last executing test programs:

15m56.250791885s ago: executing program 2 (id=3):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x101, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="020300020c000000000000000000000003000600000000000200000000000000000000000000000002000100000008000000000000000000030005000000000002000000ac1414aa00000000000000000200080010"], 0x60}, 0x1, 0x7}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9905}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x7fff}, @IFLA_GTP_FD0={0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x881}, 0x8000)
unshare(0x8040480)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="100000001b1401"], 0x10}}, 0x0)
r9 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_GET_MR(r9, 0x114, 0x2, 0x0, 0x0)

15m55.224762732s ago: executing program 2 (id=6):
r0 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x3, 0x0, 0x4}, &(0x7f0000001200)=<r1=>0x0, &(0x7f0000001040)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x1e, 0x0, 0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x8, 0x6}, 0x0, 0xffffffffffffff81, 0x0, 0x12345})
r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x707b, 0x100, 0x4, 0x288}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd_index=0x1, 0x8000, 0x0, 0x3, 0x1})
r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000000)={0x4d, 0x2, 0x1, "3258ae0bc770aa63f504080000000000000000000000000000000100", 0x20363059})
r7 = socket$inet6(0xa, 0x200000000003, 0x87)
r8 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x7e, 0x5, 0x7ffc0002}]})
chmod(0x0, 0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="65300000180000088c4bd059399f771713487d07e5441228997b2e15f343a7b11a3ceafdb1391712e344d8d04ccb36735f119f0cfb7f65780069ff88383657f0018b00"/83], &(0x7f0000000100)='GPL\x00', 0x0, 0x45, &(0x7f0000000200)=""/69, 0x41000, 0x28, '\x00', 0x0, 0x25, r8, 0x8, &(0x7f0000000300)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x461, 0xb, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r9, 0x0, 0x57, 0xb4, &(0x7f0000000580)="394b64e0ca8d9d6ecc6722dd40e67b9d989c7771d0973ecb30735ef57b1a6241fac78800187e4d2110a19636560a6e1db21314979b188f762ccd0989849cf270b329d4a70a3f99c61a20a8fcc66588ca2c139d38a7619e", &(0x7f0000000600)=""/180, 0xef, 0x0, 0x1, 0xf4, &(0x7f00000006c0)="03", &(0x7f0000000700)="648c3cdfeb1ce9be211ab92cebbc7cdda661c62315ce777ed46c520c4eb77072e098d5076678291a0e003e0993bf94f2ef3edee728f1faea47b6e193621ad5fb4c03fda6b2bceb05744dfcc928fa5e72e2ab606c1b596db1eea5039c12e71f184915a595263efd8e78b3d0b99a874e17d0a9e97cb01d8e6cf44ff80fa33e39ae3154a8b849adea4047a99d033f6474943526cd70c8a203c28a2ad64d73fc0f73b3bb0de237ce9469aaf478bcafc28a84669a2fd9caae9afce277d4fa31ec13c1c19d4c7ecbf1d01f6e28fd03e594b94f7be13593b30ade54b7d46e68d0536e7ba767e2bb61d623e46a4f14f22375f2db5b1b8b7c", 0x4, 0x0, 0x8}, 0x50)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r10 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r10, &(0x7f0000002700)=""/102392, 0x18ff8)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'})
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
syz_emit_ethernet(0x42, 0x0, 0x0)
close(0xffffffffffffffff)
kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0)
syz_io_uring_complete(r4)
io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0)

15m52.805795922s ago: executing program 2 (id=10):
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', <r0=>0x0})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000005c0)='bic\x00', 0x4)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x508, 0xd0, 0xd0, 0x390, 0x2b8, 0x460, 0x460, 0x460, 0x460, 0x460, 0x460, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [0xffffff00], [], 'nicvf0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@empty, 0x39, 0x16}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x0}}}, {{@ipv6={@mcast1, @loopback, [], [], 'batadv_slave_0\x00', 'ipvlan1\x00', {}, {}, 0x2}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'batadv0\x00', 'virt_wifi0\x00', {}, {0xff}}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568)
write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010300f0ffffd042000005000000438caa86987c3b6f1557bdb35a1ed0545b579f36e3c7ad7358402d31f7ae93d4cbad6421d5a70e000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0xa08, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x800)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000010c0)={'wpan1\x00'})
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_opts(r5, 0x29, 0x36, &(0x7f00000001c0)=ANY=[], 0x8)
bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r5, &(0x7f0000847fff)='X', 0x20000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001240), r4)
r7 = getpid()
sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000080)={'wpan1\x00', <r10=>0x0})
sendmsg$NL802154_CMD_SET_CHANNEL(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2c, r9, 0x1, 0x70bd2b, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x3}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x12}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0xc004)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x6c, r6, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x380000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x6c}, 0x1, 0x0, 0x0, 0x44}, 0x800)
sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x40000)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="6006000040000900ffffffff02dbdf250100000099001f00460601"], 0x660}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)

15m48.025729943s ago: executing program 2 (id=13):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000003bf07f0c51778ae244e560ffcb", @ANYRES32=r5], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r6}, 0x10)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r7 = getpid()
syz_pidfd_open(r7, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r8 = socket(0x10, 0x400000000080803, 0x0)
r9 = fcntl$dupfd(r8, 0x0, r8)
ioctl$sock_SIOCETHTOOL(r9, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x0, 0x5}})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r10=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r10, 0x0, 0x0, 0x0, <r11=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r11, r10, <r12=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r11, r12, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r13 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000200)={'veth1\x00'})

15m46.847321088s ago: executing program 2 (id=16):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)=ANY=[@ANYRESHEX=r0, @ANYBLOB='\x00'/20, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000e2ffff0000f600000000000000e0ff0000000000000000"], 0x50)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(r4, 0x4068aea3, &(0x7f0000000500)={0xc0, 0x0, 0x4000})
ioctl$KVM_RESET_DIRTY_RINGS(r4, 0xaec7)
sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r2, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b0000140007800800060000000000080005"], 0xac}}, 0x0)
sched_setscheduler(r0, 0x2, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f00000003c0)={0x1ff, {{0xa, 0x4e20, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}}}, 0x88)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180200000300000000000000000000008500000087000000850000000e0000009500000000009802009eb349579b0cebcca24e6356ee0000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb, @void, @value}, 0x94)
ioctl$KVM_CAP_XEN_HVM(r4, 0x4068aea3, &(0x7f0000000480)={0x26, 0x0, 0xc4})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
unshare(0x42000000)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0)
r9 = dup(r8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r9, 0x5dfa9000)
writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000001000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1)
ioctl$BLKROSET(r9, 0x125d, &(0x7f0000000000)=0x4)
ioctl$BLKRRPART(r9, 0x125f, 0x0)

15m31.253454354s ago: executing program 32 (id=16):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)=ANY=[@ANYRESHEX=r0, @ANYBLOB='\x00'/20, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000e2ffff0000f600000000000000e0ff0000000000000000"], 0x50)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(r4, 0x4068aea3, &(0x7f0000000500)={0xc0, 0x0, 0x4000})
ioctl$KVM_RESET_DIRTY_RINGS(r4, 0xaec7)
sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r2, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b0000140007800800060000000000080005"], 0xac}}, 0x0)
sched_setscheduler(r0, 0x2, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f00000003c0)={0x1ff, {{0xa, 0x4e20, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}}}, 0x88)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180200000300000000000000000000008500000087000000850000000e0000009500000000009802009eb349579b0cebcca24e6356ee0000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb, @void, @value}, 0x94)
ioctl$KVM_CAP_XEN_HVM(r4, 0x4068aea3, &(0x7f0000000480)={0x26, 0x0, 0xc4})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
unshare(0x42000000)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0)
r9 = dup(r8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r9, 0x5dfa9000)
writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000001000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1)
ioctl$BLKROSET(r9, 0x125d, &(0x7f0000000000)=0x4)
ioctl$BLKRRPART(r9, 0x125f, 0x0)

14m27.642094826s ago: executing program 5 (id=176):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
timer_create(0x0, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5fe31000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
timer_settime(0x0, 0x0, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x60042, 0x0)
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x801, 0x960, 0x190, 0x800, 0x100, 0xaf, 0x2, 0x1, {0x2, 0x1}, {0x7f, 0x5, 0x1000000}, {0xc13, 0xffff5cee, 0x1}, {0x8, 0x7fffffff}, 0x1, 0x150, 0xee4, 0x3, 0x3a2c7cd1feb8f820, 0x8, 0x200000, 0x864, 0x143, 0x8, 0x3, 0x2, 0x0, 0x303, 0x1, 0xb})

14m24.898177418s ago: executing program 5 (id=183):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000003bf07f0c51778ae244e560ffcb", @ANYRES32=r5, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r6}, 0x10)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r7 = getpid()
syz_pidfd_open(r7, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r8 = socket(0x10, 0x400000000080803, 0x0)
r9 = fcntl$dupfd(r8, 0x0, r8)
ioctl$sock_SIOCETHTOOL(r9, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x0, 0x5}})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r10=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r10, 0x0, 0x0, 0x0, <r11=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r11, r10, <r12=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r11, r12, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r13 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000200)={'veth1\x00'})

14m23.076544695s ago: executing program 5 (id=185):
r0 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400})
sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="0208000002"], 0x10}}, 0x0)

14m21.54805499s ago: executing program 5 (id=188):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000003bf07f0c51778ae244e560ffcb", @ANYRES32=r5, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r6}, 0x10)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r7 = getpid()
syz_pidfd_open(r7, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r8 = socket(0x10, 0x400000000080803, 0x0)
r9 = fcntl$dupfd(r8, 0x0, r8)
ioctl$sock_SIOCETHTOOL(r9, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x0, 0x5}})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r10=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r10, 0x0, 0x0, 0x0, <r11=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r11, r10, <r12=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r11, r12, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r13 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000200)={'veth1\x00'})

14m20.338955277s ago: executing program 5 (id=191):
socket$inet_smc(0x2b, 0x1, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_mptcp_buf(r0, 0x11c, 0x1, 0x0, &(0x7f00000000c0))
sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0000001400110500000000000000002b00000000009eede71200"/56, @ANYBLOB='\x00'/16], 0x4c}}, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000031c0)={'bond_slave_0\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x8c8a42, 0x0)
write$cgroup_int(r5, &(0x7f00000005c0)=0x7f, 0x12)
mount(&(0x7f0000000240), &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r8}, 0x10)
getrusage(0x0, &(0x7f00000004c0))
sendmmsg$inet6(r1, &(0x7f00000036c0), 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)

14m18.595697381s ago: executing program 5 (id=192):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)=ANY=[@ANYRESHEX=r0, @ANYBLOB='\x00'/20, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000e2ffff0000f600000000000000e0ff0000000000000000"], 0x50)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(r4, 0x4068aea3, &(0x7f0000000500)={0xc0, 0x0, 0x4000})
ioctl$KVM_RESET_DIRTY_RINGS(r4, 0xaec7)
sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r2, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b0000140007800800060000000000080005"], 0xac}}, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x1)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f00000003c0)={0x1ff, {{0xa, 0x4e20, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}}}, 0x88)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb, @void, @value}, 0x94)
ioctl$KVM_CAP_XEN_HVM(r4, 0x4068aea3, &(0x7f0000000480)={0x26, 0x0, 0xc4})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
unshare(0x42000000)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0)
r9 = dup(r8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r9, 0x5dfa9000)
writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000001000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1)
ioctl$BLKROSET(r9, 0x125d, &(0x7f0000000000)=0x4)
ioctl$BLKRRPART(r9, 0x125f, 0x0)

14m3.325120075s ago: executing program 33 (id=192):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)=ANY=[@ANYRESHEX=r0, @ANYBLOB='\x00'/20, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000e2ffff0000f600000000000000e0ff0000000000000000"], 0x50)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(r4, 0x4068aea3, &(0x7f0000000500)={0xc0, 0x0, 0x4000})
ioctl$KVM_RESET_DIRTY_RINGS(r4, 0xaec7)
sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r2, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b0000140007800800060000000000080005"], 0xac}}, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x1)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f00000003c0)={0x1ff, {{0xa, 0x4e20, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}}}, 0x88)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb, @void, @value}, 0x94)
ioctl$KVM_CAP_XEN_HVM(r4, 0x4068aea3, &(0x7f0000000480)={0x26, 0x0, 0xc4})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
unshare(0x42000000)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0)
r9 = dup(r8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r9, 0x5dfa9000)
writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000001000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1)
ioctl$BLKROSET(r9, 0x125d, &(0x7f0000000000)=0x4)
ioctl$BLKRRPART(r9, 0x125f, 0x0)

2m48.710436112s ago: executing program 1 (id=1890):
syslog(0x2, 0xfffffffffffffffc, 0x39)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), r0)
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fcdbdf25070000000c0006000100000001000000b73d566955d908000300", @ANYRES32, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0xc010}, 0x8000)

2m48.548476619s ago: executing program 1 (id=1895):
r0 = syz_open_procfs(0x0, 0x0)
fchdir(r0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000380)='stack\x00')
pread64(r1, &(0x7f0000000880)=""/4119, 0x1017, 0x0) (fail_nth: 4)

2m47.125326928s ago: executing program 1 (id=1899):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='rxrpc_recvmsg\x00', r0}, 0x10)
r1 = socket(0x21, 0x2, 0x2)
connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x100, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24)
sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="ad733642561534f14257b6c5820fae9d", 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "561667c1e6f16ba3", "604c958a718b7d18bacbc947611fedd8", "288268f6", "ebde5ea8e3d95516"}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0700000004000000000100000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="40000000050000000000000000000000000000000004000000000000"], 0x50)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_PIT2(r5, 0x4070aea0, &(0x7f00000002c0)={[{0x5, 0x90ea, 0xa, 0x5, 0x1, 0x4, 0xf, 0xc, 0x9, 0x2, 0x0, 0x0, 0x8}, {0x3, 0x7, 0x0, 0x1, 0x80, 0xc2, 0x1, 0x8, 0x9, 0x4, 0x6, 0xf7, 0x2}, {0xff, 0x5, 0x2, 0x3, 0xe, 0x27, 0x5, 0x0, 0x1, 0x8e, 0x6, 0x9}], 0xfffffffa})
r6 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x80000)
r7 = fcntl$getown(r5, 0x9)
fstat(r2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
ioctl$DRM_IOCTL_GET_CLIENT(r6, 0xc0286405, &(0x7f0000000280)={0xffffffff, 0x9, {r7}, {r8}, 0xffffffffffff0000, 0xa0e1})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fec000/0x11000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000000180)="89839cedb14652ac1b2701550516f3eb13f4ec8c327a46ff21a33f9bde6377ecdcb3356d4b2d0fa74711b51bb30f53c1c3e8e6f17970c4defe9ba70e1d18727e121bf748d7d55014ed2b2f6cef5563ffc75a4a5defe02f8d35d406b837b71928c33a6476a08075ae8fc2c0e251fb0ee1e19ce6011b", 0x75, r5}, 0x68)
sendmmsg(r4, &(0x7f0000000000), 0x400000000000235, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

2m46.0848797s ago: executing program 1 (id=1901):
r0 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fcntl$notify(r0, 0x402, 0x0)
r1 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, 0x0, 0x0)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f00009f0000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x20010, r2, 0x5bda7000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f0000004f40)=[{{0x0, 0x0, &(0x7f00000050c0)=[{&(0x7f00000002c0)=""/144, 0x90}], 0x1, &(0x7f0000000380)=""/188, 0xbc}, 0x2}, {{&(0x7f0000000440)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000c00)=[{&(0x7f00000004c0)=""/184, 0xb8}, {&(0x7f0000000580)=""/242, 0xf2}, {&(0x7f0000000680)=""/205, 0xcd}, {&(0x7f0000000780)=""/78, 0x4e}, {&(0x7f0000000800)=""/70, 0x46}, {&(0x7f0000000880)=""/233, 0xe9}, {&(0x7f0000000980)=""/120, 0x78}, {&(0x7f0000000a00)=""/187, 0xbb}, {&(0x7f0000000ac0)=""/113, 0x71}, {&(0x7f0000000b40)=""/165, 0xa5}], 0xa, &(0x7f0000000cc0)=""/1, 0x1}, 0xf307}, {{&(0x7f0000000d00)=@hci, 0x80, &(0x7f0000001200)=[{&(0x7f0000000d80)=""/43, 0x2b}, {&(0x7f0000000dc0)=""/159, 0x9f}, {&(0x7f0000000e80)=""/196, 0xc4}, {&(0x7f0000000f80)=""/120, 0x78}, {&(0x7f0000001000)=""/169, 0xa9}, {&(0x7f00000010c0)=""/94, 0x5e}, {&(0x7f0000001140)=""/148, 0x94}], 0x7, &(0x7f0000001280)=""/103, 0x67}, 0x9}, {{&(0x7f0000001300)=@generic, 0x80, &(0x7f0000003600)=[{&(0x7f0000001380)=""/221, 0xdd}, {&(0x7f0000001480)=""/112, 0x70}, {&(0x7f0000001500)=""/86, 0x56}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/100, 0x64}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x6, &(0x7f0000003680)=""/247, 0xf7}, 0x4}, {{&(0x7f0000003780)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000003900)=[{&(0x7f0000003800)=""/245, 0x125}], 0x1, &(0x7f0000003940)=""/254, 0xfe}, 0x3}, {{&(0x7f0000003a40)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000004e00)=[{&(0x7f0000003ac0)=""/4096, 0x1000}, {&(0x7f0000004ac0)=""/180, 0xb4}, {&(0x7f0000004b80)=""/7, 0x7}, {&(0x7f0000005900)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/136, 0x88}, {&(0x7f0000006900)=""/4096, 0x1000}, {&(0x7f0000004c80)=""/179, 0xb3}, {&(0x7f0000004d40)=""/130, 0x82}], 0x8, &(0x7f0000004e80)=""/131, 0x83}, 0x38}], 0x6, 0x2, 0x0)
fallocate(0xffffffffffffffff, 0x3, 0x0, 0x404042bbe)
socket$inet_mptcp(0x2, 0x1, 0x106)
r6 = userfaultfd(0x801)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298})
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x0, 0x2})
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000)
connect$netrom(r2, &(0x7f00000000c0)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000000))
sendto$netrom(r2, 0x0, 0x0, 0x0, &(0x7f0000000240)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
syz_emit_ethernet(0x22, &(0x7f0000000180)=ANY=[@ANYRESOCT=r5], 0x0)

2m44.845954666s ago: executing program 1 (id=1905):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0)
epoll_create1(0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0)
syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xc12, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
sendmsg$key(0xffffffffffffffff, 0x0, 0x4814)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8)
r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)

2m42.892532951s ago: executing program 1 (id=1911):
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000003c0), 0x88743, 0x0)
ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000001400)={0x20, 0x2, 0x0, 0x100000000, 0x1})
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44010}, 0x0)
listen(r1, 0x0)
r5 = accept4(r1, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=unix'])
setreuid(0xee01, 0x0)
setreuid(0xee01, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}}, 0x0)
r7 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil)
shmat(r7, &(0x7f00003e8000/0x1000)=nil, 0x4000)
getsockopt$IP_VS_SO_GET_SERVICE(r5, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000180)=0x68)

2m27.41066459s ago: executing program 34 (id=1911):
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000003c0), 0x88743, 0x0)
ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000001400)={0x20, 0x2, 0x0, 0x100000000, 0x1})
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44010}, 0x0)
listen(r1, 0x0)
r5 = accept4(r1, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=unix'])
setreuid(0xee01, 0x0)
setreuid(0xee01, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}}, 0x0)
r7 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil)
shmat(r7, &(0x7f00003e8000/0x1000)=nil, 0x4000)
getsockopt$IP_VS_SO_GET_SERVICE(r5, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000180)=0x68)

1m48.560740065s ago: executing program 6 (id=2065):
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtaction={0x10c, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0xf8, 0x1, [@m_gact={0xf4, 0x4, 0x0, 0x0, {{0x9}, {0x88, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x40, 0x1, 0x5, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x10001, 0xe, 0x10000000, 0xe0, 0xffffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x2, 0xfffff801, 0x5, 0x6, 0xfff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x94, 0x20000000, 0x8, 0xd6}}, @TCA_GACT_PARMS={0x18, 0x2, {0xc, 0x3, 0x10000000, 0x7fff, 0x8001}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x208c, 0x10000000}}]}, {0x41, 0x6, "826059595f7af913e9536058d1a9e7d89e47f3840ecf3d5f81843768289e9b76794f72afce0512314b735959797c38c2ced6e63a245363c8cd76a2cbc4"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x10c}}, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f00000000c0), 0x12)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r2 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0)
syz_clone3(&(0x7f0000000300)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r4 = gettid()
sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0xffffffff80000000)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x38}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0)
r7 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0xba9, &(0x7f0000000300)={&(0x7f0000000900)=@newtaction={0x48, 0x31, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0)
sendmsg$xdp(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="4d660e03df0a913b24e7a1fd62229aee88baee5c5891c1cd065a9c1e94fcd4447312c691fba05f6506ac54d5c7ce72a142aabb85369314b880003d09e98be89fbf1705527635887f2133e3859c0d9e333fb1d8400931462d3f8c5daddd2f1b857b7abcc177a823ea7e3b99585f118056942034ef7608a2e1cfa05f6009c99689e098985b55", 0x85}, {&(0x7f0000000140)="8bdad4ade821777fc482d42f0d682ac36def918e79fbaa63311a9b328f133ec0ee2c55ab1d946252f5a7e0b82da9f44502d6844df0b7320dee27e128f1a5126fc662ef937ffe2e1223aec82d945c2c5cec5fafd4d1d03ae60b63246715631ce251b09b035e240d09fe541655e08b9765bea78b7346cb8f4a0d2d3c737f81cab0c44061c1e8dc79201a19bc674a0a3be1b4de20c6645c2d9f8a962a15b91f2e51816164bc304f35e750d4cd820b791f845a467db7c688", 0xb6}, {&(0x7f0000000340)="567aeafce477cf819eea218db6623502b2b54d3a2cf77f9d315fb7aa4bc369029da539ff45c9e23ca0f3e5405b", 0x2d}, {&(0x7f0000000980)}, {&(0x7f00000003c0)="4ce941cbbd4a68ad8ec6a66e24d92b6ed9ca6b6ae435c37394abce430bffd5db9d6b403910e62ab6c48c084bdf86814dc1ac1a2650c71d7d65a5975bca3950036adb330d70b8352bcc552d978d3830dba083e7486b7c974f0128236c6b5cb5b12c3d2cc756a4a5e1b46388833782f42388cca4e568671e28f3dffed07276f79ec221082a4f76f4fd62d0705cd1ab8edf272ddfc32b9bcc1237a437427d6d03d8db5f35a6b886029642d99ea939cb7f3689b47ba88fa8ea10befb072b6ba5cec9f4bfa084ecac590f44a83d2549ce51d63ad3775157488bdb2453e5faa76fd607a0916925b945a582b4af", 0xea}], 0x5, 0x0, 0x0, 0x800}, 0x10040840)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)

1m48.19590902s ago: executing program 6 (id=2067):
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0xc0089364, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
fcntl$lock(r1, 0x6, 0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00'}, 0x18)
r5 = syz_init_net_socket$llc(0x1a, 0x802, 0x0)
bind$llc(r5, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x9, 0x0, 0x8}, 0x10)
close(r5)

1m29.903544239s ago: executing program 6 (id=2067):
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0xc0089364, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
fcntl$lock(r1, 0x6, 0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00'}, 0x18)
r5 = syz_init_net_socket$llc(0x1a, 0x802, 0x0)
bind$llc(r5, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x9, 0x0, 0x8}, 0x10)
close(r5)

59.130999136s ago: executing program 6 (id=2067):
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0xc0089364, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
fcntl$lock(r1, 0x6, 0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00'}, 0x18)
r5 = syz_init_net_socket$llc(0x1a, 0x802, 0x0)
bind$llc(r5, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x9, 0x0, 0x8}, 0x10)
close(r5)

32.877176681s ago: executing program 6 (id=2067):
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0xc0089364, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
fcntl$lock(r1, 0x6, 0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00'}, 0x18)
r5 = syz_init_net_socket$llc(0x1a, 0x802, 0x0)
bind$llc(r5, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x9, 0x0, 0x8}, 0x10)
close(r5)

10.851387642s ago: executing program 7 (id=2310):
r0 = socket$inet(0x2, 0x2, 0x1)
setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f00000000c0)=0xabb3, 0x4)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000200)="08001efbb07d586e", 0x8}], 0x1, 0x0, 0x0, 0x60000000}, 0x4008000)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x6, &(0x7f00000001c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x14)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r1, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000780)=[0x0, 0x0], 0x0, 0xd3, 0x0, 0x0, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x21, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, 0x0, 0x15)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x400000000000000, 0x0, 0x0}, 0x0)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f00000000c0)={0x48})
fcntl$lock(0xffffffffffffffff, 0x7, 0x0)
prctl$PR_SET_SECCOMP(0x3a, 0x1, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000180)={0x28, 0x4, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7})
ioctl$IOMMU_IOAS_UNMAP$ALL(r5, 0x3b86, 0x0)
r6 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x5412, &(0x7f0000000640)=0x13)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0xff)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040))
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x42a100, 0x0)

9.583219687s ago: executing program 3 (id=2313):
r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, 0x0, 0xc8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000200), 0x0)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, 0x0, 0x0)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x20, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100"], 0x16)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0)
ioctl$IOMMU_GET_HW_INFO(r7, 0x3b8a, &(0x7f0000000180)={0x28, 0x0, 0x0, 0x0, 0x0})
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000000)=0x2, 0x4)
close_range(r0, 0xffffffffffffffff, 0x0)

8.743220158s ago: executing program 3 (id=2314):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48)
r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setlease(r1, 0x400, 0x0)
fcntl$setown(r1, 0x8, 0x0)
fcntl$setlease(r1, 0x400, 0x2)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, <r2=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r2, <r4=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0x19, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)

8.713561428s ago: executing program 6 (id=2067):
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0xc0089364, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
fcntl$lock(r1, 0x6, 0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00'}, 0x18)
r5 = syz_init_net_socket$llc(0x1a, 0x802, 0x0)
bind$llc(r5, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x9, 0x0, 0x8}, 0x10)
close(r5)

7.728954285s ago: executing program 7 (id=2316):
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = io_uring_setup(0x67bb, &(0x7f00000000c0)={0x0, 0x0, 0x80})
mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x5)
r4 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000002c0)=0xe)
write$binfmt_format(r4, &(0x7f00000003c0)='1\x00', 0x2)
fcntl$setpipe(r4, 0x407, 0x9)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000640)='\n', 0x1}], 0x1, 0x1)
poll(&(0x7f0000000240)=[{r3}], 0x1, 0xffffffff)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x34c, 0x18c, 0x2b8, 0x182, 0x18c, 0x0, 0x284, 0x3a8, 0x3a8, 0x284, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x164, 0x18c, 0x0, {0x0, 0xe0ffff00000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "83f0a574725c23587dcfbd695650fe91ad9f7783f34f23315a573f167f755eaff4d665d219fa653cdfd7ee1092b07e243bd3e81b17fa1a6a18d79ae45b76f817515ec14cdf53d785cfe1d638f578cf51801a954830bfb97c4595e7b07b7147a846d1a230f2e1053fd68b5c45f2847c271539bdbd0f149a701a72fc1f87ab788a"}}]}, @common=@inet=@SET1={0x28}}, {{@uncond, 0x0, 0xc8, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3a8)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000034000180060001000a00000008000500000000000c00070000000000000000000800090064000000090006006e6f6e650000a3da0ae8d6e4edc7c17dd96861976dac8daaf450b885c3b09d84fee749a40f8a83e55ca7a3190506d90ba478719dc91ee42515becd4a10531798956b11114e577d33d94d20611b1145301c4b606758ca472a83911c261093b68bc79a9db3403585ed0b07e8b0f17b83fce6cb15d793b4729e43e5bcc3c83951b382d8862b75ae3188cc75d92427609a"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@ipv6_deladdrlabel={0x1b, 0x49, 0xa7d426cd0c3a1c83, 0x70bd25, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0x0, 0x3}, [@IFAL_LABEL={0x8, 0x2, 0x4}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000}, 0x8804)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x940c, 0x3002, 0x210, 0x2c0, 0x320, 0x3d8, 0x3d8, 0x320, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x210, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@ecn={{0x28}, {0x10, 0x2, 0x7, 0x3}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450)
r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r8 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r8, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x5}, 0x1c)
syz_emit_ethernet(0x83, &(0x7f0000000080)=ANY=[@ANYRES32=r7], 0x0)
r9 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r9)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
setsockopt$inet6_tcp_int(r7, 0x6, 0x22, &(0x7f0000000300)=0x240, 0x4)
mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0)
unshare(0x22020600)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)

7.727127563s ago: executing program 3 (id=2317):
syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x3, 0x0, 0x4}, &(0x7f0000001200)=<r0=>0x0, &(0x7f0000001040)=<r1=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, 0x0, 0x0, 0x4)
syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x1e, 0x0, 0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x8, 0x6}, 0x0, 0xffffffffffffff81, 0x0, 0x12345})
r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x707b, 0x100, 0x4, 0x288}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd_index=0x1, 0x8000, 0x0, 0x3, 0x1})
r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000000)={0x4d, 0x2, 0x1, "3258ae0bc770aa63f504080000000000000000000000000000000100", 0x20363059})
r6 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)})
chmod(0x0, 0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="65300000180000088c4bd059399f771713487d07e5441228997b2e15f343a7b11a3ceafdb1391712e344d8d04ccb36735f119f0cfb7f65780069ff88383657f0018b00"/83], &(0x7f0000000100)='GPL\x00', 0x0, 0x45, &(0x7f0000000200)=""/69, 0x41000, 0x28, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x0, 0x461, 0xb, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r7, 0x0, 0x57, 0xb4, &(0x7f0000000580)="394b64e0ca8d9d6ecc6722dd40e67b9d989c7771d0973ecb30735ef57b1a6241fac78800187e4d2110a19636560a6e1db21314979b188f762ccd0989849cf270b329d4a70a3f99c61a20a8fcc66588ca2c139d38a7619e", &(0x7f0000000600)=""/180, 0xef, 0x0, 0x1, 0xf4, &(0x7f00000006c0)="03", &(0x7f0000000700)="648c3cdfeb1ce9be211ab92cebbc7cdda661c62315ce777ed46c520c4eb77072e098d5076678291a0e003e0993bf94f2ef3edee728f1faea47b6e193621ad5fb4c03fda6b2bceb05744dfcc928fa5e72e2ab606c1b596db1eea5039c12e71f184915a595263efd8e78b3d0b99a874e17d0a9e97cb01d8e6cf44ff80fa33e39ae3154a8b849adea4047a99d033f6474943526cd70c8a203c28a2ad64d73fc0f73b3bb0de237ce9469aaf478bcafc28a84669a2fd9caae9afce277d4fa31ec13c1c19d4c7ecbf1d01f6e28fd03e594b94f7be13593b30ade54b7d46e68d0536e7ba767e2bb61d623e46a4f14f22375f2db5b1b8b7c", 0x4, 0x0, 0x8}, 0x50)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r8, &(0x7f0000002700)=""/102392, 0x18ff8)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'})
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0)
syz_emit_ethernet(0x42, 0x0, 0x0)
kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0)
syz_io_uring_complete(r3)
io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0)

6.774224947s ago: executing program 7 (id=2319):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000f20000000800006da8d01d50a6260b70", @ANYRES32=0x1, @ANYBLOB='\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet_smc(0x2b, 0x1, 0x0)
socket$packet(0x11, 0x3, 0x300)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r2], 0x3c}}, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[@ANYBLOB="e10931d8640a00000000000086dd600141000010880020010000000000000000000000000000fe8000000000000000000000000000aa000000000007"], 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000)
socket(0xa, 0x6, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d0000000014000280080001000400000008000200020000000a0002"], 0x5c}}, 0x0)
r5 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r5, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000b000000010000000100009300000000"], 0x0, 0x3b, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28)
syz_io_uring_setup(0x126b, 0x0, &(0x7f0000000140), &(0x7f0000000780))
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0xff, 0x1, 0x100, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x49)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
io_setup(0x7ff, &(0x7f0000000140)=<r7=>0x0)
socketpair(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff})
io_submit(r7, 0x1, &(0x7f00000014c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}])
close_range(r6, 0xffffffffffffffff, 0x0)

6.596619778s ago: executing program 3 (id=2320):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc69", 0x13}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0xc0)
sendto$inet(r0, &(0x7f0000001340)="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", 0x50b, 0x20000000, 0x0, 0x0)

6.281601867s ago: executing program 7 (id=2321):
syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x3, 0x0, 0x4}, &(0x7f0000001200)=<r0=>0x0, &(0x7f0000001040)=<r1=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, 0x0, 0x0, 0x4)
syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x1e, 0x0, 0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x8, 0x6}, 0x0, 0xffffffffffffff81, 0x0, 0x12345})
r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x707b, 0x100, 0x4, 0x288}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd_index=0x1, 0x8000, 0x0, 0x3, 0x1})
r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000000)={0x4d, 0x2, 0x1, "3258ae0bc770aa63f504080000000000000000000000000000000100", 0x20363059})
r6 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)})
chmod(0x0, 0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="65300000180000088c4bd059399f771713487d07e5441228997b2e15f343a7b11a3ceafdb1391712e344d8d04ccb36735f119f0cfb7f65780069ff88383657f0018b00"/83], &(0x7f0000000100)='GPL\x00', 0x0, 0x45, &(0x7f0000000200)=""/69, 0x41000, 0x28, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x0, 0x461, 0xb, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r7, 0x0, 0x57, 0xb4, &(0x7f0000000580)="394b64e0ca8d9d6ecc6722dd40e67b9d989c7771d0973ecb30735ef57b1a6241fac78800187e4d2110a19636560a6e1db21314979b188f762ccd0989849cf270b329d4a70a3f99c61a20a8fcc66588ca2c139d38a7619e", &(0x7f0000000600)=""/180, 0xef, 0x0, 0x1, 0xf4, &(0x7f00000006c0)="03", &(0x7f0000000700)="648c3cdfeb1ce9be211ab92cebbc7cdda661c62315ce777ed46c520c4eb77072e098d5076678291a0e003e0993bf94f2ef3edee728f1faea47b6e193621ad5fb4c03fda6b2bceb05744dfcc928fa5e72e2ab606c1b596db1eea5039c12e71f184915a595263efd8e78b3d0b99a874e17d0a9e97cb01d8e6cf44ff80fa33e39ae3154a8b849adea4047a99d033f6474943526cd70c8a203c28a2ad64d73fc0f73b3bb0de237ce9469aaf478bcafc28a84669a2fd9caae9afce277d4fa31ec13c1c19d4c7ecbf1d01f6e28fd03e594b94f7be13593b30ade54b7d46e68d0536e7ba767e2bb61d623e46a4f14f22375f2db5b1b8b7c", 0x4, 0x0, 0x8}, 0x50)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r8, &(0x7f0000002700)=""/102392, 0x18ff8)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'})
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0)
syz_emit_ethernet(0x42, 0x0, 0x0)
kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0)
syz_io_uring_complete(r3)
io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0)

6.172692693s ago: executing program 0 (id=2322):
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x2)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000006c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000840)=""/206, 0xce, 0x0, &(0x7f00000005c0)=""/246, 0xf6}, &(0x7f0000000700)=0x40)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000440))
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000200)=""/148, 0x0})
r2 = dup(r1)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000780)={0xac, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000094}, 0x4000)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmsg$alg(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0, 0x400a095}, 0x8050)
readv(r5, &(0x7f00000006c0)=[{&(0x7f0000000300)=""/109, 0x6d}], 0x1)
sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x54, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffd}]}, @TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4040010)
socket$inet6_sctp(0xa, 0x5, 0x84)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0x4, @empty, 0xd1}]}, &(0x7f0000000180)=0x10)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000740), r7)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r9=>0x0}, &(0x7f0000000200)=0xfffffffffffffeb8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000000c0)={r9, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e21, 0x49b, @loopback}, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e23, @multicast2}], 0x4c)

5.665452843s ago: executing program 3 (id=2323):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
getpid()
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x4, 0x0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
socket$netlink(0x10, 0x3, 0xb)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r3], 0x50}, 0x1, 0xba01}, 0x0)
ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x5501, 0x0)
r4 = socket(0x10, 0x3, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
write(r4, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) (fail_nth: 8)

5.120493528s ago: executing program 0 (id=2324):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='rxrpc_local\x00'}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105511, &(0x7f00000000c0)={{0xc, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0xc1, 0x7ffc, 0x0, 0x9, 0x100000000, 0x0, 0x4, 0x8, 0x0, 0x0, 0x7f, 0x3cb7, 0x0, 0x8000000, 0x0, 0x8, 0x2000000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffe, 0x100000000, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0xd69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000009, 0x1, 0x0, 0x0, 0x1, 0xffffffff, 0x0, 0x80000, 0x200000000000000, 0x0, 0x23, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xdf9cd90, 0x8000000, 0x6, 0x2, 0x0, 0x0, 0x0, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7ffffffd, 0x0, 0x0, 0xffffffffffff2328, 0xffffffffffffffff, 0x3, 0x0, 0xd, 0x0, 0xc87, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x200000, 0x0, 0x3ff, 0x1, 0x7, 0x0, 0x3df2, 0x0, 0x0, 0x0, 0x0, 0x800]})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00')
fchdir(r4)
sendmmsg$unix(r3, &(0x7f0000000d40)=[{{&(0x7f0000000080)=@abs={0x1, 0x30, 0x30}, 0x6e, 0x0}}], 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$int_in(r7, 0x5452, &(0x7f0000000180)=0x48000)
splice(r5, 0x0, r8, 0x0, 0x7, 0x0)
close(r7)
writev(r6, &(0x7f0000000100)=[{&(0x7f0000000140)='Y', 0x1}], 0x1)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r9, 0x10e, 0x2, &(0x7f00000005c0)=0x1e, 0x4)

3.811420482s ago: executing program 0 (id=2326):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={<r0=>0xffffffffffffffff}) (async)
prlimit64(0x0, 0xe, 0x0, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000740)={0x3, 0x0, 0x0, 0x0, 0xfffffff9}) (async)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async)
r3 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000fee000)=0x3fa, 0x4)
listen(r3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r0], 0xe8}}, 0x0)
r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xcb)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2) (async)
getsockopt$ax25_int(r5, 0x101, 0xc, 0x0, 0x0) (async)
socketpair(0x21, 0x4, 0x80, &(0x7f00000000c0)={<r6=>0xffffffffffffffff})
sendmsg$inet6(r6, 0x0, 0x24000010) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x38}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

3.73098857s ago: executing program 4 (id=2327):
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
openat$qrtrtun(0xffffff9c, &(0x7f0000000080), 0x80002)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
dup(r0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r2=>0x0], 0x40000012})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1000000, 0x1, &(0x7f0000000340)=[r2], &(0x7f0000000280)=[0x1], &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x7f})

3.666816853s ago: executing program 3 (id=2328):
openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = open(&(0x7f0000000580)='.\x00', 0x0, 0xd0)
fcntl$notify(r1, 0x402, 0x4)
mkdir(&(0x7f0000000400)='./file1\x00', 0x300)

3.660197667s ago: executing program 7 (id=2329):
openat$uinput(0xffffffffffffff9c, &(0x7f0000000480), 0x800, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
socket(0x15, 0x5, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f00003b1000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f0000007ac0)=[{{&(0x7f00000002c0)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/106, 0x6a}, {&(0x7f00000001c0)=""/49, 0x31}], 0x2, &(0x7f00000004c0)=""/132, 0x84}, 0x857}, {{&(0x7f0000000580)=@hci, 0x80, &(0x7f0000000900)=[{&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000340)=""/5, 0x5}, {&(0x7f00000006c0)=""/67, 0x43}, {&(0x7f0000000740)=""/212, 0xd4}, {&(0x7f0000000840)=""/144, 0x90}, {&(0x7f00000009c0)=""/136, 0x88}, {&(0x7f0000000a80)=""/226, 0xe2}, {&(0x7f0000000b80)=""/4096, 0x1000}], 0x8, &(0x7f0000001b80)=""/117, 0x75}, 0x1}, {{&(0x7f0000001c00)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000001c80)=""/237, 0xed}, {&(0x7f0000001d80)=""/92, 0x5c}, {&(0x7f0000001e00)=""/134, 0x86}, {&(0x7f0000001ec0)=""/103, 0x67}, {&(0x7f0000001f40)=""/174, 0xae}, {&(0x7f0000002000)=""/246, 0xf6}, {&(0x7f0000000440)=""/12, 0xc}, {&(0x7f0000002100)=""/189, 0xbd}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x9, &(0x7f0000006000)=""/63, 0x3f}, 0x5}, {{0x0, 0x0, &(0x7f0000003580)=[{&(0x7f00000032c0)=""/181, 0xb5}, {&(0x7f0000003380)=""/19, 0x13}, {&(0x7f00000033c0)=""/141, 0x8d}, {&(0x7f0000003480)=""/228, 0xe4}], 0x4, &(0x7f00000035c0)=""/124, 0x7c}, 0xffff}, {{&(0x7f0000003640)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000004780)}}, {{&(0x7f00000047c0)=@x25={0x9, @remote}, 0x80, &(0x7f0000005bc0), 0x0, &(0x7f0000005c80)=""/168, 0xa8}, 0x37}, {{&(0x7f0000005d40)=@nfc, 0x80, &(0x7f0000005e80)=[{&(0x7f0000005dc0)=""/157, 0x9d}], 0x1, &(0x7f0000005ec0)=""/147, 0x93}, 0x7fffffff}, {{&(0x7f0000005f80)=@qipcrtr, 0x80, &(0x7f00000062c0)=[{&(0x7f0000006000)}, {&(0x7f0000006040)=""/232, 0xe8}, {&(0x7f0000006140)=""/55, 0x37}, {&(0x7f0000006180)=""/62, 0x3e}, {&(0x7f00000061c0)=""/71, 0x47}, {&(0x7f0000006240)=""/102, 0x66}], 0x6, &(0x7f0000006340)=""/4096, 0x1000}, 0x3e}, {{&(0x7f0000007340)=@nfc, 0x80, &(0x7f0000007440)=[{&(0x7f00000073c0)=""/115, 0x73}], 0x1, &(0x7f0000007940)=""/233, 0xe9}, 0x4}, {{&(0x7f0000007580)=@l2, 0x80, &(0x7f0000007a40)=[{&(0x7f0000007600)=""/18, 0x12}, {&(0x7f0000007640)=""/200, 0xc8}, {&(0x7f0000007740)=""/203, 0xcb}, {&(0x7f0000007840)=""/199, 0xc7}, {&(0x7f0000007d40)=""/203, 0xcb}], 0x5}, 0x5}], 0xa, 0x2, 0x0)
setitimer(0x2, 0x0, 0x0)
ioprio_get$uid(0x0, 0x0)
r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080211000000040000a118000200e000000e00000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
ioctl$KVM_CAP_PMU_CAPABILITY(r5, 0x4068aea3, 0x0)
r7 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000980)=ANY=[@ANYBLOB='-piTr '], 0x6)
unshare(0x2040600)
r8 = fsopen(&(0x7f0000000040)='ocfs2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0)
unshare(0x2000400)
bind$pptp(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[], 0x0)

3.488731458s ago: executing program 4 (id=2330):
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x4, 0x2c00000000000000, 0xb, 0x6a})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f00000000c0)={0x0, 0x1, 0xffffff45, 0x0, 0x8, 0x8fc0, 0x65f40})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x5})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @rand_addr=0x64010100}}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0)
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000240)={0x400, 0x30, 0xf0, 0x30, 0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x0, 0xfffffffc}, {0x6}, 0x0, 0x40, 0x0, 0x7, 0x0, 0x5, 0x0, 0x1, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x5})
r5 = fcntl$dupfd(r2, 0x406, r1)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xa8a, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r5}, 0xfffffffffffffd51)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3ff}, [@call={0x85, 0x0, 0x0, 0x20}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @loopback}}}, &(0x7f00000003c0)=0x84)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='rpcb_setport\x00', r5, 0x0, 0xfffffffffffffc00}, 0x18)
r9 = userfaultfd(0x0)
ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000000))
r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
io_setup(0x8, &(0x7f00000002c0)=<r11=>0x0)
io_submit(r11, 0x1, &(0x7f0000000440)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x6ee, r10, &(0x7f0000000000)='kZ', 0x2, 0x2}])
ioctl$KVM_RUN(r3, 0xae80, 0x0)

2.810072693s ago: executing program 0 (id=2331):
mount$cgroup(0x0, &(0x7f0000000600)='.\x00', 0x0, 0x2208000, &(0x7f0000000100)={[{@name={'name', 0x3d, 'qt-,\xac\xa7@\xef\xac\r\xbd\xe6\xec\xa64\x10*o\xe4\xc2\xd2\xa3\x02h\xd3\xee\xbao\xfe\x17\xfc\x0f\xedU\x7f\xdc\x005\x1f\xaaAa\x19V\xc6Ks9\xe6\xa8\xbc\x97\xe6\x1d,\xc4\x16\x8b[h~\t\x04\xdb\xe8\x14\x81\xae\x04\x9fX\xf0`W\x01\xd8\xb4Q\xc9\x96R\xd0\xcf\x85\xcfX\x9d\xdd\x89>Y\x8a\x95\xd7\xde@0R[\xd5'}}]})
r0 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0xf1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x1, 0x34f}, &(0x7f00000000c0)=<r4=>0x0, &(0x7f0000000340)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x42, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, {0x2}})
io_uring_enter(r3, 0x47bc, 0x2, 0x0, 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xdddd1000, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0xd000, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfe, 0x0, 0x4}, {0xdddd0000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x6, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x80}, {0xf000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x3000, 0x0, 0x0, 0x1, 0x1, 0x83, 0xa, 0x26, 0x5}, {0x80a0000}, {0xdddd1000, 0xff}, 0xddf8ffdb, 0x0, 0x0, 0x70, 0xfffffffffffffffe, 0xd801, 0x0, [0xfffffffffffffffd, 0x0, 0x1]})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_TRANSLATE(r7, 0xc018ae85, 0x0)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x980914, 0x3})
socket$inet6_sctp(0xa, 0x5, 0x84)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x804, 0x6, 0xfffa}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xfffffffe, 0xfffffffe, 0x1f461e2c, 0x3, 0xe661, 0x4, 0x1000007, 0x800003, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0xa, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x6c9, 0xff, 0xfffffffe, 0x3, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x80, 0x5, 0x400, 0x801, 0x6, 0x400001, 0xff, 0x1005, 0x7ff, 0x4f31, 0x4, 0xffffffff, 0x6, 0x1000004, 0x9, 0x4, 0x9, 0xfffffff7, 0x9, 0x7, 0x5, 0x0, 0x3, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x9, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x9, 0x2, 0x60002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x2, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x8, 0x4, 0x54fe12da, 0xbf, 0x5, 0x101, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0x6, 0x55bf, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x6, 0x7fff, 0x8ffff, 0xa61c, 0x2, 0x5, 0x1, 0xfffffff8, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000003, 0x5, 0x8, 0xff, 0x103, 0x3, 0xffff, 0xffffffff, 0x8, 0x100, 0x9602, 0xa, 0xffff7fff, 0x4, 0x6, 0x1, 0x10002, 0x3, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c0b, 0x0, 0x1, 0x5, 0xb1c, 0x1, 0x200, 0xfff, 0xffffffff]}, 0x45c)
socket$inet6(0xa, 0x1, 0x0)
syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xc8c7}, &(0x7f0000000340), &(0x7f00000002c0))

1.19830658s ago: executing program 0 (id=2332):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000f20000000800006da8d01d50a6260b70", @ANYRES32=0x1, @ANYBLOB='\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet_smc(0x2b, 0x1, 0x0)
socket$packet(0x11, 0x3, 0x300)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r2], 0x3c}}, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[@ANYBLOB="e10931d8640a00000000000086dd600141000010880020010000000000000000000000000000fe8000000000000000000000000000aa000000000007"], 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000)
socket(0xa, 0x6, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d0000000014000280080001000400000008000200020000000a0002"], 0x5c}}, 0x0)
r5 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r5, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000b000000010000000100009300000000"], 0x0, 0x3b, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28)
syz_io_uring_setup(0x126b, 0x0, &(0x7f0000000140), &(0x7f0000000780))
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0xff, 0x1, 0x100, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x49)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
io_setup(0x7ff, &(0x7f0000000140)=<r6=>0x0)
socketpair(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff})
io_submit(r6, 0x1, &(0x7f00000014c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}])

1.0890805s ago: executing program 4 (id=2333):
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r0, 0x402, 0x80000034)
write$cgroup_pressure(r0, &(0x7f0000000140)={'full', 0x20, 0x3, 0x20, 0x9}, 0x2f)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0x4)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2})
r3 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x220})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f0000000600)=""/52, 0x0, 0x1000})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x25, &(0x7f0000000600), 0x4)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000500))
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1)

992.641413ms ago: executing program 4 (id=2334):
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2, 0xb, 0x6})
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmsg(r2, &(0x7f0000000cc0)={&(0x7f0000000640)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000006c0)=""/175, 0xaf}, {&(0x7f0000000780)=""/30, 0x1e}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/90, 0x5a}, {&(0x7f0000000940)=""/51, 0x33}, {&(0x7f0000000980)=""/18, 0x12}, {&(0x7f00000009c0)=""/100, 0x64}, {&(0x7f0000000a40)=""/92, 0x5c}, {&(0x7f0000000ac0)=""/146, 0x92}], 0x9, &(0x7f0000000c40)=""/105, 0x69}, 0x40000123)
r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8169, 0x6, 0x0, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000440)={0xde, 0x1ff, 0xf})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r6)
sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, r7, 0x301, 0x0, 0x25dfdbfc, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x15, 0x1, 0x3})
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r6)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'sit0\x00', <r9=>0x0, 0x7800, 0x8000, 0x9, 0x40, {{0xe, 0x4, 0x2, 0x8, 0x38, 0x67, 0x0, 0x5, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@rr={0x7, 0xb, 0x4f, [@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4}, @end, @ra={0x94, 0x4}, @ssrr={0x89, 0xf, 0xd7, [@multicast2, @remote, @broadcast]}]}}}}})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@empty, @loopback, <r10=>0x0}, &(0x7f00000003c0)=0xc)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000480)={@multicast1, @multicast1, <r11=>0x0}, &(0x7f0000000500)=0xc)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r6, &(0x7f0000000600)={&(0x7f0000000000), 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x68, r8, 0x8, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}]}, 0x68}}, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)={r5})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000004c0)={0x49, 0x7fff, 0x4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x4, 0xd8, 0x8})
r12 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r8, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8881}, 0x40000)
close_range(r0, r12, 0x0)

823.188215ms ago: executing program 4 (id=2335):
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300), 0x680340, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040))
add_key$fscrypt_provisioning(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, &(0x7f00000009c0)=ANY=[@ANYBLOB="010000"], 0x48, 0xfffffffffffffffe)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
keyctl$clear(0x3, 0xfffffffffffffffd)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x303}, "0d3fb1252ae0536a", "1ee09d57791dfad6fd4d920da1c3641f", "d1f83d98", "6c3152ef765092f2"}, 0x28)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x40010, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQES(&(0x7f000041c000/0x2000)=nil, 0x2000, 0x2000000, 0x1010, 0xffffffffffffffff, 0x10000000)
clock_gettime(0x0, &(0x7f0000000100))
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfffffffc, 0x0, 0x0, 0x7}, &(0x7f00000007c0), &(0x7f0000000800))
socket$key(0xf, 0x3, 0x2)

344.703116ms ago: executing program 4 (id=2336):
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
io_submit(0x0, 0x0, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x82101, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb)
r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095000000aedcdf26d8b75bc5f600000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @void, @value}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, <r1=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)='%pS    \x00'}, 0x20)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000240)={'syztnl1\x00', <r2=>0x0, 0x2f, 0x0, 0x3, 0xd2, 0x7, @local, @mcast2, 0x8, 0x8, 0x5, 0x8}})
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e0000000800000007000000f9ffffff80400400", @ANYRES32=r1, @ANYBLOB="000000010000000000000000000000000000417b36a5fd656af30000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0300000000000000010000000300"/28], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)="b9", &(0x7f0000000ec0)="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", 0x402, r4}, 0x38)
bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000000)={0x0, &(0x7f00000004c0)=""/233, &(0x7f00000001c0), &(0x7f0000000240), 0x6, r4}, 0x38)
r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1b1c, 0xc10, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x6, [{{0x9, 0x4, 0x0, 0x10, 0x5, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x16, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
msgget$private(0x0, 0x790)
syz_usb_control_io$hid(r5, &(0x7f00000002c0)={0x24, &(0x7f0000000100)={0x0, 0xa, 0x39, {0x39, 0x4, "c999afd7d8416ea43a691794178eb1a1e3698f38a0f74b970431193074bf82aa38aa0fd1995224d25e360600cda19fe2cb8d89d1c078ab"}}, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x6, {[@global=@item_012={0x0, 0x1, 0x9}, @local=@item_4={0x3, 0x2, 0x9, "39d1ae70"}]}}, 0x0}, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0505510, &(0x7f0000000080))
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
writev(r6, &(0x7f0000019880)=[{0x0}], 0x1)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x8031, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

15.933608ms ago: executing program 7 (id=2337):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='rxrpc_local\x00'}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105511, &(0x7f00000000c0)={{0xc, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0xc1, 0x7ffc, 0x0, 0x9, 0x100000000, 0x0, 0x4, 0x8, 0x0, 0x0, 0x7f, 0x3cb7, 0x0, 0x8000000, 0x0, 0x8, 0x2000000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffe, 0x100000000, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0xd69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000009, 0x1, 0x0, 0x0, 0x1, 0xffffffff, 0x0, 0x80000, 0x200000000000000, 0x0, 0x23, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xdf9cd90, 0x8000000, 0x6, 0x2, 0x0, 0x0, 0x0, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7ffffffd, 0x0, 0x0, 0xffffffffffff2328, 0xffffffffffffffff, 0x3, 0x0, 0xd, 0x0, 0xc87, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x200000, 0x0, 0x3ff, 0x1, 0x7, 0x0, 0x3df2, 0x0, 0x0, 0x0, 0x0, 0x800]})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00')
fchdir(r4)
sendmmsg$unix(r3, &(0x7f0000000d40)=[{{&(0x7f0000000080)=@abs={0x1, 0x30, 0x30}, 0x6e, 0x0}}], 0x1, 0x0)

0s ago: executing program 0 (id=2338):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000009380)=@newtaction={0x5cc8, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0xc0, 0x1, [@m_ct={0x74, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x34, 0x6, "1e321c30b204224e7467c3f28e213f02c35704aba340b5fcab19973e40b0c48bad6d8dbc00191f1af517fa8602b28a31"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x6}}}]}, {0x4}, {0xc}, {0xc}}}]}, {0x5b98, 0x1, [@m_pedit={0x58ec, 0x3, 0x0, 0x0, {{0xa}, {0x48c0, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x5, 0x3, 0xffffffffeffffff7, 0xf62, 0x2}, 0x0, 0x9, [{0x6, 0x80000000, 0x6, 0x5, 0x0, 0x3}]}, [{0x7, 0x67, 0xca96, 0x7, 0x5}, {0x4, 0x6, 0x2, 0x8, 0x7be, 0x3}, {0x6, 0x67d, 0x4, 0xd24, 0x91d, 0x1}, {0xc73, 0xfffffff8, 0x479bd111, 0x6, 0xf50b, 0x3ff}, {0x0, 0x4, 0x1ff, 0x0, 0x10000, 0xf9eb}, {0x400, 0x7fff, 0x1ff, 0x5, 0x40, 0x3}, {0xffff8001, 0x3, 0x9, 0xd, 0x124, 0x66a}, {0x9, 0x4, 0x2, 0xab, 0x4, 0x2}, {0x7ff, 0x9, 0x9, 0x101, 0x7, 0xbbea}, {0x7ff, 0xc693, 0x800, 0x100, 0x8000, 0x5}, {0x0, 0x9, 0x1, 0xfffffff8, 0x101, 0x7ff}, {0x1, 0x6, 0x7c0, 0x2, 0x2, 0xffffffff}, {0x8, 0x9, 0x1, 0x7, 0x4, 0x6}, {0x4, 0x80000000, 0x6, 0x400, 0x7, 0x9ff}, {0x9, 0x81, 0x70, 0x40, 0xc, 0x3ff}, {0xffff, 0xf19, 0x7, 0x3, 0x5, 0x7}, {0x2, 0x9, 0x9, 0x2, 0x5, 0x9}, {0x3, 0x98, 0x8001, 0x142c, 0x5, 0xc71}, {0x2, 0x6, 0xd82d, 0x2d0, 0x6, 0x3}, {0x7fff, 0x664, 0x0, 0x9, 0xdd6, 0x401}, {0xb2, 0x5, 0x1000000, 0x4, 0xc, 0x5}, {0x9, 0x7, 0xe, 0x3, 0x1, 0x3}, {0x6, 0x7, 0x200, 0x77bf, 0x5, 0x3}, {0x0, 0x6, 0x3f, 0xe, 0x8, 0x2}, {0x5, 0x3, 0xad, 0xc43c, 0x5, 0xa375}, {0x40, 0x3, 0x7, 0xc, 0x6, 0x7}, {0x0, 0x21d910b, 0x5, 0xd5ed, 0xffff, 0x9}, {0x3, 0x4, 0x8080, 0x6, 0x6b2, 0x2}, {0x200, 0x7fffffff, 0x1, 0x4, 0x3, 0x1}, {0x686, 0x8, 0xc, 0x6, 0x9, 0x4}, {0x9, 0x3, 0x0, 0x1, 0xa, 0xb}, {0x1, 0xba67, 0x3ff, 0x0, 0x5, 0x7fffffff}, {0x9, 0x6, 0x7, 0x40, 0xfffffeff, 0x6}, {0x3e6, 0x1, 0x8, 0x5, 0x2, 0x7}, {0x7, 0xfffffffd, 0x4, 0xd6ba, 0x3, 0x8}, {0x4, 0x8, 0x2706, 0x6f, 0x8, 0xffff8000}, {0x8000, 0x61, 0x80, 0x9, 0x5, 0x36}, {0x6, 0x9, 0x342, 0x7, 0x3eef, 0x6c2}, {0x6, 0xfff, 0x8, 0x52, 0x2, 0x91}, {0x0, 0xbee3, 0x7, 0x2, 0x1ff, 0x1}, {0x9, 0x5, 0x7ff, 0x0, 0x36d7, 0x9}, {0x7, 0xfffffff7, 0x1, 0x32dc, 0x9, 0x1}, {0x8001, 0x6, 0x8, 0x2, 0x5b57, 0x8}, {0x11, 0xfffff8ff, 0x7, 0x7ff, 0x2, 0x817}, {0xa3800000, 0x2, 0x4, 0x1, 0x0, 0x3}, {0x4, 0x1, 0x5, 0x2, 0x5, 0x2}, {0xe, 0x7d, 0xcd3, 0x3, 0x4, 0x1}, {0x3, 0x1ff, 0xfffffffc, 0x2, 0x4, 0x5}, {0x1, 0x7fff, 0x0, 0x2, 0x1, 0x7}, {0x3, 0x80000001, 0x8, 0x80000000, 0x4, 0xfffffff8}, {0x24, 0x2, 0x0, 0x81, 0x1}, {0x200, 0x7ff, 0xfff, 0x3ff, 0x1, 0x4}, {0x80000001, 0x0, 0x5, 0x4, 0x0, 0xff}, {0x0, 0x5, 0x4, 0x5, 0x780}, {0x2, 0x0, 0x3, 0x8, 0x7f, 0x8000}, {0x10, 0x1, 0x1, 0x7, 0xffffffff, 0x476}, {0x4, 0xc, 0x5, 0x1, 0x6, 0x8}, {0x3, 0x9, 0x81, 0x2, 0x6, 0x4}, {0x9, 0xfffff768, 0x6, 0x4, 0x6, 0x8}, {0x200, 0x5, 0x8, 0x9, 0x1, 0x602}, {0x5, 0x101, 0xf77, 0x4aa, 0x40, 0x7ff}, {0xb3, 0x10000, 0xfffffffa, 0x0, 0xff, 0x9}, {0x0, 0x7, 0xccf, 0x3, 0xaf95, 0x6}, {0x6, 0x55ae, 0xd24, 0x2, 0x9, 0x2}, {0x7, 0x800, 0xf47, 0x2, 0x1, 0x29ba}, {0x3, 0xffffffff, 0x2, 0xb, 0x9, 0xc}, {0x78, 0x716, 0x1, 0x1, 0x7, 0xfffffffb}, {0x10001, 0xb8, 0x3, 0xbdae, 0x6, 0x8d6}, {0x5, 0x2, 0x9, 0x200, 0x40, 0x6}, {0x4, 0x870, 0x4, 0x3, 0x8, 0x3}, {0x5, 0x0, 0x7, 0x2, 0x6f54, 0x3}, {0x6, 0x40, 0x0, 0x3, 0x5, 0x7fff}, {0x4, 0x6, 0xffffffff, 0x415f, 0x3b5, 0x1000}, {0x4, 0x5, 0xfe45, 0x2, 0xba, 0x8}, {0x1, 0x5, 0xfffffffc, 0x6, 0xf, 0x1ff}, {0x2, 0xffffffe7, 0x5, 0x60ef3299, 0x94, 0x400}, {0x9, 0xfffffffe, 0x9, 0x9, 0xfffffff9, 0x5}, {0x10000, 0x4, 0x5, 0x1, 0x8001, 0x100}, {0xff, 0xd1f, 0x81, 0x3, 0x6, 0x3}, {0xffff, 0xc, 0x3, 0x0, 0x7, 0x4}, {0x800, 0x4c, 0x3, 0x400, 0x9, 0x10000000}, {0x7, 0x4, 0x7, 0x1, 0x9, 0x6}, {0x3, 0x3, 0x3, 0x5, 0x401, 0xb5b}, {0xf, 0xffff36c1, 0x1f, 0xc000000, 0x3, 0x4076}, {0x45, 0x8, 0x2, 0x9, 0x3}, {0x0, 0x9, 0x4cda, 0x9, 0xa9, 0x10001}, {0x0, 0x4, 0x9, 0x8, 0x8, 0x9}, {0x1, 0x2, 0xa, 0xb, 0x46, 0x2}, {0x8, 0x40, 0x1, 0xff, 0x7ff, 0x5b5a000}, {0x1, 0x0, 0x7fffffff, 0x6, 0x3, 0x9}, {0x1ff, 0x6, 0x7, 0x6, 0x81}, {0x400, 0xd, 0xfffffff9, 0x4c3, 0x2, 0x7}, {0x1, 0x3, 0x2, 0x80, 0x6, 0x9}, {0x40, 0xb, 0x2, 0x4, 0x9, 0x3}, {0x0, 0x80, 0x0, 0xf03a, 0x16, 0xffffff01}, {0x8, 0x6, 0x7, 0x3, 0x7f, 0x10}, {0x1, 0x10000, 0x80000001, 0x2, 0x0, 0xde}, {0x5, 0x8000, 0x8d, 0x9, 0x4, 0xf5}, {0x5, 0x4, 0xf, 0x5, 0x0, 0x401}, {0x7, 0x3ff, 0x4, 0x8001, 0x0, 0x8000}, {0x7, 0x3, 0x85b, 0xfffffff8, 0x9, 0x5e}, {0x3, 0x1779, 0x4, 0x3, 0xffffffff, 0x7}, {0x6, 0x0, 0x1, 0xbf9, 0x401, 0x9}, {0x6, 0x1, 0x7f, 0x80000000, 0x0, 0x2}, {0x9, 0x3, 0x80, 0x5, 0x8, 0xbf8}, {0x8, 0x1, 0xd, 0x4, 0x8, 0x7}, {0x326, 0x6, 0x4, 0x3, 0x0, 0x2}, {0x513, 0xcc2f, 0x8bd, 0x2, 0xb40, 0x1}, {0xfffffffe, 0x4, 0x5, 0x1000, 0x9, 0x3}, {0x86, 0x2, 0x1, 0xffff5470, 0xfffffffd, 0x4}, {0x21b, 0x64b, 0x6, 0x8, 0x1, 0x7}, {0xff, 0x1, 0x6, 0x9, 0x5, 0xc7b}, {0x5, 0xf096, 0x9, 0x85, 0x5, 0x6}, {0x200, 0x1, 0x1, 0x1, 0xd, 0x6}, {0x6e7f, 0x0, 0x6, 0x800, 0x8, 0x67f4}, {0x101, 0x7f, 0x6, 0x7, 0xaa, 0x1}, {0x6, 0x8000, 0x0, 0x1, 0x1, 0x400}, {0x9, 0x9, 0x5, 0x1, 0x1, 0x9}, {0x0, 0x6, 0x7, 0x8, 0x1ff, 0x1}, {0x7, 0x3, 0x8, 0xffffffff, 0x8, 0x3}, {0xfffffffd, 0x4, 0x2, 0x9fb2, 0x7f, 0x10}, {0x1, 0x0, 0x1, 0x2, 0x4}, {0x8, 0x6, 0x6, 0x8, 0x5, 0xfffffffd}, {0x4, 0x3, 0x6, 0x9, 0xfff, 0x1200000}, {0xba3, 0x5, 0x12, 0x2, 0xfd6, 0x5}, {0x3ec, 0x2, 0x0, 0x30f, 0x1, 0x91a6}, {0x34, 0x8, 0xfffffff7, 0x80, 0x0, 0x7}, {0x4, 0xc0, 0x401, 0x4, 0x4, 0x4}], [{0x1}, {0x1}, {0x5}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x5}, {0x1}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x1}, {0x7, 0x82ae689e15298014}, {0x5}, {0x3, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1}, {}, {0x1}, {0x4}, {0x5, 0x1}, {0x1}, {0x5}, {}, {0x4}, {0x4, 0x1}, {0x2, 0x5b894310b11c5ebc}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x58f824b32683c9c8}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x4}, {0x5, 0x1}, {0x5}, {}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x2}, {0x4}, {0x5}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0xa1f27a8d01e0ac2b}, {}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x4}, {0x3}, {0x3, 0x1}, {0x1, 0x1}]}}, @TCA_PEDIT_PARMS_EX={0xe50, 0x4, {{{0x6, 0xffffffff, 0x5, 0xf811, 0xf6}, 0x1, 0xa1, [{0x401, 0xc6, 0x63dfa915, 0x2, 0x939, 0xda96}, {0x2b70, 0x4, 0x3, 0x9, 0x8, 0x1}]}, [{0x8, 0xc2, 0x5, 0x40000000, 0x3, 0x81}, {0x4, 0xc, 0x9, 0xff, 0x4, 0x9}, {0x59bd, 0x7fffffff, 0x9, 0x1, 0xfffffff7, 0x6}, {0x9, 0x4, 0x8001, 0x1ff, 0x9}, {0x2, 0x6, 0x7879, 0x200, 0x40, 0xf4}, {0x499f, 0x5, 0x2, 0xba, 0x8001, 0x8}, {0x101, 0x1, 0x2, 0x3, 0x400, 0x8}, {0x6, 0x40, 0x40, 0xc, 0x6e0, 0x6}, {0x6, 0xf1e, 0x7, 0x5, 0x10001, 0xae}, {0xc44, 0x5, 0x3, 0x0, 0x400, 0x7}, {0x0, 0xd, 0x800, 0x7, 0x4, 0x71d}, {0xfffffff7, 0xed, 0x1, 0x80000001, 0xfffff040, 0x100}, {0x3ff, 0xed, 0x3, 0x28ea, 0x1, 0x101}, {0x0, 0xf7, 0xe, 0x4, 0xf18, 0x9}, {0x401, 0x5, 0x2, 0x40000000, 0x200, 0xc}, {0x5, 0x1, 0x8, 0x7fdb, 0x1, 0x6}, {0x10001, 0xa, 0x9, 0x3, 0x5, 0x1}, {0x7, 0x9, 0x4f3b, 0x9, 0x0, 0x7}, {0x8, 0x2, 0x800, 0x7ff, 0xd, 0x800}, {0xb9, 0x6, 0xffffffff, 0x7fffffff, 0xffffa0ed, 0x8}, {0x2, 0x0, 0x8001, 0x0, 0x4, 0x6}, {0x6, 0x3, 0x9, 0x4, 0x6, 0x9}, {0x10000, 0x6, 0xd, 0xc050, 0x4, 0x10}, {0x1ff, 0x2, 0x5, 0x7, 0x401, 0x2}, {0xffff0000, 0x1000, 0x0, 0x9, 0x1, 0x1}, {0x7, 0x4, 0x8, 0xfa800000, 0x10, 0x2}, {0x1, 0x7, 0x1, 0x4, 0xf8, 0xc70}, {0x4, 0x6, 0x8, 0x1, 0x1, 0x80000001}, {0x3, 0x1, 0x7, 0xa8, 0xff, 0x3}, {0x5, 0x15, 0x80000000, 0x4, 0x1b, 0x1}, {0x10, 0x8, 0x6, 0x0, 0x8, 0x101}, {0x0, 0x1, 0x3, 0x400, 0x2, 0x40}, {0x7, 0x3, 0x1, 0x1, 0x7, 0x1}, {0x6, 0x80, 0x8, 0x731c3f00, 0x3, 0x7}, {0x6, 0x0, 0x5, 0x7, 0xb, 0xec3}, {0x3, 0x4, 0x2, 0x7, 0x1e52, 0x4}, {0x93, 0x500b, 0x5, 0x3, 0x7, 0xbe}, {0x1, 0x3, 0xf, 0x2, 0x48, 0x80000000}, {0x3, 0x401, 0xae, 0x101, 0x7, 0x164f}, {0xe27, 0x4, 0x7, 0x7, 0x1, 0x9}, {0x1, 0xb8, 0x2, 0x1, 0x8001, 0x7f7}, {0x9, 0x7, 0xa02, 0x10000, 0x5, 0xf}, {0xfffffff7, 0xd5, 0x9, 0x4, 0x18d, 0x24}, {0x3271, 0x4, 0x2, 0x40000000, 0x4, 0x7}, {0x7f, 0x1, 0xa7ad, 0x6, 0x0, 0x2}, {0x4, 0x1, 0x57, 0x5, 0x8, 0x1ff}, {0x0, 0x40, 0x9, 0x80, 0x4, 0x4}, {0x2, 0x1, 0x7fff, 0x4, 0x7fffffff, 0x69a}, {0x3, 0xffffffff, 0x8, 0xf52e, 0x15c, 0x4}, {0x1ff, 0x4, 0x7, 0x5, 0x1, 0x401}, {0x4, 0x6, 0x1, 0x1000, 0x9, 0x3}, {0x7, 0x7, 0x2, 0x4, 0x2, 0x8}, {0x8, 0x101, 0x9, 0x2, 0xe, 0x10001}, {0x4, 0x9, 0x1750b0a2, 0x0, 0x3, 0x40}, {0x8, 0x3, 0x3, 0x9, 0x5, 0x7fffffff}, {0x2, 0xa, 0x2, 0x8000, 0x7ff, 0x9}, {0x5a, 0x800, 0x81, 0x2, 0xd3, 0x4}, {0x0, 0xfffffffc, 0x401, 0x7, 0x516, 0xdb}, {0x5f700, 0x90, 0x7f, 0x37c, 0xe8c, 0xfffffffa}, {0x800, 0x5, 0x8, 0xfffffffb, 0xfffff164, 0x8}, {0xe, 0x2, 0x8, 0x8, 0x0, 0x1}, {0x5, 0x9, 0x7, 0x7, 0x7fff, 0x9}, {0xfff, 0x6000000, 0x2, 0x9, 0x4, 0x8}, {0x1, 0x10001, 0x0, 0x5, 0x8}, {0x80, 0x8, 0x5c0c, 0xc1e, 0x0, 0x10000}, {0x10, 0x3, 0x81, 0x1, 0x1, 0x4}, {0x5, 0x10, 0x9, 0xffffffff, 0x2, 0xff}, {0x13, 0x3, 0xb, 0xe8, 0x0, 0xf}, {0x9, 0xb, 0x1, 0xffff, 0x2, 0x3}, {0x5, 0x2, 0xfffff409, 0x5, 0x5, 0x2}, {0x400, 0x4, 0x6, 0x6, 0x0, 0x9}, {0xffffffff, 0x800, 0xffffffff, 0x6, 0x1, 0xfffffff4}, {0x66, 0xffff, 0x81, 0x9, 0x4}, {0x6, 0x1, 0x8, 0x2, 0x7fff, 0x7}, {0x80000000, 0x3, 0x6, 0x3, 0x8, 0x3}, {0x7fffffff, 0x7fffffff, 0x8, 0x7, 0x9, 0x1961}, {0x6, 0x8, 0x2, 0x2, 0x8001, 0x7f}, {0x8001, 0x2, 0x80, 0xd, 0x8, 0x2839997b}, {0x9, 0x1, 0x5880, 0x200, 0x5, 0x1}, {0xf4, 0x1, 0x1, 0x8, 0x4, 0x7}, {0x1ff, 0x6, 0x4, 0x6, 0x9bd, 0x9}, {0x6, 0x9, 0x80000001, 0x5, 0xbf, 0x1}, {0x7, 0x7ff, 0x2, 0x7, 0x7, 0x4}, {0x8, 0x4, 0x3, 0x6, 0x8b, 0x2}, {0xf4, 0xb, 0x949, 0x3417d38d, 0xfffffff9, 0x8}, {0x4, 0x642, 0xd, 0x1, 0x38c, 0x17140000}, {0x80, 0x8, 0x7, 0x0, 0xa, 0x9}, {0x6, 0x6, 0x1, 0x1, 0x0, 0x7}, {0x34000000, 0x3, 0x5, 0xfffffffe, 0xc, 0x80000001}, {0x4, 0x5, 0x6, 0xffff, 0x10, 0x3}, {0x1000, 0xfffffffd, 0x3, 0x7, 0x8, 0x2}, {0x0, 0x0, 0x401, 0x3, 0x5, 0x80000000}, {0x9, 0x1, 0xffffffff, 0x4, 0x4a8, 0x5dce}, {0x2, 0x7, 0xfffffffb, 0xacfa, 0xbf, 0x6}, {0x67d, 0x3, 0x6, 0x4, 0x3, 0x2d}, {0x0, 0x593e, 0xa13, 0x100, 0xff, 0x8001}, {0x3, 0x3ff, 0x1, 0x6057, 0x7, 0x8}, {0xfff, 0x1, 0xffff, 0x9, 0x0, 0x8}, {0x80000001, 0x88a, 0x3ff, 0x7, 0x8, 0x10001}, {0x8, 0x9, 0x2, 0x9, 0x9, 0xb}, {0xd66, 0xfb, 0x4, 0x3, 0x2, 0x67}, {0x1, 0x7, 0x2, 0x7, 0x8, 0x3}, {0x5, 0x0, 0x3, 0x1000000, 0x8, 0x7}, {0x7a3, 0x892c, 0x4, 0x75ee, 0x7, 0x31}, {0x0, 0xfffffff7, 0x3, 0x1, 0x101, 0x8}, {0x3, 0x8, 0x6, 0x7, 0x6, 0x8000}, {0x7, 0x5, 0x2, 0xa6b, 0x1ff, 0xfffeffff}, {0x7, 0x6, 0x4, 0x7, 0x6, 0x80000000}, {0x8, 0xffffb3bb, 0x4, 0x3, 0x4}, {0x2, 0x3, 0x9e, 0x7, 0x7fff, 0xfffffffe}, {0x3fd0, 0x81, 0xacf, 0x80000000, 0x2, 0x5}, {0x8, 0x8, 0x400, 0x10, 0x7fff, 0x7}, {0x400, 0x9, 0x0, 0x1, 0x4, 0xd}, {0x4, 0x2, 0xa, 0x6, 0x40e3, 0x7}, {0xfffffffe, 0x4, 0x6, 0x2, 0x7, 0x8}, {0xa1, 0x9, 0x7, 0x5, 0x5, 0x4}, {0x80, 0x81, 0x8, 0xf, 0xfffff000, 0x3ff}, {0x2, 0x7, 0x2, 0x8, 0x6, 0x4684}, {0x0, 0x5, 0x8b2, 0x4b2e0000, 0x4, 0x4}, {0x6d93, 0x8001, 0x800, 0x1c000000, 0x1000, 0x1}, {0x3, 0x2, 0x4, 0x0, 0x2, 0xe7d}, {0x1a0, 0x2, 0x4, 0x0, 0x3, 0xfcaa}, {0x1000, 0xc9, 0x0, 0x1, 0x10000, 0x6}, {0x3, 0x9, 0x4, 0x3, 0x9, 0x36e5}, {0x1, 0x8001, 0x4, 0x8e, 0x6, 0xe}, {0x63, 0x4, 0x3, 0x3f7c, 0x2, 0x8}, {0x8, 0x56, 0x42, 0x1, 0x7fff, 0x4}, {0xffff44fb, 0xfffffff7, 0x6, 0x101, 0x4, 0x86d9}], [{0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x3}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0xf}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x6}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x3}, {0x2}, {0x5}, {0x5}, {0x5, 0x1}, {0x4}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x7d93b8d010c6bbcc}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0x3}, {0x3}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {}, {0x0, 0x1}, {}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0xa8a5368413da3438}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x5, 0x531f324672bbefca}, {0xfc6d678e772b184b}, {0x1, 0x1}, {}, {0x7, 0x1}, {0x4}, {}, {0x0, 0x1}, {0xfe4f5e26221a715b}, {0x3}, {}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {}, {}, {0x1}, {0x1}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x2}, {0x2}, {0x4}, {0x1}, {0x5, 0x1}, {0x2}, {0x2}, {0x4}, {0x5, 0x1}, {0x3}, {}, {0x1}, {}, {0x5, 0x1}, {0x2}, {0x1}, {0x2}, {0x5}, {0x4, 0x1}, {0x4}, {}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x5}, {0x2, 0x1}, {}, {0x2, 0x1}]}}, @TCA_PEDIT_PARMS_EX={0xe68, 0x4, {{{0x79a, 0x4, 0x1, 0x7, 0x1}, 0x4, 0x8, [{0x3, 0x1ff, 0x4, 0x8, 0x0, 0x80000001}, {0x80000000, 0xc, 0x7, 0x0, 0x4, 0x7}, {0x200, 0x6, 0x7, 0x1, 0x3ff, 0xbf}]}, [{0x7fffffff, 0x9, 0xd, 0x1000, 0x6, 0x7}, {0x7, 0x8, 0x8, 0xe, 0xbc56, 0x3}, {0x7fff, 0x5, 0x8, 0x5, 0x7, 0x9}, {0x4, 0xffff7b8d, 0x2, 0x7, 0x5, 0x4}, {0x600, 0x1, 0xfffffffd, 0x58, 0x6, 0x1}, {0x9, 0x7fffffff, 0x3, 0xa5, 0xf00, 0x800}, {0x64e5, 0xff, 0x5, 0x7fff, 0x9a}, {0x3, 0x4, 0x5, 0x6, 0x4, 0x5}, {0x5, 0x200, 0x8, 0x5b, 0xfff, 0x2}, {0x0, 0x40, 0xfffff800, 0x7, 0x0, 0x8001}, {0x3, 0xb1, 0x80000001, 0x6, 0x5}, {0xfffffffe, 0xffff, 0x0, 0x3, 0x2}, {0x0, 0x8, 0x8, 0x8edd, 0x679, 0x1}, {0x3, 0x6, 0x5, 0xffff7fff, 0x4, 0xc}, {0x53, 0x7, 0x0, 0x6, 0xf24d, 0x9}, {0x800, 0xff, 0x0, 0x4, 0x5581e4a4, 0x3}, {0x8, 0x1ff, 0x7, 0x2, 0x7, 0x9}, {0x1, 0xdc1, 0x9, 0x264, 0x1, 0xc}, {0x276d, 0x8070, 0x2, 0xffffffff, 0x3, 0x2}, {0x6, 0x8, 0x1, 0x180, 0x4, 0x9}, {0x937, 0x5, 0xd, 0x3a55400, 0x9, 0x8}, {0x9, 0x9, 0x800, 0x7, 0x128, 0x2}, {0x100, 0x71138, 0x0, 0xfff, 0xe, 0xa0000}, {0xfffffffb, 0x23, 0x7ff, 0x8, 0x1, 0x40000000}, {0x9, 0x3, 0xfffffffa, 0x401, 0x5}, {0x9b, 0x6, 0x7, 0x0, 0x0, 0x1}, {0x8, 0x7, 0x7fffffff, 0x0, 0xbd, 0x3}, {0xc5, 0x7e37, 0x1661, 0x2, 0x6d, 0x7}, {0x4, 0xd, 0x5, 0x2, 0x979, 0x7}, {0x6, 0xf, 0x0, 0x8, 0xa97, 0x10}, {0x400, 0x10, 0x0, 0x6, 0x4, 0x7}, {0x1, 0x2, 0x5, 0x5, 0x0, 0xfffffbff}, {0x9, 0x1ff, 0x7, 0x7, 0x1, 0x97d8}, {0x7, 0x0, 0x3, 0x3595ca9e, 0xf68, 0x8}, {0x1, 0x7, 0x853f, 0x2, 0x80, 0x39cf}, {0xffff, 0x5, 0xff, 0x7, 0x4, 0x1162}, {0x3, 0x4, 0x8c, 0x10001, 0x80000001, 0x2}, {0x1, 0x3, 0x3, 0x70, 0x0, 0x5}, {0x80000001, 0x6, 0x1, 0x9, 0x8, 0xdd5}, {0x4, 0x8, 0x8001, 0x9, 0x80000000, 0x40}, {0x3, 0xf82, 0x8, 0x5, 0x81, 0xfffffffd}, {0xc9, 0xe42, 0x6, 0xffffffff, 0x1, 0x8c}, {0x2, 0x9, 0x2, 0x0, 0x9, 0xff}, {0x4, 0x2a, 0x0, 0x3, 0x400, 0x5b868db6}, {0x3, 0x0, 0x2, 0x4, 0x0, 0x10000000}, {0x4, 0x4, 0x7fff, 0x80000000, 0x6, 0x7}, {0x6, 0x4a, 0x0, 0x32d, 0x8, 0x4ad}, {0x6, 0x9, 0x9, 0x9, 0x2, 0x7fff}, {0x833, 0x80000, 0x8, 0xfffffffc, 0x7e, 0x1}, {0x4, 0x9, 0x1, 0x5, 0x4d, 0x1}, {0x1, 0x200, 0x8, 0x1c, 0x0, 0x9}, {0x3, 0x2d0, 0x3, 0x6, 0x8e7a, 0x2}, {0x4, 0x400, 0x4, 0x80000001, 0x10, 0x80000000}, {0x5, 0x6, 0xffffffff, 0xb, 0x5, 0x1}, {0x8, 0x3ff, 0x49b3, 0xfffffffc, 0x2, 0x3}, {0xfffffffd, 0x53f, 0x0, 0x3, 0x7, 0x68a}, {0x7, 0x4, 0x1, 0x3, 0x1, 0x8}, {0x8001, 0x40, 0xfffffff8, 0x84, 0xff1, 0x8}, {0xc2a, 0x401, 0x0, 0xffffffff, 0x3, 0x5}, {0x200, 0x2, 0x6, 0x8000000, 0x0, 0x2}, {0x0, 0x1ff, 0x8, 0xffffffff, 0x4, 0xa}, {0xfffffffd, 0x8, 0xf374, 0x1, 0xfff, 0x9}, {0x9, 0x9, 0x60000000, 0x4, 0x2, 0x8}, {0x7f, 0x400, 0x6, 0xb01, 0x56e, 0x23}, {0x5, 0x80, 0x400, 0x0, 0x0, 0xf}, {0x9, 0x0, 0x8, 0x0, 0x9, 0x7}, {0x0, 0xb, 0x6, 0x7dc, 0x9, 0x7fffffff}, {0x6, 0x2acbe637, 0x0, 0x7, 0x7, 0x3ff}, {0xfffffffb, 0x0, 0x10, 0x7fffffff, 0x74, 0x5}, {0x9, 0x8, 0x7, 0x0, 0x2, 0x4}, {0x100, 0xcda, 0x7, 0xe, 0x8, 0x4}, {0x200, 0xfffffff8, 0x5bd, 0x8, 0x8, 0x9}, {0xfffffffa, 0x0, 0xa7d8, 0x0, 0x3ff}, {0x8, 0x80000001, 0x4, 0x9, 0x9, 0x1}, {0xbb9, 0x7, 0x1, 0x4a0c, 0x5, 0x6}, {0x7, 0x5, 0x7, 0xffffffff, 0x0, 0x603}, {0x5, 0x81, 0xe1a, 0x0, 0x3, 0x3}, {0x5, 0x40, 0x0, 0x3, 0x4, 0x6}, {0x9, 0xe, 0x7, 0x3, 0x3, 0xe8f}, {0xfffffff8, 0x5348, 0x5, 0x5, 0x7f}, {0x7b, 0x5, 0x6, 0x5, 0x10, 0x80000001}, {0x401, 0xfa4, 0x7, 0x383, 0xe, 0x401}, {0x7, 0x456, 0x6, 0x81, 0x7, 0xb}, {0x5c6c, 0x2, 0x1, 0x5, 0x10001, 0x7f}, {0xf, 0x6, 0x3, 0x76, 0x9, 0x1}, {0x0, 0x4, 0xfffffffc, 0x8, 0x5, 0x7}, {0x3, 0x3, 0xff, 0x7, 0x3, 0x3}, {0x0, 0x800, 0x4, 0xa87, 0xc}, {0x1763, 0x1eae, 0x9, 0x9064, 0x5df7, 0x6}, {0x8, 0x1, 0x401, 0xffffffff, 0x3, 0x8}, {0x7, 0x7fff, 0xfff, 0xd5, 0x5, 0xc}, {0x101, 0xc9, 0x9, 0x10, 0xa, 0x4}, {0x400, 0x7, 0x5, 0x5, 0xd30c, 0x40}, {0xc, 0x4, 0x9, 0x3, 0x478c, 0x3}, {0x3, 0x10, 0x9, 0x3, 0x2, 0x1}, {0x7fffffff, 0x4, 0x0, 0x0, 0x8, 0xc79}, {0x4d, 0x80, 0x6, 0x2, 0xf, 0x3}, {0x5, 0x10001, 0x80000001, 0x1, 0x6, 0x9}, {0x7fff, 0xffffff00, 0x6, 0x6, 0x80000, 0xa2bf}, {0x5, 0x720b, 0x8, 0x7, 0x9, 0xf}, {0x80, 0x3ff, 0x2, 0x5, 0x6, 0x9}, {0x7, 0xe, 0x0, 0x7bf, 0x8c, 0x2}, {0x9, 0x2, 0x3ff, 0x40, 0x1, 0x2}, {0x7, 0xffffffff, 0x3, 0x7f, 0x7f, 0x8}, {0x2, 0x984, 0xc, 0x6a, 0x2, 0x400}, {0x80000000, 0x26, 0x2, 0xfffffff7, 0x3, 0xac}, {0x7, 0xfffffffd, 0x2, 0x8d21, 0x8000, 0x7fffffff}, {0x0, 0x2, 0x6, 0x8001, 0x9, 0x263}, {0x5, 0xadc6, 0x2, 0x0, 0xb, 0x4}, {0x9, 0x8, 0xd, 0x4, 0x4, 0x8}, {0x9, 0x0, 0x200, 0x6, 0x0, 0x7}, {0x843, 0x0, 0x0, 0x401, 0xd, 0xffffffff}, {0xb1, 0x8, 0x71, 0x100, 0x9, 0x5}, {0x6, 0x7, 0x7, 0x7, 0x7}, {0x1, 0x4, 0x4, 0x495b2893, 0xfffffffb, 0x6531}, {0x3, 0x7, 0x5, 0x1, 0x5, 0xf5}, {0xfffffe01, 0x9, 0x2, 0xf, 0x2, 0x7a8}, {0x4c, 0x3ff, 0x2, 0x0, 0x6, 0x8}, {0x2, 0x3ff, 0x573, 0xd4, 0x0, 0x2}, {0xffff, 0x80000001, 0x1, 0x9, 0x4, 0x1}, {0x6, 0x1, 0x5, 0x8d04, 0x2, 0xe6a}, {0x8, 0xffffffff, 0x80000000, 0xb, 0x6, 0x5}, {0x1, 0x3, 0x8, 0x8, 0x4a, 0x100}, {0x9, 0x8, 0x1, 0x0, 0x5, 0x2}, {0xc, 0xd8f, 0x9, 0x0, 0x10001, 0x2}, {0x8, 0x10000, 0x7f, 0x8, 0x8, 0x8}, {0x1000, 0x0, 0x34580000, 0xffffffff, 0x6, 0x4}, {0x7, 0xecf, 0xa, 0x9, 0xfff, 0xffff}], [{0x1}, {0x5}, {0x4, 0x1}, {0x5}, {}, {0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x7, 0x1}, {0x4}, {0x4}, {0x5}, {0x7, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x2}, {0x5}, {0x5}, {0x1}, {0x2, 0x1}, {0x1}, {0x3}, {}, {0x5, 0x1}, {0x87fdcbafd14be498}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x2}, {0x3}, {0x70b5c7fc9149023f, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x7}, {0x1, 0x1}, {0x3}, {0x5}, {0x2}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x2, 0x1}, {0xeac2e9d3b185c257}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x4}, {0x2}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x21f6dd0fb4586af4}, {0x2}, {0x2}, {0x4, 0x1}, {0x7}, {0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x3}, {0x4, 0x1}, {0x5}, {0x0, 0x1}]}}, @TCA_PEDIT_PARMS={0xe38, 0x2, {{{0xa, 0x1, 0x4, 0x101, 0x4}, 0xa4, 0x6, [{0x3, 0x32d0000, 0x6, 0x0, 0xf0ee, 0x81}]}, [{0x7, 0x8, 0x6, 0x2, 0x1, 0x8}, {0x45c8, 0x400, 0x200, 0x4, 0x2, 0x8}, {0x5, 0x3ff, 0x0, 0x6, 0xfffffff9, 0x9}, {0x4, 0x5, 0x7fffffff, 0x9, 0x7b4, 0x2}, {0x7ff, 0x5, 0x3ff, 0x6, 0x3, 0x5}, {0x0, 0x0, 0x40, 0x4, 0x7, 0x40}, {0x2, 0x8, 0x6, 0x3, 0xe71, 0x8000}, {0x0, 0x5debf80a, 0x5, 0x6, 0x4, 0x9}, {0xe99, 0x0, 0xfffffc01, 0x6, 0x2, 0x4}, {0xfffffff7, 0x6, 0x80000001, 0x9, 0x3, 0xc}, {0x400, 0x7, 0x3, 0x2, 0x0, 0x2}, {0xe674, 0x6, 0x0, 0x40, 0xfffffffc, 0x1}, {0x1, 0xfffffff8, 0x1, 0xbb, 0x800, 0xa2be}, {0x3, 0x800, 0xfffffffb, 0x1ff, 0xef07, 0xea5e}, {0x9, 0x8, 0x3, 0x2, 0xc, 0x8001}, {0xfffffffa, 0x1f5, 0x6, 0x7, 0x7, 0x2}, {0x298, 0x8, 0x9, 0xbe1, 0x327, 0xfff}, {0x2, 0x67, 0xfc, 0x1, 0x8, 0xfff}, {0x9, 0x7, 0x6, 0x4, 0x9, 0x1}, {0x8, 0x4, 0x40, 0x5, 0x8, 0x1}, {0x7f, 0x80000000, 0x6, 0x4, 0x80000001, 0x8}, {0x7, 0x8, 0x9, 0x101, 0x3, 0x9}, {0x0, 0xfffffffd, 0x3, 0x196, 0x2, 0x6}, {0xc3, 0x9, 0x3, 0x392, 0x7, 0x3}, {0x7, 0x8, 0x1, 0x80000000, 0x9, 0x2}, {0x80, 0x8, 0x4, 0x8, 0x2, 0x80}, {0x6, 0xe, 0x7fffffff, 0xbd0c, 0xb2de, 0xdd}, {0x3, 0x4, 0xffff, 0x7, 0xfffffffe}, {0x7fff, 0x7ff, 0x8, 0x100, 0x4, 0x7}, {0x8, 0xadd, 0x6, 0x7, 0x5, 0x100}, {0x101, 0x5, 0xffffffff, 0x3ff, 0x2, 0x6}, {0x6, 0x5, 0x8, 0xffffff81, 0xe, 0x5}, {0x5, 0x2, 0xffffff81, 0xf1e, 0xa1, 0xff}, {0x800, 0x2, 0x81, 0x4, 0x0, 0x6}, {0x9, 0x7, 0x4, 0x7, 0x101, 0x54}, {0x7fffffff, 0xd0c3, 0x6, 0x80000000, 0x8, 0xe7}, {0xe, 0x8, 0x88f, 0xffffffff, 0x4, 0x4}, {0x400, 0x1, 0x800, 0xd73e, 0x6}, {0x7, 0x3, 0x6, 0x10000, 0x3, 0x4}, {0x85e, 0xb834, 0xa, 0x4, 0x9, 0x6}, {0xa, 0x7, 0xadf, 0xf, 0x4, 0x100}, {0x5, 0x0, 0x6, 0x7, 0x8, 0x400}, {0x1, 0x80, 0x9, 0x8, 0x4, 0x8}, {0x0, 0x3ff, 0xf0000000, 0x6, 0x6, 0x2}, {0x4, 0xf60b, 0x7a2, 0x0, 0x4, 0x3019}, {0xe, 0x4, 0x1, 0xba, 0x0, 0x1}, {0x3, 0x4, 0xb, 0x0, 0x2, 0x3}, {0x2, 0x5c7, 0x3, 0x9, 0xfb1, 0x54000000}, {0x9, 0xb, 0x9, 0x2, 0x6, 0xfeb9}, {0x10000, 0x9, 0x7f, 0x3, 0x0, 0xc}, {0xb, 0x5, 0xc, 0x7, 0x0, 0xf}, {0x3af, 0x2, 0x1, 0x2, 0x8, 0x6}, {0xceeb, 0x5, 0x8, 0xb, 0x8000, 0x2800}, {0x7, 0x2, 0x980e, 0x6, 0xc, 0x7}, {0x8, 0x5, 0x100, 0x1, 0x6, 0x9}, {0xfff, 0x1, 0x10, 0x4, 0x800, 0x8}, {0xfffffffc, 0xfff, 0x1, 0x1, 0x800, 0x100}, {0x6, 0x6, 0x8, 0x1000, 0x0, 0xfff}, {0x5, 0x7, 0x4, 0xe72a, 0x5, 0x9}, {0xaa, 0x7f0, 0xa, 0x81, 0x4, 0x2}, {0x9, 0x126, 0x7f, 0xfffffffd, 0x80000, 0x4}, {0xfffff000, 0x4, 0xffff55da, 0x6, 0x10001, 0xe1}, {0xfffffffc, 0xba, 0x6, 0xa, 0x530f, 0xb2301844}, {0x21b, 0xffffffff, 0x6f8, 0x7f, 0x8, 0xc}, {0x9, 0xfffffff9, 0xd77, 0x6, 0x8, 0x6}, {0x1, 0x80000000, 0x5, 0xe, 0xa85, 0x8460}, {0x3, 0xa6d, 0x8, 0x6, 0x8, 0x9}, {0x4, 0x2dbc, 0x7, 0x8843, 0x200, 0x3}, {0x7, 0x80000000, 0x7, 0x2, 0x9, 0x8}, {0x3290666b, 0x9, 0x0, 0x5, 0x1, 0x6}, {0x4, 0x9, 0x8, 0x4, 0x576, 0xf}, {0x3ff, 0x4, 0x0, 0x5177, 0x8, 0x6}, {0x8, 0x5, 0x200, 0xff, 0x40, 0x9}, {0x7, 0x9, 0x4, 0x80000000, 0x200, 0x8}, {0x1ff, 0x5, 0x401, 0x7f, 0x8, 0xb4ab}, {0x9bb, 0x2, 0xab, 0x7, 0x4, 0x10}, {0x7f6b, 0x9e, 0x100, 0x5, 0x6, 0x80}, {0xe, 0x376, 0x4, 0x0, 0x9, 0x2}, {0x7, 0xf, 0x8, 0xb1a3, 0x0, 0x4}, {0x4d, 0x9, 0x0, 0x10000000, 0x4, 0xe0}, {0x6, 0xfffffffe, 0x0, 0xffff, 0x722, 0x8001}, {0x1000, 0x401, 0x7, 0x6, 0x100, 0xfff}, {0x7, 0x9, 0x3, 0x1, 0x7, 0x7}, {0xf1, 0x7fff, 0x6, 0x8001, 0xfffffff1, 0xb}, {0x1, 0x0, 0xffff, 0xf, 0x8, 0x23a}, {0x5, 0x6, 0x3, 0x7fff, 0xf, 0x8}, {0x1000000, 0x5, 0x2, 0x5, 0x0, 0x8}, {0xe0a6, 0x1, 0x8001, 0x3b, 0x9, 0x3}, {0x8, 0x1, 0x0, 0x3, 0x77, 0x40}, {0x0, 0x80000000, 0x37db, 0x8, 0x2, 0x4}, {0x10000, 0x0, 0x4, 0x4, 0x4, 0x101}, {0xffffffff, 0x8, 0x7, 0x5, 0xffff7fff, 0x440bdd57}, {0xffffffff, 0xe, 0x5, 0x5b8d, 0x4a, 0x9}, {0x0, 0x4, 0xf, 0x8, 0xc1bf, 0x101}, {0xffffffff, 0x6, 0x7, 0x7ff, 0x6, 0x7f}, {0x0, 0x9028efa, 0x7fffffff, 0x7f, 0x6011, 0x61}, {0x2, 0x2, 0x3, 0xf5a2, 0x9, 0x1}, {0x9, 0x10000, 0x8, 0x6, 0x2, 0x1}, {0x5, 0x969a, 0x19, 0x9, 0x5, 0x4}, {0x0, 0x2, 0x5, 0x8, 0x0, 0x4}, {0xcde3e8c2, 0x0, 0x7, 0x16, 0x7, 0x2}, {0x6, 0x1, 0x7, 0x400, 0x7, 0x1}, {0x40, 0xfe, 0x2, 0xffff, 0x5, 0x1}, {0x6, 0x6620, 0x8, 0xab3c, 0x4, 0x8}, {0xa5, 0x81, 0x2, 0x7, 0x63085494, 0x10001}, {0x5, 0x6, 0x49, 0x3, 0x798a0204, 0x5}, {0x2, 0xb, 0xfffffff8, 0x6, 0x55, 0x49}, {0x7, 0x7, 0x40, 0xfffffffc, 0x7, 0xc2f1}, {0x5, 0x4, 0x6, 0x3c, 0xfe, 0x1}, {0x9, 0x5, 0x8, 0x80000001, 0x2, 0xe88}, {0x9, 0x3, 0x8, 0xfff, 0x2, 0x3}, {0x8, 0x10, 0x10001, 0x79, 0x400, 0x7}, {0x7f, 0xfffffff8, 0x724320f6, 0x2, 0x5, 0xeee}, {0x9, 0xabc, 0x44b1, 0x80000001, 0x7fff, 0x5}, {0x10000, 0xf, 0x9, 0x7fff, 0x1000, 0xff}, {0x8, 0x2, 0x766, 0x1ff, 0x8001, 0x1}, {0x0, 0xe000, 0x0, 0x7, 0x4, 0xf448}, {0x5, 0x8, 0xffffffff, 0x2, 0x6, 0x6}, {0x0, 0xffffffff, 0x74, 0x2, 0xf3a, 0x7}, {0x0, 0x0, 0x800, 0x7fff, 0x3, 0x5}, {0x81, 0x1, 0x1, 0x0, 0x6, 0x800}, {0x2, 0x0, 0x80000001, 0x101, 0xd, 0x3}, {0x9, 0x467, 0x8, 0x3, 0xc2ef, 0x7}, {0x3d9, 0x7fff, 0x3, 0x6, 0x0, 0xa6}, {0x8, 0x8, 0xd, 0x400, 0x6}, {0x3, 0x1, 0x6, 0x6, 0x5fb, 0x17}, {0x4, 0x1b15, 0x7f, 0x6, 0x3, 0x9}, {0x8, 0x0, 0x5, 0x5, 0x80000000, 0x7}], [{0x5, 0x1}, {}, {0x4, 0x6f854d16bdb2fafe}, {0x3, 0x1}, {0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x0, 0x3}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x3}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x1}, {0x1}, {0x2}, {0x4}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x5}, {0x5}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x4}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x4}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x8baccb1cd20c5454}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x5}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x4, 0x1}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x5}, {0x3}, {0x3}, {}, {0x3, 0x1}, {0x4}, {0x7}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x2, 0xb396640fba000703}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x1}], 0x1}}, @TCA_PEDIT_PARMS={0xe68, 0x2, {{{0x6, 0x5, 0x2, 0x0, 0x9}, 0x2, 0x6, [{0x6, 0x5, 0x2, 0x6, 0x1000, 0x8000}, {0x10001, 0x4, 0x80000000, 0x6, 0x7f, 0x7026}, {0x54, 0x7f, 0x0, 0x61e4, 0x29f, 0x5}]}, [{0x1, 0x1, 0x1, 0x3, 0x7f, 0x8}, {0x0, 0x4, 0x4, 0x6, 0x400}, {0x4, 0x2, 0x1, 0x4, 0x4, 0x5}, {0xd0, 0x61bd, 0x1, 0x4, 0x5, 0x7fff}, {0x6, 0xfffffff8, 0x1cf, 0x0, 0x400, 0x5}, {0x7, 0x2, 0x5, 0x3, 0x4, 0x2}, {0x8, 0x4, 0xfffffc01, 0x3ff, 0x7, 0x4}, {0x4, 0x1000, 0x5, 0x9, 0x6, 0xa}, {0x3, 0x0, 0x2af7, 0x0, 0x5, 0x8}, {0x5, 0x0, 0x9, 0x133, 0x7, 0x176d}, {0x5, 0x8, 0x5, 0x2}, {0x2, 0x40, 0x3, 0x4, 0x9, 0x800}, {0x90c, 0x401, 0x40, 0x78e0, 0x0, 0x4}, {0x0, 0xd1f, 0xfffffbff, 0x101, 0x40, 0x4}, {0x1ff, 0x2, 0x9, 0x1, 0x4, 0x6}, {0xd6, 0x5, 0x6, 0x5, 0x401, 0x3}, {0xaba, 0x4, 0xd3d, 0xdb08, 0x3, 0x7dfa}, {0x90, 0x10, 0x8, 0x40, 0x5, 0xfffffffa}, {0x19, 0x3, 0xfffffffd, 0x7, 0x2, 0x1}, {0x0, 0x8000, 0x0, 0xfff, 0x2, 0x8}, {0x9, 0x37ea, 0x8, 0x8, 0x81, 0x59a969f3}, {0x3, 0x2, 0x4, 0x1, 0x6, 0x6}, {0x7, 0x0, 0x6, 0x6, 0x8, 0x1ff}, {0xff, 0x3, 0x1, 0x41a75d17, 0xc2f, 0x2a2}, {0x1, 0x1, 0x5, 0x0, 0x5, 0x7}, {0x31, 0x3, 0x10, 0x8, 0x8000, 0xffffff7b}, {0x6, 0xdf, 0x8, 0xc973, 0x44, 0xd7}, {0x5, 0xfff, 0x5, 0x5, 0x8, 0x7}, {0xfffffffe, 0x0, 0x1, 0x3, 0x8, 0x7f}, {0xa7, 0x1, 0x7, 0x8, 0x7f, 0x5}, {0x6ec2, 0x4, 0x101, 0x24000000, 0x40, 0x3}, {0x2, 0x2, 0x0, 0x4, 0x0, 0x1}, {0xfffffeff, 0x5f7, 0x0, 0x6, 0x2, 0x9}, {0x40, 0x4f9fd1d4, 0x7fffffff, 0x40, 0x10, 0x5}, {0x7f, 0x200, 0x401, 0x3, 0x10, 0x9}, {0x1ff, 0x54, 0x0, 0x401, 0x2, 0x6a06}, {0x3, 0x1, 0x2, 0x4, 0x3, 0x1}, {0x0, 0x5, 0x100, 0xe, 0x9, 0x1}, {0x1ff, 0x3, 0x0, 0x2, 0x3, 0x1000}, {0x8, 0x689, 0x7, 0x5a, 0x8, 0x1000}, {0x2, 0x5, 0x1ff, 0x8, 0x1, 0x8}, {0x6, 0x9, 0x8, 0x8, 0x1, 0x2}, {0x7544, 0x4, 0x90dc, 0x100, 0x2, 0x5}, {0x7, 0x8, 0x5, 0x4, 0x6, 0xc4}, {0xaedd, 0x7, 0xd12c, 0x4, 0x6, 0x9}, {0x10001, 0xa81, 0x200, 0x8, 0x0, 0x1}, {0x4, 0x401, 0x9, 0x14, 0x9, 0x1}, {0x50, 0x5, 0xaf31, 0x0, 0x2, 0xc7}, {0x0, 0x4, 0xae14, 0x1, 0x40, 0x80}, {0x8001, 0x4284, 0x1, 0x1, 0xf83, 0x100}, {0x1, 0xffffffff, 0x2, 0xfffffffd, 0x0, 0x2}, {0x2, 0xa, 0xe, 0x6, 0x6, 0xfffffa98}, {0xa0000000, 0x3, 0x8000, 0x9, 0x3800000, 0xa}, {0x1, 0x1, 0x0, 0x0, 0xf, 0x4}, {0x4, 0x200, 0x2, 0x0, 0x3, 0x8}, {0x269, 0xbe, 0xa935, 0x6, 0x80000000, 0x7f}, {0x0, 0xb, 0xfffffffa, 0xcce8, 0x6, 0x4}, {0x10000000, 0x8000, 0x80, 0x2, 0x5, 0x4}, {0x3fe, 0x200, 0x400, 0x10000, 0x8, 0xfffffffb}, {0xffffffff, 0x232f, 0x4, 0xc8e88356, 0x5, 0x3}, {0xffffffff, 0x1d, 0x7, 0x4, 0x35, 0x66}, {0x2, 0x9, 0x3, 0x6, 0xbb60}, {0x8400, 0xd72c, 0x8, 0xfffffffb, 0xa228, 0xfb}, {0x7, 0x8, 0xc, 0x3, 0x10001, 0xd08}, {0x4, 0x8, 0x14, 0x2, 0x2, 0x3}, {0x1, 0x0, 0x4, 0x80000000, 0x0, 0x6}, {0x2, 0x2, 0x2, 0x1, 0x3, 0x39}, {0xecb, 0x8001, 0xfffffff7, 0x0, 0x6, 0x7}, {0x7ff, 0x8, 0x4, 0x8aaf, 0x1, 0x401}, {0x80000000, 0x2, 0x2, 0xf, 0x5, 0x80000000}, {0x5, 0x6852, 0x2, 0x5, 0x2, 0x80}, {0x2, 0x8078, 0x1, 0x1000, 0x280000, 0xdb}, {0x5, 0x8, 0x2, 0xfffffff7, 0xfff, 0xa0}, {0x2, 0xc253, 0x3, 0xcd, 0x9, 0xffffffff}, {0x6, 0x62df, 0x5, 0x401, 0xbafa, 0x800}, {0xee, 0xa5c, 0x9, 0x0, 0x8, 0xc}, {0x0, 0xe9ec, 0x5, 0xfffff800, 0x8, 0x3}, {0x0, 0x3, 0xc1, 0x7ff, 0x6be7, 0x5}, {0x8000, 0x0, 0x6, 0x401, 0x80000000, 0x8}, {0x3, 0x7ff, 0x3, 0x3, 0xfffffff7, 0xffff}, {0x800, 0x40, 0x4, 0x7, 0x7, 0x5c}, {0x1000, 0x8, 0x81, 0x7, 0x9, 0x3}, {0x1, 0xffff, 0x256de849, 0x3, 0x2, 0x5316}, {0x2, 0x9, 0xf, 0xfff, 0x4, 0xfffffff8}, {0x8, 0x1, 0x5, 0xffffffff, 0x126eabda, 0x1}, {0x200, 0x5, 0x4, 0xe4, 0xb, 0x2}, {0x9, 0x5, 0x4, 0x80000000, 0x80000000, 0x8}, {0x79d4, 0x8, 0x1, 0x7, 0x7, 0xfffffffa}, {0x5, 0x6c05, 0x7fffffff, 0x3, 0x6, 0x2}, {0xba8, 0xffffffff, 0xe5, 0x5, 0x9, 0x3}, {0x14, 0x0, 0x8, 0x9, 0x8, 0x1}, {0x5, 0x8, 0x4, 0x9ec, 0x10001, 0x7}, {0x80000, 0x873b, 0x1, 0x6, 0x1000, 0x8}, {0x4, 0x10001, 0x80000001, 0x9, 0x4, 0x1}, {0x8, 0x3ff, 0x4, 0xfffffef3, 0x0, 0x3380}, {0x1614eaa, 0x3be6, 0x2, 0x9, 0x1, 0x8}, {0x4, 0x8, 0xdf8a, 0x10, 0x7, 0x1}, {0x4, 0xc4f, 0xfffffffc, 0x5, 0x8, 0xe0}, {0x5, 0x4, 0x7, 0x74d, 0xe}, {0x10001, 0x81, 0x53, 0x3, 0xffffffff, 0x9}, {0x8000, 0x7a3, 0x9c71, 0x6a8, 0x9, 0x10}, {0x9, 0x8, 0x7, 0x0, 0x6, 0x81b}, {0xb93a, 0x0, 0x2, 0x7, 0x7f}, {0x0, 0x6, 0x8, 0xe, 0x3, 0x9}, {0x400, 0x3, 0x1ff, 0x9, 0x4, 0x100000}, {0x100, 0x4, 0x0, 0xfffffffc, 0x5, 0x484}, {0x6, 0x6, 0x7fffffff, 0x9, 0x7fffffff, 0x4}, {0x8, 0x741f534e, 0xf, 0x32e800, 0xb06, 0x7}, {0x2, 0x5, 0x5, 0x3, 0x7fffffff, 0x6}, {0xfffffffa, 0x101, 0x91, 0x9, 0x101, 0x8}, {0xfff, 0x80000000, 0x12000, 0x9, 0x14, 0x5}, {0x5, 0x1, 0x9, 0xfab0, 0x4, 0x6}, {0x6, 0x2, 0x10, 0x2, 0x1000, 0xffffffff}, {0x7f, 0x7, 0x1, 0x1, 0x936f}, {0x6, 0x7, 0x8, 0x180, 0x6, 0x7}, {0x401, 0x2, 0xfffffffa, 0x4, 0x4, 0x9}, {0x100, 0xe, 0x2, 0x9, 0x4, 0x9}, {0xffffffc0, 0x9, 0x1, 0x7, 0x3, 0x96e}, {0x4, 0x9, 0x5393, 0x9a1a, 0xa92c, 0x71a}, {0x3, 0x14, 0x41cd, 0x2, 0x100}, {0xc, 0xf, 0xff, 0xa3b4, 0x9}, {0x50, 0x8, 0x685, 0x6, 0xfffffffd}, {0x10000, 0x3c8d, 0x8, 0x5, 0x2, 0x50}, {0x1, 0xb72, 0x0, 0x2119fcd9, 0xffff, 0xb45c}, {0x100, 0xb40, 0x5fbe, 0x9, 0xffffde40, 0x9}, {0x6, 0x9419, 0x5, 0x5, 0x9f3, 0xc6b}, {0x10001, 0x5, 0x80, 0x400, 0x0, 0x1}, {0x6, 0xca, 0x1, 0x4, 0x1, 0x2}], [{}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x4, 0xdde2f2c688d9115b}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {}, {0x2}, {0xb5aaa5a79cf67357}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {0x5}, {0x5}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x2}, {0x5}, {0x2}, {0x6, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0xc}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x3}, {0x2}, {0x7, 0x1}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x2}, {}, {0x1, 0x1}, {}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x5}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x2}, {0x5, 0x1}, {0xd, 0x1}, {0x3}, {0x1, 0x1}, {0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x2}, {0x3}, {0x5}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x12c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x669165af233c6d38}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_nat={0x100, 0x1c, 0x0, 0x0, {{0x8}, {0x4}, {0xd6, 0x6, "65cccc5bd61c54031503549a9b23c768bf2822c3b109d8cf0a7051e09a7449558b3c47232d9432c0a94373c0ad33ae0f4b17ba25e3d763bc7294dbe56c4f2397f68da137f72771bf05ef1c0238ee56486a66bdadfd6b5cb10c62022f28c2a61a3347f596929c61b8bfcb29d69a7277b4374b860ab00abd023e89129c252c39299f56d765bb2d8c585be2d98d95b26a861e2ac6f1855a789bcf07a2e0ca1af5643a2dbcdc7ca8e5fa652f08f6cdd059a70506d0030aa0c355f2844afc19b9ebb2f657a32268e0d4efd8ece179801b50d36cfa"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mirred={0xa0, 0x12, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x101, 0x2, 0x5, 0x5}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x40, 0xfff, 0x8, 0x6, 0x1}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x10001, 0x2, 0x1, 0x5, 0xcbf}, 0x3}}]}, {0x11, 0x6, "1cc9dfd5468088f2ab630f2df6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_tunnel_key={0x108, 0x1c, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x5, 0xe, 0x0, 0xe, 0x6383}, 0x1}}]}, {0xbb, 0x6, "d92ba5fd557f5cce2d230473bb63af441c4b93220eada216c7d806c34fdec600325ba05a7dc3b42526a4f434cecdb5cd08acc92f0cd25d90fb1168f2a0138c49ebd55699b4c299fecbbb7920f0beaa35edcb970143b35d6529fe4e8fe23b8d8463ccf8d43c2913e27fd03a87aed96a92fbfa6cd9f54e18680ef30b56b7bd8bb3d9dd8976f7f50a1098cc9015c66817a5ac7c91d3eae587d44832eeca6eb5f3a2116b29441513ee9404d724dc695b1268b3d05b40fa59a5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, {0x5c, 0x1, [@m_xt={0x58, 0xf, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x5cc8}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
r1 = syz_open_dev$dri(0x0, 0x1f, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$sndmidi(0x0, 0x0, 0x141101)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0)
write$cgroup_int(r4, &(0x7f00000001c0)=0x8, 0x12)

kernel console output (not intermixed with test programs):

ulting to 1000
[  908.226632][T16067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  908.259504][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  908.391149][T16067] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  908.451652][T16069] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  908.459458][T16069] IPv6: NLM_F_CREATE should be set when creating new route
[  908.466673][T16069] IPv6: NLM_F_CREATE should be set when creating new route
[  908.557850][    T9] usbhid 8-1:1.0: can't add hid device: -71
[  908.581966][    T9] usbhid 8-1:1.0: probe with driver usbhid failed with error -71
[  908.640532][   T10] qmi_wwan 4-1:64.4: probe with driver qmi_wwan failed with error -22
[  908.702676][   T10] usb 4-1: USB disconnect, device number 21
[  908.716050][    T9] usb 8-1: USB disconnect, device number 2
[  908.782914][ T3451] erspan0: left allmulticast mode
[  908.808710][ T3451] erspan0: left promiscuous mode
[  908.826868][ T3451] bridge0: port 3(erspan0) entered disabled state
[  908.932567][ T3451] bridge_slave_1: left allmulticast mode
[  908.938755][ T3451] bridge_slave_1: left promiscuous mode
[  908.954970][ T3451] bridge0: port 2(bridge_slave_1) entered disabled state
[  908.965802][ T3451] bridge_slave_0: left allmulticast mode
[  909.033308][T16103] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  909.309474][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  909.527644][ T3451] bridge_slave_0: left promiscuous mode
[  909.533637][ T3451] bridge0: port 1(bridge_slave_0) entered disabled state
[  909.584282][T13620] usb 1-1: new full-speed USB device number 22 using dummy_hcd
[  909.720764][T13620] usb 1-1: device descriptor read/64, error -71
[  909.867054][ T3451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  909.884435][ T3451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  909.897558][ T3451] bond0 (unregistering): Released all slaves
[  909.917115][ T3451] bond1 (unregistering): (slave batadv1): Releasing backup interface
[  909.929269][ T3451] bond1 (unregistering): Released all slaves
[  909.944507][ T5831] Bluetooth: hci4: command tx timeout
[  909.945878][T16078] wlan0 speed is unknown, defaulting to 1000
[  910.012594][T13620] usb 1-1: new full-speed USB device number 23 using dummy_hcd
[  910.082967][T16111] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  910.090790][T16111] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  910.099032][T16111] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  910.106915][T16111] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock
[  910.174283][   T26] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  910.349480][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  910.473038][ T3451] tipc: Disabling bearer <udp:syz2>
[  910.480672][ T3451] tipc: Left network mode
[  910.499524][T13620] usb 1-1: device descriptor read/64, error -71
[  910.499874][   T26] usb 8-1: Using ep0 maxpacket: 8
[  910.518937][   T26] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  910.536591][   T26] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  910.554094][   T26] usb 8-1: Product: syz
[  910.562652][   T26] usb 8-1: Manufacturer: syz
[  910.573646][   T26] usb 8-1: SerialNumber: syz
[  910.583179][   T26] usb 8-1: config 0 descriptor??
[  910.652265][T13620] usb usb1-port1: attempt power cycle
[  910.814163][   T26] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  910.898438][T16078] chnl_net:caif_netlink_parms(): no params data found
[  910.999465][T13620] usb 1-1: new full-speed USB device number 24 using dummy_hcd
[  911.020061][T13620] usb 1-1: device descriptor read/8, error -71
[  911.117612][    T9] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  911.160217][ T3451] hsr_slave_0: left promiscuous mode
[  911.165965][ T3451] hsr_slave_1: left promiscuous mode
[  911.171833][ T3451] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  911.179243][ T3451] batman_adv: batadv0: Removing interface: batadv_slave_0
[  911.188233][ T3451] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  911.195857][ T3451] batman_adv: batadv0: Removing interface: batadv_slave_1
[  911.217548][ T3451] veth1_macvtap: left promiscuous mode
[  911.223913][ T3451] veth0_macvtap: left promiscuous mode
[  911.229877][ T3451] veth1_vlan: left promiscuous mode
[  911.235232][ T3451] veth0_vlan: left promiscuous mode
[  911.279608][T13620] usb 1-1: new full-speed USB device number 25 using dummy_hcd
[  911.310873][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  911.321908][T13620] usb 1-1: device descriptor read/8, error -71
[  911.328105][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  911.337931][    T9] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  911.347219][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  911.364253][    T9] usb 5-1: config 0 descriptor??
[  911.371926][    T9] usbhid 5-1:0.0: can't add hid device: -22
[  911.378259][    T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -22
[  911.390403][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  911.433129][T13620] usb usb1-port1: unable to enumerate USB device
[  911.440332][   T26] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  911.669822][ T3451] team0 (unregistering): Port device team_slave_1 removed
[  911.743649][ T3451] team0 (unregistering): Port device team_slave_0 removed
[  911.831864][T16140] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2080'.
[  911.841360][T16140] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2080'.
[  911.850391][T16140] netlink: 'syz.4.2080': attribute type 5 has an invalid length.
[  911.858432][T16140] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2080'.
[  912.019475][ T5831] Bluetooth: hci4: command tx timeout
[  912.264514][T16143] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ'
[  912.331936][T16143] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  912.419524][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  912.618254][T16146] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2082'.
[  912.670872][T16078] bridge0: port 1(bridge_slave_0) entered blocking state
[  912.678054][T16078] bridge0: port 1(bridge_slave_0) entered disabled state
[  912.694059][T16078] bridge_slave_0: entered allmulticast mode
[  912.710381][T16078] bridge_slave_0: entered promiscuous mode
[  912.719009][T16078] bridge0: port 2(bridge_slave_1) entered blocking state
[  912.726362][T16078] bridge0: port 2(bridge_slave_1) entered disabled state
[  912.733731][T16078] bridge_slave_1: entered allmulticast mode
[  912.741349][T16078] bridge_slave_1: entered promiscuous mode
[  912.761514][   T30] audit: type=1326 audit(1741681608.947:2333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16151 comm="syz.0.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287018d169 code=0x7ffc0000
[  912.766327][   T26] usb 8-1: USB disconnect, device number 3
[  912.784970][    C0] vkms_vblank_simulate: vblank timer overrun
[  913.104184][T16078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  913.143285][T16078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  913.153230][   T30] audit: type=1326 audit(1741681608.947:2334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16151 comm="syz.0.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287018d169 code=0x7ffc0000
[  913.257738][   T30] audit: type=1326 audit(1741681608.977:2335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16151 comm="syz.0.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f287018d169 code=0x7ffc0000
[  913.314129][   T30] audit: type=1326 audit(1741681608.977:2336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16151 comm="syz.0.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287018d169 code=0x7ffc0000
[  913.337558][    C0] vkms_vblank_simulate: vblank timer overrun
[  913.353458][   T30] audit: type=1326 audit(1741681608.977:2337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16151 comm="syz.0.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287018d169 code=0x7ffc0000
[  913.400761][T16078] team0: Port device team_slave_0 added
[  913.422946][T16078] team0: Port device team_slave_1 added
[  913.435537][   T30] audit: type=1326 audit(1741681608.977:2338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16151 comm="syz.0.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f287018d169 code=0x7ffc0000
[  913.459499][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  913.479510][   T30] audit: type=1326 audit(1741681608.977:2339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16151 comm="syz.0.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287018d169 code=0x7ffc0000
[  913.503018][    C0] vkms_vblank_simulate: vblank timer overrun
[  913.558619][   T30] audit: type=1326 audit(1741681608.977:2340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16151 comm="syz.0.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287018d169 code=0x7ffc0000
[  913.582148][    C0] vkms_vblank_simulate: vblank timer overrun
[  913.778598][T16078] batman_adv: batadv0: Adding interface: batadv_slave_0
[  913.790987][ T3451] IPVS: stop unused estimator thread 0...
[  913.801651][T16078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  913.828708][   T30] audit: type=1326 audit(1741681608.977:2341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16151 comm="syz.0.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f287018d169 code=0x7ffc0000
[  913.849723][T16078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  913.852194][    C0] vkms_vblank_simulate: vblank timer overrun
[  913.949140][   T26] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  914.028903][T16176] xt_hashlimit: max too large, truncated to 1048576
[  914.056014][    T9] usb 5-1: USB disconnect, device number 30
[  914.120644][ T5831] Bluetooth: hci4: command tx timeout
[  914.241183][   T30] audit: type=1326 audit(1741681608.977:2342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16151 comm="syz.0.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287018d169 code=0x7ffc0000
[  914.265667][    C0] vkms_vblank_simulate: vblank timer overrun
[  914.266073][T16078] batman_adv: batadv0: Adding interface: batadv_slave_1
[  914.423490][   T26] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  914.499463][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  914.520231][   T26] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  914.530693][T16078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  914.556959][   T26] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  914.569016][   T26] usb 8-1: config 0 descriptor??
[  914.609511][T16078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  914.628613][   T26] pwc: Askey VC010 type 2 USB webcam detected.
[  914.788843][T16078] hsr_slave_0: entered promiscuous mode
[  914.799799][T16188] netlink: 'syz.0.2089': attribute type 1 has an invalid length.
[  914.818238][T16078] hsr_slave_1: entered promiscuous mode
[  914.829951][T16078] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  914.848175][T16188] netlink: 236 bytes leftover after parsing attributes in process `syz.0.2089'.
[  914.859597][    T9] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  914.878025][T16078] Cannot create hsr debugfs directory
[  915.037727][    T9] usb 5-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  915.052456][   T26] pwc: recv_control_msg error -32 req 02 val 2b00
[  915.064964][    T9] usb 5-1: config 1 interface 0 has no altsetting 0
[  915.089599][   T26] pwc: recv_control_msg error -32 req 02 val 2700
[  915.289645][    T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  915.319016][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  915.350676][    T9] usb 5-1: Product: syz
[  915.414816][    T9] usb 5-1: Manufacturer: syz
[  915.416988][T16209] xt_hashlimit: max too large, truncated to 1048576
[  915.426094][    T9] usb 5-1: SerialNumber: syz
[  915.437300][T16180] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  915.454695][T16180] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  915.539515][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  915.804373][    T9] usb 5-1: USB disconnect, device number 31
[  916.189564][ T5831] Bluetooth: hci4: command tx timeout
[  916.352391][T16078] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  916.579601][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  916.655014][T16078] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  916.668635][ T5831] Bluetooth: hci0: unexpected event for opcode 0x2012
[  916.686369][T16078] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  916.702709][T16078] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  916.909464][T13621] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  917.313785][T16078] 8021q: adding VLAN 0 to HW filter on device bond0
[  917.335441][T16078] 8021q: adding VLAN 0 to HW filter on device team0
[  917.352342][   T63] bridge0: port 1(bridge_slave_0) entered blocking state
[  917.359446][   T63] bridge0: port 1(bridge_slave_0) entered forwarding state
[  917.390899][T13621] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  917.417151][T13621] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  917.418094][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  917.433997][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  917.541889][T13621] usb 4-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00
[  917.558528][T13621] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  917.574224][T13621] usb 4-1: config 0 descriptor??
[  917.629469][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  917.904035][T16245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2094'.
[  917.981044][   T26] pwc: recv_control_msg error -71 req 02 val 2c00
[  918.000336][   T26] pwc: recv_control_msg error -71 req 04 val 1000
[  918.007023][   T26] pwc: recv_control_msg error -71 req 04 val 1300
[  918.022831][   T26] pwc: recv_control_msg error -71 req 04 val 1400
[  918.039440][   T26] pwc: recv_control_msg error -71 req 02 val 2000
[  918.049005][T13621] petalynx 0003:18B1:0037.0008: unbalanced collection at end of report description
[  918.065881][   T26] pwc: recv_control_msg error -71 req 02 val 2100
[  918.074210][T16251] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ'
[  918.094918][   T26] pwc: recv_control_msg error -71 req 04 val 1500
[  918.095815][T16078] 8021q: adding VLAN 0 to HW filter on device batadv0
[  918.108883][T13621] petalynx 0003:18B1:0037.0008: parse failed
[  918.117866][   T26] pwc: recv_control_msg error -71 req 02 val 2500
[  918.126228][T13621] petalynx 0003:18B1:0037.0008: probe with driver petalynx failed with error -22
[  918.147972][   T26] pwc: recv_control_msg error -71 req 02 val 2400
[  918.168282][T16251] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  918.195704][   T26] pwc: recv_control_msg error -71 req 02 val 2600
[  918.224859][   T26] pwc: recv_control_msg error -71 req 02 val 2900
[  918.308053][   T26] pwc: recv_control_msg error -71 req 02 val 2800
[  918.620390][   T26] pwc: recv_control_msg error -71 req 04 val 1100
[  918.659500][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  918.682390][   T26] pwc: recv_control_msg error -71 req 04 val 1200
[  918.713747][   T26] pwc: Registered as video103.
[  918.731753][   T26] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input16
[  918.775942][   T26] usb 8-1: USB disconnect, device number 4
[  918.911819][T16078] veth0_vlan: entered promiscuous mode
[  918.940609][T16078] veth1_vlan: entered promiscuous mode
[  918.951493][   T52] usb 4-1: USB disconnect, device number 22
[  919.709510][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  919.801098][T16078] veth0_macvtap: entered promiscuous mode
[  919.875857][T16078] veth1_macvtap: entered promiscuous mode
[  919.961821][T16078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  920.025499][T16078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  920.069499][T16078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  920.108455][T16078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  920.157200][T16078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  920.183049][T16078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  920.194313][T16078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  920.208809][T16078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  920.239868][T16078] batman_adv: batadv0: Interface activated: batadv_slave_0
[  920.269205][T16078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  920.339488][T16078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  920.359923][T16078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  920.442917][ T5872] usb 5-1: new full-speed USB device number 32 using dummy_hcd
[  920.696763][ T5872] usb 5-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31
[  920.739485][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  920.788257][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  920.879891][T16078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  920.889801][T16078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  920.896979][ T5872] usb 5-1: config 0 descriptor??
[  920.900381][T16078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  920.900396][T16078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  920.900410][T16078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  920.901083][T16078] batman_adv: batadv0: Interface activated: batadv_slave_1
[  920.931193][ T5872] usb 5-1: selecting invalid altsetting 3
[  920.967964][ T5872] comedi comedi0: could not set alternate setting 3 in high speed
[  920.989751][ T5872] usbduxsigma 5-1:0.0: driver 'usbduxsigma' failed to auto-configure device.
[  921.009053][ T5872] usbduxsigma 5-1:0.0: probe with driver usbduxsigma failed with error -22
[  921.015576][T16078] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  921.048070][T16078] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  921.059729][T16078] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  921.081175][T16078] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  921.306983][T13620] usb 5-1: USB disconnect, device number 32
[  921.337505][ T8302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  921.359088][ T8302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  921.435090][T16295] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[  921.496815][ T7530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  921.527839][ T7530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  921.779472][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  921.797579][T16300] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  922.325349][   T30] kauditd_printk_skb: 10 callbacks suppressed
[  922.325365][   T30] audit: type=1400 audit(1741681618.487:2353): avc:  denied  { mount } for  pid=16308 comm="syz.4.2104" name="/" dev="hugetlbfs" ino=52694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  922.365197][T16311] hugetlbfs: Unknown parameter 'rize'
[  922.408006][   T30] audit: type=1400 audit(1741681618.547:2354): avc:  denied  { remount } for  pid=16308 comm="syz.4.2104" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  922.435463][T16314] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2105'.
[  922.819507][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  923.332243][ T5831] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  923.785452][   T30] audit: type=1400 audit(1741681619.887:2355): avc:  denied  { unmount } for  pid=13259 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  923.859510][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  924.217050][   T30] audit: type=1400 audit(1741681620.397:2356): avc:  denied  { mounton } for  pid=16335 comm="syz.0.2110" path="mnt:[4026533211]" dev="nsfs" ino=4026533211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  924.899491][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  925.363826][T16347] SELinux: selinux_ima_measure_state_locked: failed to read policy -12.
[  925.428028][   T30] audit: type=1400 audit(1741681621.517:2357): avc:  denied  { read open } for  pid=16346 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  925.535097][   T30] audit: type=1400 audit(1741681621.607:2359): avc:  denied  { append } for  pid=5177 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=11 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  925.561721][ T7530] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  925.640521][   T30] audit: type=1400 audit(1741681621.607:2358): avc:  denied  { getattr } for  pid=16346 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  925.725367][T16363] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[  925.849411][   T30] audit: type=1400 audit(1741681621.607:2360): avc:  denied  { search } for  pid=16346 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  925.889607][   T30] audit: type=1400 audit(1741681621.617:2361): avc:  denied  { getattr } for  pid=16346 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1747 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  925.939495][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  925.992777][T16365] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2113'.
[  926.001746][T16365] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2113'.
[  926.089624][   T30] audit: type=1400 audit(1741681621.647:2362): avc:  denied  { read write } for  pid=13259 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  926.160125][T16367] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2113'.
[  926.437258][ T7530] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  926.714092][T16366] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  926.859293][T16379] F2FS-fs (loop15): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  926.867193][T16379] F2FS-fs (loop15): Can't find valid F2FS filesystem in 1th superblock
[  926.875776][T16379] F2FS-fs (loop15): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  926.883634][T16379] F2FS-fs (loop15): Can't find valid F2FS filesystem in 2th superblock
[  926.979457][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  927.416647][   T30] kauditd_printk_skb: 46 callbacks suppressed
[  927.416662][   T30] audit: type=1400 audit(1741681623.597:2409): avc:  denied  { unlink } for  pid=15521 comm="syz-executor" name="file0" dev="tmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  927.515718][   T30] audit: type=1400 audit(1741681623.677:2410): avc:  denied  { write } for  pid=16337 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1707 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  927.599608][   T30] audit: type=1400 audit(1741681623.677:2411): avc:  denied  { add_name } for  pid=16337 comm="dhcpcd-run-hook" name="resolv.conf.eth9.dhcp" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  927.759940][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  927.774035][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  927.781759][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  927.803447][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  927.811979][ T5831] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  927.819074][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  927.880626][   T30] audit: type=1400 audit(1741681623.677:2412): avc:  denied  { create } for  pid=16337 comm="dhcpcd-run-hook" name="resolv.conf.eth9.dhcp" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  927.975568][ T7530] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  928.019471][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  928.093425][   T30] audit: type=1400 audit(1741681623.677:2413): avc:  denied  { write } for  pid=16337 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth9.dhcp" dev="tmpfs" ino=8681 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  928.224321][   T30] audit: type=1400 audit(1741681623.677:2414): avc:  denied  { append } for  pid=16337 comm="dhcpcd-run-hook" name="resolv.conf.eth9.dhcp" dev="tmpfs" ino=8681 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  928.334247][T16388] xt_TCPMSS: Only works on TCP SYN packets
[  928.370266][T13620] kernel write not supported for file /dsp (pid: 13620 comm: kworker/0:5)
[  928.437582][ T7530] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  928.443006][   T30] audit: type=1400 audit(1741681623.827:2415): avc:  denied  { read write } for  pid=16387 comm="syz.7.2118" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  928.919169][   T30] audit: type=1400 audit(1741681623.827:2416): avc:  denied  { open } for  pid=16387 comm="syz.7.2118" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  928.947616][   T30] audit: type=1400 audit(1741681623.827:2417): avc:  denied  { ioctl } for  pid=16387 comm="syz.7.2118" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  929.024834][T16392] lo speed is unknown, defaulting to 1000
[  929.035144][T16392] wg2 speed is unknown, defaulting to 1000
[  929.056115][   T30] audit: type=1400 audit(1741681623.927:2418): avc:  denied  { create } for  pid=16392 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  929.079649][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  929.197938][ T7530] bridge_slave_1: left allmulticast mode
[  929.210552][ T7530] bridge_slave_1: left promiscuous mode
[  929.259551][ T7530] bridge0: port 2(bridge_slave_1) entered disabled state
[  929.290656][ T7530] bridge_slave_0: left allmulticast mode
[  929.296307][ T7530] bridge_slave_0: left promiscuous mode
[  929.324512][ T7530] bridge0: port 1(bridge_slave_0) entered disabled state
[  929.961043][ T5831] Bluetooth: hci4: command tx timeout
[  930.099465][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  930.619556][  T118] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  930.721374][T16450] xt_CT: You must specify a L4 protocol and not use inversions on it
[  930.889774][  T118] usb 1-1: Using ep0 maxpacket: 16
[  930.940393][  T118] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  930.966840][  T118] usb 1-1: New USB device found, idVendor=056a, idProduct=00df, bcdDevice= 0.00
[  930.982865][  T118] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  931.025101][T16453] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2126'.
[  931.034861][  T118] usb 1-1: config 0 descriptor??
[  931.054637][ T7530] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  931.088291][ T7530] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  931.114201][ T7530] bond0 (unregistering): Released all slaves
[  931.149612][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  931.179875][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  931.187792][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  931.196498][T16392] wlan0 speed is unknown, defaulting to 1000
[  931.627490][  T118] wacom 0003:056A:00DF.0009: Unknown device_type for 'HID 056a:00df'. Assuming pen.
[  931.730751][T16468] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  931.738540][T16468] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  931.747062][T16468] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  931.754887][T16468] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock
[  932.021155][ T5822] Bluetooth: hci4: command tx timeout
[  932.180160][  T118] wacom 0003:056A:00DF.0009: hidraw0: USB HID v0.03 Device [HID 056a:00df] on usb-dummy_hcd.0-1/input0
[  932.189463][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  932.217762][  T118] input: Wacom Bamboo 16FG 6x8 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00DF.0009/input/input17
[  932.220483][T16392] chnl_net:caif_netlink_parms(): no params data found
[  932.455038][  T118] usb 1-1: USB disconnect, device number 26
[  932.573165][   T30] kauditd_printk_skb: 36 callbacks suppressed
[  932.573179][   T30] audit: type=1326 audit(1741681628.757:2455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16472 comm="syz.4.2129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131218d169 code=0x7ffc0000
[  932.611241][   T30] audit: type=1326 audit(1741681628.777:2456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16472 comm="syz.4.2129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f131218d169 code=0x7ffc0000
[  932.701283][   T30] audit: type=1326 audit(1741681628.777:2457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16472 comm="syz.4.2129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131218d169 code=0x7ffc0000
[  932.772835][   T30] audit: type=1326 audit(1741681628.777:2458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16472 comm="syz.4.2129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f131218d169 code=0x7ffc0000
[  932.846980][   T30] audit: type=1326 audit(1741681628.777:2459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16472 comm="syz.4.2129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131218d169 code=0x7ffc0000
[  933.020651][T16392] bridge0: port 1(bridge_slave_0) entered blocking state
[  933.032974][   T30] audit: type=1326 audit(1741681628.777:2460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16472 comm="syz.4.2129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f131218d169 code=0x7ffc0000
[  933.116571][T16497] xt_hashlimit: max too large, truncated to 1048576
[  933.219473][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  933.579002][T16392] bridge0: port 1(bridge_slave_0) entered disabled state
[  933.672825][   T30] audit: type=1326 audit(1741681628.777:2461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16472 comm="syz.4.2129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131218d169 code=0x7ffc0000
[  933.699611][   T30] audit: type=1326 audit(1741681628.777:2462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16472 comm="syz.4.2129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f131218d169 code=0x7ffc0000
[  933.729734][   T30] audit: type=1326 audit(1741681628.777:2463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16472 comm="syz.4.2129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131218d169 code=0x7ffc0000
[  933.843655][ T5822] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection
[  933.879891][   T30] audit: type=1326 audit(1741681628.777:2464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16472 comm="syz.4.2129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f131218d169 code=0x7ffc0000
[  934.223201][T16392] bridge_slave_0: entered allmulticast mode
[  934.240795][T16392] bridge_slave_0: entered promiscuous mode
[  934.254167][T16392] bridge0: port 2(bridge_slave_1) entered blocking state
[  934.261289][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  934.269518][T16392] bridge0: port 2(bridge_slave_1) entered disabled state
[  934.276617][T16392] bridge_slave_1: entered allmulticast mode
[  934.279439][ T5831] Bluetooth: hci4: command tx timeout
[  934.347421][T16392] bridge_slave_1: entered promiscuous mode
[  934.883831][T16512] xt_hashlimit: max too large, truncated to 1048576
[  935.299477][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  935.771310][T16392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  935.836718][T16392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  936.142084][T16522] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  936.339460][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  936.435412][ T5831] Bluetooth: hci4: command tx timeout
[  937.225187][T16531] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  937.379459][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  937.506343][ T7530] hsr_slave_0: left promiscuous mode
[  937.536982][ T7530] hsr_slave_1: left promiscuous mode
[  937.550906][ T7530] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  937.573364][ T7530] batman_adv: batadv0: Removing interface: batadv_slave_0
[  937.609689][ T7530] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  937.629585][ T7530] batman_adv: batadv0: Removing interface: batadv_slave_1
[  937.797485][ T7530] veth1_macvtap: left promiscuous mode
[  937.804166][ T7530] veth0_macvtap: left promiscuous mode
[  937.810259][ T7530] veth1_vlan: left promiscuous mode
[  937.815533][ T7530] veth0_vlan: left promiscuous mode
[  937.878206][T16540] F2FS-fs (loop15): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  937.886098][T16540] F2FS-fs (loop15): Can't find valid F2FS filesystem in 1th superblock
[  937.894770][T16540] F2FS-fs (loop15): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  937.902648][T16540] F2FS-fs (loop15): Can't find valid F2FS filesystem in 2th superblock
[  938.315861][   T30] kauditd_printk_skb: 22 callbacks suppressed
[  938.315877][   T30] audit: type=1326 audit(1741681634.497:2487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16538 comm="syz.4.2141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131218d169 code=0x7ffc0000
[  938.369618][   T30] audit: type=1326 audit(1741681634.497:2488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16538 comm="syz.4.2141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131218d169 code=0x7ffc0000
[  938.407354][   T30] audit: type=1326 audit(1741681634.497:2489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16538 comm="syz.4.2141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f131218d169 code=0x7ffc0000
[  938.431080][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  938.545846][T16544] FAULT_INJECTION: forcing a failure.
[  938.545846][T16544] name failslab, interval 1, probability 0, space 0, times 0
[  938.563519][   T30] audit: type=1326 audit(1741681634.497:2490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16538 comm="syz.4.2141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131218d169 code=0x7ffc0000
[  938.590150][T16544] CPU: 1 UID: 0 PID: 16544 Comm: syz.7.2142 Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0
[  938.590164][T16544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  938.590171][T16544] Call Trace:
[  938.590174][T16544]  <TASK>
[  938.590178][T16544]  dump_stack_lvl+0x16c/0x1f0
[  938.590196][T16544]  should_fail_ex+0x50a/0x650
[  938.590212][T16544]  ? fs_reclaim_acquire+0xae/0x150
[  938.590229][T16544]  should_failslab+0xc2/0x120
[  938.590241][T16544]  kmem_cache_alloc_noprof+0x6e/0x3d0
[  938.590251][T16544]  ? __get_fs_type+0x21/0x170
[  938.590266][T16544]  ? getname_kernel+0x52/0x370
[  938.590279][T16544]  ? do_raw_read_unlock+0x44/0xe0
[  938.590290][T16544]  getname_kernel+0x52/0x370
[  938.590303][T16544]  kern_path+0x1d/0x50
[  938.590312][T16544]  tomoyo_mount_acl+0x62d/0x880
[  938.590327][T16544]  ? hlock_class+0x4e/0x130
[  938.590338][T16544]  ? __lock_acquire+0x15a9/0x3c40
[  938.590354][T16544]  ? __pfx_tomoyo_mount_acl+0x10/0x10
[  938.590370][T16544]  ? __pfx___lock_acquire+0x10/0x10
[  938.590384][T16544]  ? stack_trace_save+0x95/0xd0
[  938.590403][T16544]  ? trace_lock_acquire+0x14e/0x1f0
[  938.590415][T16544]  ? tomoyo_mount_permission+0x149/0x420
[  938.590429][T16544]  ? lock_acquire+0x2f/0xb0
[  938.590442][T16544]  ? tomoyo_mount_permission+0x149/0x420
[  938.590458][T16544]  tomoyo_mount_permission+0x16e/0x420
[  938.590476][T16544]  ? tomoyo_mount_permission+0x149/0x420
[  938.590491][T16544]  ? __pfx_tomoyo_mount_permission+0x10/0x10
[  938.590510][T16544]  ? get_current_fs_domain+0x184/0x1f0
[  938.590523][T16544]  security_sb_mount+0x9b/0x260
[  938.590538][T16544]  path_mount+0x129/0x1f10
[  938.590549][T16544]  ? kmem_cache_free+0x2e2/0x4d0
[  938.590559][T16544]  ? __pfx_path_mount+0x10/0x10
[  938.590572][T16544]  ? putname+0x13c/0x180
[  938.590585][T16544]  __x64_sys_mount+0x28f/0x310
[  938.590597][T16544]  ? __pfx___x64_sys_mount+0x10/0x10
[  938.590612][T16544]  do_syscall_64+0xcd/0x250
[  938.590627][T16544]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  938.590641][T16544] RIP: 0033:0x7f98c5f8d169
[  938.590650][T16544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  938.590659][T16544] RSP: 002b:00007f98c6d1d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  938.590669][T16544] RAX: ffffffffffffffda RBX: 00007f98c61a5fa0 RCX: 00007f98c5f8d169
[  938.590675][T16544] RDX: 00004000000000c0 RSI: 0000400000000000 RDI: 0000400000000140
[  938.590681][T16544] RBP: 00007f98c6d1d090 R08: 0000000000000000 R09: 0000000000000000
[  938.590687][T16544] R10: 0000000000208000 R11: 0000000000000246 R12: 0000000000000002
[  938.590693][T16544] R13: 0000000000000001 R14: 00007f98c61a5fa0 R15: 00007ffe4a120658
[  938.590705][T16544]  </TASK>
[  938.869442][   T30] audit: type=1326 audit(1741681634.497:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16538 comm="syz.4.2141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f131218d169 code=0x7ffc0000
[  938.895457][   T30] audit: type=1326 audit(1741681634.497:2492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16538 comm="syz.4.2141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131218d169 code=0x7ffc0000
[  938.924374][   T30] audit: type=1326 audit(1741681634.497:2493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16538 comm="syz.4.2141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f131218d169 code=0x7ffc0000
[  938.948194][   T30] audit: type=1326 audit(1741681634.497:2494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16538 comm="syz.4.2141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131218d169 code=0x7ffc0000
[  938.972119][   T30] audit: type=1326 audit(1741681634.497:2495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16538 comm="syz.4.2141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131218d169 code=0x7ffc0000
[  938.995943][   T30] audit: type=1326 audit(1741681634.497:2496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16538 comm="syz.4.2141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f131218d169 code=0x7ffc0000
[  939.086000][T16546] netlink: 'syz.7.2143': attribute type 1 has an invalid length.
[  939.093813][T16546] netlink: 236 bytes leftover after parsing attributes in process `syz.7.2143'.
[  939.469686][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  939.603850][T16563] xt_hashlimit: max too large, truncated to 1048576
[  940.499467][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  941.282694][ T7530] team0 (unregistering): Port device team_slave_1 removed
[  941.320187][ T7530] team0 (unregistering): Port device team_slave_0 removed
[  941.543410][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  941.686531][T16392] team0: Port device team_slave_0 added
[  941.830289][T16392] team0: Port device team_slave_1 added
[  941.887408][T16392] batman_adv: batadv0: Adding interface: batadv_slave_0
[  941.899425][T16392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  941.932172][T16583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2153'.
[  941.934678][T16392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  941.977505][T16392] batman_adv: batadv0: Adding interface: batadv_slave_1
[  941.984558][T16392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  942.016655][T16392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  942.255014][ T5872] usb 5-1: new full-speed USB device number 33 using dummy_hcd
[  942.589471][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  943.104049][T16591] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  943.155467][T16392] hsr_slave_0: entered promiscuous mode
[  943.162488][T16599] netlink: 'syz.7.2156': attribute type 1 has an invalid length.
[  943.165570][T16392] hsr_slave_1: entered promiscuous mode
[  943.189000][T16392] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  943.193896][T16599] netlink: 236 bytes leftover after parsing attributes in process `syz.7.2156'.
[  943.205849][T16392] Cannot create hsr debugfs directory
[  943.271502][ T5872] usb 5-1: not running at top speed; connect to a high speed hub
[  943.405935][ T5872] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  943.423146][ T5872] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[  943.438354][ T5872] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  943.450609][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  943.619472][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  943.669613][ T5872] usb 5-1: Product: syz
[  943.673803][ T5872] usb 5-1: Manufacturer: �
[  943.687446][ T5872] usb 5-1: SerialNumber: syz
[  943.700183][ T5872] usb 5-1: rejected 1 configuration due to insufficient available bus power
[  944.179957][T16617] xt_hashlimit: max too large, truncated to 1048576
[  944.212142][ T5872] usb 5-1: no configuration chosen from 1 choice
[  944.591059][T16623] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2159'.
[  944.659468][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  944.890125][ T5872] usb 5-1: USB disconnect, device number 33
[  944.907511][   T30] kauditd_printk_skb: 27 callbacks suppressed
[  944.907524][   T30] audit: type=1400 audit(1741681641.087:2524): avc:  denied  { read } for  pid=16618 comm="syz.7.2159" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  944.940539][   T30] audit: type=1400 audit(1741681641.087:2525): avc:  denied  { open } for  pid=16618 comm="syz.7.2159" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  945.484764][   T30] audit: type=1400 audit(1741681641.657:2526): avc:  denied  { execute } for  pid=16618 comm="syz.7.2159" path="/syzcgroup/unified/syz7/cgroup.procs" dev="cgroup2" ino=367 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1
[  945.699456][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  945.785619][T16392] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  945.824376][T16392] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  945.867143][T16392] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  945.903300][T16392] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  945.977766][   T30] audit: type=1400 audit(1741681642.147:2527): avc:  denied  { create } for  pid=16640 comm="syz.0.2162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  946.026171][   T30] audit: type=1400 audit(1741681642.157:2528): avc:  denied  { setopt } for  pid=16640 comm="syz.0.2162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  946.078717][   T30] audit: type=1400 audit(1741681642.157:2529): avc:  denied  { ioctl } for  pid=16640 comm="syz.0.2162" path="socket:[54497]" dev="sockfs" ino=54497 ioctlcmd=0x9426 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  946.105439][T16392] 8021q: adding VLAN 0 to HW filter on device bond0
[  946.138306][T16392] 8021q: adding VLAN 0 to HW filter on device team0
[  946.173194][ T7530] bridge0: port 1(bridge_slave_0) entered blocking state
[  946.180304][ T7530] bridge0: port 1(bridge_slave_0) entered forwarding state
[  946.221421][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[  946.228498][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[  946.386379][T16392] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  946.411667][   T30] audit: type=1400 audit(1741681642.587:2530): avc:  denied  { execute } for  pid=16650 comm="syz.4.2165" dev="hugetlbfs" ino=54580 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  946.452204][   T30] audit: type=1400 audit(1741681642.587:2531): avc:  denied  { execute_no_trans } for  pid=16650 comm="syz.4.2165" path=2F6D656D66643A202864656C6574656429 dev="hugetlbfs" ino=54580 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  946.457376][T16392] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  946.749465][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  946.983459][   T30] audit: type=1400 audit(1741681642.627:2532): avc:  denied  { nlmsg_write } for  pid=16654 comm="syz.7.2164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  947.096476][   T30] audit: type=1400 audit(1741681642.697:2533): avc:  denied  { read write } for  pid=16654 comm="syz.7.2164" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  947.527271][T16392] 8021q: adding VLAN 0 to HW filter on device batadv0
[  947.705416][T16684] netlink: 'syz.4.2169': attribute type 1 has an invalid length.
[  947.739452][T16684] netlink: 236 bytes leftover after parsing attributes in process `syz.4.2169'.
[  947.779547][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  948.819516][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  949.117587][T16392] veth0_vlan: entered promiscuous mode
[  949.156141][T16392] veth1_vlan: entered promiscuous mode
[  949.309544][T16719] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2175'.
[  949.452476][T16725] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2174'.
[  949.466591][T16392] veth0_macvtap: entered promiscuous mode
[  949.869453][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  950.362148][T16392] veth1_macvtap: entered promiscuous mode
[  950.605617][T16392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  950.777419][T16392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  950.849100][T16392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  950.879759][T16392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  950.894076][T16392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  950.906918][T16392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  950.909460][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  950.920922][T16392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  950.951956][T16392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  951.320099][T16392] batman_adv: batadv0: Interface activated: batadv_slave_0
[  951.374756][T16392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  951.427591][   T30] kauditd_printk_skb: 31 callbacks suppressed
[  951.427606][   T30] audit: type=1400 audit(1741681647.607:2565): avc:  denied  { execute_no_trans } for  pid=16750 comm="syz.7.2179" path="/41/file1" dev="tmpfs" ino=228 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  951.430311][T16392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  951.484145][   T30] audit: type=1400 audit(1741681647.637:2566): avc:  denied  { remount } for  pid=16750 comm="syz.7.2179" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  951.641765][   T30] audit: type=1326 audit(1741681647.657:2567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16750 comm="syz.7.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c5f8d169 code=0x7ffc0000
[  951.673544][T16392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  951.696473][T16392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  951.707269][   T30] audit: type=1326 audit(1741681647.657:2568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16750 comm="syz.7.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f98c5f8d169 code=0x7ffc0000
[  951.731166][T16392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  951.741956][T16392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  951.752076][   T30] audit: type=1326 audit(1741681647.657:2569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16750 comm="syz.7.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c5f8d169 code=0x7ffc0000
[  951.775628][T16392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  951.819271][T16392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  951.855190][   T30] audit: type=1326 audit(1741681647.657:2570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16750 comm="syz.7.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c5f8d169 code=0x7ffc0000
[  951.888785][T16392] batman_adv: batadv0: Interface activated: batadv_slave_1
[  951.939453][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  952.068711][T16392] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  952.077548][T16392] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  952.086406][   T30] audit: type=1326 audit(1741681647.657:2571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16750 comm="syz.7.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f98c5f8d169 code=0x7ffc0000
[  952.111374][T16392] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  952.141399][T16392] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  952.143073][   T30] audit: type=1326 audit(1741681647.657:2572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16750 comm="syz.7.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c5f8d169 code=0x7ffc0000
[  952.895481][T16765] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  952.963278][   T30] audit: type=1326 audit(1741681647.657:2573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16750 comm="syz.7.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c5f8d169 code=0x7ffc0000
[  952.989039][   T30] audit: type=1326 audit(1741681647.657:2574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16750 comm="syz.7.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f98c5f8d169 code=0x7ffc0000
[  952.989486][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  953.274357][   T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  953.293521][   T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  953.444111][T16781] netlink: 'syz.3.2184': attribute type 1 has an invalid length.
[  953.452389][T16781] netlink: 236 bytes leftover after parsing attributes in process `syz.3.2184'.
[  953.479061][ T3534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  953.514832][ T3534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  954.029513][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  954.656381][ T5831] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  954.980857][T16827] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2189'.
[  955.059466][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  956.099499][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  956.629155][ T7530] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  956.750087][   T30] kauditd_printk_skb: 2329 callbacks suppressed
[  956.750102][   T30] audit: type=1326 audit(1741681652.927:4904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16845 comm="syz.0.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287018d169 code=0x7ffc0000
[  956.843077][   T30] audit: type=1326 audit(1741681652.927:4905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16845 comm="syz.0.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287018d169 code=0x7ffc0000
[  956.898070][   T30] audit: type=1326 audit(1741681652.927:4906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16845 comm="syz.0.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f287018d169 code=0x7ffc0000
[  957.040695][ T7530] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  957.085080][   T30] audit: type=1326 audit(1741681652.927:4907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16845 comm="syz.0.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287018d169 code=0x7ffc0000
[  957.139472][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  957.181000][   T30] audit: type=1326 audit(1741681652.927:4908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16845 comm="syz.0.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287018d169 code=0x7ffc0000
[  957.230903][ T7530] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  957.277215][   T30] audit: type=1326 audit(1741681652.927:4909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16845 comm="syz.0.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f287018d169 code=0x7ffc0000
[  957.629858][   T30] audit: type=1326 audit(1741681652.927:4910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16845 comm="syz.0.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287018d169 code=0x7ffc0000
[  957.675438][   T30] audit: type=1326 audit(1741681652.927:4911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16845 comm="syz.0.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f287018d169 code=0x7ffc0000
[  957.750016][ T7530] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  957.780507][   T30] audit: type=1326 audit(1741681652.927:4912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16845 comm="syz.0.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287018d169 code=0x7ffc0000
[  957.937310][   T30] audit: type=1326 audit(1741681652.927:4913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16845 comm="syz.0.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f287018d169 code=0x7ffc0000
[  958.049761][ T5822] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  958.059647][ T5822] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  958.070287][ T5822] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  958.079624][ T5822] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  958.088772][ T5822] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  958.096581][ T5822] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  958.166549][T16866] lo speed is unknown, defaulting to 1000
[  958.179455][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  958.218142][T16866] wg2 speed is unknown, defaulting to 1000
[  958.541752][ T7530] bridge_slave_1: left allmulticast mode
[  959.106567][ T7530] bridge_slave_1: left promiscuous mode
[  959.131658][ T7530] bridge0: port 2(bridge_slave_1) entered disabled state
[  959.151049][ T7530] bridge_slave_0: left allmulticast mode
[  959.156713][ T7530] bridge_slave_0: left promiscuous mode
[  959.189874][ T7530] bridge0: port 1(bridge_slave_0) entered disabled state
[  959.219469][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  959.411126][T16885] netlink: 'syz.0.2199': attribute type 1 has an invalid length.
[  959.439456][T16885] netlink: 236 bytes leftover after parsing attributes in process `syz.0.2199'.
[  959.715636][T16895] xt_hashlimit: max too large, truncated to 1048576
[  960.180237][ T5822] Bluetooth: hci4: command tx timeout
[  960.259473][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  960.312573][T16903] evm: overlay not supported
[  960.629796][T16917] netlink: 148 bytes leftover after parsing attributes in process `syz.7.2203'.
[  960.756636][ T7530] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  960.776152][ T7530] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  960.791949][ T7530] bond0 (unregistering): Released all slaves
[  960.806383][T16866] wlan0 speed is unknown, defaulting to 1000
[  960.879689][  T118] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  961.093851][T16925] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2204'.
[  961.309496][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  961.423079][  T118] usb 8-1: config 2 has an invalid interface number: 233 but max is 1
[  961.432033][  T118] usb 8-1: config 2 has an invalid interface number: 171 but max is 1
[  961.469901][  T118] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  961.504361][  T118] usb 8-1: config 2 has no interface number 0
[  961.512428][  T118] usb 8-1: config 2 has no interface number 1
[  961.536575][  T118] usb 8-1: config 2 interface 233 altsetting 15 has an endpoint descriptor with address 0xD5, changing to 0x85
[  961.638187][T16932] netlink: 87 bytes leftover after parsing attributes in process `syz.3.2205'.
[  961.688674][  T118] usb 8-1: config 2 interface 233 altsetting 15 endpoint 0x85 has invalid maxpacket 1024, setting to 64
[  961.759480][  T118] usb 8-1: config 2 interface 233 altsetting 15 has a duplicate endpoint with address 0x5, skipping
[  961.827294][T16866] chnl_net:caif_netlink_parms(): no params data found
[  961.844716][  T118] usb 8-1: config 2 interface 171 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  961.909493][  T118] usb 8-1: config 2 interface 233 has no altsetting 0
[  961.926382][  T118] usb 8-1: config 2 interface 171 has no altsetting 0
[  962.038616][  T118] usb 8-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=73.1b
[  962.349481][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  962.582405][ T5822] Bluetooth: hci4: command tx timeout
[  962.584555][  T118] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  962.596106][  T118] usb 8-1: Product: syz
[  962.601961][  T118] usb 8-1: Manufacturer: syz
[  962.627515][  T118] usb 8-1: SerialNumber: syz
[  963.086984][T16917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  963.139686][T16917] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  963.196106][ T7530] hsr_slave_0: left promiscuous mode
[  963.250380][ T7530] hsr_slave_1: left promiscuous mode
[  963.256122][T16917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  963.274444][ T7530] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  963.291575][T16917] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  963.309445][ T7530] batman_adv: batadv0: Removing interface: batadv_slave_0
[  963.323191][ T7530] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  963.371823][  T118] usb 8-1: USB disconnect, device number 5
[  963.379486][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  963.386633][ T7530] batman_adv: batadv0: Removing interface: batadv_slave_1
[  963.471349][ T7530] veth1_macvtap: left promiscuous mode
[  963.507299][ T7530] veth0_macvtap: left promiscuous mode
[  963.522983][ T7530] veth1_vlan: left promiscuous mode
[  963.535957][T16962] netlink: 'syz.0.2210': attribute type 1 has an invalid length.
[  963.563860][ T7530] veth0_vlan: left promiscuous mode
[  963.619518][T16962] netlink: 236 bytes leftover after parsing attributes in process `syz.0.2210'.
[  964.419534][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  964.689471][ T5822] Bluetooth: hci4: command tx timeout
[  964.748942][   T30] kauditd_printk_skb: 10 callbacks suppressed
[  964.748957][   T30] audit: type=1326 audit(1741681660.927:4924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16974 comm="syz.7.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c5f8d169 code=0x7ffc0000
[  964.978541][ T5822] Bluetooth: hci0: ACL packet for unknown connection handle 201
[  965.459450][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  965.789505][   T30] audit: type=1326 audit(1741681660.927:4925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16974 comm="syz.7.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c5f8d169 code=0x7ffc0000
[  966.099446][ T5822] Bluetooth: hci0: command 0x0406 tx timeout
[  966.143788][   T30] audit: type=1326 audit(1741681660.967:4926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16974 comm="syz.7.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f98c5f8d169 code=0x7ffc0000
[  966.198350][   T30] audit: type=1400 audit(1741681662.377:4927): avc:  denied  { read } for  pid=16986 comm="syz.4.2216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  966.499455][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  966.860115][ T5822] Bluetooth: hci4: command tx timeout
[  966.879451][   T30] audit: type=1400 audit(1741681662.867:4928): avc:  denied  { mounton } for  pid=16988 comm="syz.0.2217" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  966.903559][T16991] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  967.154717][ T7530] team0 (unregistering): Port device team_slave_1 removed
[  967.199783][    T9] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  967.210534][ T7530] team0 (unregistering): Port device team_slave_0 removed
[  967.364215][    T9] usb 5-1: Using ep0 maxpacket: 32
[  967.371493][    T9] usb 5-1: unable to read config index 0 descriptor/start: -61
[  967.379068][    T9] usb 5-1: can't read configurations, error -61
[  967.522597][    T9] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  967.540859][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  967.680001][T16866] bridge0: port 1(bridge_slave_0) entered blocking state
[  967.687095][T16866] bridge0: port 1(bridge_slave_0) entered disabled state
[  967.728084][T16866] bridge_slave_0: entered allmulticast mode
[  967.757003][T16866] bridge_slave_0: entered promiscuous mode
[  967.785842][T16866] bridge0: port 2(bridge_slave_1) entered blocking state
[  967.794539][    T9] usb 5-1: Using ep0 maxpacket: 32
[  967.802673][T16866] bridge0: port 2(bridge_slave_1) entered disabled state
[  967.814827][    T9] usb 5-1: unable to read config index 0 descriptor/start: -61
[  967.832712][ T5822] Bluetooth: hci2: ACL packet for unknown connection handle 201
[  967.833003][T16866] bridge_slave_1: entered allmulticast mode
[  967.963086][    T9] usb 5-1: can't read configurations, error -61
[  967.971501][T16866] bridge_slave_1: entered promiscuous mode
[  967.978910][    T9] usb usb5-port1: attempt power cycle
[  968.071784][T17011] FAULT_INJECTION: forcing a failure.
[  968.071784][T17011] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  968.084922][T17011] CPU: 1 UID: 0 PID: 17011 Comm: syz.0.2218 Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0
[  968.084944][T17011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  968.084959][T17011] Call Trace:
[  968.084965][T17011]  <TASK>
[  968.084972][T17011]  dump_stack_lvl+0x16c/0x1f0
[  968.084999][T17011]  should_fail_ex+0x50a/0x650
[  968.085028][T17011]  _copy_from_user+0x2e/0xd0
[  968.085046][T17011]  __sys_bpf+0x21c/0x49c0
[  968.085064][T17011]  ? __pfx_lock_release+0x10/0x10
[  968.085089][T17011]  ? __pfx___sys_bpf+0x10/0x10
[  968.085107][T17011]  ? vfs_write+0x306/0x1150
[  968.085127][T17011]  ? __mutex_unlock_slowpath+0x164/0x6a0
[  968.085163][T17011]  ? fput+0x67/0x440
[  968.085183][T17011]  ? ksys_write+0x1ba/0x250
[  968.085197][T17011]  ? __pfx_ksys_write+0x10/0x10
[  968.085216][T17011]  __x64_sys_bpf+0x78/0xc0
[  968.085234][T17011]  ? lockdep_hardirqs_on+0x7c/0x110
[  968.085254][T17011]  do_syscall_64+0xcd/0x250
[  968.085277][T17011]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  968.085300][T17011] RIP: 0033:0x7f287018d169
[  968.085314][T17011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  968.085329][T17011] RSP: 002b:00007f2870fe0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  968.085345][T17011] RAX: ffffffffffffffda RBX: 00007f28703a6160 RCX: 00007f287018d169
[  968.085355][T17011] RDX: 0000000000000094 RSI: 00004000000000c0 RDI: 0000000000000005
[  968.085365][T17011] RBP: 00007f2870fe0090 R08: 0000000000000000 R09: 0000000000000000
[  968.085375][T17011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  968.085385][T17011] R13: 0000000000000000 R14: 00007f28703a6160 R15: 00007ffccf5b3b98
[  968.085407][T17011]  </TASK>
[  968.360787][    T9] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  968.413989][   T30] audit: type=1400 audit(1741681664.577:4929): avc:  denied  { write } for  pid=17012 comm="syz.3.2220" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  968.416219][T16866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  968.454315][T16866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  968.462216][    T9] usb 5-1: Using ep0 maxpacket: 32
[  968.494735][T16866] team0: Port device team_slave_0 added
[  968.525347][T16866] team0: Port device team_slave_1 added
[  968.526263][    T9] usb 5-1: unable to read config index 0 descriptor/start: -61
[  968.554990][    T9] usb 5-1: can't read configurations, error -61
[  968.571096][   T30] audit: type=1400 audit(1741681664.647:4930): avc:  denied  { create } for  pid=17012 comm="syz.3.2220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  968.599488][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  968.633497][T16866] batman_adv: batadv0: Adding interface: batadv_slave_0
[  968.639615][   T30] audit: type=1400 audit(1741681664.647:4931): avc:  denied  { bind } for  pid=17012 comm="syz.3.2220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  968.667302][T16866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  968.706373][T16866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  968.716886][   T30] audit: type=1400 audit(1741681664.647:4932): avc:  denied  { name_bind } for  pid=17012 comm="syz.3.2220" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1
[  968.716919][   T30] audit: type=1400 audit(1741681664.647:4933): avc:  denied  { node_bind } for  pid=17012 comm="syz.3.2220" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1
[  968.739436][    T9] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  968.781021][T16866] batman_adv: batadv0: Adding interface: batadv_slave_1
[  968.820105][    T9] usb 5-1: Using ep0 maxpacket: 32
[  968.821301][T16866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  968.826652][    T9] usb 5-1: unable to read config index 0 descriptor/start: -61
[  968.862732][T16866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  968.901833][    T9] usb 5-1: can't read configurations, error -61
[  968.924328][    T9] usb usb5-port1: unable to enumerate USB device
[  968.978081][T16866] hsr_slave_0: entered promiscuous mode
[  969.003776][T16866] hsr_slave_1: entered promiscuous mode
[  969.013933][T16866] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  969.041065][T16866] Cannot create hsr debugfs directory
[  969.231958][T17035] netlink: 'syz.7.2223': attribute type 1 has an invalid length.
[  969.251124][T17035] netlink: 236 bytes leftover after parsing attributes in process `syz.7.2223'.
[  969.629449][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  970.110391][T17054] netlink: 35 bytes leftover after parsing attributes in process `syz.4.2226'.
[  970.612960][   T30] kauditd_printk_skb: 4 callbacks suppressed
[  970.612975][   T30] audit: type=1400 audit(1741681666.797:4938): avc:  denied  { create } for  pid=17064 comm="syz.4.2229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  970.659458][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  970.745002][   T30] audit: type=1400 audit(1741681666.837:4939): avc:  denied  { write } for  pid=17064 comm="syz.4.2229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  970.942848][T17068] pimreg3: entered allmulticast mode
[  971.561062][T16866] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  971.639434][ T5822] Bluetooth: hci1: command 0x041b tx timeout
[  971.651230][T16866] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  971.699451][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  971.801348][T16866] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  972.150869][T16866] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  972.309964][T17061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2228'.
[  972.530704][   T30] audit: type=1400 audit(1741681668.587:4940): avc:  denied  { getopt } for  pid=17081 comm="syz.0.2231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  972.749438][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  972.865987][T16866] 8021q: adding VLAN 0 to HW filter on device bond0
[  972.886012][   T30] audit: type=1400 audit(1741681668.597:4941): avc:  denied  { read } for  pid=17081 comm="syz.0.2231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  973.031436][T16866] 8021q: adding VLAN 0 to HW filter on device team0
[  973.121315][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[  973.128398][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[  973.779479][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  974.496835][T16866] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  974.511521][T16866] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  974.524819][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[  974.532657][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[  974.819440][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  975.672453][T17138] xt_hashlimit: max too large, truncated to 1048576
[  975.859457][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  976.561974][T16866] 8021q: adding VLAN 0 to HW filter on device batadv0
[  976.568984][T17145] netlink: 'syz.4.2238': attribute type 1 has an invalid length.
[  976.694249][T17145] netlink: 236 bytes leftover after parsing attributes in process `syz.4.2238'.
[  976.792605][T17152] F2FS-fs (loop15): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  976.800531][T17152] F2FS-fs (loop15): Can't find valid F2FS filesystem in 1th superblock
[  976.809016][T17152] F2FS-fs (loop15): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  976.816905][T17152] F2FS-fs (loop15): Can't find valid F2FS filesystem in 2th superblock
[  976.899472][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  977.613408][T16866] veth0_vlan: entered promiscuous mode
[  977.647498][T16866] veth1_vlan: entered promiscuous mode
[  977.665909][   T30] audit: type=1400 audit(1741681673.837:4942): avc:  denied  { ioctl } for  pid=17169 comm="syz.4.2242" path="socket:[55783]" dev="sockfs" ino=55783 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  977.690933][T16866] veth0_macvtap: entered promiscuous mode
[  977.753520][T16866] veth1_macvtap: entered promiscuous mode
[  977.775651][T16866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  977.806668][T16866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  977.826346][T16866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  977.829442][T13621] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  977.838111][T16866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  977.939451][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  978.009434][T13621] usb 1-1: Using ep0 maxpacket: 16
[  978.028385][T13621] usb 1-1: config 0 has no interfaces?
[  978.029380][T16866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  978.037128][T13621] usb 1-1: New USB device found, idVendor=05ac, idProduct=1202, bcdDevice=12.1e
[  978.047376][T16866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  978.063989][T16866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  978.120479][T16866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  978.172881][ T5822] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection
[  978.370827][T16866] batman_adv: batadv0: Interface activated: batadv_slave_0
[  978.567086][T13621] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  978.586246][T16866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  978.635725][T13621] usb 1-1: Product: syz
[  978.639573][T16866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  978.639954][T13621] usb 1-1: Manufacturer: syz
[  978.654319][T13621] usb 1-1: SerialNumber: syz
[  978.660944][T13621] apple-mfi-fastcharge 1-1: config 0 descriptor??
[  978.683141][T16866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  978.706266][T16866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  978.716627][T16866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  978.727187][T16866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  978.737678][T16866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  978.749443][T16866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  978.761004][T16866] batman_adv: batadv0: Interface activated: batadv_slave_1
[  978.773675][T16866] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  978.782737][T16866] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  978.793640][T16866] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  978.828621][T16866] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  978.979436][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  979.489566][ T5822] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection
[  980.019438][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  980.043172][ T3534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  980.043731][ T8035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  980.065005][ T8035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  980.229257][T17204] xt_hashlimit: max too large, truncated to 1048576
[  980.597935][ T3534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  980.766118][   T30] audit: type=1400 audit(1741681676.947:4943): avc:  denied  { map } for  pid=17160 comm="syz.0.2240" path="socket:[55768]" dev="sockfs" ino=55768 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  980.856235][T17210] FAULT_INJECTION: forcing a failure.
[  980.856235][T17210] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  980.889547][   T30] audit: type=1400 audit(1741681676.947:4944): avc:  denied  { read } for  pid=17160 comm="syz.0.2240" path="socket:[55768]" dev="sockfs" ino=55768 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  980.933534][T17210] CPU: 0 UID: 0 PID: 17210 Comm: syz.7.2249 Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0
[  980.933557][T17210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  980.933568][T17210] Call Trace:
[  980.933573][T17210]  <TASK>
[  980.933579][T17210]  dump_stack_lvl+0x16c/0x1f0
[  980.933609][T17210]  should_fail_ex+0x50a/0x650
[  980.933636][T17210]  _copy_from_iter+0x2a1/0x1560
[  980.933654][T17210]  ? trace_lock_acquire+0x14e/0x1f0
[  980.933675][T17210]  ? __pfx__copy_from_iter+0x10/0x10
[  980.933690][T17210]  ? __virt_addr_valid+0x1a4/0x590
[  980.933711][T17210]  ? __virt_addr_valid+0x5e/0x590
[  980.933727][T17210]  ? __phys_addr_symbol+0x30/0x80
[  980.933743][T17210]  ? __check_object_size+0x488/0x710
[  980.933764][T17210]  file_tty_write.constprop.0+0x48d/0x9a0
[  980.933791][T17210]  vfs_write+0x5ae/0x1150
[  980.933808][T17210]  ? __pfx_tty_write+0x10/0x10
[  980.933828][T17210]  ? __pfx_vfs_write+0x10/0x10
[  980.933856][T17210]  ? __fget_files+0x40/0x3a0
[  980.933884][T17210]  ksys_write+0x12b/0x250
[  980.933899][T17210]  ? __pfx_ksys_write+0x10/0x10
[  980.933922][T17210]  do_syscall_64+0xcd/0x250
[  980.933946][T17210]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  980.933967][T17210] RIP: 0033:0x7f98c5f8d169
[  980.933980][T17210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  980.933995][T17210] RSP: 002b:00007f98c6d1d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  980.934010][T17210] RAX: ffffffffffffffda RBX: 00007f98c61a5fa0 RCX: 00007f98c5f8d169
[  980.934021][T17210] RDX: 0000000000001006 RSI: 0000400000000000 RDI: 0000000000000004
[  980.934030][T17210] RBP: 00007f98c6d1d090 R08: 0000000000000000 R09: 0000000000000000
[  980.934039][T17210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  980.934048][T17210] R13: 0000000000000000 R14: 00007f98c61a5fa0 R15: 00007ffe4a120658
[  980.934077][T17210]  </TASK>
[  981.018115][   T30] audit: type=1326 audit(1741681677.187:4945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17218 comm="syz.4.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131218d169 code=0x7ffc0000
[  981.030698][   T30] audit: type=1326 audit(1741681677.187:4946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17218 comm="syz.4.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131218d169 code=0x7ffc0000
[  981.030733][   T30] audit: type=1326 audit(1741681677.187:4947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17218 comm="syz.4.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f131218d169 code=0x7ffc0000
[  981.030763][   T30] audit: type=1326 audit(1741681677.187:4948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17218 comm="syz.4.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131218d169 code=0x7ffc0000
[  981.030809][   T30] audit: type=1326 audit(1741681677.187:4949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17218 comm="syz.4.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131218d169 code=0x7ffc0000
[  981.030839][   T30] audit: type=1326 audit(1741681677.187:4950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17218 comm="syz.4.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f131218d169 code=0x7ffc0000
[  981.030870][   T30] audit: type=1326 audit(1741681677.187:4951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17218 comm="syz.4.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131218d169 code=0x7ffc0000
[  981.059444][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  981.365248][   T63] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  981.608961][   T63] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  981.700403][   T63] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  981.799092][   T63] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  981.901495][   T63] bridge_slave_1: left allmulticast mode
[  981.901511][   T63] bridge_slave_1: left promiscuous mode
[  981.901579][   T63] bridge0: port 2(bridge_slave_1) entered disabled state
[  981.902333][   T63] bridge_slave_0: left allmulticast mode
[  981.902441][   T63] bridge_slave_0: left promiscuous mode
[  981.903548][   T63] bridge0: port 1(bridge_slave_0) entered disabled state
[  982.007563][    T9] apple-mfi-fastcharge 1-1: USB disconnect, device number 27
[  982.099487][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  982.982854][   T52] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  983.149462][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  983.409441][   T52] usb 8-1: Using ep0 maxpacket: 32
[  983.425956][   T52] usb 8-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=b2.bf
[  983.435383][   T52] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  983.504470][   T52] usb 8-1: Product: syz
[  983.514523][   T52] usb 8-1: SerialNumber: syz
[  983.551438][   T52] usb 8-1: config 0 descriptor??
[  983.570280][ T5822] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  983.594865][ T5822] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  983.602882][ T5822] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  983.613300][ T5822] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  983.621081][ T5822] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  983.628279][ T5822] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  983.800981][   T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  983.842819][   T30] kauditd_printk_skb: 26 callbacks suppressed
[  983.842835][   T30] audit: type=1400 audit(1741681680.017:4978): avc:  denied  { cmd } for  pid=17249 comm="syz.7.2253" path="socket:[57285]" dev="sockfs" ino=57285 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  983.934738][   T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  984.041872][ T5831] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection
[  984.179475][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  984.583903][   T63] bond0 (unregistering): Released all slaves
[  984.648388][T17260] lo speed is unknown, defaulting to 1000
[  984.666373][T17260] wg2 speed is unknown, defaulting to 1000
[  984.819536][    T9] usb 5-1: new full-speed USB device number 38 using dummy_hcd
[  984.977782][T15255] usb 8-1: USB disconnect, device number 6
[  984.990332][T17260] wlan0 speed is unknown, defaulting to 1000
[  984.997746][    T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  985.043143][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  985.068649][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  985.111039][    T9] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  985.149196][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  985.162327][    T9] usb 5-1: Product: syz
[  985.166496][    T9] usb 5-1: Manufacturer: syz
[  985.189393][    T9] usb 5-1: SerialNumber: syz
[  985.218920][    T9] usb 5-1: config 0 descriptor??
[  985.229446][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  985.235883][    T9] streamzap 5-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?!
[  985.579709][T17294] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  985.844927][ T5822] Bluetooth: hci4: command tx timeout
[  985.846186][T17296] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2259'.
[  986.173847][    T9] usb 5-1: USB disconnect, device number 38
[  986.259438][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  986.456056][   T63] hsr_slave_0: left promiscuous mode
[  986.480867][   T63] hsr_slave_1: left promiscuous mode
[  986.495200][   T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  986.504520][   T63] batman_adv: batadv0: Removing interface: batadv_slave_0
[  986.592103][   T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  987.299500][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  987.320211][   T63] batman_adv: batadv0: Removing interface: batadv_slave_1
[  987.666605][   T63] veth1_macvtap: left promiscuous mode
[  987.799433][   T63] veth0_macvtap: left promiscuous mode
[  987.805032][   T63] veth1_vlan: left promiscuous mode
[  987.824607][   T30] audit: type=1400 audit(1741681683.917:4979): avc:  denied  { create } for  pid=17322 comm="syz.4.2265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  987.849949][   T63] veth0_vlan: left promiscuous mode
[  987.969892][ T5822] Bluetooth: hci4: command tx timeout
[  988.109725][T17328] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  988.297610][    T9] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  988.339444][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  988.437753][T17334] FAULT_INJECTION: forcing a failure.
[  988.437753][T17334] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  988.487243][T17334] CPU: 0 UID: 0 PID: 17334 Comm: syz.3.2264 Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0
[  988.487267][T17334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  988.487277][T17334] Call Trace:
[  988.487282][T17334]  <TASK>
[  988.487289][T17334]  dump_stack_lvl+0x16c/0x1f0
[  988.487315][T17334]  should_fail_ex+0x50a/0x650
[  988.487343][T17334]  _copy_from_user+0x2e/0xd0
[  988.487360][T17334]  copy_msghdr_from_user+0x99/0x160
[  988.487383][T17334]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  988.487415][T17334]  ___sys_sendmsg+0xff/0x1e0
[  988.487440][T17334]  ? __pfx____sys_sendmsg+0x10/0x10
[  988.487471][T17334]  ? __pfx_lock_release+0x10/0x10
[  988.487492][T17334]  ? trace_lock_acquire+0x14e/0x1f0
[  988.487519][T17334]  ? __fget_files+0x206/0x3a0
[  988.487540][T17334]  __sys_sendmsg+0x16e/0x220
[  988.487565][T17334]  ? __pfx___sys_sendmsg+0x10/0x10
[  988.487602][T17334]  do_syscall_64+0xcd/0x250
[  988.487624][T17334]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  988.487644][T17334] RIP: 0033:0x7f935bf8d169
[  988.487660][T17334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  988.487670][T17334] RSP: 002b:00007f935ce65038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  988.487680][T17334] RAX: ffffffffffffffda RBX: 00007f935c1a5fa0 RCX: 00007f935bf8d169
[  988.487687][T17334] RDX: 0000000000004880 RSI: 0000400000000140 RDI: 0000000000000006
[  988.487693][T17334] RBP: 00007f935ce65090 R08: 0000000000000000 R09: 0000000000000000
[  988.487699][T17334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  988.487705][T17334] R13: 0000000000000000 R14: 00007f935c1a5fa0 R15: 00007ffe94ee7d28
[  988.487717][T17334]  </TASK>
[  988.842963][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  988.857244][    T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  988.863168][   T30] audit: type=1326 audit(1741681685.027:4980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17338 comm="syz.0.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287018d169 code=0x7ffc0000
[  988.870790][    T9] usb 5-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00
[  988.926740][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  988.999387][   T30] audit: type=1326 audit(1741681685.107:4981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17338 comm="syz.0.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f287018d169 code=0x7ffc0000
[  989.014679][    T9] usb 5-1: config 0 descriptor??
[  989.025203][   T30] audit: type=1326 audit(1741681685.107:4982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17338 comm="syz.0.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287018d169 code=0x7ffc0000
[  989.379551][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  989.680186][   T30] audit: type=1326 audit(1741681685.107:4983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17338 comm="syz.0.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287018d169 code=0x7ffc0000
[  989.744479][   T30] audit: type=1326 audit(1741681685.107:4984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17338 comm="syz.0.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f287018d169 code=0x7ffc0000
[  989.849513][   T30] audit: type=1326 audit(1741681685.107:4985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17338 comm="syz.0.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287018d169 code=0x7ffc0000
[  989.942912][   T30] audit: type=1326 audit(1741681685.107:4986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17338 comm="syz.0.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287018d169 code=0x7ffc0000
[  989.976676][   T30] audit: type=1326 audit(1741681685.107:4987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17338 comm="syz.0.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f287018d169 code=0x7ffc0000
[  990.080206][    T9] megaworld 0003:07B5:0312.000A: unknown main item tag 0x0
[  990.087445][    T9] megaworld 0003:07B5:0312.000A: unknown main item tag 0x0
[  990.095365][   T30] audit: type=1326 audit(1741681685.107:4988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17338 comm="syz.0.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287018d169 code=0x7ffc0000
[  990.127539][    T9] megaworld 0003:07B5:0312.000A: unknown main item tag 0x0
[  990.144138][    T9] megaworld 0003:07B5:0312.000A: unknown main item tag 0x0
[  990.157238][    T9] megaworld 0003:07B5:0312.000A: unknown main item tag 0x0
[  990.161093][T15255] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  990.164820][   T30] audit: type=1326 audit(1741681685.107:4989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17338 comm="syz.0.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287018d169 code=0x7ffc0000
[  990.209310][    T9] megaworld 0003:07B5:0312.000A: hidraw0: USB HID v0.00 Device [HID 07b5:0312] on usb-dummy_hcd.4-1/input0
[  990.237639][    T9] megaworld 0003:07B5:0312.000A: no inputs found
[  990.259466][ T5822] Bluetooth: hci4: command tx timeout
[  990.429569][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  990.484962][T15255] usb 4-1: Using ep0 maxpacket: 8
[  990.493526][T15255] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  990.503266][T15255] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  990.511296][T15255] usb 4-1: Product: syz
[  990.515618][T15255] usb 4-1: Manufacturer: syz
[  990.520499][T15255] usb 4-1: SerialNumber: syz
[  990.526786][T15255] usb 4-1: config 0 descriptor??
[  990.547425][   T63] team0 (unregistering): Port device team_slave_1 removed
[  990.589208][   T63] team0 (unregistering): Port device team_slave_0 removed
[  990.749394][T15255] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  991.046997][T17384] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2271'.
[  991.130644][T17260] chnl_net:caif_netlink_parms(): no params data found
[  991.459499][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  991.522126][T17392] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ'
[  991.545192][T17260] bridge0: port 1(bridge_slave_0) entered blocking state
[  991.558518][T17260] bridge0: port 1(bridge_slave_0) entered disabled state
[  991.565963][T17260] bridge_slave_0: entered allmulticast mode
[  991.580091][T17260] bridge_slave_0: entered promiscuous mode
[  991.594028][T17260] bridge0: port 2(bridge_slave_1) entered blocking state
[  991.613849][T17260] bridge0: port 2(bridge_slave_1) entered disabled state
[  991.623088][T17260] bridge_slave_1: entered allmulticast mode
[  991.634248][T17260] bridge_slave_1: entered promiscuous mode
[  991.801239][T17260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  991.862431][T17260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  991.973495][T17260] team0: Port device team_slave_0 added
[  991.992863][T17260] team0: Port device team_slave_1 added
[  992.042449][T17260] batman_adv: batadv0: Adding interface: batadv_slave_0
[  992.051807][T17260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  992.087165][T17260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  992.106376][T17260] batman_adv: batadv0: Adding interface: batadv_slave_1
[  992.115065][T17260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  992.146594][T17260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  992.196951][T17260] hsr_slave_0: entered promiscuous mode
[  992.203310][T17260] hsr_slave_1: entered promiscuous mode
[  992.211811][T17260] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  992.223479][T17260] Cannot create hsr debugfs directory
[  992.230378][T15255] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  992.254859][T15255] usb 4-1: USB disconnect, device number 23
[  992.369695][ T5822] Bluetooth: hci4: command tx timeout
[  992.418272][    T9] usb 5-1: USB disconnect, device number 39
[  992.499581][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  992.581997][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  992.588368][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  993.201605][T17440] netlink: 35 bytes leftover after parsing attributes in process `syz.4.2278'.
[  993.549499][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  993.859460][   T30] kauditd_printk_skb: 14 callbacks suppressed
[  993.859475][   T30] audit: type=1326 audit(1741681690.037:5004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17441 comm="syz.0.2279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f287018d169 code=0x7ffc0000
[  994.006164][T17452] netlink: 35 bytes leftover after parsing attributes in process `syz.4.2280'.
[  994.024492][T17424] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2276'.
[  994.029013][T17260] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  994.120396][T17260] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  994.161551][T17260] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  994.211830][T17260] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  994.232342][T17457] IPVS: set_ctl: invalid protocol: 2 224.0.0.1:20002
[  994.579515][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  994.587400][T17461] xt_hashlimit: max too large, truncated to 1048576
[  994.660673][ T5831] Bluetooth: hci5: command 0x0406 tx timeout
[  994.724360][T17260] 8021q: adding VLAN 0 to HW filter on device bond0
[  995.055746][T17260] 8021q: adding VLAN 0 to HW filter on device team0
[  995.063609][   T30] audit: type=1400 audit(1741681691.237:5005): avc:  denied  { create } for  pid=17464 comm="syz.7.2284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  995.102620][ T3534] bridge0: port 1(bridge_slave_0) entered blocking state
[  995.109724][ T3534] bridge0: port 1(bridge_slave_0) entered forwarding state
[  995.174816][   T30] audit: type=1400 audit(1741681691.357:5006): avc:  denied  { create } for  pid=17466 comm="syz.3.2286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  995.220221][   T63] bridge0: port 2(bridge_slave_1) entered blocking state
[  995.227291][   T63] bridge0: port 2(bridge_slave_1) entered forwarding state
[  995.263236][T17467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2286'.
[  995.288655][T17467] erspan0: left allmulticast mode
[  995.297358][T17467] erspan0: left promiscuous mode
[  995.349975][T17467] bridge0: port 3(erspan0) entered disabled state
[  995.400778][T17467] bridge_slave_1: left allmulticast mode
[  995.502774][T17476] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2285'.
[  995.619441][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  996.091026][T17467] bridge_slave_1: left promiscuous mode
[  996.100839][   T30] audit: type=1400 audit(1741681691.687:5007): avc:  denied  { bind } for  pid=17468 comm="syz.7.2285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  996.290880][T17467] bridge0: port 2(bridge_slave_1) entered disabled state
[  996.308888][T17467] bridge_slave_0: left allmulticast mode
[  996.321269][T17467] bridge_slave_0: left promiscuous mode
[  996.332991][T17467] bridge0: port 1(bridge_slave_0) entered disabled state
[  996.554911][T17487] ptrace attach of "./syz-executor exec"[15521] was attempted by ""[17487]
[  996.659447][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  997.020803][   T30] audit: type=1400 audit(1741681693.207:5008): avc:  denied  { read write } for  pid=17481 comm="syz.7.2289" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  997.051013][   T30] audit: type=1400 audit(1741681693.207:5009): avc:  denied  { open } for  pid=17481 comm="syz.7.2289" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  997.701340][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  998.286254][T17260] 8021q: adding VLAN 0 to HW filter on device batadv0
[  998.422115][   T30] audit: type=1326 audit(1741681694.497:5010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17510 comm="syz.7.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c5f8d169 code=0x7ffc0000
[  998.425946][T17513] netlink: 35 bytes leftover after parsing attributes in process `syz.3.2292'.
[  998.739445][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  998.759796][   T30] audit: type=1326 audit(1741681694.497:5011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17510 comm="syz.7.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c5f8d169 code=0x7ffc0000
[  998.858372][   T30] audit: type=1326 audit(1741681694.517:5012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17510 comm="syz.7.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f98c5f8d169 code=0x7ffc0000
[  998.970053][   T30] audit: type=1326 audit(1741681694.517:5013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17510 comm="syz.7.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c5f8d169 code=0x7ffc0000
[  999.040528][   T30] audit: type=1326 audit(1741681694.517:5014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17510 comm="syz.7.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c5f8d169 code=0x7ffc0000
[  999.403136][T17545] xt_hashlimit: max too large, truncated to 1048576
[  999.779427][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1000.179572][   T30] audit: type=1326 audit(1741681694.517:5015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17510 comm="syz.7.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f98c5f8d169 code=0x7ffc0000
[ 1000.258650][   T30] audit: type=1326 audit(1741681694.517:5016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17510 comm="syz.7.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c5f8d169 code=0x7ffc0000
[ 1000.348754][   T30] audit: type=1326 audit(1741681694.517:5017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17510 comm="syz.7.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c5f8d169 code=0x7ffc0000
[ 1000.480059][T17260] veth0_vlan: entered promiscuous mode
[ 1000.517330][   T30] audit: type=1326 audit(1741681694.517:5018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17510 comm="syz.7.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f98c5f8d169 code=0x7ffc0000
[ 1000.541270][T17556] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ'
[ 1000.553073][T17260] veth1_vlan: entered promiscuous mode
[ 1000.737741][T17557] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1000.819432][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1001.202923][T17260] veth0_macvtap: entered promiscuous mode
[ 1001.352064][T17260] veth1_macvtap: entered promiscuous mode
[ 1001.599506][   T30] audit: type=1326 audit(1741681694.517:5019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17510 comm="syz.7.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c5f8d169 code=0x7ffc0000
[ 1001.626844][   T30] audit: type=1326 audit(1741681694.517:5020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17510 comm="syz.7.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c5f8d169 code=0x7ffc0000
[ 1001.628335][T17260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1001.662192][   T30] audit: type=1326 audit(1741681694.517:5021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17510 comm="syz.7.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f98c5f8d169 code=0x7ffc0000
[ 1001.686326][   T30] audit: type=1326 audit(1741681694.517:5022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17510 comm="syz.7.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c5f8d169 code=0x7ffc0000
[ 1001.859453][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1001.963312][T17260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1002.049387][T17260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1002.089367][T17260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1002.114623][T17567] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2303'.
[ 1002.123664][T17260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1002.145275][T17260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1002.156246][T17260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1002.166917][T17260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1002.178005][T17260] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1002.192231][T17260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1002.250595][T17260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1002.265041][T17260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1002.275753][T17260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1002.352762][T17260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1002.366887][T17260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1002.382762][T17260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1002.394153][T17260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1002.408937][T17260] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1002.426652][T17260] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1002.453194][T17260] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1002.492403][T17260] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1002.528031][T17260] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1002.663788][T17578] F2FS-fs (loop15): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1002.671734][T17578] F2FS-fs (loop15): Can't find valid F2FS filesystem in 1th superblock
[ 1002.680234][T17578] F2FS-fs (loop15): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1002.688069][T17578] F2FS-fs (loop15): Can't find valid F2FS filesystem in 2th superblock
[ 1002.899479][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1003.027500][T17579] netlink: 35 bytes leftover after parsing attributes in process `syz.0.2307'.
[ 1003.275255][  T988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1003.295630][  T988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1003.375618][  T988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1003.640101][T17592] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1003.914636][  T988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1003.939436][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1004.092947][   T30] kauditd_printk_skb: 58 callbacks suppressed
[ 1004.092963][   T30] audit: type=1400 audit(1741681700.127:5081): avc:  denied  { setopt } for  pid=17588 comm="syz.7.2310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[ 1004.253981][T17604] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1004.289096][T17606] FAULT_INJECTION: forcing a failure.
[ 1004.289096][T17606] name failslab, interval 1, probability 0, space 0, times 0
[ 1004.302296][T17606] CPU: 0 UID: 0 PID: 17606 Comm: syz.4.2311 Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0
[ 1004.302317][T17606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1004.302326][T17606] Call Trace:
[ 1004.302331][T17606]  <TASK>
[ 1004.302337][T17606]  dump_stack_lvl+0x16c/0x1f0
[ 1004.302364][T17606]  should_fail_ex+0x50a/0x650
[ 1004.302388][T17606]  ? fs_reclaim_acquire+0xae/0x150
[ 1004.302412][T17606]  should_failslab+0xc2/0x120
[ 1004.302440][T17606]  kmem_cache_alloc_noprof+0x6e/0x3d0
[ 1004.302455][T17606]  ? lockdep_init_map_type+0x16d/0x7d0
[ 1004.302478][T17606]  ? security_inode_alloc+0x3b/0x2b0
[ 1004.302499][T17606]  security_inode_alloc+0x3b/0x2b0
[ 1004.302517][T17606]  inode_init_always_gfp+0xce4/0x1030
[ 1004.302535][T17606]  alloc_inode+0x82/0x230
[ 1004.302552][T17606]  new_inode+0x22/0x210
[ 1004.302570][T17606]  shmem_get_inode+0x194/0xf00
[ 1004.302590][T17606]  shmem_mknod+0x1a8/0x450
[ 1004.302608][T17606]  shmem_mkdir+0x31/0x60
[ 1004.302624][T17606]  vfs_mkdir+0x57d/0x860
[ 1004.302645][T17606]  do_mkdirat+0x301/0x3a0
[ 1004.302661][T17606]  ? __pfx_do_mkdirat+0x10/0x10
[ 1004.302677][T17606]  ? getname_flags.part.0+0x1c5/0x550
[ 1004.302698][T17606]  __x64_sys_mkdir+0xef/0x140
[ 1004.302713][T17606]  do_syscall_64+0xcd/0x250
[ 1004.302734][T17606]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1004.302753][T17606] RIP: 0033:0x7f131218d169
[ 1004.302765][T17606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1004.302779][T17606] RSP: 002b:00007f130ffd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[ 1004.302792][T17606] RAX: ffffffffffffffda RBX: 00007f13123a6080 RCX: 00007f131218d169
[ 1004.302801][T17606] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000400000000400
[ 1004.302809][T17606] RBP: 00007f130ffd5090 R08: 0000000000000000 R09: 0000000000000000
[ 1004.302817][T17606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1004.302825][T17606] R13: 0000000000000000 R14: 00007f13123a6080 R15: 00007fff2748eb78
[ 1004.302843][T17606]  </TASK>
[ 1004.305200][   T30] audit: type=1400 audit(1741681700.467:5082): avc:  denied  { watch } for  pid=17599 comm="syz.4.2311" path="/151" dev="tmpfs" ino=801 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[ 1004.864466][ T5822] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection
[ 1004.989435][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1005.600305][ T7530] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1005.749246][ T7530] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1005.839572][T17613] lo speed is unknown, defaulting to 1000
[ 1005.846649][T17613] wg2 speed is unknown, defaulting to 1000
[ 1005.886431][T17613] wlan0 speed is unknown, defaulting to 1000
[ 1005.962618][ T7530] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1006.019702][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1006.076621][ T7530] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1006.276743][ T7530] bridge_slave_1: left allmulticast mode
[ 1006.306730][ T7530] bridge_slave_1: left promiscuous mode
[ 1006.323338][ T7530] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1006.335923][ T7530] bridge_slave_0: left allmulticast mode
[ 1006.344128][ T7530] bridge_slave_0: left promiscuous mode
[ 1006.358406][ T7530] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1006.910239][   T30] audit: type=1400 audit(1741681703.077:5083): avc:  denied  { name_bind } for  pid=17625 comm="syz.7.2316" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[ 1007.069433][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1007.123276][   T30] audit: type=1400 audit(1741681703.097:5084): avc:  denied  { mounton } for  pid=17625 comm="syz.7.2316" path="/proc/270/cgroup" dev="proc" ino=58113 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[ 1007.421966][ T5822] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1007.440006][ T5822] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1007.456631][ T5822] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1007.486417][ T5822] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1007.493923][ T5822] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1007.511193][ T5822] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1007.606087][T17654] netlink: 35 bytes leftover after parsing attributes in process `syz.7.2319'.
[ 1007.664032][ T7530] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1007.676472][ T7530] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1007.685327][   T30] audit: type=1400 audit(1741681703.867:5085): avc:  denied  { write } for  pid=5177 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1007.707813][ T7530] bond0 (unregistering): Released all slaves
[ 1007.715823][   T30] audit: type=1400 audit(1741681703.867:5086): avc:  denied  { remove_name } for  pid=5177 comm="syslogd" name="messages" dev="tmpfs" ino=11 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1007.721890][T17631] vlan2: entered allmulticast mode
[ 1007.747006][   T30] audit: type=1400 audit(1741681703.867:5087): avc:  denied  { rename } for  pid=5177 comm="syslogd" name="messages" dev="tmpfs" ino=11 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 1007.770142][   T30] audit: type=1400 audit(1741681703.867:5088): avc:  denied  { add_name } for  pid=5177 comm="syslogd" name="messages.0" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1007.792823][   T30] audit: type=1400 audit(1741681703.867:5089): avc:  denied  { unlink } for  pid=5177 comm="syslogd" name="messages.0" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 1007.866851][T17647] lo speed is unknown, defaulting to 1000
[ 1007.872903][   T30] audit: type=1400 audit(1741681703.867:5090): avc:  denied  { create } for  pid=5177 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 1007.896016][T17647] wg2 speed is unknown, defaulting to 1000
[ 1008.109495][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1008.466173][T17647] wlan0 speed is unknown, defaulting to 1000
[ 1008.647470][T17682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2323'.
[ 1008.661169][T17682] FAULT_INJECTION: forcing a failure.
[ 1008.661169][T17682] name failslab, interval 1, probability 0, space 0, times 0
[ 1008.694027][T17682] CPU: 1 UID: 0 PID: 17682 Comm: syz.3.2323 Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0
[ 1008.694049][T17682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1008.694059][T17682] Call Trace:
[ 1008.694065][T17682]  <TASK>
[ 1008.694072][T17682]  dump_stack_lvl+0x16c/0x1f0
[ 1008.694098][T17682]  should_fail_ex+0x50a/0x650
[ 1008.694128][T17682]  should_failslab+0xc2/0x120
[ 1008.694147][T17682]  kmem_cache_alloc_noprof+0x6e/0x3d0
[ 1008.694166][T17682]  ? skb_clone+0x190/0x3f0
[ 1008.694195][T17682]  skb_clone+0x190/0x3f0
[ 1008.694220][T17682]  netlink_deliver_tap+0xabd/0xd30
[ 1008.694248][T17682]  netlink_unicast+0x6b4/0x7f0
[ 1008.694279][T17682]  ? __pfx_netlink_unicast+0x10/0x10
[ 1008.694300][T17682]  ? rtnetlink_rcv_msg+0x3e6/0xea0
[ 1008.694331][T17682]  netlink_ack+0x6ac/0xb80
[ 1008.694362][T17682]  netlink_rcv_skb+0x348/0x440
[ 1008.694389][T17682]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1008.694414][T17682]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1008.694450][T17682]  ? netlink_deliver_tap+0x1ae/0xd30
[ 1008.694477][T17682]  netlink_unicast+0x53c/0x7f0
[ 1008.694502][T17682]  ? __pfx_netlink_unicast+0x10/0x10
[ 1008.694533][T17682]  netlink_sendmsg+0x8b8/0xd70
[ 1008.694559][T17682]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1008.694591][T17682]  sock_write_iter+0x4fe/0x5b0
[ 1008.694611][T17682]  ? __pfx_sock_write_iter+0x10/0x10
[ 1008.694637][T17682]  ? bpf_lsm_file_permission+0x9/0x10
[ 1008.694655][T17682]  ? security_file_permission+0x71/0x210
[ 1008.694682][T17682]  ? rw_verify_area+0xcf/0x680
[ 1008.694707][T17682]  vfs_write+0x5ae/0x1150
[ 1008.694723][T17682]  ? __pfx_sock_write_iter+0x10/0x10
[ 1008.694743][T17682]  ? __pfx_vfs_write+0x10/0x10
[ 1008.694769][T17682]  ? __fget_files+0x40/0x3a0
[ 1008.694798][T17682]  ksys_write+0x207/0x250
[ 1008.694813][T17682]  ? __pfx_ksys_write+0x10/0x10
[ 1008.694835][T17682]  do_syscall_64+0xcd/0x250
[ 1008.694857][T17682]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1008.694878][T17682] RIP: 0033:0x7f935bf8d169
[ 1008.694891][T17682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1008.694905][T17682] RSP: 002b:00007f935ce44038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1008.694921][T17682] RAX: ffffffffffffffda RBX: 00007f935c1a6080 RCX: 00007f935bf8d169
[ 1008.694932][T17682] RDX: 0000000000000024 RSI: 0000400000000000 RDI: 0000000000000007
[ 1008.694941][T17682] RBP: 00007f935ce44090 R08: 0000000000000000 R09: 0000000000000000
[ 1008.694950][T17682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1008.694959][T17682] R13: 0000000000000000 R14: 00007f935c1a6080 R15: 00007ffe94ee7d28
[ 1008.694981][T17682]  </TASK>
[ 1009.149446][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1009.194465][ T7530] hsr_slave_0: left promiscuous mode
[ 1009.205913][ T7530] hsr_slave_1: left promiscuous mode
[ 1009.235965][ T7530] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1009.555097][ T7530] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1010.179448][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1010.194850][ T5831] Bluetooth: hci4: command tx timeout
[ 1010.205647][ T7530] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1010.229389][ T7530] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1010.462137][ T7530] veth1_macvtap: left promiscuous mode
[ 1010.467620][ T7530] veth0_macvtap: left promiscuous mode
[ 1010.488878][ T7530] veth1_vlan: left promiscuous mode
[ 1010.515080][ T7530] veth0_vlan: left promiscuous mode
[ 1010.557474][   T30] audit: type=1400 audit(1741681706.737:5091): avc:  denied  { getopt } for  pid=17704 comm="syz.0.2326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[ 1010.725320][T17712] netlink: 'syz.7.2329': attribute type 2 has an invalid length.
[ 1010.733686][T17712] netlink: 'syz.7.2329': attribute type 8 has an invalid length.
[ 1010.741401][T17712] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2329'.
[ 1010.750838][   T30] audit: type=1400 audit(1741681706.907:5092): avc:  denied  { mount } for  pid=17710 comm="syz.7.2329" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 1011.023238][   T52] usb 8-1: new full-speed USB device number 7 using dummy_hcd
[ 1011.229460][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1011.337129][   T52] usb 8-1: device descriptor read/64, error -71
[ 1011.717352][T17722] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1011.789454][   T52] usb 8-1: new full-speed USB device number 8 using dummy_hcd
[ 1012.259440][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1012.789467][ T5831] Bluetooth: hci4: command tx timeout
[ 1012.876731][ T7530] team0 (unregistering): Port device team_slave_1 removed
[ 1012.929456][   T52] usb 8-1: device descriptor read/64, error -71
[ 1012.943974][ T7530] team0 (unregistering): Port device team_slave_0 removed
[ 1013.049674][   T52] usb usb8-port1: attempt power cycle
[ 1013.070781][T17729] netlink: 35 bytes leftover after parsing attributes in process `syz.0.2332'.
[ 1013.232951][   T30] audit: type=1400 audit(1741681709.407:5093): avc:  denied  { read } for  pid=17732 comm="syz.4.2334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1013.299428][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1013.399853][   T52] usb 8-1: new full-speed USB device number 9 using dummy_hcd
[ 1013.430064][   T52] usb 8-1: device descriptor read/8, error -71
[ 1014.159785][T13621] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[ 1014.339520][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1014.341595][T17647] chnl_net:caif_netlink_parms(): no params data found
[ 1014.369426][T13621] usb 5-1: Using ep0 maxpacket: 32
[ 1014.470139][   T31] INFO: task syz.1.1911:15364 blocked for more than 144 seconds.
[ 1014.816220][T13621] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1014.829251][   T31]       Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0
[ 1014.829575][ T5822] Bluetooth: hci4: command tx timeout
[ 1014.850443][T13621] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1014.863524][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1014.866322][T13621] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1014.906749][T13621] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[ 1014.935903][T13621] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1014.964406][T13621] usb 5-1: config 0 descriptor??
[ 1015.389428][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1015.649095][   T31] task:syz.1.1911      state:D stack:25832 pid:15364 tgid:15363 ppid:5828   task_flags:0x400740 flags:0x00004006
[ 1015.671341][   T31] Call Trace:
[ 1015.674790][   T31]  <TASK>
[ 1015.677828][   T31]  __schedule+0xf43/0x5890
[ 1015.682887][   T31]  ? __pfx___lock_acquire+0x10/0x10
[ 1015.693370][T17751] PM: Image not found (code -6)
[ 1015.758451][   T31]  ? __pfx_lockdep_lock+0x10/0x10
[ 1015.763859][   T31]  ? __pfx___schedule+0x10/0x10
[ 1015.768773][   T31]  ? schedule+0x298/0x350
[ 1015.773439][   T31]  ? __pfx_lock_release+0x10/0x10
[ 1015.778534][   T31]  ? finish_task_switch.isra.0+0x217/0xcc0
[ 1015.784729][   T31]  ? lock_acquire+0x2f/0xb0
[ 1015.789298][   T31]  ? schedule+0x1fd/0x350
[ 1015.794506][   T31]  schedule+0xe7/0x350
[ 1015.798640][   T31]  schedule_timeout+0x244/0x280
[ 1015.804010][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[ 1015.809705][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1015.814970][   T31]  __wait_for_common+0x3e1/0x600
[ 1015.820507][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[ 1015.825966][   T31]  ? __pfx___wait_for_common+0x10/0x10
[ 1015.858982][   T31]  ? preempt_schedule_thunk+0x1a/0x30
[ 1015.864817][   T31]  wait_for_completion_state+0x1c/0x40
[ 1015.870818][   T31]  do_coredump+0x86f/0x4410
[ 1015.875385][   T31]  ? unwind_get_return_address+0x59/0xa0
[ 1015.881339][   T31]  ? __pfx_do_coredump+0x10/0x10
[ 1015.886347][   T31]  ? stack_trace_save+0x95/0xd0
[ 1015.891532][   T31]  ? __pfx_stack_trace_save+0x10/0x10
[ 1015.896961][   T31]  ? hlock_class+0x4e/0x130
[ 1015.904803][   T31]  ? stack_depot_save_flags+0x28/0x9c0
[ 1015.910511][   T31]  ? kasan_save_stack+0x42/0x60
[ 1015.915370][   T31]  ? kasan_save_stack+0x33/0x60
[ 1015.920457][   T31]  ? kasan_save_track+0x14/0x30
[ 1015.925320][   T31]  ? kasan_save_free_info+0x3b/0x60
[ 1015.930754][   T31]  ? __kasan_slab_free+0x51/0x70
[ 1015.935697][   T31]  ? kmem_cache_free+0x2e2/0x4d0
[ 1015.941267][   T31]  ? __sigqueue_free+0xba/0x2a0
[ 1015.946134][   T31]  ? get_signal+0xcbc/0x26c0
[ 1015.952319][   T31]  ? arch_do_signal_or_restart+0x90/0x7e0
[ 1015.958047][   T31]  ? syscall_exit_to_user_mode+0x150/0x2a0
[ 1015.964724][   T31]  ? find_held_lock+0x2d/0x110
[ 1015.969704][   T31]  ? proc_coredump_connector+0x2d2/0x4f0
[ 1015.975409][   T31]  ? __pfx_proc_coredump_connector+0x10/0x10
[ 1015.981689][   T31]  get_signal+0x230b/0x26c0
[ 1015.986265][   T31]  ? __pfx_get_signal+0x10/0x10
[ 1015.991424][   T31]  ? rcu_is_watching+0x12/0xc0
[ 1015.997504][   T31]  ? __local_bh_enable_ip+0xa4/0x120
[ 1016.003068][   T31]  arch_do_signal_or_restart+0x90/0x7e0
[ 1016.008621][   T31]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1016.015075][   T31]  ? rcu_is_watching+0x12/0xc0
[ 1016.020384][   T31]  syscall_exit_to_user_mode+0x150/0x2a0
[ 1016.026034][   T31]  do_syscall_64+0xda/0x250
[ 1016.030816][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1016.036722][   T31] RIP: 0033:0x7f27b564e750
[ 1016.044467][   T31] RSP: 002b:00007f27b66ca3f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1016.053025][   T31] RAX: 0000000000000000 RBX: 00007f27b59a5fa8 RCX: 00007f27b578d169
[ 1016.062400][   T31] RDX: 00007f27b66ca400 RSI: 00007f27b66ca530 RDI: 000000000000000b
[ 1016.071291][   T31] RBP: 00007f27b59a5fa0 R08: 00007f27b66cc000 R09: 0000000000000000
[ 1016.083841][T13621] corsair-cpro 0003:1B1C:0C10.000B: item fetching failed at offset 1/5
[ 1016.085266][   T31] R10: 0000000000000008 R11: 0000000000000246 R12: 00007f27b59a5fac
[ 1016.094670][T13621] corsair-cpro 0003:1B1C:0C10.000B: probe with driver corsair-cpro failed with error -22
[ 1016.100371][   T31] R13: 0000000000000000 R14: 00007ffe636eff30 R15: 00007ffe636f0018
[ 1016.123539][   T31]  </TASK>
[ 1016.126600][   T31] 
[ 1016.126600][   T31] Showing all locks held in the system:
[ 1016.147060][   T31] 1 lock held by rcu_exp_gp_kthr/20:
[ 1016.154750][   T31] 1 lock held by khungtaskd/31:
[ 1016.166560][   T31]  #0: ffffffff8e1bd140 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390
[ 1016.177888][   T31] 2 locks held by dhcpcd/5489:
[ 1016.183915][   T31]  #0: ffff88805eaa46c8 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: netlink_dump+0x9e8/0xd00
[ 1016.193872][   T31]  #1: ffffffff8fef7f68 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x18f/0x1f0
[ 1016.202834][   T31] 2 locks held by getty/5586:
[ 1016.207496][   T31]  #0: ffff88803125b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[ 1016.217254][   T31]  #1: ffffc90002fe62f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480
[ 1016.227387][   T31] 5 locks held by kworker/u8:13/7530:
[ 1016.232770][   T31]  #0: ffff88801beeb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0
[ 1016.243158][   T31]  #1: ffffc90004707d18 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0
[ 1016.253495][   T31]  #2: ffffffff8fee2250 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xb30
[ 1016.263290][   T31]  #3: ffff88805ed3d4e8 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_destruct+0x151/0x3d0
[ 1016.273334][   T31]  #4: ffffffff8e1c85b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a4/0x3b0
[ 1016.284673][   T31] 2 locks held by kworker/0:6/13621:
[ 1016.376746][   T31]  #0: ffff88801b078d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0
[ 1016.410125][   T31]  #1: ffffc90004617d18 (key_gc_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0
[ 1016.419779][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1016.429410][   T31] 3 locks held by syz-executor/17647:
[ 1016.431826][    T9] usb 5-1: USB disconnect, device number 40
[ 1016.434779][   T31]  #0: ffffffff8f2cad80 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x10f/0x2c0
[ 1016.451617][   T31]  #1: ffffffff8fef7f68 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x5d9/0x1d60
[ 1016.460953][   T31]  #2: ffffffff8e1c85b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a4/0x3b0
[ 1016.471336][   T31] 
[ 1016.488261][   T31] =============================================
[ 1016.488261][   T31] 
[ 1016.499712][   T31] NMI backtrace for cpu 1
[ 1016.499724][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0
[ 1016.499742][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1016.499752][   T31] Call Trace:
[ 1016.499757][   T31]  <TASK>
[ 1016.499763][   T31]  dump_stack_lvl+0x116/0x1f0
[ 1016.499788][   T31]  nmi_cpu_backtrace+0x27b/0x390
[ 1016.499807][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1016.499829][   T31]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[ 1016.499848][   T31]  watchdog+0xf62/0x12b0
[ 1016.499878][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1016.499900][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1016.499922][   T31]  ? __kthread_parkme+0x148/0x220
[ 1016.499940][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1016.499963][   T31]  kthread+0x3af/0x750
[ 1016.499984][   T31]  ? __pfx_kthread+0x10/0x10
[ 1016.500008][   T31]  ? __pfx_kthread+0x10/0x10
[ 1016.500028][   T31]  ret_from_fork+0x45/0x80
[ 1016.500049][   T31]  ? __pfx_kthread+0x10/0x10
[ 1016.500068][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1016.500095][   T31]  </TASK>
[ 1016.500102][   T31] Sending NMI from CPU 1 to CPUs 0:
[ 1016.611700][    C0] NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x1a/0x20
[ 1016.621032][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[ 1016.621045][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0
[ 1016.621062][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1016.621071][   T31] Call Trace:
[ 1016.621078][   T31]  <TASK>
[ 1016.621085][   T31]  dump_stack_lvl+0x3d/0x1f0
[ 1016.659126][   T31]  panic+0x71d/0x800
[ 1016.663010][   T31]  ? __pfx_panic+0x10/0x10
[ 1016.667408][   T31]  ? preempt_schedule_thunk+0x1a/0x30
[ 1016.672767][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1016.678731][   T31]  ? preempt_schedule_thunk+0x1a/0x30
[ 1016.684086][   T31]  ? watchdog+0xdcc/0x12b0
[ 1016.688487][   T31]  ? watchdog+0xdbf/0x12b0
[ 1016.692889][   T31]  watchdog+0xddd/0x12b0
[ 1016.697119][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1016.701781][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1016.706964][   T31]  ? __kthread_parkme+0x148/0x220
[ 1016.711970][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1016.716635][   T31]  kthread+0x3af/0x750
[ 1016.720689][   T31]  ? __pfx_kthread+0x10/0x10
[ 1016.725265][   T31]  ? __pfx_kthread+0x10/0x10
[ 1016.729836][   T31]  ret_from_fork+0x45/0x80
[ 1016.734235][   T31]  ? __pfx_kthread+0x10/0x10
[ 1016.738807][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1016.743561][   T31]  </TASK>
[ 1016.746737][   T31] Kernel Offset: disabled
[ 1016.751038][   T31] Rebooting in 86400 seconds..