last executing test programs: 5m55.549190507s ago: executing program 32 (id=86): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000000)="fc6b9c01eb2a3ce41d95e69b895d27cb6b395981703f16e2ee29c67873e38063f8be80ab11dd2114e16f8f2e77e6def828a083a8f74b3bd2dc0935fd853d353425477eb1339841d350a776e836e7535ba5da3d37acff31229276d34cf6423bd9e63e1663c2c25dc1c9bc29098422b679b251677f60f3ad889a", 0x79}, {&(0x7f0000000180)="ccd262c849da35c2e09905898659bbe53c5df94686f32a35aa8c4994ecaa9cb2686f380386ddd94e426425f24545e75d7d890ad676229f0392c5a62dd6656dc1c1d08899b6f81e13c4406c3b9a628da7bef689824eb9bac745de2bbd9756515b3ee1d70830388756d96ca24f8d1488fdca38538208f36d2f443c5bd2ae63a45923665ca11efbadeef71cff452be23185268aee68af75b5b7236f36c0f73581ab5b2744c67d30d119a2ca62d05dc34e3eb2d3c21b52a66f629b4d3304ac0fa97d810c8436875220e3140915c0a77e53515ec70ad022578b18f117d442127b90515e3c2e4de3e9cdc472ca6fdcf8a63c", 0xef}, {&(0x7f00000000c0)="e0fc67a9f191987d7384", 0xa}, {&(0x7f0000000280)="b30b13021446a279b00b50e777df89743220670f2b608c7084aaac07e737cefd8d9a2811bc15f6012616bbd2113c25b0a803c310918ee7e48bcd9cfa417edfb60ee473d2b0c457b24bcc5e2133457a4b597b991e7f99d41cfb3637be4f58036870fe333f8792074cef9b8446dd641480558f91cf43cf05413ffa993f162fd6b148e9dd179bdf4a1341d930ed7bb1f2f8d8b740ded3c2440f9a7f372c17c60e3a5d08c09863282c4b341909a6743d789bb19362dc353c06c057b7e888f7caa721ef152ca57a90d3304296bdbb56a83a12979137913edb368e6159a215e15d60b629f0414007", 0xe5}, {&(0x7f0000000380)="76422dfbf1d7f8161aae85089a873c6b3d0488ac5d06bf1eafc1b76dd8bbe755026eb99254f404495d9ae90c2ab5ca4b70fc4622c3811486fa6f559c3473de3da31cec80578faeb73375ee83b796522dad2548dd64881072a6", 0x59}, {&(0x7f0000000400)="f6d0a54aa74d2b5dc3fea8e83a309bed85012bd7133f7ae7bbf59a69172cde61685acf97fc953cc144a913e8a4cdf779c67bbd3df77ce418338700c7e9c4c7955521a95383a41f8c855c17332fd2f3b48dbd7e4da607805ec3e11fb4baa93fda94cce057d4dbec72c67954b6f8549243e71ce2f3901344c63dca8fd4d9926b6b0d6dc35c9ac45a37150c52a4eb2769aead6dfe03747ef2906aba4d93", 0x9c}, {&(0x7f00000004c0)="d9af3a8824857e59e741c38ee6dcb4dea9f07df2767ce678eef32659a47242f24c86cb58550d086659092055fed18384d2c07e2a4af150a2be3f639d82ca6a1e1f937dd5ad607a1107ca42d465e5c17a26be8cfff72ebaf12e92d320ff1570a43b66a064169f779525d60bc4eda8b1ca3b03a0c137e325c0afd3dee35cf44e32af34287adce36327f2c64469cc897f3b0ac2f4cb5341a99d24f913a6a082ccdeb48ebc7ce453b24ef6555837a8cbacd559243d053421209f610a64132518a2a5a478e570ca1a0528b3a43e2d793054c8bf7469e8dc8d0c993ccac9e2c4b42c931ad6ee68d18f155a212a524be4", 0xed}, {&(0x7f00000005c0)="ae3a12af035733047167ebbd9b8ec93e048ef8813fdda46c6d415cb3264b76dcc19bf34922a4bcaa70ae50feecef9d4d41d11dc8278f858cec2b6cc10b37d41e28888c8bb00df5905e23b0414414fd28fe6294af6ce1ae0bf9667975351402fb5dfa", 0x62}], 0x8}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket(0x1f, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000014006b04000000d86e6c1d0002887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8429000b4e230f00000000a2bc5603ca00000f7f89004e002050da742dac0000000101ff05020003000200000000000100000000005839", 0x48}], 0x1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r3) socket$nl_route(0x10, 0x3, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048080}, 0x48890) connect$unix(0xffffffffffffffff, 0x0, 0x0) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r6, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) sendto$netrom(r6, 0x0, 0x0, 0x0, &(0x7f0000000240)={{0x6, @rose}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x40000000c6302, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000840)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r8 = dup(r7) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000007c0)={'gre0\x00', &(0x7f00000006c0)={'gre0\x00', 0x0, 0xf820, 0x20, 0xc, 0x8, {{0x1f, 0x4, 0x3, 0x10, 0x7c, 0x65, 0x0, 0x4, 0x2f, 0x0, @loopback, @empty, {[@cipso={0x86, 0x54, 0x0, [{0x6, 0x12, "bf8acd7e1fec6d827dccc20c4527475d"}, {0x1, 0xa, "8b51718d7c4b1efd"}, {0x2, 0xe, "4081e1345eb311593bd44bca"}, {0x2, 0xf, "552d6b7dacd66c619723ebd33e"}, {0x7, 0x4, "dbab"}, {0x2, 0xb, "11d5b234d0f3ff56f5"}, {0x0, 0x6, "2f5c7ca0"}]}, @ssrr={0x89, 0x13, 0x2f, [@multicast1, @rand_addr=0x9, @remote, @multicast1]}]}}}}}) connect$can_bcm(r8, &(0x7f0000000800)={0x1d, r9}, 0x10) sendfile(r8, r8, 0x0, 0xffffffff) 5m5.915710967s ago: executing program 2 (id=229): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) connect$qrtr(0xffffffffffffffff, &(0x7f0000000080), 0xc) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) open_by_handle_at(0xffffffffffffffff, 0x0, 0x1) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r1 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r1, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 5m5.444884309s ago: executing program 2 (id=232): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat2(0xffffffffffffff9c, 0x0, &(0x7f0000002980)={0x2440, 0x3ee0be4875070936, 0x10}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000280), r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001280)='/proc/crypto\x00', 0x0, 0x0) preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000001800)=""/250, 0xfa}], 0x1, 0x40000004, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x4) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) 5m3.957810079s ago: executing program 33 (id=232): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat2(0xffffffffffffff9c, 0x0, &(0x7f0000002980)={0x2440, 0x3ee0be4875070936, 0x10}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000280), r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001280)='/proc/crypto\x00', 0x0, 0x0) preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000001800)=""/250, 0xfa}], 0x1, 0x40000004, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x4) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) 4m47.464099382s ago: executing program 34 (id=263): r0 = openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x80800, 0x0) unshare(0x6a040000) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000180)={"000000149c0286e08ffad43c40fc0a000000ab65a29e23546aad0281b3aff5eb", r6, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r7, 0xc0383e04, &(0x7f0000000240)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) r9 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r11, &(0x7f000000d840)=[{{&(0x7f00000001c0)=@file={0x0, './file2\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000380)="98801d03c7eb42ced2609a1f403845bdebdf425d564638b8481996b476c4ca29e6faafdadc2559e58eb6f7aebf372256fed9aef0e04252e7afc0e77b0ad9c960af78e30edd6171242cabfbde509f503246c99e20ba599c60ebcdcb26ef59532bb6b9bca3185d3be6e4e3570e8b22b3d19502fc26c24cf01bcac3b32141214c1aa6a96bd61933a2dc4514e1466ac706a7b787a0fa062d7f406fa55646b96637a2ff8dba9ab7c98f13df5bebaa12dd6a383c17348fe950c3d5c3537af1b4eaea949767706e3928161e0aaf1b46e06506dfd3113b1f3bd77762ccb98dd338d885c12f5b5c28dcd2fd4b4ba4694cac37fe372bc2980ae3", 0xf5}, {&(0x7f0000000480)="cd247cea8560ed14455c85da92c1969a7a07337397319f864285899f3964b7faad9cfcf701ddd703d0abd2939c0bec501a5c6589a61c2705a296c0a6a63f4b0cc53b7bc6084f38a30493d81a0c4b34c3a1a8e2", 0x53}, {&(0x7f0000000500)="e5c60f8dac3d49a74aa16fc11e4de6e52c91bc1d556c515d3aee6073493cfff434e12d664b123170d2d21b7bc685d99f694d227cb8b72a1f53ecdbe925330a828b8983f04bafa7f6c3d7ec820a9db133f761d72c4e070d82f4cf60258404ed4c0360b3978f8a83d491bf9e6f18fc94eed275aa20801bb29c793c9825eade00807d84d44f1a77bd0f362b5f56c61868", 0x8f}, {&(0x7f00000005c0)="8b21dee0d37bacc3e1312b3040bf75a18b87cd4821acc3eaa216e79b1aa07e3c018289d91941b3abed3fd4f94e983a1c74a68c28a3ffa6286bf39de0e4040421688fe85d29877f6bdf4a371b298f899c9c98643e6db4177a86b2f255e4091d24f25e19761edb4ac0d8db142f489e49231fee21918eb0fbc9f136d07f57f7847d462d9174298b751d010ae05e862ca21771fe7aacb38a168307f728bf00ca1d1bdcdc412837", 0xa5}], 0x4, &(0x7f0000000ac0)=ANY=[], 0xb8, 0x48010}}, {{&(0x7f0000006200)=@file={0x0, './file2\x00'}, 0x6e, &(0x7f000000d680)=[{&(0x7f0000006280)="45fe57cf0120140fe70ec5119c0f58f8e1fb3ee06968f47cac58e0fbd39b05b01afdf181341e5eab5912962a95b1bc288e89bd38a1de24142f4d9a5abeea7b", 0x3f}, {&(0x7f000000c380)="60e3ed4081796063ccf7d2d1b565b1bd6b63cbcd03ed2378b7cbbe8814c0e3f6c2631d754035b3b02ad860f91d56e3a1132fa030daa387b2b5e9f3d31ddb3ada4f85327557ce2e54360e8e279ef03a24b704d17ee1aee209e21540cbd0062eeea35cabeb9425f2ad944241bc9e68206771dde7c883ce697de6ae361a541fb1aea7a1c728d9ac24b23b184e52ae", 0x8d}, {&(0x7f000000c440)="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", 0x1000}, {&(0x7f000000d440)="c3aed9713c32", 0x6}, {&(0x7f000000d480)="3082401b4e3f83f4d8ddd3bcb07bde8799443ff0f130f7edd70c7b37a8109e1fab3d490b567085c9c3ea347c81c81db833f517fb5a564892b22fd5fc246fbda06bb546607255201b9f3eaf5f16b911aab75f883592f14317af60f3425364e2e38bf5833d27c59a3b50b81c3e7781e7981adb0a675dd74b767679aff1bd9d3c636c309392", 0x84}, {&(0x7f000000d540)="057a29d8664202a9222920c02927a6cac4837684da2a1e05d6977d66f5f4973f04dcbae679ca0da695fb651240092cc4aaf92e746484336e714fc3dcab48f55450da5319eb4c83b68f0d9452d9c8f8bf4a4d083daa76f4552e7b49815a16f3c3fe70fd761325bcc5a7df8c36ea15c9b23f9b919e6a64c600e0960b628e60205b3ad2072c38ff47fe803b98997f7a65685a37cf5393470864c5d5253ca0188571a2d065c50e5a9fbf28a4eb8b6b412db06674d305ed1cf9957b8b88e20e8ec9bd7dba099466be5cc58bbe67", 0xcb}, {&(0x7f000000d640)="cfb8a213cdcdc930bae645a6be53739b17e09d0f2f0af73aa75a", 0x1a}], 0x7, &(0x7f000000d7c0)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32=r6, @ANYRES32=r9, @ANYBLOB="24000000000000000100000001000000", @ANYRES32=r8, @ANYRES32=r4, @ANYRES32, @ANYRES32=r4, @ANYRES32=r8, @ANYBLOB='\x00'], 0x50, 0x8000}}], 0x2, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r11, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xc, 0x0, 0x3}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2000000000003a) 4m47.434947074s ago: executing program 35 (id=265): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x3e, 0x0, 0x1}, 0x28) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="6c0000001000ffff25bd00"/20, @ANYRES32=0x0, @ANYBLOB="14140000212000004400128009000100766c616e00000000340002800600010003000000280003800c00010000000000040000000c0001000000008000ffdfff0c00010000000000c6000000080005", @ANYRES32=r1, @ANYBLOB], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r2, 0x8010500c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) chdir(&(0x7f0000000080)='./file0\x00') sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r5, @ANYBLOB="080003"], 0x80}}, 0x8000) 4m47.432339203s ago: executing program 3 (id=266): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newtaction={0x90, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{0x7c, 0x1, [@m_bpf={0x78, 0x1, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x1, 0x7, 0x4, 0x6}, {0x30, 0x98, 0x81, 0xfffffff9}, {0xc, 0x90, 0xa, 0x5}, {0xe54, 0x6a, 0x1, 0xfffffff6}, {0xff01, 0x3, 0x81, 0x4}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) 4m47.254907605s ago: executing program 3 (id=267): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x14, 0x4, 0x8, 0xb}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) setxattr$incfs_metadata(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newtaction={0x90, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{0x7c, 0x1, [@m_bpf={0x78, 0x1, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x1, 0x7, 0x4, 0x6}, {0x30, 0x98, 0x81, 0xfffffff9}, {0xc, 0x90, 0xa, 0x5}, {0xe54, 0x6a, 0x1, 0xfffffff6}, {0xff01, 0x3, 0x81, 0x4}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) 4m46.529885391s ago: executing program 3 (id=268): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x4, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x1}, {0x2, 0x4}, {0x2, 0x2}]}, @func={0x3, 0x0, 0x0, 0xc, 0x5}, @struct={0x5, 0x2, 0x0, 0x4, 0x1, 0x49c, [{0x0, 0x1}, {0x7, 0x1, 0x9c180000}]}, @typedef={0x9, 0x0, 0x0, 0x8, 0x4}]}, {0x0, [0x30, 0x5f]}}, &(0x7f00000004c0)=""/89, 0x7c, 0x59, 0x0, 0xe43400}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) socket$netlink(0x10, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x189040, 0x10a) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c00) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x16, 0x8b}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000202, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendfile(r2, r1, &(0x7f00000000c0)=0x58, 0xa) 4m45.511156148s ago: executing program 3 (id=270): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat2(0xffffffffffffff9c, 0x0, &(0x7f0000002980)={0x2440, 0x3ee0be4875070936, 0x10}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), r1) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001280)='/proc/crypto\x00', 0x0, 0x0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x98004}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x44, r5, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_TID={0xc}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_MS_ADDR6={0x14, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x4) 4m44.576310359s ago: executing program 3 (id=272): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000005200f90b02000800"], 0x14}, 0x1, 0x0, 0x0, 0x4004015}, 0x4000800) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r4, 0x0, 0x44001) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000b00)=0x6) read(r6, &(0x7f0000000a40)=""/141, 0x8d) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace(0x4207, r7) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) 4m43.983061959s ago: executing program 3 (id=274): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x312}, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000078000000090a010400000000000000000100fffd08000a40000000000900020073797a31000000000900010073797a300000000008000540000000253c0011800a0001006c696d69740000002c0002800c000240000000000000000308000440000000010c000140fffffffffffff7ff080003"], 0xc0}, 0x1, 0x0, 0x0, 0x40c0}, 0xc4) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f, 0x0, 0x3837, 0x0, 0xfffffffffffffffc, 0x0, 0x8}, 0x0, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080e"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r2}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161942, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0xe4, @rand_addr=0x64010100}, 0x2}}, 0x2e) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r7 = eventfd(0xff7ffff7) r8 = eventfd(0x0) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000080)={r8, 0x0, 0x2, r7}) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000000)={r8, 0x7, 0x2, r7}) 4m43.791418978s ago: executing program 36 (id=274): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x312}, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000078000000090a010400000000000000000100fffd08000a40000000000900020073797a31000000000900010073797a300000000008000540000000253c0011800a0001006c696d69740000002c0002800c000240000000000000000308000440000000010c000140fffffffffffff7ff080003"], 0xc0}, 0x1, 0x0, 0x0, 0x40c0}, 0xc4) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f, 0x0, 0x3837, 0x0, 0xfffffffffffffffc, 0x0, 0x8}, 0x0, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080e"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r2}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161942, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0xe4, @rand_addr=0x64010100}, 0x2}}, 0x2e) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r7 = eventfd(0xff7ffff7) r8 = eventfd(0x0) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000080)={r8, 0x0, 0x2, r7}) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000000)={r8, 0x7, 0x2, r7}) 4m34.861625413s ago: executing program 8 (id=273): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') socket$inet(0x2, 0x1, 0x100) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff030060010000009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) tkill(r5, 0xb) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x1000080, 0x0) 4m33.879424051s ago: executing program 8 (id=282): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_X2APIC_API(r2, 0x4068aea3, &(0x7f00000000c0)={0x81, 0x0, 0x2}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0x8080000, 0xb, 0xfffffffb, 0xfffffffe, 0x0, [{0xc, 0x3, 0x8, '\x00', 0xb4}, {0x83, 0x1d, 0x4, '\x00', 0x4b}, {0xf9, 0xf, 0x7, '\x00', 0xda}, {0x0, 0x5, 0x0, '\x00', 0x8}, {0x8, 0x10, 0x8}, {0x2, 0x9, 0x6, '\x00', 0xff}, {0x6, 0xe, 0x47, '\x00', 0x6}, {0x5, 0x90, 0x4, '\x00', 0xe9}, {0xe, 0x4, 0xa7, '\x00', 0x1}, {0x9, 0xcc, 0x6, '\x00', 0x4}, {0x1, 0x9, 0x10, '\x00', 0x8}, {0x0, 0x0, 0x5, '\x00', 0x7}, {0x1, 0x8a, 0x80, '\x00', 0x4}, {0x3, 0xf1, 0x6, '\x00', 0xb2}, {0x7, 0x4, 0x6, '\x00', 0xfd}, {0x6, 0x0, 0x4, '\x00', 0xd}, {0x7, 0x2, 0x4, '\x00', 0x3}, {0xec, 0x3, 0x4}, {0xf, 0x6, 0x6, '\x00', 0x1}, {0x9, 0x3, 0x56, '\x00', 0x4}, {0x1, 0x3, 0x7, '\x00', 0x4}, {0xd, 0x40, 0x7, '\x00', 0x7}, {0x5, 0xfd, 0x7, '\x00', 0x2}, {0x4, 0x8, 0xfa, '\x00', 0x42}]}}) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @remote, 0x4, 0x4}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a809a1b3494e05b390000000400ca00010037158c9dbd310034837fb701b8de6cfe54c496992515d44dd1de10410624822bbecdd069580f7fc4a249d0e4a31c5840339a1beb18114b034760ebb7d258a5143ae5d02f75b0cd38c4a13c3f914270ce1cd2ddc81b5e0020c42920a1a314a976e33579"], 0x18}}], 0x1, 0x20000004) r3 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_INSN(r3, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x80000000}) 4m33.660779259s ago: executing program 8 (id=283): socket$packet(0x11, 0x2, 0x300) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r1 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x2, 0x0, 0x0) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000140)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r6, r5, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) 4m33.41076433s ago: executing program 8 (id=284): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat2(0xffffffffffffff9c, 0x0, &(0x7f0000002980)={0x2440, 0x3ee0be4875070936, 0x10}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) syz_genetlink_get_family_id$gtp(&(0x7f0000000280), r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001280)='/proc/crypto\x00', 0x0, 0x0) preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000001800)=""/250, 0xfa}], 0x1, 0x40000004, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x4) 4m32.205717723s ago: executing program 8 (id=286): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="020000f2030000000404000009000000000000000f9c0430e3d3c96914323043789449e693764f87dc38cb4b7c43ceb1647eb6985f8cf8661b4adec23e79320cd809dc154ac9b598ec2561de01696a0ce8393e7c6f64c3d528180a62bcfd673cbd9f791eda70d81cde667218dc4328074a5c7df896c38b77523b0300000000000000bd51a43b3f30a2d1adccc0925940e34d21273054908ddd17b27db5de1785ff2209169e9acf5ae5806dcc5dacad540f566476dc4c420ebe1edf7f6837efbf59db8907598c6b10e0b560e3a0aaa70b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x25) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000280)={0x9}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xffffffffc, 0x0, 0x40, 0x200002000001, 0x0, 0x2004c8, 0x0, 0x0, 0x68ff, 0x5, 0x7fff, 0x3, 0x400000000], 0x80ad003}) ioctl$KVM_RUN(r4, 0xae80, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r6 = dup(r1) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@ignoreqv}, {@aname={'aname', 0x3d, '%:'}}]}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x200, 0xfffffffe, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0xffe0}, {0x8, 0x7}, {0x14, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x40004) socket$nl_generic(0x10, 0x3, 0x10) 4m31.392854694s ago: executing program 8 (id=290): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x189040, 0x10a) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c00) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x16, 0x8b}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000202, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0xa) 4m31.221820074s ago: executing program 37 (id=290): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x189040, 0x10a) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c00) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x16, 0x8b}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000202, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0xa) 4m23.648866468s ago: executing program 5 (id=308): socket(0x10, 0x3, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) socket$can_raw(0x1d, 0x3, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r1, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/63, 0x304000, 0x800, 0x0, 0x3}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) 4m19.878468155s ago: executing program 9 (id=312): socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x8080) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000002100010000000000000000000a0000000000000005000000080006"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) 4m18.852599672s ago: executing program 5 (id=315): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) write$selinux_validatetrans(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x11}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m18.851876887s ago: executing program 9 (id=316): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) write$selinux_validatetrans(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x11}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m17.841201888s ago: executing program 9 (id=318): r0 = socket(0x18, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r3, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_emit_ethernet(0x7a, &(0x7f0000000540)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00', 0x44, 0x2f, 0x0, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x880b, 0x0, 0xfffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57}, {}, {0x8, 0x88be, 0x8000000, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}}}}}}}, 0x0) read$FUSE(r2, 0x0, 0x0) read$msr(r1, &(0x7f0000006900)=""/102400, 0x19000) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@delqdisc={0x68, 0x25, 0x100, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x1a}, {0x0, 0xf}, {0xfff1, 0x2}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x80000001}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x81}, @qdisc_kind_options=@q_htb={{0x8}, {0x2c, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x1000}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5, 0x8}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x1}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x44800}, 0x5) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000380)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r5, @ANYBLOB="01000000000000000000010100000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c64000980140000800600010002000000080002"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r6 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f00000001c0)={"1b00", 0x101, 0x5, 0x2, 0x800, 0x1, "f759e100edc710000000d9fc6300", '\x00', "0300", "fdff1310", ["8b59b4d766cbd6e4af000700", "c2fed6e1d2def593c99f2982", "000000ff0000000000000020", "0006488000000000001000"]}) 4m17.306887736s ago: executing program 9 (id=320): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat2(0xffffffffffffff9c, 0x0, &(0x7f0000002980)={0x2440, 0x3ee0be4875070936, 0x10}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), r1) preadv(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f0000001800)=""/250, 0xfa}], 0x1, 0x40000004, 0x0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x98004}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x44, r5, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_TID={0xc}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_MS_ADDR6={0x14, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x4) 4m16.530246613s ago: executing program 5 (id=322): socketpair(0x2b, 0x1, 0xfff, &(0x7f0000000b00)) syz_emit_ethernet(0xf7, &(0x7f0000000700)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@x25={0x805, {0x0, 0x5, 0x1, "08d58c94f25c5e9b582274e8b13688d75e7a1e7c5f21ac7e888c98ebd756418c9eee971052ebfb76d1a45109079620f6599e68edc50724b5f9f4e164aec47e89d91520b4256029a13f44e3e644c54c860bdd9fdfa3b3f7677796ada7f2a751ff95e954a26cc80d6c4ff5b8f0795599898caf26bce1f6283fa116050f2866bd612294b27e9677c4f89862a7525cb77f0633fa8709710fef56731fe84b8c60454c04c6b7a6dcd597ac4840ac3c60ad6120185891f36a8ba5ac0b4fb6e210dc757e2a4a4e3ccd72115f5dfdcd0c2512d48ded60be49891ef4e8a3fcb65b28d028488bbd0a254e33"}}}}, &(0x7f00000001c0)={0x1, 0x4, [0xe1a, 0x10b, 0x735, 0xe7e]}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000e00)={{0x12, 0x1, 0x310, 0xce, 0xb3, 0xa, 0x10, 0x2639, 0x102, 0xd2f3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x3, 0x4, 0xd0, 0x0, [{{0x9, 0x4, 0x1a, 0xa, 0x1, 0x1a, 0x49, 0xa, 0x62, [], [{{0x9, 0x5, 0xd, 0x3, 0x200, 0xa, 0x9, 0x2}}]}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x9, [{0x102, &(0x7f0000000300)=@string={0x102, 0x3, "b44193c6d2c1b0f95c7345e32f859983bd94193fc835456959006737319bf39b3e9a86ea2a15acdb10c188cdd6cd69f2d500a25d28393c9dd70736b085aa5d9b54c92722a788faa640181e33bcd4e83d7550be94aed5cbf5babc005dbbcad313e7e282f4c9934bc92496f83253be71f147287c2da072e901ad232da76da97cd909ee890e53214171765f090b5f2911da2453665618c247e88defb54db602dd1af402dbceacd21402323a2bf0e6eaef94854e5e1688092bd43052dcd2cd45c09e548e92fe795ea7f74be6a97153ddb681fbd86b18c5d6e7c438943a77476590dd1a9f049097c20eb47c1a7edc3b0ac2da0b00"/256}}, {0x40, &(0x7f0000000440)=@string={0x40, 0x3, "d5d0d2a5563b637e0577df67a6f4f4b535edaece1081cd7532dee8030c3cbc5b96c608c9164b884e6b5b36dd5386f5bdf92beec91e7ae3e5d2e8dd82e8c3"}}, {0x101, &(0x7f00000005c0)=@string={0x101, 0x3, "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"}}, {0xe8, &(0x7f0000000000)=@string={0xe8, 0x3, "87d9a7950529ef4696c596c1d93bf0131e8c38b1128718954ec7a42759a6fb0d1e0c6d10c73e7db5084a1c3800746e469b5480acb8463165de1573a505a95b5e472a91fed04c2f2fa1d49b347001a1a1907e70c19d43e860ab29ce062b3558cad47507c3d6d320d0c9a995ceb429dc89c65561b96b7179dfda913b102f61b28ab0dc53f563fbcfa7af79238f7dfe24a52c12be3fa2f5dda49842da43ae07a428f131270e52d5de53936effde9ba911fb1250a1ebc47c7b21fecaea281a7aa6fc68bdf74c3a2e82a9a00a90e706ab0dcfe03ffcc85d19b5be00"/230}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x340a}}, {0x102, &(0x7f0000000480)=@string={0x102, 0x3, "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"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x2c09}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0xc0a}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x1c0a}}]}) 4m16.198285729s ago: executing program 9 (id=323): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x189040, 0x10a) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c00) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x16, 0x8b}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000202, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendfile(r2, r1, &(0x7f00000000c0)=0x58, 0xa) 4m15.265218969s ago: executing program 9 (id=326): socket$inet(0x2, 0x4000000000000001, 0x0) (async) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e1f, @loopback}, 0x51) sendto$inet(r0, 0x0, 0x0, 0x2000476c, &(0x7f00000000c0)={0x2, 0xe21, @empty}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x2000476c, &(0x7f00000000c0)={0x2, 0xe21, @empty}, 0x10) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) syz_open_pts(0xffffffffffffffff, 0x101) (async) syz_open_pts(0xffffffffffffffff, 0x101) syz_emit_ethernet(0x0, 0x0, 0x0) openat$rtc(0xffffff9c, 0x0, 0xb0000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0xffffffffffffff9d, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) (async) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149e82, 0x244) setresuid(0x0, 0xee01, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000600)={'wpan0\x00'}) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) (async) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x2010, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x2010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) 4m14.580485707s ago: executing program 38 (id=326): socket$inet(0x2, 0x4000000000000001, 0x0) (async) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e1f, @loopback}, 0x51) sendto$inet(r0, 0x0, 0x0, 0x2000476c, &(0x7f00000000c0)={0x2, 0xe21, @empty}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x2000476c, &(0x7f00000000c0)={0x2, 0xe21, @empty}, 0x10) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) syz_open_pts(0xffffffffffffffff, 0x101) (async) syz_open_pts(0xffffffffffffffff, 0x101) syz_emit_ethernet(0x0, 0x0, 0x0) openat$rtc(0xffffff9c, 0x0, 0xb0000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0xffffffffffffff9d, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) (async) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149e82, 0x244) setresuid(0x0, 0xee01, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000600)={'wpan0\x00'}) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) (async) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x2010, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x2010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) 4m13.150896333s ago: executing program 5 (id=332): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat2(0xffffffffffffff9c, 0x0, &(0x7f0000002980)={0x2440, 0x3ee0be4875070936, 0x10}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) preadv(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f0000001800)=""/250, 0xfa}], 0x1, 0x40000004, 0x0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x98004}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x44, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_TID={0xc}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_MS_ADDR6={0x14, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x4) 4m11.720933564s ago: executing program 5 (id=333): ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b70, &(0x7f00000001c0)={0x20, 0x0, 0x0}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000003c0)="02030e00d3fc02000000ab5d71acedd7c9560385dcb188a8", 0x18, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x40000) clock_getres(0x0, 0x0) getpid() msgsnd(0x0, 0x0, 0x4, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, &(0x7f0000000380)) msgrcv(0x0, 0x0, 0x0, 0x1, 0x5800) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r3 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x44a00, 0x116, 0x8}, 0x18) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000140)) 4m9.404580484s ago: executing program 5 (id=340): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f0000000000)={0xc, r3}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000340)={0x28, 0x2, r3, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x10}) ioctl$IOMMU_VFIO_SET_IOMMU(r2, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r2, 0x3b72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800007f00000000002000000000000000010021"]) fcntl$getownex(r1, 0x10, &(0x7f0000000400)={0x0, 0x0}) prlimit64(r4, 0x0, &(0x7f0000000280)={0x7ff, 0x4}, &(0x7f0000000040)) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r5, 0x11, 0x64, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000000)=0x1000) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 4m9.04917018s ago: executing program 39 (id=340): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f0000000000)={0xc, r3}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000340)={0x28, 0x2, r3, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x10}) ioctl$IOMMU_VFIO_SET_IOMMU(r2, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r2, 0x3b72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800007f00000000002000000000000000010021"]) fcntl$getownex(r1, 0x10, &(0x7f0000000400)={0x0, 0x0}) prlimit64(r4, 0x0, &(0x7f0000000280)={0x7ff, 0x4}, &(0x7f0000000040)) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r5, 0x11, 0x64, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000000)=0x1000) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 4m0.351265845s ago: executing program 2 (id=327): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) (async) ptrace$ARCH_SHSTK_LOCK(0x1e, 0x0, 0xff9de1bcb3367476, 0x5003) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0xffffffffffffffff, 0x2, 0x0) (async) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x4000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b0000000000000005ffffffffe3000000000000831c61eb01f715d923225a420a995b6355b1ddc1729dd90f7d35ee2b7910fa0b4908944028ffef8ecd7db1386f19127da1b36c3e58f9c548b85afe23da2b4b62bba77915990c697f1f987020bf18d3a2035c948e6a33814540e3326dbea15ad3f0de2e434a7a43765f279da19ed6a064dd5ab4cfdcc8ba1eb52a1b9e52ce2c42bea0ced0", @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xf, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) r2 = syz_open_dev$video4linux(&(0x7f0000001140), 0x92e2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f0000000000)={0x3, 0x0, 0x3010, 0x100, 0x0, 0x7}) (async) shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) bind$llc(0xffffffffffffffff, 0x0, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x4d, &(0x7f0000000480)='\x00\x00\toup\x00C\xaf\x00\x00\x00\x04\x81fj:\xee\x03\xa6\xd3o\x02z\xc1\xbbI\xc2#\x19\xd8\xd6\x99\x91{\x8fI\xce\xe2-\xefv*\xd1\xf2\x0f\xa0\xa0T\xdbmpY\xe2\x83e\xff\xd2\xe2\xec+\xcc\x16\x1c`\xddv\x86_\x85\x18Fh\x83\n\xbc\xfc'}, 0x30) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c01000013000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="050027000000000008008500", @ANYRES32=0x0, @ANYBLOB="140003006d6163766c616e31000000000000000008000a00", @ANYRES32=r3, @ANYBLOB="e8001a8048000a8014000700ff02000000000000000000000000000114000700fe8000000000000000000000000000aa050008000000000014000700fe8000000000000000000000000000bb9c00028010010180bafc0000000000000400070040ff0700100002800c000180080000000000000018000a80140007000000000000000000000000000000000144000a80050008000000000014000700fc020000000000000000000000000000140007000000000000000000000000000000000100000700fe80000000000000000000000000000005000800000000000400070004000700100002800c0001"], 0x15c}}, 0x0) (async) eventfd(0xffffffff) (async) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) (async) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r4 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), r1) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000010000001400020077673100000000b2e03c04e825b7c8100000000000007075bbf95a8df1580000802400010300000081c983c8209ee781254b899f8ed925ae9f0923c2"], 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) 3m59.624548505s ago: executing program 2 (id=364): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat2(0xffffffffffffff9c, 0x0, &(0x7f0000002980)={0x2440, 0x3ee0be4875070936, 0x10}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), r1) preadv(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f0000001800)=""/250, 0xfa}], 0x1, 0x40000004, 0x0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x98004}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x44, r5, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_TID={0xc}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_MS_ADDR6={0x14, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x4) 3m58.529425384s ago: executing program 2 (id=367): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=@newlink={0x40, 0x10, 0x49920d862a92143b, 0x100000, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r2}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x24000800) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000001d80)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010104}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f00000001c0)={r5, 0xffff}, 0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000040)={r5, 0x5, 0x1, [0x0]}, 0xa) 3m57.263811388s ago: executing program 2 (id=371): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x8040, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000000000"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000300), 0xe918, r0}, 0x38) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100), 0x1001) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, 0x0, 0xc004004) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x7, 0x8}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926", 0x20}], 0x1}], 0x1, 0x40800) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x30) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x4, 0xb3, 0x0, 0x5, 0xff, 0x1f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfd}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x10004, 0x0, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000440)="0f330f01caf367d9f4ffc76766c7442400080000006766c7442402010000006766c744240600000000670f011c24360f2064ba4300b81447efea6d008d006436089852a70f00de"}], 0x1, 0x24, 0x0, 0xfffffffffffffe72) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 3m56.886890258s ago: executing program 40 (id=371): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x8040, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000000000"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000300), 0xe918, r0}, 0x38) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100), 0x1001) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, 0x0, 0xc004004) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x7, 0x8}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926", 0x20}], 0x1}], 0x1, 0x40800) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x30) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x4, 0xb3, 0x0, 0x5, 0xff, 0x1f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfd}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x10004, 0x0, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000440)="0f330f01caf367d9f4ffc76766c7442400080000006766c7442402010000006766c744240600000000670f011c24360f2064ba4300b81447efea6d008d006436089852a70f00de"}], 0x1, 0x24, 0x0, 0xfffffffffffffe72) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 10.844212363s ago: executing program 0 (id=1077): r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r2 = memfd_create(&(0x7f00000003c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f00000009c0)=ANY=[@ANYBLOB="0020000002000000", @ANYRES32=r2, @ANYBLOB="0000000000000000000000000080"]) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x4000}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x3, 0x1ff, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffc, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x3, 0x0, 0x0, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x7, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x0, 0x200001, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x40000000, 0x0, 0x3, 0x3, 0x0, 0x0, 0x401, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x800000, 0x0, 0x6, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0xfffffffd, 0x0, 0x200, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100, 0x0, 0x4, 0xfffffffd, 0x80000000, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x1, 0x6}, {0xff, 0x0, 0x0, 0x10}}}]}}]}, 0x45c}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 10.128396871s ago: executing program 4 (id=1081): mmap(&(0x7f0000955000/0x2000)=nil, 0x2000, 0x1, 0x810, 0xffffffffffffffff, 0x0) mprotect(&(0x7f00005ae000/0x1000)=nil, 0x1000, 0x3) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x27, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x81}, {}, {}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x3b}, @map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_output, @alu={0x4, 0x0, 0x2, 0xb, 0x1, 0xfffffffffffffff0, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff1, 0x0, 0x0, 0x0, 0xfff}, @jmp={0x5, 0x0, 0x1, 0xa, 0x8, 0x4, 0x4}, @jmp={0x5, 0x1, 0xd, 0xb, 0x7, 0xfffffffffffffff8, 0x10}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) syz_usb_connect$printer(0x2, 0x0, 0x0, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r4 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000100)=""/161, 0xd8}], 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000480)='\xf5\xfc\xd2\xec]\x95zx8*\xa2d\x11\xb5\xb1\x01\x00\x00\x00\xe49{\x8a{\x81s\xea$\xdfg\xb1\x03DY!\x97\xadM\xd7\xff\x8a\xcd[>\x12e\xc3]d8\xba\x8ec\x00\x00\x00\x00\x00\x00\x00\xa0\xe2\xd5y\xec\x90\x00\x98Y\x91\x19\x16\x89\xd0\x1a\xad\xcd\xd6\xd0\xc6\xb9\xeb\x95\xd3\x9cl\x9cu#\xb4\xee\xe5\x9d\t\fV\xd4\xda\xfc`2?\x15P\xba\x14b\x1c\xcc\xd5\xb9jA$s\xb9g3\x15[\xc7\xec\xa9;\xee\x01\xc9\xc4\x1f\xc3\xe4\xfa\xd3fU\x0e\x86\xc8\xa7\xaf\xaf\x04P\xa3\x8bb\xbf\\\xdb\x83\x00\x96sy\x14\x1eo\xcc9&\x946\xf9\xf5v\xee\xb5m$;\x01\xb8\xeau\x00\xd1S=\x920H\xc2z\xb5\xbe\x95\xef\xeb\xd1\xc8\xa1\xba\xach\xbef\xa8\x86\xc2\x18\x9cC\x15\x9c^\xcf\xe9\xbcp\xb4Ff\x00\x9d>p\"\x19\xd8}|\x92\x13\x874\xe3\x01\xfd-?\xba\xf2\x8e\xa5y\\\xf0\fkd??-\x983\xf3\x19\xc7\xc0/\xe9\x1a\x80=\xa72)\xd2\x00'/272, &(0x7f0000000240)='/\t\x00\x00\x00\x98', 0x0) tkill(r4, 0xb) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x800008, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_auto}]}) chdir(0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan1\x00'}) remap_file_pages(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0) 7.688756719s ago: executing program 7 (id=1084): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) listen(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={[], [{@fowner_lt}, {@smackfshat={'smackfshat', 0x3d, 'sched_switch\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x65, 0x55, 0x31, 0x34, 0x30, 0x39, 0x66], 0x2d, [0x63, 0x33, 0x36, 0x33], 0x2d, [0x66, 0x6fedb0ad667a3716, 0x39, 0x4bbc10f19dea590f], 0x2d, [0x37, 0x66, 0x30, 0x39], 0x2d, [0x36, 0x65, 0x39, 0x32, 0x33, 0x62, 0x36, 0x33]}}}, {@appraise_type}, {@dont_hash}, {@euid_lt}], 0x2f}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0x9) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r4, 0x29, 0x6, 0x0, &(0x7f0000000780)) readv(0xffffffffffffffff, 0x0, 0x0) r5 = memfd_create(&(0x7f0000000840)='[\v\xdbX\xae[\x1a\xa9\x00\xc2\x9aml\r\xcf\xaa\x13\x99\x85B\xc3\x06<\xc2\xa9\xc3\xdb\x88\xee\x85md\xc8\x85HX\xa9%\f\x8fe\xe0\x00\x00\xa8\xfdn\xbe \a\x0e\xa3\xb9\x1d\x9dO\xbdj\x00\x00\xfb\xff\x00c\xb2\xc9\ap\xd0\xa2\x82\x1e\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcb\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2\xa75\x9d\xcb\x1e\x80\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x00uNh\xc5(\xbc\xf3\xac{\x04D2\xf2\xcd\xc2{E\xae\x89\xddI\xc8\xc6\xe9\xef\x98\xf0\x8b\xac\xa7R\x10\x011\x9fi\x00\x00\x00\x00\x00\x00\x00\x00\x002?D\x86\x14\xa52<\x87n\xf4\x04R\x15\t\xb8\xbeT\xb8\xe7K)\x1fP\xb6\xce8\xcc\xabe\xcb\xd0\xf9\xc9\xfe_\v\xaa#\x8f\x8asu\xb2\xfe\xc4\xbe\x03\xd3\x93E\x1d\xaf}\x9b\xac\xc2\x9a\xe6W\x92sD\fn\x9e\xc2s\xc6_4\f\xc1\x8b\x9a\xa4_\xad\x9b\xb9 \v\x0f{>\xdf^.\xb8\x96\x1d\x99vY\xa8\xfa\xd7i\x94i^;\xaa\xe7XA\xd2\xc5\x02\x12I\xbe\xd0Ksq\x96 \xbf\xed\x1c\x91\xeeN\xda&\xddtG\xc2\xa8j\xae\xac)\xfdNu\x19\x91\xa7z\x1b\x0e\xab\xd2k\x16\x87#\xf6p#\x8d\xdd?\x9fXV\x12\xa9\xc7v\x02\x98g:4\xb6\xcaY\xc2~k\xcb\xef]h/\xa2\xaf\xc4\xec\xdc\xd4H\xed\x94qNY\x85\x87&\xf1\xbb\f\x02\x0fo\xae\xf4\x19|\xc4\xfcL\xdb\x00\xedrK\x13\xb5J?s\x93\xe6\xda\xf0\xf3B\x8d\xb4\xd8>\x12\xb0\x8e\x8d\xdaQ\xa2\xd0\xbc\x92d\x9e^\xbc\xd5\x8aNf\xefa\v*\xb08\xfc\xd2\xa4\x11`\xae\x98\xcc\xe1\xea\xc2\x1dKR\x0e\x1cK\x86\v\xba\xdfz\xa8\xdf\xb6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xe9\xb3@\xe8\a0\x1e\xb8L\x83\xc4\xa8\xb2\xc1\xf8\xae\x1d\x198\x0f\xfa\t\x88+\xdc\xe1\x01@\xbd\x8ba\"|\x14\x1bF\x9b\xd3\xff7\a\x1c:U\xba\xf4\t\xdc\xef\xe3\x11\xdb^\xee\x8c0\xee\xde6:\x80t\xfb\xbc^K\xb4\x8c9\xb0\xec\x82\x127!\x0e\xa3\xc9\xe0\xea\xfa\x0f\xbb\x0e \xc3\xef\xb20xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) socket$inet6(0xa, 0x800000000000002, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x20201) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) write$snddsp(0xffffffffffffffff, 0x0, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'dummy0\x00', &(0x7f0000000480)=@ethtool_drvinfo={0x3, "5c109d8b0100a25496a524ae48dc760000f2d400", "f01e4c000000000000100000000800", "9efda9bcd4844f5e4f481f08c871f2405b665dd2b7f886f4ee7030f4769b3d54", "af9311feb3924a3cbe8b636036bdc67100", "7ab0668eb3d4c2e7f66fb34c9c656368eecca5bcc523c8b443aa3cfe6231d0fb", "9696dbab05f78605d8cd231f", 0x67, 0x3, 0xc80, 0x5, 0x2}}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448c9, 0x0) bind$bt_hci(r5, &(0x7f00000002c0)={0x1f, 0x0, 0x2}, 0x3) r6 = socket$netlink(0x10, 0x3, 0x10) request_key(&(0x7f0000000100)='.request_key_auth\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000180)='lff\x02r\x1b\x1b\x85\x1a\xe1\xb2\xd3\xd39(\f\xa2e\xb0\xf3\xf2-\x16\x01$7\'\x1d\x95\v\xca\xcd1\xd2\xcd\t\nc\x94k\xb2Q\xb0\xb4\xbcy\x1f3\x8ek\xc5\xc5!4v\f=U\x93KP\xe4\x7f\xd7\xcfZ)\xf7\xe4]jj\x12\x04_fWnGq\xa6\x19\x9f\xd4h\xd5\xdc\xf0\xfd\xfb\xd6\xb4E', 0xfffffffffffffffd) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="15060000000000000000010000003000018014000400ff020000000000000000000000000001060005004e220000060001000a0000000800060001000000"], 0x44}, 0x5}, 0x0) 6.760255867s ago: executing program 7 (id=1086): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$inet6_sctp(0xa, 0x1, 0x84) io_submit(0x0, 0x0, &(0x7f0000000800)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@newtaction={0x4ad0, 0x30, 0x1, 0x0, 0x0, {}, [{0x4abc, 0x1, [@m_pedit={0x4ab8, 0xe, 0x0, 0x0, {{0xa}, {0x49f0, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x800, 0x1, 0x20000000, 0x10001, 0x1}, 0xd, 0x8, [{0x27, 0x0, 0xfffffffd, 0x6, 0xaf, 0x40}]}, [{0x2, 0x5, 0xffff, 0x9, 0xffffffff, 0x7}, {0xfffffffe, 0x5, 0xc8, 0x0, 0x10001, 0xc7fa}, {0x49cb, 0x7, 0x1, 0x7fffffff, 0x6cc, 0x6}, {0xffffffff, 0x5, 0xfffffff7, 0x1, 0x6, 0x8}, {0x4, 0x3ac, 0xc4, 0x8, 0x4d13}, {0x5, 0x10001, 0x7fff, 0x7fff, 0xffff, 0x69aee585}, {0xffffffff, 0x8, 0x5, 0x400, 0x1, 0x1}, {0x782e, 0x9, 0xffffff2a, 0x1ff, 0xdf72, 0x200}, {0x5, 0xe2, 0x8, 0xc9c, 0xffff, 0x5}, {0x7, 0xe3af, 0x5e5, 0x2, 0x94, 0x401}, {0x5, 0x100, 0x0, 0x1, 0x0, 0x3}, {0x4, 0x3, 0x5, 0xff, 0x36, 0x1}, {0x101, 0x4, 0x3, 0x9, 0x4, 0x6}, {0x4, 0x3f9e, 0x9, 0x2, 0x3ff, 0x7}, {0x178, 0x6, 0x0, 0x8, 0x1, 0x7f}, {0xfffffffa, 0xfffffffe, 0x9, 0xc, 0x4, 0x802}, {0xd, 0x5, 0x8, 0xda5, 0x13, 0x81}, {0x6, 0x400, 0xffff, 0x3, 0x4, 0x7}, {0x5, 0x700000, 0x3c1, 0x0, 0x18b7, 0x2}, {0x8, 0x2, 0xf, 0x2, 0x7, 0x5}, {0x1ff, 0x4, 0x9, 0x2, 0x200, 0x9}, {0x6, 0x1, 0x0, 0x7, 0x2fd, 0x5}, {0xfffffffb, 0x4, 0x2, 0x80000001, 0x5, 0xed2}, {0x2, 0xffff8001, 0x80000001, 0x8, 0x4, 0x59}, {0x7, 0x10, 0x468dbe3c, 0x800, 0xa63, 0x5}, {0x6, 0xffffffff, 0x3, 0x1ff, 0x5, 0x4}, {0x8c, 0x72, 0xffffffff, 0x100, 0x1, 0x7f}, {0x12000000, 0xd308, 0x5, 0x0, 0x6, 0xfffff1ff}, {0x447, 0x60, 0x2f9cb457, 0xffff, 0x0, 0xae24}, {0x2, 0x400, 0xc47a, 0x5, 0x2, 0x3740}, {0x7ff, 0x2, 0xa2c, 0xffff8000, 0x5, 0x1000}, {0x5, 0x8001, 0xc000000, 0x6, 0x8, 0x4}, {0x7fffffff, 0xff, 0x8, 0x9, 0x800000, 0x4}, {0x6050, 0x9, 0x4, 0x8001, 0x6, 0xff}, {0x3, 0x3, 0x7, 0x2, 0x9, 0x4}, {0x3, 0xf608, 0x3ff, 0xe53, 0x3, 0x401}, {0x1, 0x0, 0x97, 0x7f, 0x4cc}, {0x2, 0x10, 0xd, 0x1dc, 0x6, 0x9d}, {0x8000, 0x1, 0x7, 0x1, 0x9, 0x7}, {0xfffffffe, 0x40, 0x577, 0x5, 0xc9f, 0x3}, {0x1, 0xfffffffd, 0x1, 0x118957a6, 0x7, 0x8}, {0x2, 0x7400000, 0xbe, 0x400, 0x9, 0x6}, {0x2bd5, 0x2, 0x2, 0x6, 0x0, 0x4}, {0x1, 0x80000001, 0x0, 0x9f, 0x0, 0x851a}, {0x8423, 0xffffffff, 0x6, 0x81, 0x3}, {0x36c0, 0x7, 0x4, 0x3, 0x5}, {0x0, 0x9, 0x7, 0x10001, 0x8, 0x6}, {0x800, 0x0, 0x7fffffff, 0x8, 0x8, 0x8}, {0x6, 0x5, 0x10000, 0x1, 0x7, 0x3}, {0x80000001, 0xfff, 0xfffffffd, 0x0, 0x4, 0x8}, {0xe, 0x7, 0x6, 0x2, 0xe, 0x2}, {0x40, 0xffffff80, 0xfffffe00, 0x4, 0x9, 0x9}, {0x3a9c, 0x7, 0x200, 0xf3, 0x4, 0x4}, {0x8001, 0xd5, 0xfff, 0x2, 0x6, 0x81}, {0x8, 0x0, 0x4, 0x81, 0x7}, {0x65, 0x80000000, 0x0, 0x40, 0x1ff}, {0x8001, 0xa7f7, 0x5, 0x7c, 0x9}, {0x9, 0x1, 0x7, 0x7, 0x2}, {0x1ff, 0x52, 0xfffffffe, 0x3, 0x4b}, {0x1, 0x4, 0x1, 0xfffffffd, 0x200}, {0xe96f, 0x6, 0x9c, 0xf, 0x5, 0x6ecad768}, {0x8, 0x7a0c, 0xffffffff, 0x2, 0x8001, 0x3}, {0x101, 0x4, 0x7, 0xffff, 0x3, 0x8}, {0x8, 0xf, 0x80000000, 0x4, 0x1}, {0x7ff, 0x0, 0x4, 0x2, 0x7, 0x6}, {0xfffffffa, 0x49e2, 0x4, 0x80000000, 0x6, 0x3}, {0x8, 0x7, 0x8, 0x2f, 0x6, 0x6}, {0x8e9, 0x9, 0x6f6, 0x8, 0x3fc00000, 0x8}, {0x9, 0xfffffffd, 0x1, 0x8001, 0x5, 0x2}, {0x7f, 0x5, 0x6, 0x0, 0xa, 0x9}, {0x1, 0xfffff000, 0x7, 0x0, 0x3ff, 0xa}, {0xa000000, 0x1ff, 0x8, 0xb316, 0x1c000, 0x401}, {0x3, 0x9, 0x7fffffff, 0xbd, 0x5, 0x4}, {0xe2147e, 0x4, 0xfffff04b, 0x6, 0xf7bc}, {0x7f, 0xfff, 0x7, 0x7, 0x6d3a, 0x7}, {0xa, 0x7fffffff, 0x1, 0xff, 0xfc16, 0x6}, {0x0, 0x3ff, 0x3, 0x1, 0xde, 0x27}, {0x6, 0x4, 0xe1, 0x31a0, 0xffff4435, 0x8}, {0x1, 0x81, 0x3e1b, 0x5, 0x5, 0x7}, {0x9, 0x40, 0x3, 0x5, 0x2, 0x80}, {0x8, 0x6, 0x2, 0x6}, {0x6, 0x0, 0x101, 0xffffee0d, 0x1ff, 0xce70}, {0x8a6, 0x100, 0x9, 0x3, 0x2, 0x1ff}, {0x8, 0x1, 0x9, 0x7fff, 0x8ebe, 0x80000000}, {0x0, 0x57, 0x5, 0x80000000, 0xfff, 0x2}, {0x7, 0xf9c, 0x3, 0x5, 0x5, 0x6}, {0x5, 0x7fffffff, 0x7, 0x0, 0x867, 0xee0}, {0xc, 0x7, 0x401, 0x68b, 0x0, 0x3}, {0x1, 0x7ff, 0x7f, 0x800, 0x9, 0xffffffc0}, {0xba, 0xffff, 0x8, 0x3, 0x6d7e, 0x6c}, {0x4, 0xfffff9fa, 0x6, 0x80000000, 0xffffffff, 0x3}, {0x4, 0x6, 0x1, 0x0, 0x6, 0x9}, {0x80000000, 0x40000, 0x200, 0x5, 0x3, 0x1294}, {0x6, 0x325d864d, 0x7, 0x6, 0xffffffb5, 0x8}, {0x6, 0x401, 0xc2, 0x1, 0x63, 0x80}, {0x1, 0x0, 0x8, 0x8, 0x4, 0x9}, {0x1, 0x59b, 0x6, 0x0, 0x3, 0x4}, {0x40, 0x0, 0x68, 0x4, 0x400, 0xd}, {0xb2ea, 0x9, 0x7, 0xfffffff7, 0x2, 0xff}, {0x272b, 0x1ff, 0x2, 0x1, 0x5f8, 0x5}, {0xc7, 0x3, 0x2, 0x4, 0xc228, 0x81}, {0x52, 0x0, 0x4, 0x10, 0x4, 0x9}, {0x0, 0x8, 0x1d64, 0x3, 0x7, 0x1}, {0x2, 0xa, 0x1cc, 0x5, 0x3, 0x5}, {0x756, 0x4, 0x2, 0x3d, 0x2dca, 0x8}, {0x4, 0x7ff, 0x6, 0x0, 0x2fbf00, 0x6804b1e5}, {0xfff, 0xfaca, 0x8, 0x40, 0xc, 0x91e}, {0xb74, 0x7, 0xfffffff9, 0x10001, 0xfff, 0xffff3e6c}, {0x1, 0xfffffff8, 0x2, 0xff, 0x8a, 0xe}, {0x4, 0x6, 0xc3, 0x3, 0xda, 0x6}, {0x6, 0x2, 0x1, 0x5, 0x7, 0x80}, {0x2, 0x2, 0x9, 0x1, 0x69, 0x6}, {0x800, 0x7, 0x7f, 0x7, 0xa335, 0x5}, {0xffffffff, 0x7f, 0x7, 0x401, 0x9, 0x6}, {0x6, 0x8, 0x6, 0xff, 0xfffffff4, 0x1}, {0x440, 0xcf, 0x9, 0x79a3, 0x3, 0x2}, {0x101, 0x3, 0x4, 0x2, 0x88, 0x3}, {0x7, 0x2, 0x2, 0xfffffff9, 0x2}, {0x3, 0x4, 0xfffffffc, 0x9, 0xc7f, 0xa}, {0x1ff, 0x9, 0x2, 0x8000, 0x1, 0x3}, {0xb48, 0x8, 0x7, 0x1, 0xfffffff9}, {0x5, 0x3, 0x7, 0x6, 0x8, 0xf}, {0xeb, 0x1ff, 0x614, 0x3, 0x9, 0xa}, {0x3, 0x3, 0xfffffe00, 0x8, 0x80000001, 0x4}, {0x3, 0x1, 0x2, 0xf19, 0x5, 0xc2}, {0x2, 0x5, 0xb, 0x1, 0x7, 0x6}, {0x1, 0x0, 0x720e, 0xa96, 0x9}, {0x45, 0x7, 0x7c2, 0x0, 0x3ff, 0x10000}], [{0x5}, {0x1, 0x1}, {0x5}, {0x5, 0x1}, {0x4}, {}, {0x5}, {0x5}, {0x6}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x2}, {0x1}, {0x3}, {0x2, 0x1}, {0x3}, {0x2}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x1}, {0x1}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x1}, {}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x3}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x2, 0x319a50d70d1114ec}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2}, {0x2}, {0x4}, {0x2}, {0x5}, {0x1}, {0x3}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x5}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3}, {0x4}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xf10, 0x4, {{{0x4, 0x6, 0x10000000, 0x1ff, 0xee8}, 0x6, 0x2, [{0xfa, 0x5, 0xfffffffa, 0x0, 0x200, 0x2}, {0x41, 0xc, 0x1, 0xa, 0x10000, 0x7}, {0xfffffff8, 0x2400, 0xac, 0x180000, 0xfffffffc, 0x1}, {0x5, 0x3, 0x0, 0x2, 0x4433, 0xfff}, {0x5, 0x6, 0x47f9, 0x81, 0x5, 0x3}, {0x4, 0x0, 0x4, 0x9, 0xb, 0x200}, {0x5, 0x3, 0x1, 0x2, 0x6}, {0x4, 0xfffff000, 0x2, 0xcb8, 0x2, 0x1}, {0x7, 0x0, 0xae0, 0x3f, 0x2d, 0x5}, {0xffffffc0, 0x5, 0x2, 0x7, 0x80000001, 0x1}]}, [{0x3, 0x9, 0x8, 0x6, 0xffffffff, 0x5}, {0x12000000, 0x7, 0x12b, 0x80000000, 0xe, 0x3}, {0x9, 0x4, 0xfffffffb, 0x9, 0x2, 0x6}, {0x4, 0x2, 0x1, 0xbed, 0xc, 0x7}, {0xff, 0x0, 0x9, 0x2, 0x86c, 0x1}, {0x8, 0x1, 0x2, 0x2, 0x80000001, 0xd}, {0x5, 0xb, 0xff, 0x400, 0xbb1, 0x1f}, {0x826, 0xf6, 0x6, 0xfffffffe, 0x8, 0x18}, {0x641, 0x5, 0xb, 0x7f, 0x1, 0x200}, {0xec1, 0x4, 0x1, 0x1b, 0x5, 0x200}, {0xf, 0xaed, 0x8, 0x5, 0xffff, 0x8001}, {0x0, 0x3, 0x1, 0x0, 0x4, 0x1}, {0x10, 0xfa4b, 0x7, 0xc, 0xe54a, 0x9}, {0xb, 0x6, 0x4, 0xf, 0xf, 0x8001}, {0x6, 0x3, 0x2, 0x1000, 0xffff7fff, 0x3}, {0xe8, 0x8, 0x3, 0xd13, 0x2, 0xfffffff9}, {0x0, 0xfff, 0x3ff, 0x35, 0x800, 0x80000000}, {0xea0, 0x10, 0x3, 0x7, 0x0, 0x7}, {0x3, 0x5, 0x4, 0x0, 0xd5, 0x7}, {0x400, 0x40, 0x68, 0x10001, 0x400000, 0x10001}, {0x8001, 0xff, 0x9, 0x6, 0x6b4, 0x44579263}, {0x8000, 0x7, 0x74f6, 0x5, 0x9, 0x5}, {0x8, 0x200, 0x400, 0x8, 0x3ff, 0x1}, {0x5fd6, 0x9, 0x7, 0x128f, 0xfffffffa, 0x8}, {0x3, 0x753b, 0x8001, 0x6, 0x7fffffff, 0x8}, {0x7, 0x8, 0xfff, 0x80000000, 0x3596, 0x7}, {0x7, 0x1, 0x2, 0x0, 0xffffff47, 0x7}, {0x6, 0x4, 0x3, 0x0, 0xfff, 0x7}, {0x101, 0x3, 0x8, 0x25ff, 0x6, 0xfeb2}, {0x6, 0x4, 0x8, 0x712, 0x80, 0x6}, {0x8000, 0x6, 0x7ff, 0x2, 0x6, 0x4}, {0x1, 0xa544, 0x7fffffff, 0xe, 0xfe4a, 0xe9f5}, {0xf29f, 0x2ba6, 0x8, 0x84b}, {0x4, 0x7, 0xdc, 0x7, 0x4}, {0xffffffc0, 0xb, 0xfffffc00, 0x0, 0x7, 0x9}, {0xa95, 0x6, 0xd, 0x80, 0x5, 0x6}, {0x3, 0x9f, 0xf, 0x3, 0xfffffffd, 0x7}, {0x0, 0xb7, 0x1a5, 0x4, 0x502e, 0x3d}, {0x4, 0x1, 0x2, 0x3, 0x2, 0x20}, {0x5, 0x9, 0x8, 0xb63, 0x8, 0x9}, {0xc6b2, 0x9f5, 0x6, 0x800, 0xfffffff9, 0x9}, {0x4, 0x7, 0x8, 0x9, 0x15, 0x5}, {0xffffff7f, 0xb, 0x8, 0x1, 0x5ac8, 0x2}, {0xf4, 0x2, 0xd, 0x7f, 0x4, 0x3}, {0x28, 0xff, 0x0, 0x80000000, 0x4248, 0xfffffffc}, {0x40, 0x2, 0x7fff, 0x9f0, 0x0, 0x42416a71}, {0x3ff, 0x1, 0x9, 0xe, 0x42bb, 0xffffff36}, {0xd, 0x9, 0x10e, 0x1, 0x80000001, 0x5}, {0xfffffff7, 0x7f, 0x9793, 0x0, 0x5, 0x6}, {0xeef5, 0xab, 0x6, 0x0, 0x9, 0x5}, {0x4, 0x4, 0x2, 0x81e, 0x5, 0x1}, {0xffffffff, 0x3ff, 0x40, 0x3, 0x8001, 0x7ab5}, {0x6, 0x1, 0x4e8d4f72, 0xee8c, 0xdeb8, 0x9}, {0xfce, 0x9, 0xa3, 0xa2a, 0x6, 0x9}, {0x6, 0x6, 0x1, 0x9, 0x9, 0xb882}, {0x3, 0x7f8, 0x2, 0x1ff, 0xb, 0x401}, {0x1a, 0x8, 0x5, 0xffff, 0x200, 0xfffff000}, {0x4, 0x3, 0x9, 0x80000001, 0x87, 0x2}, {0xb, 0x9, 0x7, 0x3, 0x0, 0x5}, {0x4, 0x8, 0x3, 0x7, 0x9, 0x7f}, {0x3, 0x7, 0xd86, 0x7f, 0xfffffffc, 0x7}, {0x7f, 0x6, 0x1, 0x4, 0x8, 0x8}, {0x6, 0x80000001, 0x7, 0x1f, 0x200, 0xffffffff}, {0x80000001, 0x80, 0x100, 0x4, 0x3, 0x101}, {0x8, 0x8, 0x0, 0x0, 0x0, 0xffffffff}, {0x1, 0x3, 0x4, 0x96b4, 0xa61, 0x6}, {0x6, 0x2, 0xf, 0x4, 0x9, 0x10001}, {0x8195, 0x1, 0x10001, 0xb, 0x2, 0x200}, {0x2, 0x0, 0xe, 0x100000, 0x6675, 0x3ff}, {0xf9, 0x30, 0x10, 0xa0, 0x1b, 0xfff}, {0x7cab3220, 0x3, 0x1, 0xdf, 0x3, 0x400}, {0x6, 0x5, 0xffff0001, 0x1, 0x60e67c56, 0x55}, {0x101, 0xd, 0x0, 0x1, 0xe1a9, 0x2}, {0x1, 0x800, 0x5, 0x80000000, 0x4, 0x401}, {0xa, 0x3, 0x2f, 0xfffffffb, 0x4, 0x371}, {0x9, 0x2, 0x1, 0x900000, 0x5}, {0x1, 0x9, 0xffffffff, 0x5, 0xe42, 0x1}, {0x7, 0xd3a1, 0xa1, 0xdd8c, 0x2, 0x2}, {0x1, 0x40, 0x8, 0x7, 0x226, 0x2}, {0x0, 0x508e4907, 0x2, 0x40, 0x66, 0x2}, {0x5, 0xfffffffd, 0x5, 0x1ff, 0x80000001, 0x4}, {0x1, 0x200, 0x0, 0x7, 0x10, 0xffffffff}, {0x5, 0x3667, 0x6, 0xe, 0x6, 0x5}, {0xffffffff, 0x4, 0x8, 0x3, 0xfffff000, 0x1ff}, {0x2000000, 0x4, 0x5, 0x5, 0xfffffff8, 0x9}, {0x0, 0x2, 0x0, 0x0, 0x3bb4d17, 0x371}, {0x400, 0x6, 0x4, 0xeb34, 0x7b7, 0x7fff}, {0xa59, 0x4, 0x100, 0x0, 0x9, 0x6}, {0x9, 0x2, 0x1, 0x200, 0x46, 0x1}, {0x5, 0x7da, 0x7, 0x1000, 0x84, 0xac36}, {0x75, 0x4, 0x826, 0x9094, 0x6, 0x7}, {0x1000, 0x7f, 0xa6c1, 0x7, 0x9, 0xfff}, {0x4c2, 0x5, 0x6, 0x7fffffff, 0xb, 0x1}, {0xdf0, 0xffff, 0x1, 0x9, 0x2, 0x8}, {0xbd, 0x0, 0x2, 0x3, 0x1000, 0x736}, {0x100, 0x81, 0x5, 0xe, 0x5d7, 0x9}, {0x8, 0xa696, 0x92a, 0xffffffff, 0xba, 0xd}, {0xfffffff9, 0x0, 0x5f, 0x5, 0x1, 0x3}, {0x40, 0xe7ee, 0x7d25, 0x8, 0x5, 0x40e6}, {0xce8, 0xd, 0x2, 0xa34f, 0x5, 0x2}, {0x8, 0x4435, 0x0, 0x1, 0x10, 0xff}, {0x0, 0x8, 0x886, 0x10, 0x200, 0x2}, {0x1, 0x3ff, 0x101, 0x77d, 0x81, 0x6}, {0xff, 0x1, 0x3, 0x800, 0x2, 0x1}, {0x1000, 0xfdb, 0x94c, 0x4, 0x4, 0x3}, {0x3, 0x2, 0x9, 0x933, 0x1000, 0x7}, {0x5, 0x3, 0x5, 0x9, 0xc, 0x78}, {0x0, 0x0, 0x0, 0x4, 0x6, 0xffff}, {0x1ff, 0x401, 0x0, 0x3, 0x6, 0x2e}, {0x1, 0xfff, 0xfffffddf, 0xb8b, 0x8, 0xfffffffb}, {0x200, 0x81, 0x80000000, 0x4, 0x7, 0x7fff}, {0xf26, 0x9, 0x1ff, 0x8, 0x4, 0x5}, {0x2, 0x1, 0x9, 0x6, 0x0, 0x7}, {0x5, 0xdc57, 0x200, 0x6, 0xc29, 0x2}, {0xe, 0x8, 0x2, 0x3, 0xf71, 0x4}, {0x3, 0x4, 0x6, 0x1, 0xf}, {0x6, 0x100, 0x0, 0xff, 0xde7, 0x4}, {0x0, 0x62164a3b, 0x5, 0x5, 0x81, 0xfffffff8}, {0x1, 0x2, 0x9, 0x9, 0x3, 0x5}, {0x9, 0x632, 0x8, 0x2, 0x5, 0x3}, {0x6, 0x3, 0x9, 0x4, 0xd7, 0x80000000}, {0x1000, 0x380, 0x5, 0x2, 0x13553f99, 0x9}, {0x9, 0x6, 0x5, 0xf7, 0x800, 0x7}, {0x4, 0x6, 0xf, 0x46c, 0x0, 0x5ab5a8d7}, {0x8, 0x3, 0x80, 0x82, 0x5, 0x3}, {0x2, 0x5, 0x10001, 0x6, 0x400, 0x9}, {0x10, 0x6, 0x6, 0x7, 0x8, 0x2}, {0x9, 0xfffff57d, 0x3, 0x7, 0x42e2, 0x3}], [{0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0xb6305676ffaad10c, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0xfd170e19c62b7380}, {0x5}, {0x4}, {0x3}, {0x4}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x2}, {0x2}, {}, {0x4}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x2}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x4}, {0x2, 0x1}, {0x3}, {0x2}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {0x29c894e2c53c7751}, {0x241a9156aa1de080, 0x1}, {0x4, 0x1}, {0x5}, {0x5}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x7, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x5}, {}, {0x3}, {0x2}, {0x0, 0x1}, {0x4, 0x1177ce3a37ba9ae}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x3}, {0x5}, {}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0xf0, 0x5, 0x0, 0x1, [{0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x75c43cd10b3e3b4f}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x6, 0x4, 0xffffffffffffffff, 0x7ff, 0x20e}, 0x3, 0x8, [{0x2, 0x5, 0x5, 0x2, 0x6, 0xe}]}, [{0x10, 0x7, 0x458, 0x3, 0x10, 0x1}, {0xffff, 0xbd, 0x0, 0x0, 0x1, 0x5}, {0x48, 0x849, 0x2, 0xd0, 0x2, 0x10}, {0x1, 0x4, 0x6, 0xd388a9f, 0x8, 0xfff}, {0x3, 0x10000, 0x7, 0x8, 0xe, 0x11c2}, {0x7, 0x9, 0x80000000, 0x3, 0x9c5, 0x4}, {0x4000, 0xd, 0xb0a8, 0xb, 0xfffffff8, 0xffff}, {0x5, 0xa8c0, 0x3, 0x4, 0xf75b, 0x1}, {0x5, 0x8, 0x7, 0x2, 0x588, 0xffffffff}, {0x0, 0x1, 0x7, 0x5, 0x7f, 0xb}, {0x6, 0x0, 0x7, 0x7, 0xfffffffa, 0xd}, {0x6, 0x3ff, 0x1, 0x10001, 0x7, 0x3dc}, {0x4, 0xa956, 0x6, 0x4bb19046, 0xc, 0x6}, {0x79e8, 0x1, 0x6, 0x1, 0x3, 0x2}, {0x8, 0x0, 0x1, 0x7, 0x80, 0xfffffff9}, {0x4361, 0x1, 0x9, 0x7efa, 0x10001, 0x10}, {0x5, 0x0, 0x8, 0x2, 0x3, 0x2}, {0x6, 0x10000, 0x7, 0x0, 0x3, 0x9}, {0x3183, 0x401, 0x80000000, 0x4, 0x3, 0x9}, {0x7c59, 0x3, 0x9, 0x90, 0x0, 0xd}, {0x1509, 0x0, 0x3c0, 0x9, 0x5, 0x81}, {0x3, 0x763f, 0xffff7fff, 0x7fff, 0x61, 0x5}, {0xdb, 0x5, 0x400, 0x4, 0xff, 0xfffffffa}, {0x2, 0x4, 0x40a, 0x45, 0xffffffff, 0x7}, {0x81, 0x5, 0x4, 0x9000000, 0x9b}, {0x59, 0x6, 0x8, 0x5, 0xfff, 0x9}, {0x7fffffff, 0xd778, 0xaa2, 0x3, 0x0, 0x4}, {0x3, 0x4, 0x0, 0x3, 0x6, 0x7fffffff}, {0x2, 0x30, 0xbe4a, 0x0, 0x8, 0xd}, {0x0, 0x93d2, 0x101, 0xd, 0x0, 0x3}, {0x5, 0x1, 0x8084, 0xfffffff9, 0x619, 0x9}, {0x0, 0x1, 0x6, 0x1, 0x8, 0x5}, {0x4, 0xc, 0x7, 0x5, 0x4, 0x8}, {0xfe, 0x0, 0xdef0, 0x8b02, 0x401, 0x7}, {0x800, 0xf51, 0x1, 0x7f, 0x1, 0xb0}, {0x6, 0x8, 0x4, 0x2, 0x6, 0x10001}, {0x8c1e, 0x0, 0x1, 0x6, 0xffffffff, 0xfffffff2}, {0x2, 0xe, 0x8, 0x0, 0xfffffffe, 0x7}, {0xff, 0x9eb, 0xf, 0x7fffffff, 0x9, 0x1}, {0x2, 0xf, 0x7, 0xd, 0x9, 0x1}, {0x9, 0x5, 0xffff, 0x401, 0x2, 0x81}, {0x6, 0x8, 0x6, 0x1, 0x3, 0x7}, {0x100, 0x8, 0x3, 0x4cdd, 0x5c6, 0x90e}, {0x9, 0x70c7, 0x1f, 0x401, 0x5, 0x130a}, {0x3, 0x0, 0xffe00000, 0x6, 0x7, 0x400}, {0x4, 0x9, 0x9, 0x7ff, 0x81, 0x3}, {0x3, 0xab1, 0x101, 0x8, 0xc3, 0x9}, {0x0, 0x6, 0x0, 0x89, 0x2491, 0x1}, {0x6, 0xffff, 0x7, 0xfffffffd, 0x5, 0x81}, {0x6, 0x2, 0xb8f4, 0x38e40000, 0x1000, 0x1000}, {0x2, 0x7, 0xffffff54, 0xfffffffb, 0xfa, 0xd}, {0x4, 0x9, 0x2, 0xff, 0x68, 0xfff}, {0x401, 0x24, 0x3, 0x1, 0x10001, 0x1ff}, {0xc25b, 0x10, 0x800, 0x86, 0x98a, 0x7fff}, {0x10, 0xd6a, 0x6, 0x7, 0x0, 0x5}, {0x800, 0x2, 0x61, 0x3, 0x2, 0x6}, {0x0, 0x9, 0x8, 0x10001, 0xa, 0x81}, {0x1, 0x2, 0x0, 0x7f, 0x6, 0x9}, {0x10001, 0x4be0, 0x4, 0x7, 0x40, 0xc}, {0x0, 0x7fff, 0xd9, 0x0, 0x1, 0x7}, {0x7, 0x1, 0x3, 0x4138ca11, 0x6, 0x101}, {0x7, 0x1ff, 0x1, 0x9, 0x863, 0x6}, {0x7, 0x3, 0x5, 0x0, 0xffffffff, 0x3}, {0x2, 0xff, 0xd, 0x9f, 0x7, 0x3}, {0x4, 0x2, 0x6, 0x3, 0x6, 0x2}, {0xb, 0x52ff, 0x6, 0x0, 0xfffffff9, 0x9}, {0x3ff, 0x7, 0x7, 0x0, 0xe0, 0x80000001}, {0xae, 0x1, 0x9, 0x884, 0x8, 0x7}, {0xf, 0x0, 0xffffffff, 0xe, 0x21e, 0xcf18}, {0x5, 0x6, 0x9, 0x7, 0x21, 0xfffffeff}, {0x1787, 0x2, 0x0, 0x7e40, 0xfffffffc, 0x66}, {0x0, 0x9, 0xfffffffa, 0x7, 0x8, 0x5}, {0x8000, 0x6, 0xb, 0x80000000, 0x4823, 0x4}, {0x3, 0x2, 0x0, 0xfffffff8, 0x1, 0x200}, {0x0, 0x3, 0x1, 0x3, 0x8000, 0x3}, {0x1, 0x0, 0x1, 0xffffff3f, 0x5, 0x5}, {0xb81e, 0x2, 0x9, 0x1, 0x1, 0xfffffffe}, {0x5334, 0xccd7, 0x5, 0x4, 0x10, 0x7fffffff}, {0x69, 0xe59, 0x4e0, 0x0, 0x63, 0x7}, {0x7, 0x10000, 0x2, 0x2, 0x6, 0x7}, {0x8, 0x304, 0x1, 0x3, 0x6, 0xfffffff8}, {0x3928, 0x1, 0x6, 0x8, 0x4}, {0x5, 0x1, 0x6, 0x5, 0x1, 0xbc0}, {0x5, 0xd1a, 0x6, 0x8, 0x3ff, 0x1f00000}, {0x8000, 0xd, 0x6, 0x7fffffff, 0x3, 0x7f}, {0x0, 0x6, 0xf02, 0xd, 0x5, 0xfffffc01}, {0x4, 0x6, 0x3, 0x9, 0x80000001, 0x2}, {0x9, 0x2, 0x10, 0x10, 0x0, 0x9}, {0x2, 0x9, 0x7, 0xf9, 0x35, 0xa}, {0x1, 0x4, 0x7f, 0x6ec, 0xec3, 0x2}, {0xfffffffd, 0x401, 0xd, 0x8311, 0xd, 0xfffffff7}, {0x8, 0x9, 0xe, 0x6, 0x2, 0x8}, {0x6, 0x2, 0x2, 0x7f, 0x7fffffff, 0x6}, {0xec, 0xfffffffd, 0x8, 0x3, 0x10000}, {0x9aae, 0x100, 0x7, 0x6, 0x3, 0x7fffffff}, {0x10, 0x4, 0x3, 0x8, 0x8, 0x2}, {0x4, 0x80000000, 0x3, 0x81, 0x778, 0x2008000}, {0xfffffffc, 0xfffffff6, 0x9, 0x3, 0x2, 0x6}, {0x7fff, 0x7, 0x7, 0x27, 0x6de5, 0x6}, {0x6, 0xf, 0xfffffffb, 0x10, 0x80000001, 0x6}, {0x81, 0x0, 0x1ff, 0x0, 0x7, 0x9}, {0x1, 0x4, 0x10, 0x2, 0x9, 0x9}, {0xf8, 0x734b, 0x4, 0xb1b2, 0x0, 0x8001}, {0xfff, 0x7, 0xc1, 0x8, 0x7fffffff, 0x9}, {0x0, 0xc, 0x7ff, 0x9, 0x8, 0x3}, {0x9db, 0xf, 0x1ff, 0x37, 0x6, 0x7fff}, {0x2, 0x6, 0x4, 0x0, 0x40, 0x8001}, {0xea, 0x1, 0x0, 0x2, 0xbfb5, 0x5}, {0x800, 0x1, 0x8001, 0x5, 0x7, 0xfffffff7}, {0xc, 0xfffffffd, 0x9, 0x1, 0x2, 0x8000}, {0x6, 0x9, 0x92b3, 0x4, 0x1, 0xb3}, {0x3ff, 0xffff, 0x6, 0x9, 0x100, 0x6}, {0x4, 0x4, 0x4, 0x3, 0x4, 0x5}, {0x6, 0x62, 0x7, 0x0, 0x5, 0x7fff}, {0x5, 0x6, 0x9, 0x8, 0x6, 0x5c0}, {0x4, 0x5, 0x92d2, 0xfffff17f, 0x8001, 0xb}, {0x480, 0x0, 0xffff68d5, 0x4, 0x6, 0x7f}, {0x6, 0x100, 0x7, 0x9, 0x9, 0x9}, {0x7, 0xd, 0x1, 0x6, 0x6, 0x9}, {0x2, 0x1, 0x58e, 0x5, 0x400}, {0x7, 0x2, 0x5, 0x66b, 0x8000, 0x100000}, {0x3, 0x9, 0x3, 0x200, 0x8, 0xffffffc8}, {0x0, 0x4, 0x9, 0xfffffff3, 0x17, 0x7}, {0x7f, 0x10000, 0x8743, 0x6, 0x7}, {0xf, 0x2, 0x1, 0x7f, 0x81, 0x3}, {0x3, 0x76, 0x51b7, 0x80000001, 0x7, 0x4}, {0x4c3, 0x1, 0x1, 0x101, 0x9, 0x9}, {0x6, 0x1, 0x7, 0x475, 0x8, 0x5}], [{0x4, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0xa7020ff0d8d3a5e6, 0x1}, {0x5}, {0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x2}, {0x2, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x4, 0x4139e38164d7e83d}, {0x3}, {0x4}, {0x4}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x1}, {0x1}, {0x2, 0x1}, {0xfa2e7e35f3494272}, {0x5}, {0x5}, {0x4, 0x1}, {0x6, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x2}, {0x3}, {0x3, 0x1}, {0x3}, {0x4}, {0x3}, {0x2}, {0x7, 0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x3}, {0x3}, {0x3}, {}, {0x0, 0x1}, {0x5}, {0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x6698cc06753f0f62}, {0x5}, {0x2}, {}, {0x4}, {0x3, 0x5ce85c18918c8fab}, {0x4}, {0x2}, {0x5}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x4}, {0x3}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}]}, @TCA_PEDIT_PARMS={0xef8, 0x2, {{{0x4961d9d4, 0x101, 0x7, 0x8000, 0x8}, 0x2, 0x7, [{0x5, 0x10001, 0xff, 0x4, 0x5, 0xbe5}, {0x4, 0x4, 0x5, 0x8, 0x401, 0x428}, {0x9, 0xe6, 0xfffffffd, 0x200, 0x9d, 0x6a5}, {0xfffffffd, 0x4, 0x7, 0x3, 0x2, 0x9}, {0xfffffffb, 0x8000, 0x32, 0x2248195d, 0x1ff, 0x80000001}, {0x3, 0x0, 0x2, 0xfffffff9, 0x6, 0x2}, {0x2a, 0x0, 0x6, 0x0, 0x1000, 0x1}, {0x8, 0x4, 0x6, 0x1ac, 0x9d, 0x9a}, {0x9, 0x401, 0x5, 0x1ff, 0x2, 0xe}]}, [{0xb00, 0x5, 0x5, 0x819, 0x8, 0xffffffff}, {0x315, 0x7fff, 0x0, 0x71d, 0x400, 0x7b}, {0x8, 0x81fe, 0x4, 0x100, 0x8, 0x3c4}, {0x6, 0x81, 0x4, 0x92, 0x80000000, 0xe0}, {0x10, 0x293, 0x9, 0x3, 0x8, 0x1}, {0x7, 0x7, 0x5, 0x2, 0x81, 0x8ac6}, {0xe, 0x1000, 0x1, 0xb, 0xffff978b, 0x5}, {0x8, 0x8, 0x8001, 0x9, 0x6dedb326, 0xf}, {0x8001, 0x1000, 0x9, 0x0, 0x8001, 0x8}, {0xffffffff, 0x7, 0xa2, 0x6, 0x9, 0x8001}, {0x8, 0x6, 0x10001, 0x4e8f, 0x7, 0x6}, {0x5, 0x800, 0x1, 0x5, 0x1, 0x81}, {0xecf, 0x7, 0xfffffffc, 0x8001, 0x5, 0x5}, {0x6, 0x1, 0x7, 0x18, 0x6, 0x5}, {0xffff, 0x292c2b09, 0x7ff, 0x7, 0x5, 0x2}, {0x7, 0x1ff, 0x7f, 0x2, 0xddb, 0x3}, {0x9, 0x100, 0x80000000, 0x5, 0x1}, {0x7ff, 0x40, 0x7ea3, 0x319f, 0x80000000, 0x10001}, {0x3, 0x4, 0x0, 0x278, 0x9}, {0x0, 0x800, 0x5, 0x7fe00, 0x100, 0x6}, {0x5, 0x6, 0xff, 0x4, 0x25, 0x6e}, {0xffffffff, 0x3, 0x1c, 0x5, 0x2, 0x10000}, {0x3, 0x0, 0x3, 0x40, 0x7f7e, 0x101}, {0x8, 0x100, 0x7f, 0x0, 0xfa36, 0x7}, {0x10001, 0x0, 0x6, 0x400, 0x4, 0xba5}, {0x3, 0x1, 0xb1b, 0x711c8e98, 0x9, 0x6}, {0x5, 0x5, 0xc, 0x6, 0x8001, 0x2}, {0x3, 0x4, 0xffff, 0x5, 0x3, 0x7}, {0x3, 0x81, 0x9, 0x1, 0xd131, 0x7}, {0xf46a, 0x70, 0x4, 0x6, 0xd, 0x3}, {0x5, 0x9, 0x5, 0x3, 0x17e, 0x1}, {0x4, 0x5, 0x9, 0x9, 0x1000, 0x3}, {0x9, 0x3, 0x10001, 0x32a, 0x4, 0xc}, {0x6, 0x1, 0xfffffff9, 0x3, 0x401, 0xa55}, {0xc607, 0x3, 0x6, 0xb39, 0x4d, 0x40}, {0x3, 0x5, 0x4, 0x3, 0xd882, 0x1}, {0x4, 0x0, 0x1, 0x4, 0x5947, 0x8}, {0x5, 0x0, 0x2194a6f0, 0x22522dc2, 0x0, 0x28df96b0}, {0x7, 0x7, 0x5, 0x9, 0x800, 0x6}, {0x2, 0x1ff, 0xa3, 0x2, 0xa2, 0x8000}, {0xc, 0x7, 0x8, 0x80, 0xb2, 0x3}, {0x7, 0x6, 0x5, 0x7, 0x0, 0xd19}, {0xae2, 0x0, 0x2c1c, 0x6, 0xff, 0x3}, {0x5, 0x8, 0x32, 0x4, 0xb4f, 0x101}, {0xffffffff, 0x1, 0x9, 0x0, 0x1000, 0x9}, {0x7, 0x7fff, 0x1, 0x4, 0x2, 0x9}, {0x7, 0xbb4e, 0x0, 0x4, 0xffffffff, 0x7bfd37e7}, {0x5, 0x6, 0x10000, 0x7, 0x4, 0x7}, {0x6, 0xc, 0x3, 0x7fffffff, 0x9, 0x8}, {0xfffffffb, 0x401, 0x4, 0x7ff, 0x8, 0xf3}, {0x17b, 0x1000, 0x9, 0x400, 0x9e3d, 0x5}, {0x1, 0x81, 0x8, 0x3, 0xfffffff8, 0x4}, {0x4, 0x7fffffff, 0x8, 0x2, 0xf, 0x940a}, {0x0, 0x7, 0x69e, 0x83, 0x2, 0x1}, {0x1, 0x4, 0x0, 0x8, 0x1, 0x5}, {0x0, 0x81, 0x0, 0xfffffffb, 0x5, 0x3}, {0x4, 0x6, 0x6, 0x7fffffff, 0xee08, 0xfa6}, {0x0, 0x4476076, 0x3fc, 0x1ff, 0x96, 0x58f7}, {0x1, 0x3, 0xfb, 0x295f, 0x9, 0x7}, {0x1, 0x2, 0x0, 0x9, 0x3, 0x4}, {0x7fffffff, 0x1c0000, 0x51f, 0x400, 0x2, 0x5}, {0xfffffffe, 0x6, 0xe, 0x3, 0xd, 0x31d}, {0x800, 0x36, 0x8, 0x6, 0x8, 0x5}, {0x1ea, 0x8000, 0x5, 0xfffffffc, 0xb25, 0x3cd3}, {0x14000, 0x4, 0x7, 0x8, 0x9, 0xfffffe00}, {0x4, 0x2, 0x6, 0x1, 0x0, 0x8}, {0x2, 0x4, 0x5, 0x0, 0x7, 0xfffeffff}, {0x2, 0xa, 0x5, 0xfffffffc, 0x2, 0xd5c6}, {0x0, 0x4, 0x7, 0x3ff, 0x9, 0x3}, {0xffffff23, 0x6, 0x0, 0x8, 0x3, 0x3}, {0x6, 0x4, 0x40004000, 0x8, 0x1, 0x7f}, {0x9, 0xf, 0x4, 0x9, 0x8, 0x5}, {0x7fffffff, 0x9, 0x1ff, 0x0, 0x55e, 0xffff}, {0x6, 0x6, 0xffff, 0x3, 0x0, 0x5}, {0x1, 0x3517, 0xc4, 0x3, 0x17, 0x2}, {0x1, 0x9, 0x8, 0x0, 0xfffffff8, 0x10001}, {0x8, 0x2, 0xef, 0xc, 0x1ff, 0x10000000}, {0x676, 0xfffffffe, 0xffff, 0x4, 0xffff, 0xe1be}, {0x5, 0x7, 0x400, 0x896, 0x7, 0xff}, {0x2, 0x7, 0x6c, 0x100, 0x0, 0x40}, {0xc, 0x0, 0x1, 0xee0, 0x1, 0x3ca}, {0x3ff, 0x4, 0x7, 0x3c4, 0xe, 0x6}, {0x7ff, 0x5, 0x1000, 0x940, 0x0, 0x3e}, {0x800, 0x7, 0xe, 0xc, 0x8, 0x200}, {0x4, 0x0, 0xc, 0x3, 0xfff, 0xc}, {0x6, 0x5, 0x4, 0x0, 0x0, 0x7}, {0x400, 0x0, 0x2, 0x4, 0xd, 0x5}, {0x80000000, 0x3, 0xfc08, 0xc4c, 0x3ff, 0x6}, {0x4, 0x0, 0x400, 0xf92, 0x5, 0xc1}, {0x1, 0x2, 0x1ba, 0xfffffff9, 0x8, 0x3}, {0x8, 0x2, 0xfffffff7, 0x3, 0x80000001, 0x81}, {0x1, 0x7fffffff, 0x3, 0x6, 0x7, 0x6}, {0x5, 0xffffdb22, 0x7fffffff, 0x3, 0x1ff, 0x200}, {0x6, 0x3, 0x1, 0x10001, 0xffffffff, 0x40}, {0x3, 0x9, 0x10001, 0x101, 0x833, 0xfffff801}, {0x6, 0x7, 0x1000, 0xe, 0x8, 0x7}, {0xe, 0x7fff, 0x7, 0x10000, 0x2, 0x4}, {0x7, 0x9, 0x4, 0x0, 0xe, 0x3}, {0x7761, 0x7, 0x6, 0xfffff984, 0x9, 0x8}, {0x5, 0x4, 0x200, 0x5d, 0x9, 0x4}, {0x72, 0xa, 0x8, 0x3, 0x5, 0x3}, {0x9, 0xea, 0x8001, 0x0, 0x3, 0x1}, {0x4, 0x3, 0x4, 0x604940c1, 0x5, 0xffffffc4}, {0xfff, 0x6, 0x0, 0xfffffff8, 0x5, 0x8000}, {0x3, 0x0, 0x4, 0x6, 0x6, 0x3ff}, {0xc, 0x3, 0x8, 0x0, 0x1000, 0x5}, {0x2a, 0x4, 0x7f, 0x7fffffff, 0x8, 0x495}, {0x401, 0x8, 0x8, 0xfad, 0x4, 0x2fb}, {0x0, 0x8, 0x81, 0x4, 0x0, 0xffff}, {0x9, 0x62, 0x2, 0x4, 0x1}, {0x4, 0x3, 0xffff, 0x1, 0x7fff, 0x6}, {0x21, 0x8, 0x40, 0x3, 0x3, 0xffffffc0}, {0x40, 0x7ff, 0xfffffffd, 0x1, 0x80000001, 0xb}, {0x10001, 0x5, 0x7, 0x10, 0x401, 0x8}, {0x0, 0x0, 0x9, 0x8, 0x3, 0x6}, {0x1, 0x81, 0x8, 0x0, 0xffff, 0x6}, {0xe, 0x1, 0x8, 0x3, 0x1e56, 0x96f}, {0x7, 0x6, 0x100, 0x6a, 0x6, 0x27fc}, {0x5, 0x1, 0xe16, 0xb, 0x1, 0x6}, {0x9, 0xfffffff7, 0x1, 0x5, 0x9, 0x40}, {0x7, 0x8, 0x400, 0x5, 0x96, 0x2}, {0x7, 0x5, 0x891b, 0x8, 0x4, 0x5}, {0xfffffff7, 0x1000, 0x7, 0x9, 0x101, 0x368}, {0x7, 0x9, 0x4, 0xff, 0x100}, {0x0, 0x5, 0x7, 0x5, 0x4, 0x80}, {0x9, 0x7, 0x7, 0x0, 0x7}, {0x100, 0x1, 0x9, 0xa, 0x40, 0x4}, {0x7, 0x9, 0xb, 0x3, 0xfffffc01, 0x4}], [{0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {}, {0x2, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {}, {0x7b97a4eb8b0a203, 0x1}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x7}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x4}, {0x2}, {0x3}, {0x5}, {0x2, 0x1}, {}, {0x5}, {0x1, 0x1}, {0x1, 0x2}, {0x3}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0xd7a3270ee944500}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0x4}, {0x1}, {0x2}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x4}, {0x4}, {0x2}, {0x5}, {}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x3, 0x2}, {0x3}, {0x4}, {0x2}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x6}, {0x5, 0x1}, {}, {0x1}]}}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x7, 0x95a2, 0x10000000, 0x1, 0x1}, 0x7, 0xf4, [{0xc, 0xfffffffc, 0x9, 0x31, 0x1, 0x5}, {0x9, 0x0, 0x8001, 0xff, 0xc2b, 0xfffffff8}]}, [{0x8, 0xc7fe, 0x0, 0x1, 0x2, 0x11}, {0x7, 0xfffeffff, 0x8, 0xe, 0x2400, 0xb}, {0x3, 0x4, 0xa5be, 0x0, 0x1}, {0x3, 0x1, 0xfffffe7c, 0xffff0001, 0x225, 0x9}, {0x3, 0x3, 0x2, 0x7, 0x7, 0x21}, {0xfd, 0x6ff, 0xd5, 0x1, 0x7, 0x9}, {0x6, 0x0, 0x82460000, 0x3, 0xff00000, 0xfffffff8}, {0x8, 0x6, 0x1, 0x3, 0x2, 0x82}, {0x6, 0x9, 0x8, 0x0, 0x2, 0x7}, {0x8, 0xc, 0x9, 0x4, 0x5, 0x4}, {0x8a, 0x7, 0x6, 0x4, 0x9fd, 0xa}, {0x1, 0xecee, 0xfffffff8, 0x6, 0x2, 0x5}, {0x4, 0x10000, 0x6e0, 0x4d60688b, 0x200, 0x1800000}, {0x3, 0x9, 0x8000, 0x1, 0x9, 0x8000}, {0x4, 0x2, 0x6, 0x8, 0x4, 0x5}, {0x6, 0x9, 0x0, 0x7ff, 0x4, 0xd}, {0x7f, 0x2, 0xfff, 0x8, 0x2, 0x4}, {0x81, 0x4, 0x5, 0x478c43b6, 0x1, 0xc67}, {0x8, 0x1, 0xae11, 0xfffffffe, 0x1ff, 0x9}, {0x2, 0x800, 0x1ff, 0x6, 0xe628, 0x9}, {0x3, 0x9, 0x3, 0x10001, 0x7, 0x903fa90}, {0x2, 0x5, 0x40, 0x53a, 0x0, 0x8}, {0xff, 0x7fffffff, 0x4, 0xc, 0x3, 0x2}, {0x0, 0x5, 0x7, 0x4, 0x57a440a0, 0xffff}, {0x8, 0x9, 0x5, 0xa, 0x4, 0x5}, {0x4, 0xe, 0x1000, 0xedc, 0x7fff, 0x27}, {0x7fffffff, 0x7ff, 0x0, 0xca34, 0x0, 0x30}, {0x6, 0x80, 0x7, 0x4, 0x5, 0xa6b}, {0x2, 0x9, 0x4, 0xc1, 0x7fffffff, 0x1}, {0x1, 0x7, 0x10, 0x1, 0x4, 0xfffffff9}, {0x1, 0x4, 0x8000, 0xa5, 0x0, 0xc}, {0x2, 0xfffffffb, 0x200, 0x2, 0x2, 0x8000}, {0x7, 0x3, 0x2, 0xac1, 0x9, 0xc4}, {0x1, 0x7, 0x5, 0x0, 0x9, 0xffff5b00}, {0x3, 0xd1, 0xfffffffc, 0x5, 0x6, 0xa}, {0x5, 0x2, 0x2, 0x8, 0x6, 0x9}, {0x1, 0x8, 0x4, 0x476, 0x6, 0xd}, {0x1, 0xffffff81, 0x1, 0x10001, 0x80000000, 0x6}, {0x60, 0x0, 0x5fb, 0x949, 0x2, 0xe924}, {0x0, 0x8, 0xf, 0x2, 0x7, 0x8000}, {0x40800, 0x80, 0x7ff, 0x30, 0x0, 0x3}, {0x3, 0x152, 0x5, 0xfffffff7, 0x7}, {0x3e7, 0xffff, 0x2, 0x9af8, 0x7, 0xd874}, {0x2, 0xe0fc, 0x3, 0x8, 0x9, 0x10}, {0x8001, 0x7, 0x6, 0x2, 0x31a, 0x3}, {0x7, 0x0, 0xe, 0x1, 0x6, 0x1}, {0x4, 0x6, 0x6, 0x9, 0x8, 0x3}, {0x9, 0x101, 0x2, 0x3, 0x8ca, 0x5}, {0x0, 0x5, 0x7, 0x6, 0x2, 0x7fff}, {0x3, 0x3ff, 0x83300000, 0x9, 0x0, 0x7}, {0x8000, 0x3, 0x9, 0x6, 0xb, 0x2}, {0xb9, 0x81, 0x2, 0x9, 0x2, 0x496}, {0x0, 0x7, 0x5, 0x9, 0x3ff, 0x5}, {0xc603, 0x0, 0x904, 0xa4ff, 0x4, 0x42f0fca0}, {0x3, 0x2, 0x3ff, 0x40, 0x9, 0x1004}, {0x455, 0xb, 0x5, 0x7, 0xe3bc, 0x10000}, {0x6, 0x4, 0x1, 0x4, 0x8, 0x7}, {0xfff, 0x85, 0x7674, 0x9, 0x51c, 0x100}, {0x5, 0x80, 0x7, 0x23, 0x100, 0x6d9}, {0x9, 0x3c90ab82, 0xb, 0x3, 0xc24, 0x1f}, {0x6, 0x980, 0x1, 0x6b54, 0x3ff, 0x5}, {0x9, 0x808e, 0x9, 0xa, 0xe1cc, 0x8}, {0x8, 0x8, 0x7fa, 0x1, 0x2, 0x9}, {0x5, 0xc640000, 0xccf7, 0x6, 0x6, 0x2}, {0x2, 0x7fffffff, 0x2, 0x2, 0xeb08, 0x1}, {0x3, 0x6, 0x0, 0x0, 0x400, 0x6}, {0x10001, 0x1, 0x1, 0x9, 0x2, 0x193}, {0x8, 0x6, 0x8, 0x3, 0xe, 0x5}, {0x9, 0x8, 0x6, 0xe18, 0xfffffffb, 0x8}, {0xe, 0x1, 0x1, 0xa, 0x64, 0x46d5}, {0x3, 0x8ca, 0x4, 0xb826, 0x6, 0x5}, {0x0, 0x101, 0x0, 0x6, 0x6, 0x6}, {0x4, 0xb7, 0x3, 0x800, 0x122}, {0x3, 0x2, 0x1, 0x0, 0x5, 0x8}, {0x1, 0x5, 0x5, 0x2, 0x4, 0xd}, {0x3ffc0, 0x7fffffff, 0x0, 0x0, 0x400, 0x1}, {0x2, 0xffffffff, 0x3, 0x2, 0x1}, {0xfff, 0x4, 0x8, 0x8, 0x7}, {0x9, 0x0, 0x7, 0x0, 0xf8, 0x80000001}, {0x2, 0x8, 0x0, 0x288a, 0x6c7, 0x1}, {0x8, 0x9, 0x6ca4, 0x6, 0x9, 0x78002851}, {0x2, 0x1, 0x3, 0xffe00000, 0x1, 0x4}, {0xbc, 0x10001, 0x2, 0x1, 0x2, 0x4}, {0xa, 0x7f, 0xb34, 0xef, 0x9fc00000, 0xff57}, {0x2, 0x3, 0x6, 0x2, 0xf993}, {0x29, 0x8, 0x2, 0x37001fe8, 0x1fe, 0x3}, {0xb, 0x4, 0x0, 0x2, 0xf85, 0x101}, {0x4, 0xa, 0x0, 0xe, 0x3, 0x101}, {0x6ddd, 0x2c5, 0xfffffff8, 0x7, 0x20, 0xb}, {0x4, 0x1, 0xfffffffa, 0x6, 0x8, 0x3}, {0x200, 0x9, 0x7, 0x6d53, 0x552, 0x400}, {0x0, 0x36af, 0x6, 0x4, 0x3, 0x4}, {0xeb, 0x2a2, 0x1ff, 0x2, 0x8, 0x4}, {0x2, 0x0, 0x9, 0x75e, 0x4, 0x8b13}, {0x9, 0x2, 0x2, 0x8, 0x8000, 0x6}, {0xe25, 0x3, 0x8, 0x37bf, 0xb, 0x9}, {0x9, 0x7, 0x3, 0x2, 0x2, 0x6}, {0x2, 0xfffffffa, 0x10, 0x2, 0x4, 0x101}, {0x1, 0x9, 0x8001, 0xfff, 0x6a, 0x7ff}, {0x9, 0xfffffffb, 0xdec, 0xff, 0xe, 0x8}, {0x4, 0x7, 0xfffffff7, 0xffffffff, 0xd7c0000, 0x9}, {0x7, 0x2, 0x1, 0x0, 0x7, 0x2}, {0x10, 0x7, 0x7277, 0x3ff, 0x7, 0x5}, {0x2, 0xdb9c, 0x4ed3, 0x1, 0x7, 0xffffffff}, {0x0, 0x6, 0x43, 0x3, 0xffff, 0x5d}, {0x0, 0xd2, 0xb, 0x9a5d, 0x7297, 0x7}, {0x6, 0x5, 0x1, 0x1, 0x4, 0x100}, {0xd7, 0x6, 0x9e, 0x4, 0xb5}, {0x3, 0x7, 0x8, 0x8, 0x3, 0x3}, {0x40, 0x78e, 0xc, 0x9, 0x4, 0x8}, {0x837d8339, 0x0, 0x9, 0x5, 0x1, 0x101}, {0xfff, 0xf9, 0x400, 0x9, 0x8, 0x6}, {0x2, 0x3, 0x7, 0x6, 0x5, 0xfff}, {0xf3c, 0xe4ba, 0x3, 0x5, 0x2, 0xfffffffa}, {0x1, 0x8, 0x9, 0x7, 0x8, 0x10000}, {0x6, 0xd73f, 0x7, 0x8001, 0x10000, 0x7}, {0x3, 0x3, 0x1b0, 0xbe8278f, 0x8, 0xfe000}, {0x0, 0x400, 0x8, 0x2b4, 0x9}, {0x0, 0x4, 0xbcf4, 0xffffffff, 0x0, 0x9d0}, {0x7, 0x103, 0x10001, 0x9, 0x2, 0x4}, {0xb, 0x2, 0xffff0000, 0x1000, 0x8, 0x9}, {0x4, 0x0, 0x2, 0x0, 0x9, 0x71375731}, {0x4, 0x80, 0xf3c, 0x8, 0xab17, 0x101}, {0xd, 0x0, 0xe, 0x3, 0x6, 0x4}, {0x3, 0x6, 0x6, 0x2, 0x8, 0x1}, {0xfff, 0x6, 0x1c, 0x527c, 0x7, 0x1}, {0xff, 0xfffffff4, 0xd9, 0x1000, 0x80000000, 0x7ff}, {0x7ff, 0x5, 0x5, 0x1, 0x7, 0x2000}], [{0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x6, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x4}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x3}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x2}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x3}, {0x4}, {0x4, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x4}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {0x2}, {0x2}, {0x4}, {0x3}, {0x1}, {0xf9ae49c3a115490d, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x6}, {0x2}, {0x2, 0x1}, {0x4}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x2}, {0x0, 0x2}, {0x3}, {0x0, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}], 0x1}}]}, {0x9f, 0x6, "874b4eef72f1f13397f4810ec889beaed899fee8b18b570faa78aae2c926fa45b0bece165bed31f1bee1e5b04106f3d1700ed580ecc7bac650f5f89c756c4d3c8fadfcbb295ab190128a8af6fb7bc828eca62d69e1621a23d199e011d95358de95bc7cecb64ddbb034d8b76047942fc658d302b5d5e021d540663440cdc8ee425f921dd2a5a0cb1590182611550b603430cc51e1e579d4fa9cca4f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x4ad0}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r2 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003ac9bcc20d118af1ebb5a0102030109022400010700800b0904"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000300)={0x0, 0xd, 0x2, "aa25"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000600)={"f34eea1395bcec63f0b182bccec9a0fd", 0x0, 0x0, {0x6, 0x3}, {0x6, 0x8}, 0x400000080000020, [0x0, 0x10000, 0x9, 0x6, 0x7, 0x3, 0x5, 0xffffffffffffffff, 0xa02e, 0x2fb, 0x829b, 0x8, 0x2, 0xffbfffffffffffff, 0x6635, 0x9]}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) r6 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%\xde({F\xfaA:', 0x0) fsopen(&(0x7f0000000040)='afs\x00', 0x0) 6.670326606s ago: executing program 0 (id=1087): r0 = socket$vsock_stream(0x28, 0x1, 0x0) fsopen(&(0x7f0000000280)='hfsplus\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x20000000000000) 6.525971366s ago: executing program 0 (id=1089): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000d40)="b1f56e", 0x3}], 0x1}}], 0x1, 0xc0) sendto$inet(r0, &(0x7f0000000300)="09268a9234f8b358387f1f6588b94b481241ded8974895abfab7511e6e953212020000006e000086b7c4fff5575470f7385a78182eeaea563a905780232726ffbcb5e8d06ec5161ab4b4317995652dc20915e12a020fe3e2bf05b39e5c14312c2f7efc25b5575a7697a9240b578ac6971c54aec0b1ee3d84056a80e7878b37568b295a57f59a9f599bd5ccf5a12920e47c2d37f9140a41ed0ec9392f997cf6", 0xffffffffffffff7f, 0x4000080, 0x0, 0xfffffffffffffff7) 6.10968368s ago: executing program 1 (id=1091): syz_open_dev$dri(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000003200)=[{{&(0x7f0000000340)=@x25={0x9, @remote}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000b00)=""/4096, 0x1000}], 0x1, &(0x7f00000006c0)=""/165, 0xa5}, 0x5}, {{&(0x7f00000004c0)=@alg, 0x80, &(0x7f0000000400)=[{&(0x7f0000000780)=""/176, 0xb0}, {&(0x7f0000000940)=""/242, 0xf2}], 0x2}, 0x8}, {{&(0x7f00000005c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000840)=""/6, 0x6}, {&(0x7f0000001b00)=""/178, 0xb2}], 0x2}, 0x25af8a54}, {{&(0x7f0000001c00)=@alg, 0x80, &(0x7f00000030c0)=[{&(0x7f0000001c80)=""/2, 0x2}, {&(0x7f0000001cc0)=""/252, 0xfc}, {&(0x7f0000001dc0)=""/133, 0x85}, {&(0x7f0000001e80)=""/37, 0x25}, {&(0x7f0000001ec0)=""/4096, 0x1000}, {&(0x7f0000002ec0)=""/199, 0xc7}, {&(0x7f0000002fc0)=""/235, 0xeb}], 0x7, &(0x7f0000003140)=""/150, 0x96}, 0x2}], 0x4, 0x2000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRESHEX=0x0, @ANYRES8=r1], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r6 = timerfd_create(0x8, 0x80000) fcntl$setlease(r6, 0x400, 0x1) sched_setattr(0x0, 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r9 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f00000001c0)={r11, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0xf], [0x1003], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_MODE_GETFB(r8, 0xc01c64ad, &(0x7f0000000040)={r11}) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r12}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r13 = getpid() sched_setscheduler(r13, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) 5.319547006s ago: executing program 0 (id=1093): socket(0x10, 0x3, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) socket$can_raw(0x1d, 0x3, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/63, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) 5.318990532s ago: executing program 6 (id=1094): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newtaction={0x88, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{0x74, 0x1, [@m_bpf={0x70, 0x1, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0x24, 0x4, [{0x1, 0x7, 0x4, 0x6}, {0x30, 0x98, 0x81, 0xfffffff9}, {0xc, 0x90, 0xa, 0x5}, {0xe54, 0x6a, 0x1, 0xfffffff6}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) 4.777655614s ago: executing program 6 (id=1095): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = gettid() r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r2, 0x6, 0x2, 0xfffffffffffffffd, &(0x7f0000000340)) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r5, 0x0, r4, 0x0, 0x6, 0xa) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x32124e8, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="5f8dce3f9fb34ec92a3a702b143bd52b59ee936903ebcdd193a9719a0d1a1478d8d9bdad808d09a08cccde6994bee6a66573643138ceb57a9e84e4c440a19d4a8a3d391c26543922d1e9378a1594047eed1f825e2c58ed6f6ed06c9ed37ccc4de481a0bcea5b5fa8dd326347778b38458cde14bab39e8fac395200d71f878a88f14ce5eda89469d7981da23f352c79e7db9ed3ef604603cfc9680d0dd220b5721b35b3aa4d727d7313c938cf86b5de00ae0b1b"]) sendmsg$NFNL_MSG_CTHELPER_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2500000001090101000000ee8dde2f29e97c7500"], 0x14}}, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xcb) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x10, 0x1, 0x40000333}, &(0x7f0000000480)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) rt_sigqueueinfo(r1, 0x2e, &(0x7f00000002c0)={0x27, 0x7, 0x4}) io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = dup(r10) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r10, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) 4.603896557s ago: executing program 1 (id=1096): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r2, 0x0, 0x4004) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000180)=ANY=[@ANYBLOB="1800003c454aea6a00601cfe28d4913cb271313200ef022b51431da4782a5b2df9b11d6e976c5bd23236c3aaa7c9ff487a43dbbc2b279b95cb8f8ca0fae3cd7a5d088d434c9cd986b50dd33aada16de28498d077213b962f61", @ANYRES16=r5, @ANYBLOB="010000000000000000000100000004000180"], 0x18}}, 0x0) r6 = syz_open_dev$audion(&(0x7f0000000040), 0x6, 0x8200) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r7, 0x3ba0, &(0x7f0000000340)={0x48, 0x2, r8, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000500)={0x28, 0x6, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x80000001}) ioctl$IOMMU_DESTROY$ioas(r6, 0x3b80, &(0x7f00000000c0)={0x8, r8}) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000000)=0x1000) renameat2(r6, &(0x7f0000000100)='./file0\x00', r6, &(0x7f0000000140)='./file0\x00', 0x1) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r3, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000000)=0x4000) 3.432758031s ago: executing program 4 (id=1097): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000140)=0xa, 0x4) bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r0, 0x118, 0x0, 0x0, &(0x7f00000003c0)=0x14) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80a02, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe(&(0x7f0000000500)={0xffffffffffffffff}) io_setup(0x2, &(0x7f0000002400)) fcntl$setpipe(r2, 0x407, 0x401) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xe) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) mount$9p_rdma(&(0x7f0000000080), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000040)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@common=@privport}]}}) lchown(&(0x7f0000000140)='./file0\x00', r4, 0xee00) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c034001000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x12}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r7, 0x1, 0x19, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') 3.084399423s ago: executing program 7 (id=1098): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000e29000/0x1000)=nil, 0x1000) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0x12) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) mremap(&(0x7f0000807000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) mremap(&(0x7f0000b89000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00006e6000/0x3000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) 2.536849016s ago: executing program 1 (id=1099): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000080000085000000d0000000a50000009700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = dup2(r0, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) io_destroy(0x0) socket$inet6(0xa, 0x80002, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000380)={0x5, &(0x7f00000004c0)=[{}, {@none}, {}, {@fixed}, {@none}]}) syz_emit_ethernet(0x7c, &(0x7f0000000300)={@random="1f40483901c9", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}, @val={@void, {0x8100, 0x1, 0x0, 0x2}}, {@llc={0x4, {@snap={0xaa, 0x1, "9f", "340ed0", 0x884c, "9fc4bf9c839b917d774886a84952196eaf904284d66d53ed84e9e368431127400000000000000073946803bdc5dae1ca757c452378008e1737ca2255b57db26363aebe7c882efa836e95acb42bf9ad2adc7247aee34854118c968e8313b00ab02f7f"}}}}}, &(0x7f0000000000)={0x1, 0x4, [0x6fb, 0x32b, 0x443, 0xd23]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x0) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000180)={&(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0}, {0x0, 0xfff5, 0x0, 0x0}], 0x2}) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.485170037s ago: executing program 0 (id=1100): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vlan0\x00'}) sendto$packet(0xffffffffffffffff, &(0x7f00000003c0)="0203", 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x80, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa960bffffd, 0x13012, r1, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x14) getrlimit(0xf, &(0x7f0000000280)) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xe, 0xf}, {0xffe0, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x2, 0x4, 0x4, 0x100, 0x5, 0xb, 0xef, 0x1}}}}]}, 0x58}}, 0x4000) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x2) syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 2.464773192s ago: executing program 4 (id=1101): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x57) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0/file1\x00', 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2663}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) 2.371288062s ago: executing program 4 (id=1102): socket(0x10, 0x3, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) socket$can_raw(0x1d, 0x3, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x60140, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/63, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) 2.370626637s ago: executing program 7 (id=1103): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) recvmmsg(r1, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x2, 0x0) recvfrom(r1, &(0x7f0000000100)=""/123, 0x7b, 0x10100, &(0x7f00000001c0)=@qipcrtr={0x2a, 0x2, 0x7fff}, 0x80) shutdown(r1, 0x1) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='veno\x00', 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000800)="01", 0x1, 0x4004044, 0x0, 0x0) 1.917011662s ago: executing program 1 (id=1104): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer={0x40086310}], 0x0, 0x0, 0x0}) 1.89994868s ago: executing program 1 (id=1105): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file0\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x25) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000280)={0x9}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xffffffffc, 0x0, 0x40, 0x200002000001, 0x0, 0x2004c8, 0x0, 0x0, 0x68ff, 0x5, 0x7fff, 0x3, 0x400000000], 0x80ad003}) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r6 = dup(r1) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@ignoreqv}, {@aname={'aname', 0x3d, '%:'}}]}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x200, 0xfffffffe, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0xffe0}, {0x8, 0x7}, {0x14, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x40004) socket$nl_generic(0x10, 0x3, 0x10) 1.863646257s ago: executing program 0 (id=1106): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="020000f2030000000404000009000000000000000f9c0430e3d3c96914323043789449e693764f87dc38cb4b7c43ceb1647eb6985f8cf8661b4adec23e79320cd809dc154ac9b598ec2561de01696a0ce8393e7c6f64c3d528180a62bcfd673cbd9f791eda70d81cde667218dc4328074a5c7df896c38b77523b0300000000000000bd51a43b3f30a2d1adccc0925940e34d21273054908ddd17b27db5de1785ff2209169e9acf5ae5806dcc5dacad540f566476dc4c420ebe1edf7f6837efbf59db8907598c6b10e0b560e3a0aaa70b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x25) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000280)={0x9}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xffffffffc, 0x0, 0x40, 0x200002000001, 0x0, 0x2004c8, 0x0, 0x0, 0x68ff, 0x5, 0x7fff, 0x3, 0x400000000], 0x80ad003}) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r6 = dup(r1) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@ignoreqv}, {@aname={'aname', 0x3d, '%:'}}]}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x200, 0xfffffffe, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0xffe0}, {0x8, 0x7}, {0x14, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x40004) socket$nl_generic(0x10, 0x3, 0x10) 1.529009734s ago: executing program 6 (id=1107): sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[], 0x14}}, 0x80) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a", 0x2, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x6422c3, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.528480794s ago: executing program 6 (id=1108): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000f40)=[{{&(0x7f0000000440)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000000)="a2b40dcedbe1b2f56f698b01ce63114e4a2307b3f6cb4c521cf59864067fceae33384cafc4b75733cba610e55c98f9626da4ce2852d0e5d3e72a", 0x3a}], 0x1, &(0x7f00000007c0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [r1, r0, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88, 0x4010}}, {{&(0x7f0000000880)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000900)="575596cd3d493635700923a536ea98523d9b8f86ec0c94185db35d8af1c657bac1ab85626bf784a5e6911871d687bfcb00630e19f38ae19a79b3a646d2f7d098deff1bd17b77a937e34cced5e87c5cea4ae5c456ec199895c14f1509ad06b47e4593a7e9821d57705bbe9e64fe6305acbf9e3460d28fe4fb05f4b51bcbeac3610fac4e2f0f79ab73c21641636b9a1698ac591d2461ba009d26267290a3e5c0d9a0536f4204390cad071d41c0933c98f43ce2300ca6b9e64bbeff85879338b5798e5424", 0xc3}, {&(0x7f0000000a00)="35ae620844d4b76f44b4318c1395fde85d26b58fd819ed33802cf4fd740b1d265947d1f228208b1f1b4f1dd196864591c445420a8eeda52bde320705772fab7b6b55ddccff9f56da4067fe6841cf6ae4539f93597db21df63f1c7da273cb8e566c71479130db45fb393a88a0029256350050e664fe2477837dc2c46dbf75b73f81195e9fbc44d5c1bcbdbf1613087c58ca91d40a87ba068b71a545a261c514319f860912ad9ba8e94c26a303a6ec34b94e1b29b4c3db33b4158fd77a7b0489dcf50416142e243ac7", 0xc8}, {&(0x7f00000004c0)="b0ced51f292cb15e698a70d8ee31f28cb333cdee8a2b5f1713360c31ddfc3b0c2d46de3ea39f70cf39e4f0123fdb592e801d7c4d053c07defa3e99f376ea509cfffcc95c0fa7be", 0x47}, {&(0x7f0000000b40)="fd2b9160beb00195a9963dfe70dd6f9b318a2d31fc17a7510e2bad0e1736163e803a487a12c1f0c4eb39fcf3e61e7e3877f85d8137052dd9d3ed17a763b6281dd895cec5c4105ec7b3a4ed6527e69f1fa956", 0x52}, {&(0x7f0000000bc0)="703687d0704b63b03279e97c8161f58101ad4009ece0691dcfb187ce50af5ea87d471421d83228cf3178acb36dfd77f68107da14699229c7405d192b7c4da08ac884141356e35051b38e3a9af7b0bea49edeaf40d5294ed2a94afc3a669c9f61ffa40dd2286611e3b85e35ac42259a63f28016f2e5936f8f6a766eb7bd5b011c0a6007095081494dc86010fe2d3f72ed35d97cd8500920e7871fecaf2d1ce413e65c41cfb416c8fc96140c2e6d9de25417eb9af762e1ef0c32fd0d47", 0xbc}, {&(0x7f0000000c80)="4a82111042f7c54c771b5131b173ee98cc12b054ab2c500ec817d33d65f2caeb60d39a91185b7c012df3cc8655b9b9f1bed0fa69bc03fabd604a02e71d5e1c62fe7a8aed1cd8ec622e5d950227ee2a5f9000246813e305494b0d592e", 0x5c}], 0x6, &(0x7f0000000ec0)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x78, 0x20044095}}], 0x2, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000280), 0x0}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xec}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r3 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fsopen(&(0x7f00000001c0)='ocfs2_dlmfs\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8800) r4 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r6, &(0x7f00009c2000/0x400000)=nil) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000000000000000004000000000060000000000000001000040000000000700000000000000f6ed4e90a6d510f262a7ad569b4902f297aec1dbed7a"]) inotify_init1(0x800) ioctl$sock_qrtr_TIOCINQ(r4, 0x40044900, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) sched_getattr(r7, &(0x7f00000001c0)={0x38}, 0x38, 0x0) 663.806596ms ago: executing program 6 (id=1109): prlimit64(0xffffffffffffffff, 0x0, &(0x7f0000000280)={0xc, 0x6}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000002c0)={@remote}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd606410a60000000002000000000000000000ffff0a0101001bc6b7b4b5524acbfe800000000046826706cc5940163108"], 0x0) syz_open_dev$vim2m(0x0, 0xf, 0x2) close_range(r1, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0xee01, &(0x7f00000000c0)={0x0, 0x3, 0xa95c, 0x0, 0x1ff, 0x1, 0x0, 0xfffffffffffffffc, 0xdf}) openat$incfs(r5, &(0x7f0000000080)='.log\x00', 0xa6280, 0x120) 290.605234ms ago: executing program 7 (id=1110): socket$kcm(0x10, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0x40405515, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xb, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b1, 0xffffffffffffffff, 0xffffffffffffffbf, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x6, 0xfffffffffffffbff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x2000002, 0xfffffffffffffffc, 0x100000000, 0x40, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x7ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xf290, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0xff]}) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) pipe2(0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) r4 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r8, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0xfffffffffffffe08, 0xebec93e830f96115}) io_uring_enter(r4, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) shutdown(r7, 0x1) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, &(0x7f0000000480)) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x12020) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, r10) syz_emit_ethernet(0x3e, &(0x7f0000000280)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0x4, 0x4a}, @generic={0x7, 0x2}]}}, {{0x0, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0xfffe}}}}}}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x327cf3e4, 0x9, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x5, 0x7, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0xa, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x21, 0x0, 0x0, 0x8001]}) close(0xffffffffffffffff) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r11, &(0x7f00000001c0)=[{{&(0x7f0000000240)={0xa, 0x4e22, 0x1, @empty, 0xa}, 0x1c, 0x0}}], 0x1, 0x200880c0) shutdown(0xffffffffffffffff, 0x0) 218.18209ms ago: executing program 6 (id=1111): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r1}, 0x18) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a118000200ff02000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (fail_nth: 11) 184.487875ms ago: executing program 1 (id=1112): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x57) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0/file1\x00', 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2663}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e04f20b20"], 0x7) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) 92.903344ms ago: executing program 7 (id=1113): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7, @empty, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e4010223010902"], 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x500, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x40000}, 0x8011) 0s ago: executing program 4 (id=1114): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86"], 0x52) kernel console output (not intermixed with test programs): text=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 279.474069][ T43] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 279.699737][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 279.881648][ T43] usb 1-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 279.919379][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.953912][ T43] usb 1-1: config 0 descriptor?? [ 280.506302][ T43] elecom 0003:056E:00E6.0005: item fetching failed at offset 0/3 [ 281.222250][ T43] elecom 0003:056E:00E6.0005: probe with driver elecom failed with error -22 [ 281.319173][ T43] usb 1-1: USB disconnect, device number 15 [ 281.322474][ T5954] microtek usb (rev 0.4.3): expecting 3 got 0 endpoints! Bailing out. [ 281.426862][ T5954] usb 7-1: USB disconnect, device number 13 [ 281.917721][ T30] audit: type=1400 audit(1754243575.990:526): avc: denied { read } for pid=8415 comm="syz.7.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 281.950832][ T8420] netlink: 12 bytes leftover after parsing attributes in process `syz.7.556'. [ 281.959788][ T8420] net_ratelimit: 124 callbacks suppressed [ 281.959801][ T8420] openvswitch: netlink: Flow actions attr not present in new flow. [ 282.050146][ T43] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 282.280140][ T43] usb 7-1: device descriptor read/64, error -71 [ 282.402229][ T975] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 282.570178][ T43] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 282.630088][ T975] usb 1-1: Using ep0 maxpacket: 8 [ 282.661425][ T975] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 282.754508][ T43] usb 7-1: device descriptor read/64, error -71 [ 282.755920][ T975] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 282.869712][ T975] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 282.900464][ T43] usb usb7-port1: attempt power cycle [ 282.940470][ T975] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 283.054188][ T975] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 283.069741][ T975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.103270][ T8429] batadv1: entered promiscuous mode [ 283.280012][ T43] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 283.300595][ T975] usb 1-1: GET_CAPABILITIES returned 0 [ 283.306373][ T975] usbtmc 1-1:16.0: can't read capabilities [ 283.310396][ T43] usb 7-1: device descriptor read/8, error -71 [ 284.057402][ T43] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 284.122374][ T43] usb 7-1: device descriptor read/8, error -71 [ 284.232605][ T43] usb usb7-port1: unable to enumerate USB device [ 284.725961][ T975] usb 1-1: USB disconnect, device number 16 [ 284.827679][ T8445] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 284.853297][ T8445] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 284.864014][ T8445] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 284.874003][ T8445] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 284.884683][ T8445] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 284.892659][ T8445] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 284.933778][ T8445] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 284.946621][ T8445] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 287.216727][ T8470] befs: (nbd7): No write support. Marking filesystem read-only [ 287.250592][ T8470] syz.7.571: attempt to access beyond end of device [ 287.250592][ T8470] nbd7: rw=0, sector=0, nr_sectors = 2 limit=0 [ 287.984270][ T5906] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 288.401588][ T5906] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.465888][ T8489] F2FS-fs (loop15): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 288.478911][ T8489] F2FS-fs (loop15): Can't find valid F2FS filesystem in 1th superblock [ 288.480283][ T30] audit: type=1400 audit(1754243582.540:527): avc: denied { append } for pid=8483 comm="syz.4.575" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 288.488711][ T8489] F2FS-fs (loop15): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 288.522734][ T8489] F2FS-fs (loop15): Can't find valid F2FS filesystem in 2th superblock [ 288.543023][ T5906] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 288.544452][ T8491] F2FS-fs (loop15): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 288.582428][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.832291][ T8491] F2FS-fs (loop15): Can't find valid F2FS filesystem in 1th superblock [ 288.842959][ T5906] usb 2-1: config 0 descriptor?? [ 288.855948][ T8491] F2FS-fs (loop15): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 288.866937][ T5906] pwc: Askey VC010 type 2 USB webcam detected. [ 289.029347][ T8491] F2FS-fs (loop15): Can't find valid F2FS filesystem in 2th superblock [ 289.045744][ T8492] syzkaller0: entered promiscuous mode [ 289.210036][ T8492] syzkaller0: entered allmulticast mode [ 289.429111][ T5906] pwc: recv_control_msg error -32 req 02 val 2b00 [ 289.446975][ T5906] pwc: recv_control_msg error -32 req 02 val 2700 [ 289.463880][ T5906] pwc: recv_control_msg error -32 req 02 val 2c00 [ 289.472372][ T5906] pwc: recv_control_msg error -32 req 04 val 1000 [ 289.482544][ T5906] pwc: recv_control_msg error -32 req 04 val 1300 [ 289.491700][ T5906] pwc: recv_control_msg error -32 req 04 val 1400 [ 289.510701][ T5906] pwc: recv_control_msg error -32 req 02 val 2000 [ 290.281066][ T5906] pwc: recv_control_msg error -32 req 04 val 1500 [ 290.281138][ T30] audit: type=1400 audit(1754243584.240:528): avc: denied { ioctl } for pid=8505 comm="syz.7.582" path="socket:[25259]" dev="sockfs" ino=25259 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 290.402079][ T5906] pwc: recv_control_msg error -32 req 02 val 2500 [ 290.406392][ T30] audit: type=1400 audit(1754243584.260:529): avc: denied { open } for pid=8505 comm="syz.7.582" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=25258 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 290.434877][ T5906] pwc: recv_control_msg error -32 req 02 val 2400 [ 290.508423][ T30] audit: type=1400 audit(1754243584.260:530): avc: denied { write } for pid=8505 comm="syz.7.582" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 290.925415][ T8506] 9pnet: Could not find request transport: d [ 292.144023][ T5906] pwc: recv_control_msg error -71 req 02 val 2600 [ 292.223020][ T5906] pwc: recv_control_msg error -71 req 02 val 2900 [ 292.390959][ T5906] pwc: recv_control_msg error -71 req 02 val 2800 [ 292.424648][ T5906] pwc: recv_control_msg error -71 req 04 val 1100 [ 292.572349][ T5906] pwc: recv_control_msg error -71 req 04 val 1200 [ 292.649881][ T5906] pwc: Registered as video103. [ 293.080212][ T5906] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9 [ 293.109684][ T5906] usb 2-1: USB disconnect, device number 17 [ 294.105500][ T975] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 294.563015][ T975] usb 8-1: Using ep0 maxpacket: 8 [ 294.578357][ T975] usb 8-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 294.587568][ T975] usb 8-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 294.599014][ T975] usb 8-1: Product: syz [ 294.624593][ T975] usb 8-1: Manufacturer: syz [ 294.638113][ T975] usb 8-1: SerialNumber: syz [ 294.685635][ T975] usb 8-1: config 0 descriptor?? [ 294.777014][ T975] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 295.300461][ T975] gspca_zc3xx: reg_w_i err -110 [ 295.404813][ T975] gspca_zc3xx 8-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 296.839671][ T975] usb 8-1: USB disconnect, device number 9 [ 297.027100][ T8573] FAULT_INJECTION: forcing a failure. [ 297.027100][ T8573] name failslab, interval 1, probability 0, space 0, times 0 [ 297.044055][ T8573] CPU: 0 UID: 0 PID: 8573 Comm: syz.1.600 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 297.044081][ T8573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 297.044088][ T8573] Call Trace: [ 297.044092][ T8573] [ 297.044097][ T8573] dump_stack_lvl+0x16c/0x1f0 [ 297.044118][ T8573] should_fail_ex+0x512/0x640 [ 297.044136][ T8573] ? fs_reclaim_acquire+0xae/0x150 [ 297.044152][ T8573] ? tomoyo_encode2+0x100/0x3e0 [ 297.044166][ T8573] should_failslab+0xc2/0x120 [ 297.044179][ T8573] __kmalloc_noprof+0xd2/0x510 [ 297.044194][ T8573] tomoyo_encode2+0x100/0x3e0 [ 297.044215][ T8573] tomoyo_encode+0x29/0x50 [ 297.044228][ T8573] tomoyo_path_perm+0x3a5/0x460 [ 297.044241][ T8573] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 297.044261][ T8573] ? do_raw_spin_lock+0x12c/0x2b0 [ 297.044274][ T8573] ? find_held_lock+0x2b/0x80 [ 297.044294][ T8573] ? __pfx_current_check_access_path+0x10/0x10 [ 297.044314][ T8573] ? simple_lookup+0x105/0x1d0 [ 297.044327][ T8573] ? lookup_one_qstr_excl+0xb3/0x250 [ 297.044346][ T8573] tomoyo_path_symlink+0x97/0xe0 [ 297.044362][ T8573] ? __pfx_tomoyo_path_symlink+0x10/0x10 [ 297.044381][ T8573] security_path_symlink+0x152/0x2e0 [ 297.044395][ T8573] do_symlinkat+0x10d/0x310 [ 297.044409][ T8573] ? __pfx_do_symlinkat+0x10/0x10 [ 297.044422][ T8573] ? getname_flags.part.0+0x1c5/0x550 [ 297.044438][ T8573] ? getname_flags.part.0+0x2/0x550 [ 297.044456][ T8573] __x64_sys_symlink+0x75/0x90 [ 297.044469][ T8573] do_syscall_64+0xcd/0x4c0 [ 297.044487][ T8573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.044499][ T8573] RIP: 0033:0x7f6bcc38eb69 [ 297.044509][ T8573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.044519][ T8573] RSP: 002b:00007f6bcd17d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 297.044530][ T8573] RAX: ffffffffffffffda RBX: 00007f6bcc5b6080 RCX: 00007f6bcc38eb69 [ 297.044537][ T8573] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000200000000080 [ 297.044544][ T8573] RBP: 00007f6bcd17d090 R08: 0000000000000000 R09: 0000000000000000 [ 297.044550][ T8573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.044556][ T8573] R13: 0000000000000000 R14: 00007f6bcc5b6080 R15: 00007ffc16011e28 [ 297.044570][ T8573] [ 298.829280][ T8586] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 299.123587][ T975] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 299.372113][ T975] usb 2-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 299.439260][ T975] usb 2-1: config 1 interface 0 has no altsetting 0 [ 299.463762][ T975] usb 2-1: string descriptor 0 read error: -22 [ 299.470224][ T975] usb 2-1: New USB device found, idVendor=046d, idProduct=c53f, bcdDevice= 0.40 [ 299.492692][ T975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.616996][ T8604] syzkaller1: entered promiscuous mode [ 299.622578][ T8604] syzkaller1: entered allmulticast mode [ 299.720226][ T8607] netlink: 'syz.0.609': attribute type 12 has an invalid length. [ 300.400091][ T24] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 300.590083][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 300.611383][ T24] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 300.620843][ T24] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 300.631313][ T24] usb 8-1: Product: syz [ 300.638701][ T24] usb 8-1: Manufacturer: syz [ 300.648524][ T24] usb 8-1: SerialNumber: syz [ 300.681233][ T24] usb 8-1: config 0 descriptor?? [ 300.935797][ T8613] netlink: 16 bytes leftover after parsing attributes in process `syz.7.610'. [ 300.969288][ T30] audit: type=1400 audit(1754243595.040:531): avc: denied { connect } for pid=8609 comm="syz.7.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 301.050122][ T5954] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 301.129469][ T975] usbhid 2-1:1.0: can't add hid device: -71 [ 301.135823][ T975] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 301.156744][ T975] usb 2-1: USB disconnect, device number 18 [ 301.204172][ T5954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.269046][ T5954] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 301.562228][ T5954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.576574][ T5954] usb 1-1: config 0 descriptor?? [ 301.803883][ T30] audit: type=1400 audit(1754243595.880:532): avc: denied { write } for pid=8626 comm="syz.1.616" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 302.146788][ T5954] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 302.167156][ T5954] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0006/input/input10 [ 302.305787][ T5954] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 302.414290][ T8638] netlink: 36 bytes leftover after parsing attributes in process `syz.1.619'. [ 302.427912][ T8638] vivid-002: ================= START STATUS ================= [ 302.436368][ T8638] vivid-002: Interlaced VBI Format: false [ 302.445258][ T8638] vivid-002: ================== END STATUS ================== [ 302.584937][ T10] usb 1-1: USB disconnect, device number 17 [ 302.724957][ T8647] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 302.731515][ T8647] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 302.755268][ T8647] vhci_hcd vhci_hcd.0: Device attached [ 303.108866][ T975] usb 8-1: USB disconnect, device number 10 [ 303.130066][ T5954] usb 36-1: SetAddress Request (2) to port 0 [ 303.136345][ T5954] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd [ 303.597324][ T8648] vhci_hcd: connection reset by peer [ 303.599709][ T8661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.617685][ T7431] vhci_hcd: stop threads [ 303.622149][ T7431] vhci_hcd: release socket [ 303.637731][ T7431] vhci_hcd: disconnect device [ 303.767775][ T30] audit: type=1400 audit(1754243597.840:533): avc: denied { setopt } for pid=8666 comm="syz.4.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 303.834717][ T30] audit: type=1400 audit(1754243597.910:534): avc: denied { mount } for pid=8666 comm="syz.4.627" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 303.915061][ T8668] /dev/nullb0: Can't open blockdev [ 303.937688][ T8668] binder: BINDER_SET_CONTEXT_MGR already set [ 303.952233][ T8668] binder: 8655:8668 ioctl 4018620d 2000000002c0 returned -16 [ 305.139060][ T30] audit: type=1400 audit(1754243599.210:535): avc: denied { remount } for pid=8685 comm="syz.4.635" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 305.158642][ C0] vkms_vblank_simulate: vblank timer overrun [ 305.178374][ T8686] serio: Serial port pts0 [ 305.290169][ T43] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 305.340138][ T10] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 305.360294][ T8696] netlink: 'syz.7.637': attribute type 3 has an invalid length. [ 305.367982][ T8696] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.637'. [ 305.440084][ T24] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 305.465423][ T43] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 305.473817][ T43] usb 2-1: config 0 has no interface number 0 [ 305.483044][ T43] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 305.492405][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.500504][ T43] usb 2-1: Product: syz [ 305.504888][ T43] usb 2-1: Manufacturer: syz [ 305.512390][ T43] usb 2-1: SerialNumber: syz [ 305.520636][ T43] usb 2-1: config 0 descriptor?? [ 305.532471][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 305.540524][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 305.556363][ T10] usb 7-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 305.582625][ T10] usb 7-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 305.591519][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 305.592624][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.606442][ T10] usb 7-1: Product: syz [ 305.611004][ T10] usb 7-1: Manufacturer: syz [ 305.613182][ T24] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 305.615722][ T10] usb 7-1: SerialNumber: syz [ 305.633926][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 305.647383][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 305.658057][ T24] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 305.672520][ T24] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 305.777538][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.805838][ T43] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 306.043207][ T10] usb 7-1: Limiting number of CPorts to U8_MAX [ 306.043385][ T43] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 306.055564][ T10] usb 7-1: Not enough endpoints found in device, aborting! [ 306.066575][ T43] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 306.119321][ T43] usb 2-1: media controller created [ 306.155430][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 306.213125][ T43] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 306.228843][ T8703] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 306.248348][ T24] usb 1-1: GET_CAPABILITIES returned 0 [ 306.249861][ T8703] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 306.254138][ T24] usbtmc 1-1:16.0: can't read capabilities [ 306.282695][ T8703] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 306.309678][ T8703] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 306.338236][ T43] usb 2-1: USB disconnect, device number 19 [ 306.449900][ T30] audit: type=1400 audit(1754243600.500:536): avc: denied { relabelfrom } for pid=8704 comm="syz.7.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 306.477074][ T30] audit: type=1400 audit(1754243600.500:537): avc: denied { relabelto } for pid=8704 comm="syz.7.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 306.877524][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 306.887023][ T8713] usbtmc 1-1:16.0: Unable to send data, error -71 [ 307.719446][ T30] audit: type=1400 audit(1754243601.790:538): avc: denied { bind } for pid=8717 comm="syz.1.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 308.320624][ T5954] usb 36-1: device descriptor read/8, error -110 [ 308.540885][ T10] usb 1-1: USB disconnect, device number 18 [ 308.580352][ T43] usb 7-1: USB disconnect, device number 18 [ 308.665352][ T8732] dummy0: entered promiscuous mode [ 308.895639][ T8732] bond0: entered promiscuous mode [ 308.912308][ T5954] usb usb36-port1: attempt power cycle [ 308.914108][ T8732] bond_slave_0: entered promiscuous mode [ 308.944234][ T8732] bond_slave_1: entered promiscuous mode [ 309.071073][ T8732] hsr1: entered allmulticast mode [ 309.101757][ T8732] dummy0: entered allmulticast mode [ 309.107039][ T8732] bond0: entered allmulticast mode [ 309.112373][ T8732] bond_slave_0: entered allmulticast mode [ 309.118201][ T8732] bond_slave_1: entered allmulticast mode [ 309.185027][ T8732] binder: BINDER_SET_CONTEXT_MGR already set [ 309.290049][ T8732] binder: 8731:8732 ioctl 4018620d 200000000040 returned -16 [ 309.530767][ T5954] usb usb36-port1: unable to enumerate USB device [ 309.837642][ T8746] xt_limit: Overflow, try lower: 604147548/4200216962 [ 309.914086][ T8746] syz_tun: entered promiscuous mode [ 309.924577][ T8746] team0: Device macvlan2 is up. Set it down before adding it as a team port [ 309.955829][ T8746] syz_tun: left promiscuous mode [ 309.996667][ T30] audit: type=1400 audit(1754243604.070:539): avc: denied { module_request } for pid=8749 comm="syz.4.652" kmod="netdev-syzkaller1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 310.070697][ T8757] netlink: 40 bytes leftover after parsing attributes in process `syz.7.653'. [ 310.082926][ T8758] netlink: 40 bytes leftover after parsing attributes in process `syz.7.653'. [ 310.180049][ T5892] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 310.413135][ T5892] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.427075][ T5892] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 310.436938][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.451864][ T5892] usb 2-1: config 0 descriptor?? [ 310.480980][ T5892] pwc: Askey VC010 type 2 USB webcam detected. [ 311.471156][ T5892] pwc: recv_control_msg error -32 req 02 val 2b00 [ 311.480373][ T30] audit: type=1400 audit(1754243605.440:540): avc: denied { ioctl } for pid=8772 comm="syz.4.657" path="socket:[26900]" dev="sockfs" ino=26900 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 311.930021][ T5892] pwc: recv_control_msg error -32 req 02 val 2700 [ 311.979751][ T5892] pwc: recv_control_msg error -32 req 02 val 2c00 [ 311.994067][ T30] audit: type=1400 audit(1754243605.640:541): avc: denied { setopt } for pid=8772 comm="syz.4.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 312.026234][ T5892] pwc: recv_control_msg error -32 req 04 val 1000 [ 312.081205][ T5892] pwc: recv_control_msg error -32 req 04 val 1300 [ 312.088685][ T5892] pwc: recv_control_msg error -32 req 04 val 1400 [ 312.096450][ T5892] pwc: recv_control_msg error -32 req 02 val 2000 [ 312.103688][ T5892] pwc: recv_control_msg error -32 req 02 val 2100 [ 312.114808][ T5892] pwc: recv_control_msg error -32 req 04 val 1500 [ 312.121892][ T5892] pwc: recv_control_msg error -32 req 02 val 2500 [ 312.130040][ T5892] pwc: recv_control_msg error -32 req 02 val 2400 [ 312.139738][ T5892] pwc: recv_control_msg error -32 req 02 val 2600 [ 312.148243][ T5892] pwc: recv_control_msg error -32 req 02 val 2900 [ 312.265862][ T8783] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 312.378066][ T5892] pwc: recv_control_msg error -71 req 04 val 1100 [ 312.384920][ T5892] pwc: recv_control_msg error -71 req 04 val 1200 [ 312.393032][ T5892] pwc: Registered as video103. [ 312.398729][ T5892] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input11 [ 312.422397][ T5892] usb 2-1: USB disconnect, device number 20 [ 312.565317][ T30] audit: type=1400 audit(1754243606.640:542): avc: denied { write } for pid=8788 comm="syz.6.662" dev="9p" ino=8539867125209007497 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 312.605418][ T30] audit: type=1400 audit(1754243606.670:543): avc: denied { open } for pid=8788 comm="syz.6.662" name="/" dev="9p" ino=8539867125209007497 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 313.501871][ T8803] netlink: 'syz.1.664': attribute type 3 has an invalid length. [ 313.509637][ T8803] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.664'. [ 315.160079][ T5892] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 315.501258][ T5892] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 315.514834][ T5892] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 315.538425][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.569516][ T5892] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 317.229495][ T5892] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 317.244422][ T8833] netlink: 'syz.1.667': attribute type 4 has an invalid length. [ 317.248182][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.259874][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.302948][ T8833] netlink: 152 bytes leftover after parsing attributes in process `syz.1.667'. [ 317.501380][ T8833] : renamed from bond0 (while UP) [ 317.555485][ T5892] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 317.568299][ T5892] stv0680 2-1:4.0: last error: 120, command = 0xd8 [ 317.751978][ T5892] usb 2-1: USB disconnect, device number 21 [ 318.747175][ T8851] netlink: 'syz.6.677': attribute type 3 has an invalid length. [ 318.755102][ T8851] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.677'. [ 320.000560][ T5892] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 320.160519][ T5892] usb 7-1: Using ep0 maxpacket: 8 [ 320.183040][ T5892] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 320.204142][ T5892] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.229826][ T5892] pvrusb2: Hardware description: Terratec Grabster AV400 [ 320.242843][ T5892] pvrusb2: ********** [ 320.250808][ T975] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 320.264238][ T5892] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 320.275641][ T5892] pvrusb2: Important functionality might not be entirely working. [ 320.298445][ T5892] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 320.311239][ T5892] pvrusb2: ********** [ 320.532459][ T2337] pvrusb2: Invalid write control endpoint [ 320.640037][ T975] usb 2-1: Using ep0 maxpacket: 8 [ 320.721646][ T975] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 320.782903][ T975] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 320.796020][ T975] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 320.807531][ T975] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 320.824269][ T8863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.845327][ T975] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 320.854754][ T8863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.874441][ T30] audit: type=1400 audit(1754243614.950:544): avc: denied { read } for pid=8879 comm="syz.4.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 320.893993][ T975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.908881][ T8863] pvrusb2: Invalid write control endpoint [ 320.922305][ T5892] usb 7-1: USB disconnect, device number 19 [ 320.923972][ T2337] pvrusb2: Invalid write control endpoint [ 320.941565][ T30] audit: type=1400 audit(1754243615.010:545): avc: denied { setopt } for pid=8879 comm="syz.4.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 321.019113][ T2337] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 321.057514][ T2337] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 321.069417][ T2337] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 321.082341][ T2337] pvrusb2: Device being rendered inoperable [ 321.093360][ T2337] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 321.213230][ T975] usb 2-1: GET_CAPABILITIES returned 0 [ 321.221151][ T975] usbtmc 2-1:16.0: can't read capabilities [ 321.233557][ T2337] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 321.254062][ T2337] pvrusb2: Attached sub-driver cx25840 [ 321.285059][ T2337] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 321.298072][ T2337] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 321.674451][ C1] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 321.684029][ T8884] usbtmc 2-1:16.0: Unable to send data, error -71 [ 323.173392][ T8889] netlink: 'syz.4.690': attribute type 3 has an invalid length. [ 323.181232][ T8889] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.690'. [ 324.082834][ T5965] usb 2-1: USB disconnect, device number 22 [ 324.565699][ T8893] netlink: 'syz.1.691': attribute type 3 has an invalid length. [ 324.573655][ T8893] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.691'. [ 325.760075][ T975] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 325.787139][ T8912] netlink: 132 bytes leftover after parsing attributes in process `syz.4.697'. [ 325.798876][ T30] audit: type=1400 audit(1754243619.850:546): avc: denied { write } for pid=8910 comm="syz.4.697" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 326.040444][ T5965] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 326.053041][ T975] usb 8-1: config 0 has an invalid interface number: 69 but max is 0 [ 326.110069][ T975] usb 8-1: config 0 has no interface number 0 [ 326.165070][ T975] usb 8-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 326.252206][ T975] usb 8-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 326.264591][ T5965] usb 2-1: config 0 has no interfaces? [ 326.349817][ T5965] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 326.374927][ T975] usb 8-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 326.420100][ T975] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.440026][ T5965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 326.480988][ T975] usb 8-1: Product: syz [ 326.492659][ T5965] usb 2-1: Product: syz [ 326.496934][ T5965] usb 2-1: Manufacturer: syz [ 326.520289][ T975] usb 8-1: Manufacturer: syz [ 326.536070][ T5965] usb 2-1: SerialNumber: syz [ 326.561136][ T975] usb 8-1: SerialNumber: syz [ 326.597331][ T5965] usb 2-1: config 0 descriptor?? [ 326.619053][ T975] usb 8-1: config 0 descriptor?? [ 326.700815][ T8908] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 326.729012][ T975] cyberjack 8-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 326.830419][ T975] usb 8-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 327.093197][ T5965] IPVS: starting estimator thread 0... [ 327.921262][ T8924] IPVS: using max 36 ests per chain, 86400 per kthread [ 328.883184][ T8908] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 328.986114][ T43] usb 8-1: USB disconnect, device number 11 [ 329.016356][ T43] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 329.063934][ T43] cyberjack 8-1:0.69: device disconnected [ 329.329260][ T8935] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 329.964201][ T975] usb 2-1: USB disconnect, device number 23 [ 330.430032][ T5892] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 330.555692][ T8951] netlink: 8 bytes leftover after parsing attributes in process `syz.6.707'. [ 330.613122][ T8951] netlink: 20 bytes leftover after parsing attributes in process `syz.6.707'. [ 330.693083][ T5892] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.879881][ T5892] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.130411][ T5892] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 331.199334][ T8956] netlink: 'syz.4.709': attribute type 3 has an invalid length. [ 331.207127][ T8956] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.709'. [ 331.761823][ T5892] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 331.770975][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.779133][ T5892] usb 1-1: Product: syz [ 331.783514][ T5892] usb 1-1: Manufacturer: syz [ 331.788117][ T5892] usb 1-1: SerialNumber: syz [ 332.213862][ T8937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.234329][ T8937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.244291][ T8973] tipc: Started in network mode [ 332.249171][ T8973] tipc: Node identity ac14140f, cluster identity 4711 [ 332.256847][ T8973] tipc: New replicast peer: 255.255.255.255 [ 332.263574][ T8973] tipc: Enabled bearer , priority 10 [ 333.066553][ T5892] cdc_ncm 1-1:1.0: bind() failure [ 333.395217][ T5954] tipc: Node number set to 2886997007 [ 334.629494][ T5892] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 334.970666][ T5892] cdc_ncm 1-1:1.1: bind() failure [ 334.981672][ T5892] usb 1-1: USB disconnect, device number 19 [ 335.065091][ T30] audit: type=1400 audit(1754243629.140:547): avc: denied { ioctl } for pid=8977 comm="syz.0.716" path="socket:[26310]" dev="sockfs" ino=26310 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 335.460132][ T5892] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 335.781798][ T5892] usb 2-1: config 5 has an invalid interface number: 123 but max is 0 [ 335.798046][ T5892] usb 2-1: config 5 has no interface number 0 [ 335.808584][ T5892] usb 2-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 335.832986][ T5892] usb 2-1: config 5 interface 123 has no altsetting 0 [ 335.858158][ T5892] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 335.867667][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.878414][ T5892] usb 2-1: Product: syz [ 335.883444][ T5892] usb 2-1: Manufacturer: syz [ 335.889664][ T5892] usb 2-1: SerialNumber: syz [ 336.080061][ T10] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 336.250782][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 336.265054][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.417062][ T9009] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 336.467301][ T8991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.497081][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 336.583553][ T8991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.611808][ T10] usb 8-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 336.621310][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.649666][ T5892] ni6501 2-1:5.123: driver 'ni6501' failed to auto-configure device. [ 336.664205][ T10] usb 8-1: config 0 descriptor?? [ 336.690626][ T5892] usb 2-1: USB disconnect, device number 24 [ 336.880203][ T24] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 336.883658][ T8998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.897434][ T8998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.042397][ T24] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 337.050871][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.063207][ T24] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 337.072311][ T24] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 337.080750][ T24] usb 7-1: Manufacturer: syz [ 337.088265][ T24] usb 7-1: config 0 descriptor?? [ 337.160778][ T10] nintendo 0003:057E:2019.0007: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.7-1/input0 [ 337.161725][ T24] rc_core: IR keymap rc-hauppauge not found [ 337.187906][ T24] Registered IR keymap rc-empty [ 337.196134][ T24] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 337.210338][ T24] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input12 [ 337.951726][ T10] nintendo 0003:057E:2019.0007: Failed to get joycon info; ret=-71 [ 337.979795][ T10] nintendo 0003:057E:2019.0007: Failed to retrieve controller info; ret=-71 [ 338.017550][ T10] nintendo 0003:057E:2019.0007: Failed to initialize controller; ret=-71 [ 338.122244][ T30] audit: type=1400 audit(1754243632.190:548): avc: denied { execute } for pid=9010 comm="syz.6.725" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 338.283341][ T9031] netlink: 'syz.0.728': attribute type 3 has an invalid length. [ 338.291182][ T9031] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.728'. [ 339.065735][ T10] nintendo 0003:057E:2019.0007: probe - fail = -71 [ 339.076516][ T10] nintendo 0003:057E:2019.0007: probe with driver nintendo failed with error -71 [ 339.107549][ T10] usb 8-1: USB disconnect, device number 12 [ 341.295440][ T5954] usb 7-1: USB disconnect, device number 20 [ 342.464725][ T9058] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 343.361249][ T10] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 343.502160][ T9077] netlink: 'syz.4.743': attribute type 3 has an invalid length. [ 343.509863][ T9077] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.743'. [ 344.307992][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 344.343610][ T10] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 344.423561][ T10] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 344.457837][ T10] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 344.468856][ T10] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 344.700003][ T43] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 344.711945][ T10] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 344.872423][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.998740][ T30] audit: type=1400 audit(1754243639.070:549): avc: denied { connect } for pid=9094 comm="syz.4.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 345.070106][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 345.083908][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 345.133056][ T43] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 345.136654][ T10] usb 8-1: GET_CAPABILITIES returned 0 [ 345.352676][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 345.490083][ T10] usbtmc 8-1:16.0: can't read capabilities [ 345.990576][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 346.028130][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 346.193408][ T43] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 346.212229][ T43] usb 1-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 346.224115][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.252182][ T43] usb 1-1: Product: syz [ 346.261576][ T43] usb 1-1: Manufacturer: syz [ 346.281467][ T43] usb 1-1: SerialNumber: syz [ 346.293619][ T9099] kvm: kvm [9094]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x1cbf [ 346.458512][ T43] usb 1-1: config 0 descriptor?? [ 346.470251][ T5849] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 346.505388][ T9083] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 346.946996][ T9083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.980372][ T9083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.058061][ T5892] usb 8-1: USB disconnect, device number 13 [ 347.102006][ T9114] kAFS: No cell specified [ 347.504173][ T9119] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 347.901296][ T9123] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 347.929376][ T9123] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 347.937949][ T9123] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 347.945940][ T9123] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 347.995632][ T30] audit: type=1400 audit(1754243642.070:550): avc: denied { bind } for pid=9120 comm="syz.4.755" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 348.035234][ T30] audit: type=1400 audit(1754243642.070:551): avc: denied { name_bind } for pid=9120 comm="syz.4.755" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 348.063289][ T30] audit: type=1400 audit(1754243642.070:552): avc: denied { node_bind } for pid=9120 comm="syz.4.755" saddr=172.20.20.170 src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 348.093328][ T30] audit: type=1400 audit(1754243642.070:553): avc: denied { connect } for pid=9120 comm="syz.4.755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 349.550059][ T43] rc_core: IR keymap rc-snapstream-firefly not found [ 349.616347][ T43] Registered IR keymap rc-empty [ 349.647130][ T43] rc rc0: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 349.681211][ T43] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input13 [ 349.767212][ T43] input: syz syz mouse as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input14 [ 349.864610][ T43] usb 1-1: USB disconnect, device number 20 [ 349.870625][ C1] ati_remote 1-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 350.010249][ T5926] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 350.220465][ T5926] usb 8-1: Using ep0 maxpacket: 32 [ 350.248420][ T5926] usb 8-1: unable to get BOS descriptor or descriptor too short [ 350.268145][ T5926] usb 8-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 350.284110][ T5926] usb 8-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 350.295407][ T5926] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.310372][ T43] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 350.315909][ T5926] usb 8-1: Product: syz [ 350.323494][ T5926] usb 8-1: Manufacturer: syz [ 350.340390][ T5926] usb 8-1: SerialNumber: syz [ 350.430154][ T24] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 350.504796][ T43] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 350.518673][ T43] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 350.529459][ T43] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 350.540114][ T43] usb 1-1: config 1 has no interface number 1 [ 350.546234][ T43] usb 1-1: too many endpoints for config 1 interface 0 altsetting 4: 187, using maximum allowed: 30 [ 350.567807][ T43] usb 1-1: config 1 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 187 [ 350.645237][ T5926] usb 8-1: Limiting number of CPorts to U8_MAX [ 350.652580][ T5926] usb 8-1: Not enough endpoints found in device, aborting! [ 350.676888][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 350.692613][ T24] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 350.704337][ T43] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 350.778995][ T9155] overlayfs: overlapping lowerdir path [ 351.149496][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 351.160100][ T43] usb 1-1: config 1 interface 0 has no altsetting 1 [ 351.174763][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 351.185846][ T24] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 351.299031][ T24] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 351.314594][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.336225][ T43] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 351.345405][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.826807][ T43] usb 1-1: Product: syz [ 351.982983][ T43] usb 1-1: Manufacturer: syz [ 352.030465][ T43] usb 1-1: SerialNumber: syz [ 352.146873][ T24] usb 2-1: GET_CAPABILITIES returned 0 [ 352.153758][ T24] usbtmc 2-1:16.0: can't read capabilities [ 352.252903][ T9164] F2FS-fs (loop13): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 352.262561][ T9164] F2FS-fs (loop13): Can't find valid F2FS filesystem in 1th superblock [ 352.265475][ T43] usb 1-1: 2:1 : invalid UAC_AS_GENERAL desc [ 352.287558][ T9164] F2FS-fs (loop13): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 352.297668][ T9164] F2FS-fs (loop13): Can't find valid F2FS filesystem in 2th superblock [ 352.339458][ T43] usb 1-1: USB disconnect, device number 21 [ 352.409067][ T6429] udevd[6429]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 352.535861][ T9170] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 352.588681][ T9170] CIFS mount error: No usable UNC path provided in device string! [ 352.588681][ T9170] [ 352.611356][ T9170] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 352.691222][ C1] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 352.700688][ T9175] usbtmc 2-1:16.0: Unable to send data, error -71 [ 353.107486][ T5926] usb 8-1: USB disconnect, device number 14 [ 353.445671][ T9182] Bluetooth: (null): Invalid header checksum [ 353.525167][ T9183] netlink: 'syz.7.771': attribute type 2 has an invalid length. [ 353.533321][ T9183] netlink: 'syz.7.771': attribute type 4 has an invalid length. [ 353.937436][ T9184] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 354.210117][ T5899] usb 2-1: USB disconnect, device number 25 [ 355.801341][ T9205] Bluetooth: MGMT ver 1.23 [ 356.430547][ T9202] delete_channel: no stack [ 356.978541][ T30] audit: type=1400 audit(1754243651.040:554): avc: denied { map } for pid=9218 comm="syz.0.783" path="socket:[28126]" dev="sockfs" ino=28126 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 357.760351][ T5899] IPVS: starting estimator thread 0... [ 358.970640][ T9248] IPVS: using max 69 ests per chain, 165600 per kthread [ 359.312409][ T9255] netlink: 28 bytes leftover after parsing attributes in process `syz.4.792'. [ 359.677879][ T30] audit: type=1400 audit(1754243653.410:555): avc: denied { getopt } for pid=9252 comm="syz.4.792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 360.090772][ T30] audit: type=1400 audit(1754243654.170:556): avc: denied { read } for pid=9256 comm="syz.4.793" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 360.112619][ C0] vkms_vblank_simulate: vblank timer overrun [ 360.224262][ T30] audit: type=1400 audit(1754243654.170:557): avc: denied { open } for pid=9256 comm="syz.4.793" path="/84/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 360.247003][ C0] vkms_vblank_simulate: vblank timer overrun [ 360.427799][ T30] audit: type=1400 audit(1754243654.170:558): avc: denied { ioctl } for pid=9256 comm="syz.4.793" path="/84/file0/file0" dev="fuse" ino=0 ioctlcmd=0x5437 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 360.667995][ T9270] netlink: 28 bytes leftover after parsing attributes in process `syz.0.797'. [ 360.678490][ T9270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.797'. [ 360.835870][ T30] audit: type=1400 audit(1754243654.300:559): avc: denied { map } for pid=9232 comm="syz.1.787" path="pipe:[28127]" dev="pipefs" ino=28127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 360.858891][ T5926] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 360.876404][ T30] audit: type=1400 audit(1754243654.480:560): avc: denied { accept } for pid=9262 comm="syz.6.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 360.895652][ C0] vkms_vblank_simulate: vblank timer overrun [ 361.021723][ T5926] usb 8-1: Using ep0 maxpacket: 8 [ 361.037761][ T5926] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 361.131900][ T5926] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 361.143193][ T5926] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 361.153181][ T5926] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 361.175559][ T5926] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 361.202569][ T5926] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.649285][ T30] audit: type=1400 audit(1754243655.660:561): avc: denied { search } for pid=9277 comm="getty" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 361.683569][ T30] audit: type=1400 audit(1754243655.670:562): avc: denied { read } for pid=9277 comm="getty" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 syzkaller syzkaller login: [ 361.766832][ T5926] usb 8-1: GET_CAPABILITIES returned 0 [ 361.772565][ T5926] usbtmc 8-1:16.0: can't read capabilities [ 363.390697][ T30] audit: type=1400 audit(1754243657.470:563): avc: denied { execmem } for pid=9268 comm="syz.7.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 363.496195][ C0] usbtmc 8-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 363.505561][ T9293] usbtmc 8-1:16.0: Unable to send data, error -71 [ 363.521560][ T9286] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 363.767857][ T9304] QAT: Invalid ioctl 1082156677 [ 363.860376][ T9311] fuse: blksize only supported for fuseblk [ 363.926129][ T9312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 365.867522][ T43] usb 8-1: USB disconnect, device number 15 [ 366.239740][ T9321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.813'. [ 366.585614][ T9330] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 367.303166][ T30] audit: type=1400 audit(1754243661.370:564): avc: denied { append } for pid=9331 comm="syz.0.818" name="sg0" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 367.342610][ T30] audit: type=1400 audit(1754243661.420:565): avc: denied { mounton } for pid=9340 comm="syz.6.819" path="/112/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 367.430946][ T30] audit: type=1400 audit(1754243661.440:566): avc: denied { ioctl } for pid=9340 comm="syz.6.819" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x9367 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 367.434398][ T9349] netlink: 4 bytes leftover after parsing attributes in process `syz.7.816'. [ 367.633363][ T30] audit: type=1400 audit(1754243661.680:567): avc: denied { read write } for pid=9332 comm="syz.7.816" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 367.671181][ T30] audit: type=1400 audit(1754243661.690:568): avc: denied { open } for pid=9332 comm="syz.7.816" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 367.796279][ T30] audit: type=1400 audit(1754243661.700:569): avc: denied { map } for pid=9332 comm="syz.7.816" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 369.600079][ T5926] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 371.059974][ T5926] usb 2-1: Using ep0 maxpacket: 8 [ 371.066392][ T5926] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 371.086217][ T5926] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 371.096430][ T5926] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 371.106527][ T5926] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 371.120945][ T5926] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 371.130468][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.180870][ T43] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 371.348474][ T30] audit: type=1400 audit(1754243665.420:570): avc: denied { setattr } for pid=9396 comm="syz.6.835" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 371.410265][ T43] usb 8-1: Using ep0 maxpacket: 32 [ 371.415575][ T30] audit: type=1400 audit(1754243665.440:571): avc: denied { write } for pid=9396 comm="syz.6.835" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 371.437092][ T30] audit: type=1400 audit(1754243665.440:572): avc: denied { open } for pid=9396 comm="syz.6.835" path="/116/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 371.465043][ T43] usb 8-1: unable to get BOS descriptor or descriptor too short [ 371.479825][ T9397] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 371.499234][ T43] usb 8-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 371.525563][ T5926] usb 2-1: usb_control_msg returned -71 [ 371.533377][ T43] usb 8-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 371.537207][ T5926] usbtmc 2-1:16.0: can't read capabilities [ 371.548490][ T43] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.556792][ T43] usb 8-1: Product: syz [ 371.561487][ T43] usb 8-1: Manufacturer: syz [ 371.566306][ T43] usb 8-1: SerialNumber: syz [ 371.584879][ T5926] usb 2-1: USB disconnect, device number 26 [ 371.793197][ T43] usb 8-1: Limiting number of CPorts to U8_MAX [ 371.800187][ T43] usb 8-1: Not enough endpoints found in device, aborting! [ 372.397842][ T43] usb 8-1: USB disconnect, device number 16 [ 372.950168][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.492220][ T30] audit: type=1400 audit(1754243667.570:573): avc: denied { bind } for pid=9410 comm="syz.0.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 374.811284][ T30] audit: type=1400 audit(1754243668.790:574): avc: denied { ioctl } for pid=9424 comm="syz.7.843" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x4113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 375.034514][ T30] audit: type=1400 audit(1754243669.110:575): avc: denied { write } for pid=9438 comm="syz.4.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 375.078349][ T30] audit: type=1400 audit(1754243669.140:576): avc: denied { read } for pid=9438 comm="syz.4.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 375.175990][ T9442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.847'. [ 375.260845][ T9442] block nbd1: Unsupported socket: shutdown callout must be supported. [ 375.460138][ T24] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 375.460212][ T10] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 375.670064][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 375.670145][ T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 375.676592][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 375.732837][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 375.746316][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 375.759776][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 375.773278][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.838080][ T10] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 375.930471][ T24] usb 2-1: config 0 descriptor?? [ 375.949416][ T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 375.968908][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.969050][ T9446] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 376.110188][ T24] hub 2-1:0.0: USB hub found [ 376.198030][ T10] usb 1-1: GET_CAPABILITIES returned 0 [ 376.215827][ T10] usbtmc 1-1:16.0: can't read capabilities [ 376.413121][ T43] usb 1-1: USB disconnect, device number 22 [ 376.520308][ T30] audit: type=1400 audit(1754243670.570:577): avc: denied { map } for pid=9440 comm="syz.1.847" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 376.550796][ T30] audit: type=1400 audit(1754243670.570:578): avc: denied { execute } for pid=9440 comm="syz.1.847" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 376.574488][ T30] audit: type=1400 audit(1754243670.570:579): avc: denied { create } for pid=9440 comm="syz.1.847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 376.605221][ T30] audit: type=1400 audit(1754243670.580:580): avc: denied { bind } for pid=9440 comm="syz.1.847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 376.743501][ T9473] netlink: 'syz.0.857': attribute type 21 has an invalid length. [ 377.014528][ T24] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 377.027078][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 377.035277][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 377.090631][ T24] usb 2-1: USB disconnect, device number 27 [ 377.421178][ T30] audit: type=1400 audit(1754243671.500:581): avc: denied { write } for pid=9481 comm="syz.1.861" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 378.086462][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.100512][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.181257][ T9491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.861'. [ 378.802888][ T9500] netlink: 168 bytes leftover after parsing attributes in process `syz.6.867'. [ 378.903661][ T9506] netlink: 'syz.1.868': attribute type 2 has an invalid length. [ 378.931114][ T9506] netlink: 'syz.1.868': attribute type 11 has an invalid length. [ 378.944311][ T9506] netlink: 132 bytes leftover after parsing attributes in process `syz.1.868'. [ 379.150187][ T30] audit: type=1326 audit(1754243673.210:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9516 comm="syz.1.871" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6bcc38eb69 code=0x0 [ 379.350166][ T5892] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 379.366412][ T9520] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad) [ 379.373867][ T9520] PKCS7: Only support pkcs7_signedData type [ 379.574128][ T5892] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.598605][ T5892] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 50660, setting to 1024 [ 379.660772][ T5892] usb 1-1: config 0 interface 0 has no altsetting 0 [ 379.677704][ T9519] loop2: detected capacity change from 0 to 7 [ 379.697069][ T9519] Dev loop2: unable to read RDB block 7 [ 379.703402][ T9519] loop2: unable to read partition table [ 379.710109][ T5965] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 379.720402][ T9519] loop2: partition table beyond EOD, truncated [ 379.726722][ T9519] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 379.791695][ T5892] usb 1-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 379.856575][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.902535][ T5892] usb 1-1: config 0 descriptor?? [ 379.912351][ T5965] usb 8-1: Using ep0 maxpacket: 32 [ 380.043375][ T5965] usb 8-1: unable to get BOS descriptor or descriptor too short [ 380.069888][ T5965] usb 8-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 380.097329][ T5965] usb 8-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 380.128674][ T5965] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.186100][ T5965] usb 8-1: Product: syz [ 380.192648][ T5965] usb 8-1: Manufacturer: syz [ 380.204725][ T5965] usb 8-1: SerialNumber: syz [ 380.318954][ T5892] usbhid 1-1:0.0: can't add hid device: -71 [ 380.330729][ T5892] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 380.469640][ T9531] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 380.474259][ T5965] usb 8-1: Limiting number of CPorts to U8_MAX [ 380.480045][ T5892] usb 1-1: USB disconnect, device number 23 [ 380.489616][ T5965] usb 8-1: Not enough endpoints found in device, aborting! [ 383.136916][ T30] audit: type=1400 audit(1754243677.210:583): avc: denied { read append } for pid=9548 comm="syz.0.879" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 383.498257][ T30] audit: type=1400 audit(1754243677.560:584): avc: denied { call } for pid=9557 comm="syz.0.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 383.518744][ T9558] binder: 9557:9558 ioctl c0306201 200000000680 returned -14 [ 383.538999][ T5892] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 383.649664][ T24] usb 8-1: USB disconnect, device number 17 [ 383.732545][ T5892] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 383.744436][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.820810][ T5892] usb 2-1: config 0 descriptor?? [ 384.029021][ T30] audit: type=1400 audit(1754243678.100:585): avc: denied { write } for pid=9555 comm="syz.1.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 384.141006][ T24] usb 2-1: USB disconnect, device number 28 [ 384.299301][ T9570] netlink: 'syz.0.885': attribute type 1 has an invalid length. [ 384.568339][ T9570] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 385.823249][ T5892] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 386.029988][ T5892] usb 8-1: Using ep0 maxpacket: 8 [ 386.048086][ T5892] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 386.070322][ T5892] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 386.083475][ T5892] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 386.093921][ T5892] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 386.186626][ T9612] process 'syz.4.893' launched './file1' with NULL argv: empty string added [ 386.320186][ T5892] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 386.370067][ T30] audit: type=1400 audit(1754243680.270:586): avc: denied { execute_no_trans } for pid=9602 comm="syz.4.893" path="/96/file1" dev="tmpfs" ino=533 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 386.370074][ T5892] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.516709][ T30] audit: type=1400 audit(1754243680.580:587): avc: denied { read } for pid=9610 comm="syz.1.896" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 386.582609][ T5892] usb 8-1: GET_CAPABILITIES returned 0 [ 386.588148][ T5892] usbtmc 8-1:16.0: can't read capabilities [ 386.698004][ T30] audit: type=1400 audit(1754243680.580:588): avc: denied { open } for pid=9610 comm="syz.1.896" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 386.747413][ T30] audit: type=1400 audit(1754243680.590:589): avc: denied { firmware_load } for pid=8970 comm="kworker/u8:25" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 386.998001][ C0] usbtmc 8-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 387.007407][ T9626] usbtmc 8-1:16.0: Unable to send data, error -71 [ 387.661231][ T9631] netlink: 'syz.6.900': attribute type 2 has an invalid length. [ 387.671867][ T9631] netlink: 'syz.6.900': attribute type 8 has an invalid length. [ 387.682581][ T9631] netlink: 1148 bytes leftover after parsing attributes in process `syz.6.900'. [ 387.712582][ T9631] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 387.718669][ T9631] [U] J"—e:ÀÆ" [ 387.720095][ T5965] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 387.883490][ T5965] usb 1-1: Using ep0 maxpacket: 8 [ 388.192770][ T5965] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 388.201677][ T5965] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 388.216180][ T5965] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 388.228744][ T5965] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 388.245774][ T5965] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 388.270085][ T5965] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 388.279812][ T5965] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.651065][ T5954] usb 8-1: USB disconnect, device number 18 [ 388.966379][ T5965] usb 1-1: usb_control_msg returned -32 [ 388.972988][ T5965] usbtmc 1-1:16.0: can't read capabilities [ 389.850085][ T5954] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 390.117904][ T9655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 390.152178][ T5954] usb 8-1: device descriptor read/64, error -71 [ 390.410065][ T5954] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 390.539985][ T5954] usb 8-1: device descriptor read/64, error -71 [ 390.652615][ T5954] usb usb8-port1: attempt power cycle [ 390.941527][ T5926] usb 1-1: USB disconnect, device number 24 [ 390.990045][ T5954] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 391.128225][ T9666] netlink: 'syz.1.909': attribute type 3 has an invalid length. [ 391.136023][ T9666] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.909'. [ 391.240709][ T5954] usb 8-1: device descriptor read/8, error -71 [ 391.640484][ T5954] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 391.741702][ T5954] usb 8-1: device descriptor read/8, error -71 [ 392.052168][ T5954] usb usb8-port1: unable to enumerate USB device [ 392.061149][ T9670] netlink: 'syz.4.910': attribute type 3 has an invalid length. [ 392.068976][ T9670] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.910'. [ 393.525331][ T9690] overlayfs: failed to clone lowerpath [ 393.578871][ T30] audit: type=1400 audit(1754243687.650:590): avc: denied { ioctl } for pid=9688 comm="syz.4.916" path="socket:[30525]" dev="sockfs" ino=30525 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 393.581840][ T9691] netlink: 4 bytes leftover after parsing attributes in process `syz.4.916'. [ 394.248367][ T9712] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 394.269723][ T9712] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 394.288282][ T9712] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 394.482478][ T9720] FAULT_INJECTION: forcing a failure. [ 394.482478][ T9720] name failslab, interval 1, probability 0, space 0, times 0 [ 394.497624][ T9720] CPU: 0 UID: 0 PID: 9720 Comm: syz.4.925 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 394.497648][ T9720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 394.497658][ T9720] Call Trace: [ 394.497663][ T9720] [ 394.497670][ T9720] dump_stack_lvl+0x16c/0x1f0 [ 394.497701][ T9720] should_fail_ex+0x512/0x640 [ 394.497727][ T9720] ? fs_reclaim_acquire+0xae/0x150 [ 394.497751][ T9720] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 394.497772][ T9720] should_failslab+0xc2/0x120 [ 394.497792][ T9720] __kmalloc_noprof+0xd2/0x510 [ 394.497813][ T9720] tomoyo_realpath_from_path+0xc2/0x6e0 [ 394.497838][ T9720] ? tomoyo_profile+0x47/0x60 [ 394.497867][ T9720] tomoyo_path_number_perm+0x245/0x580 [ 394.497884][ T9720] ? tomoyo_path_number_perm+0x237/0x580 [ 394.497903][ T9720] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 394.497922][ T9720] ? find_held_lock+0x2b/0x80 [ 394.497965][ T9720] ? find_held_lock+0x2b/0x80 [ 394.497985][ T9720] ? hook_file_ioctl_common+0x145/0x410 [ 394.498016][ T9720] ? __fget_files+0x20e/0x3c0 [ 394.498040][ T9720] security_file_ioctl+0x9b/0x240 [ 394.498062][ T9720] __x64_sys_ioctl+0xb7/0x210 [ 394.498089][ T9720] do_syscall_64+0xcd/0x4c0 [ 394.498114][ T9720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.498131][ T9720] RIP: 0033:0x7f536318eb69 [ 394.498148][ T9720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 394.498163][ T9720] RSP: 002b:00007f5363f94038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 394.498180][ T9720] RAX: ffffffffffffffda RBX: 00007f53633b5fa0 RCX: 00007f536318eb69 [ 394.498190][ T9720] RDX: 0000200000000c80 RSI: 00000000800448d2 RDI: 0000000000000004 [ 394.498199][ T9720] RBP: 00007f5363f94090 R08: 0000000000000000 R09: 0000000000000000 [ 394.498208][ T9720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.498217][ T9720] R13: 0000000000000000 R14: 00007f53633b5fa0 R15: 00007ffc974115a8 [ 394.498239][ T9720] [ 394.720810][ T9720] ERROR: Out of memory at tomoyo_realpath_from_path. [ 394.788787][ T9723] Bluetooth: hci0: too big key_count value 47413 [ 395.193796][ T9727] SELinux: failed to load policy [ 395.388782][ T9732] sp0: Synchronizing with TNC [ 395.405113][ T9731] [U] è [ 395.550028][ T24] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 395.620082][ T5926] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 395.765998][ T24] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 395.776177][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.784389][ T24] usb 1-1: Product: syz [ 395.797900][ T24] usb 1-1: Manufacturer: syz [ 395.811709][ T24] usb 1-1: SerialNumber: syz [ 395.861129][ T5926] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 395.862837][ T24] usb 1-1: config 0 descriptor?? [ 395.908953][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.939277][ T5926] usb 2-1: Product: syz [ 395.947813][ T5926] usb 2-1: Manufacturer: syz [ 395.983156][ T5926] usb 2-1: SerialNumber: syz [ 396.010579][ T5926] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 396.033870][ T5892] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 396.049269][ T9744] ip6gre1: entered allmulticast mode [ 396.106633][ T24] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 396.425678][ T9748] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9748 comm=syz.6.934 [ 396.441700][ T9748] FAULT_INJECTION: forcing a failure. [ 396.441700][ T9748] name failslab, interval 1, probability 0, space 0, times 0 [ 396.454587][ T9748] CPU: 1 UID: 0 PID: 9748 Comm: syz.6.934 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 396.454614][ T9748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 396.454624][ T9748] Call Trace: [ 396.454631][ T9748] [ 396.454637][ T9748] dump_stack_lvl+0x16c/0x1f0 [ 396.454667][ T9748] should_fail_ex+0x512/0x640 [ 396.454697][ T9748] should_failslab+0xc2/0x120 [ 396.454718][ T9748] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 396.454737][ T9748] ? __alloc_skb+0x2b2/0x380 [ 396.454764][ T9748] __alloc_skb+0x2b2/0x380 [ 396.454786][ T9748] ? __pfx___alloc_skb+0x10/0x10 [ 396.454808][ T9748] ? ip6_dst_check+0x900/0x950 [ 396.454827][ T9748] ? find_held_lock+0x2b/0x80 [ 396.454854][ T9748] inet6_rt_notify+0x1e0/0x4b0 [ 396.454887][ T9748] fib6_add_rt2node+0x24ba/0x3670 [ 396.454919][ T9748] ? __pfx_fib6_add_rt2node+0x10/0x10 [ 396.454950][ T9748] ? fib6_add+0x628/0x1d90 [ 396.454967][ T9748] fib6_add+0x628/0x1d90 [ 396.454989][ T9748] ? do_raw_spin_lock+0x12c/0x2b0 [ 396.455008][ T9748] ? __pfx_fib6_add+0x10/0x10 [ 396.455026][ T9748] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 396.455052][ T9748] ip6_ins_rt+0xb5/0x110 [ 396.455075][ T9748] ? __pfx_ip6_ins_rt+0x10/0x10 [ 396.455101][ T9748] ? find_held_lock+0x2b/0x80 [ 396.455121][ T9748] ? __ipv6_dev_ac_inc+0x905/0xdc0 [ 396.455142][ T9748] ? do_raw_spin_unlock+0x172/0x230 [ 396.455163][ T9748] __ipv6_dev_ac_inc+0x912/0xdc0 [ 396.455189][ T9748] ipv6_sock_ac_join+0x933/0x1040 [ 396.455214][ T9748] ? __pfx_ipv6_sock_ac_join+0x10/0x10 [ 396.455232][ T9748] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 396.455257][ T9748] ? __local_bh_enable_ip+0xa4/0x120 [ 396.455278][ T9748] ? lockdep_hardirqs_on+0x7c/0x110 [ 396.455306][ T9748] do_ipv6_setsockopt+0x437f/0x4470 [ 396.455333][ T9748] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 396.455353][ T9748] ? avc_has_perm_noaudit+0x117/0x3b0 [ 396.455390][ T9748] ? rcu_is_watching+0x12/0xc0 [ 396.455411][ T9748] ? irqentry_exit+0x3b/0x90 [ 396.455433][ T9748] ? lockdep_hardirqs_on+0x7c/0x110 [ 396.455464][ T9748] ? selinux_netlbl_socket_setsockopt+0x7a/0x470 [ 396.455487][ T9748] ? selinux_netlbl_socket_setsockopt+0xe3/0x470 [ 396.455510][ T9748] ? selinux_netlbl_socket_setsockopt+0x183/0x470 [ 396.455533][ T9748] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 396.455563][ T9748] ? ipv6_setsockopt+0xcb/0x170 [ 396.455582][ T9748] ipv6_setsockopt+0xcb/0x170 [ 396.455605][ T9748] udpv6_setsockopt+0x7d/0xd0 [ 396.455630][ T9748] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 396.455651][ T9748] do_sock_setsockopt+0xf3/0x1d0 [ 396.455683][ T9748] __sys_setsockopt+0x1a0/0x230 [ 396.455711][ T9748] __x64_sys_setsockopt+0xbd/0x160 [ 396.455732][ T9748] ? do_syscall_64+0x91/0x4c0 [ 396.455756][ T9748] ? lockdep_hardirqs_on+0x7c/0x110 [ 396.455778][ T9748] do_syscall_64+0xcd/0x4c0 [ 396.455805][ T9748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.455823][ T9748] RIP: 0033:0x7fbb6ff8eb69 [ 396.455837][ T9748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.455854][ T9748] RSP: 002b:00007fbb70d73038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 396.455871][ T9748] RAX: ffffffffffffffda RBX: 00007fbb701b6160 RCX: 00007fbb6ff8eb69 [ 396.455882][ T9748] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000006 [ 396.455892][ T9748] RBP: 00007fbb70d73090 R08: 0000000000000014 R09: 0000000000000000 [ 396.455902][ T9748] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 396.455912][ T9748] R13: 0000000000000000 R14: 00007fbb701b6160 R15: 00007fffc6a36eb8 [ 396.455936][ T9748] [ 397.001690][ T5926] usb 2-1: USB disconnect, device number 29 [ 397.114811][ T5892] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 397.139878][ T5892] ath9k_htc: Failed to initialize the device [ 397.154524][ T5926] usb 2-1: ath9k_htc: USB layer deinitialized [ 397.154644][ T9751] syz.6.935 (9751): drop_caches: 0 [ 397.167397][ T30] audit: type=1400 audit(1754243691.230:591): avc: denied { create } for pid=9750 comm="syz.6.935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 397.176501][ T9751] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 397.221361][ T9751] netlink: 8 bytes leftover after parsing attributes in process `syz.6.935'. [ 397.230264][ T30] audit: type=1400 audit(1754243691.250:592): avc: denied { mount } for pid=9750 comm="syz.6.935" name="/" dev="configfs" ino=1133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 397.230321][ T30] audit: type=1400 audit(1754243691.250:593): avc: denied { mounton } for pid=9750 comm="syz.6.935" path="/142/file0" dev="configfs" ino=1133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 397.283115][ T9753] FAULT_INJECTION: forcing a failure. [ 397.283115][ T9753] name failslab, interval 1, probability 0, space 0, times 0 [ 397.295916][ T9753] CPU: 1 UID: 0 PID: 9753 Comm: syz.7.936 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 397.295943][ T9753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 397.295955][ T9753] Call Trace: [ 397.295965][ T9753] [ 397.295973][ T9753] dump_stack_lvl+0x16c/0x1f0 [ 397.296007][ T9753] should_fail_ex+0x512/0x640 [ 397.296037][ T9753] ? fs_reclaim_acquire+0xae/0x150 [ 397.296073][ T9753] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 397.296098][ T9753] should_failslab+0xc2/0x120 [ 397.296121][ T9753] __kmalloc_noprof+0xd2/0x510 [ 397.296148][ T9753] tomoyo_realpath_from_path+0xc2/0x6e0 [ 397.296178][ T9753] ? tomoyo_profile+0x47/0x60 [ 397.296209][ T9753] tomoyo_path_number_perm+0x245/0x580 [ 397.296231][ T9753] ? tomoyo_path_number_perm+0x237/0x580 [ 397.296255][ T9753] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 397.296279][ T9753] ? find_held_lock+0x2b/0x80 [ 397.296327][ T9753] ? find_held_lock+0x2b/0x80 [ 397.296349][ T9753] ? hook_file_ioctl_common+0x145/0x410 [ 397.296378][ T9753] ? __fget_files+0x20e/0x3c0 [ 397.296401][ T9753] security_file_ioctl+0x9b/0x240 [ 397.296424][ T9753] __x64_sys_ioctl+0xb7/0x210 [ 397.296452][ T9753] do_syscall_64+0xcd/0x4c0 [ 397.296479][ T9753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.296496][ T9753] RIP: 0033:0x7fac0e98eb69 [ 397.296510][ T9753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 397.296527][ T9753] RSP: 002b:00007fac0f76a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 397.296544][ T9753] RAX: ffffffffffffffda RBX: 00007fac0ebb5fa0 RCX: 00007fac0e98eb69 [ 397.296555][ T9753] RDX: 0000200000000b00 RSI: 00000000c4c85513 RDI: 0000000000000004 [ 397.296564][ T9753] RBP: 00007fac0f76a090 R08: 0000000000000000 R09: 0000000000000000 [ 397.296573][ T9753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.296583][ T9753] R13: 0000000000000000 R14: 00007fac0ebb5fa0 R15: 00007ffc8c5bf808 [ 397.296606][ T9753] [ 397.296636][ T9753] ERROR: Out of memory at tomoyo_realpath_from_path. [ 397.303280][ T9751] netlink: 'syz.6.935': attribute type 5 has an invalid length. [ 397.815167][ T30] audit: type=1400 audit(1754243691.890:594): avc: denied { write } for pid=9757 comm="syz.1.938" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 397.846022][ T9760] block device autoloading is deprecated and will be removed. [ 397.939530][ T24] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 398.017387][ T24] usb 1-1: USB disconnect, device number 25 [ 398.040992][ T30] audit: type=1400 audit(1754243692.120:595): avc: denied { unmount } for pid=7042 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 398.326459][ T9765] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9765 comm=syz.6.940 [ 398.360196][ T5926] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 398.590066][ T5926] usb 8-1: Using ep0 maxpacket: 32 [ 398.600608][ T5926] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 398.608738][ T5926] usb 8-1: config 0 has no interface number 0 [ 399.335218][ T5926] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 399.358315][ T5926] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.377226][ T5926] usb 8-1: Product: syz [ 399.388011][ T5926] usb 8-1: Manufacturer: syz [ 399.407677][ T5926] usb 8-1: SerialNumber: syz [ 399.426341][ T5926] usb 8-1: config 0 descriptor?? [ 399.444071][ T5926] smsc95xx v2.0.0 [ 399.470361][ T30] audit: type=1400 audit(1754243693.540:596): avc: denied { ioctl } for pid=9778 comm="syz.6.945" path="socket:[31773]" dev="sockfs" ino=31773 ioctlcmd=0x6607 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 399.611260][ T9783] netlink: 16 bytes leftover after parsing attributes in process `syz.6.947'. [ 399.890411][ T10] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 400.040187][ T10] usb 7-1: device descriptor read/64, error -71 [ 400.065338][ T5892] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 400.467692][ T5926] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 400.895679][ T5926] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 400.906835][ T5926] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 400.918665][ T5926] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -71 [ 400.929608][ T5926] usb 8-1: USB disconnect, device number 23 [ 400.960455][ T10] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 401.065305][ T5892] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 401.074544][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.082924][ T5892] usb 1-1: Product: syz [ 401.087098][ T5892] usb 1-1: Manufacturer: syz [ 401.095308][ T10] usb 7-1: device descriptor read/64, error -71 [ 401.105877][ T5892] usb 1-1: SerialNumber: syz [ 401.116715][ T5892] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 401.254944][ T10] usb usb7-port1: attempt power cycle [ 401.314888][ T5899] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 401.598797][ T5926] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 401.734288][ T5899] usb 2-1: Using ep0 maxpacket: 16 [ 401.750963][ T5899] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 401.768187][ T5899] usb 2-1: config 0 has no interface number 0 [ 402.095958][ T10] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 402.120275][ T5899] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 402.135460][ T5899] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 49152, setting to 1024 [ 402.143996][ T10] usb 7-1: device descriptor read/8, error -71 [ 402.178703][ T5899] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 402.198480][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 402.218489][ T5899] usb 2-1: Product: syz [ 402.228575][ T5899] usb 2-1: SerialNumber: syz [ 402.249204][ T5899] usb 2-1: config 0 descriptor?? [ 402.282187][ T5899] cm109 2-1:0.8: invalid payload size 1024, expected 4 [ 402.296315][ T5899] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input15 [ 402.339549][ T5899] usb 1-1: USB disconnect, device number 26 [ 402.410119][ T10] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 402.440954][ T10] usb 7-1: device descriptor read/8, error -71 [ 402.463261][ C1] cm109 2-1:0.8: cm109_urb_irq_callback: urb status -71 [ 402.561815][ T10] usb usb7-port1: unable to enumerate USB device [ 402.633335][ T5926] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 402.691770][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 402.698921][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 402.706217][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 402.707713][ T5926] ath9k_htc: Failed to initialize the device [ 402.713564][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 402.727544][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 402.727848][ T975] usb 2-1: USB disconnect, device number 30 [ 402.734521][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 402.753637][ T5899] usb 1-1: ath9k_htc: USB layer deinitialized [ 402.793774][ T975] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 403.060309][ T30] audit: type=1400 audit(1754243697.130:597): avc: denied { create } for pid=9830 comm="syz.0.962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 403.542203][ T30] audit: type=1400 audit(1754243697.520:598): avc: denied { accept } for pid=9830 comm="syz.0.962" lport=49270 faddr=::ffff:172.20.255.187 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 403.607913][ T30] audit: type=1400 audit(1754243697.520:599): avc: denied { write } for pid=9830 comm="syz.0.962" lport=49270 faddr=::ffff:172.20.255.187 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 403.655949][ T30] audit: type=1400 audit(1754243697.520:600): avc: denied { setopt } for pid=9830 comm="syz.0.962" lport=49270 faddr=::ffff:172.20.255.187 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 403.670676][ T43] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 404.000094][ T43] usb 8-1: too many configurations: 151, using maximum allowed: 8 [ 404.038228][ T43] usb 8-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 404.057656][ T43] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 404.069791][ T43] usb 8-1: Product: syz [ 404.074599][ T43] usb 8-1: Manufacturer: syz [ 404.079364][ T43] usb 8-1: SerialNumber: syz [ 404.085897][ T43] usb 8-1: config 0 descriptor?? [ 404.140118][ T24] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 404.370765][ T24] usb 7-1: device descriptor read/64, error -71 [ 404.409792][ T9849] FAULT_INJECTION: forcing a failure. [ 404.409792][ T9849] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 404.427128][ T9849] CPU: 1 UID: 0 PID: 9849 Comm: syz.0.965 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 404.427153][ T9849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 404.427163][ T9849] Call Trace: [ 404.427169][ T9849] [ 404.427176][ T9849] dump_stack_lvl+0x16c/0x1f0 [ 404.427208][ T9849] should_fail_ex+0x512/0x640 [ 404.427238][ T9849] _copy_to_user+0x32/0xd0 [ 404.427259][ T9849] simple_read_from_buffer+0xcb/0x170 [ 404.427290][ T9849] proc_fail_nth_read+0x197/0x240 [ 404.427311][ T9849] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 404.427333][ T9849] ? rw_verify_area+0xcf/0x6c0 [ 404.427359][ T9849] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 404.427378][ T9849] vfs_read+0x1e4/0xc60 [ 404.427399][ T9849] ? __pfx___mutex_lock+0x10/0x10 [ 404.427426][ T9849] ? __pfx_vfs_read+0x10/0x10 [ 404.427450][ T9849] ? __fget_files+0x20e/0x3c0 [ 404.427476][ T9849] ksys_read+0x12a/0x250 [ 404.427493][ T9849] ? __pfx_ksys_read+0x10/0x10 [ 404.427510][ T9849] ? fdget+0x187/0x210 [ 404.427532][ T9849] do_syscall_64+0xcd/0x4c0 [ 404.427559][ T9849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.427576][ T9849] RIP: 0033:0x7f30e0d8d57c [ 404.427592][ T9849] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 404.427608][ T9849] RSP: 002b:00007f30e1b86030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 404.427624][ T9849] RAX: ffffffffffffffda RBX: 00007f30e0fb6160 RCX: 00007f30e0d8d57c [ 404.427636][ T9849] RDX: 000000000000000f RSI: 00007f30e1b860a0 RDI: 0000000000000005 [ 404.427646][ T9849] RBP: 00007f30e1b86090 R08: 0000000000000000 R09: 0000000000000000 [ 404.427656][ T9849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.427665][ T9849] R13: 0000000000000000 R14: 00007f30e0fb6160 R15: 00007fff26100228 [ 404.427690][ T9849] [ 404.614234][ C1] vkms_vblank_simulate: vblank timer overrun [ 404.668494][ T9853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.968'. [ 404.810669][ T24] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 404.869160][ T9860] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9860 comm=syz.1.967 [ 405.235492][ T9856] 9pnet_fd: Insufficient options for proto=fd [ 405.310128][ T24] usb 7-1: device descriptor read/64, error -71 [ 405.420135][ T43] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 405.430118][ T24] usb usb7-port1: attempt power cycle [ 405.566707][ T9865] netlink: 'syz.4.971': attribute type 3 has an invalid length. [ 405.574644][ T9865] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.971'. [ 406.085005][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.134201][ T24] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 406.154217][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.164252][ T43] usb 2-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 406.176923][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.186505][ T24] usb 7-1: device descriptor read/8, error -71 [ 406.203238][ T43] usb 2-1: config 0 descriptor?? [ 406.284989][ T975] usb 8-1: USB disconnect, device number 24 [ 406.514966][ T9867] binder_alloc: 9866: binder_alloc_buf, no vma [ 406.530234][ T30] audit: type=1400 audit(1754243700.590:601): avc: denied { transfer } for pid=9866 comm="syz.0.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 406.596925][ T30] audit: type=1400 audit(1754243700.640:602): avc: denied { getopt } for pid=9869 comm="syz.6.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 406.619733][ T43] kye 0003:0458:5017.0008: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 406.659083][ T43] kye 0003:0458:5017.0008: hidraw0: USB HID v0.00 Device [HID 0458:5017] on usb-dummy_hcd.1-1/input0 [ 406.680523][ T43] kye 0003:0458:5017.0008: tablet-enabling feature report not found [ 406.690231][ T43] kye 0003:0458:5017.0008: tablet enabling failed [ 406.700287][ T975] usb 8-1: new full-speed USB device number 25 using dummy_hcd [ 406.777732][ T10] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 406.862105][ T975] usb 8-1: New USB device found, idVendor=07cd, idProduct=0000, bcdDevice= 0.00 [ 406.875136][ T975] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.898844][ T975] usb 8-1: config 0 descriptor?? [ 406.960452][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 406.970276][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 406.980068][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 406.990824][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 407.004034][ T10] usb 1-1: New USB device found, idVendor=196b, idProduct=0101, bcdDevice= 0.40 [ 407.017206][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.025644][ T10] usb 1-1: Product: syz [ 407.030041][ T10] usb 1-1: Manufacturer: syz [ 407.034783][ T10] usb 1-1: SerialNumber: syz [ 407.163967][ T9870] netlink: 10 bytes leftover after parsing attributes in process `syz.7.974'. [ 407.182175][ T975] usb 8-1: string descriptor 0 read error: -32 [ 407.264534][ T9882] fuse: Unknown parameter 'group_id00000000000000000000' [ 407.602893][ T10] usb 1-1: 0:2 : does not exist [ 407.632784][ T10] usb 1-1: USB disconnect, device number 27 [ 407.675280][ T6429] udevd[6429]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 407.928998][ T24] usb 2-1: USB disconnect, device number 31 [ 409.101613][ T10] usb 7-1: new full-speed USB device number 29 using dummy_hcd [ 409.164402][ T9906] FAULT_INJECTION: forcing a failure. [ 409.164402][ T9906] name failslab, interval 1, probability 0, space 0, times 0 [ 409.177468][ T9906] CPU: 1 UID: 0 PID: 9906 Comm: syz.4.982 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 409.177498][ T9906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 409.177509][ T9906] Call Trace: [ 409.177515][ T9906] [ 409.177522][ T9906] dump_stack_lvl+0x16c/0x1f0 [ 409.177561][ T9906] should_fail_ex+0x512/0x640 [ 409.177593][ T9906] ? fs_reclaim_acquire+0xae/0x150 [ 409.177618][ T9906] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 409.177640][ T9906] should_failslab+0xc2/0x120 [ 409.177662][ T9906] __kmalloc_noprof+0xd2/0x510 [ 409.177686][ T9906] tomoyo_realpath_from_path+0xc2/0x6e0 [ 409.177710][ T9906] ? tomoyo_profile+0x47/0x60 [ 409.177738][ T9906] tomoyo_path_number_perm+0x245/0x580 [ 409.177756][ T9906] ? tomoyo_path_number_perm+0x237/0x580 [ 409.177776][ T9906] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 409.177795][ T9906] ? find_held_lock+0x2b/0x80 [ 409.177840][ T9906] ? find_held_lock+0x2b/0x80 [ 409.177858][ T9906] ? hook_file_ioctl_common+0x145/0x410 [ 409.177889][ T9906] ? __fget_files+0x20e/0x3c0 [ 409.177915][ T9906] security_file_ioctl+0x9b/0x240 [ 409.177942][ T9906] __x64_sys_ioctl+0xb7/0x210 [ 409.177972][ T9906] do_syscall_64+0xcd/0x4c0 [ 409.178000][ T9906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.178018][ T9906] RIP: 0033:0x7f536318eb69 [ 409.178033][ T9906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.178049][ T9906] RSP: 002b:00007f5363f94038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 409.178068][ T9906] RAX: ffffffffffffffda RBX: 00007f53633b5fa0 RCX: 00007f536318eb69 [ 409.178078][ T9906] RDX: 0000200000000480 RSI: 0000000080045519 RDI: 0000000000000003 [ 409.178088][ T9906] RBP: 00007f5363f94090 R08: 0000000000000000 R09: 0000000000000000 [ 409.178097][ T9906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.178107][ T9906] R13: 0000000000000000 R14: 00007f53633b5fa0 R15: 00007ffc974115a8 [ 409.178127][ T9906] [ 409.378656][ C1] vkms_vblank_simulate: vblank timer overrun [ 409.388426][ T9906] ERROR: Out of memory at tomoyo_realpath_from_path. [ 409.403172][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 409.403221][ T10] usb 7-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 409.403241][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.408453][ T10] usb 7-1: config 0 descriptor?? [ 409.411029][ T9899] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 409.519800][ T30] audit: type=1400 audit(1754243703.590:603): avc: denied { setopt } for pid=9907 comm="syz.4.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 409.539414][ T30] audit: type=1400 audit(1754243703.600:604): avc: denied { accept } for pid=9907 comm="syz.4.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 409.578123][ T30] audit: type=1400 audit(1754243703.650:605): avc: denied { setopt } for pid=9907 comm="syz.4.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 410.307430][ T10] belkin 0003:050D:3201.0009: item fetching failed at offset 0/3 [ 410.331208][ T43] usb 8-1: USB disconnect, device number 25 [ 410.334385][ T10] belkin 0003:050D:3201.0009: parse failed [ 410.343640][ T10] belkin 0003:050D:3201.0009: probe with driver belkin failed with error -22 [ 410.573987][ T5892] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 410.800102][ T43] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 410.840409][ T5892] usb 1-1: Using ep0 maxpacket: 8 [ 410.886906][ T5892] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 410.913524][ T5892] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 410.930087][ T5892] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 410.941611][ T5892] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 410.956666][ T5892] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 410.980188][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.060564][ T43] usb 8-1: Using ep0 maxpacket: 32 [ 411.069640][ T43] usb 8-1: unable to get BOS descriptor or descriptor too short [ 411.084846][ T43] usb 8-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 411.108791][ T43] usb 8-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 411.118505][ T43] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.126588][ T43] usb 8-1: Product: syz [ 411.130853][ T43] usb 8-1: Manufacturer: syz [ 411.135454][ T43] usb 8-1: SerialNumber: syz [ 411.481899][ T43] usb 8-1: Limiting number of CPorts to U8_MAX [ 411.495763][ T5892] usb 1-1: GET_CAPABILITIES returned 0 [ 411.501546][ T5892] usbtmc 1-1:16.0: can't read capabilities [ 411.502249][ T43] usb 8-1: Not enough endpoints found in device, aborting! [ 411.595555][ T43] usb 7-1: USB disconnect, device number 29 [ 411.611446][ T5926] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 411.773197][ C1] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 411.785178][ T9918] usbtmc 1-1:16.0: Unable to send data, error -71 [ 412.291785][ T5892] usb 1-1: USB disconnect, device number 28 [ 412.310748][ T5926] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 412.343850][ T5926] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 412.362179][ T5926] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 412.371656][ T5926] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 412.964101][ T5926] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 412.976823][ T5926] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 413.022935][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 413.028302][ T30] audit: type=1400 audit(1754243707.100:606): avc: denied { write } for pid=9941 comm="syz.6.993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 413.061895][ T30] audit: type=1400 audit(1754243707.130:607): avc: denied { nlmsg_write } for pid=9941 comm="syz.6.993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 413.154348][ T9943] wg1 speed is unknown, defaulting to 1000 [ 413.161788][ T9943] wg1 speed is unknown, defaulting to 1000 [ 413.188398][ T5926] usb 2-1: Product: syz [ 413.236993][ T9943] wg1 speed is unknown, defaulting to 1000 [ 413.275663][ T9943] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 413.336481][ T9943] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 413.368837][ T5926] usb 2-1: Manufacturer: syz [ 413.493774][ T5926] cdc_wdm 2-1:1.0: skipping garbage [ 413.500978][ T5926] cdc_wdm 2-1:1.0: skipping garbage [ 413.513554][ T5926] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 413.530462][ T5926] cdc_wdm 2-1:1.0: Unknown control protocol [ 413.663005][ T9943] wg1 speed is unknown, defaulting to 1000 [ 413.675838][ T9943] wg1 speed is unknown, defaulting to 1000 [ 414.125184][ T5926] usb 8-1: USB disconnect, device number 26 [ 414.197300][ T9943] wg1 speed is unknown, defaulting to 1000 [ 414.208720][ T9943] wg1 speed is unknown, defaulting to 1000 [ 414.226048][ T9943] wg1 speed is unknown, defaulting to 1000 [ 414.274695][ T9949] netlink: zone id is out of range [ 414.280234][ T9949] netlink: zone id is out of range [ 414.317873][ T9949] netlink: set zone limit has 4 unknown bytes [ 414.577419][ T9954] FAULT_INJECTION: forcing a failure. [ 414.577419][ T9954] name failslab, interval 1, probability 0, space 0, times 0 [ 414.590212][ T9954] CPU: 0 UID: 0 PID: 9954 Comm: syz.6.996 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 414.590236][ T9954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 414.590246][ T9954] Call Trace: [ 414.590253][ T9954] [ 414.590260][ T9954] dump_stack_lvl+0x16c/0x1f0 [ 414.590291][ T9954] should_fail_ex+0x512/0x640 [ 414.590318][ T9954] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 414.590340][ T9954] should_failslab+0xc2/0x120 [ 414.590361][ T9954] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 414.590379][ T9954] ? __alloc_skb+0x2b2/0x380 [ 414.590406][ T9954] __alloc_skb+0x2b2/0x380 [ 414.590428][ T9954] ? __pfx___alloc_skb+0x10/0x10 [ 414.590453][ T9954] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 414.590484][ T9954] netlink_alloc_large_skb+0x69/0x130 [ 414.590511][ T9954] netlink_sendmsg+0x6a1/0xdd0 [ 414.590541][ T9954] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.590570][ T9954] ? ____sys_sendmsg+0x871/0xc70 [ 414.590591][ T9954] ____sys_sendmsg+0xa95/0xc70 [ 414.590609][ T9954] ? copy_msghdr_from_user+0x10a/0x160 [ 414.590633][ T9954] ? __pfx_____sys_sendmsg+0x10/0x10 [ 414.590648][ T9954] ? trace_sched_exit_tp+0xd1/0x120 [ 414.590680][ T9954] ___sys_sendmsg+0x134/0x1d0 [ 414.590706][ T9954] ? __pfx____sys_sendmsg+0x10/0x10 [ 414.590755][ T9954] ? __sys_sendmsg+0xd6/0x220 [ 414.590777][ T9954] ? __sys_sendmsg+0x153/0x220 [ 414.590803][ T9954] __sys_sendmsg+0x16d/0x220 [ 414.590827][ T9954] ? __pfx___sys_sendmsg+0x10/0x10 [ 414.590850][ T9954] ? ksys_write+0x1a2/0x250 [ 414.590884][ T9954] do_syscall_64+0xcd/0x4c0 [ 414.590912][ T9954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.590930][ T9954] RIP: 0033:0x7fbb6ff8eb69 [ 414.590945][ T9954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.590961][ T9954] RSP: 002b:00007fbb70d73038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 414.590978][ T9954] RAX: ffffffffffffffda RBX: 00007fbb701b6160 RCX: 00007fbb6ff8eb69 [ 414.590989][ T9954] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 000000000000000a [ 414.591000][ T9954] RBP: 00007fbb70d73090 R08: 0000000000000000 R09: 0000000000000000 [ 414.591010][ T9954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.591020][ T9954] R13: 0000000000000000 R14: 00007fbb701b6160 R15: 00007fffc6a36eb8 [ 414.591043][ T9954] [ 414.845939][ T30] audit: type=1400 audit(1754243708.910:608): avc: denied { read write } for pid=9924 comm="syz.1.988" name="cdc-wdm0" dev="devtmpfs" ino=3423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 414.894895][ T30] audit: type=1400 audit(1754243708.910:609): avc: denied { open } for pid=9924 comm="syz.1.988" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 414.915839][ T9955] overlayfs: missing 'lowerdir' [ 416.126754][ T30] audit: type=1400 audit(1754243710.170:610): avc: denied { shutdown } for pid=9967 comm="syz.6.1002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 416.384771][ T5892] usb 2-1: USB disconnect, device number 32 [ 416.692527][ T30] audit: type=1400 audit(1754243710.770:611): avc: denied { create } for pid=9975 comm="syz.1.1004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 417.143174][ T30] audit: type=1400 audit(1754243710.770:612): avc: denied { ioctl } for pid=9975 comm="syz.1.1004" path="socket:[32156]" dev="sockfs" ino=32156 ioctlcmd=0x8b36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 417.690849][ T30] audit: type=1400 audit(1754243711.760:613): avc: denied { unmount } for pid=7321 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 417.760674][ T9997] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1011'. [ 418.218542][T10010] netlink: 'syz.7.1013': attribute type 3 has an invalid length. [ 418.226463][T10010] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.1013'. [ 418.577883][ T9991] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1005'. [ 419.123742][ T9991] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1005'. [ 419.133988][ T9991] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1005'. [ 419.395056][T10021] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 419.681304][ T9997] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60435 sclass=netlink_route_socket pid=9997 comm=syz.1.1011 [ 420.754342][T10031] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1019'. [ 420.804849][ T30] audit: type=1400 audit(1754243714.870:614): avc: denied { name_bind } for pid=10030 comm="syz.7.1019" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 421.522428][T10041] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1020'. [ 421.540299][T10041] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1020'. [ 421.650105][ T975] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 421.837690][ T975] usb 8-1: config index 0 descriptor too short (expected 146, got 18) [ 421.903977][ T975] usb 8-1: config 0 has an invalid interface number: 153 but max is 0 [ 421.950634][ T975] usb 8-1: config 0 has no interface number 0 [ 421.970129][ T30] audit: type=1400 audit(1754243716.040:615): avc: denied { mount } for pid=10048 comm="syz.6.1024" name="/" dev="9p" ino=7016996765293437283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 422.011183][ T975] usb 8-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 422.025626][ T975] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.034562][ T975] usb 8-1: Product: syz [ 422.038814][ T975] usb 8-1: Manufacturer: syz [ 422.043543][ T975] usb 8-1: SerialNumber: syz [ 422.060598][ T975] usb 8-1: config 0 descriptor?? [ 422.076626][ T975] sierra 8-1:0.153: Sierra USB modem converter detected [ 422.080059][ T5899] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 422.278525][T10031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.295834][ T5899] usb 1-1: Using ep0 maxpacket: 16 [ 422.303361][T10031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.312139][ T5899] usb 1-1: config 6 has an invalid interface number: 170 but max is 0 [ 422.326668][ T5899] usb 1-1: config 6 has no interface number 0 [ 422.336228][ T5899] usb 1-1: New USB device found, idVendor=a168, idProduct=0611, bcdDevice=89.2f [ 422.347417][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.355918][ T5899] usb 1-1: Product: syz [ 422.363233][ T5899] usb 1-1: Manufacturer: syz [ 422.368069][ T5899] usb 1-1: SerialNumber: syz [ 422.386777][T10031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.414947][T10031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.431318][ T975] usb 8-1: USB disconnect, device number 27 [ 422.450758][ T975] sierra 8-1:0.153: device disconnected [ 422.550149][ T10] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 422.613164][ T5899] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0611 [ 422.624496][ T5899] gspca_sn9c20x: Write register 1000 failed -71 [ 422.631619][ T5899] gspca_sn9c20x: Device initialization failed [ 422.638237][ T5899] gspca_sn9c20x 1-1:6.170: probe with driver gspca_sn9c20x failed with error -71 [ 422.689488][T10055] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=770 sclass=netlink_xfrm_socket pid=10055 comm=syz.4.1026 [ 422.699996][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 422.703050][T10055] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1026'. [ 422.752498][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 422.810754][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 422.811766][ T5899] usb 1-1: USB disconnect, device number 29 [ 422.832948][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 422.855087][ T30] audit: type=1400 audit(1754243716.930:616): avc: denied { setopt } for pid=10054 comm="syz.4.1026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 422.889179][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 423.009979][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 423.019512][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.054078][ T30] audit: type=1400 audit(1754243717.130:617): avc: denied { unmount } for pid=7042 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 423.253979][T10064] FAULT_INJECTION: forcing a failure. [ 423.253979][T10064] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 423.269690][ T10] usb 2-1: GET_CAPABILITIES returned 0 [ 423.294381][ T10] usbtmc 2-1:16.0: can't read capabilities [ 423.320162][T10064] CPU: 1 UID: 0 PID: 10064 Comm: syz.7.1028 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 423.320188][T10064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 423.320198][T10064] Call Trace: [ 423.320203][T10064] [ 423.320210][T10064] dump_stack_lvl+0x16c/0x1f0 [ 423.320237][T10064] should_fail_ex+0x512/0x640 [ 423.320264][T10064] _copy_from_user+0x2e/0xd0 [ 423.320282][T10064] copy_msghdr_from_user+0x98/0x160 [ 423.320307][T10064] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 423.320342][T10064] ___sys_sendmsg+0xfe/0x1d0 [ 423.320366][T10064] ? __pfx____sys_sendmsg+0x10/0x10 [ 423.320409][T10064] ? __mutex_unlock_slowpath+0x80/0x800 [ 423.320441][T10064] __sys_sendmsg+0x16d/0x220 [ 423.320464][T10064] ? __pfx___sys_sendmsg+0x10/0x10 [ 423.320500][T10064] do_syscall_64+0xcd/0x4c0 [ 423.320523][T10064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.320539][T10064] RIP: 0033:0x7fac0e98eb69 [ 423.320552][T10064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.320569][T10064] RSP: 002b:00007fac0f749038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 423.320585][T10064] RAX: ffffffffffffffda RBX: 00007fac0ebb6080 RCX: 00007fac0e98eb69 [ 423.320596][T10064] RDX: 0000000020040054 RSI: 0000200000006040 RDI: 0000000000000004 [ 423.320605][T10064] RBP: 00007fac0f749090 R08: 0000000000000000 R09: 0000000000000000 [ 423.320615][T10064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.320624][T10064] R13: 0000000000000000 R14: 00007fac0ebb6080 R15: 00007ffc8c5bf808 [ 423.320647][T10064] [ 425.315704][ T10] usb 2-1: USB disconnect, device number 33 [ 425.690572][T10054] [U]  [ 428.826010][ T30] audit: type=1400 audit(1754243721.360:618): avc: denied { ioctl } for pid=10096 comm="syz.0.1036" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x4dfc scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 430.333155][ T30] audit: type=1400 audit(1754243724.400:619): avc: denied { setopt } for pid=10127 comm="syz.7.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 430.360068][ T5892] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 430.521217][ T5892] usb 7-1: Using ep0 maxpacket: 8 [ 430.641390][ T5892] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 430.652859][ T5892] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 430.984228][ T5892] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 431.008989][ T5892] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 431.036993][ T5892] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 431.059802][ T5892] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.179332][T10148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1050'. [ 431.197739][T10148] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.205841][T10148] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.288598][ T5892] usb 7-1: GET_CAPABILITIES returned 0 [ 431.310382][ T5892] usbtmc 7-1:16.0: can't read capabilities [ 434.180502][ T24] usb 7-1: USB disconnect, device number 30 [ 434.450108][ T5899] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 434.620111][ T5899] usb 1-1: Using ep0 maxpacket: 32 [ 434.627532][ T5899] usb 1-1: unable to get BOS descriptor or descriptor too short [ 434.637484][T10168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1057'. [ 434.663454][ T5899] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 434.713782][T10168] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1057'. [ 435.081649][ T5899] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 435.176395][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.195560][ T5899] usb 1-1: Product: syz [ 435.219519][ T5899] usb 1-1: Manufacturer: syz [ 435.228353][ T5899] usb 1-1: SerialNumber: syz [ 435.257033][ T5899] usb 1-1: can't set config #7, error -71 [ 435.283415][ T5899] usb 1-1: USB disconnect, device number 30 [ 435.909983][ T30] audit: type=1400 audit(1754243729.970:620): avc: denied { execute } for pid=10179 comm="syz.0.1060" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 436.164846][T10185] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1062'. [ 436.176619][T10185] geneve2: entered promiscuous mode [ 437.420346][ T975] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 437.617320][ T30] audit: type=1400 audit(1754243731.690:621): avc: denied { write } for pid=10210 comm="syz.7.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 437.676130][T10213] netlink: 'syz.7.1068': attribute type 1 has an invalid length. [ 437.711674][ T975] usb 1-1: Using ep0 maxpacket: 8 [ 437.718004][ T975] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 437.731573][ T975] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 437.742057][ T975] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 437.790223][ T975] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 437.804754][ T975] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 437.819052][ T975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.847877][T10218] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1068'. [ 437.965741][T10215] 8021q: adding VLAN 0 to HW filter on device bond3 [ 437.973560][T10215] bond2: (slave bond3): making interface the new active one [ 437.983565][T10215] bond2: (slave bond3): Enslaving as an active interface with an up link [ 438.027575][T10218] 8021q: adding VLAN 0 to HW filter on device bond2 [ 438.159026][ T975] usb 1-1: GET_CAPABILITIES returned 0 [ 438.170664][T10225] netlink: 'syz.6.1071': attribute type 10 has an invalid length. [ 438.195955][ T975] usbtmc 1-1:16.0: can't read capabilities [ 438.219684][T10226] netlink: 'syz.6.1071': attribute type 10 has an invalid length. [ 438.313974][T10225] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 438.482064][ T30] audit: type=1400 audit(1754243732.560:622): avc: denied { read } for pid=10228 comm="syz.7.1073" path="socket:[31647]" dev="sockfs" ino=31647 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 438.557634][ C1] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 438.567245][T10232] usbtmc 1-1:16.0: Unable to send data, error -71 [ 439.134774][T10236] netlink: 240 bytes leftover after parsing attributes in process `syz.7.1073'. [ 439.420103][ T5899] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 439.516264][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.523169][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.610069][ T5899] usb 8-1: Using ep0 maxpacket: 32 [ 439.618042][ T5899] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.632251][ T5899] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.643957][ T5899] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 439.676142][ T5899] usb 8-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 439.686829][ T5899] usb 8-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 439.696471][ T5899] usb 8-1: Product: syz [ 439.701655][ T5899] usb 8-1: Manufacturer: syz [ 439.706530][ T5899] usb 8-1: SerialNumber: syz [ 439.728807][ T5899] input: appletouch as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/input/input16 [ 439.946550][ T5899] usb 8-1: USB disconnect, device number 28 [ 439.979316][ T5899] appletouch 8-1:1.0: input: appletouch disconnected [ 440.127893][ T10] usb 1-1: USB disconnect, device number 31 [ 440.179785][T10244] sch_tbf: burst 0 is lower than device lo mtu (39799) ! [ 441.051416][ T10] libceph: connect (1)[c::]:6789 error -101 [ 441.166151][T10257] ceph: No mds server is up or the cluster is laggy [ 442.023682][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 443.774059][ T30] audit: type=1400 audit(1754243737.730:623): avc: denied { name_bind } for pid=10271 comm="syz.7.1084" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 444.665634][ T5892] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 444.880001][ T5892] usb 8-1: Using ep0 maxpacket: 32 [ 444.887480][ T5892] usb 8-1: unable to get BOS descriptor or descriptor too short [ 444.903503][ T5892] usb 8-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 444.916750][ T5892] usb 8-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 445.124058][ T30] audit: type=1400 audit(1754243739.110:624): avc: denied { wake_alarm } for pid=10293 comm="syz.1.1091" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 445.207930][ T5892] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.240011][ T5892] usb 8-1: Product: syz [ 445.612651][ T5892] usb 8-1: Manufacturer: syz [ 445.623621][ T5892] usb 8-1: SerialNumber: syz [ 446.060124][ T5892] usb 8-1: Limiting number of CPorts to U8_MAX [ 446.106628][ T5892] usb 8-1: Not enough endpoints found in device, aborting! [ 446.870038][ T30] audit: type=1400 audit(1754243740.940:625): avc: denied { read } for pid=10308 comm="syz.6.1095" path="socket:[32719]" dev="sockfs" ino=32719 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 446.921079][T10315] ======================================================= [ 446.921079][T10315] WARNING: The mand mount option has been deprecated and [ 446.921079][T10315] and is ignored by this kernel. Remove the mand [ 446.921079][T10315] option from the mount to silence this warning. [ 446.921079][T10315] ======================================================= [ 446.955974][ C0] vkms_vblank_simulate: vblank timer overrun [ 447.107721][T10319] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 447.569771][T10324] netlink: 'syz.4.1097': attribute type 3 has an invalid length. [ 447.577561][T10324] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1097'. [ 447.875248][ T43] usb 8-1: USB disconnect, device number 29 [ 448.949960][ T30] audit: type=1400 audit(1754243742.980:626): avc: denied { map } for pid=10333 comm="syz.0.1100" path="socket:[33849]" dev="sockfs" ino=33849 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 449.020800][ T30] audit: type=1400 audit(1754243742.980:627): avc: denied { read accept } for pid=10333 comm="syz.0.1100" path="socket:[33849]" dev="sockfs" ino=33849 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 450.847410][T10365] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 450.967010][T10373] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1111'. [ 451.009650][T10373] FAULT_INJECTION: forcing a failure. [ 451.009650][T10373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 451.011339][T10373] [ 451.011347][T10373] ====================================================== [ 451.011352][T10373] WARNING: possible circular locking dependency detected [ 451.011359][T10373] 6.16.0-syzkaller-11241-g186f3edfdd41 #0 Not tainted [ 451.011368][T10373] ------------------------------------------------------ [ 451.011373][T10373] syz.6.1111/10373 is trying to acquire lock: [ 451.011380][T10373] ffffffff8e4ce740 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x9f/0xd0 [ 451.011420][T10373] [ 451.011420][T10373] but task is already holding lock: [ 451.011424][T10373] ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 451.011455][T10373] [ 451.011455][T10373] which lock already depends on the new lock. [ 451.011455][T10373] [ 451.011459][T10373] [ 451.011459][T10373] the existing dependency chain (in reverse order) is: [ 451.011464][T10373] [ 451.011464][T10373] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 451.011481][T10373] _raw_spin_lock_nested+0x31/0x40 [ 451.011499][T10373] raw_spin_rq_lock_nested+0x29/0x130 [ 451.011514][T10373] task_rq_lock+0xcf/0x490 [ 451.011543][T10373] cgroup_move_task+0x81/0x2a0 [ 451.011560][T10373] css_set_move_task+0x288/0x5f0 [ 451.011571][T10373] cgroup_post_fork+0x201/0x9e0 [ 451.011586][T10373] copy_process+0x5cfa/0x7690 [ 451.011603][T10373] kernel_clone+0xfc/0x930 [ 451.011624][T10373] user_mode_thread+0xc7/0x110 [ 451.011641][T10373] rest_init+0x23/0x2b0 [ 451.011653][T10373] start_kernel+0x3ee/0x4d0 [ 451.011665][T10373] x86_64_start_reservations+0x18/0x30 [ 451.011679][T10373] x86_64_start_kernel+0x130/0x190 [ 451.011690][T10373] common_startup_64+0x13e/0x148 [ 451.011705][T10373] [ 451.011705][T10373] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 451.011721][T10373] _raw_spin_lock_irqsave+0x3a/0x60 [ 451.011737][T10373] try_to_wake_up+0xb7/0x1870 [ 451.011751][T10373] __wake_up_common+0x132/0x1f0 [ 451.011771][T10373] __wake_up+0x31/0x60 [ 451.011788][T10373] tty_port_default_wakeup+0x2a/0x40 [ 451.011801][T10373] serial8250_tx_chars+0x68e/0x860 [ 451.011814][T10373] serial8250_handle_irq+0x761/0xcb0 [ 451.011827][T10373] serial8250_default_handle_irq+0x9a/0x250 [ 451.011841][T10373] serial8250_interrupt+0xf5/0x1b0 [ 451.011856][T10373] __handle_irq_event_percpu+0x22c/0x7d0 [ 451.011872][T10373] handle_irq_event+0xab/0x1e0 [ 451.011887][T10373] handle_edge_irq+0x3ca/0x9e0 [ 451.011900][T10373] __common_interrupt+0xdf/0x250 [ 451.011919][T10373] common_interrupt+0xba/0xe0 [ 451.011933][T10373] asm_common_interrupt+0x26/0x40 [ 451.011945][T10373] skb_put+0xb0/0x1b0 [ 451.011958][T10373] unix_dgram_sendmsg+0x43f/0x17f0 [ 451.011978][T10373] unix_seqpacket_sendmsg+0x12a/0x1c0 [ 451.011998][T10373] sock_write_iter+0x4ff/0x5b0 [ 451.012010][T10373] do_iter_readv_writev+0x657/0x950 [ 451.012032][T10373] vfs_writev+0x35f/0xde0 [ 451.012042][T10373] do_writev+0x28c/0x340 [ 451.012052][T10373] do_syscall_64+0xcd/0x4c0 [ 451.012071][T10373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.012084][T10373] [ 451.012084][T10373] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 451.012100][T10373] _raw_spin_lock_irqsave+0x3a/0x60 [ 451.012116][T10373] __wake_up+0x1c/0x60 [ 451.012131][T10373] tty_port_default_wakeup+0x2a/0x40 [ 451.012142][T10373] serial8250_tx_chars+0x68e/0x860 [ 451.012154][T10373] serial8250_handle_irq+0x761/0xcb0 [ 451.012167][T10373] serial8250_default_handle_irq+0x9a/0x250 [ 451.012181][T10373] serial8250_interrupt+0xf5/0x1b0 [ 451.012195][T10373] __handle_irq_event_percpu+0x22c/0x7d0 [ 451.012210][T10373] handle_irq_event+0xab/0x1e0 [ 451.012224][T10373] handle_edge_irq+0x3ca/0x9e0 [ 451.012237][T10373] __common_interrupt+0xdf/0x250 [ 451.012254][T10373] common_interrupt+0xba/0xe0 [ 451.012266][T10373] asm_common_interrupt+0x26/0x40 [ 451.012277][T10373] _raw_spin_unlock_irqrestore+0x31/0x80 [ 451.012294][T10373] uart_write+0x2a4/0xb30 [ 451.012315][T10373] n_tty_write+0x41f/0x11e0 [ 451.012329][T10373] file_tty_write.constprop.0+0x501/0x9b0 [ 451.012350][T10373] redirected_tty_write+0xd4/0x150 [ 451.012368][T10373] vfs_write+0x6c4/0x1150 [ 451.012379][T10373] ksys_write+0x12a/0x250 [ 451.012391][T10373] do_syscall_64+0xcd/0x4c0 [ 451.012409][T10373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.012421][T10373] [ 451.012421][T10373] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 451.012437][T10373] _raw_spin_lock_irqsave+0x3a/0x60 [ 451.012452][T10373] serial8250_console_write+0x181/0x1890 [ 451.012466][T10373] console_flush_all+0x801/0xc60 [ 451.012480][T10373] console_unlock+0xd8/0x210 [ 451.012494][T10373] vprintk_emit+0x418/0x6d0 [ 451.012509][T10373] _printk+0xc7/0x100 [ 451.012519][T10373] register_console+0xc2d/0x11b0 [ 451.012534][T10373] univ8250_console_init+0x5f/0x90 [ 451.012549][T10373] console_init+0x14f/0x680 [ 451.012562][T10373] start_kernel+0x29f/0x4d0 [ 451.012573][T10373] x86_64_start_reservations+0x18/0x30 [ 451.012585][T10373] x86_64_start_kernel+0x130/0x190 [ 451.012597][T10373] common_startup_64+0x13e/0x148 [ 451.012615][T10373] [ 451.012615][T10373] -> #0 (console_owner){-.-.}-{0:0}: [ 451.012630][T10373] __lock_acquire+0x12a6/0x1ce0 [ 451.012650][T10373] lock_acquire+0x179/0x350 [ 451.012669][T10373] console_lock_spinning_enable+0xb0/0xd0 [ 451.012683][T10373] console_flush_all+0x7aa/0xc60 [ 451.012697][T10373] console_unlock+0xd8/0x210 [ 451.012710][T10373] vprintk_emit+0x418/0x6d0 [ 451.012725][T10373] _printk+0xc7/0x100 [ 451.012734][T10373] should_fail_ex+0x4e7/0x640 [ 451.012754][T10373] strncpy_from_user+0x3b/0x2e0 [ 451.012772][T10373] strncpy_from_user_nofault+0x7f/0x180 [ 451.012788][T10373] bpf_bprintf_prepare+0xe90/0x13f0 [ 451.012807][T10373] bpf_trace_printk+0xda/0x190 [ 451.012819][T10373] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 451.012828][T10373] bpf_trace_run2+0x236/0x590 [ 451.012840][T10373] __bpf_trace_contention_begin+0xc9/0x110 [ 451.012860][T10373] trace_contention_begin.constprop.0+0xde/0x160 [ 451.012874][T10373] __pv_queued_spin_lock_slowpath+0x109/0xcf0 [ 451.012893][T10373] do_raw_spin_lock+0x20e/0x2b0 [ 451.012905][T10373] raw_spin_rq_lock_nested+0x7e/0x130 [ 451.012920][T10373] __schedule+0x307/0x5de0 [ 451.012935][T10373] preempt_schedule_irq+0x51/0x90 [ 451.012952][T10373] irqentry_exit+0x36/0x90 [ 451.012969][T10373] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 451.012982][T10373] stack_access_ok+0x0/0x200 [ 451.012995][T10373] unwind_next_frame+0x15c5/0x20a0 [ 451.013008][T10373] arch_stack_walk+0x94/0x100 [ 451.013022][T10373] stack_trace_save+0x8e/0xc0 [ 451.013040][T10373] kasan_save_stack+0x33/0x60 [ 451.013052][T10373] kasan_save_track+0x14/0x30 [ 451.013063][T10373] __kasan_kmalloc+0xaa/0xb0 [ 451.013074][T10373] __kmalloc_noprof+0x223/0x510 [ 451.013085][T10373] fib6_info_alloc+0x40/0x160 [ 451.013098][T10373] ip6_route_info_create+0x14c/0x870 [ 451.013118][T10373] ip6_route_add.part.0+0x22/0x1d0 [ 451.013136][T10373] ip6_route_add+0x45/0x60 [ 451.013153][T10373] addrconf_add_mroute+0x1dd/0x350 [ 451.013164][T10373] addrconf_add_dev+0x14e/0x1c0 [ 451.013177][T10373] inet6_addr_add+0xfe/0x960 [ 451.013191][T10373] inet6_rtm_newaddr+0x1619/0x1c70 [ 451.013206][T10373] rtnetlink_rcv_msg+0x95b/0xe90 [ 451.013225][T10373] netlink_rcv_skb+0x158/0x420 [ 451.013246][T10373] netlink_unicast+0x5a7/0x870 [ 451.013263][T10373] netlink_sendmsg+0x8d1/0xdd0 [ 451.013282][T10373] ____sys_sendmsg+0xa95/0xc70 [ 451.013294][T10373] ___sys_sendmsg+0x134/0x1d0 [ 451.013311][T10373] __sys_sendmsg+0x16d/0x220 [ 451.013327][T10373] do_syscall_64+0xcd/0x4c0 [ 451.013345][T10373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.013357][T10373] [ 451.013357][T10373] other info that might help us debug this: [ 451.013357][T10373] [ 451.013361][T10373] Chain exists of: [ 451.013361][T10373] console_owner --> &p->pi_lock --> &rq->__lock [ 451.013361][T10373] [ 451.013379][T10373] Possible unsafe locking scenario: [ 451.013379][T10373] [ 451.013382][T10373] CPU0 CPU1 [ 451.013386][T10373] ---- ---- [ 451.013389][T10373] lock(&rq->__lock); [ 451.013396][T10373] lock(&p->pi_lock); [ 451.013405][T10373] lock(&rq->__lock); [ 451.013413][T10373] lock(console_owner); [ 451.013421][T10373] [ 451.013421][T10373] *** DEADLOCK *** [ 451.013421][T10373] [ 451.013424][T10373] 7 locks held by syz.6.1111/10373: [ 451.013431][T10373] #0: ffffffff9037cac8 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x4e4/0x1c70 [ 451.013464][T10373] #1: ffff888031a20d28 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x592/0x1c70 [ 451.013501][T10373] #2: ffffffff8e5c1120 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x20a0 [ 451.013532][T10373] #3: ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 451.013564][T10373] #4: ffffffff8e5c1120 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x1bc/0x590 [ 451.013593][T10373] #5: ffffffff8e5aeb80 (console_lock){+.+.}-{0:0}, at: _printk+0xc7/0x100 [ 451.013623][T10373] #6: ffffffff8e5aebf0 (console_srcu){....}-{0:0}, at: console_flush_all+0x158/0xc60 [ 451.013654][T10373] [ 451.013654][T10373] stack backtrace: [ 451.013662][T10373] CPU: 0 UID: 0 PID: 10373 Comm: syz.6.1111 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 451.013679][T10373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 451.013688][T10373] Call Trace: [ 451.013692][T10373] [ 451.013697][T10373] dump_stack_lvl+0x116/0x1f0 [ 451.013719][T10373] print_circular_bug+0x275/0x350 [ 451.013739][T10373] check_noncircular+0x14c/0x170 [ 451.013761][T10373] __lock_acquire+0x12a6/0x1ce0 [ 451.013784][T10373] lock_acquire+0x179/0x350 [ 451.013804][T10373] ? console_lock_spinning_enable+0x9f/0xd0 [ 451.013820][T10373] ? console_lock_spinning_enable+0x88/0xd0 [ 451.013836][T10373] console_lock_spinning_enable+0xb0/0xd0 [ 451.013852][T10373] ? console_lock_spinning_enable+0x9f/0xd0 [ 451.013867][T10373] console_flush_all+0x7aa/0xc60 [ 451.013885][T10373] ? __pfx_console_flush_all+0x10/0x10 [ 451.013903][T10373] ? is_printk_cpu_sync_owner+0x32/0x40 [ 451.013922][T10373] console_unlock+0xd8/0x210 [ 451.013937][T10373] ? __pfx_console_unlock+0x10/0x10 [ 451.013952][T10373] ? do_raw_spin_unlock+0xa0/0x230 [ 451.013967][T10373] ? _printk+0xc7/0x100 [ 451.013977][T10373] ? __down_trylock_console_sem+0xb0/0x140 [ 451.013991][T10373] vprintk_emit+0x418/0x6d0 [ 451.014007][T10373] ? __pfx_vprintk_emit+0x10/0x10 [ 451.014026][T10373] _printk+0xc7/0x100 [ 451.014036][T10373] ? __pfx__printk+0x10/0x10 [ 451.014049][T10373] ? __pfx____ratelimit+0x10/0x10 [ 451.014069][T10373] should_fail_ex+0x4e7/0x640 [ 451.014091][T10373] strncpy_from_user+0x3b/0x2e0 [ 451.014110][T10373] strncpy_from_user_nofault+0x7f/0x180 [ 451.014126][T10373] bpf_bprintf_prepare+0xe90/0x13f0 [ 451.014148][T10373] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 451.014172][T10373] ? bpf_trace_run2+0x3e1/0x590 [ 451.014184][T10373] bpf_trace_printk+0xda/0x190 [ 451.014196][T10373] ? __pfx_bpf_trace_printk+0x10/0x10 [ 451.014210][T10373] ? bpf_trace_run2+0x3e1/0x590 [ 451.014226][T10373] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 451.014236][T10373] bpf_trace_run2+0x236/0x590 [ 451.014249][T10373] ? __pfx_bpf_trace_run2+0x10/0x10 [ 451.014264][T10373] ? check_buffer+0x13f/0x980 [ 451.014284][T10373] __bpf_trace_contention_begin+0xc9/0x110 [ 451.014306][T10373] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 451.014327][T10373] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 451.014342][T10373] ? __pfx_trace_clock_local+0x10/0x10 [ 451.014360][T10373] trace_contention_begin.constprop.0+0xde/0x160 [ 451.014375][T10373] __pv_queued_spin_lock_slowpath+0x109/0xcf0 [ 451.014396][T10373] ? __lock_acquire+0xb97/0x1ce0 [ 451.014415][T10373] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 451.014436][T10373] ? do_raw_spin_lock+0x12c/0x2b0 [ 451.014452][T10373] do_raw_spin_lock+0x20e/0x2b0 [ 451.014466][T10373] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 451.014479][T10373] ? rcu_qs+0x2b/0xe0 [ 451.014495][T10373] ? rcu_note_context_switch+0x192/0x1e00 [ 451.014513][T10373] raw_spin_rq_lock_nested+0x7e/0x130 [ 451.014530][T10373] ? preempt_schedule_irq+0x51/0x90 [ 451.014547][T10373] __schedule+0x307/0x5de0 [ 451.014564][T10373] ? rb_read_data_buffer.constprop.0+0x107/0x430 [ 451.014585][T10373] ? write_comp_data+0x8b/0x90 [ 451.014598][T10373] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 451.014616][T10373] ? rb_read_data_buffer.constprop.0+0x18c/0x430 [ 451.014637][T10373] ? __pfx___schedule+0x10/0x10 [ 451.014653][T10373] ? __lock_acquire+0x62e/0x1ce0 [ 451.014676][T10373] ? mark_held_locks+0x49/0x80 [ 451.014696][T10373] preempt_schedule_irq+0x51/0x90 [ 451.014714][T10373] irqentry_exit+0x36/0x90 [ 451.014732][T10373] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 451.014746][T10373] RIP: 0010:stack_access_ok+0x0/0x200 [ 451.014762][T10373] Code: 20 ff ff ff 44 8b 85 30 ff ff ff e9 ba fe ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <48> b8 00 00 00 00 00 fc ff df 41 57 41 56 4c 8d 77 08 41 55 41 54 [ 451.014775][T10373] RSP: 0000:ffffc90004c1ee10 EFLAGS: 00000293 [ 451.014786][T10373] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff91df4068 [ 451.014795][T10373] RDX: 0000000000000008 RSI: ffffc90004c1f2e0 RDI: ffffc90004c1ee88 [ 451.014804][T10373] RBP: ffffc90004c1f2e0 R08: 0000000000000001 R09: 0000000000000000 [ 451.014812][T10373] R10: 0000000000000002 R11: 000000000009429f R12: ffffc90004c1eed8 [ 451.014821][T10373] R13: ffffc90004c1ee88 R14: ffffc90004c1f308 R15: ffffc90004c1eebc [ 451.014834][T10373] unwind_next_frame+0x15c5/0x20a0 [ 451.014849][T10373] ? ip6_route_add.part.0+0x22/0x1d0 [ 451.014869][T10373] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 451.014888][T10373] arch_stack_walk+0x94/0x100 [ 451.014904][T10373] ? ip6_route_add+0x45/0x60 [ 451.014923][T10373] ? fib6_info_alloc+0x40/0x160 [ 451.014937][T10373] stack_trace_save+0x8e/0xc0 [ 451.014954][T10373] ? __pfx_stack_trace_save+0x10/0x10 [ 451.014973][T10373] ? trace_event_buffer_commit+0x204/0xa50 [ 451.014992][T10373] kasan_save_stack+0x33/0x60 [ 451.015003][T10373] ? kasan_save_stack+0x33/0x60 [ 451.015015][T10373] ? kasan_save_track+0x14/0x30 [ 451.015027][T10373] ? __kasan_kmalloc+0xaa/0xb0 [ 451.015038][T10373] ? __kmalloc_noprof+0x223/0x510 [ 451.015050][T10373] ? fib6_info_alloc+0x40/0x160 [ 451.015062][T10373] ? ip6_route_info_create+0x14c/0x870 [ 451.015082][T10373] ? ip6_route_add.part.0+0x22/0x1d0 [ 451.015113][T10373] kasan_save_track+0x14/0x30 [ 451.015125][T10373] __kasan_kmalloc+0xaa/0xb0 [ 451.015137][T10373] __kmalloc_noprof+0x223/0x510 [ 451.015151][T10373] fib6_info_alloc+0x40/0x160 [ 451.015165][T10373] ip6_route_info_create+0x14c/0x870 [ 451.015186][T10373] ip6_route_add.part.0+0x22/0x1d0 [ 451.015206][T10373] ip6_route_add+0x45/0x60 [ 451.015225][T10373] addrconf_add_mroute+0x1dd/0x350 [ 451.015237][T10373] ? __pfx_addrconf_add_mroute+0x10/0x10 [ 451.015249][T10373] ? preempt_schedule_thunk+0x16/0x30 [ 451.015275][T10373] addrconf_add_dev+0x14e/0x1c0 [ 451.015289][T10373] inet6_addr_add+0xfe/0x960 [ 451.015305][T10373] inet6_rtm_newaddr+0x1619/0x1c70 [ 451.015323][T10373] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 451.015340][T10373] ? __lock_acquire+0x62e/0x1ce0 [ 451.015364][T10373] ? find_held_lock+0x2b/0x80 [ 451.015379][T10373] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 451.015395][T10373] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 451.015411][T10373] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 451.015432][T10373] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 451.015448][T10373] rtnetlink_rcv_msg+0x95b/0xe90 [ 451.015468][T10373] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 451.015490][T10373] ? ref_tracker_free+0x37c/0x830 [ 451.015504][T10373] netlink_rcv_skb+0x158/0x420 [ 451.015523][T10373] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 451.015544][T10373] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 451.015566][T10373] ? netlink_deliver_tap+0x1ae/0xd30 [ 451.015587][T10373] netlink_unicast+0x5a7/0x870 [ 451.015611][T10373] ? __pfx_netlink_unicast+0x10/0x10 [ 451.015631][T10373] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 451.015653][T10373] netlink_sendmsg+0x8d1/0xdd0 [ 451.015674][T10373] ? __pfx_netlink_sendmsg+0x10/0x10 [ 451.015697][T10373] ____sys_sendmsg+0xa95/0xc70 [ 451.015711][T10373] ? copy_msghdr_from_user+0x10a/0x160 [ 451.015729][T10373] ? __pfx_____sys_sendmsg+0x10/0x10 [ 451.015746][T10373] ___sys_sendmsg+0x134/0x1d0 [ 451.015765][T10373] ? __pfx____sys_sendmsg+0x10/0x10 [ 451.015791][T10373] ? __mutex_unlock_slowpath+0x80/0x800 [ 451.015813][T10373] __sys_sendmsg+0x16d/0x220 [ 451.015831][T10373] ? __pfx___sys_sendmsg+0x10/0x10 [ 451.015855][T10373] do_syscall_64+0xcd/0x4c0 [ 451.015875][T10373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.015887][T10373] RIP: 0033:0x7fbb6ff8eb69 [ 451.015898][T10373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 451.015910][T10373] RSP: 002b:00007fbb70db5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 451.015922][T10373] RAX: ffffffffffffffda RBX: 00007fbb701b5fa0 RCX: 00007fbb6ff8eb69 [ 451.015931][T10373] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 451.015939][T10373] RBP: 00007fbb70db5090 R08: 0000000000000000 R09: 0000000000000000 [ 451.015947][T10373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 451.015954][T10373] R13: 0000000000000000 R14: 00007fbb701b5fa0 R15: 00007fffc6a36eb8 [ 451.015967][T10373] [ 452.736865][T10373] CPU: 0 UID: 0 PID: 10373 Comm: syz.6.1111 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 452.736889][T10373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 452.736899][T10373] Call Trace: [ 452.736904][T10373] [ 452.736911][T10373] dump_stack_lvl+0x116/0x1f0 [ 452.736944][T10373] should_fail_ex+0x512/0x640 [ 452.736971][T10373] strncpy_from_user+0x3b/0x2e0 [ 452.736992][T10373] strncpy_from_user_nofault+0x7f/0x180 [ 452.737011][T10373] bpf_bprintf_prepare+0xe90/0x13f0 [ 452.737036][T10373] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 452.737060][T10373] ? bpf_trace_run2+0x3e1/0x590 [ 452.737074][T10373] bpf_trace_printk+0xda/0x190 [ 452.737086][T10373] ? __pfx_bpf_trace_printk+0x10/0x10 [ 452.737099][T10373] ? bpf_trace_run2+0x3e1/0x590 [ 452.737115][T10373] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 452.737126][T10373] bpf_trace_run2+0x236/0x590 [ 452.737140][T10373] ? __pfx_bpf_trace_run2+0x10/0x10 [ 452.737155][T10373] ? check_buffer+0x13f/0x980 [ 452.737176][T10373] __bpf_trace_contention_begin+0xc9/0x110 [ 452.737199][T10373] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 452.737220][T10373] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 452.737236][T10373] ? __pfx_trace_clock_local+0x10/0x10 [ 452.737253][T10373] trace_contention_begin.constprop.0+0xde/0x160 [ 452.737269][T10373] __pv_queued_spin_lock_slowpath+0x109/0xcf0 [ 452.737291][T10373] ? __lock_acquire+0xb97/0x1ce0 [ 452.737312][T10373] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 452.737334][T10373] ? do_raw_spin_lock+0x12c/0x2b0 [ 452.737350][T10373] do_raw_spin_lock+0x20e/0x2b0 [ 452.737364][T10373] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 452.737378][T10373] ? rcu_qs+0x2b/0xe0 [ 452.737394][T10373] ? rcu_note_context_switch+0x192/0x1e00 [ 452.737413][T10373] raw_spin_rq_lock_nested+0x7e/0x130 [ 452.737429][T10373] ? preempt_schedule_irq+0x51/0x90 [ 452.737448][T10373] __schedule+0x307/0x5de0 [ 452.737465][T10373] ? rb_read_data_buffer.constprop.0+0x107/0x430 [ 452.737486][T10373] ? write_comp_data+0x8b/0x90 [ 452.737498][T10373] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 452.737514][T10373] ? rb_read_data_buffer.constprop.0+0x18c/0x430 [ 452.737539][T10373] ? __pfx___schedule+0x10/0x10 [ 452.737556][T10373] ? __lock_acquire+0x62e/0x1ce0 [ 452.737578][T10373] ? mark_held_locks+0x49/0x80 [ 452.737599][T10373] preempt_schedule_irq+0x51/0x90 [ 452.737617][T10373] irqentry_exit+0x36/0x90 [ 452.737635][T10373] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 452.737650][T10373] RIP: 0010:stack_access_ok+0x0/0x200 [ 452.737666][T10373] Code: 20 ff ff ff 44 8b 85 30 ff ff ff e9 ba fe ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <48> b8 00 00 00 00 00 fc ff df 41 57 41 56 4c 8d 77 08 41 55 41 54 [ 452.737680][T10373] RSP: 0000:ffffc90004c1ee10 EFLAGS: 00000293 [ 452.737692][T10373] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff91df4068 [ 452.737700][T10373] RDX: 0000000000000008 RSI: ffffc90004c1f2e0 RDI: ffffc90004c1ee88 [ 452.737709][T10373] RBP: ffffc90004c1f2e0 R08: 0000000000000001 R09: 0000000000000000 [ 452.737718][T10373] R10: 0000000000000002 R11: 000000000009429f R12: ffffc90004c1eed8 [ 452.737726][T10373] R13: ffffc90004c1ee88 R14: ffffc90004c1f308 R15: ffffc90004c1eebc [ 452.737740][T10373] unwind_next_frame+0x15c5/0x20a0 [ 452.737755][T10373] ? ip6_route_add.part.0+0x22/0x1d0 [ 452.737777][T10373] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 452.737797][T10373] arch_stack_walk+0x94/0x100 [ 452.737814][T10373] ? ip6_route_add+0x45/0x60 [ 452.737833][T10373] ? fib6_info_alloc+0x40/0x160 [ 452.737847][T10373] stack_trace_save+0x8e/0xc0 [ 452.737864][T10373] ? __pfx_stack_trace_save+0x10/0x10 [ 452.737883][T10373] ? trace_event_buffer_commit+0x204/0xa50 [ 452.737902][T10373] kasan_save_stack+0x33/0x60 [ 452.737915][T10373] ? kasan_save_stack+0x33/0x60 [ 452.737927][T10373] ? kasan_save_track+0x14/0x30 [ 452.737939][T10373] ? __kasan_kmalloc+0xaa/0xb0 [ 452.737950][T10373] ? __kmalloc_noprof+0x223/0x510 [ 452.737963][T10373] ? fib6_info_alloc+0x40/0x160 [ 452.737976][T10373] ? ip6_route_info_create+0x14c/0x870 [ 452.737997][T10373] ? ip6_route_add.part.0+0x22/0x1d0 [ 452.738027][T10373] kasan_save_track+0x14/0x30 [ 452.738040][T10373] __kasan_kmalloc+0xaa/0xb0 [ 452.738052][T10373] __kmalloc_noprof+0x223/0x510 [ 452.738067][T10373] fib6_info_alloc+0x40/0x160 [ 452.738081][T10373] ip6_route_info_create+0x14c/0x870 [ 452.738102][T10373] ip6_route_add.part.0+0x22/0x1d0 [ 452.738122][T10373] ip6_route_add+0x45/0x60 [ 452.738142][T10373] addrconf_add_mroute+0x1dd/0x350 [ 452.738154][T10373] ? __pfx_addrconf_add_mroute+0x10/0x10 [ 452.738167][T10373] ? preempt_schedule_thunk+0x16/0x30 [ 452.738193][T10373] addrconf_add_dev+0x14e/0x1c0 [ 452.738207][T10373] inet6_addr_add+0xfe/0x960 [ 452.738225][T10373] inet6_rtm_newaddr+0x1619/0x1c70 [ 452.738243][T10373] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 452.738260][T10373] ? __lock_acquire+0x62e/0x1ce0 [ 452.738284][T10373] ? find_held_lock+0x2b/0x80 [ 452.738299][T10373] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 452.738316][T10373] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 452.738332][T10373] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 452.738354][T10373] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 452.738370][T10373] rtnetlink_rcv_msg+0x95b/0xe90 [ 452.738391][T10373] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 452.738414][T10373] ? ref_tracker_free+0x37c/0x830 [ 452.738427][T10373] netlink_rcv_skb+0x158/0x420 [ 452.738448][T10373] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 452.738469][T10373] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 452.738492][T10373] ? netlink_deliver_tap+0x1ae/0xd30 [ 452.738513][T10373] netlink_unicast+0x5a7/0x870 [ 452.738538][T10373] ? __pfx_netlink_unicast+0x10/0x10 [ 452.738558][T10373] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 452.738580][T10373] netlink_sendmsg+0x8d1/0xdd0 [ 452.738602][T10373] ? __pfx_netlink_sendmsg+0x10/0x10 [ 452.738625][T10373] ____sys_sendmsg+0xa95/0xc70 [ 452.738639][T10373] ? copy_msghdr_from_user+0x10a/0x160 [ 452.738658][T10373] ? __pfx_____sys_sendmsg+0x10/0x10 [ 452.738675][T10373] ___sys_sendmsg+0x134/0x1d0 [ 452.738694][T10373] ? __pfx____sys_sendmsg+0x10/0x10 [ 452.738720][T10373] ? __mutex_unlock_slowpath+0x80/0x800 [ 452.738742][T10373] __sys_sendmsg+0x16d/0x220 [ 452.738760][T10373] ? __pfx___sys_sendmsg+0x10/0x10 [ 452.738785][T10373] do_syscall_64+0xcd/0x4c0 [ 452.738806][T10373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.738819][T10373] RIP: 0033:0x7fbb6ff8eb69 [ 452.738830][T10373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 452.738842][T10373] RSP: 002b:00007fbb70db5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 452.738855][T10373] RAX: ffffffffffffffda RBX: 00007fbb701b5fa0 RCX: 00007fbb6ff8eb69 [ 452.738863][T10373] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 452.738872][T10373] RBP: 00007fbb70db5090 R08: 0000000000000000 R09: 0000000000000000 [ 452.738880][T10373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 452.738888][T10373] R13: 0000000000000000 R14: 00007fbb701b5fa0 R15: 00007fffc6a36eb8 [ 452.738900][T10373] [ 453.549959][ T43] usb 8-1: new full-speed USB device number 30 using dummy_hcd [ 453.701226][ T43] usb 8-1: config 0 has no interfaces? [ 453.708169][ T43] usb 8-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 453.717234][ T43] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 453.725394][ T43] usb 8-1: Product: syz [ 453.729552][ T43] usb 8-1: Manufacturer: syz [ 453.734180][ T43] usb 8-1: SerialNumber: syz [ 453.739740][ T43] usb 8-1: config 0 descriptor?? [ 453.909126][ T43] usb 8-1: USB disconnect, device number 30