x1, 0xe7}}) syz_usb_disconnect(r0) syz_usb_connect(0x1, 0x0, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x3f, &(0x7f00000004c0)={0x5, 0xf, 0x3f, 0x2, [@generic={0x37, 0x10, 0x2, "deaf8f48003fb18fc85c0d67d0cc6ddb99f88dfe9b9642f3585a83bd1fb413015cef82535982580133dffeec130555f60640e3b8"}, @ptm_cap={0x3}]}, 0x8, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x810}}, {0x0, 0x0}, {0x8e, &(0x7f0000000600)=@string={0x8e, 0x3, "9e366b8b88613f21cb7a2c454918d6e00449fdb4a5dee9c7c9dde372e464c79ae9698be88173fdf554fad3db042e75ae5a43d9f014ae3d7819be1e2d227f7cc342eba6e989c9dfd5b37e0e0e149d9d0537af5f775c59831756b0862c2706f73801ec401a20026ba056f2fd1fcb45b2818c81ed33a6ce20493c54b742b03209f9f9c73ce326c837de8e80f949"}}, {0x2, &(0x7f00000006c0)=@string={0x2}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x424}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x400a}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x140c}}]}) 2m33.18836989s ago: executing program 0 (id=559): r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000500)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x401, 0x100, 0x400008, 0x0, 0x0, 0x2}}, 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000090a010400000000000000000000000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000023200009801c0002800c00c7d934e43aafeadf9393f970014e018008000140000000050c000180080001400000000814000000"], 0x84}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) landlock_create_ruleset(&(0x7f0000000000)={0x20}, 0x18, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x10, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0\x00', 0x44, 0x842, 0x23456}) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f00000001c0)={0x81, 0xffffffffffffffff, 0xd, {0x7, 0x3}, 0x3}, 0x1) 2m32.313294194s ago: executing program 0 (id=563): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0xf2) mkdirat(0xffffffffffffff9c, 0x0, 0x8) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mkdir(&(0x7f0000000040)='./file1\x00', 0x14e) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) write$sndseq(r3, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1c) ioctl$SG_GET_NUM_WAITING(r3, 0x227d, &(0x7f0000000080)) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000580)=[{{0x3, 0x1, 0x1, 0x1}, {0x4, 0x0, 0x0, 0x1}}, {{0x1, 0x1}, {0x1}}], 0x10) bind$can_raw(r0, &(0x7f0000000480)={0x1d, r1}, 0x10) close(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000cb6fcf20d813200031f70000000109021200010000000009040000002ef0b391"], 0x0) 2m30.38854484s ago: executing program 0 (id=572): r0 = socket$netlink(0x10, 0x3, 0xa) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x111, &(0x7f0000000380)={0x0, 0xfdf1}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x241}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f00001550000100feff000037153e370248018080351700d1bd", 0x33fe0}], 0x1}, 0x0) sendfile(r0, r1, 0x0, 0x7ffff000) 2m30.161722844s ago: executing program 0 (id=574): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x2800, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r2}, @IFLA_GTP_FD1={0x8, 0x2, @udp=r1}]}}}]}, 0x40}}, 0x0) 2m29.54039739s ago: executing program 0 (id=575): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000005000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r1) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000680)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fbdbdf250c0000001800058008000100910170000c003fb8789c2fd6520004020900000088a234b2ee4030dd9b55e1e5aa"], 0x2c}, 0x1, 0x0, 0x0, 0x4c000}, 0x20000054) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000340)={0x0, 0x74}, &(0x7f0000000380)=0x8) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r6, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e1c}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x68, r5, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r9}, 0x10) sync() 2m14.075730718s ago: executing program 33 (id=575): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000005000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r1) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000680)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fbdbdf250c0000001800058008000100910170000c003fb8789c2fd6520004020900000088a234b2ee4030dd9b55e1e5aa"], 0x2c}, 0x1, 0x0, 0x0, 0x4c000}, 0x20000054) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000340)={0x0, 0x74}, &(0x7f0000000380)=0x8) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r6, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e1c}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x68, r5, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r9}, 0x10) sync() 1m36.9514172s ago: executing program 2 (id=725): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)={{0x14, 0x10, 0x1, 0x0, 0x40000000, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) 1m36.397513231s ago: executing program 2 (id=728): r0 = socket$netlink(0x10, 0x3, 0xa) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) sendfile(r0, r1, 0x0, 0x7ffff000) 1m35.522799247s ago: executing program 2 (id=731): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) timerfd_create(0x1, 0x800) bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap(&(0x7f0000bdd000/0x1000)=nil, 0x1000, 0xb635773f066bbee6, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x3b, &(0x7f00000004c0)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000100)) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000040)={'filter\x00', 0x104, 0x4, 0x3e0, 0x1f8, 0x0, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110, 0x0, {0x0, 0xd2030000}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local, @remote, @multicast1}}}, {{@arp={@local, @local, 0x0, 0x0, 0x0, 0x0, {@mac}, {@mac=@dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'vlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e22, 0xffffffff, @empty}, 0x1c) syz_emit_ethernet(0x46a, &(0x7f0000000a40)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x434, 0x6, 0x0, @remote, @local, {[@srh={0x33, 0x10, 0x4, 0x8, 0x7, 0x0, 0x5, [@mcast2, @local, @mcast2, @loopback, @remote, @private2, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @hopopts={0x29, 0x0, '\x00', [@pad1, @ra={0x5, 0x2, 0x4}]}, @routing={0x2c, 0x6, 0x0, 0x2, 0x0, [@mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @hopopts={0x21, 0x14, '\x00', [@jumbo={0xc2, 0x4, 0x6}, @hao={0xc9, 0x10, @private0}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @mcast2}, @generic={0xff, 0x69, "98ea9c0cc25b52087404b4430e3eade10845316737b1b0fe9a751ea7c50ce95660475611df533d34f013b7eefc1e11355c5ee4b67d9636da1f12f31b960eff00f34dd93e1e616826098b58af93e7d7152e7421aad4a084d3ac07579fdb234804c11feb1948ab8ae172"}]}, @hopopts={0x87, 0x39, '\x00', [@jumbo={0xc2, 0x4, 0xfff}, @generic={0x10, 0xe0, "9c680d4b50f247dd2e0d334ed17a393c23398b707001fd2bd324627cde90f5f76adc18a9fb06f502d823ac391af5ed5579960543910cb6034f52886fbea5ed1c8f594420fec133578a2233d0f73a3cf5df041b6d891a06382722068aff2f970617814c80d4b30bde892ccb9df1c5e3b9b559c4298a512110d52a86fdccf8d5c41a7a3ba4ba5b795c5fc720b05d93926e0ee76a2d8a8bfc4b0a8bd6923d14d1f233516b094cdac00d61e579563b32fcbf9c6d1a21260dfb0f628239133a7b2940e14459c1d73c49d4c7ab459e88ccdba0e3d3b4b796da7abf670fb5864e952f32"}, @jumbo={0xc2, 0x4, 0x2}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xc8f7}, @generic={0x6, 0x61, "05c783eeeb8bec0b2b975c360163944ac312b3f7037512e839fc77ee1d015bc40c99a34732c234ebf072394e24a64cda4a5fe49c51a2508d47b26d0dedcefaff4a2e541746261795108c458939f2262c037caf488d8d8c9397e66946db0691c3b7"}, @ra={0x5, 0x2, 0x200}, @generic={0xf8, 0x6d, "1634664d581ac579b69ffa85ed8c62cb664a8d3dc2fc18fa08d169339d5bd915b4f23745d778196a7147488880b7b379084f2364f31bf5b53292d2e5e69ea5a698c1ccf6a7b43c436126f2cfab2ec2d0eaad9fbfe75be53b286937be9e705c12e78aa51e07387dbdb470c08fb1"}]}, @srh={0x73, 0xa, 0x4, 0x5, 0x6, 0x20, 0x8e27, [@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @local, @private0={0xfc, 0x0, '\x00', 0x1}, @empty]}, @dstopts={0x3a, 0xc, '\x00', [@ra={0x5, 0x2, 0x9}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x28, {0x0, 0x8, 0x4, 0x5, [0x1000, 0x0, 0x7ff, 0xac5e]}}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x3b}}]}], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000680)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x2, {0x9, 0x6, "c829e4", 0x9, 0x33, 0x1, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a3200000000f70007404884b24b02a8a7758a688958ed60ecfd057e10926ba77e5596b13e43cd4488e4aa68a75f7236ec205b6e4cac2a0d86c336bf07dbe861f4f57bcef92dcf818d532d4475b5daa4dadc1690f228e860bba5a0b5d9bde86862e8f7fc08f0debd4974c6fae7d737a0007ec948ac4d8714ebff6b25648fb910e0d6d07f023cf5fa4051627b9c5b69e265538f9ba683bf172a5ff815afa543c12e550a1bcc9287080c7c12cc89d216c56febb0b06134672ea6b0077c846396169475f271319988f49ec94f2996e5d0e1cb151fb223e556f10fb681d068e055eb34e5f8fc7a524ffe5f4632a6c74ad0fe0b1542497d76a5a4416c47805e001c00058008000140"], 0x1ec}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) 1m34.050039094s ago: executing program 2 (id=734): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x3102480, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x80700a, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x110, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x8080) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r4, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800}) readlinkat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)=""/168, 0xa8) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r4, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r4, r4, 0x3, 0xfffffffffffffffa, 0x1}) r5 = syz_pidfd_open(0x0, 0x0) setns(r5, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 1m32.992026436s ago: executing program 2 (id=739): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newchain={0x24, 0x64, 0x8, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x10}, {0x8, 0xfff4}, {0xc, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="022100000000000014000300766c616e30000000000000000000000008000a00", @ANYBLOB="14001680100001"], 0x50}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000500)={0x0, 0x2, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="02000000000000c26a40b793fc8d"], 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r6 = dup(r1) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000010000050000000000a3112222310000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000085000000500000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r8}, 0xc) ioctl$PIO_CMAP(r6, 0x4b71, 0x0) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r9}, &(0x7f0000000080), &(0x7f0000000140)='%pi6 \x00'}, 0x20) syz_open_dev$dri(&(0x7f00000001c0), 0x127e, 0x8400) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r10, &(0x7f0000000740)=[{{&(0x7f0000000000)={0xa, 0x4a24, 0xffffffff, @private1={0xfc, 0x1, '\x00', 0x3}}, 0xfffffffffffffdf4, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000540)={0xa, 0x4e21, 0xfffffff8, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x9}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000580)="fa", 0x1}], 0x1}}], 0x2, 0x40090) shutdown(r10, 0x1) setsockopt(r10, 0x84, 0x80, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) 1m31.965340637s ago: executing program 2 (id=744): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41}, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189378, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000040)={'virt_wifi0\x00', @random="a1a938559e11"}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sched_setscheduler(r2, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) 1m31.808733255s ago: executing program 34 (id=744): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41}, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189378, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000040)={'virt_wifi0\x00', @random="a1a938559e11"}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sched_setscheduler(r2, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) 13.893071315s ago: executing program 5 (id=972): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001080)=ANY=[@ANYBLOB="120100007882b740422c0917b7ea010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_usb_connect$cdc_ecm(0x3, 0x82, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x1, 0x1, 0x8, 0x345d847bfaa80620, 0x8, [{{0x9, 0x4, 0x0, 0x6e, 0x3, 0x2, 0x6, 0x0, 0x7f, {{0x6, 0x24, 0x6, 0x0, 0x0, 'k'}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x4c5, 0x0, 0x10}, [@mbim={0xc, 0x24, 0x1b, 0x76b, 0x3ff, 0x8, 0x6, 0x9, 0x7f}, @ncm={0x6, 0x24, 0x1a, 0x8, 0x4}, @mdlm={0x15, 0x24, 0x12, 0x2}, @acm={0x4, 0x24, 0x2, 0x7}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x9, 0x3, 0xfe}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x0, 0x7, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x4, 0x3, 0x9}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x80, 0xaa, 0x0, 0x8, 0xfc}, 0x19, &(0x7f00000001c0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x1c, "952c79ba63d43a7d1d7b4bcc2a33846b"}]}, 0x7, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x411}}, {0x2f, &(0x7f0000000240)=@string={0x2f, 0x3, "cfaebcc6ca89388381e410d600e070c8ea38911e9ab8a569010018e0e122c6e71d5f97b133293c731cb0a06d02"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x807}}, {0xe2, &(0x7f00000002c0)=@string={0xe2, 0x3, "33525625f118066b27ed5fe9611af2de3f778522949c77baf064dd4eabf2dd6ab2f6f4accef9492a494c16ccf8b26acc8f4d84bc77ff63ec8b4fbf7a259e07f074d93e1172af5ded2ec9591a247bdbe56b017362c9309d43878c0710a5568751360642debe3b23395f0e07151f810aeef4d24033e1a8c6bb352b54d0eb7e7dcbc1d7def463797e9e64bc544874f401ddca8eed8c5a7fcb0b19f228261438025a3966901c2dde62224dc8b2f4fe8a3582273b88296c244a92cc4ff4c9fd343810f9500248890e6e32c6582d21d079bfb5c5103d778d1d3a0f6ba4171bfd4c9b39"}}, {0x38, &(0x7f0000000400)=@string={0x38, 0x3, "eb7f9ecd7f969fafaf3bf1fe3aaa7a66564cbdd145b90edcff2358957297eb1884d45eb27ef8cff6261d3a218b9899c0d71e22325e95"}}, {0x40, &(0x7f0000000440)=@string={0x40, 0x3, "c57e76e7330c6a5563ece3c195f1dfdeaad3d6a644963b14d3cb641104158f46a2393ef60b92ed8dcdc277b242e0d72c94feedc1c5ae16af4efcceb6a72c"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x422}}]}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) write$sysctl(0xffffffffffffffff, &(0x7f0000000000)='7\x00', 0x2) 10.267230652s ago: executing program 6 (id=982): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = io_uring_setup(0x30d7, &(0x7f00000000c0)={0x0, 0xf487, 0x800, 0x0, 0x7}) connect$qrtr(0xffffffffffffffff, &(0x7f0000000080), 0xc) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0xffffffff00000000) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r4, 0x12, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44041}, 0x4000) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x1000, 0x7, @loopback, 0x3ff}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000280), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000040)=@ccm_128={{0x303}, "ddc161444d4a581c", "491365bf731d9d0ee0c2fe105d9e467c", "b51679e0", "b0b67a41224533cb"}, 0x28) r5 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048dc) close(r5) sendto$inet6(r1, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) socket(0x27, 0x1, 0x0) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={0x0}) 10.181237267s ago: executing program 5 (id=983): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = io_uring_setup(0x30d7, &(0x7f00000000c0)={0x0, 0xf487, 0x800, 0x0, 0x7}) connect$qrtr(0xffffffffffffffff, &(0x7f0000000080), 0xc) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0xffffffff00000000) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r4, 0x12, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44041}, 0x4000) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x1000, 0x7, @loopback, 0x3ff}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000280), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000040)=@ccm_128={{0x303}, "ddc161444d4a581c", "491365bf731d9d0ee0c2fe105d9e467c", "b51679e0", "b0b67a41224533cb"}, 0x28) r5 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048dc) close(r5) sendto$inet6(r1, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) socket(0x27, 0x1, 0x0) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={0x0}) 9.157092343s ago: executing program 3 (id=986): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000002ac0)={'sit0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x7, 0x1, 0x7, 0x4, {{0x31, 0x4, 0x2, 0x4, 0xc4, 0x65, 0x0, 0x2, 0x4, 0x0, @multicast1, @multicast1, {[@end, @cipso={0x86, 0x60, 0x1, [{0x0, 0xf, "30debaa98132e0c3ce34b309b3"}, {0x1, 0xb, "b049bbf402c2b5a1b3"}, {0x7, 0xa, "424bbe351a4f7bec"}, {0x6, 0xa, "c171ec1785c23b95"}, {0x6, 0x9, "71d838c6ef0783"}, {0x0, 0xa, "f1ce7e3344dd06dc"}, {0x5, 0xc, "282452ad306b5cd5444a"}, {0x7, 0xd, "52193e29d6cb9d2f5fe0bf"}]}, @timestamp_prespec={0x44, 0x4c, 0x3d, 0x3, 0x2, [{@broadcast, 0x2}, {@empty, 0x2}, {@private=0xa010101, 0xfffffffe}, {@multicast1, 0x2}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x4}, {@local, 0xfffffff7}, {@empty, 0x3}, {@remote, 0x1}, {@local, 0x8000}]}]}}}}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00003ce000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000180)="0f23cb0f20c035080000000f22c0b9f7020000b8ff7f0000ba000000000f30660f3823cac7442400ca45104cc744240202000000c7442406000000000f01142466b84b008ee00f235b0f1f4000b9e90a00000f323e642ef20f5a26", 0x5b}], 0x1, 0x10, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) write$sndseq(r2, &(0x7f0000000180)=[{0x2, 0x0, 0x0, 0x0, @time={0x751, 0x80000000}, {}, {}, @control={0xd8, 0x6, 0x8}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}], 0x38) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000240)="ced15496a140b585f8dce4e9cc69164df1c4cecb3ce538c5aa7de613ea123b32ad43", 0x22, 0x4040040, &(0x7f0000000280)={0xa, 0x4e22, 0x6, @remote, 0x1}, 0x1c) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1ff, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-serpent-sse2\x00'}, 0x58) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x62) listen(r4, 0x807) close(r4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x1, 0x1, 0x0, 0x9}]}) getsockopt$netlink(r2, 0x10e, 0x2, &(0x7f0000000300)=""/102, &(0x7f0000000380)=0x66) 8.749115227s ago: executing program 6 (id=987): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) timerfd_create(0x1, 0x800) mmap(&(0x7f0000bdd000/0x1000)=nil, 0x1000, 0xb635773f066bbee6, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@gettfilter={0x24, 0x2e, 0x401, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff3}, {0x2, 0x2}, {0x6, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x8890}, 0x1040) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000040)={'filter\x00', 0x104, 0x4, 0x3e0, 0x1f8, 0x0, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110, 0x0, {0x0, 0xd2030000}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local, @remote, @multicast1}}}, {{@arp={@local, @local, 0x0, 0x0, 0x0, 0x0, {@mac}, {@mac=@dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'vlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e22, 0xffffffff, @empty}, 0x1c) syz_emit_ethernet(0x46a, &(0x7f0000000a40)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x434, 0x6, 0x0, @remote, @local, {[@srh={0x33, 0x10, 0x4, 0x8, 0x7, 0x0, 0x5, [@mcast2, @local, @mcast2, @loopback, @remote, @private2, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @hopopts={0x29, 0x0, '\x00', [@pad1, @ra={0x5, 0x2, 0x4}]}, @routing={0x2c, 0x6, 0x0, 0x2, 0x0, [@mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @hopopts={0x21, 0x14, '\x00', [@jumbo={0xc2, 0x4, 0x6}, @hao={0xc9, 0x10, @private0}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @mcast2}, @generic={0xff, 0x69, "98ea9c0cc25b52087404b4430e3eade10845316737b1b0fe9a751ea7c50ce95660475611df533d34f013b7eefc1e11355c5ee4b67d9636da1f12f31b960eff00f34dd93e1e616826098b58af93e7d7152e7421aad4a084d3ac07579fdb234804c11feb1948ab8ae172"}]}, @hopopts={0x87, 0x39, '\x00', [@jumbo={0xc2, 0x4, 0xfff}, @generic={0x10, 0xe0, "9c680d4b50f247dd2e0d334ed17a393c23398b707001fd2bd324627cde90f5f76adc18a9fb06f502d823ac391af5ed5579960543910cb6034f52886fbea5ed1c8f594420fec133578a2233d0f73a3cf5df041b6d891a06382722068aff2f970617814c80d4b30bde892ccb9df1c5e3b9b559c4298a512110d52a86fdccf8d5c41a7a3ba4ba5b795c5fc720b05d93926e0ee76a2d8a8bfc4b0a8bd6923d14d1f233516b094cdac00d61e579563b32fcbf9c6d1a21260dfb0f628239133a7b2940e14459c1d73c49d4c7ab459e88ccdba0e3d3b4b796da7abf670fb5864e952f32"}, @jumbo={0xc2, 0x4, 0x2}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xc8f7}, @generic={0x6, 0x61, "05c783eeeb8bec0b2b975c360163944ac312b3f7037512e839fc77ee1d015bc40c99a34732c234ebf072394e24a64cda4a5fe49c51a2508d47b26d0dedcefaff4a2e541746261795108c458939f2262c037caf488d8d8c9397e66946db0691c3b7"}, @ra={0x5, 0x2, 0x200}, @generic={0xf8, 0x6d, "1634664d581ac579b69ffa85ed8c62cb664a8d3dc2fc18fa08d169339d5bd915b4f23745d778196a7147488880b7b379084f2364f31bf5b53292d2e5e69ea5a698c1ccf6a7b43c436126f2cfab2ec2d0eaad9fbfe75be53b286937be9e705c12e78aa51e07387dbdb470c08fb1"}]}, @srh={0x73, 0xa, 0x4, 0x5, 0x6, 0x20, 0x8e27, [@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @local, @private0={0xfc, 0x0, '\x00', 0x1}, @empty]}, @dstopts={0x3a, 0xc, '\x00', [@ra={0x5, 0x2, 0x9}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x28, {0x0, 0x8, 0x4, 0x5, [0x1000, 0x0, 0x7ff, 0xac5e]}}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x3b}}]}], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) 8.733035758s ago: executing program 5 (id=988): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r2 = dup(0xffffffffffffffff) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x80000000, 0x0, 0x81, 0xfffffffb}) r3 = syz_open_dev$cec(&(0x7f00000004c0), 0x0, 0x80100) ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000040)={0xf0, 0x40000}) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32], 0x58) chdir(&(0x7f0000000100)='./file0\x00') read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffd6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x115ac0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, 0x0, 0x32d, 0x2403}, 0x14}}, 0x0) 6.925460701s ago: executing program 5 (id=991): socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000005c0)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000002c0)={0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000240)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000040000000080020000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x6c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x800, 0xb}}, @IFLA_VLAN_QOS_MAPPING={0xc}]}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x6c}}, 0x0) 6.610715866s ago: executing program 6 (id=993): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000006c0)={'filter\x00', 0x7, 0x4, 0x408, 0x100, 0x210, 0x0, 0x320, 0x320, 0x320, 0x4, 0x0, {[{{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "05bb69d2c4b63312b8bb1cbd9f0b724edaf74bab3a7bf6e1ae2144c337f6"}}, {{@arp={@private=0xa010100, @rand_addr=0x64010100, 0xffffffff, 0xff000000, 0x2, 0x2, {@empty, {[0xff, 0x0, 0xff, 0xff, 0x0, 0x633a73686cb26ba9]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0x101]}}, 0xe8, 0x0, 0x2009, 0x7, 0x403, 0x0, 'batadv0\x00', 'pimreg0\x00', {}, {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xf, 0xffffffff}}}, {{@arp={@multicast2, @multicast2, 0xffffffff, 0xff000000, 0x7, 0xd, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x6, 0x6, 0x4, 0x2, 0x0, 0x435, 'veth1_to_batadv\x00', 'veth1_vlan\x00', {0x42bfee0aa326d42d}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @multicast2, @remote, 0x4, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) io_setup(0xff, &(0x7f0000000380)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) sendmsg$inet6(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@tclass={{0x14, 0x29, 0x43, 0x6}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x33}}}], 0x30}, 0x80) sendmsg$alg(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="bfe7d7c351f89e65232b8729529b26c0", 0x10}], 0x1}, 0x0) io_submit(r3, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340), 0x41}]) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x8200, &(0x7f0000000200)=ANY=[@ANYBLOB='mpol=bind:0-N:3/', @ANYRESDEC=0x0]) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r6 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) write$cgroup_pid(r6, &(0x7f0000000240)=r7, 0x12) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc0205647, &(0x7f00000002c0)={0x7ff, 0xc1f000}) 6.593495301s ago: executing program 3 (id=994): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4b4, 0xde64, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1}}}}}]}}]}}, 0x0) pipe2(0x0, 0x80000) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="2021070000000700406116"], 0x0, 0x0, 0x0, 0x0}, 0x0) 5.627065156s ago: executing program 5 (id=995): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x10001, 0x8b}, 0x0) mmap(&(0x7f0000b2d000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xf9, 0xdb, 0xe2, 0x10, 0xb95, 0x2790, 0x639c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xcb, 0x0, 0x0, 0xff, 0x64, 0x63}}]}}]}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="02030e00d3fc02000000ab5d71acedd7c9560385dcb1080084d7dc0398062f2405ce811cc352", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="04050401c9"], 0x7) 5.607743207s ago: executing program 7 (id=996): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b04000000000000000002000000440004802c0001800b0001006e756d67656e00001c000280080002420000000218000340000000000800014000000000140001800b95030005a52cefca0f2c03909397af469f", @ANYRES32=r0, @ANYBLOB="e4d4d4c442330c9599ba1f1918922ade30adcb704de37f6b947f9b037c6e8d1a186b907c62b56e5dd0884db1ffb9f016381e09aebada27511385c4d4a639013901e21050d70accf8261a176692411047acd07a5bae557bbbd10b709326fc2679289b6e4a7f"], 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000080)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7d37bcf9e433c29", 0x28}], 0x2}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b34, &(0x7f0000000000)={'wlan0\x00'}) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000180)=[{0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000801}, 0x0) io_uring_setup(0x1744, &(0x7f0000000080)) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r4, 0x0, 0x0) sendto$packet(r3, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5088a8a5e986f3", 0x12, 0x0, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) syz_open_dev$vbi(&(0x7f00000000c0), 0x1, 0x2) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aac020000060a0b040000000000000000020000003c020480380201800a0001006d6174636800000028020280080002400000000114020300d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d532452032d5f166334739d1719a5778bd4f724ee4ca57f2527aeeb0c75755d68fc6fa55f4825682ee95e581039823e5963beedcf65b8b005623d90772b8b6ebd2498b0aff725a3eabb6c99cb2edfe10b9c33be8a971e08401bc0807e75a2ff376b7934473bc1f02bb512b77414daf260c9c7d4e1f0758b56ec5823892af310e6252fcfb1d9dbad362baa26f43f12f831fd221926d6536eeff641db46920ae0e48f3ff5de599714ba6510ce479d4116a519792281736f39c9fc0e10ef557392c43389271cebcf36543fcf6f83bf74b93ee4eb5e8c82e35bb4784cc1ed0ad291b16e8368487589f7590bf5896f340a36555a1cf69736da230a809176dbdfba3d47efb9a6932e5503d277532b7d4e6f7c7373a298e5843a9f74d5fd07fbc6ad22bc644ba9b3c94ec3c8f0b9321b16e5826b1f058f781760a5d4b6a8880202b41689139c37cd51f65a92d883f8901add03b650c9ec182fb565a4d657ebba9d6a5eb426b22d5933b72362e6ec327fb679aa8034b8b3b6680ad138be47652a3e77981187d2921cebfc1639aa280e3d38dba9b1af49ceded79c78a2d656b3a3e946e17e6257def6679f70f11aa01a2d906aecf4dbc7d1a332a8932ed719ce7eecb5450f494f944b3f6b637502ddba609c6e45dcfad1db7c7dda3e2c8d5ddcf27132985442e9b8df16f96c82e72e3e2491856d07756b9f08000100627066000900010073797a30000000000900020073797a3200000000440005"], 0x2d4}}, 0x4048010) syz_emit_ethernet(0x42d, &(0x7f0000000640)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @random="35acef4379b3", @val={@void, {0x8100, 0x2}}, {@mpls_mc={0x8848, {[{0x80000, 0x0, 0x1}, {0x3}, {0x400, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0xff2a4, 0x0, 0x1}, {0xf92d}, {0xe, 0x0, 0x1}], @ipv6=@icmpv6={0x1, 0x6, '\"k*', 0x3d7, 0x3a, 0xff, @loopback, @rand_addr=' \x01\x00', {[@srh={0x6, 0x2, 0x4, 0x1, 0xff, 0x28, 0x8, [@loopback]}, @dstopts={0xc, 0x25, '\x00', [@generic={0x0, 0xf6, "397ffb00d2b197b9a81cd815e128a6d8a17d12be3168e7bcad40c59c5b27a37ea3bae68be06edace5cc0752c41ed0f7459b422db4641e15054db383d53f6e977a8e4eff2ef76e6cbf93f6d9682d3840399410f9695d56edbe9e9336e470a71fa4b1e39a0b49b8885ad64bafed307279e9267011556ad49605c4d01bbdbfec8c414e55c68ae51b6a08271913e9773618a37d06d07fc77d57d332d8025f4b6adf00246dd4c9fafdb756d8df24cbf3c7fc778d7fac2c1e5f1cc44aa22a8fd912a68150c5112bb078515169f65daaf9de9b885f19a6261a57adb6c53169468217d956e2d0abf84db012afbe8bd27c17baecc22d7e897b883"}, @calipso={0x7, 0x30, {0x1, 0xa, 0x3, 0x7ff, [0x1, 0x7fff, 0x1000000000000000, 0x6, 0x2]}}, @enc_lim]}, @srh={0x1f, 0x2, 0x4, 0x1, 0x3, 0x40, 0x6, [@empty]}, @routing={0x2e, 0x6, 0x0, 0x14, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @empty, @mcast2]}, @fragment={0x2b, 0x0, 0x1, 0x1, 0x0, 0x6, 0x64}, @srh={0x84, 0xe, 0x4, 0x7, 0x9, 0x8, 0x1, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', @local, @loopback, @local, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2]}, @hopopts={0x88, 0xb, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x10}, @ra={0x5, 0x2, 0x8}, @ra={0x5, 0x2, 0x4000}, @enc_lim={0x4, 0x1, 0x6a}, @generic={0x8, 0x46, "084719f4cfd8181e94e081a1b064149a1fe720a307b7f8c7dfbc5353c6f67e73f7455a1ff35d6582401a317ce416fb0ea4b7f0e68fa2ff95caaaebedda6b969b6367482eb0c1"}]}, @srh={0x32, 0xa, 0x4, 0x5, 0x2, 0x20, 0x4, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @mcast1]}, @routing={0x67, 0x12, 0x2, 0x8, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @loopback, @mcast2, @private1, @empty, @ipv4={'\x00', '\xff\xff', @empty}, @dev={0xfe, 0x80, '\x00', 0x2c}, @initdev={0xfe, 0x88, '\x00', 0x4e, 0x0}]}], @time_exceed={0x3, 0x0, 0x0, 0x2, '\x00', {0x9, 0x6, "1519de", 0x5, 0x3c, 0xff, @remote, @empty, [], "25e9ce6157f8fcb51d5ca10ce9b7d78252301c34825cf51bc79c5aff311e3fd11d16cd1af653938ceca91df4c42d31"}}}}}}}}, &(0x7f0000000100)={0x1, 0x1, [0x124, 0x61b, 0xd3a, 0xb39]}) 5.489470148s ago: executing program 1 (id=997): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd29, 0x8000, {0x0, 0x0, 0x0, r3, {0xfff1, 0x7}, {}, {0xfff3, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x15}, 0x20000000) 5.434200327s ago: executing program 7 (id=998): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) timerfd_create(0x1, 0x800) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@gettfilter={0x24, 0x2e, 0x401, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff3}, {0x2, 0x2}, {0x6, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x8890}, 0x1040) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000040)={'filter\x00', 0x104, 0x4, 0x3e0, 0x1f8, 0x0, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110, 0x0, {0x0, 0xd2030000}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local, @remote, @multicast1}}}, {{@arp={@local, @local, 0x0, 0x0, 0x0, 0x0, {@mac}, {@mac=@dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'vlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e22, 0xffffffff, @empty}, 0x1c) syz_emit_ethernet(0x46a, &(0x7f0000000a40)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x434, 0x6, 0x0, @remote, @local, {[@srh={0x33, 0x10, 0x4, 0x8, 0x7, 0x0, 0x5, [@mcast2, @local, @mcast2, @loopback, @remote, @private2, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @hopopts={0x29, 0x0, '\x00', [@pad1, @ra={0x5, 0x2, 0x4}]}, @routing={0x2c, 0x6, 0x0, 0x2, 0x0, [@mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @hopopts={0x21, 0x14, '\x00', [@jumbo={0xc2, 0x4, 0x6}, @hao={0xc9, 0x10, @private0}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @mcast2}, @generic={0xff, 0x69, "98ea9c0cc25b52087404b4430e3eade10845316737b1b0fe9a751ea7c50ce95660475611df533d34f013b7eefc1e11355c5ee4b67d9636da1f12f31b960eff00f34dd93e1e616826098b58af93e7d7152e7421aad4a084d3ac07579fdb234804c11feb1948ab8ae172"}]}, @hopopts={0x87, 0x39, '\x00', [@jumbo={0xc2, 0x4, 0xfff}, @generic={0x10, 0xe0, "9c680d4b50f247dd2e0d334ed17a393c23398b707001fd2bd324627cde90f5f76adc18a9fb06f502d823ac391af5ed5579960543910cb6034f52886fbea5ed1c8f594420fec133578a2233d0f73a3cf5df041b6d891a06382722068aff2f970617814c80d4b30bde892ccb9df1c5e3b9b559c4298a512110d52a86fdccf8d5c41a7a3ba4ba5b795c5fc720b05d93926e0ee76a2d8a8bfc4b0a8bd6923d14d1f233516b094cdac00d61e579563b32fcbf9c6d1a21260dfb0f628239133a7b2940e14459c1d73c49d4c7ab459e88ccdba0e3d3b4b796da7abf670fb5864e952f32"}, @jumbo={0xc2, 0x4, 0x2}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xc8f7}, @generic={0x6, 0x61, "05c783eeeb8bec0b2b975c360163944ac312b3f7037512e839fc77ee1d015bc40c99a34732c234ebf072394e24a64cda4a5fe49c51a2508d47b26d0dedcefaff4a2e541746261795108c458939f2262c037caf488d8d8c9397e66946db0691c3b7"}, @ra={0x5, 0x2, 0x200}, @generic={0xf8, 0x6d, "1634664d581ac579b69ffa85ed8c62cb664a8d3dc2fc18fa08d169339d5bd915b4f23745d778196a7147488880b7b379084f2364f31bf5b53292d2e5e69ea5a698c1ccf6a7b43c436126f2cfab2ec2d0eaad9fbfe75be53b286937be9e705c12e78aa51e07387dbdb470c08fb1"}]}, @srh={0x73, 0xa, 0x4, 0x5, 0x6, 0x20, 0x8e27, [@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @local, @private0={0xfc, 0x0, '\x00', 0x1}, @empty]}, @dstopts={0x3a, 0xc, '\x00', [@ra={0x5, 0x2, 0x9}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x28, {0x0, 0x8, 0x4, 0x5, [0x1000, 0x0, 0x7ff, 0xac5e]}}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x3b}}]}], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) 5.257342431s ago: executing program 1 (id=999): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) epoll_create(0xa3) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100000000000600d, 0x0) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x10) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) inotify_add_watch(r3, 0x0, 0x10000000) dup2(r2, r2) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000440)={'\x00', 0x0, 0x7fff, 0xffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r5) close(r5) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x9000, &(0x7f0000000200)={0x7, 0x1, 0x20000}, 0x20) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc436a", 0x10) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000280)=0xc) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000340)={'\x00', 0xe, 0x5, 0x3, 0x4, 0xd9, r7}) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=@newchain={0x3dd0, 0x64, 0x200, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0x7ff2}, {0x9, 0xd}, {0xe, 0x7}}, [@f_tcindex={{0xc}, {0x1200, 0x2, [@TCA_TCINDEX_POLICE={0x90, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0xbd000000, 0x1, 0xa, 0x7ff, 0x1, {0x9, 0x2, 0x5, 0xfff9, 0x1, 0xcb}, {0x40, 0x1, 0xff80, 0x3ff, 0xfffd, 0x1}, 0x1, 0xca65, 0xfffffff0}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x1, 0xfc5f, 0x8, 0x100, {0x0, 0x1, 0x6ec, 0x9, 0x5, 0x6}, {0x7, 0x1, 0x5, 0x8, 0x101, 0x2}, 0x80000000, 0x1036b9c5}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}]}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x9}, @TCA_TCINDEX_ACT={0x1154, 0x7, [@m_ife={0x7c, 0x1b, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x1}]}, {0x4c, 0x6, "5445f07aa861d44febe3f0db35789d999665b07b6b54b0308854800a454f893af347640221b4cc09070c56b4c07a2673406c36be80d9cdfd04fde80d7eac811d6f1bacd4b23537d8"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_csum={0xe0, 0x1b, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xff, 0x2, 0x3, 0xfffffe00, 0xb6}, 0x51}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x5, 0x2, 0x9, 0x3}, 0x24}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0xd14, 0x20000000, 0x1ef3, 0x8001}, 0x55}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffffd, 0xffff7fff, 0x7, 0x3, 0x3}, 0x7}}]}, {0x41, 0x6, "bf91db4aa8a748ae8ab6514f92e62fe0941efdcdd73aaaff7a53cfc106d4693e8010ca8b2c3dfa8a6b090a237811c01b5a521e4395aa2fe6773565aa99"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_pedit={0xff4, 0x0, 0x0, 0x0, {{0xa}, {0xee4, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xee0, 0x2, {{{0xe8, 0xffffff76, 0x2, 0x0, 0xd632}, 0x6, 0x98, [{0x0, 0x1, 0xf3, 0xffffffff, 0x4, 0x6}, {0x401, 0x4, 0xfffffffa, 0x7, 0xe7, 0xffff}, {0x84, 0xe4f, 0xc, 0x4, 0x80000001, 0xfffffffc}, {0xfffff001, 0x8000, 0x48, 0x3, 0x2, 0x6}, {0x3, 0x3ff, 0x6, 0x3, 0x8, 0x40}, {0xed0, 0x1, 0x4, 0x4, 0x101, 0x61}, {0x7ff, 0xb, 0x6, 0x4, 0x4, 0xe1a48948}, {0x7, 0x5, 0x6, 0x9, 0xdcc3, 0x816c}]}, [{0x800000, 0xd511, 0x0, 0x8001, 0xffffffff, 0xf8}, {0x6, 0x9, 0x9, 0x0, 0x612, 0xf}, {0x5, 0x17b1, 0x8, 0x7f, 0xe, 0xfffffffe}, {0x7fff, 0x9, 0x33ca, 0x1, 0x4, 0x3}, {0x7, 0x7, 0x9, 0x0, 0x8, 0x6}, {0x8, 0x6, 0x1, 0x5, 0x8, 0x6}, {0x7, 0x8, 0x1c1c, 0xa, 0x0, 0x7}, {0x8, 0xb4, 0x180000, 0x5b7, 0x8, 0x56}, {0x7ff, 0xdd, 0x7191, 0x3ff, 0x3ff, 0xcab1}, {0x4, 0xff, 0xe, 0xf4, 0x3, 0xfff}, {0x80, 0x0, 0x10001, 0x0, 0x3408, 0xc}, {0x80000001, 0x4, 0x81, 0x9, 0x1, 0x5}, {0x0, 0xfffffffe, 0x0, 0x98d, 0x7, 0x4}, {0x3, 0xffffecdd, 0x5, 0x6, 0x0, 0x5}, {0x5, 0x4, 0x3ff, 0xe0c, 0x9, 0x2}, {0x4, 0x1, 0x5, 0x5, 0x9, 0x6}, {0x6, 0x6, 0x8, 0xa1d, 0x6, 0x9}, {0x1, 0xfffffffa, 0x4, 0x80000001, 0x25f, 0x9}, {0x3, 0x7, 0x10, 0x0, 0x4, 0x1}, {0x3, 0x7f, 0x3cc, 0x5, 0x4, 0x3}, {0x5, 0x9, 0xfe, 0xffffffff, 0x3, 0x3}, {0x4, 0x9, 0x5, 0x7, 0x2, 0x8}, {0x4, 0x7, 0x20, 0x9, 0x8, 0x5}, {0x0, 0x9b3, 0x7, 0x0, 0x3, 0x9}, {0x5, 0x80, 0x7f, 0x72d, 0xa0}, {0x8, 0x6, 0x10001, 0x9, 0x7, 0x8}, {0xc9, 0x5, 0x800, 0x8000, 0x43, 0x3b4}, {0x2, 0x8, 0x8b3e, 0x800, 0x4, 0x1}, {0x800000, 0x8001, 0x7, 0x9, 0x0, 0xffffff4f}, {0xff, 0x0, 0x9, 0x8, 0x80000000}, {0x5, 0x5, 0x7, 0x9, 0x3, 0x96}, {0x8, 0xd, 0x7, 0x7, 0xb}, {0x5, 0x5, 0x4, 0x9, 0x8021, 0x1}, {0x400, 0x3, 0xffff0000, 0x0, 0x8}, {0x8, 0xfffffffe, 0x80000000, 0x0, 0x80000000, 0x8}, {0x2, 0x23da, 0x3, 0xc370, 0x9, 0x7ff}, {0x5bcba13b, 0x100, 0x6, 0x4, 0x0, 0x8}, {0x6, 0xf, 0x6, 0x3, 0x7fff, 0x101}, {0x7, 0x80, 0x6, 0x1ff, 0xf5a, 0x1}, {0x2a, 0x825, 0x8000000, 0x5, 0x1452, 0x5}, {0x9, 0x411e, 0x400, 0x0, 0x0, 0x6}, {0xffff, 0x8, 0x0, 0x80000001}, {0x101, 0x3, 0x1, 0x3, 0x4, 0xf}, {0x48, 0x8, 0x8001, 0x101, 0x6, 0xf52}, {0x401, 0x4000000, 0xd, 0xc4bd, 0x7, 0x8000}, {0x9740, 0x1ff, 0x8, 0x3ff, 0x800, 0xd3e}, {0x7fff, 0x7, 0x5, 0x2, 0x9, 0x5}, {0x2, 0xcf, 0x800, 0x8, 0x5, 0x6}, {0x0, 0x1000, 0x9, 0xd69, 0x10000, 0x7}, {0x5, 0x8, 0x7f, 0xa25e, 0xffffffff, 0x6}, {0x0, 0x2, 0x90000, 0x5, 0x2}, {0xffff, 0x7fff, 0x9, 0x8, 0x9, 0x3}, {0x6, 0x2, 0xa, 0xbd, 0xe3f1, 0xff}, {0xfff, 0x9, 0x0, 0x10000, 0xfffffff9, 0x7fffffff}, {0xb, 0x0, 0xfffffffe, 0x3, 0x1, 0x8000}, {0x0, 0x8, 0xacd, 0x7ff, 0x23c, 0x1ff}, {0x5, 0x7, 0x9, 0x4, 0x7, 0x2}, {0x400, 0x9, 0x7, 0x6, 0x0, 0x400}, {0x2, 0x312c, 0x976, 0x13da, 0x7, 0x10001}, {0xec, 0xd, 0x534e0d57, 0x9, 0x0, 0x9}, {0x3, 0x0, 0x6, 0x2, 0x4, 0xfffffffb}, {0x7, 0xc, 0x7f, 0x4, 0xcd, 0x8}, {0x6, 0x5, 0x1, 0xfffffffc, 0x7f, 0x6}, {0x40000000, 0x8, 0x4, 0x6, 0x4, 0x8001}, {0x9, 0x6, 0x7, 0x485e, 0xffffffff, 0x2}, {0x0, 0xffffffe0, 0x5, 0xffffffff, 0x6, 0x5}, {0x5, 0x32e8, 0x5b2, 0x5, 0x2}, {0x0, 0x4, 0x5, 0x10001, 0x1f4, 0x3}, {0x7, 0x5, 0x2, 0x9, 0x100, 0xa9}, {0x6, 0x3ff, 0x1, 0x0, 0x3, 0x4}, {0x32b8, 0xfffffffd, 0x8, 0x10001, 0x758e, 0x8}, {0x0, 0x8000, 0xd, 0x6, 0x7, 0x2}, {0xe8, 0xf, 0x0, 0x35ab, 0x6, 0xfff}, {0xfffffff9, 0xfffffff8, 0xffffff80, 0xffff39b2, 0x4bac, 0xfffffffe}, {0x1, 0x6, 0x7a, 0xffff, 0x52b9, 0xf}, {0x401, 0xb201, 0x7fff, 0x9, 0x1, 0x4}, {0x100, 0x1, 0x9, 0x1951, 0xfffffffd, 0x800}, {0x9, 0xffffffff, 0x1, 0x7, 0x1000, 0x5}, {0x5, 0xfffffffe, 0xfffff0bf, 0x6, 0xb, 0x2}, {0x2, 0x8001, 0x3, 0x2, 0x6, 0x4}, {0x4, 0x7ff, 0x3, 0x8, 0x10001, 0x8000}, {0x2, 0x42602499, 0x2, 0x3, 0x711da70e, 0xcd}, {0x2, 0x9, 0x5, 0x9, 0x5, 0xf}, {0x5, 0x8, 0x7, 0xd58f, 0x9, 0x5}, {0x1, 0xfffffffe, 0x1400, 0x5, 0x4, 0x1ff}, {0x3, 0x2, 0x1, 0x0, 0x73, 0x80000001}, {0x6, 0xfff, 0xfb7b, 0x401, 0x81, 0x6}, {0x4, 0xffff0fd3, 0x6, 0x2, 0x1, 0x1}, {0x0, 0x5, 0x1000, 0xa0000, 0x7, 0x3}, {0xa35, 0x0, 0xb389, 0xb, 0x7, 0x5}, {0x1, 0x8, 0x9, 0xa00000, 0x35}, {0xfffffffb, 0x7, 0x3, 0x6, 0x4, 0x2}, {0x8000000, 0x3, 0x7, 0x33b, 0x7, 0x8}, {0x3, 0x3a, 0x1, 0x40, 0xfffffffa, 0x10}, {0x3, 0x9, 0x1, 0x566c, 0x9, 0x9}, {0x7, 0x4, 0xd32, 0x1, 0xc851, 0x7}, {0x8, 0x3, 0x4, 0x7fffffff, 0x9, 0x1000}, {0x70, 0x6, 0x4000000, 0x9, 0x6, 0xfffffffc}, {0xfffffff8, 0x4, 0x6, 0x5, 0x40, 0x9}, {0x8, 0x840, 0x10000, 0xd4, 0x800, 0x6}, {0x7f, 0x7, 0x8, 0x7, 0xf6b, 0x4}, {0xfffffffa, 0xf8, 0x9, 0x80000000, 0x3, 0xb44c}, {0x884, 0x2, 0x0, 0xe8, 0x7, 0x8}, {0xb, 0xbb5, 0xae, 0x3, 0xb, 0x7}, {0x6, 0x3, 0xa, 0x38, 0x9, 0xffffffff}, {0xb, 0x5676, 0x6, 0x400, 0x4, 0x79f}, {0x7d, 0x7fff, 0xf, 0x68, 0x9, 0xb7}, {0x4, 0x145d, 0xc, 0x8, 0x8, 0x4}, {0x7f, 0xf1, 0x10001, 0x0, 0x90000, 0x6032ae7c}, {0x4, 0x80, 0xa7e, 0x2, 0xb}, {0x8, 0x8, 0x10001, 0x98e, 0x5, 0x9}, {0x9, 0x41bc, 0x0, 0x9, 0x800, 0x10000}, {0x0, 0x7, 0x8, 0x80000001, 0x3ff, 0x7}, {0x1, 0x5c, 0xe68, 0x9, 0xd6b, 0x8}, {0xb623, 0x10, 0x0, 0x5, 0x9, 0xfcc}, {0x800, 0x6, 0x5, 0x6, 0x4, 0x81}, {0x400, 0x3, 0xd40e, 0x0, 0x8b2, 0xacd7}, {0x0, 0x9, 0x1, 0x40, 0x6, 0x6}, {0x5, 0x2, 0x401, 0x5, 0xbf3, 0x8}, {0x2, 0x200, 0x80000000, 0x3, 0x6f02939c, 0x7}, {0x3, 0x4, 0x10, 0x2, 0x0, 0xdcf}, {0x4, 0xfffffff8, 0x9, 0x1f5, 0x4, 0x4}, {0x7f, 0xb8, 0x3, 0x1a9f, 0x101, 0x2}, {0x5, 0x8, 0x9, 0xc, 0x2, 0x6}, {0x5, 0x2, 0x8, 0x5, 0x2, 0xe313}, {0x9, 0x80000001, 0x5, 0x0, 0xffffffff, 0x162000}, {0x4, 0x4, 0xf86, 0x7fff, 0x94, 0x40}, {0xd, 0xb7, 0x2, 0x9, 0x4, 0x7}], [{0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x4}, {}, {0x0, 0x1}, {0x4}, {0x2}, {}, {0x2, 0x1}, {}, {0x2}, {0x3}, {}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x2}, {0x3, 0x1}, {0x3}, {}, {0x1, 0x1}, {0x4}, {0x5}, {}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x3}, {0x80e03cd8e1940d3}, {0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x3}, {0x4}, {0x1, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x5}, {0x3}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0xb4c2d1e66a82d2fd, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x5, 0x1}, {0x1, 0xff58b4e62c9fdc30}, {}, {0x2, 0x1}, {}, {0x2}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0xeb761c0668c3a134}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x5}, {0x5}, {0x1}, {}, {0x3}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x5}, {0x5}, {0x3, 0xe17bc3d669c55e76}, {0x4, 0x1}, {0x6034f39ecbcb6a21, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}], 0x1}}]}, {0xe6, 0x6, "797a210c12425f50dd98934ab1d6d2ea76dd9ad154bc52f3d1bf822ddc98b9e689891876520f889244e4834b3a9075affb5e7727d55e187ae608b5903760537cd04f45f6bcd078f855b847fb7012c356298c729d2cd0ec76f43a6f56b7c5cb9415933989bf22202101085af5f7fb1a480a976c99857e56c3daaa90ac2993c10684bc9294e1dc54fc6c677ac6785667d93182c8790a33f5cedde68526b4df95da37dacf7432f136ffda8152bc22525d6aa9b9d4b9d412ce389d2a0dd9bac46916fc03e259e601f0959476a1dd0ab4162f9fb34f1fdc3a7e10221f9b827410cf3164bd"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}, @TCA_TCINDEX_HASH={0x8, 0x1, 0xf768}]}}, @f_tcindex={{0xc}, {0x4}}, @f_rsvp6={{0xa}, {0x2734, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0x31d7e686edcc3c87, 0xc}}, @TCA_RSVP_ACT={0x2690, 0x6, [@m_csum={0x110, 0xb, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x401, 0x1ff, 0x1, 0x80000001, 0x9}, 0x67}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x120000, 0x400, 0x7, 0xfe36, 0x80000000}, 0x13}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0xffffffff, 0x3, 0x2, 0x5}, 0x15}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0xff, 0xffffffffffffffff, 0x4, 0x9}, 0x12}}]}, {0x72, 0x6, "1c0bd41880ebb994e56d20c8a03016c47145c1beb1d5a7179f0d1f88fe1a1147dbdd14a9ecebbace66f66f4321ee203722432417c516ef0348985a9741c4fac704834cae19c61650a7022722f478025177ae6c4e152ccf77ec2ab2574e20542ae834082e070020c0eb22c22dad5b"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mirred={0xd4, 0x1a, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x10000, 0x3, 0x1, 0x0, 0x40}, 0x3, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7fffffff, 0x81, 0x5, 0x2, 0x5}, 0x3, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x7a5e, 0x5, 0x7, 0xdf}, 0x4, r4}}]}, {0x48, 0x6, "42ace6da4d68300d4abd36faaadd814f4507d37af7381ebfeb7162005144271223e41acea811f55e859c536c19884aea7eca101b3808caa409c02aef81dce21e5f8a9115"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_police={0x1124, 0x1f, 0x0, 0x0, {{0xb}, {0x1050, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x2, 0x6f43, 0x3, 0x8, 0xfffffff7, 0x7f, 0x9, 0x4, 0x1ff, 0x7, 0x80000000, 0x1ff, 0x3, 0x400, 0x2, 0xd, 0x80000001, 0x200, 0x3, 0x101, 0x8, 0x7f, 0x10000, 0x8, 0x3, 0x222b, 0xaea1, 0x8, 0x7, 0x0, 0x7f, 0x1, 0xdc5a, 0x8, 0x7fad2919, 0x8b, 0x5, 0x70b, 0x5, 0x6, 0x80000001, 0x7, 0xfffffffd, 0x1, 0x9, 0x5bc, 0x8, 0x8, 0x1, 0x3, 0x7, 0x3ff, 0x80000001, 0x6, 0x402c, 0x7f, 0x3, 0xd, 0x5, 0x6, 0xb9b, 0x5, 0x6e5, 0x5, 0xb, 0x8, 0x9, 0x1, 0x80, 0x40, 0x7, 0x6, 0x81, 0x40, 0x0, 0xc, 0x2, 0xe, 0x49, 0x4, 0x7fff, 0x0, 0xe12, 0x5, 0xfff, 0x81, 0x5, 0x8, 0x5, 0x1, 0x4, 0x7, 0x4, 0x1, 0x3, 0x8, 0xdab1, 0x6, 0x4, 0x101, 0xd, 0x4, 0x1, 0x4, 0x7, 0x3, 0x9, 0x6, 0x7fffffff, 0x0, 0x8, 0x40, 0x2, 0x7, 0x2, 0x5, 0x2, 0x6, 0x7f, 0x2, 0x76, 0x2, 0x401, 0x3, 0x7, 0xe50, 0xfff, 0x1, 0x840, 0x89, 0x5, 0x5ee, 0x7fffffff, 0x3, 0x81, 0xffffff01, 0x6, 0x101, 0xa, 0x2, 0x2, 0x3, 0x20000006, 0x7, 0x10001, 0x84e, 0x7, 0xa02, 0xa, 0x5, 0xfffffff9, 0xc2a2, 0x4, 0xfffffffe, 0x877, 0x400, 0x3, 0x101, 0x7f, 0xffffffff, 0x6b8, 0x5, 0x200, 0x7, 0x2, 0x7, 0x400, 0xcb2, 0x4, 0x27, 0x200000, 0x8, 0xb0, 0x3, 0x0, 0x0, 0x2, 0x2, 0x4, 0x10000000, 0x200, 0x7, 0x1, 0xffffffff, 0xfffff000, 0x4b, 0xfffffffe, 0xe, 0x6, 0x4, 0x1, 0x3, 0x400, 0x800, 0xc, 0x3, 0xa, 0x0, 0x5, 0xffffffff, 0x1, 0x10, 0x1, 0x2, 0x5, 0x6, 0xfffffffc, 0xfff, 0x7f0, 0x1, 0x5, 0x2, 0xc, 0x9, 0x7, 0x9, 0x2fd, 0x4, 0x7, 0xa, 0x8, 0x2, 0x0, 0x81, 0xfffff801, 0x4, 0x81, 0x2, 0x10001, 0x4, 0xc77c0fd0, 0x3, 0x5, 0x3, 0xbbdd, 0x143, 0x97, 0x0, 0xffffffff, 0x4, 0x1, 0x8674, 0x5, 0x3, 0xfffffff9, 0x9, 0x2, 0x6, 0x2000000, 0x8, 0x0, 0x9, 0x84000000, 0x7, 0x5]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3ff}, @TCA_POLICE_RATE64={0xc, 0x8, 0xd}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x3, 0x1, 0x2, 0xb823, 0xc, 0xffffffc0, 0xfffffc7f, 0x9, 0x0, 0xfffff800, 0x10, 0x7, 0x0, 0x8, 0x51, 0x3, 0x4, 0x3, 0xfffffffc, 0x4, 0x4, 0xa, 0x9, 0x50d, 0xe, 0xfffffffe, 0x3, 0xff, 0x8, 0xe17, 0xffff4a00, 0xfffff8c5, 0xe, 0x5, 0x6, 0x6, 0x4, 0x0, 0x9, 0x16a, 0x145, 0x6, 0x10001, 0x8, 0xf, 0x3, 0xddde, 0x6c4, 0xa0a, 0xa1, 0x35ca, 0xfffffff9, 0xfffffffe, 0x7, 0x76c3, 0x6, 0x3, 0xee7, 0x6, 0x59709e07, 0x3ac6d1a7, 0x200, 0x0, 0x1, 0x7, 0x400, 0x0, 0x8, 0x80000000, 0x5, 0xc, 0x8001, 0x80200, 0xa68, 0x8, 0xffffffff, 0x47, 0x6, 0x0, 0x40, 0x1, 0x4b59, 0x79, 0xe, 0x7, 0x2, 0x8, 0x5, 0x101, 0x7fff, 0x3, 0xfffffff8, 0xfff, 0x0, 0x3, 0x6, 0xfffffffd, 0x2, 0x7, 0x8, 0xfffffffa, 0x5, 0x401, 0x8, 0x10000, 0xfffffffe, 0x916e, 0x5, 0x70, 0x1, 0xaed, 0x6, 0xff, 0xa, 0x8e, 0x6, 0x8, 0x7ff, 0x52dd6b49, 0x2, 0xfffffff7, 0x9, 0xd43, 0xd, 0x1, 0x80000000, 0x16, 0x2, 0x9c, 0x1000, 0x4, 0x4, 0x6, 0x10, 0x7, 0x3, 0x258, 0x8, 0x83, 0xc, 0xf5, 0x4, 0x2, 0x0, 0x8, 0x982, 0x8001, 0x9, 0xff, 0x54322db3, 0x7, 0xff, 0x4, 0x8001, 0x8, 0x401, 0xffff, 0x2, 0x4, 0x8, 0x1ff, 0x7, 0x9, 0x75862a08, 0x7ef2, 0xc26, 0x5, 0x5, 0x5, 0x6, 0xd5f, 0x5, 0xffff, 0x180, 0x8, 0x0, 0x3, 0x15f9445e, 0x0, 0x3, 0x0, 0x6, 0x9, 0x1, 0x0, 0x4, 0x7, 0x1, 0x2, 0x3, 0xcf9, 0x80, 0x1, 0x6, 0x3, 0x4, 0x183, 0x8, 0xb4d, 0x8, 0xfd12, 0x1, 0xda, 0x8000, 0x8, 0x6, 0x157c, 0xffff, 0x0, 0x80000000, 0x8, 0xffff1ce5, 0x6, 0x30, 0x1, 0x7, 0xffff1ee7, 0x2, 0x5, 0x7ff, 0x3ff, 0x9, 0x80000000, 0x0, 0xfffffffd, 0x1, 0x2, 0xe, 0x7, 0x1, 0xa, 0x83c3, 0x6, 0x560, 0x9, 0x27b4b8f6, 0xac31, 0xb72, 0xb, 0x2, 0x85a, 0x633, 0x6, 0x3, 0x2, 0x9, 0xfffffffe, 0x986, 0x5, 0x6c, 0xffffffff, 0x5, 0x9, 0xb99, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xf, 0x67b, 0x0, 0x60, 0x4, 0x8, 0x5, 0x5, 0x5, 0x7, 0x6, 0xfffffffe, 0x9, 0xb, 0xfffffffa, 0x6, 0x5, 0x3138, 0x9, 0x5, 0x101, 0x3, 0x3, 0x8, 0x0, 0x7, 0xeff, 0xde, 0x10, 0x10001, 0x29bc, 0xe, 0x8, 0x7, 0xe, 0x1, 0x5, 0x79e, 0x40, 0xd, 0x7fffffff, 0x3, 0x80000000, 0x7cf72138, 0x3000, 0x3, 0x10001, 0x8000, 0xfffffffb, 0x5, 0x0, 0x2, 0x92, 0x9, 0xfd2, 0x2, 0x4, 0xff80000, 0x6, 0xa1fa, 0x3ff, 0x4, 0x215e82c6, 0xe, 0x10001, 0xc0, 0x7ff, 0x6, 0x56, 0x8001, 0x200, 0xc94d, 0xfffffff9, 0x78000000, 0xc, 0x7, 0x2, 0x4, 0xc, 0x1, 0x5, 0x7, 0x3, 0x3ff, 0x8, 0x22f, 0x1, 0x8, 0x9, 0xbcb, 0x6, 0x401, 0x8, 0x7, 0x8, 0xfffff18d, 0x7fffffff, 0x38, 0x2, 0x0, 0x2, 0x1ff, 0xea, 0x7, 0xcc, 0x3, 0x7, 0x9, 0x0, 0x0, 0x68, 0x5, 0x4, 0x5, 0x9, 0x5, 0x6, 0xfffffffa, 0x2, 0x3, 0x0, 0x3, 0x40000000, 0x7ff, 0x1, 0x0, 0x6, 0x3, 0x6, 0xa39, 0xffffffa3, 0x8, 0x8, 0xcc17, 0x3, 0x0, 0x2, 0x54c8, 0x1, 0x7, 0x6, 0x80000001, 0x5, 0x4, 0x0, 0xd, 0x6, 0x81, 0x8, 0x3, 0x6, 0xc, 0x80000001, 0x200, 0x401, 0xffffffff, 0x80000000, 0x40, 0x8d8, 0x4, 0x3, 0x7f, 0xc238, 0x5, 0x445b, 0xffffff81, 0x2, 0xa, 0x3, 0x2, 0x0, 0x8, 0x9, 0x5, 0x7ff, 0x3, 0x0, 0x3, 0x6, 0x101, 0xb, 0x4, 0x0, 0x182c387f, 0x6, 0x6, 0x1, 0x44, 0x3, 0x2, 0x4, 0x2, 0x8, 0x0, 0xffc00000, 0x3, 0x4, 0x4, 0x5, 0x8, 0xfffffffe, 0x8, 0x4, 0x10, 0x200, 0x4, 0x6, 0x5, 0x9, 0xe99, 0x8, 0x26, 0x2, 0x4, 0xb, 0x8, 0x40c, 0x94d9875a, 0x2, 0x7, 0x8, 0x2db, 0x7, 0x3, 0x200, 0xbae, 0x2, 0x4161, 0x5, 0x8000, 0xfe76, 0x67, 0xffffff40, 0x1, 0x81, 0x2, 0x100, 0x5, 0x4, 0x7ff, 0x3, 0x6, 0x4, 0x8, 0x3, 0x6, 0x1, 0x0, 0x100, 0xb7d4, 0x0, 0x7, 0x2, 0x1, 0x80, 0x9]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffffffeb, 0x3, 0x1000, 0x0, 0x1, 0x101, 0xa, 0x10000, 0x1ff, 0x4, 0x7fff, 0x10, 0x100, 0x9, 0xbfc6, 0x2, 0x5, 0x7984, 0x8000, 0x2, 0x7ff, 0x0, 0xc, 0x3, 0x6, 0xffff8000, 0x4, 0xfffffffb, 0x8, 0x14, 0x9, 0x8, 0x1000, 0x0, 0x0, 0x5, 0x40, 0xba54, 0x3, 0x2, 0x6, 0x0, 0x6, 0x8, 0x1, 0x8, 0xf6cf, 0x80000000, 0xfffffffc, 0x2, 0x29, 0x6, 0x0, 0x1, 0x1, 0xff, 0x0, 0x14, 0x2, 0x3384, 0xc8, 0x900, 0x1, 0x2, 0x0, 0xfffffff7, 0x1, 0x4, 0x6, 0xffffff00, 0xffffffff, 0x2, 0x0, 0xfffffffe, 0x1, 0x0, 0x9, 0x3, 0x401, 0x5, 0x7fffffff, 0x9, 0x9, 0x80000000, 0x80, 0x3d27a75e, 0xffffffff, 0x1, 0x6, 0x5, 0x6, 0x9, 0xfffffff9, 0xfffffff8, 0x1, 0x8, 0xfffffc00, 0x7fffffff, 0x7, 0x2, 0x9, 0xff, 0x7f, 0x0, 0x7, 0x2, 0x1, 0x7, 0x2, 0x1000, 0x4, 0xb6, 0x6, 0x93, 0x4, 0x8000, 0x2, 0x101, 0x1, 0x2, 0x40, 0x9, 0xd, 0x5, 0xd0, 0x3, 0x80, 0x0, 0xe, 0x401, 0xdfe, 0x0, 0x7f, 0xffffffff, 0x6, 0x7, 0x9, 0x6, 0x5, 0x6, 0x9, 0x0, 0x1, 0x1, 0xb, 0x8, 0x1, 0xfffffff9, 0x3, 0x7, 0x200, 0xa, 0x87, 0x2, 0x1, 0x0, 0x9, 0x822, 0x4, 0x560, 0x2, 0x2, 0xf, 0xffffffff, 0xa2, 0x324, 0x8001, 0x80000001, 0x2, 0x3, 0x7, 0x8, 0x401, 0xa, 0x6, 0x6, 0x7, 0x18a, 0xd, 0x1000, 0x5, 0xffffffff, 0x2, 0x7, 0x5, 0x5, 0x4, 0x8, 0x3, 0x8, 0x8000, 0xfff, 0xfff, 0x57bb, 0x5, 0x800, 0x3, 0x5, 0x3, 0x0, 0x21, 0x8, 0x4, 0xb7d, 0x3ff, 0x4, 0x1, 0x50e, 0x9, 0x0, 0x9, 0x3, 0x2, 0x3, 0x10, 0x27c, 0x4, 0x8, 0x6, 0x7, 0x0, 0x1, 0xffffffff, 0x2, 0x6, 0x1ff, 0xf90, 0x5, 0x1, 0x4, 0x0, 0x3, 0x1, 0x6, 0x8, 0x7, 0x0, 0x8, 0x7, 0x200, 0x800, 0x9, 0x40, 0xfa, 0x5, 0x5, 0x5, 0x401, 0x9a4, 0x9, 0x1, 0x100, 0x1, 0x28000, 0x2, 0x8000]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7fffffff}]]}, {0xac, 0x6, "43de866950df344e9c9df43895c8ff100538d12e8758961a8377ae3cd420060d77d3665ebe8562dfed470b9c3e6f3d36a92d2659af874c9353da4a028e1521743df7dce02c83b00fa50fb02f5fdfa9f02a86b1c016f93f7a394e2763808d5bd7c4991070d88b124cf949542087a881e9f29f43bb34d1e7d665ce21a1f81578578382efcbbe9428b5f87fb8d6e47f274aff723ff42c02c32d3d6b22d564b245721e95d2a643899649"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_gact={0x108, 0xb, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x3e, 0x8, 0x4, 0x9}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x4a4, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0xc14, 0x3, 0x8, 0x4fd, 0x7ff}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x2270, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x23f9, 0x2}}]}, {0x85, 0x6, "b67391b6e51ec47b66e91b178ab20faa34a4c65a7cd14d44369457d4691d72a37aff48b0331664f751c402a45a8df0d8d49abfdd69d37c4eff12d01f3ca20626da4214423bf31d8a3937bc9a1acee5d6a01b2d51d6a948650a9bdd6da337a570ef692b735eb2adb24cb886c118e085240357014c86e12af0cbb8cf66514c8a4aaf"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0x134, 0x1d, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x543c, 0x4, 0xffffffffffffffff, 0x400000, 0x81}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xffff}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7ff, 0x6, 0x3, 0x1, 0xffffffff}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}]}, {0xbd, 0x6, "1d21070b241901332d317d9ff412d95aa84da725a15fbb63f74a2c0f04326faf6515cc769f09ec848cf40ec2ff7e1c4cf75160f3d459343397c3885f201aa829bd9b3a2c9e2962bb945e53effdf44bb98e638eace6a7309a84171ada28ba2d58dca88647cc0a1b09dfe84b70a64bd074d44a21666d01f6c4d5c80d6a6a7b463651e5b682721fc69cbf87b2159565f8af7bf412e7b12cf029ecbf07a8e1de862e4c50e31f8bd62e71ca9bb00484d12f7b2db3de0505c01629d5"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_simple={0x1038, 0xe, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x1004, 0x6, "4d8193ae3f4df4f758a3b847c219aa5415241cb0c908ce23f4117c83832e7cb20d20500a0acd1f29e913aae891be173c7cc408bed0d082bf7557534e8f97a0f97392b6cc43614c979d036be217d9f31db09981df9fe9d32a525d616194a86f77a6f128b628581b67ef338dab3ee0fd0b27ec491abe34b5ab052d776763b1a0876909f2b96aad4852f74e165e64a1601f80fe0d85a88538601dd76d1308591b672ba65a6420b8cd0a699ee51f854664daa275a445c9c1c163ab32a4512fa56d001f3d836b1655d15b7a2a542bb3f90769a1cb1ddd3e596b4a7bf13ff1f7dc6327fc10320033185dfe842e85eecfa4c25b7a5b35bc0c39413b02451253947e86cee4ebb410268de34b088097bb6d3b934f6529a516894098a7706b2d446e743e2641eb845a10edaa2deda0aae84635063954c732289475da39eda3ae93fbde8a02bf5088c60063d680f4bedec7f1a297d637963cd4dd0ec999c024f1b0a25517a9fcaf7819378c948c4774656c86aeaaa3a4d86ec8ab3b3275103cdbb34d9e9b60037118581ff1a464101bfaee076c9d25135e17b4b8e9c9954a49ae0933bdd693b744866da6c22d621db81199b131bbd7fc8afa496214048698cc2d92062d76fe5fba907e6d83ee1a4054b8ec1e3ac076df0789f41162264530c54cba99b5efcb3f6ad98847b9a0a19c61a8c26416a2ffe684c3489598100c7a79406d9ffc94eb473a62de9deac07088532831df6aadf8997f9bb894f8bd5f79bb5e9cc12d52bd24ac516a91f6f468379687cca22077c753f23005a3924d5c94840d5c8a54063edee93737a96a680dc3085edfe0dc55e9ee794f299df7f4d21033547f44e8b7e457cb447c22d205223d796bb4c94ca92ccd185f412206af899dc3f7e99a0361b8c3f5e27996ca651b89ba256d7265da17240b30e929a2b11abc636a8985a86610b7ca2a5b1605806698b52bc6e226db862d382426577aec80c07f1aa64221a962c9254122a27d7bf4b926786b7204399deba8d44fb3232ef448b7bb1b9dbec22a7fd2c0f4a15ab41e934623b05cf9d470ca4cf0810d801abd780975b01c7f7ecea540e8e30162a27aab5f98c6b303d63760ec7f2b9f5f4e6ba22ca558d74c6bcc361cebb20e65533889cde71295c896f489428a90c4fc41705977887ea8054774d886f3631e0190d28a1a72dd014cb0819914a64371eba66b52d65bf35e66aa39d4a38976b78142fd53a7efc1bbd8371c0efce2cebcba7a768e6abeda290773eb185172702fcc349c2948ac3e1ea13cb580f61e76ee710452bf374d214cfc679a68acd1304dff22a5d89a2b5b2c1d7e9ea7f49f086ae09e418a8a65ce1bfad0d736a5525cb2eb0634f425eba054edc44d3b38eeec5ed4f38b3195dac60a0d643c0f0400f34158873f1042a6c3883ae3d588978679dd6aeffe674250566e328d8cb450ba97443be3387689a326e2d8577b589f8a4af706e93b46d8f29ff3290235f1f16becaf8e798ec05a18c39297c24bd4bf11fc1435aa84fdd68781c88494d55e62cad149649eddd2013aec954b042df89bcf89fc2e0d0a4bcb8712d99538f8bbfbf2442e315b2fbe7b083a5e0b5e44b8705c1e6e74e0bcb9b243b0ef0d955cc9606773c4b122b10c153660faa0cfc7de495716027d29c82137a5369224df1b9fb72dc7e1577ec85b1d172dfda1e55614b8d66f2741d232d82d197044e302d569eb70c1db7002dbbbf63e2e1ac5279df096e775636274a4f7ec0e86a3b6a587431db184b6c3f07c4657024c2be425894840ed2995f27244a37acc2c6bee4b9ba0b3f39c7f5ed187b39308337d49b9bac5d977111131bba3b7902fe5478b3b20a09ac22cc773faa362bf4465a32cc7eeddc5401f0fde83c2467c76b58255c2421d95b3b257c8543eca2187e47a9cf55e224fe4d752642116e647b1566b1319aa6ee07ed0ec9ea8b96ae4913a16afcc99e43a2791a37c9dfd5b63d3df87c9d89560a3226b84c2ac6a89a0c4d87985011e9e53f02b7005227c289493de654115a74dd1ac7517934fb4e29414a68343a6782f45fb9fb288c2d19eb7117593a8dabaf99e2e8df16a3e25d9c7eed5487bff11d24bb92d7c55e6904579d067368eb03fef6306164197ff9eeda42a2c27df6c257e6194a0f5bb16afb493784e48927e8e3619703b29b8974bdeced6f849e98cf28f3fbc5d7d1da05b111861242d4d21ef60173529fc1865b0c8a33084d20cd976598e862001baff2c383c854e720869d6f2deb98177971d9304ec3ffff0662b4adaa30f911d46c7bc801b78f5160729a9afdce72912359c97a0896e942ec38e7249f82b76d6d5daef925c83856319e5bd8a5027d61f1d0b5d57742766774914ad5471a037a02e46aa4011218d5d0d5b608169253a8f0ee2f47e628028296a6f0e421c5aa9a4259e9b7f6aa6ee3bbc3b6174228929d10db7814ca7f26f81f2ec932b55bc9d02d226f7d71d78dde2ded8c97139bf7edf9f06f3a67bd9ca0805568e88467909946b6020d692dbbd5107fb0bddab2875f7748371cdccc176ef2ee893470c89987dfbeb7078f83e1adc4bbff6de000197ce7ff95c514f477ce954eb1286478c988c71bd5d9cd629d43b78941c930a123de4f13746833a89b0339891b116e0084f73e9dbc00ed018abee3c01cbfecd408eefeece7a4f884ef63fcfc2ee8226edf85aced85328d06fb61f6ae42f0c0c24f2ead1783caed6c227b22a07c383ca6f36b4a3df52d9ce29a9bb398c31420824f700f56c11cbc7f59c2a526c7eb06640779eb125c93b2fb9ec3c4314ddefc1ed47484dde087f11a4bd9e08551f9c9bb32da66f0a13e41f8679385a874d364dc0405faf3cb0989cf6f163e3fd771c61643083011c2f87395a3f0c1eaca46035bc909ce31f43b4eb385e00f77f2a50d84bdbfeba452229de42551ec9e9e23175997b03bb21c53767cd8796dc5c9142972e7decb4103ed521b77d0b9a94da758d5ece2f8b10aa01c70351b4a79e127d27ab08f8faa0ecdafb89d242b226c7cb871b31070b34ba8fe4c962947b2f910aba2bbdab904adf93b1ac7b4460bf2305b850ea10bf7ea1f6585442c2f8e03dbd922c26adeafdb179342534301b01f9a13d4ce7ced136e43e19cd1a10e68466d55299423ec7b1ed2c43bd0ca453fc1b5b978f53ad3a49c553a9c3e8afcbb55ed61a37c41c223d7165039607d683c5df70c371d34ab1cc62870c86fec34c07dcbfd784616fa6597dc2ba2954ffbf447ee0419cf33f66f59a92086284a97c2ceec1bbde61b63a7f9ead5bd9741b3c59f44cd9021ce9b63b91c91b4dc3480b5d1438ed139b4d2ab3f9e2b045b0656ea5ceca02160d1df3a7b6baafecbf8261291c21ef96f23a90ace63cdc845458afb27cbea69da37c7c6c6db89b7179002b456dd45520982cf27badb3cefea6ae54710d910b51f93da4ec9b2fdb2e96d02f72466a9250dd5ccd1c1b78202d90ba56157348d0cf1117e53080ec02e458cdc1cd18daa98cc0d0a99244b557c4bb5611b1833316e089300c4201757a39fcdc67417f42488fe922858e7195c25fe35294fac26afb0d2295955fec47272b4932dd4649aadffa26762a03a630b1b641384f7e4ae4e4cf8557dcb72545b85753a76b3df4e521b93aa4653031c94bf49fc7be5a1cb0ae0226af9443feb05118777c705cf68f0006a88bf3c920b15094861dd0589362f92d724a8ada4c96d9a1a89462e5c2302e339a0f39232ff014eff9de2f058952dd8033d659d361d1753b854cd8da025409829b5dc19e954cfaf09043ea0d76e36dd023544eb7b314815594820ae5b4a5bf893eae4ee3c1bde75839306509e8d3c96180686c781ee27b71e1375968939bf3d8c80bb8d10a7b75d4270af38998a0f6da93cb056422287eba593685a2bc3d5fd48c197aecd6b322f67e5c9b8a46389233a0a9a02785caea0422dc32d1b8559721bb0c9247d8206d5c5b6534d7e887f7c6c8f7ad0e42bffeccc627bcb5539c7e260d4c08c9e46902c4fba6a487988b74746675ed2a83db8d33a46a7d1c3036e7721f49ec06a9024759eefb424fccba01d451595856512c384e57d325ac186be75a9d19a4079c07c02da168d8e1c503cc22720004d3b538529899750a1ec644313f366d56f881bcaae956c1a6cc27dc56266b51985368b099be389ba0fe4663f6091d4d08479a635931bb0328d9afb6bbcda73256059d71aaa6db9b59812ad769bc9b101552b4fa67d0ca91e9d5263a3896544477268aa5edeed5534f615dedc18f078646b217f0272568ada89334c88f58113005161bb1e1b8c7adcfe2f5d9886f8f6ec5bb9fa6f77abf78f1a61a8924a838a03c1333db04c5291d324db19213b797728af1c39a84ba22d8d93fe9697c0757198f0a3e5fa3fea063e823cae11b5d96ec035ec0463b718538653f862b440907b4a8d84dd12e908ccc418bfaabb5274b7c5cff8702e27986a7516f91fc3a6cb279d0c94c555e13d40da6cdc6e6bd07c6d731369d012df25f57cf26ce754758eecbb154a8d2d42265c61d9c5b27e3feb15f1ab905b84520dc09f434613f916954a82855dd730502c51ee8ea09dee955dce05586f5b261a3850ba1e3d408579c93f4e476242a36ed1ca26bec2a30bcd4f416e30d7284967d31bf60c545cbbee4e4553ef9c69846bca773925c38f451cd076014c7d403091be92cb6b7b5bf3b09d8fbe6e49e1a17d9b219e184410e61edb4f072478fa8af2ccf1da7cbeea86da7829cd6ac1a4254ddf0a87b957d493e0821d10565bd6156215b3ced2e5b5c14bc0637138928ab4b5d4db80a1d941d4cff169afb81f8ba2d89f5c1a32a13f1727d1ff88a9fbf85cfa8a1435ca50b102247b8bb42b4324e195aba78953f583a5b237cb402b5112b34d15cdc74ff5db6e766a1dad15b57f02cc31da816e9565dfc35580ab66ce53d069cf301b50c9f48992e82f9afc55c9da0a66a9effaeeed5005c56e1b40bbe484afa188f29672705478d0ae9ed6532ce148caec26e92c8815628258d694bbd0c42cf19d2bea6293bd5dc32ed9cd85d1fc901bfcf4c4212f3c1f9ff5d65b1387eaae5b643aee18f1e7bd61aee4e9bde05eae26a9bef07be7aa4b6312b17fcec7c97857f1f7e05b8af37742ec84fed9c4267bc8a993caf5d0ca14f3926e821169f1a1dce2b1ee208e4cca42accf2b22f20250bd53e5e25a6b9c6859f53ad2f5cfd8057a7270f55bc26a80af0a9ea4e39433ff2817a83460f8817796147c58114d54db9bda39c5f207498f2108013c3fb4c9cba0ac11cfb2ba1c0ef1b4ab31f2c8580b98f5e3411950b8448b1b5093d6fc8b68c4345704708d9b44ca753c2fc1abbb175b4106bc695abdcc7348717510ceb3aaa52e7b6f7dd6e5d3558bc3e953807f07953cc5ecabaac80088740466f03022c1ed80d061fe6baa52a845b427a4b62228f20a8ba5520fc499dd955e35b639a212ff0572682eae6bb0fcbfe6472c515f20784d6881a377b4e99cd1439898183fac944e0e5c4d177941bca6cc21686e3fe0f301df574a3afdaa9b04dedbc2520ba044a85e3d3a143eda5a011b090cd47f9d725b6c3a03308a67a76129a3cd80c2950744ef3fdfd29ce2aa6c65605918e21309bfc0f008f4d90394b67ac83e36af7a8f5aad2f8bc35309f2a23093c6e47a9ea7215dfb01877a0d68a17cbacda5a0f767a338947020889a3403c54c9c33e7158d0a0ea7c572b216c07ea08f54b33156ced4950c400f1cf597b363c287d41bd9787c6e714aec4d5ff0f2a17968565ca0e226ab6b527"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mpls={0x110, 0x9, 0x0, 0x0, {{0x9}, {0x2c, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_LABEL={0x8, 0x5, 0x7ac29}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_TC={0x5, 0x6, 0x6}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8100}]}, {0xb9, 0x6, "0c3ad646087bc9bf4b4f1ce7db4d184df0aee3dd01d24bb7e82f1eca2e7a6c1dada37f566b7836ed716d8e10597252c3751e34d3aa27049187866f3cd6b940a3311d1d2e33cbeee253774695a8f0ea61504e86c241e37de18264a769380e02e2ca68801e046edd3753da8a56443e07156f239e2a7c998df69d7e544b4f40cfe3e53e5a66bb6684500e2e4da188d37b83db7c6f6f354f06ed5ce6dd236164c363be5dae4a75dfad0989bf6192e576f799cdd4026940"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_RSVP_POLICE={0x7c, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x20000000, 0x1, 0x400, 0x200, {0x5, 0x0, 0x9, 0xc, 0x7, 0x5}, {0xd, 0x0, 0x0, 0xff62, 0x8001, 0x3}, 0x800, 0x1ff, 0x200}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x10000000, 0x6, 0xfff, 0x3, {0xb5, 0x1, 0x8, 0x9, 0xff00, 0x2}, {0xd, 0x1, 0x100, 0x1000, 0x1000, 0x2}, 0x5, 0x2, 0x3}}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x5, 0x9}}, @TCA_RSVP_SRC={0x14, 0x3, @private2}]}}, @f_tcindex={{0xc}, {0x444, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0xd95b}, @TCA_TCINDEX_POLICE={0x430, 0x6, [@TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7f}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffffa}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x7, 0x1652, 0x1, 0x6e, 0x101, 0x1, 0x3, 0xffffffff, 0x8, 0xfff, 0x4, 0x5, 0x7fff, 0x8, 0xf9f6, 0x4, 0x7, 0x1000, 0xf, 0x6, 0x7, 0x80, 0x296a, 0x6e, 0x2ef, 0xdb, 0x9, 0xfffffff7, 0x3a77, 0x34, 0x8, 0x4, 0x1, 0x4, 0x800, 0xbb8, 0x5, 0x66a, 0xb, 0xffffff18, 0x7, 0x7, 0x3ff, 0x0, 0x4, 0xf, 0x0, 0x6, 0x7, 0x1, 0x73ce, 0xabb, 0xa, 0x8, 0x2, 0x5, 0x0, 0x5, 0x6, 0x5, 0x3, 0x10001, 0xa, 0x4, 0x760, 0x2, 0x2, 0xfffffff9, 0x0, 0x2, 0x7fffffff, 0x7, 0x5, 0x7227ecf1, 0x1, 0x8001, 0xe, 0x7ff, 0x81, 0x4, 0x5, 0x7, 0x8e, 0xfffffff9, 0x7fffffff, 0xf7, 0x4, 0x9, 0x3, 0x3, 0x75, 0x2, 0x9, 0x9, 0x7ff, 0x2, 0x2c5, 0x407, 0x200, 0x47, 0x0, 0xfffffc00, 0x5, 0x1, 0x7fffffff, 0x7ff, 0xfff, 0xd02, 0x5, 0x46c, 0x8, 0x2, 0x401, 0x0, 0x4, 0x9, 0xb, 0x8, 0x40, 0xc, 0x2, 0x3, 0x1ff, 0x7, 0x9, 0x1, 0x200, 0x1, 0x5, 0x7, 0x4, 0xb, 0x8001, 0x3, 0x4, 0x423, 0x6, 0x9, 0x2, 0xef, 0x384f, 0x2, 0x10000, 0x10001, 0xa3, 0xe14, 0x7, 0xfff, 0x8be0, 0x60, 0x6, 0x7, 0xfffffffc, 0x5, 0x7, 0x7fff, 0x8001, 0x4, 0x8, 0x224868ef, 0xf660, 0x4, 0x5, 0xf6d6, 0xd7e, 0x0, 0x7, 0xf632, 0x82f, 0x9, 0xfc70, 0x7f, 0x0, 0x3, 0x6, 0x80000001, 0x1, 0x2, 0x3, 0x5, 0x4, 0x9, 0x7, 0x4, 0x0, 0x9, 0x0, 0xc5cb, 0x6, 0x4, 0x7, 0x100, 0x0, 0x1, 0x81, 0x5, 0x1, 0xc, 0x800, 0x6a0687f, 0x80000001, 0x0, 0x81, 0xff, 0x4683, 0x0, 0x7, 0x9, 0x0, 0x7, 0x3, 0x7ff, 0x6434, 0x39c4, 0x100, 0x4c, 0x7f, 0x9829, 0xd, 0x1000, 0x83b5, 0x8, 0x3, 0x2, 0x4f28, 0x7, 0x1, 0xb3f00000, 0x4, 0x0, 0x7, 0x8000, 0x3, 0x80000001, 0x8, 0x1, 0x0, 0x1, 0xeb, 0x5, 0x9, 0x3, 0x8, 0x7, 0x3, 0x80, 0xb, 0x0, 0x40, 0x12, 0x5, 0x8, 0x7, 0x6, 0x9a]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}]}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x2}]}}]}, 0x3dd0}, 0x1, 0x0, 0x0, 0x20044451}, 0x801) 4.539376736s ago: executing program 6 (id=1000): socket$packet(0x11, 0x2, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000440)=@newlink={0x34, 0x10, 0x503, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20208}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@dellink={0x20, 0x11, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x8500, 0x2}}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=0x0, @ANYRESHEX], 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(twofish)\x00'}, 0x58) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev, 0x0, 0x32}, 0x0, @in=@private, 0x0, 0x4}}, 0xe8) connect$pppl2tp(r5, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}}}, 0x32) close_range(r4, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f00000003c0)=""/179, 0xb3, 0x40) 4.409979239s ago: executing program 7 (id=1001): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="9c0000003d0019010000000005000000017c00000400fc800c00018006000600800a00000c0002800800"], 0x9c}}, 0x4010) 4.267456936s ago: executing program 7 (id=1002): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x4, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r3, &(0x7f0000000780)}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000240), &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) 4.186791223s ago: executing program 1 (id=1003): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x81, 0x0) ioctl$mixer_OSS_GETVERSION(r1, 0x80044d76, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000040)='silent\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000000)=""/48, 0x14038d358eab00b}, {&(0x7f0000006180)=""/152, 0x98}], 0x10000028, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) 3.633336925s ago: executing program 3 (id=1004): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001980)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0xf1, @private0, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000080)="deaf2820714e311e2942e3486802f4650568e43367dc2290cb40d469087f1b87ee8bbefae463597468ed2b52fe322b11a51bc625a75f5fc815da6f26f0a1ac820e24e2050bb759a4ed84672d7cc4709529c9e4ede5b057d2a2211921f247fcec1d0987ba7f37d0bd95c7", 0x6a}], 0x1}}, {{&(0x7f00000003c0)={0xa, 0x4e24, 0x3, @private1, 0x4}, 0x1c, &(0x7f0000000b40), 0x1000000000000007}}], 0x2, 0x4080040) shutdown(r0, 0x1) (async) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000480)={0x3, 0x5, 0xe, 0xda, 0x0, 0x18, 0x20, 0x7e, 0x3f, 0x3, 0xff, 0x7, 0xa0, 0x2}, 0xe) 3.632752811s ago: executing program 1 (id=1005): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0xf803, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3.537471645s ago: executing program 3 (id=1006): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xb}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket(0x2a, 0x2, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000000c0)='skurce', &(0x7f00000001c0)='source', 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/145, 0x91}], 0x1) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x9}]}}]}, 0x40}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800500030000000000080001400000000108000240000000090900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000200)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0xe, 0xa6, 0x0, {0x15, 0x4, 0x3, 0x23, 0x61, 0x65, 0x3, 0x2, 0x6, 0x2c16, @empty, @multicast2, {[@ssrr={0x89, 0xb, 0xee, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x34, 0xf2, 0x1, 0x4, [{@broadcast, 0x2}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x1c7}, {@local, 0x9e}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xd8}, {@rand_addr=0x64010102, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xae1}]}]}}}}}}}, 0x0) 3.519774273s ago: executing program 3 (id=1007): open(0x0, 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) close(r2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) 2.718073346s ago: executing program 1 (id=1008): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mprotect(&(0x7f0000385000/0xc000)=nil, 0xc000, 0x3000005) r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000100)="55d6b698ce792b8ac78ce0df986fadd0568479c6f6160984b66642cab0410f61760f524a8156bdf36b4c0cba90ec1c515b66ec14a42b6813f7b4a33193a680c63a05297795940f9aa938ff8a45403bc3fa3e0e6d4f1e682ee0fe7c9307c6ca5d65c6bc373b705b226102270fccd4653324f2d96bfbdc21ec47311d54dd5a663817ff4937cdd462fc4107258ed55f11a37536efc3bcca6d130244a1819d3c273276bfbe877a288f8e89ff7684ddcbf29436d504ea837dca3fb74608", 0xbb, 0x10, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x34fe}, 0x1c) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000031be6a24000100fcffffff00000000000000000600040000000000a28f8ddb34a75c4d8f90650efc1be66cdc014e4bf7827a63781bbe495b0ebbef54c580f0f384f7baa5980257610144610802cdf2eab1ca9e00d77834f050241665ad2e0024d0c3c748a478b66748a9a4dabe040db4bfc13b471de2628480ed92de45c59edffb72fd08f1935fe5eb77ab203bf702719effb9d1aa2afeac4fc44c60b6e4ed6a0fe928b4e33c76348edf6535953aaad6b31117d262dff775f1"], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x84) (async) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000480)={0x60, 0x6, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x1, 0x0, 0x0, 0x1, 0x70, 0x4, 0xc1, 0x1}) 2.584571456s ago: executing program 3 (id=1009): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x440010, 0x2, 0xfffe, 0x7}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r3, 0x140b, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x700fbff, 0x4, 0x1, 0x0, r2, &(0x7f0000000180)='\x00', 0x1001, 0x0, 0x3000000000000000, 0x1000000}]) dup3(r0, r2, 0x6700000000000000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 2.580698059s ago: executing program 5 (id=1010): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_pts(0xffffffffffffffff, 0x200800) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r1 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002100010000000000000000000a0000000000000000000000050019"], 0x24}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020", 0x5, 0x0, 0x0, 0x0) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r5 = accept$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) recvmmsg(r5, &(0x7f0000006100), 0x49f, 0x0, 0x0) 969.127047ms ago: executing program 1 (id=1011): mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='befs\x00', 0x200000, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) r1 = dup(r0) write$P9_RLERRORu(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="5300000007000046009d40edce82cd28e1e1edab5168510449b8a5", @ANYRES64], 0x53) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (rerun: 32) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) (async, rerun: 32) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000180)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f00000000c0)={0x2, 0x100, 0x7, {0x0, 0x2, 0x8, 0xfffffff9}}) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async, rerun: 32) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x5e}}}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x3ff}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC_HINT={0xa}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async, rerun: 32) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r8, 0x0, 0x0) 720.391006ms ago: executing program 6 (id=1012): r0 = socket$netlink(0x10, 0x3, 0xa) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000540)={0x41c340, 0x104, 0x8}, 0x18) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x111, &(0x7f0000000380)={0x0, 0xfdf1}, 0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x241}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendfile(r0, r1, 0x0, 0x7ffff000) 201.493516ms ago: executing program 7 (id=1013): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="9c0000003d0019010000000005000000017c00000400fc800c00018006000600800a00000c0002800800"], 0x9c}}, 0x4010) 107.248191ms ago: executing program 6 (id=1014): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r2 = dup(0xffffffffffffffff) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x80000000, 0x0, 0x81, 0xfffffffb}) r3 = syz_open_dev$cec(&(0x7f00000004c0), 0x0, 0x80100) ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000040)={0xf0, 0x40000}) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32], 0x58) chdir(&(0x7f0000000100)='./file0\x00') read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffd6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x115ac0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, 0x0, 0x32d, 0x2403}, 0x14}}, 0x0) 0s ago: executing program 7 (id=1015): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4b4, 0xde64, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1}}}}}]}}]}}, 0x0) pipe2(0x0, 0x80000) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="2021070000000700406116"], 0x0, 0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): 369.981955][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 370.584497][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.592631][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.652178][ T5917] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 370.702983][ T8337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.720459][ T5976] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 370.736758][ T8337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.910763][ T5976] usb 6-1: Using ep0 maxpacket: 16 [ 371.020631][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 371.169749][ T9] usb 2-1: USB disconnect, device number 18 [ 371.177617][ T5976] usb 6-1: unable to get BOS descriptor or descriptor too short [ 371.194807][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 371.200507][ T5976] usb 6-1: too many configurations: 207, using maximum allowed: 8 [ 371.208293][ T9] ftdi_sio 2-1:0.0: device disconnected [ 371.252752][ T8337] team0: Port device team_slave_0 added [ 371.259837][ T5976] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 371.262070][ T8337] team0: Port device team_slave_1 added [ 371.270525][ T5976] usb 6-1: can't read configurations, error -61 [ 371.308643][ T8337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.327670][ T8337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.354316][ T8337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.378196][ T8337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.416202][ T8337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.442931][ T8337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.453710][ T5976] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 371.559997][ T8337] hsr_slave_0: entered promiscuous mode [ 371.566490][ T8337] hsr_slave_1: entered promiscuous mode [ 371.574173][ T8337] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 371.583632][ T8337] Cannot create hsr debugfs directory [ 371.620543][ T5976] usb 6-1: Using ep0 maxpacket: 16 [ 371.627455][ T5976] usb 6-1: unable to get BOS descriptor or descriptor too short [ 371.638516][ T5976] usb 6-1: too many configurations: 207, using maximum allowed: 8 [ 371.649632][ T5976] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 371.658960][ T5976] usb 6-1: can't read configurations, error -61 [ 371.666852][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.670640][ T5854] Bluetooth: hci5: command tx timeout [ 371.683881][ T5976] usb usb6-port1: attempt power cycle [ 372.028721][ T8337] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 372.038825][ T8337] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 372.047378][ T8337] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 372.055907][ T8337] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 372.062664][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 372.132612][ T8406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.141767][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.217949][ T5976] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 372.263810][ T5976] usb 6-1: Using ep0 maxpacket: 16 [ 372.280106][ T5976] usb 6-1: unable to get BOS descriptor or descriptor too short [ 372.288612][ T5976] usb 6-1: too many configurations: 207, using maximum allowed: 8 [ 372.304434][ T5976] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 372.333840][ T5976] usb 6-1: can't read configurations, error -61 [ 372.370834][ T8337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.415503][ T8337] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.458345][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.465466][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.504108][ T5976] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 372.519948][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.527027][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.542470][ T5976] usb 6-1: Using ep0 maxpacket: 16 [ 372.581006][ T5976] usb 6-1: unable to get BOS descriptor or descriptor too short [ 372.588942][ T5976] usb 6-1: too many configurations: 207, using maximum allowed: 8 [ 372.613839][ T5976] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 372.622317][ T5976] usb 6-1: can't read configurations, error -61 [ 372.636568][ T5976] usb usb6-port1: unable to enumerate USB device [ 372.732046][ T8337] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 373.780517][ T5854] Bluetooth: hci5: command tx timeout [ 374.006978][ T8413] syz_tun: entered allmulticast mode [ 374.023470][ T8337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.140627][ C0] net_ratelimit: 9 callbacks suppressed [ 374.140656][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 374.144042][ T8412] syz_tun: left allmulticast mode [ 374.170938][ T8431] netlink: 44 bytes leftover after parsing attributes in process `syz.5.646'. [ 374.757922][ T8337] veth0_vlan: entered promiscuous mode [ 374.783932][ T8337] veth1_vlan: entered promiscuous mode [ 374.807353][ T8337] veth0_macvtap: entered promiscuous mode [ 374.817131][ T8337] veth1_macvtap: entered promiscuous mode [ 374.832057][ T8337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.843152][ T8337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.853773][ T8337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.865658][ T8337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.875674][ T5889] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 374.885695][ T8337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.896743][ T8337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.907646][ T8337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.918731][ T8337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.929630][ T8337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.941145][ T8337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.954020][ T8337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.959624][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.981224][ T8337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.992146][ T8337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.003455][ T8337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.014539][ T8337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.180487][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 375.703427][ T8337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.719429][ T8337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.729414][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.739492][ T5889] usb 3-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 375.763156][ T8337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.773755][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.781851][ T8337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.804248][ T5889] usb 3-1: config 0 descriptor?? [ 375.814128][ T8337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.827458][ T8337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.834222][ T5854] Bluetooth: hci5: command tx timeout [ 375.841270][ T8337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.870817][ T8337] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.995518][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.003704][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.141409][ T8337] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.222786][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 376.234220][ T8337] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.255766][ T8337] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.353009][ T5889] usbhid 3-1:0.0: can't add hid device: -71 [ 376.372893][ T5889] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 376.430943][ T5889] usb 3-1: USB disconnect, device number 20 [ 376.467741][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.494175][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.540131][ T3481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.580136][ T3481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.692157][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 376.692170][ T29] audit: type=1400 audit(1739616462.355:521): avc: denied { mounton } for pid=8337 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 376.723507][ T8456] netlink: 44 bytes leftover after parsing attributes in process `syz.3.655'. [ 376.862101][ T1201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.870791][ T5889] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 376.926190][ T29] audit: type=1400 audit(1739616462.585:522): avc: denied { ioctl } for pid=8457 comm="syz.3.656" path="socket:[18294]" dev="sockfs" ino=18294 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 377.045232][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.130147][ T8463] netlink: 164 bytes leftover after parsing attributes in process `syz.6.619'. [ 377.260946][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 377.418943][ T8465] netlink: 'syz.3.656': attribute type 12 has an invalid length. [ 378.120460][ T5889] usb 6-1: Using ep0 maxpacket: 32 [ 378.130992][ T5889] usb 6-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 378.155896][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.176192][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.263353][ T5889] usb 6-1: config 0 descriptor?? [ 378.331261][ T5889] usb 6-1: selecting invalid altsetting 3 [ 378.351598][ T5889] comedi comedi0: could not set alternate setting 3 in high speed [ 378.370884][ T5889] usbduxsigma 6-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 378.382144][ T5889] usbduxsigma 6-1:0.0: probe with driver usbduxsigma failed with error -22 [ 378.622996][ T1065] block nbd0: Possible stuck request ffff8880264c7000: control (read@0,4096B). Runtime 60 seconds [ 378.693375][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.699719][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.740235][ T29] audit: type=1400 audit(1739616464.385:523): avc: denied { create } for pid=8471 comm="syz.1.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 379.092727][ T5889] usb 6-1: USB disconnect, device number 8 [ 379.187358][ T29] audit: type=1400 audit(1739616464.395:524): avc: denied { write } for pid=8471 comm="syz.1.660" path="socket:[19508]" dev="sockfs" ino=19508 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 379.207677][ T5976] net_ratelimit: 1 callbacks suppressed [ 379.207696][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.340886][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 379.820193][ T8484] fuse: Unknown parameter 'J¥F' [ 379.902459][ T1201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.160721][ T45] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 380.261078][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.377413][ T45] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 380.380531][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 380.514681][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.524574][ T8499] Illegal XDP return value 4294967274 on prog (id 102) dev N/A, expect packet loss! [ 380.576708][ T45] usb 6-1: config 0 descriptor?? [ 380.589760][ T45] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 380.791078][ T8509] vcan0: tx address claim with dlc 1 [ 380.796748][ T45] gp8psk: usb in 128 operation failed. [ 380.968950][ T29] audit: type=1326 audit(1739616466.625:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8502 comm="syz.3.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa31fd8cde9 code=0x7fc00000 [ 381.257823][ T25] IPVS: starting estimator thread 0... [ 381.392304][ T8516] IPVS: using max 22 ests per chain, 52800 per kthread [ 381.420505][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 381.550946][ T8488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.572214][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.598130][ T8488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.649725][ T8488] syz_tun: entered allmulticast mode [ 381.655550][ T8488] syz_tun: left allmulticast mode [ 381.704681][ T1201] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 381.799517][ T45] gp8psk: usb in 146 operation failed. [ 381.898268][ T45] gp8psk: failed to get FW version [ 381.901201][ T8522] netlink: 164 bytes leftover after parsing attributes in process `syz.1.673'. [ 381.920344][ T45] gp8psk: usb in 149 operation failed. [ 381.956832][ T45] gp8psk: failed to get FPGA version [ 381.956999][ T1201] usb 4-1: Using ep0 maxpacket: 32 [ 381.981238][ T1201] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.993924][ T1201] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.098394][ T45] gp8psk: usb in 138 operation failed. [ 382.104093][ T45] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 382.114677][ T45] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 382.138684][ T45] usb 6-1: USB disconnect, device number 9 [ 382.139722][ T1201] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 382.211641][ T8526] netlink: 'syz.6.674': attribute type 29 has an invalid length. [ 382.460498][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 382.786059][ T1201] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.835119][ T1201] usb 4-1: config 0 descriptor?? [ 382.953810][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.972650][ T969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.282994][ T8534] netlink: 84 bytes leftover after parsing attributes in process `syz.1.677'. [ 383.313380][ T8534] netlink: 12 bytes leftover after parsing attributes in process `syz.1.677'. [ 383.343495][ T8536] FAULT_INJECTION: forcing a failure. [ 383.343495][ T8536] name failslab, interval 1, probability 0, space 0, times 0 [ 383.360117][ T8536] CPU: 1 UID: 0 PID: 8536 Comm: syz.5.679 Not tainted 6.14.0-rc2-syzkaller-00228-g04f41cbf03ec #0 [ 383.360138][ T8536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 383.360148][ T8536] Call Trace: [ 383.360153][ T8536] [ 383.360159][ T8536] dump_stack_lvl+0x16c/0x1f0 [ 383.360184][ T8536] should_fail_ex+0x50a/0x650 [ 383.360208][ T8536] ? fs_reclaim_acquire+0xae/0x150 [ 383.360232][ T8536] ? tomoyo_encode2+0x100/0x3e0 [ 383.360253][ T8536] should_failslab+0xc2/0x120 [ 383.360272][ T8536] __kmalloc_noprof+0xcb/0x510 [ 383.360288][ T8536] ? __get_fs_type+0x21/0x170 [ 383.360312][ T8536] tomoyo_encode2+0x100/0x3e0 [ 383.360337][ T8536] tomoyo_encode+0x29/0x50 [ 383.360358][ T8536] tomoyo_mount_acl+0x314/0x880 [ 383.360380][ T8536] ? hlock_class+0x4e/0x130 [ 383.360401][ T8536] ? __lock_acquire+0x15a9/0x3c40 [ 383.360428][ T8536] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 383.360454][ T8536] ? __pfx___lock_acquire+0x10/0x10 [ 383.360476][ T8536] ? stack_trace_save+0x95/0xd0 [ 383.360495][ T8536] ? __pfx_lock_release+0x10/0x10 [ 383.360532][ T8536] ? trace_lock_acquire+0x14e/0x1f0 [ 383.360552][ T8536] ? tomoyo_mount_permission+0x149/0x420 [ 383.360575][ T8536] ? lock_acquire+0x2f/0xb0 [ 383.360595][ T8536] ? tomoyo_mount_permission+0x149/0x420 [ 383.360621][ T8536] tomoyo_mount_permission+0x16e/0x420 [ 383.360642][ T8536] ? tomoyo_mount_permission+0x149/0x420 [ 383.360665][ T8536] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 383.360699][ T8536] ? get_current_fs_domain+0x184/0x1f0 [ 383.360721][ T8536] security_sb_mount+0x9b/0x260 [ 383.360743][ T8536] path_mount+0x129/0x1f10 [ 383.360764][ T8536] ? kmem_cache_free+0x2e2/0x4d0 [ 383.360780][ T8536] ? __pfx_path_mount+0x10/0x10 [ 383.360802][ T8536] ? putname+0x13c/0x180 [ 383.360825][ T8536] __x64_sys_mount+0x28f/0x310 [ 383.360844][ T8536] ? __pfx___x64_sys_mount+0x10/0x10 [ 383.360870][ T8536] do_syscall_64+0xcd/0x250 [ 383.360891][ T8536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.360915][ T8536] RIP: 0033:0x7f242898cde9 [ 383.360930][ T8536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.360945][ T8536] RSP: 002b:00007f24297df038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 383.360962][ T8536] RAX: ffffffffffffffda RBX: 00007f2428ba5fa0 RCX: 00007f242898cde9 [ 383.360974][ T8536] RDX: 0000400000000080 RSI: 00004000000000c0 RDI: 0000000000000000 [ 383.360984][ T8536] RBP: 00007f24297df090 R08: 0000400000000180 R09: 0000000000000000 [ 383.360995][ T8536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 383.361005][ T8536] R13: 0000000000000000 R14: 00007f2428ba5fa0 R15: 00007ffdbfba2c98 [ 383.361029][ T8536] [ 383.370474][ T5889] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 383.788755][ T5900] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 383.903117][ T5889] usb 3-1: Using ep0 maxpacket: 8 [ 384.021195][ T5889] usb 3-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 384.100803][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.109695][ T5900] usb 7-1: config 8 has an invalid interface number: 177 but max is 0 [ 384.121587][ T5900] usb 7-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 384.148437][ T5889] usb 3-1: config 0 descriptor?? [ 384.163651][ T5900] usb 7-1: config 8 has no interface number 0 [ 384.176260][ T5889] pwc: Logitech QuickCam Notebook Pro USB webcam detected. [ 384.186520][ T5900] usb 7-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 384.207261][ T5889] pwc: Warning: more than 1 configuration available. [ 384.222597][ T5900] usb 7-1: config 8 interface 177 has no altsetting 0 [ 384.239594][ T5900] usb 7-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 384.272524][ T5900] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.414999][ T5900] ir_toy 7-1:8.177: required endpoints not found [ 384.474292][ T29] audit: type=1326 audit(1739616470.125:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8502 comm="syz.3.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa31fd8cde9 code=0x7fc00000 [ 384.540506][ C0] net_ratelimit: 2 callbacks suppressed [ 384.540538][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 384.903089][ T1201] usbhid 4-1:0.0: can't add hid device: -71 [ 384.909137][ T5900] usb 7-1: USB disconnect, device number 2 [ 384.916048][ T1201] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 384.973012][ T1201] usb 4-1: USB disconnect, device number 25 [ 384.990745][ T969] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 385.042668][ T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.206471][ T969] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 385.262078][ T969] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 385.283510][ T8555] netlink: 56 bytes leftover after parsing attributes in process `syz.1.685'. [ 385.295314][ T8555] netlink: 16 bytes leftover after parsing attributes in process `syz.1.685'. [ 385.311439][ T969] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.518380][ T969] usb 6-1: config 0 descriptor?? [ 385.583895][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 385.588732][ T969] pwc: Askey VC010 type 2 USB webcam detected. [ 385.630628][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.800791][ T8558] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 385.860185][ T8558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.686'. [ 386.068442][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.087021][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.145948][ T8559] mkiss: ax0: crc mode is auto. [ 386.372675][ T969] pwc: recv_control_msg error -32 req 02 val 2b00 [ 386.411194][ T969] pwc: recv_control_msg error -32 req 02 val 2700 [ 386.419860][ T969] pwc: recv_control_msg error -32 req 02 val 2c00 [ 386.620502][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 386.866709][ T8570] FAULT_INJECTION: forcing a failure. [ 386.866709][ T8570] name failslab, interval 1, probability 0, space 0, times 0 [ 386.927693][ T8570] CPU: 1 UID: 0 PID: 8570 Comm: syz.1.688 Not tainted 6.14.0-rc2-syzkaller-00228-g04f41cbf03ec #0 [ 386.927716][ T8570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 386.927725][ T8570] Call Trace: [ 386.927731][ T8570] [ 386.927739][ T8570] dump_stack_lvl+0x16c/0x1f0 [ 386.927763][ T8570] should_fail_ex+0x50a/0x650 [ 386.927791][ T8570] ? fs_reclaim_acquire+0xae/0x150 [ 386.927818][ T8570] should_failslab+0xc2/0x120 [ 386.927839][ T8570] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 386.927859][ T8570] ? __alloc_skb+0x2b1/0x380 [ 386.927881][ T8570] ? __pfx_mark_lock+0x10/0x10 [ 386.927906][ T8570] __alloc_skb+0x2b1/0x380 [ 386.927927][ T8570] ? __pfx___alloc_skb+0x10/0x10 [ 386.927947][ T8570] ? find_held_lock+0x2d/0x110 [ 386.927978][ T8570] ? __might_fault+0x13b/0x190 [ 386.928003][ T8570] alloc_skb_with_frags+0xe4/0x850 [ 386.928029][ T8570] ? __might_fault+0xe3/0x190 [ 386.928053][ T8570] sock_alloc_send_pskb+0x7f1/0x980 [ 386.928075][ T8570] ? _copy_from_iter+0x15e/0x1560 [ 386.928108][ T8570] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 386.928128][ T8570] ? __lock_acquire+0xcc5/0x3c40 [ 386.928154][ T8570] ? hlock_class+0x4e/0x130 [ 386.928172][ T8570] ? __lock_acquire+0xcc5/0x3c40 [ 386.928195][ T8570] ? iov_iter_advance+0x7d/0x6c0 [ 386.928224][ T8570] tun_get_user+0xd3b/0x3e50 [ 386.928262][ T8570] ? __pfx_tun_get_user+0x10/0x10 [ 386.928285][ T8570] ? find_held_lock+0x2d/0x110 [ 386.928309][ T8570] ? __pfx_lock_release+0x10/0x10 [ 386.928345][ T8570] tun_chr_write_iter+0xdc/0x210 [ 386.928372][ T8570] vfs_write+0x5ae/0x1150 [ 386.928399][ T8570] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 386.928427][ T8570] ? __pfx_vfs_write+0x10/0x10 [ 386.928454][ T8570] ? __fget_files+0x40/0x3a0 [ 386.928485][ T8570] ksys_write+0x12b/0x250 [ 386.928510][ T8570] ? __pfx_ksys_write+0x10/0x10 [ 386.928543][ T8570] do_syscall_64+0xcd/0x250 [ 386.928565][ T8570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.928589][ T8570] RIP: 0033:0x7f7ffdd8cde9 [ 386.928604][ T8570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 386.928621][ T8570] RSP: 002b:00007f7ffec57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 386.928639][ T8570] RAX: ffffffffffffffda RBX: 00007f7ffdfa6160 RCX: 00007f7ffdd8cde9 [ 386.928652][ T8570] RDX: 000000000000002a RSI: 0000400000000240 RDI: 0000000000000003 [ 386.928663][ T8570] RBP: 00007f7ffec57090 R08: 0000000000000000 R09: 0000000000000000 [ 386.928674][ T8570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.928686][ T8570] R13: 0000000000000001 R14: 00007f7ffdfa6160 R15: 00007ffc1b7d3f68 [ 386.928710][ T8570] [ 387.209355][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.254381][ T969] pwc: recv_control_msg error -71 req 04 val 1000 [ 387.269704][ T969] pwc: recv_control_msg error -71 req 04 val 1300 [ 387.276774][ T969] pwc: recv_control_msg error -71 req 04 val 1400 [ 387.285727][ T5889] pwc: Failed to set LED on/off time (-71) [ 387.289642][ T969] pwc: recv_control_msg error -71 req 02 val 2000 [ 387.293539][ T5889] pwc: send_video_command error -71 [ 387.321940][ T969] pwc: recv_control_msg error -71 req 02 val 2100 [ 387.330548][ T969] pwc: recv_control_msg error -71 req 04 val 1500 [ 387.337661][ T969] pwc: recv_control_msg error -71 req 02 val 2500 [ 387.344849][ T969] pwc: recv_control_msg error -71 req 02 val 2400 [ 387.351798][ T969] pwc: recv_control_msg error -71 req 02 val 2600 [ 387.358513][ T969] pwc: recv_control_msg error -71 req 02 val 2900 [ 387.365120][ T5889] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 387.365275][ T969] pwc: recv_control_msg error -71 req 02 val 2800 [ 387.384274][ T969] pwc: recv_control_msg error -71 req 04 val 1100 [ 387.391059][ T969] pwc: recv_control_msg error -71 req 04 val 1200 [ 387.399757][ T969] pwc: Registered as video103. [ 387.405602][ T969] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input20 [ 387.439401][ T969] usb 6-1: USB disconnect, device number 10 [ 387.445498][ T5889] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 387.637435][ T5889] usb 3-1: USB disconnect, device number 21 [ 387.660523][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 388.014138][ T5939] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 388.307020][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.422961][ T8585] blktrace: Concurrent blktraces are not allowed on loop4 [ 388.570486][ T5939] usb 2-1: Using ep0 maxpacket: 16 [ 388.579148][ T5939] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 388.610302][ T8585] blktrace: Concurrent blktraces are not allowed on loop4 [ 388.717205][ T5939] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 388.764084][ T5939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 388.774137][ T5836] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 388.812943][ T5939] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 388.890291][ T5939] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 388.937584][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.965581][ T5939] usb 2-1: Product: syz [ 388.970534][ T5836] usb 4-1: Using ep0 maxpacket: 32 [ 388.975724][ T5939] usb 2-1: Manufacturer: syz [ 388.991337][ T5836] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 389.003170][ T5939] usb 2-1: SerialNumber: syz [ 389.004109][ T29] audit: type=1400 audit(1739616474.655:527): avc: denied { listen } for pid=8571 comm="syz.6.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 389.008871][ T5836] usb 4-1: config 0 has no interface number 0 [ 389.035336][ T5939] usb 2-1: config 0 descriptor?? [ 389.044106][ T5939] xbox_remote_probe: Unexpected endpoint_in [ 389.080746][ T5836] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 389.115860][ T5836] usb 4-1: config 0 interface 1 has no altsetting 0 [ 389.559192][ T5836] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 389.605762][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.653667][ T5836] usb 4-1: Product: syz [ 389.740564][ C0] net_ratelimit: 3 callbacks suppressed [ 389.740582][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 389.963524][ T5836] usb 4-1: Manufacturer: syz [ 389.977526][ T5836] usb 4-1: SerialNumber: syz [ 390.008414][ T5836] usb 4-1: config 0 descriptor?? [ 390.070962][ T8598] netlink: 164 bytes leftover after parsing attributes in process `syz.2.696'. [ 390.358404][ T8582] 9pnet_fd: Insufficient options for proto=fd [ 390.489154][ T8601] netlink: 56 bytes leftover after parsing attributes in process `syz.6.697'. [ 390.533006][ T8601] netlink: 16 bytes leftover after parsing attributes in process `syz.6.697'. [ 390.547308][ T969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.675230][ T5939] usb 2-1: USB disconnect, device number 19 [ 390.780510][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 390.788514][ T5836] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 390.821292][ T5836] cx231xx 4-1:0.1: Not found matching IAD interface [ 390.849939][ T5854] Bluetooth: hci2: unexpected event for opcode 0x2036 [ 390.878826][ T5836] usb 4-1: USB disconnect, device number 26 [ 391.097835][ T8603] wireguard0: entered promiscuous mode [ 391.820562][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 392.053796][ T8603] wireguard0: entered allmulticast mode [ 392.243146][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.252629][ T5836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.526546][ T29] audit: type=1400 audit(1739616478.185:528): avc: denied { read } for pid=8622 comm="syz.2.703" path="socket:[19816]" dev="sockfs" ino=19816 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 392.860514][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 393.626623][ T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.709776][ T8634] digital: digital_start_poll: Unknown protocol [ 393.900820][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 394.585014][ T8649] netlink: 44 bytes leftover after parsing attributes in process `syz.3.709'. [ 394.763476][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.811591][ T5889] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 394.940509][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 395.101324][ T5889] usb 2-1: Using ep0 maxpacket: 32 [ 395.145556][ T8653] netlink: 'syz.2.711': attribute type 9 has an invalid length. [ 395.153426][ T8653] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.711'. [ 395.432595][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.451408][ T5836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.461652][ T5889] usb 2-1: config 0 has an invalid interface number: 108 but max is 0 [ 395.469829][ T5889] usb 2-1: config 0 has no interface number 0 [ 395.516943][ T5889] usb 2-1: config 0 interface 108 altsetting 180 endpoint 0x2 has invalid wMaxPacketSize 0 [ 395.529110][ T29] audit: type=1400 audit(1739616481.175:529): avc: denied { mounton } for pid=8652 comm="syz.3.710" path="/135/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 395.551409][ T5889] usb 2-1: config 0 interface 108 altsetting 180 bulk endpoint 0x2 has invalid maxpacket 0 [ 395.569251][ T5889] usb 2-1: config 0 interface 108 has no altsetting 0 [ 395.592211][ T5889] usb 2-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=97.c3 [ 395.601488][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.612565][ T5889] usb 2-1: Product: syz [ 395.616737][ T5889] usb 2-1: Manufacturer: syz [ 395.621844][ T5889] usb 2-1: SerialNumber: syz [ 395.731217][ T5889] usb 2-1: config 0 descriptor?? [ 395.740737][ T5889] ttusbir 2-1:0.108: cannot find expected altsetting [ 395.757299][ T29] audit: type=1400 audit(1739616481.415:530): avc: denied { mounton } for pid=8652 comm="syz.3.710" path="/135/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 395.980503][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 396.315375][ T29] audit: type=1400 audit(1739616481.475:531): avc: denied { write } for pid=8652 comm="syz.3.710" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 396.336748][ T29] audit: type=1400 audit(1739616481.845:532): avc: denied { open } for pid=8652 comm="syz.3.710" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 396.368227][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.395685][ T8665] netlink: 'syz.3.710': attribute type 1 has an invalid length. [ 396.404204][ T8665] netlink: 224 bytes leftover after parsing attributes in process `syz.3.710'. [ 396.554509][ T29] audit: type=1400 audit(1739616482.055:533): avc: denied { read } for pid=8652 comm="syz.3.710" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 397.020515][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 397.135973][ T8672] openvswitch: netlink: Multiple metadata blocks provided [ 397.244226][ T29] audit: type=1400 audit(1739616482.905:534): avc: denied { unmount } for pid=5846 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 397.309015][ T8675] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 397.357649][ T8677] overlayfs: conflicting options: nfs_export=on,index=off [ 397.431322][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.504588][ T8681] FAULT_INJECTION: forcing a failure. [ 397.504588][ T8681] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 397.519497][ T8681] CPU: 1 UID: 0 PID: 8681 Comm: syz.6.717 Not tainted 6.14.0-rc2-syzkaller-00228-g04f41cbf03ec #0 [ 397.519516][ T8681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 397.519525][ T8681] Call Trace: [ 397.519531][ T8681] [ 397.519538][ T8681] dump_stack_lvl+0x16c/0x1f0 [ 397.519561][ T8681] should_fail_ex+0x50a/0x650 [ 397.519588][ T8681] _copy_from_user+0x2e/0xd0 [ 397.519607][ T8681] copy_msghdr_from_user+0x99/0x160 [ 397.519630][ T8681] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 397.519664][ T8681] ___sys_sendmsg+0xff/0x1e0 [ 397.519685][ T8681] ? __pfx____sys_sendmsg+0x10/0x10 [ 397.519725][ T8681] ? __pfx_lock_release+0x10/0x10 [ 397.519747][ T8681] ? trace_lock_acquire+0x14e/0x1f0 [ 397.519776][ T8681] ? __fget_files+0x206/0x3a0 [ 397.519800][ T8681] __sys_sendmsg+0x16e/0x220 [ 397.519821][ T8681] ? __pfx___sys_sendmsg+0x10/0x10 [ 397.519857][ T8681] do_syscall_64+0xcd/0x250 [ 397.519878][ T8681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.519901][ T8681] RIP: 0033:0x7fb0c8d8cde9 [ 397.519914][ T8681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 397.519930][ T8681] RSP: 002b:00007fb0c9b01038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 397.519946][ T8681] RAX: ffffffffffffffda RBX: 00007fb0c8fa5fa0 RCX: 00007fb0c8d8cde9 [ 397.519957][ T8681] RDX: 0000000000000800 RSI: 0000400000006040 RDI: 0000000000000003 [ 397.519967][ T8681] RBP: 00007fb0c9b01090 R08: 0000000000000000 R09: 0000000000000000 [ 397.519978][ T8681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.519988][ T8681] R13: 0000000000000000 R14: 00007fb0c8fa5fa0 R15: 00007ffff5791158 [ 397.520012][ T8681] [ 397.910538][ T5836] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 397.925924][ T8687] gtp1: entered promiscuous mode [ 397.925946][ T8687] gtp1: entered allmulticast mode [ 398.030657][ T5888] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 398.060676][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 398.070088][ T5836] usb 3-1: config 8 has an invalid interface number: 177 but max is 0 [ 398.202022][ T5888] usb 7-1: Using ep0 maxpacket: 8 [ 398.210666][ T5888] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 398.261187][ T5888] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 398.268155][ T5836] usb 3-1: config 8 has no interface number 0 [ 398.304829][ T5889] usb 2-1: USB disconnect, device number 20 [ 398.377251][ T5836] usb 3-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 398.409999][ T5888] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 398.544102][ T5888] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 398.631085][ T5836] usb 3-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 398.725260][ T5836] usb 3-1: config 8 interface 177 has no altsetting 0 [ 398.752944][ T5888] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 398.763344][ T5888] usb 7-1: New USB device strings: Mfr=0, Product=7, SerialNumber=0 [ 398.794695][ T5888] usb 7-1: Product: syz [ 399.110533][ T5836] usb 3-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 399.140632][ T5836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.140987][ T8685] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 399.209123][ T8677] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 399.718177][ T5836] usb 3-1: string descriptor 0 read error: -71 [ 399.762797][ T5836] ir_toy 3-1:8.177: required endpoints not found [ 399.800307][ T5836] usb 3-1: USB disconnect, device number 22 [ 399.852122][ T5888] usb 7-1: usb_control_msg returned -71 [ 399.869344][ T5888] usbtmc 7-1:16.0: can't read capabilities [ 399.893067][ T5888] usb 7-1: USB disconnect, device number 3 [ 400.140521][ C0] net_ratelimit: 4 callbacks suppressed [ 400.140539][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 400.472954][ T8705] C: renamed from team_slave_0 (while UP) [ 400.487663][ T8705] netlink: 'syz.1.723': attribute type 2 has an invalid length. [ 400.495668][ T8705] netlink: 128 bytes leftover after parsing attributes in process `syz.1.723'. [ 400.510126][ T8705] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 400.627617][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.070449][ T8711] netlink: 56 bytes leftover after parsing attributes in process `syz.6.724'. [ 401.071461][ T8711] netlink: 16 bytes leftover after parsing attributes in process `syz.6.724'. [ 401.180684][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 401.581037][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.661224][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.680213][ T29] audit: type=1400 audit(1739616487.285:535): avc: denied { map } for pid=8712 comm="syz.1.726" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 401.703381][ T29] audit: type=1400 audit(1739616487.285:536): avc: denied { execute } for pid=8712 comm="syz.1.726" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 401.734517][ T8720] netlink: 8 bytes leftover after parsing attributes in process `syz.5.727'. [ 402.220867][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 402.496956][ T8731] netlink: 56 bytes leftover after parsing attributes in process `syz.2.731'. [ 402.508536][ T8731] netlink: 16 bytes leftover after parsing attributes in process `syz.2.731'. [ 402.754503][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.882494][ T8733] netlink: 164 bytes leftover after parsing attributes in process `syz.5.732'. [ 403.260522][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 403.824042][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.940494][ T29] audit: type=1400 audit(1739616489.545:537): avc: denied { setopt } for pid=8729 comm="syz.6.730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 404.534627][ T8750] netlink: 8 bytes leftover after parsing attributes in process `syz.3.737'. [ 405.340510][ C0] net_ratelimit: 4 callbacks suppressed [ 405.340531][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 405.681521][ T8759] netlink: 'syz.3.740': attribute type 1 has an invalid length. [ 405.689200][ T8759] netlink: 134744 bytes leftover after parsing attributes in process `syz.3.740'. [ 405.798520][ T29] audit: type=1400 audit(1739616491.455:538): avc: denied { ioctl } for pid=8760 comm="syz.6.742" path="socket:[20072]" dev="sockfs" ino=20072 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 405.900998][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.120766][ T5836] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 406.281595][ T5836] usb 2-1: Using ep0 maxpacket: 32 [ 406.338594][ T5836] usb 2-1: config 0 interface 0 has no altsetting 0 [ 406.380530][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 406.434555][ T5836] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 406.477064][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.516033][ T5836] usb 2-1: Product: syz [ 406.539089][ T5836] usb 2-1: Manufacturer: syz [ 406.560243][ T5836] usb 2-1: SerialNumber: syz [ 406.590627][ T5900] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 406.618201][ T5836] usb 2-1: config 0 descriptor?? [ 406.637031][ T5836] gs_usb 2-1:0.0: Required endpoints not found [ 406.719101][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 406.728517][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 406.738653][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 406.751593][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 406.760134][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 406.767942][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 406.790720][ T5900] usb 7-1: Using ep0 maxpacket: 32 [ 406.803053][ T5900] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 406.806435][ T8770] wg1 speed is unknown, defaulting to 1000 [ 406.816672][ T5900] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 406.826848][ T5900] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 406.841426][ T5900] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 406.860959][ T5900] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 406.870970][ T5900] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 406.889059][ T5900] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 406.898268][ T5900] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.919539][ T5900] usb 7-1: config 0 descriptor?? [ 406.940854][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.952894][ T8770] chnl_net:caif_netlink_parms(): no params data found [ 407.008824][ T8770] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.016347][ T8770] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.023590][ T8770] bridge_slave_0: entered allmulticast mode [ 407.030222][ T8770] bridge_slave_0: entered promiscuous mode [ 407.037876][ T8770] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.045082][ T8770] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.052375][ T8770] bridge_slave_1: entered allmulticast mode [ 407.058887][ T8770] bridge_slave_1: entered promiscuous mode [ 407.087906][ T8770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.098727][ T8770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.136374][ T5900] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 407.167022][ T8770] team0: Port device team_slave_0 added [ 407.182818][ T8770] team0: Port device team_slave_1 added [ 407.265821][ T8779] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 407.300279][ T53] Bluetooth: hci4: unexpected event for opcode 0x0006 [ 407.326289][ T8770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.338559][ T8770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.368337][ T8770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.383117][ T8769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.396255][ T8770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.396523][ T8769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.420498][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 407.428374][ T8770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.481530][ T29] audit: type=1400 audit(1739616493.125:539): avc: denied { read write } for pid=8766 comm="syz.6.746" name="lp0" dev="devtmpfs" ino=3014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 407.508486][ T8770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.521545][ C1] usblp0: nonzero read bulk status received: -71 [ 407.522418][ T5900] usb 7-1: USB disconnect, device number 4 [ 407.578430][ T29] audit: type=1400 audit(1739616493.125:540): avc: denied { open } for pid=8766 comm="syz.6.746" path="/dev/usb/lp0" dev="devtmpfs" ino=3014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 407.645715][ T8770] hsr_slave_0: entered promiscuous mode [ 407.657719][ T8770] hsr_slave_1: entered promiscuous mode [ 407.666989][ T29] audit: type=1400 audit(1739616493.325:541): avc: denied { accept } for pid=8782 comm="syz.5.749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 407.687630][ T8770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 407.697538][ T8770] Cannot create hsr debugfs directory [ 407.822803][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.004476][ T5900] usb 2-1: USB disconnect, device number 21 [ 408.056836][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.389331][ T8770] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 408.401731][ T8788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.410371][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.442027][ T8788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.452449][ T8770] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 408.492901][ T8770] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 408.550818][ T8770] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 408.576379][ T29] audit: type=1400 audit(1739616494.235:542): avc: denied { write } for pid=8794 comm="syz.3.752" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 408.665257][ T8798] netlink: 'syz.5.753': attribute type 1 has an invalid length. [ 408.673017][ T8798] netlink: 134744 bytes leftover after parsing attributes in process `syz.5.753'. [ 408.715141][ T8795] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 408.740820][ T29] audit: type=1400 audit(1739616494.375:543): avc: denied { append } for pid=8794 comm="syz.3.752" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 408.779709][ T8800] netlink: 24 bytes leftover after parsing attributes in process `syz.3.752'. [ 408.807493][ T8770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.838067][ T8770] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.866074][ T53] Bluetooth: hci0: command tx timeout [ 408.952530][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.959682][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.063184][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.070285][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.127538][ T8767] usblp0: removed [ 409.228294][ T29] audit: type=1326 audit(1739616494.885:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8812 comm="syz.1.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ffdd8cde9 code=0x7ffc0000 [ 409.274067][ T1065] block nbd0: Possible stuck request ffff8880264c7000: control (read@0,4096B). Runtime 90 seconds [ 409.319532][ T29] audit: type=1326 audit(1739616494.915:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8812 comm="syz.1.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7f7ffdd8cde9 code=0x7ffc0000 [ 409.977129][ T29] audit: type=1326 audit(1739616494.915:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8812 comm="syz.1.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ffdd8cde9 code=0x7ffc0000 [ 410.001014][ T8807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 410.023093][ T29] audit: type=1326 audit(1739616494.915:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8812 comm="syz.1.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ffdd8cde9 code=0x7ffc0000 [ 410.050671][ T29] audit: type=1326 audit(1739616494.915:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8812 comm="syz.1.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7ffdd8cde9 code=0x7ffc0000 [ 410.218690][ T8819] loop9: detected capacity change from 0 to 6 [ 410.540538][ C0] net_ratelimit: 11 callbacks suppressed [ 410.540558][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 410.813344][ T8770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.861366][ T5836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.940648][ T53] Bluetooth: hci0: command tx timeout [ 411.171464][ T8837] netlink: 830 bytes leftover after parsing attributes in process `syz.6.762'. [ 411.183780][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.234779][ T8770] veth0_vlan: entered promiscuous mode [ 411.258680][ T8770] veth1_vlan: entered promiscuous mode [ 411.274473][ T8840] sp0: Synchronizing with TNC [ 411.290646][ T5836] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 411.332333][ T8770] veth0_macvtap: entered promiscuous mode [ 411.350311][ T8770] veth1_macvtap: entered promiscuous mode [ 411.399100][ T8770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.422437][ T8770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.580540][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 411.758481][ T8770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.911540][ T8770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.921564][ T5836] usb 6-1: too many configurations: 33, using maximum allowed: 8 [ 411.929900][ T8770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.940750][ T5836] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.951852][ T8770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.961948][ T5836] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.972565][ T8770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.990453][ T5836] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.002856][ T5836] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.019113][ T5836] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.037387][ T5836] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.049797][ T5836] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.083788][ T8770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.090491][ T5836] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.131376][ T5836] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.185723][ T5836] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.198527][ T8839] [U] è [ 412.227743][ T5836] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.236752][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.245930][ T5836] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.271446][ T5836] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.470469][ T8770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 412.470675][ T5836] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.534632][ T5836] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.545738][ T5836] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.576169][ T8770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.586290][ T8770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 412.597007][ T8770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.620507][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 412.633278][ T8847] devpts: called with bogus options [ 412.640092][ T5836] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 412.675653][ T8770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.725382][ T5836] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.754528][ T5836] usb 6-1: config 0 descriptor?? [ 412.815771][ T8850] devpts: called with bogus options [ 412.830365][ T8770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.865426][ T8770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.877466][ T8770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.896368][ T8770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.908458][ T8770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.926835][ T8770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.949125][ T8770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.959823][ T8770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.972111][ T8770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.982819][ T8770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.998835][ T8770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.009661][ T8770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.021111][ T53] Bluetooth: hci0: command tx timeout [ 413.094345][ T8770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.140052][ T8770] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.180696][ T8770] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.189429][ T8770] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.199776][ T8770] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.233324][ T5836] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 413.283417][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.309559][ T5836] cp2112 0003:10C4:EA90.000D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 413.660515][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 413.955117][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.081165][ T5836] cp2112 0003:10C4:EA90.000D: Part Number: 0x6A Device Version: 0xAF [ 414.090479][ T5900] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 414.101652][ T5836] cp2112 0003:10C4:EA90.000D: error requesting SMBus config [ 414.123958][ T8857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.136621][ T5836] cp2112 0003:10C4:EA90.000D: probe with driver cp2112 failed with error -32 [ 414.140723][ T8857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.198121][ T2973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.558657][ T5900] usb 4-1: Using ep0 maxpacket: 32 [ 414.573390][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.588013][ T5900] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 414.593389][ T2973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.664178][ T5900] usb 4-1: config 0 has no interface number 0 [ 414.669575][ T2973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.681017][ T5900] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 414.692543][ T2973] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.737254][ T5900] usb 4-1: config 0 interface 1 has no altsetting 0 [ 414.749368][ T5900] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 414.775125][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.784255][ T5900] usb 4-1: Product: syz [ 414.788924][ T5900] usb 4-1: Manufacturer: syz [ 414.798273][ T5900] usb 4-1: SerialNumber: syz [ 414.821850][ T5900] usb 4-1: config 0 descriptor?? [ 415.060656][ T8854] 9pnet_fd: Insufficient options for proto=fd [ 415.098297][ T5900] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 415.107699][ T53] Bluetooth: hci0: command tx timeout [ 415.114661][ T5900] cx231xx 4-1:0.1: Not found matching IAD interface [ 415.133532][ T5900] usb 4-1: USB disconnect, device number 27 [ 415.260577][ T5836] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 415.410583][ T5836] usb 8-1: Using ep0 maxpacket: 8 [ 415.740510][ C0] net_ratelimit: 2 callbacks suppressed [ 415.740525][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 416.034484][ T5836] usb 8-1: config 0 has an invalid interface number: 31 but max is 0 [ 416.050464][ T5836] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 416.067599][ T5836] usb 8-1: config 0 has no interface number 0 [ 416.075542][ T5836] usb 8-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 416.087874][ T5836] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.103963][ T5836] usb 8-1: Product: syz [ 416.108140][ T5836] usb 8-1: Manufacturer: syz [ 416.122791][ T5836] usb 8-1: SerialNumber: syz [ 416.163790][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.164546][ T5836] usb 8-1: config 0 descriptor?? [ 416.250738][ T5976] usb 6-1: USB disconnect, device number 11 [ 416.635103][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 416.635118][ T29] audit: type=1400 audit(1739616502.295:592): avc: denied { setopt } for pid=8871 comm="syz.7.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 416.780742][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 416.836400][ T5836] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 416.870878][ T8871] delete_channel: no stack [ 416.877170][ T5976] usb 8-1: USB disconnect, device number 2 [ 417.022187][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.032403][ T5836] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 417.051505][ T8894] netlink: 56 bytes leftover after parsing attributes in process `syz.6.774'. [ 417.060655][ T5836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.119858][ T8894] netlink: 16 bytes leftover after parsing attributes in process `syz.6.774'. [ 417.170799][ T5836] usb 4-1: config 0 descriptor?? [ 417.376939][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.401249][ T5836] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 417.438345][ T5836] gp8psk: usb in 128 operation failed. [ 417.637442][ T8898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.646446][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.658897][ T8898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.694172][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.710474][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.051416][ T8880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.141297][ T8880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.708673][ T8899] syz_tun: entered allmulticast mode [ 418.726270][ T8905] devpts: called with bogus options [ 418.825298][ T8880] syz_tun: left allmulticast mode [ 418.981061][ T8911] SELinux: Context } is not valid (left unmapped). [ 418.988244][ T8911] netlink: 8 bytes leftover after parsing attributes in process `syz.6.779'. [ 419.051434][ T5836] gp8psk: usb in 146 operation failed. [ 419.057925][ T5836] gp8psk: failed to get FW version [ 419.070851][ T5836] gp8psk: usb in 149 operation failed. [ 419.079391][ T5836] gp8psk: failed to get FPGA version [ 419.093328][ T5836] gp8psk: usb in 138 operation failed. [ 419.112049][ T5836] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 419.179631][ T8917] netlink: 56 bytes leftover after parsing attributes in process `syz.6.781'. [ 419.189323][ T8917] netlink: 16 bytes leftover after parsing attributes in process `syz.6.781'. [ 419.493909][ T5836] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 419.930576][ T5836] usb 4-1: USB disconnect, device number 28 [ 419.953824][ T8919] netlink: 'syz.5.782': attribute type 1 has an invalid length. [ 419.961532][ T8919] netlink: 134744 bytes leftover after parsing attributes in process `syz.5.782'. [ 420.275499][ T8925] xt_connbytes: Forcing CT accounting to be enabled [ 420.282362][ T8925] xt_CT: You must specify a L4 protocol and not use inversions on it [ 420.819469][ T29] audit: type=1400 audit(1739616506.475:593): avc: denied { read } for pid=8931 comm="syz.5.787" laddr=ff02::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 420.842004][ C0] vkms_vblank_simulate: vblank timer overrun [ 420.940528][ C0] net_ratelimit: 8 callbacks suppressed [ 420.940546][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 421.142744][ T8930] program syz.3.786 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 421.156598][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.177586][ T8930] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 421.817363][ T5889] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 421.840909][ T29] audit: type=1400 audit(1739616507.495:594): avc: denied { read } for pid=8947 comm="syz.5.791" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 421.926324][ T8948] gtp0: entered promiscuous mode [ 421.980551][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 421.999907][ T8948] gtp0: entered allmulticast mode [ 422.007861][ T29] audit: type=1400 audit(1739616507.535:595): avc: denied { open } for pid=8947 comm="syz.5.791" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 422.358563][ T29] audit: type=1400 audit(1739616507.605:596): avc: denied { connect } for pid=8947 comm="syz.5.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 422.713028][ T5889] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 422.713180][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.722231][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.741994][ T5889] usb 4-1: Product: syz [ 422.747072][ T5889] usb 4-1: Manufacturer: syz [ 422.753486][ T5889] usb 4-1: SerialNumber: syz [ 422.763746][ T5889] r8152-cfgselector 4-1: Unknown version 0x0000 [ 422.769985][ T5889] r8152-cfgselector 4-1: config 0 descriptor?? [ 423.020525][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 423.740892][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.762229][ T5889] r8152-cfgselector 4-1: USB disconnect, device number 29 [ 423.823845][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.981087][ T5836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.060509][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 424.781027][ T29] audit: type=1400 audit(1739616509.825:597): avc: denied { ioctl } for pid=8957 comm="syz.6.794" path="socket:[21629]" dev="sockfs" ino=21629 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 425.100513][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 426.140553][ C0] net_ratelimit: 1 callbacks suppressed [ 426.140573][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 426.281326][ T8974] Device name cannot be null; rc = [-22] [ 426.511234][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.584123][ T29] audit: type=1326 audit(1739616512.235:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8975 comm="syz.5.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242898cde9 code=0x7ffc0000 [ 426.777950][ T29] audit: type=1326 audit(1739616512.235:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8975 comm="syz.5.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242898cde9 code=0x7ffc0000 [ 426.808213][ T5836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.180844][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 427.188103][ T29] audit: type=1326 audit(1739616512.235:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8975 comm="syz.5.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f242898cde9 code=0x7ffc0000 [ 427.271283][ T29] audit: type=1326 audit(1739616512.235:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8975 comm="syz.5.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242898cde9 code=0x7ffc0000 [ 427.296303][ T29] audit: type=1326 audit(1739616512.235:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8975 comm="syz.5.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f242898cde9 code=0x7ffc0000 [ 427.321487][ T29] audit: type=1326 audit(1739616512.235:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8975 comm="syz.5.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242898cde9 code=0x7ffc0000 [ 427.347486][ T29] audit: type=1326 audit(1739616512.235:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8975 comm="syz.5.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f242898cde9 code=0x7ffc0000 [ 427.609648][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.617874][ T29] audit: type=1326 audit(1739616512.235:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8975 comm="syz.5.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242898cde9 code=0x7ffc0000 [ 428.220590][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 428.340970][ T29] audit: type=1326 audit(1739616512.235:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8975 comm="syz.5.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f242898cde9 code=0x7ffc0000 [ 428.367170][ T29] audit: type=1326 audit(1739616512.235:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8975 comm="syz.5.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242898cde9 code=0x7ffc0000 [ 428.474174][ T29] audit: type=1326 audit(1739616512.235:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8975 comm="syz.5.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f242898cde9 code=0x7ffc0000 [ 428.901735][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.910172][ T29] audit: type=1326 audit(1739616512.235:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8975 comm="syz.5.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242898cde9 code=0x7ffc0000 [ 428.933652][ C0] vkms_vblank_simulate: vblank timer overrun [ 429.217942][ T9000] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.260548][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 429.323996][ T9007] netlink: 'syz.3.806': attribute type 9 has an invalid length. [ 429.331861][ T9007] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.806'. [ 429.618953][ T9000] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.709539][ T8991] vlan2: entered promiscuous mode [ 429.714713][ T8991] syz_tun: entered promiscuous mode [ 429.821495][ T5836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.991868][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.717027][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 430.940898][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 431.194697][ T5887] net_ratelimit: 1 callbacks suppressed [ 431.194714][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.340543][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 432.024347][ T9] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 432.055590][ T9] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 432.158548][ T9] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 432.199427][ T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 432.218717][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.226963][ T9] usb 6-1: Product: syz [ 432.230657][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.237587][ T9] usb 6-1: Manufacturer: syz [ 432.249918][ T9] usb 6-1: SerialNumber: syz [ 432.380666][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 432.464642][ T9036] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 432.520608][ T5889] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 432.752211][ T9036] usb 7-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 432.786905][ T9036] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.795102][ T5889] usb 8-1: Using ep0 maxpacket: 16 [ 432.804284][ T5889] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 432.821305][ T9036] usb 7-1: config 0 descriptor?? [ 432.832849][ T9036] gspca_main: spca508-2.14.0 probing 8086:0110 [ 432.834986][ T5889] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 432.861469][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.883203][ T53] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 432.893102][ T5889] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 432.906870][ T5889] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.920485][ T5889] usb 8-1: Product: syz [ 432.924679][ T5889] usb 8-1: Manufacturer: syz [ 432.929382][ T5889] usb 8-1: SerialNumber: syz [ 433.045292][ T9036] gspca_spca508: reg_read err -32 [ 433.060781][ T9] usb 6-1: failed to enable PITCH for EP 0x82 [ 433.063933][ T9036] gspca_spca508: reg_read err -32 [ 433.162268][ T5917] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 433.271326][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.350952][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.382331][ T5917] usb 2-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 433.420654][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 433.427896][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.540222][ T5917] usb 2-1: config 0 descriptor?? [ 433.582874][ T5836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.621356][ T9036] gspca_spca508: reg_read err -110 [ 433.629970][ T9036] gspca_spca508: reg_read err -32 [ 433.638919][ T5889] usb 8-1: 0:2 : does not exist [ 433.649363][ T9] usb 6-1: USB disconnect, device number 12 [ 433.655411][ T5889] usb 8-1: unit 6 not found! [ 433.664878][ T9036] gspca_spca508: reg_read err -32 [ 433.723410][ T9036] gspca_spca508: reg write: error -32 [ 433.732890][ T9057] netlink: 'syz.5.824': attribute type 9 has an invalid length. [ 433.754499][ T5889] usb 8-1: USB disconnect, device number 3 [ 433.760707][ T9036] spca508 7-1:0.0: probe with driver spca508 failed with error -32 [ 433.768912][ T9057] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.824'. [ 433.802465][ T9036] usb 7-1: USB disconnect, device number 5 [ 434.406821][ T9036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.416868][ T6249] udevd[6249]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 434.421800][ T5992] udevd[5992]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 434.458600][ T5917] usbhid 2-1:0.0: can't add hid device: -71 [ 434.460529][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 434.511732][ T5917] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 434.585385][ T5917] usb 2-1: USB disconnect, device number 22 [ 434.679680][ T9067] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9067 comm=syz.7.826 [ 435.145972][ T9072] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9072 comm=syz.7.826 [ 435.374751][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 435.770567][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 435.901912][ T9] usb 7-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 436.422287][ T9] usb 7-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 436.430331][ T9] usb 7-1: Product: syz [ 436.540511][ C0] net_ratelimit: 3 callbacks suppressed [ 436.540529][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 436.770188][ T9] usb 7-1: Manufacturer: syz [ 436.777388][ T9] usb 7-1: SerialNumber: syz [ 436.780812][ T9036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.799699][ T9] usb 7-1: config 0 descriptor?? [ 436.830987][ T9] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 437.580613][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 437.734831][ T9] gspca_zc3xx: reg_w_i err -110 [ 437.740097][ T9] gspca_zc3xx 7-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 437.820933][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.838728][ T9090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.834'. [ 437.876038][ T9087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.832'. [ 438.081043][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 438.081058][ T29] audit: type=1400 audit(1739616523.745:668): avc: denied { read } for pid=9098 comm="syz.1.836" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 438.110677][ C0] vkms_vblank_simulate: vblank timer overrun [ 438.172199][ T29] audit: type=1400 audit(1739616523.805:669): avc: denied { ioctl } for pid=9098 comm="syz.1.836" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0xaeaa scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 438.620562][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 438.720636][ T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 438.872217][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.887015][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.948810][ T5836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.000539][ T9] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 439.028640][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.051909][ T9] usb 6-1: config 0 descriptor?? [ 439.343237][ T1065] block nbd0: Possible stuck request ffff8880264c7000: control (read@0,4096B). Runtime 120 seconds [ 439.431602][ T9036] usb 7-1: USB disconnect, device number 6 [ 439.502919][ T9126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.568113][ T9126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.660507][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 439.944685][ T9036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.963916][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 440.000589][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.006840][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.045088][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 440.391334][ T9] usb 6-1: USB disconnect, device number 13 [ 440.700487][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 441.740526][ C0] net_ratelimit: 1 callbacks suppressed [ 441.740550][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 441.981779][ T5836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.061733][ T9149] netlink: 260 bytes leftover after parsing attributes in process `syz.5.847'. [ 442.074373][ T29] audit: type=1400 audit(1739616527.715:670): avc: denied { create } for pid=9145 comm="syz.3.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 442.199599][ T9149] lo: entered allmulticast mode [ 442.311950][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.780524][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 443.182189][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.230978][ T9167] netlink: 8 bytes leftover after parsing attributes in process `syz.6.852'. [ 443.259737][ T9167] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 443.443681][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.448744][ T9169] gtp1: entered promiscuous mode [ 443.531155][ T9169] gtp1: entered allmulticast mode [ 443.820876][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 444.860536][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 444.912736][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.050975][ T5836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.301778][ T9188] blktrace: Concurrent blktraces are not allowed on loop14 [ 445.391299][ T9189] blktrace: Concurrent blktraces are not allowed on loop14 [ 445.817752][ T9194] netlink: 56 bytes leftover after parsing attributes in process `syz.3.862'. [ 445.830517][ T9194] netlink: 16 bytes leftover after parsing attributes in process `syz.3.862'. [ 446.274543][ T29] audit: type=1400 audit(1739616531.925:671): avc: denied { create } for pid=9196 comm="syz.7.863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 446.612772][ T29] audit: type=1400 audit(1739616532.255:672): avc: denied { connect } for pid=9196 comm="syz.7.863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 446.826255][ T9210] netlink: 44 bytes leftover after parsing attributes in process `syz.3.867'. [ 446.940494][ C0] net_ratelimit: 3 callbacks suppressed [ 446.940512][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 447.756471][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.891791][ T9217] netlink: 'syz.1.869': attribute type 9 has an invalid length. [ 447.956524][ T9217] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.869'. [ 447.980499][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 448.064451][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.378497][ T9226] only policy match revision 0 supported [ 448.378570][ T9226] unable to load match [ 448.925202][ T9227] blktrace: Concurrent blktraces are not allowed on loop12 [ 449.008758][ T9227] blktrace: Concurrent blktraces are not allowed on loop12 [ 449.020515][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 449.124229][ T9036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.653549][ T9229] netlink: 8 bytes leftover after parsing attributes in process `syz.7.872'. [ 449.873143][ T9] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 450.051564][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.062542][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 450.695535][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.706760][ T9] usb 6-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 450.715975][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.725833][ T9] usb 6-1: config 0 descriptor?? [ 450.766331][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.902388][ T29] audit: type=1400 audit(1739616536.555:673): avc: denied { remount } for pid=9242 comm="syz.7.877" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 451.100523][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 451.148580][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.321507][ T9255] netlink: 'syz.7.880': attribute type 1 has an invalid length. [ 451.329201][ T9255] netlink: 134744 bytes leftover after parsing attributes in process `syz.7.880'. [ 451.401633][ T9256] gtp2: entered promiscuous mode [ 451.407177][ T9256] gtp2: entered allmulticast mode [ 451.681463][ T9232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.718006][ T9232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.938042][ T9259] wg1 speed is unknown, defaulting to 1000 [ 451.957498][ T9] hid-led 0003:0FC5:B080.000E: probe with driver hid-led failed with error -71 [ 451.995500][ T9] usb 6-1: USB disconnect, device number 14 [ 452.002071][ T9262] veth0_macvtap: left promiscuous mode [ 452.024889][ T29] audit: type=1400 audit(1739616537.685:674): avc: denied { create } for pid=9260 comm="syz.3.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 452.140511][ C0] net_ratelimit: 1 callbacks suppressed [ 452.140526][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 452.991391][ T9036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.151478][ T9280] blktrace: Concurrent blktraces are not allowed on loop12 [ 453.180489][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 453.230731][ T9280] blktrace: Concurrent blktraces are not allowed on loop12 [ 453.520779][ T5889] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 453.584897][ T9285] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 454.143017][ T9286] netlink: 8 bytes leftover after parsing attributes in process `syz.7.888'. [ 454.160693][ T5889] usb 6-1: Using ep0 maxpacket: 16 [ 454.193137][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.205518][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.220500][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 454.228337][ T9286] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 454.230780][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.250591][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.270537][ T5889] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 454.296560][ T5889] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 454.397883][ T9291] netlink: 'syz.1.891': attribute type 1 has an invalid length. [ 454.405598][ T9291] netlink: 134744 bytes leftover after parsing attributes in process `syz.1.891'. [ 455.017175][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.080484][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.160218][ T5889] usb 6-1: config 0 descriptor?? [ 455.260693][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 455.345283][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.353990][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.555718][ T9297] netlink: 56 bytes leftover after parsing attributes in process `syz.3.893'. [ 455.565062][ T9297] netlink: 16 bytes leftover after parsing attributes in process `syz.3.893'. [ 457.050212][ T5889] usbhid 6-1:0.0: can't add hid device: -71 [ 457.069234][ T5889] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 457.098550][ T5889] usb 6-1: USB disconnect, device number 15 [ 457.340515][ C0] net_ratelimit: 2 callbacks suppressed [ 457.340534][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 457.862138][ T9320] can0: slcan on ttyS3. [ 458.237445][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.279904][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.380493][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 458.763961][ T9311] can0 (unregistered): slcan off ttyS3. [ 459.035175][ T9330] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 459.420670][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 459.565554][ T9326] netlink: 'syz.3.902': attribute type 1 has an invalid length. [ 459.573253][ T9326] netlink: 134744 bytes leftover after parsing attributes in process `syz.3.902'. [ 459.640515][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.462288][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 460.727812][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.042833][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 461.113655][ T9353] netlink: 56 bytes leftover after parsing attributes in process `syz.7.909'. [ 461.127191][ T9353] netlink: 16 bytes leftover after parsing attributes in process `syz.7.909'. [ 461.391037][ T5836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.409777][ T9355] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1107 sclass=netlink_route_socket pid=9355 comm=syz.6.910 [ 461.427190][ T29] audit: type=1400 audit(1739616547.085:675): avc: denied { setopt } for pid=9354 comm="syz.6.910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 461.500517][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 461.613993][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 461.639594][ T29] audit: type=1400 audit(1739616547.285:676): avc: denied { append } for pid=9358 comm="syz.6.912" name="001" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 461.681868][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 461.701884][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 461.800593][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.442136][ T9] usb 2-1: config 0 descriptor?? [ 462.451468][ T9] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input22 [ 462.540483][ C0] net_ratelimit: 1 callbacks suppressed [ 462.540494][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 462.631473][ T9366] ieee802154 phy0 wpan0: encryption failed: -22 [ 462.679112][ T9349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.692438][ T9349] bond0: (slave rose0): Enslaving as an active interface with an up link [ 462.841338][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.862231][ C0] llc_conn_state_process: llc_conn_service failed [ 463.510749][ T29] audit: type=1326 audit(1739616548.915:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9373 comm="syz.3.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa31fd8cde9 code=0x7ffc0000 [ 463.580524][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 463.790576][ T29] audit: type=1326 audit(1739616548.915:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9373 comm="syz.3.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa31fd8cde9 code=0x7ffc0000 [ 463.814401][ T29] audit: type=1326 audit(1739616548.915:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9373 comm="syz.3.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa31fd8cde9 code=0x7ffc0000 [ 463.837417][ C0] vkms_vblank_simulate: vblank timer overrun [ 463.843694][ T29] audit: type=1326 audit(1739616549.055:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9373 comm="syz.3.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa31fd8cde9 code=0x7ffc0000 [ 463.861153][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.894972][ T29] audit: type=1326 audit(1739616549.055:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9373 comm="syz.3.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa31fd8cde9 code=0x7ffc0000 [ 463.918203][ C0] vkms_vblank_simulate: vblank timer overrun [ 463.930358][ T5180] bcm5974 2-1:0.0: could not read from device [ 463.958656][ T29] audit: type=1326 audit(1739616549.065:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9373 comm="syz.3.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fa31fd8cde9 code=0x7ffc0000 [ 464.059061][ T9] usb 2-1: USB disconnect, device number 23 [ 464.065662][ T5180] bcm5974 2-1:0.0: could not read from device [ 464.197033][ T29] audit: type=1326 audit(1739616549.065:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9373 comm="syz.3.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa31fd8cde9 code=0x7ffc0000 [ 464.220230][ C0] vkms_vblank_simulate: vblank timer overrun [ 464.386401][ T9391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.395880][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.405672][ T9391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.432509][ T29] audit: type=1326 audit(1739616549.065:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9373 comm="syz.3.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa31fd8cde9 code=0x7ffc0000 [ 464.433058][ T9391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.455712][ C0] vkms_vblank_simulate: vblank timer overrun [ 464.470076][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.478168][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.533037][ T9412] netlink: 56 bytes leftover after parsing attributes in process `syz.5.922'. [ 466.749047][ T9412] netlink: 16 bytes leftover after parsing attributes in process `syz.5.922'. [ 466.920356][ T9416] devpts: called with bogus options [ 467.574788][ T5976] net_ratelimit: 14 callbacks suppressed [ 467.574804][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.740026][ T8630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.750490][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 467.750985][ T9428] netlink: 'syz.1.926': attribute type 1 has an invalid length. [ 467.765689][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.823642][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.840597][ T9428] netlink: 224 bytes leftover after parsing attributes in process `syz.1.926'. [ 468.673807][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.687529][ T9433] netlink: 'syz.5.927': attribute type 9 has an invalid length. [ 468.695220][ T9433] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.927'. [ 468.780543][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 468.822062][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 468.822075][ T29] audit: type=1400 audit(1739616554.485:737): avc: denied { read } for pid=9435 comm="syz.3.928" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 468.870984][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.268148][ T29] audit: type=1400 audit(1739616554.485:738): avc: denied { open } for pid=9435 comm="syz.3.928" path="/178/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 469.415851][ T29] audit: type=1400 audit(1739616554.485:739): avc: denied { ioctl } for pid=9435 comm="syz.3.928" path="/178/file0/file0" dev="fuse" ino=0 ioctlcmd=0x70cb scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 469.440089][ C0] vkms_vblank_simulate: vblank timer overrun [ 469.464537][ T1065] block nbd0: Possible stuck request ffff8880264c7000: control (read@0,4096B). Runtime 150 seconds [ 469.820860][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 469.950004][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.043658][ T9457] netlink: 44 bytes leftover after parsing attributes in process `syz.3.931'. [ 470.323516][ T29] audit: type=1400 audit(1739616555.975:740): avc: denied { recv } for pid=8630 comm="kworker/u8:13" saddr=10.128.0.169 src=37940 daddr=10.128.0.66 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 470.432718][ T29] audit: type=1400 audit(1739616556.075:741): avc: denied { mounton } for pid=9458 comm="syz.7.933" path="/31/file0" dev="pstore" ino=3972 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=dir permissive=1 [ 470.934226][ T29] audit: type=1400 audit(1739616556.595:742): avc: denied { execmem } for pid=9463 comm="syz.3.935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 470.965281][ T9470] fuse: Bad value for 'group_id' [ 470.999855][ T9470] fuse: Bad value for 'group_id' [ 471.049213][ T9470] autofs: Bad value for 'fd' [ 471.811844][ T9477] blktrace: Concurrent blktraces are not allowed on loop14 [ 471.965190][ T9477] blktrace: Concurrent blktraces are not allowed on loop14 [ 472.526014][ T9489] netlink: 56 bytes leftover after parsing attributes in process `syz.5.938'. [ 472.540653][ T9489] netlink: 16 bytes leftover after parsing attributes in process `syz.5.938'. [ 472.940516][ C0] net_ratelimit: 6 callbacks suppressed [ 472.940536][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 472.942678][ T9495] netlink: 120 bytes leftover after parsing attributes in process `syz.1.940'. [ 473.003706][ T9495] openvswitch: netlink: Flow actions attr not present in new flow. [ 473.925860][ T5887] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 473.930209][ T1082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.947218][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.952806][ T9509] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9509 comm=syz.6.942 [ 473.980694][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 473.986602][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.987722][ T9] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 474.005905][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.167775][ T5887] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 474.175682][ T5887] usb 8-1: can't read configurations, error -61 [ 474.380856][ T5887] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 474.380871][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 474.483037][ T9] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 474.501410][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.648635][ T5887] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 474.750711][ T9] usb 6-1: Product: syz [ 474.755266][ T9] usb 6-1: Manufacturer: syz [ 474.759890][ T9] usb 6-1: SerialNumber: syz [ 474.760114][ T5887] usb 8-1: can't read configurations, error -61 [ 474.780934][ T5887] usb usb8-port1: attempt power cycle [ 474.883696][ T9] usb 6-1: config 0 descriptor?? [ 474.919361][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.928599][ T9] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 474.969619][ T9] usb 6-1: Detected FT-X [ 475.020547][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 475.198941][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.573699][ T5917] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 475.730696][ T5887] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 475.815488][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 475.857821][ T5887] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 475.880525][ T5917] usb 2-1: Using ep0 maxpacket: 16 [ 475.909036][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.909870][ T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 475.926948][ T5887] usb 8-1: can't read configurations, error -61 [ 475.955997][ T9] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 475.962663][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.962690][ T5917] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 475.979301][ T9] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 476.029718][ T9] usb 6-1: USB disconnect, device number 16 [ 476.048090][ T5917] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 476.061492][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.072337][ T5917] usb 2-1: config 0 descriptor?? [ 476.080491][ T5887] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 476.097232][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 476.156214][ T9] ftdi_sio 6-1:0.0: device disconnected [ 476.495289][ T5887] usb 8-1: device not accepting address 7, error -71 [ 476.566865][ T9535] blktrace: Concurrent blktraces are not allowed on loop14 [ 476.614064][ T9535] blktrace: Concurrent blktraces are not allowed on loop14 [ 476.992564][ T5887] usb usb8-port1: unable to enumerate USB device [ 477.376810][ T9542] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 477.384895][ T9542] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 477.393792][ T9542] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 477.401628][ T9542] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 477.861589][ T9543] netlink: 56 bytes leftover after parsing attributes in process `syz.6.953'. [ 477.896931][ T9543] netlink: 16 bytes leftover after parsing attributes in process `syz.6.953'. [ 478.140606][ C0] net_ratelimit: 8 callbacks suppressed [ 478.140638][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 478.263763][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.472205][ T9550] input: syz0 as /devices/virtual/input/input23 [ 478.830503][ T5939] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 478.931198][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.971962][ T5917] usbhid 2-1:0.0: can't add hid device: -71 [ 478.986626][ T5917] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 479.030711][ T5917] usb 2-1: USB disconnect, device number 24 [ 479.131753][ T5939] usb 6-1: Using ep0 maxpacket: 32 [ 479.180114][ T9561] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9561 comm=syz.1.956 [ 479.192720][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 479.487579][ T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.503102][ T5939] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 479.574333][ T5939] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 479.648527][ T9553] orangefs_mount: mount request failed with -4 [ 479.662765][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.670855][ T5939] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 479.670888][ T5939] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 479.706980][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.801808][ T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.830470][ T5939] usb 6-1: config 0 interface 0 has no altsetting 0 [ 480.087372][ T5939] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 480.124373][ T5939] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 480.220512][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 480.336370][ T5939] usb 6-1: Product: syz [ 480.350619][ T5939] usb 6-1: Manufacturer: syz [ 480.355326][ T5939] usb 6-1: SerialNumber: syz [ 480.361193][ T9570] wg1 speed is unknown, defaulting to 1000 [ 480.375188][ T5939] usb 6-1: config 0 descriptor?? [ 481.221839][ T5939] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 481.236211][ T5939] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 481.255553][ T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.390977][ T45] usb 6-1: USB disconnect, device number 17 [ 481.419256][ T45] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 481.469694][ T53] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 481.510364][ T9584] netlink: 56 bytes leftover after parsing attributes in process `syz.6.964'. [ 481.519703][ T9584] netlink: 16 bytes leftover after parsing attributes in process `syz.6.964'. [ 481.766884][ T5939] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 481.984678][ T5939] usb 8-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 482.012006][ T5939] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.061627][ T5939] usb 8-1: Product: syz [ 482.096362][ T5939] usb 8-1: Manufacturer: syz [ 482.107808][ T5939] usb 8-1: SerialNumber: syz [ 482.129583][ T5939] usb 8-1: config 0 descriptor?? [ 482.173670][ T5939] i2c-tiny-usb 8-1:0.0: version 6d.cc found at bus 008 address 008 [ 482.428505][ T9598] netlink: 44 bytes leftover after parsing attributes in process `syz.5.966'. [ 483.340521][ C0] net_ratelimit: 4 callbacks suppressed [ 483.340538][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 483.347348][ T9036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.360506][ T9] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 483.372487][ T5939] (null): failure reading functionality [ 483.388016][ T5939] i2c i2c-1: failure reading functionality [ 483.456568][ T5939] i2c i2c-1: connected i2c-tiny-usb device [ 483.530676][ T9] usb 4-1: device descriptor read/64, error -71 [ 483.751801][ T5939] usb 8-1: USB disconnect, device number 8 [ 483.871054][ T9] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 484.025225][ T9] usb 4-1: device descriptor read/64, error -71 [ 484.380498][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 484.387998][ T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.421124][ T9] usb usb4-port1: attempt power cycle [ 484.660627][ T5889] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 484.773360][ T29] audit: type=1400 audit(1739616570.435:743): avc: denied { lock } for pid=9622 comm="syz.6.975" path="socket:[24852]" dev="sockfs" ino=24852 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 484.835309][ T9] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 485.052480][ T1201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.062790][ T5889] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ea.b7 [ 485.082013][ T9] usb 4-1: device descriptor read/8, error -71 [ 485.100440][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.212176][ T5889] usb 6-1: Product: syz [ 485.220130][ T5889] usb 6-1: Manufacturer: syz [ 485.296037][ T9627] devpts: called with bogus options [ 485.420577][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 485.497764][ T6670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.505889][ T1201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.530989][ T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.531272][ T5889] usb 6-1: SerialNumber: syz [ 485.541711][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.596782][ T9] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 485.652889][ T5889] usb 6-1: config 0 descriptor?? [ 485.666792][ T9] usb 4-1: device descriptor read/8, error -71 [ 485.823340][ T9] usb usb4-port1: unable to enumerate USB device [ 485.983837][ T9630] devpts: called with bogus options [ 486.316519][ T29] audit: type=1400 audit(1739616571.975:744): avc: denied { ioctl } for pid=9632 comm="syz.7.978" path="socket:[24223]" dev="sockfs" ino=24223 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 486.640373][ T9615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.670650][ T9615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.683967][ T29] audit: type=1400 audit(1739616572.345:745): avc: denied { create } for pid=9640 comm="syz.6.980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 486.704094][ T5889] usb 6-1: f81604_read: reg: 105 failed: -EPROTO [ 486.712293][ T5889] f81604 6-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 486.719792][ T5889] f81604 6-1:0.0: probe with driver f81604 failed with error -71 [ 486.754810][ T5889] usb 6-1: USB disconnect, device number 18 [ 486.956743][ T9645] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 487.860083][ T9] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 488.188828][ T9655] netlink: 16 bytes leftover after parsing attributes in process `syz.1.984'. [ 488.410512][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 488.432078][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.463522][ T29] audit: type=1400 audit(1739616574.095:746): avc: denied { create } for pid=9652 comm="syz.1.984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 488.500510][ T29] audit: type=1400 audit(1739616574.095:747): avc: denied { create } for pid=9652 comm="syz.1.984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 488.526521][ T29] audit: type=1400 audit(1739616574.095:748): avc: denied { bind } for pid=9652 comm="syz.1.984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 488.540662][ C0] net_ratelimit: 6 callbacks suppressed [ 488.540677][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 488.679904][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 488.705556][ T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.767248][ T9664] FAULT_INJECTION: forcing a failure. [ 488.767248][ T9664] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 488.780473][ T9664] CPU: 1 UID: 0 PID: 9664 Comm: syz.1.985 Not tainted 6.14.0-rc2-syzkaller-00228-g04f41cbf03ec #0 [ 488.780495][ T9664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 488.780506][ T9664] Call Trace: [ 488.780511][ T9664] [ 488.780519][ T9664] dump_stack_lvl+0x16c/0x1f0 [ 488.780545][ T9664] should_fail_ex+0x50a/0x650 [ 488.780574][ T9664] _copy_from_user+0x2e/0xd0 [ 488.780593][ T9664] memdup_user+0x71/0xd0 [ 488.780617][ T9664] strndup_user+0x78/0xe0 [ 488.780641][ T9664] __x64_sys_mount+0x138/0x310 [ 488.780662][ T9664] ? __pfx___x64_sys_mount+0x10/0x10 [ 488.780690][ T9664] do_syscall_64+0xcd/0x250 [ 488.780713][ T9664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.780737][ T9664] RIP: 0033:0x7f7ffdd8cde9 [ 488.780752][ T9664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 488.780768][ T9664] RSP: 002b:00007f7ffec57038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 488.780786][ T9664] RAX: ffffffffffffffda RBX: 00007f7ffdfa6160 RCX: 00007f7ffdd8cde9 [ 488.780799][ T9664] RDX: 0000400000000580 RSI: 0000400000000540 RDI: 0000000000000000 [ 488.780810][ T9664] RBP: 00007f7ffec57090 R08: 0000400000000740 R09: 0000000000000000 [ 488.780822][ T9664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 488.780832][ T9664] R13: 0000000000000000 R14: 00007f7ffdfa6160 R15: 00007ffc1b7d3f68 [ 488.780857][ T9664] [ 489.145412][ T9] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 489.172685][ T9668] sg_write: data in/out 1837/10 bytes for SCSI command 0xc7-- guessing data in; [ 489.172685][ T9668] program syz.3.986 not setting count and/or reply_len properly [ 489.305891][ T9672] netlink: 56 bytes leftover after parsing attributes in process `syz.6.987'. [ 489.428416][ T9672] netlink: 16 bytes leftover after parsing attributes in process `syz.6.987'. [ 489.581273][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 489.633013][ T29] audit: type=1400 audit(1739616575.285:749): avc: denied { bind } for pid=9665 comm="syz.3.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 489.650644][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.680225][ T29] audit: type=1400 audit(1739616575.335:750): avc: denied { listen } for pid=9665 comm="syz.3.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 489.911402][ T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.020193][ T9680] FAULT_INJECTION: forcing a failure. [ 490.020193][ T9680] name failslab, interval 1, probability 0, space 0, times 0 [ 490.100610][ T9680] CPU: 0 UID: 0 PID: 9680 Comm: syz.7.990 Not tainted 6.14.0-rc2-syzkaller-00228-g04f41cbf03ec #0 [ 490.100635][ T9680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 490.100646][ T9680] Call Trace: [ 490.100652][ T9680] [ 490.100660][ T9680] dump_stack_lvl+0x16c/0x1f0 [ 490.100684][ T9680] should_fail_ex+0x50a/0x650 [ 490.100708][ T9680] ? fs_reclaim_acquire+0xae/0x150 [ 490.100735][ T9680] should_failslab+0xc2/0x120 [ 490.100756][ T9680] __kmalloc_node_noprof+0xd1/0x510 [ 490.100777][ T9680] ? crypto_alloc_tfmmem.isra.0+0x38/0x110 [ 490.100807][ T9680] ? __pfx_crypto_alg_extsize+0x10/0x10 [ 490.100829][ T9680] crypto_alloc_tfmmem.isra.0+0x38/0x110 [ 490.100858][ T9680] crypto_create_tfm_node+0x83/0x320 [ 490.100879][ T9680] crypto_alloc_tfm_node+0x102/0x260 [ 490.100897][ T9680] ? kasan_save_track+0x14/0x30 [ 490.100916][ T9680] ? __pfx_aead_bind+0x10/0x10 [ 490.100932][ T9680] aead_bind+0x6c/0x160 [ 490.100950][ T9680] alg_bind+0x264/0x510 [ 490.100973][ T9680] __sys_bind+0x213/0x260 [ 490.100994][ T9680] ? __pfx___sys_bind+0x10/0x10 [ 490.101011][ T9680] ? __fget_files+0x206/0x3a0 [ 490.101036][ T9680] ? __pfx_ksys_write+0x10/0x10 [ 490.101068][ T9680] __x64_sys_bind+0x72/0xb0 [ 490.101085][ T9680] ? lockdep_hardirqs_on+0x7c/0x110 [ 490.101103][ T9680] do_syscall_64+0xcd/0x250 [ 490.101123][ T9680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.101147][ T9680] RIP: 0033:0x7f0f4018cde9 [ 490.101162][ T9680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.101178][ T9680] RSP: 002b:00007f0f40f9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 490.101196][ T9680] RAX: ffffffffffffffda RBX: 00007f0f403a5fa0 RCX: 00007f0f4018cde9 [ 490.101208][ T9680] RDX: 0000000000000058 RSI: 0000400000000400 RDI: 0000000000000003 [ 490.101219][ T9680] RBP: 00007f0f40f9f090 R08: 0000000000000000 R09: 0000000000000000 [ 490.101230][ T9680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.101241][ T9680] R13: 0000000000000000 R14: 00007f0f403a5fa0 R15: 00007ffdc113d1f8 [ 490.101266][ T9680] [ 490.332980][ T9] usb 8-1: config 0 descriptor?? [ 490.339099][ T9] usb 8-1: can't set config #0, error -71 [ 490.352212][ T9] usb 8-1: USB disconnect, device number 9 [ 490.620505][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 490.971764][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.100727][ T1201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.185588][ T6670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.194315][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.204541][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.377841][ T29] audit: type=1400 audit(1739616577.035:751): avc: denied { bind } for pid=9681 comm="syz.1.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 491.560412][ T9695] netlink: 44 bytes leftover after parsing attributes in process `syz.7.992'. [ 492.166315][ T9699] tmpfs: Bad value for 'mpol' [ 492.366236][ T9709] netlink: 64 bytes leftover after parsing attributes in process `syz.7.996'. [ 492.380856][ T5976] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 492.526201][ T9714] netlink: 56 bytes leftover after parsing attributes in process `syz.7.998'. [ 492.541391][ T9714] netlink: 16 bytes leftover after parsing attributes in process `syz.7.998'. [ 492.546160][ T5976] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.571497][ T5976] usb 4-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 492.700566][ T5887] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 492.740896][ T5976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.776371][ T5976] usb 4-1: config 0 descriptor?? [ 492.910614][ T5887] usb 6-1: Using ep0 maxpacket: 16 [ 492.937577][ T5887] usb 6-1: config 1 has an invalid interface number: 203 but max is 0 [ 492.953590][ T9717] blktrace: Concurrent blktraces are not allowed on loop2 [ 492.972808][ T5887] usb 6-1: config 1 has no interface number 0 [ 493.010724][ T5887] usb 6-1: New USB device found, idVendor=0b95, idProduct=2790, bcdDevice=63.9c [ 493.043490][ T9718] blktrace: Concurrent blktraces are not allowed on loop2 [ 493.135652][ T5887] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.260660][ T53] Bluetooth: hci5: command 0x0406 tx timeout [ 493.382098][ T5976] cypress 0003:04B4:DE64.000F: unknown main item tag 0x0 [ 493.389561][ T5887] usb 6-1: Product: syz [ 493.409486][ T5887] usb 6-1: Manufacturer: syz [ 493.434019][ T5976] cypress 0003:04B4:DE64.000F: unknown main item tag 0x0 [ 493.452379][ T5887] usb 6-1: SerialNumber: syz [ 493.484208][ T5976] cypress 0003:04B4:DE64.000F: hidraw0: USB HID v0.07 Device [HID 04b4:de64] on usb-dummy_hcd.3-1/input0 [ 493.509159][ T9722] netlink: 108 bytes leftover after parsing attributes in process `syz.7.1001'. [ 493.587045][ T9] usb 4-1: USB disconnect, device number 34 [ 493.740536][ C0] net_ratelimit: 5 callbacks suppressed [ 493.740553][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 493.791895][ T5887] aqc111 6-1:1.203: probe with driver aqc111 failed with error -22 [ 493.888888][ T5889] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 493.906810][ T5887] usb 6-1: USB disconnect, device number 19 [ 494.001137][ T1201] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 494.171508][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.248063][ T9732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.261244][ T9732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.279790][ T9732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.293992][ T9732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.320712][ T9732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.328846][ T9732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.337910][ T1201] usb 8-1: Using ep0 maxpacket: 16 [ 494.349461][ T5889] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 494.360860][ T5889] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 494.371630][ T1201] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.374078][ T9731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.400600][ T29] audit: type=1400 audit(1739616580.055:752): avc: denied { mounton } for pid=9735 comm="syz.3.1007" path="/192/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 494.402619][ T1201] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 494.442555][ T1201] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 494.780494][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 495.090585][ T1201] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 495.105173][ T5889] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 495.118496][ T1201] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.126701][ T5889] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.147059][ T5889] usb 7-1: Product: syz [ 495.151946][ T1201] usb 8-1: config 0 descriptor?? [ 495.161941][ T5889] usb 7-1: Manufacturer: syz [ 495.174535][ T5889] usb 7-1: SerialNumber: syz [ 495.260115][ T29] audit: type=1400 audit(1739616580.905:753): avc: denied { unmount } for pid=5846 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 495.616021][ T9747] netlink: 10 bytes leftover after parsing attributes in process `syz.5.1010'. [ 495.705877][ T9751] F2FS-fs (loop15): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 495.713783][ T9751] F2FS-fs (loop15): Can't find valid F2FS filesystem in 1th superblock [ 495.722635][ T9751] F2FS-fs (loop15): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 495.730560][ T9751] F2FS-fs (loop15): Can't find valid F2FS filesystem in 2th superblock [ 496.420376][ T9740] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=48689 sclass=netlink_xfrm_socket pid=9740 comm=syz.1.1008 [ 496.435363][ T29] audit: type=1400 audit(1739616582.075:754): avc: denied { write } for pid=9739 comm="syz.1.1008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 496.946914][ T5889] usb 7-1: 0:2 : does not exist [ 497.138751][ T5889] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 497.198955][ T5889] usb 7-1: USB disconnect, device number 7 [ 497.594872][ T1201] usbhid 8-1:0.0: can't add hid device: -71 [ 497.656706][ T1201] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 497.711381][ T6266] udevd[6266]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 497.735357][ T1201] usb 8-1: USB disconnect, device number 10 [ 497.752709][ T9775] netlink: 108 bytes leftover after parsing attributes in process `syz.7.1013'. [ 498.260561][ T1201] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 498.269019][ T30] INFO: task syz.0.575:8056 blocked for more than 143 seconds. [ 498.581680][ T30] Not tainted 6.14.0-rc2-syzkaller-00228-g04f41cbf03ec #0 [ 498.589480][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 498.599825][ T30] task:syz.0.575 state:D stack:26560 pid:8056 tgid:8050 ppid:5838 task_flags:0x400140 flags:0x00004004 [ 498.614849][ T30] Call Trace: [ 498.618262][ T30] [ 498.626414][ T30] __schedule+0xf43/0x5890 [ 498.685465][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 498.717760][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 498.750544][ T1201] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.774296][ T30] ? __pfx___schedule+0x10/0x10 [ 498.782847][ T1201] usb 8-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 498.794204][ T30] ? schedule+0x298/0x350 [ 498.798587][ T30] ? __pfx_lock_release+0x10/0x10 [ 498.817322][ T1201] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.822631][ T30] ? __mutex_trylock_common+0x78/0x250 [ 498.852538][ T1201] usb 8-1: config 0 descriptor?? [ 498.860787][ T30] ? lock_acquire+0x2f/0xb0 [ 498.880433][ T30] ? schedule+0x1fd/0x350 [ 498.884805][ T30] schedule+0xe7/0x350 [ 498.889019][ T30] schedule_preempt_disabled+0x13/0x30 [ 498.901743][ T30] __mutex_lock+0x6bd/0xb10 [ 498.906333][ T30] ? sync_bdevs+0xfd/0x360 [ 498.918052][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 498.924598][ T30] ? sync_bdevs+0xc7/0x360 [ 498.929169][ T30] ? _atomic_dec_and_lock+0xa2/0x120 [ 498.940509][ C0] net_ratelimit: 12 callbacks suppressed [ 498.940527][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 498.963842][ T30] ? iput+0xd3/0x890 [ 498.967788][ T30] ? sync_bdevs+0xfd/0x360 [ 498.978268][ T30] sync_bdevs+0xfd/0x360 [ 498.985086][ T30] ksys_sync+0xb3/0x150 [ 498.989282][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 498.999800][ T30] ? rcu_is_watching+0x12/0xc0 [ 499.007134][ T30] ? do_syscall_64+0x91/0x250 [ 499.015041][ T30] __do_sys_sync+0xe/0x20 [ 499.019422][ T30] do_syscall_64+0xcd/0x250 [ 499.029651][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.039701][ T30] RIP: 0033:0x7f8686b8cde9 [ 499.055761][ T30] RSP: 002b:00007f8687a02038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 499.064893][ T30] RAX: ffffffffffffffda RBX: 00007f8686da6080 RCX: 00007f8686b8cde9 [ 499.079712][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 499.087770][ T30] RBP: 00007f8686da6080 R08: 0000000000000000 R09: 0000000000000000 [ 499.095955][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 499.104102][ T30] R13: 0000000000000000 R14: 00007f8686da6080 R15: 00007ffeed8b0658 [ 499.112155][ T30] [ 499.115601][ T30] [ 499.115601][ T30] Showing all locks held in the system: [ 499.129766][ T30] 1 lock held by khungtaskd/30: [ 499.134889][ T30] #0: ffffffff8e1bcc80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 [ 499.145679][ T30] 3 locks held by kworker/u8:3/57: [ 499.155005][ T30] #0: ffff8880b863ec18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 499.164981][ T30] #1: ffff8880b8728a88 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x203/0x8e0 [ 499.176569][ T30] #2: ffffffff9aa86968 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_deactivate+0x13b/0x370 [ 499.187309][ T30] 5 locks held by kworker/0:2/1201: [ 499.192575][ T30] #0: ffff8880212ac548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 499.203481][ T30] #1: ffffc9000463fd18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 499.214871][ T30] #2: ffff888029613190 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c1/0x4e10 [ 499.223858][ T30] #3: ffff88807944f190 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7f/0x4b0 [ 499.233190][ T30] #4: ffff888021fcb160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7f/0x4b0 [ 499.243246][ T30] 2 locks held by getty/5585: [ 499.247945][ T30] #0: ffff88814d9b30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 499.257826][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 [ 499.268106][ T30] 4 locks held by udevd/5992: [ 499.272861][ T30] #0: ffff88806b58d0a0 ( [ 499.280690][ T1201] cypress 0003:04B4:DE64.0010: unknown main item tag 0x0 [ 499.292269][ T30] &p->lock){+.+.}-{4:4}, at: seq_read_iter+0xd8/0x12b0 [ 499.299148][ T30] #1: ffff88805c24cc88 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4d/0x240 [ 499.308595][ T1201] cypress 0003:04B4:DE64.0010: unknown main item tag 0x0 [ 499.317850][ T30] #2: ffff88804e458d28 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x71/0x240 [ 499.327585][ T1201] cypress 0003:04B4:DE64.0010: hidraw0: USB HID v0.07 Device [HID 04b4:de64] on usb-dummy_hcd.7-1/input0 [ 499.338907][ T30] #3: ffff888021fcb160 (&dev->mutex){....}-{4:4}, at: uevent_show+0x188/0x3b0 [ 499.352393][ T30] 1 lock held by udevd/6265: [ 499.356992][ T30] #0: ffff888025f744c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe20 [ 499.366404][ T30] 1 lock held by syz.0.575/8056: [ 499.371443][ T30] #0: ffff888025f744c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0xfd/0x360 [ 499.380851][ T30] 4 locks held by kworker/u8:13/8630: [ 499.386221][ T30] #0: ffff8880b863ec18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 499.396212][ T30] #1: ffff8880b8728a88 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x2c1/0x8e0 [ 499.407665][ T30] #2: ffff8880b872a518 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x6b9/0xd30 [ 499.416752][ T30] #3: ffffffff9aa9e200 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x149/0x4a0 [ 499.427172][ T30] [ 499.429483][ T30] ============================================= [ 499.429483][ T30] [ 499.442010][ T30] NMI backtrace for cpu 0 [ 499.442021][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc2-syzkaller-00228-g04f41cbf03ec #0 [ 499.442041][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 499.442051][ T30] Call Trace: [ 499.442057][ T30] [ 499.442064][ T30] dump_stack_lvl+0x116/0x1f0 [ 499.442086][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 499.442110][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 499.442135][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 499.442163][ T30] watchdog+0xf62/0x12b0 [ 499.442192][ T30] ? __pfx_watchdog+0x10/0x10 [ 499.442213][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 499.442234][ T30] ? __kthread_parkme+0x148/0x220 [ 499.442253][ T30] ? __pfx_watchdog+0x10/0x10 [ 499.442278][ T30] kthread+0x3af/0x750 [ 499.442299][ T30] ? __pfx_kthread+0x10/0x10 [ 499.442322][ T30] ? __pfx_kthread+0x10/0x10 [ 499.442343][ T30] ret_from_fork+0x45/0x80 [ 499.442370][ T30] ? __pfx_kthread+0x10/0x10 [ 499.442390][ T30] ret_from_fork_asm+0x1a/0x30 [ 499.442422][ T30] [ 499.442726][ T30] Sending NMI from CPU 0 to CPUs 1: [ 499.486793][ T5917] usb 8-1: USB disconnect, device number 11 [ 499.489637][ C1] NMI backtrace for cpu 1 [ 499.489648][ C1] CPU: 1 UID: 0 PID: 5917 Comm: kworker/1:5 Not tainted 6.14.0-rc2-syzkaller-00228-g04f41cbf03ec #0 [ 499.489669][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 499.489681][ C1] Workqueue: usb_hub_wq hub_event [ 499.489701][ C1] RIP: 0010:__lock_acquire+0x1616/0x3c40 [ 499.489727][ C1] Code: 00 00 00 00 00 fc ff df 4c 8b 34 24 4a 8b 1c e5 20 7c a7 96 48 8d 43 f8 48 85 db 48 0f 45 d8 eb 04 48 83 eb 08 48 85 db 74 40 <48> 8d 7b 18 48 89 f8 48 c1 e8 03 80 3c 28 00 0f 85 cd 18 00 00 48 [ 499.489744][ C1] RSP: 0018:ffffc90000a188d8 EFLAGS: 00000086 [ 499.489758][ C1] RAX: ffffffff942531c0 RBX: ffffffff942531c0 RCX: ffffffff8195b4ae [ 499.489770][ C1] RDX: 1ffffffff2dccfd2 RSI: 0000000000000008 RDI: ffffffff96ebfcc8 [ 499.489782][ C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: fffffbfff2dd7f99 [ 499.489793][ C1] R10: ffffffff96ebfccf R11: 0000000000000005 R12: 000000000007e04e [ 499.489804][ C1] R13: ffff8880267a0000 R14: 525d0af13c161d24 R15: ffff8880267a0bb8 [ 499.489816][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 499.489834][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 499.489845][ C1] CR2: 0000001b2fc13ff8 CR3: 0000000024c16000 CR4: 00000000003526f0 [ 499.489857][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 499.489867][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 499.489878][ C1] Call Trace: [ 499.489883][ C1] [ 499.489889][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 499.489916][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 499.489939][ C1] ? nmi_handle+0x1ac/0x5d0 [ 499.489964][ C1] ? __lock_acquire+0x1616/0x3c40 [ 499.489988][ C1] ? default_do_nmi+0x6a/0x160 [ 499.490012][ C1] ? exc_nmi+0x170/0x1e0 [ 499.490034][ C1] ? end_repeat_nmi+0xf/0x53 [ 499.490061][ C1] ? hlock_class+0x4e/0x130 [ 499.490080][ C1] ? __lock_acquire+0x1616/0x3c40 [ 499.490109][ C1] ? __lock_acquire+0x1616/0x3c40 [ 499.490133][ C1] ? __lock_acquire+0x1616/0x3c40 [ 499.490156][ C1] [ 499.490162][ C1] [ 499.490172][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 499.490194][ C1] ? debug_object_deactivate+0x1ef/0x370 [ 499.490215][ C1] ? __pfx_lock_release+0x10/0x10 [ 499.490240][ C1] lock_acquire.part.0+0x11b/0x380 [ 499.490264][ C1] ? start_dl_timer+0x257/0x5a0 [ 499.490286][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 499.490310][ C1] ? rcu_is_watching+0x12/0xc0 [ 499.490328][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 499.490348][ C1] ? __pfx_lock_release+0x10/0x10 [ 499.490370][ C1] ? start_dl_timer+0x257/0x5a0 [ 499.490391][ C1] ? lock_acquire+0x2f/0xb0 [ 499.490411][ C1] ? start_dl_timer+0x257/0x5a0 [ 499.490430][ C1] ktime_get+0x80/0x310 [ 499.490448][ C1] ? start_dl_timer+0x257/0x5a0 [ 499.490467][ C1] start_dl_timer+0x257/0x5a0 [ 499.490485][ C1] update_curr_dl_se+0x534/0x610 [ 499.490502][ C1] update_curr+0x59e/0x800 [ 499.490522][ C1] enqueue_entity+0x52/0x1340 [ 499.490541][ C1] ? rcu_is_watching+0x12/0xc0 [ 499.490558][ C1] enqueue_task_fair+0x342/0x1120 [ 499.490579][ C1] enqueue_task+0x75/0x470 [ 499.490603][ C1] ttwu_do_activate+0x183/0x9c0 [ 499.490625][ C1] try_to_wake_up+0x6c9/0x1490 [ 499.490646][ C1] ? __pfx_try_to_wake_up+0x10/0x10 [ 499.490668][ C1] ? timerqueue_del+0x83/0x150 [ 499.490688][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 499.490711][ C1] hrtimer_wakeup+0x47/0x60 [ 499.490734][ C1] __hrtimer_run_queues+0x20a/0xae0 [ 499.490751][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 499.490766][ C1] ? read_tsc+0x9/0x20 [ 499.490785][ C1] hrtimer_interrupt+0x392/0x8e0 [ 499.490803][ C1] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 499.490828][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 499.490853][ C1] [ 499.490858][ C1] [ 499.490862][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 499.490885][ C1] RIP: 0010:vprintk_emit+0x621/0x6f0 [ 499.490902][ C1] Code: 85 ed 0f 85 81 00 00 00 e8 8c 2d 20 00 9c 41 5c 41 81 e4 00 02 00 00 31 ff 4c 89 e6 e8 a8 28 20 00 4d 85 e4 0f 85 8d 00 00 00 6a 2d 20 00 45 31 c9 41 b8 01 00 00 00 31 c9 48 8d 05 00 00 00 [ 499.490916][ C1] RSP: 0018:ffffc9000474f678 EFLAGS: 00000283 [ 499.490927][ C1] RAX: 000000000001b452 RBX: 0000000000000029 RCX: ffffc9001acf8000 [ 499.490937][ C1] RDX: 0000000000100000 RSI: ffffffff8199aa38 RDI: 0000000000000007 [ 499.490949][ C1] RBP: 1ffff920008e9ed1 R08: 0000000000000007 R09: 0000000000000000 [ 499.490961][ C1] R10: 0000000000000000 R11: 0000000000000003 R12: 0000000000000000 [ 499.490972][ C1] R13: 0000000000000200 R14: ffff88801decc880 R15: ffffc9000474f740 [ 499.490989][ C1] ? vprintk_emit+0x6a8/0x6f0 [ 499.491004][ C1] ? vprintk_emit+0x6a8/0x6f0 [ 499.491014][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 499.491024][ C1] ? __pfx_lock_release+0x10/0x10 [ 499.491038][ C1] dev_printk_emit+0xfb/0x140 [ 499.491054][ C1] ? __pfx_dev_printk_emit+0x10/0x10 [ 499.491068][ C1] ? __pfx_lock_release+0x10/0x10 [ 499.491081][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 499.491093][ C1] ? hlock_class+0x4e/0x130 [ 499.491102][ C1] ? mark_lock+0xb5/0xc60 [ 499.491118][ C1] ? __queue_work+0x431/0x1080 [ 499.491134][ C1] __dev_printk+0xf5/0x270 [ 499.491149][ C1] _dev_info+0xe5/0x120 [ 499.491158][ C1] ? __pfx__dev_info+0x10/0x10 [ 499.491167][ C1] ? __pfx_lock_release+0x10/0x10 [ 499.491181][ C1] ? mark_held_locks+0x9f/0xe0 [ 499.491195][ C1] usb_disconnect+0xec/0x920 [ 499.491206][ C1] hub_event+0x1da5/0x4e10 [ 499.491219][ C1] ? lock_acquire+0x2f/0xb0 [ 499.491231][ C1] ? debug_object_deactivate+0x13b/0x370 [ 499.491243][ C1] ? __pfx_hub_event+0x10/0x10 [ 499.491253][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 499.491266][ C1] ? rcu_is_watching+0x12/0xc0 [ 499.491276][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 499.491287][ C1] ? process_one_work+0x921/0x1ba0 [ 499.491300][ C1] ? lock_acquire+0x2f/0xb0 [ 499.491312][ C1] ? process_one_work+0x921/0x1ba0 [ 499.491325][ C1] process_one_work+0x9c5/0x1ba0 [ 499.491339][ C1] ? __pfx_nsim_dev_hwstats_traffic_work+0x10/0x10 [ 499.491358][ C1] ? __pfx_process_one_work+0x10/0x10 [ 499.491373][ C1] ? assign_work+0x1a0/0x250 [ 499.491385][ C1] worker_thread+0x6c8/0xf00 [ 499.491400][ C1] ? __pfx_worker_thread+0x10/0x10 [ 499.491413][ C1] kthread+0x3af/0x750 [ 499.491424][ C1] ? __pfx_kthread+0x10/0x10 [ 499.491436][ C1] ? lock_acquire+0x2f/0xb0 [ 499.491449][ C1] ? __pfx_kthread+0x10/0x10 [ 499.491460][ C1] ret_from_fork+0x45/0x80 [ 499.491473][ C1] ? __pfx_kthread+0x10/0x10 [ 499.491484][ C1] ret_from_fork_asm+0x1a/0x30 [ 499.491498][ C1] [ 499.491658][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 499.491669][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc2-syzkaller-00228-g04f41cbf03ec #0 [ 499.491690][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 499.491701][ T30] Call Trace: [ 499.491707][ T30] [ 499.491715][ T30] dump_stack_lvl+0x3d/0x1f0 [ 499.491737][ T30] panic+0x71d/0x800 [ 499.491756][ T30] ? __pfx_panic+0x10/0x10 [ 499.491773][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 499.491799][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 499.491821][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 499.491846][ T30] ? watchdog+0xdcc/0x12b0 [ 499.491870][ T30] ? watchdog+0xdbf/0x12b0 [ 499.491897][ T30] watchdog+0xddd/0x12b0 [ 499.491925][ T30] ? __pfx_watchdog+0x10/0x10 [ 499.491948][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 499.491968][ T30] ? __kthread_parkme+0x148/0x220 [ 499.491987][ T30] ? __pfx_watchdog+0x10/0x10 [ 499.492012][ T30] kthread+0x3af/0x750 [ 499.492033][ T30] ? __pfx_kthread+0x10/0x10 [ 499.492057][ T30] ? __pfx_kthread+0x10/0x10 [ 499.492078][ T30] ret_from_fork+0x45/0x80 [ 499.492099][ T30] ? __pfx_kthread+0x10/0x10 [ 499.492119][ T30] ret_from_fork_asm+0x1a/0x30 [ 499.492148][ T30] [ 499.497883][ T30] Kernel Offset: disabled