last executing test programs: 8m32.84603268s ago: executing program 2 (id=354): unshare(0x20000400) r0 = epoll_create1(0x0) epoll_pwait(r0, 0xfffffffffffffffd, 0x21, 0x40, 0x0, 0x55) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) setsockopt$sock_attach_bpf(r3, 0x1, 0x34, &(0x7f00000000c0)=r2, 0x4) listen(r3, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"]) r5 = syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x40000) ioctl$CEC_ADAP_G_PHYS_ADDR(r5, 0x80026101, &(0x7f0000000240)) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x8000000}, 0x20) 8m29.315297457s ago: executing program 2 (id=363): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x5b) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000ac0)=[{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000140)="4c0837f6e9095d478dac184fbb28063c397cf88556e4145bb6e5679f47bd1684af47a6b389f2c9d88b2adab157999f1415f43ae0e42fd4c462d5d59dc265dd1d908928a59b7650afb47a7f97137b8f03903017fb", 0x54}, {0x0}], 0x2, 0x0, 0x0, 0xc041}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1, 0x0, 0xff8d}, 0x0) 8m28.951773368s ago: executing program 2 (id=364): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000640)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="001401"], 0x0, 0x0}) (async, rerun: 32) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000000)=':\x00', 0x80, &(0x7f0000000080)={@align=0xd, {0x1, 0x401, 0xb, 0x7}}, 0x2, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x73b}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000180)={@hyper, 0x2}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x18, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000005000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000007300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) (async) listen(r4, 0x2400000) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020005ff0004f03a98000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) (async) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000008c0)={0x2c, &(0x7f00000006c0)={0x40, 0x14, 0x1, "e0"}, 0x0, 0x0, 0x0, 0x0}) 8m27.010416861s ago: executing program 2 (id=370): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0xb635773f06ebbee2, 0x8031, r0, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000940)=[{{&(0x7f0000000340)=@abs={0x1, 0x0, 0x2}, 0x6e, &(0x7f00000008c0)=[{&(0x7f00000003c0)="99fd60908e565c6db352a70efbf4d05e70c9a692e0adec8b50bf0bbd87abe182366d1da0dae461062d456d97339b3d2e2336025f82f295371c49922b45b7be20f68d56f21d17058c01a34cae84e7f4d90ed6602afa4737d642a02aba1c1cc602b2cbafcc6de64814c0d4d2becf44891ed7", 0x71}, {&(0x7f0000000440)="1f27f456c6822175e48fb5c8c4635daa930e844884e4136fa8ae5c5703fc1f8b82b1c618aa168a46118bbc187feb299f472a823a0d3fa5311c521ddde42985225faa671972b31c4b20096d8b6f6e632ef4ccd20244c0e8c05d657dd51c124f8fb2d31a32f5e016450567d5b0abb1ce99481c90d4275cd23e2e7415b031d167a22784ba", 0x83}, {&(0x7f0000000500)="067023328a95b97f6b0eb1b993fbc4f4eb5a90212a", 0x15}, {&(0x7f0000000540)="7be9bd1d641ef2f9538c", 0xa}, {&(0x7f0000000600)="d3a66dea3c2fed9c87d0db9084c7c36c86b220ab647fdc76255f7a97b48a28d56921a96b307991b9416ba0daf562695b82064cc42e2c3b970764227adabe1a7d34c4a6f7a83227fa2c9b704846c8ef13315c1ce7d5a981d99b6fe70ccdfa31da2706568b6b524d48926fcf94958607257f8a4c4277a6bedb1738ddb469c020ee5f22ef8bf36d", 0x86}, {&(0x7f00000006c0)="446876a5e256bb031729ca42b26b47b6a1182f851f7876bf2b86317e9ef249c6ac4a49cc2cbc1d3a6a50eb71c3fc5254f2873eb8665cdc24b1c26dacb3d44e2db533420de4", 0x45}, {&(0x7f0000000740)="d65ea97663e4dde6bb0467d056c4b28fb21cf56376e5ba9cd925786b6bc91034725d6e4bb6d376b643d1f6b55cf7c94ed8566ef8c3bfe523f282c1fb1b13428d7ce51b7bc54f5f7d7691ac8e1d283a35d615bed03f9b943178fbc6", 0x5b}, {&(0x7f00000007c0)="9024ce1fad1848a6b6f84aca6e8e7f05dbf47f66dd528488a84b590b3075ce8e78edfe6b39d8561eb24beca72dd0f1aa72499e7abdc1b90b8706e0dd7f40693760fd5d08b50e5de78465dc02fad94d45271c0ce03e608fac4bddba848b3851b4fafd36821a853ba45a33e56e2393c1a9586ecec6f53828fb7f078a73d7ffc9a9964ea83a0a50a692480f49cdc02d5be185e19dc7fb7f804744d63906f7e767c3b4e021d04def5d79edf94440795398a0a6b94700fdf0a0e61eea256135842273a296b9383e550dddff2d50f6719974d9547fa2d58c621788d6bb772c92531bd9cce661", 0xe3}], 0x8, 0x0, 0x0, 0x400000a}}], 0x1, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000980)={&(0x7f0000ff2000/0x1000)=nil, &(0x7f000000b000/0x1000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000006000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000660000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f000000a000/0x1000)=nil, 0x0, 0x0, r0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r4 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) fsopen(&(0x7f0000000580)='ramfs\x00', 0x0) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) close(0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000)={0x1, 0x3, 0x8000, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 8m26.084121752s ago: executing program 2 (id=374): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x11, 0x4, 0x4, 0x9}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$inet(r1, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000004700)="2a84690a11096732193848444db7cf13d7677ef138f2a9f85001d1fb6ce8880fc832ae54a779e35121c1a6ae91a95ae2164897bab7a692744c09b03e3870041056453bf8d619636990bd12b693fd360f97eb0e73fdcab7f374f71bf716f0a2eb828c4907555a0af8a53acb7179e557a08ec6bf979734ff4d787e363b8f7d21ad291466593a94cb43fcfd332b141c89f0ebd4b98aab6400d964eeaf9f799390d8430532ac684ff24e8b98bc55576734e25418b7f7164f34fe2b84ac30ca3aad58a142f90dcdb063360939f776f837700d52f2116159f3496fbb51d549a5c35f4b090c4a654e6809ac3cee0398ad738995ab11b6d69e54030d9e420e017a677b125897eeee431636199d8f3c137426f52d657ba8ea4de927dc77907042a748514f282b844e992ce09154ac1f5002ce13c9f6bd0b2dc1b4744f8b28c0b5de4b55411698aaaebf878bbe6ba329e15f278f1b998f177daf7eb2429c9280d33b360f0da1d6d5048524e91210de5a3ff8104403ea333c1e9570eb50c59fa3d3a44abb348c749723a2943ad78ea0840d2f134182c94f1eaa2813fc6990c709f8407c335ae6c4df52da9ce08e661176c1921a46e3f52aa550fc87ebc974a259ae5126376fb86927f01481c8156980d8d6a0b2ec0f31a80af80ffc8e6c40307c6c63254e9bdddf68122381cda624b371379811a0300a3ce58a56cf14cc8b68a9eda5a341ab18a74933cfd4cda03d7d10544a954abe77d99e0e52b08018d7b9b0a1212380d95aa8bfaf604d787ca93f4343edb61579b761ac05366ef170310fd861b144b5aff8e77a13f8d358dbb76554b9de903a9b0b653325c923a46728d5e73f5fb63cb9a00399298717b1cb7be4d6cd8a0b4ae7751fc70ef62f1d3914e1dac62881200c359888e49779c20d126b4e347cff2dd17d232e4eca340886e03fdebc7e332398c80447f5c38c7d8c26a37e9cf5778ccb46f437dc1c928f558681098cb13405c86f3f31fbaa068090034013d294a8c7c6357800bf2514ce40939fbc6854c26015249702458cda3f8b6a735b9189ec163a7097691377245a3195d452eaca29e9e3353ce94eda491d9f6547bd0055da8695c4cf9e608204d2f925eaaddb8ef7eeec0171e76bbeb6e78952cf30a8d89230d2cb6b0a19a2aabc33ce7e89e8074d011f8601c7fa6e401a2e5f34a786d43ad961c1aebd1867fce1f71dc667ce205aa29333f954773b003d41f764e95b6654e3a23549ede712aef3295bec267e15dc5a7312f96e603ad7c071e63332dc953c4a17c941c649980cc84d35d2212c80d240446928d2eed555f274290a203ee40d4fbd28df82f77375ce191fa776b9d305852da11bf9bd0006a49f33e0c1019df537effbab5dc76c96574530a713b81c4fdc533acc9ba2535fec5ce018adec7c9644296542412b588943cf52746b9c0ebc47fcfe4fea43b057b3c1430b96e404100cde0edb8de5d5c5129142bef60f268c4a3ffeebc0b3e14a193b7afdc04e8d7b0720940b69f6684d2327bace3b94ce272d0eb1337e2d9a7051e1e63fb522f9a77e0c5c6b8b1ec9820da59608214d2a15e6f2090be28ded359d1e752e1ab2646b191a6dd107a727bb1815fba8060a7fe62e3d4bf4f84e358a2b9c689f3014352b5612d5beffa5cf2c47f181be95e3214aec43fe4454be1df1e87fb38a8b00bcba6d4ba99d4d9b117abd1b4a104980f421c7efc1c1090a0e25414afef67400c41eedfa4d6929f0ec1d40b8810ea7ea82bd026d888390f5402ea369b17edc90b74a205a76691b65d75ce6cd9cbfd52b1fa02f0c2ead3705b7d6166a72d11160149b888df0362c07d540ac39434d98471909d87c1d3fd738ec555615d155908ab7ed5280b7ffaae5c8af8baddb36661510ed912bb79750f6d1a7d88e9a1560c481e4619da61b47f552f4a2e6b6392a804be38bb34846ba6667e62272ed54087728b0abaac2a76c6492c02ec208230aa9a953571a8b543dc65e0f456ae42c50de9cb0b8f9a9550d9bf8f1befa1bf2873762364adc139cb86ee5e95aa6252945691efbacadf1bc5dbcbaffe906461b59ac5a5f4da045fe14899c4fbcb580336cafd5d8c4fc38afa91bb9024e9d3624748add1f91fff4bbca64c7ac8f26ecb4ea3c26cdd5ccae4ecd2801097cd93bd2ab5c62f78e8a824957f1bbcad10fd7bcfeba386f5d57ecb1a4ab7b86f03511e98ae56699c829a9eaf32d0d7ae0e01a044f363d50f9d4287b0743ce449b86bde40eadda94408d4d53a2fd45b40c6bc68922e2ac5517f66ef9c3a97f15772b0205b16f81c8e060ed915ff84c05b6e6f24c1e2f9058c2998fd62c8f2b79776531e3632f0472efaa95825b4dafacfca8bfc9719725b173ec26f54ba5138136ff3920c01f05cabf6a2d2783a70b49d3a539d11481dfe042a7489fba81f1f38ef1af4776707f04eeb5b9d4494af1571e5e3461cdbd177379ba724ca53c45b464b75d863eec9503160ff131fddea6e49eb73c6639a9b5333167bef46099910f9e10e581970c871210d311020deb1ae9892f63c6d26817cf433828cfe5696b79e51b20203df3db005e1f19f6bbb3d0bcd1ee2b86ea4f0353941693d3dae04a4e3361eec1efd2f440bd8158b870477272ad4c059974c5f7fbeeb7f768b97a5a2b81a82b9bb44282db6145a4a6fe7b80957feafc1466c60a0a55d19719983538f93ff9338a94373969d5e0d9660e18e5828f49bac26e1a1c57f2a7a93f6723fd3a59d7df26df8285b6dd2a8476eb1d4dec0fd0159ae5420367686685751cd59cad308ade645160646b948bed0206216814657b46b7be9f202aaeb05d2539dc0a1f1a26823e0b77116f8e050fb013034b8a1f49e4ae64db9c4efdbf65feccf6d0", 0x7f5}], 0x1}}], 0x1, 0x2064000) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={&(0x7f0000000340)="dfd392184860e49b97f0419159f59ae34169f8c9651f585d881bf0e46175a76935771e2f76bd18418bfb0ebcebc6ac4b9cc2538ed1b483006e1723d576bec505d9df4243be37a27d3c6a5be21e8eece3c3d66f69539e218bb7776d14af7bde35e51f118623388b2fc19fab3f845e3da53da030af338f4cf2ac7c635570bb2946b891a1fd692ff770997932eebee15c308e5ae5e2a0acc4f1073889ba1d6bd4f92d297a8d722c00c2be32a2c9574123d12a2738556cb634b7957f98abb721289d0603c92826d7a0eb7382206d4a26d6c70016c3a3a5fc9d", &(0x7f0000000440)="37b8e25a8ad4c3cbe3fb31978649eb2b7df2d24d362ce8026fdce9b3b917044c5e029e0fcfaaa882d1e2f56a0e39f586416738d3024659aaf161ad7b6f3f88058d694787057e7f508c53bea442635654e0bcfa87e996ac63b97a9fd11981aab05c5f12f5abcc47913515e2ef42d94ca363a1c6e63c0a2ce6ebdab88a318c67352a1f5550ac497dcab28f184d051b044723a0"}}, &(0x7f0000000580)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001cc0), r2) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001d00)={0x14, r3, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) clock_adjtime(0x41, &(0x7f0000000000)={0xb07f, 0x5, 0x7, 0x9, 0xfffffffffffffe02, 0x4, 0x7, 0x4, 0x4, 0x8, 0xf17, 0x2547875b, 0x1, 0x4, 0x90, 0x5, 0x9, 0xcc7, 0x9, 0xd8, 0x4, 0x8, 0x2, 0x3d, 0x2, 0x8}) r4 = syz_open_dev$cec(&(0x7f00000002c0), 0x0, 0x480000) ioctl$CEC_ADAP_G_LOG_ADDRS(r4, 0x805c6103, &(0x7f0000000500)) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r5, 0x0, 0x48f, &(0x7f0000000080)={0x67, @loopback, 0x4e22, 0x4, 'none\x00', 0x8, 0x7, 0xf}, 0x2c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000004000/0x4000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f000000b000/0x4000)=nil, &(0x7f0000007000/0x1000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f000000d000/0x3000)=nil, &(0x7f000000f000/0x3000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000011000/0x2000)=nil, &(0x7f0000012000/0x1000)=nil, &(0x7f0000000100)="abc3e4804ec8a817a35bcf6099d5e712df99dba3a5e96553436826420062949535032676572274da9acec2274c0c0e7c4b9ac2640df8071ffb844f9efa4e4575172d847d64325f39261c633063a7507cf80b3e09d7daf0e18d05bc80ecc542113629ca0fcf44cda2a91ef9df2f4284e4d9ec982428b572b442cae968d61ac92961256b17dde5ca918ef31f0e2f94ec288fc87ee62bc3396f1cb2e22df7ba19a7361499ba4dc2835d0c523b32a268ee476ef00f87ddd03e66757d17653ef470aebfec24d865a387", 0xc7, r5}, 0x68) 8m20.164699303s ago: executing program 2 (id=385): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELFLOWTABLE={0x30, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb8}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) syz_open_dev$mtd(0x0, 0x48a99fbe, 0x10b241) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x3}}, {{0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x3}}}, 0x108) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ustat(0x90000000000, 0x0) ustat(0x101, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000280)) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x358, 0xffff8881f5c0a000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x28, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}, @AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) 8m19.536117936s ago: executing program 32 (id=385): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELFLOWTABLE={0x30, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb8}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) syz_open_dev$mtd(0x0, 0x48a99fbe, 0x10b241) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x3}}, {{0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x3}}}, 0x108) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ustat(0x90000000000, 0x0) ustat(0x101, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000280)) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x358, 0xffff8881f5c0a000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x28, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}, @AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) 8m15.822036735s ago: executing program 1 (id=397): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000200)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000ff02000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000800000001000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000400a0000000000000000000000804000020000000000000800000000000000000000000000000000440005000a010101000000000000000000000000000000003c000000000000007f0000010000000000000000000000000200000004"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc020000000000000000000000000001fe80000000000000000000000000003c00000000000000000a0000a002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000001000000009c0011000a0101020000000000000000000000007f000001000000000000000000000000fc020000000000000006000000000004004d089a34468bae25000000000000013c040000040000000a000a000a0101020000000000ed000000000000fe8000000000000000000000000000bbac141439000000000000000000000000fc0262625ea9add8264d000000000008000200"], 0xec}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x40) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006780)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0xfff7}], 0x11}, 0xb00}], 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 8m15.573294855s ago: executing program 1 (id=399): syz_usb_connect(0x3, 0x2d, &(0x7f0000000980)={{0x12, 0x1, 0x300, 0x32, 0x43, 0x8c, 0x8, 0x421, 0x1d4, 0xd499, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7, 0x8, 0x50, 0x7, "", [{{0x9, 0x4, 0x2b, 0x8, 0x1, 0x2, 0x2, 0xff, 0x0, [], [{{0x9, 0x5, 0xe, 0x10, 0x8, 0xe, 0xac}}]}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ncm(0x4, 0xa7, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x95, 0x2, 0x1, 0xc8, 0x20, 0x2, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "cbd0e392"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x4, 0xd84, 0x7f}, {0x6, 0x24, 0x1a, 0x1ff, 0x11}, [@mbim={0xc, 0x24, 0x1b, 0xff, 0xda4, 0x9, 0x7, 0x6, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x2, 0x9b}, @network_terminal={0x7, 0x24, 0xa, 0x78, 0x6, 0x7f, 0x1}, @mbim={0xc, 0x24, 0x1b, 0x7fff, 0x0, 0x4, 0x10, 0xb, 0xe9}, @dmm={0x7, 0x24, 0x14, 0x6, 0x4}, @dmm={0x7, 0x24, 0x14, 0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0xa, 0x6, 0xb7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x73, 0x6, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x9, 0x1, 0x1}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x10, 0x9, 0xf9, 0x8, 0x9}, 0xd3, &(0x7f0000000100)={0x5, 0xf, 0xd3, 0x1, [@generic={0xce, 0x10, 0x2, "f584beab5ca140f66238ce9742614234d03e6974b6258a2d8f9756cd17e7af1cb14be91c471dbd5a59592d9eccaed3eb42f9ac6a0641ffca877af44d244250554d12c563ab29ae962ed116db89d1dd13414e992d563daa26ca700b07a5a554d8ce6aecd0eb2a44a47e320af71a9d4a8fdc00914478e6fc31959317dca3f5c6345a312e2c35190f3aa51aabd295095190fc1b712254cf89dd7c2b2d698d1fafbb020f6bc888cff5dd287ef7ecc7c88611a49ff0601344d70e084c921b341f3d5470a58540ec2281f654f42d"}]}, 0x5, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x445}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x41d}}, {0x1c, &(0x7f00000002c0)=@string={0x1c, 0x3, "cd755e84b89072123aae8e5195dd2ce23c49221dc7949901034b"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1409}}]}) getpid() r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x4000000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x441, 0x104) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x80000, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000980)={{0x12, 0x1, 0x300, 0x32, 0x43, 0x8c, 0x8, 0x421, 0x1d4, 0xd499, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7, 0x8, 0x50, 0x7, "", [{{0x9, 0x4, 0x2b, 0x8, 0x1, 0x2, 0x2, 0xff, 0x0, [], [{{0x9, 0x5, 0xe, 0x10, 0x8, 0xe, 0xac}}]}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect$cdc_ncm(0x4, 0xa7, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x95, 0x2, 0x1, 0xc8, 0x20, 0x2, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "cbd0e392"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x4, 0xd84, 0x7f}, {0x6, 0x24, 0x1a, 0x1ff, 0x11}, [@mbim={0xc, 0x24, 0x1b, 0xff, 0xda4, 0x9, 0x7, 0x6, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x2, 0x9b}, @network_terminal={0x7, 0x24, 0xa, 0x78, 0x6, 0x7f, 0x1}, @mbim={0xc, 0x24, 0x1b, 0x7fff, 0x0, 0x4, 0x10, 0xb, 0xe9}, @dmm={0x7, 0x24, 0x14, 0x6, 0x4}, @dmm={0x7, 0x24, 0x14, 0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0xa, 0x6, 0xb7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x73, 0x6, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x9, 0x1, 0x1}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x10, 0x9, 0xf9, 0x8, 0x9}, 0xd3, &(0x7f0000000100)={0x5, 0xf, 0xd3, 0x1, [@generic={0xce, 0x10, 0x2, "f584beab5ca140f66238ce9742614234d03e6974b6258a2d8f9756cd17e7af1cb14be91c471dbd5a59592d9eccaed3eb42f9ac6a0641ffca877af44d244250554d12c563ab29ae962ed116db89d1dd13414e992d563daa26ca700b07a5a554d8ce6aecd0eb2a44a47e320af71a9d4a8fdc00914478e6fc31959317dca3f5c6345a312e2c35190f3aa51aabd295095190fc1b712254cf89dd7c2b2d698d1fafbb020f6bc888cff5dd287ef7ecc7c88611a49ff0601344d70e084c921b341f3d5470a58540ec2281f654f42d"}]}, 0x5, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x445}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x41d}}, {0x1c, &(0x7f00000002c0)=@string={0x1c, 0x3, "cd755e84b89072123aae8e5195dd2ce23c49221dc7949901034b"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1409}}]}) (async) getpid() (async) fsopen(&(0x7f00000014c0)='proc\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r0, 0x0, 0x0) (async) fchdir(r1) (async) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) (async) open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) (async) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, 0x0, 0x4000000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, 0x0, 0x0) (async) openat(0xffffffffffffff9c, 0x0, 0x441, 0x104) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x80000, 0x0) (async) 8m12.430581232s ago: executing program 1 (id=408): syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYRES8=0x0], 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit$UBLK(r3, r4, r5, &(0x7f0000000440)=@ublk_get_queue_affinity_sqe={0x2e, 0x0, 0x0, r1, 0x80207501, 0x0, 0x0, 0x0, 0x1, 0xb, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x0, 0x0}}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x0, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x4, 0x4}}}, &(0x7f0000000300)) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'lo\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) r7 = landlock_create_ruleset(&(0x7f0000000180)={0x104}, 0x30, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0xcc) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r7, 0x1, &(0x7f0000000200)={0x100, r8}, 0x0) r9 = openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) lsm_get_self_attr(0x64, 0x0, &(0x7f0000000100), 0x1) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000d80)=ANY=[], 0x32600) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42402) write$sndseq(r11, &(0x7f0000000000)=[{0x84, 0x77, 0x2, 0x0, @tick, {}, {}, @raw32={[0x2]}}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r11, 0x4040534e, &(0x7f0000000140)={0x16f, @tick=0x7, 0x0, {}, 0x0, 0x0, 0x80}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r10, 0x1, &(0x7f00000000c0)={0x100, r9}, 0x0) close(r9) close(r8) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r7, 0x1, &(0x7f0000000340)={0x100}, 0x0) 8m8.666628999s ago: executing program 1 (id=416): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000010ac05650200000000000109022d00010000000909040000010300000009210000000122050009058103"], 0x0) r1 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, r1, 0x0, &(0x7f0000000000)) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB=' \v@'], 0x0, 0x0, 0x0, 0x0}, 0x0) 8m5.437992588s ago: executing program 1 (id=425): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper=0x4d8, 0x2}, @hyper, 0x0, 0x20000, 0x5e}) 8m5.228658189s ago: executing program 1 (id=427): socket(0xa, 0x3, 0x87) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x40000140, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x12) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') write$binfmt_format(r3, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000200), 0xc, 0x2) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000600)={0x23, 0x1, 0x15, 0x1, 0x0, 0x3e8, 0x0}) writev(r3, &(0x7f00000003c0), 0x100000000000022d) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x4, &(0x7f00000001c0)=ANY=[@ANYRES8=r3, @ANYRES16=r2, @ANYRESOCT=r2], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x70, '\x00', 0x0, @fallback=0x30, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat(r2, &(0x7f0000000480)='./file0\x00', 0x131942, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000180)="14", 0x1}], 0x1) mmap(&(0x7f0000031000/0x4000)=nil, 0x4000, 0x2000002, 0x10, r5, 0x6bc000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f0000000240)="27260fc7347dca0000000f01c4c4c22d049078000000b9080400000f329a1a000000440066baf80cb8ca30a686ef66bafc0c66b8f24266ef0f3266b85f000f00d866baf80cb882755c8bef66bafc0cec"}], 0x1, 0x18, 0x0, 0xfeb7) ioctl$KVM_CAP_EXIT_HYPERCALL(r6, 0x4068aea3, &(0x7f0000000400)) write$P9_RLERRORu(r2, &(0x7f0000000240)=ANY=[], 0x10) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_WRITEPROTECT(r7, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) ioctl$OCFS2_IOC_GROUP_ADD(r7, 0x40186f02, &(0x7f0000000040)={0xfff, 0x2, 0x5, 0xc600}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) 7m55.840700956s ago: executing program 3 (id=457): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000000c0)={0xffffffffffffffff, 0xfffffffffffff801, 0x4, 0x1ff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x84, r1, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x64}}}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x81, 0x7}, {0x0, 0x6}], "21414ccf53e57fd7"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x8, 0x2}, {0x3}, {0x1, 0x4}, {0x0, 0x1}, {0x35}, {0x1}, {0x4, 0x1}, {0x4, 0x3}, {0x3, 0x4}, {0x3, 0x4}, {}, {0x9}, {0x1, 0x3}, {0x0, 0x1}, {0x9f, 0x4}, {0xfe, 0x2}, {0x3, 0x7}, {0xf3, 0x1}], "df9ee5188ab26ed6"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x81, 0x6}, {0x2}, {0x3, 0x1}, {0x1, 0x6}, {0x6}, {0xa, 0x3}, {0x6, 0x2}, {0x4b, 0x4}, {0x81, 0x1}, {0x2, 0x5}, {0x6}], "36c78d184a785c02"}}]}, 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x24004840) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000080)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES32, @ANYRESOCT], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001000000"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) 7m55.720333511s ago: executing program 3 (id=458): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000001c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper=0x4d8, 0x2}, @hyper, 0x0, 0x20000, 0x5e}) 7m55.501615105s ago: executing program 3 (id=459): r0 = socket$netlink(0x10, 0x3, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (async, rerun: 64) r1 = getpgrp(0x0) (rerun: 64) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) (async) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) (async) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) (async) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) (async) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2c099, 0x4c00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e26}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0xff24}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) 7m53.950422516s ago: executing program 3 (id=463): r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f00000001c0)) add_key$user(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000480)="fef0eda8c799a4a0c3cb5b0006020000009b7a000500e83ac5537b00f2ee3a983ffbac1326e8bfa5ad4a66f9fbaabea39972f55cc286afca4d1c44c886", 0x3d, r0) 7m52.744799849s ago: executing program 3 (id=465): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) sendmsg(r2, &(0x7f0000003b80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002b40)=[{0x408, 0x1, 0x1, "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"}], 0x408}, 0x8000) (async, rerun: 32) syz_usb_connect$cdc_ncm(0x3, 0x98, &(0x7f0000000880)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x2, 0x1, 0xb6, 0x90, 0x6, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x1, 0x6, 0x4}, {0x6, 0x24, 0x1a, 0x6, 0xd}, [@mdlm={0x15, 0x24, 0x12, 0x5}, @mdlm={0x15, 0x24, 0x12, 0xff}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x6, 0x5, 0xa5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x0, 0x9, 0x79}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x2, 0x2, 0xfa}}}}}}}]}}, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0}) (rerun: 32) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x7, 0x19, {0x2, 0x1, 0x1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x840) 7m49.612183711s ago: executing program 33 (id=427): socket(0xa, 0x3, 0x87) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x40000140, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x12) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') write$binfmt_format(r3, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000200), 0xc, 0x2) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000600)={0x23, 0x1, 0x15, 0x1, 0x0, 0x3e8, 0x0}) writev(r3, &(0x7f00000003c0), 0x100000000000022d) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x4, &(0x7f00000001c0)=ANY=[@ANYRES8=r3, @ANYRES16=r2, @ANYRESOCT=r2], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x70, '\x00', 0x0, @fallback=0x30, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat(r2, &(0x7f0000000480)='./file0\x00', 0x131942, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000180)="14", 0x1}], 0x1) mmap(&(0x7f0000031000/0x4000)=nil, 0x4000, 0x2000002, 0x10, r5, 0x6bc000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f0000000240)="27260fc7347dca0000000f01c4c4c22d049078000000b9080400000f329a1a000000440066baf80cb8ca30a686ef66bafc0c66b8f24266ef0f3266b85f000f00d866baf80cb882755c8bef66bafc0cec"}], 0x1, 0x18, 0x0, 0xfeb7) ioctl$KVM_CAP_EXIT_HYPERCALL(r6, 0x4068aea3, &(0x7f0000000400)) write$P9_RLERRORu(r2, &(0x7f0000000240)=ANY=[], 0x10) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_WRITEPROTECT(r7, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) ioctl$OCFS2_IOC_GROUP_ADD(r7, 0x40186f02, &(0x7f0000000040)={0xfff, 0x2, 0x5, 0xc600}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) 7m49.48227304s ago: executing program 3 (id=472): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x200, 0x802) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x5) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000280)) r2 = syz_open_dev$vbi(&(0x7f0000000140), 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="030000000400000004000000080000001410"], 0x50) ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, &(0x7f0000000300)={0x3, [0x9c, 0x5, 0xa53e, 0x7, 0x10, 0x6, 0x1000, 0x5, 0x3, 0x6, 0x6, 0xfffa, 0x24, 0x8, 0x7ff, 0x8, 0x1, 0x2, 0x2, 0x37, 0x4, 0x200, 0x7, 0x100, 0x6, 0x5082, 0xe41, 0xede, 0x8, 0xc4, 0x2, 0x7c83, 0x657, 0x5, 0x7fff, 0x5, 0x8, 0x9, 0x4, 0x5, 0xb309, 0xc9, 0x1, 0x4, 0x8, 0x3, 0x101, 0x5], 0x6}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000380)={0x80, 0x6, 0x303, 0x8, 0x0, 0x2, 0x0}) unshare(0x20400) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0xb, r3, 0x0, r4}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) read(r6, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000000100000208000a400000000008000640ffff04000000010073797a3000000000080005400000001c0900020073797a3200000000080003400000008c140000001000010000000000000000000784000adc48c6fabdb645df268c4c250a2517f5ad299a39bc21e8a744e6d9f794bb1f8accffa9871b4609c034412f309e4f09f7c07a5df1451f14b87ee4d04ad66a0103ea52ca9ad7c5e39638ee95"], 0x74}, 0x1, 0x0, 0x0, 0x4404c810}, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x458, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r7, 0xc008551c, &(0x7f0000000080)={0x8, 0x8, [0x401, 0x40]}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$cgroup(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000100)={[{@cpuset_v2_mode}, {@noprefix}, {@nofavordynmods}, {@name={'name', 0x3d, '&]@$!-\x00'}}]}) socketpair(0x1, 0x5, 0x5, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, 0x0) 7m34.246373598s ago: executing program 34 (id=472): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x200, 0x802) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x5) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000280)) r2 = syz_open_dev$vbi(&(0x7f0000000140), 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="030000000400000004000000080000001410"], 0x50) ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, &(0x7f0000000300)={0x3, [0x9c, 0x5, 0xa53e, 0x7, 0x10, 0x6, 0x1000, 0x5, 0x3, 0x6, 0x6, 0xfffa, 0x24, 0x8, 0x7ff, 0x8, 0x1, 0x2, 0x2, 0x37, 0x4, 0x200, 0x7, 0x100, 0x6, 0x5082, 0xe41, 0xede, 0x8, 0xc4, 0x2, 0x7c83, 0x657, 0x5, 0x7fff, 0x5, 0x8, 0x9, 0x4, 0x5, 0xb309, 0xc9, 0x1, 0x4, 0x8, 0x3, 0x101, 0x5], 0x6}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000380)={0x80, 0x6, 0x303, 0x8, 0x0, 0x2, 0x0}) unshare(0x20400) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0xb, r3, 0x0, r4}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) read(r6, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000000100000208000a400000000008000640ffff04000000010073797a3000000000080005400000001c0900020073797a3200000000080003400000008c140000001000010000000000000000000784000adc48c6fabdb645df268c4c250a2517f5ad299a39bc21e8a744e6d9f794bb1f8accffa9871b4609c034412f309e4f09f7c07a5df1451f14b87ee4d04ad66a0103ea52ca9ad7c5e39638ee95"], 0x74}, 0x1, 0x0, 0x0, 0x4404c810}, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x458, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r7, 0xc008551c, &(0x7f0000000080)={0x8, 0x8, [0x401, 0x40]}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$cgroup(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000100)={[{@cpuset_v2_mode}, {@noprefix}, {@nofavordynmods}, {@name={'name', 0x3d, '&]@$!-\x00'}}]}) socketpair(0x1, 0x5, 0x5, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, 0x0) 6m51.976468755s ago: executing program 6 (id=611): r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0xffffffc3, 0x0, 0x0) 6m51.723437829s ago: executing program 6 (id=614): setxattr$security_ima(&(0x7f0000000340)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) futex(&(0x7f0000000000)=0x1, 0x1, 0xfffffffe, &(0x7f0000000040), &(0x7f0000000080)=0x1, 0xffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) 6m49.787979925s ago: executing program 6 (id=616): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) rseq(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, 0x0, 0x0}, 0x20) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@o_path={&(0x7f0000000500)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001980)=ANY=[], 0x50) open_tree(0xffffffffffffffff, &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8001) openat$null(0xffffffffffffff9c, 0x0, 0x10001, 0x0) pipe(&(0x7f0000000040)) bpf$ITER_CREATE(0x21, &(0x7f0000001740), 0x8) rename(0x0, 0x0) 6m49.119288919s ago: executing program 6 (id=618): syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e244e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e201670e5c77"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) recvmmsg$unix(r2, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) move_mount(r0, &(0x7f0000000380)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0x120) 6m47.937722606s ago: executing program 6 (id=621): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x30, r2, 0x1, 0x70bd2d, 0x1, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@supported_rates]}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0xcc4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x22000000) inotify_init1(0x80000) setxattr(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000380)=ANY=[@ANYBLOB='user.@\x00'], 0x0, 0x0, 0x1) 6m45.095721281s ago: executing program 6 (id=635): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) writev(0xffffffffffffffff, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7108ec50000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_rr_get_interval(r0, &(0x7f0000000200)) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r4, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m44.438963084s ago: executing program 35 (id=635): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) writev(0xffffffffffffffff, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7108ec50000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_rr_get_interval(r0, &(0x7f0000000200)) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r4, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m11.324016943s ago: executing program 4 (id=911): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1000004, 0x8010, r0, 0xec776000) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/time\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRESHEX, @ANYBLOB="010027bd700002dcdf252700000008000300", @ANYRES32=r1, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20004841}, 0x20000080) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x1, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1000aa96}, [@ldst={0x0, 0x2, 0x1, 0x7, 0x8, 0xffffffffffffffc0, 0xffffffffffffffff}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="020f00000c00000000000000fcdbdf2505000500002000000a004e210000c0b10000000067dcea790000ffff640101020300000000000000050006"], 0x60}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000080000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0x7, &(0x7f0000000dc0)=ANY=[], &(0x7f0000000dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000bc0)=[{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000f80)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f43182feba128280a372219d205e81f4a7f71c1926aae1efd7e0044a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000001000)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}, {&(0x7f0000000f00)="b2db2af41eb709de0773ef36f49a7693e274bfad4871c3527de87fbbbd11fee0eb0a7d2853f8f15f66707a49e85810ffb9174b67e9c6e652bfd8ea3d45180e221fe81780d9aacecc39cd50fa4556f6d164a11145bfa21ffc", 0x58}], 0x4, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], 0x18, 0x44014}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_TDX_INIT_VM(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000180)={0x1, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/388]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) clock_settime(0xfffffffb, &(0x7f0000000140)) 5m9.362377422s ago: executing program 4 (id=915): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32, @ANYRES16=r0], 0x2c}, 0x1, 0x0, 0x0, 0x40c4}, 0x20008000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000894}, 0x4) 5m8.945792453s ago: executing program 4 (id=919): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04d64020"], 0x7) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="08010000130001"], 0x108}}, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000280)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f00000000c0)={r3}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f00000000c0)=r3) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8) 5m7.817302059s ago: executing program 4 (id=922): setresgid(0xee00, 0x0, 0xee00) setfsgid(0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002240)={@fallback, 0xffffffffffffffff, 0x19, 0x4}, 0x20) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_vif\x00') prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff9000/0x4000)=nil) 5m7.648000348s ago: executing program 4 (id=924): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newtaction={0x3e30, 0x30, 0xb, 0x5, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}, {0x3dec, 0x1, [@m_nat={0x1b0, 0x1, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x7, 0x2, 0x9, 0x3}, @dev={0xac, 0x14, 0x14, 0x33}, @loopback, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x8, 0x20000000, 0x6ec5, 0x9}, @dev={0xac, 0x14, 0x14, 0xd}, @multicast2, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1000, 0xffffffff, 0x8, 0x4, 0x2}, @multicast1, @multicast2}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9dd00000, 0xc, 0x20000000, 0x9, 0x2ca1b42e}, @remote, @broadcast}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x7, 0x6, 0x2, 0x633}, @remote, @multicast2, 0xff, 0x5}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x1, 0x8, 0x8, 0x1}, @dev={0xac, 0x14, 0x14, 0x2c}, @multicast2, 0xff000000, 0x1}}]}, {0x97, 0x6, "97429fb720503067452d59fb2bf1f42a858a0054c2c2c3cdeaf50e96e467fa8ae5651a43ac156e4b42f0c308b0c9425f726d9c46553c76329b8329cb913301e08c9631e23d0f6589fcb765dde3d61067535815a60890d6ab6cc4588ca313a46d2e19a20b2acf5075370078d9ff512ceca78d1b2eeb3b12a26ead8f0837e04ad3ccb5e829122b2da7839309cf0ab86f6fe6865f"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0x1050, 0x7, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x5}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x9}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}]}, {0x1004, 0x6, "4319600bdc83aeca68dd72cacdedbfbf6fbb4655d0053809c84c7cc847dd64cdb190e7af51fc46594b387eaf91fe1f18a0f87306725c6fc604288799069351347fad26e8959a010a3d61b29fa77c1e7ea63bca3193794a2aade9a3d095c0863e7af7cfa11d2a7c141f62be5df51d0561f179d7efabf7a7f6bc151e307b43848923b073c05fea9c713f2ad1e3389d70b254a0c226262154b34437657e6c992e4d883e6e1c6eb5975889b29059bcd42c66b76bee121a946c20f0d9f6ca264a44553b2a995228e13d721f1ae084862074a010cd99d3cdf677b14316faf56b72e53cca0be84d90d125a47394704edbae199163a79ee9d11d2ae11bfd453a4a733408135c495c8979dc7d02a316aabf20f080fa4dd529e6c336ca4e34cb83cabe960f59d6bd080f5c53d80f674a091c1635746d1802594e665fb58151bec565297d0a49561039cd11b4f482449cac45cb70e5862d0bab3e07e1d74e2bdd8d10f3f3750cc41556cf24fbd3be452c4387b611b6a6bf25289c491b703ea5ecbfb2b7e0c92fdb6fe585905ea280a27a38732859f2d466a137c910b4dfd1b2986d2a8dd9e6e4f023ecf2b8555593d1cd9661a9a994d685f6d3fa518ca8c0dc0ba600c4650211242f479ebea8118e1ff299d5511995ca732a122c27336a5fc7a8fcb2715c87427f7b28db05d6c28410cbe31f7d9e12e34d9ef11c9a899514591bd0f4cc85fcb4b8c85731946b7503dc431d5de9c1dc2495a83fa8be55e73f718c3b7fafc2e36bc2e015f82464d7f5988cd96bd26e6b1b09b37aa7cac22a4002ea2d43bf1181cc955dfe28bd33a1aeeb5fee0f21244326baa51cfbe67316b81319069a4ac9b4ffe638e72fecd14ab4c0f5aa7acfb263315319e65b072dc31f3a0d7320ec84c2468d6f7625e3a267a9bc547ebed1cf80c1a3e2e141f55663ca083c80ccc55cd9a0fb4f37d1ca1bf24083523fe9480b8022ae22b7663ce2023f37a26357e7e8238ba52713fe7765ac0a7f3900c30526577ce814db3e46b46526ac4f6edd5adb3d453e338afcc999739430abe1992224b12705a5a24a2fb81bfae98e377d4dcb2750526a0da7b4f31348a5b3d8a421323d68a3cae3ec9db45b4ef9a66a67a13efc07bde8d020e53174021ff5125cf34fd3b10496ae0b70d5a7eef08ef84b500f39760456434ccc6e36bfb050c5dc5d5174296b7e2e1c539f4f9ef425aa62432938a06f172e96d76376b9cfbdd8278bcac401d40f1faa66b71f7f8044c06910df0c39ee5b2943afdf3d2a69432a895661f1da49e6bedc849824b86782b9a73bdc19d7d2ddaff3f6ead9a767b4814c3caae206aba78d3eb2a1691d1e106232dcbe18443804f1db6110a0476b7a291a689e8ee2b0cdc45d1ae8a451f73eebb8a4ce5633ebcd9a6b9de83507a0e5c396374cb0a3e675fc9ab0a86a252c9ed56e730908a14af1985a9f854cedc780f0e126e1a1ac4625645e345cb3ef534bb39d0923436298ea69a195af427a41937cbc8036096f31d015f85450903caa1ca884b87a92522d2d71b3e13259b8b9d3ad75ea62f38615f673ded662838fda804592615a062df1c3b0c387c8a22be211829423204dce48aebfedebbea2e8450a3c87e96e3687e1e908430e3dadb80b59b093d87bfb15ec6903f306d91f3f149787e99bd82d8638480f7b0f25470f185691dbcc7f02d37cefd895660ca3ecc06e4ecb16f1a9c93f93d77910fc562a13c88b31e43fef6b5d1e60f8082430db55df9b169e2ae51b5226f3a7ff819161a575fcbd882490f915cd0f8fc200b33d4321b188f310edabf21e46c7b5a3e8ee786c881e7af32cb7c30257d43da2c5838f2bd7d8c9496d46d45a24dcc4e0663229540fb9c3609f2b767328b056fad5efcab071d697be7b47a3bbccde92c7e4c0e78bb6cba869a198f7cf77a16bfd2c4347f150fb4011b345f1239e28d1e9aa2842b32566c59ec3a9f8d4af4e77e2179cd24d7923d21f270bb719cfa51e5fc0c2de586730d7bc203b1d8ff47818b62b9d4603a500a311f2ff6c30b6cf623c98d08fda73e53a0f0199056664621b5fc43b34c2b8d504041f72eaaa85aff9ddc572aa9995da96daf37ed85e3e3d31307cd76ed4329b11f178dec7876210d8454f9a1e7f69f2778f052e021003773f243af9e35f1c3899a1fb63d6c4c0067a9ba71bf1c56dee33d61798537f5cf9681ec007ffda9e65dc923764bcb5ddb9e5ddea31feb9464076572c1e1498b73ec469315e71150db38819938bf910dec6998b0276d48d47a823476162bd9f567d86fced115fbdfa29d5b10bec8a8f2a1727b7eaf4c437d277dde2befa6b5682d28485d9fe73f6502e8a08005b93617644fdba5d582f4f09fa5adb8f59dccc1223f5ae9c6bdf86dc1fab6a0e4d688f43d6aa726ee571f4798f63969808f6e00e8c32e5cc7351d56cd53f413df35cb529eb2bbd8ba74db756dcf652d26821aa97706d9cc50b7de6217f48cc62d567e0a14d7bdee887311e680a160c066547ca7a68e9f8856331a66904caa4163e77128c139c8633524f753ae8b89b757852ae5a27121d876889409084dfdd9f562c2af96df6bf48d4d08a0c83a5ccfe95831daee6dd15b83f109acfe46b5b737e45073fb7c055cbd7d36dd295d81813a85909a0a1c64dc9469886163ab810f3548003670c206feb657ee7db741d0169cfeee26467b9ec3b7a209c0f9bc04b2992558f3247b2ebb8025283af138f2a3477cebc12cd3fd3aa2708a026a1b8d6233215a8aaa4ebda6f83f7955285894d02061ce031afd3d7b5b5d6c1f0baa017db892b9408e076dc0d0e26763b317402ea35c70c03a1ce425a5ef4c6db29fb1d5e8981f14fb6d02e5ea463e417f93b68087f655c59ba03a77b2f8bd61f0b1b090c7296fd9adda482c9153ea58ba414cb3d1ca4dc75a77261c26814084a3fecd80e5f22d75d5305d88f32021e1a265ed25b78b46a682a9d7297b7a802251d751eaac51ce52d872c2cafd7bf7a8c4774708a768f487f7fdcfa4eae36f0a66b37d47be96d190f1a3c6d68bb0b06744910cfa947d3ddfdd02be176ea3f1d4cb70654652584cc9b4a45a41d393366dc86f3ed693d2a0ccef6b0e34929176036372d22b52e87ad83ac5942497eb54f4949e81939e0d26b2631a1d8ecce40f1be2736943a8d9647f85866bdcb7aeda939cd9c5f1146dfad668c664fda810576a5c63a755e7e973e51015c2c9a8aadfec135058a773a56941544646c993d2b4004c3644ab6700fa832032c728cec24056683a1b3110252a48accc270f61aeaaa7bcbe551be9ad2cec8a065fd0810206be44191bf402f09ba48cbefcbe40c18239e63f3c1a7c25856b7e30986fac8d6100c3c2a7b83f190974d177fb190e17d287e56eb8baf02881b5b1c060f4c9e2470d85e07ac4cce97c8412238c4d6f1fb9c8a5426b026d571cd4af38f73b646744ba1f18305eae84332b2795ffde32ed4034a47e2676cae456ac48f4b7bba1d96e9f50e5040cb0f38284f49f92288e104cc8a015adc6ebae4397846a08c3d6ab51b65dc29a063296ffbaeb245a237eb16fc45fa18c5f166d611f418781e512d04b48a34f06fec2c3ba90c90d40654a32bd39f790c28bd8ce30038001fd4f091d37dc58d106751d351405705dae22863ae14bf079a7d3c3d975a8500a9d07f1d9126dcefcecf8686a6d57096e2bf5cfdd7fb94e05ef049c220597118fa4e6f47f1301ddaccfb410c1eb211bb8b85b5859ff51c274636ee19ef2b75f19a49c6ce8608cc932229a753defdc3ce7dc97861a66fafc536150b6fa5f51c46fbc8f6d81016c2e9278228db40daf8e866272b5e489a69160f2dca07cd70b9dea60fd5a3a8604abeb86dddfbf6c5e9a189992af10d3d552ce3cb2a392947428bb762dd94e779159bd103234197e109a32816777d8802d36c308fc5e8f50a45f35663dc6b51f28239e782031b73a407a5fcc147698d3becb856a69d74dabe5665d21e8409f3741d889345088ff80931d9d90ba2308291a5fc224bf4e71a4999bec3a65c150ce8e25c66acc31ceafde7eb508352849436ec16642c4e1dc5f7d7ccc27d4909fb9831996ad52b9f56369dd585938c9a87f5f38124826c50b551b53d2e1772d98a0578bddb573941be7af838629063b17901d4b2e4e1c47922a69d29cb86d998cc8bb041857745152aeec10c11dfd50ffcae7ab6aacf448132f7be016e60ef016f55d79391931f5b9f1b87399036f052cb27b6364a676f661752e1efb1d6384f61e59b5cd82f99c1016a6a7b508d53d93072cd3c4bf8d9950fe2d59917de5debc929f357711b78081aa883a4f13a91b06e9c3964a05331498538335220b7dede52834a3cf922b5d59c29074f875b0089d67d76776401ffedc87050d2661776584ce86dce9c867463e3c8fbdf60fb91731251e2fb215712992dde165f09a2b057391f6add85505989c7d188abd2162074dd9b123dc227620ea08f36bdaa75255f184d8304e87656bd910c569020577b21ee4a0c123a1895d09b447ba108e1adf4d855f1a2826b686a4f923d7fe82884b094616b0f32cf39666e9b07bb5b8127c640198846b1ebdc633343b3498623e68ef68b7c1dca80ad0f87140d21825705775b98bad960f1bb4d63db205eb82937debe11abd272e49e3fb71eb16543476664eff35bf5be74d3196f07ca3bc0423da686323f03853c224679d48729b3c6dd3a10b85af2d27e4f270e6fd9bdec4ba8ec1ba8b02d07235bde1ddfb5beb265efe803eb19487b884396ced11378e9dd94fe5a20559e5d626e6a6d28bb52423d66e365958bca7d2573863e34841321510b3e9225d7c08323c433481d365bc9572014e8fb23a683cbb75a18d2680fc84ca6a7f1bd49a54fdc5e70072bcb19367d6c8809d0a672bffe347fce8330cb255b66412bc56c55cfd0892d62265f00fd32318049c6fbd6e55d6f909c0c718c4fe71bafbb339aadc91e3c91b4e981e261f8fd71946f49587503c16c89804c6fb2e6087e792f4a9fba246bddf40104ece491c204696f533149b8fac82e782ac3451857621369a905c403f505112d08389caf43adfb5dc5d197a498c161010d1760a419a861c7efa45941e4677aef5e8b94249b0ad2b705895ca1e55d48885a064c053e1f5ad1286540541d5279a46b2a5746c95d274e77c7bad66b8912f1ccad8cd4edd47f9ffa2b1eae6ff9bf7287a5ca002f5ec1dc61d1e238f9615d4f6dbeb6c9e1f6925f7288a882b87fca68a4ce263fa5f3905f8ce62cc33f4138030a2b14c8f07fd9ebcbc8c9d298615ee5e23a6dd6b29f6095a2f2a6285a51ffead232171ea60f1b5b04bdfe476c0f1fd3ca1b02744734fc3f3882241fdcce9e0b7aa139dc1aebbba08284700ad45db0042155515fdbe0d46ad2cd0b228fbb703181ec1469425766d47e8500831f6964353485446cde977b9bb05bf1a1672949c5778f5c823e3a39787b8f5144b420d66e23906e661b75411ca04f96148f47429a4e17b4cb03591c7d89786efbe19d7bfaee9d4db26a2e12b5c6e7d9146e8d5a43df2b6d94ec4f8f6752fc03dd1ce45e9a1b8073690efe8dda91cca96dd67d68992f73f073ec4a06720a69f53e161740120e1f24a5b1e4e2aba7ee10eb198751dde18eabbb3dff13e5feea489a2dac69f4554d697bab551465b648ed3d58d696e2f9038b791445c5385625166b5ca26f36459b8937328f0a3f018788b5a184e288e39367a81c38f146e4875e8290e3f96925b11ea56423bc61124182a48aa3e0e0d047b0b7a106a541bfa19d9550"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0xcc, 0x1e, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x2}]}, {0x8f, 0x6, "ebce1a7fba637c7bdbb041e8ad5538e9a19c9e7de66cb17c248c1270c57c7feb0d8ed4516dc724c3988c7dbe010bfb670bda9b5e9f9a185b2562c50bb50b10e7432d3e922bbc0838d47418654e8bacb8c0b424409e36a1e22256502bf50e90d4f75d3617491d87c304bad7d6222709395d0fccb9f1dcf4fc656b2ec4ee7dc7a90940346ced875609d20c9b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_simple={0x1070, 0x7, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x7, 0x3, 'ct\x00'}, @TCA_DEF_DATA={0x7, 0x3, '@!\x00'}, @TCA_DEF_DATA={0xa, 0x3, 'smaps\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7a, 0x90e, 0x0, 0x7c, 0x7}}, @TCA_DEF_DATA={0x9, 0x3, 'IPVS\x00'}]}, {0x1004, 0x6, "52f7634431f2d9fe19eb7b6029e58a2d55bc75ec09fc20e24001538d66cc16009dd617ebbbdfd88f9ce6993c8b836963ec7817588d37660e8f91d8c17cf2e9fcb1ba99d60ae775cdc1c4a8cda088b095dc9882dab9b7154b3154dd0586db3a41cedb9fb079917837f005de482c90fe7773260ccc00fc18a217501170966bd79522c7864acf1502c4100caf91976875ab784a2cbe3d52feb5256439a3c5d0181a6cf19ccb82c7a6b731a81c3af16d49d1269a558522508b80ce565f43e9a9a75e4cd461bc72d3576c14ed865fbe8af7ef2a39f53b4c3d8a8619c60211856d89e5850b5042120929e6d758fefbbe19f75ccef49f33e74852e18578ec98edabd91e6b0c48fd06ce9962bc2e08a662c291d9606e0a2deb097b34f2ec95fd301a789cde935c97c9de7398c8d4a6e049c14018f2201f5d72ef88506009af09eb5eb4d227fc8ebd16c0ed0b230c29947b08ddb8163175fc5386c2260faa72fd0689294c345a7fee8c35dca25ea11a5a8472e8c9161f4866d53d2904b4af07e944949cd913d2c6a7e45c217b6723061d817eaf05d4b5f3425208ea77dd765a3a3d4f2829d0b9e9635f1f745505505a483499c87550833ab95346cb618e08cb44442aca599edf8c327a1eb5f7af9345dc0b93b3e893b8c2e9137ca66408c086048bcfd594b3f321fad086b799ab57d58a3b6281a3eb6e94135d50268c3ed9f3462e25e3ef431dd053352fe518368a600fb79655299da09b89edcac64df7d5080b3fcf5ce7d532969798ccbe1d7ba15fc2047116e10c3fd51f10f814c4f082d31e39113f43d656d6e9900e8b741f974bf7ff9ab604a45041d9e918618248b42571ac273530b07976a7ee2d84dc128a0a9be290b77f09a94688ebad181ca4b22e80279a72869f2d0b0445adccc5ea4eeb926dadf789512a2b53df4b6ab10d40e482106a7a60c06d8bfd2ac7d5ac3c8543fac2ede505c25294a21a756ba5aae256e0236edb9650f034b34bcc7dbb666c51f7d442a23e7fabab8c2e93c1cc47c004db48e329d6b0190291fe1641b671b7511d6d017b4edfe0b15e4ccf3bddfee5fa9b5a537ced95883a17da030858355b14e5b378f7098999a3f3a4c0b0b46e96cd49b95ff4a2feff5c0d5d4536db3b7d34c69636bf8621cb6de3d52352d7e47eb2e5308d579ced5c82e82839dfeb1cef7d9137316e0d377589bd32e3ef10ed0c3038a2d8b82210ed4e47a7827b1db1505b88343e01959fbaa662b1696177c9a8883bb65b2d9612664110675e45e0f04b92784267b365a6be8b7df3cefe2dcf9a58d7f122801e85e0e84114cc578dbe36d45f8bee2390923669df84edeee556ae824984ec3a1a5f414120d8f618c947c43ddb520c37f2b5995609f174d0326b6e56958b711cb510455290e8500f29ef4dde8559f7e9fd8ba35b5499e88d1e2dcbf28f6d952a4b07c843117dc124402e582d2f3523c8cd71d0418d5da5649661019f58107ed195e815cb1e1159b75f47b473d9dd6d47875ac0e86f8a03aa3e9bc182c0966bcb727942c53e698cbcfd2eb908ee48b131420b8270df394fc61dc51035acb61a20b12b08c9beed17fc269a4d1be8cef80156c2ac773b116ed072f3b95c9a589026d6c835513f2e6f87dd18286a8caccc3d3ad6e78551087b233663c469cc8982aa89bb7da81c8c7e431dc51a915771a726246fc6b9d25a754e9f42e3a88187c01ed40a09dd580c09c9006f604a65da3b6b43c4a5c92ccef113bc7c76456475c592d71fc09d9cb7be3abb815700c44382fa6ee03c9931db53011c69d3cfeef0d358a96b17a1861c6f94caa471c6b57d529bed9e9b6b5e86e966ce238439519d11b919bda6848c59da61cb03b2f8749bb2bc514093a2fab1d226ff204b8fbbbc0643f7a15d52e785cbba1bf5eddeefc111baab522ba1110da56abae229556341c49fc7cb45994ae241a8fc78d9f5e924ad24aa4acffb6d7f9dcb6bbc6897d547c39a00561eb9d48147490bf02780f2d1171747a13518266280476b5bcb0d9a1a03682a9658cfae8be8674026e155a1fdf790e2fe443adbff7b8f3029f65233302aca3712bd0e6155d593fff09d6cdcbf8956bd8eb06b8ec26e8093a8f79b00c108d27da906b6318b13d204080eee88cc292a3996ab3e916bb6eb0a56d92ef2e6c3a17f4ec97eadfe33e1c0523d335adc1364ebdfd4f625730b54ea7927bb4aa1b76dfb2ee0bc44549fb3ae93615f8c5ed5036fb214b075012a0ccd3a5a4884e5b768cd9693248b4ac1fc164cfed0e8b2a504cf9afdb1ebcf13eae7e6e87d4b85eb5cc174963c1ed231e6981310588a860a9210970cd3f6f047d809fd18310567f6430cbf16ee0dc737fd131f304274428e4af5c03e8e44d82b86e5cd72e7165e9c8a918a677382b31f7e762563b9564c4c4673ac063709fd51062d505b8d0cbc1ea9bbebc80327f2fca22a7e45de212b31818ce389f81fcf254786b94c38c46de5601ef3e0f09afe494b98bb138448cdfe42a8652f58beadae4a35c872db780a76b2e5b63ec7ca10afd3b124e730a0990de81046089bd8224dd223a4fabfbb1bfae76ef4bd2d032e3d0bc34bc38c95860dfb32a0f80d8a35685b2f24d8c5d551f1ad233050b167333ce68d243a1e8b07df26490a30c400de4cdd65e91cedc0bc0b4f6fe73b83ce5b64de8e59ad9dfa9e20d9fb5ddff4c3083900091d4c61f69c402450b61b992cd05213dcbcf58cccb8244784a062109fe0ed361e5faeebfe7b8585ec521325130f92467cd3ab62a8271847ddbc2b7880271dda60a07bc7fb1aeb1312b845511a4aa54d7f064644b2bae0c8f48be73682c5bd675f93151a26e4c632d7aa9d5e7a67193137ad393e0adb842d01530b07531b45b5a764c9ae9e4c3528d90034dde3a714ee70161d13d9709a59b12af119c646a0e0fda7761b60ca6344face5469f0adb64dc2c110d77e4471b8761f604cef71afd0b4bbe6c44d9d598aa5385729989e076c633e126092ff7b2a43ce6fe11d1e1f463c66522c054ea95e741288ddc333bf0c30a31d77c9d420f62f44dd60f6d9af4f57b514f83fb10c1c07db19234962bbe7936a7dd8bfcc9fafd66566909b57dd1f4d36047a718420f1de17c4ed5a61dc03821d2f979ea47f5520e904fef527f97a2d6450f6e89484d9bb73f94a4bb20db6ed70f9064d06adfcaa1e8c3c426223af4a97384baca9fded880a79f4fdb9c2d1868fd5895cb42fbbf31539e136a5edfffeaa94509da66615b769c78dbb7399bcdb0b1d1ffaea93a9d5e0373edb35ad413ecca42ad0f71956447a2d190cc2e9ca5e42869846924cf02784c7743815f53c060ffad44463a490ab570ffa4a39bd488cc73f2f914cdf01efd49015d646e83d34d5198a6a09b161e182953af1ccf2d06b2397f2c61236baa57cad61001006e3b02b62d992c3bc8eeaec72e18f33e5739a1b41a97e4cad3ebd00e8a359b1beea0b6b30532ab079c2e02716cec4d73d6a4388558f8250aa6afb0edcc5cca73f41ed9e0af054a9f4ef3c5b6cd359590587d3da014b95096d80379b68bc5285b217d339d2efa28e2afdb3c5b8b80c9475ff6b40230404d0f0818eea1a19d5ebf0e030357bd404e23a1b0e063b4df1c9ec69d2a90d3d78b5ee43d2e3e148b5d94df95c56d2183ae6fda5621a31528880822c48841157e4b1c00de12bb0b0deca2a485e735dad7c0dc5239bc5e241dc52472dea404d04afc890a6e4b65f631690ee64ac5575de7bc774b80124b274bdeb34595352e9f3fb0562628bd39c5c8092acef78e23ef8bd2a573188fae69d0eb65dc8a5c003e01d047c33ad4a3861523e04992e81df8f47d7d75276142a8041601d22291eccc252a5dbbc914f0833ede31e79d196b55bde2baf1f7c84ec9ff88cb370e50b15d3c574a023341abc62ac09a95c3ce7d240fca125755b50bfb11f0d6c4582511292bc413d00621a565310e9b4c3366fbb958925c1cf9953d8747bb2ef72fd60cd197984375b0412053074ea4319ce23a0f5d1fd8faab7cb2d2dfbc38f3b6a555c201ee8e3a8c4ee5773b4ac2fcdc380d0bd01e29e48175b20ae69a09bb1d733fdb962abc9b839d4a618e7ca5145d87e90eaab16de480fab441ad6af4cca6fc97570c80f70499839628da96a2d7325f87cb9eb145ba7dcb9eca81f695c0a32ff7a858b0a1a7fb64f6e1fb304f264d89f954744c294278abd45839a108690606db171db27d9c726072a01c72a9d52f742a937cb0307bd3f2789fa00dfb3899d69897b6e15e6559c29e5ecaffe6f649b47e4a89782038a10a6fb4c96927c43787e91518caadfe27644f41863ddf878b1b2a43c4336041e2879e91a2b4d54f74c8cff3de5348fbdde7518a41bbaf4dd11075121c36d7473b671e55f8a7a7217f4cf6e35fe3f7dc6451f8880b2adda63753c45feae48e5966d7ca663082aab9b0ee785d58df2632d333275f69a5a81cbe65308019b9cc6d7be742197e1d33424efe5bc09a09959b02bf1f4faf324a9a92041e2b057c6b4d264ca8ceb0d2b9775f83650616bab223dd38d69ca7249b2bb7e8facf693502db54498914a71fa31dca425a4450fd46978dee9205b14897433e5d64c2c3850e0daebd87be7ecfc83f1a4e136a43c2e669390db830a8cadce2b6cdc6247a5c5466e4f82c7f4a20dc714259f2702ac13b5b1d549084d8b9a2baac5580ed82964fc56f6a0c5357981ff21977d75f6e21ef3956d30add6fd4ac7268e01e7dd6995530b41ca141030cf2ad9e827db16956391a98d73d3926833d7afffc7106bd723b5d91704d1a88d1ff35cb487ce0140ec4948b1c4d0b74dbceee20bc97c0efa4fc1fc800ba7f0a889cd7f2bb36c8186d3f8cbe9c3a5958225ed02488fda8e062f43107c581fefbd835f13fe7d6101983a6e79c0bb3e40973df95af6c9f451430af43a98f43bd36b0efa89ef7b490ea15c096689ebb17815c340095b35104f5bee1d78242204f70b6153e4fc5b46153ca99a79144e6524511a70a9ea219b21b997d5434c7d83a374e9b7012ae662ee51bf44fdbebda17bf895719fb4bae66cc4413b406f1bcda25d122a8c1876c9e9ff022b225d20a18c5f16d3f76440b541faeadc32bdf72badb5b1d46590177c55f24feaef3527b6c40f9f34c620ccd0739899eea24f88c06a24e4774f2d90189d15b6052b1d0b1d34868698a50f59c41138440a72c29adffb04a2b43a6e0a0762428a0d9f7298afc2aa9d66de877cd430effa46af3ccf22300ff53de1d1b7c5d9ce83f6893005d9d29d98e7d450437c104a7ed1dcf5671f466a43d907427b9e8143a737276c0dead52dedd9e1dcf77de5ab6833c7dbaa83934b49e82fee183eb0e8b49f486a181df81bb40a7426df0b9edbf17bfe43a03a7350e99068e03a8306ccdbd4a8d0b548f6ed26a43691d7dcf53e7e7589954f0813752a7216c55800f6412eba19298f77e12cd245106364a30239dfdd17fbd9078e89e30878d89ae5f16f607d6d0d4001b85a83dd4041f25f221a39bd3972fc1b59d2d6b4596548cf7c864e4ac4eb58d64b05508f3ca73c694201110dfccbe24096b585a82f238450a7302bda77a26f70dc46ccc8423b55e770f796954f6987a9df92d5764f0662936a9481a4d32210618b63e6a43ca8e2229dfc835c0d8e01ad67f290f59c5c1e45bcfc94c782a1c51e6d025825e4d1be8a99d105a3b73213fd935ffa6c0595497903b8a3341d8b814006b9394b30bfc9a644e02cc51ba18908db7b7ac808f187e0a4d84a6a3cba81e1d2b14a448631d48cc610c0156d9d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_police={0x15a0, 0x8, 0x0, 0x0, {{0xb}, {0x1564, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xf}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x3, 0xfffffff7, 0x2, 0x0, 0x6, 0x89, 0xfffff5d6, 0x1, 0x6, 0x101, 0x0, 0x4d, 0x200, 0x5, 0x1000, 0x1, 0x80000, 0x0, 0xfe2, 0x3, 0x3, 0xf291, 0x0, 0x2, 0xfffeffff, 0x21, 0xfffffffc, 0x5, 0x1, 0x7, 0x8000, 0x2, 0x2d7, 0x59, 0x1, 0x0, 0x2, 0x44, 0x400, 0x2, 0x200, 0xa, 0x8, 0x6, 0x5, 0x6, 0x1e7b9b58, 0x8, 0x3, 0x81, 0x5, 0x7, 0x2, 0x9, 0x8, 0x6, 0x8, 0x1, 0xb2, 0x8, 0x2, 0x8, 0x4, 0xfff, 0xbb3, 0x8, 0x2, 0x1, 0xd672, 0x91e, 0x9198, 0x6, 0x8, 0xa, 0x3, 0x4, 0x0, 0x97e, 0x6f, 0x2, 0x4, 0x2, 0x5, 0x200, 0x5, 0xea, 0x2, 0x4, 0xff, 0x8, 0x4, 0x8, 0x85a0, 0x800, 0x3, 0x8, 0x5, 0x6, 0x400, 0xffffffff, 0x366a, 0x7fffffff, 0x5, 0x1, 0x7, 0x8, 0x8, 0xbf29, 0xff, 0xe, 0x2, 0xff, 0x4, 0x3, 0xbfb6, 0x6, 0xeeb, 0x7, 0x5, 0x1, 0x8, 0x2, 0x7f, 0x8, 0x6, 0x956, 0x5, 0x1, 0x7f, 0x80000001, 0x10000, 0x9, 0xff, 0xfffff001, 0x408, 0x2, 0x7, 0x32, 0x8, 0x40, 0x6, 0x480, 0x7, 0xffffff7f, 0x0, 0x101, 0x0, 0x2, 0x5, 0xe3, 0x401, 0x5, 0x3, 0x7, 0x5, 0x7, 0xfffffffb, 0x4, 0x800, 0x101, 0x1, 0x0, 0xf, 0x1, 0xe, 0x800, 0x41, 0x4, 0x3, 0x1, 0x3, 0x7c, 0x1, 0x6, 0x2, 0x3, 0x4, 0x6, 0x0, 0xb, 0x1, 0x800, 0x0, 0xc000000, 0x4, 0x13, 0x6, 0xc, 0x8000, 0xa, 0x7, 0x1, 0x3, 0xfce, 0xffffff7f, 0xa, 0x1, 0x3b8, 0x5, 0x3, 0x6, 0x7fffffff, 0xda60, 0x5, 0xf36, 0xd, 0x4, 0x8, 0x3cd, 0xffff, 0x3, 0x8045, 0x8, 0x0, 0x8000, 0x2, 0xfffffffa, 0x5, 0x0, 0x101, 0x4, 0x1, 0x9, 0x7, 0x10, 0x0, 0xa5, 0x5, 0x1c6eeedd, 0x9, 0x7fff, 0x9, 0x200, 0x9, 0x344137dd, 0x0, 0xfffff58e, 0x2, 0x4, 0x6, 0x1, 0x4, 0x3c83, 0x0, 0xffffbec0, 0x0, 0x7fffffff, 0x3, 0x7fff, 0x1, 0x2, 0x6, 0x8, 0x7fff, 0x60]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0xfffffff3, 0x6, 0x5, 0x8, 0x4, 0x0, 0x8000, 0x80000, 0x68, 0x4, 0xa, 0x8c5, 0x8000, 0x8, 0x400, 0x7, 0x6, 0x7, 0xfffffffe, 0x2, 0x4, 0x1f, 0x9, 0x6, 0x6, 0x1, 0x7fff, 0x8, 0x5, 0x0, 0x4, 0x62bcba2a, 0x5, 0x7fff, 0x8, 0x80000000, 0x2, 0x2, 0x1820, 0x3, 0x5, 0x3, 0x7, 0x1, 0x4, 0x1, 0x0, 0x6, 0x9, 0x6, 0x18000, 0x5, 0x4, 0xffffffff, 0x4b, 0x5, 0x1, 0x2, 0x8, 0x9330, 0x9, 0x80, 0x4, 0x0, 0x4, 0x6, 0x7, 0x5, 0x6, 0x3, 0xfff, 0x6, 0x9, 0x7, 0x1000, 0x2, 0xc, 0x9, 0x20af4514, 0x1, 0xea, 0x4, 0x6, 0x2, 0x4, 0x1, 0x4, 0x9, 0x5, 0x63f3efee, 0xffffff9c, 0x40, 0x7, 0x8, 0x49d09efb, 0xe260, 0x64, 0x6, 0x6, 0x6, 0xfffffff9, 0x0, 0x2, 0x5, 0x2716, 0x5, 0x101, 0x967, 0x0, 0x0, 0x6, 0x4568, 0x1, 0xc1, 0x8000, 0xfa16787, 0x0, 0x101, 0x6, 0x9, 0x7, 0x1c, 0x3, 0x926, 0x29f, 0x580fea7f, 0x7, 0x5, 0x9, 0x4, 0x9, 0x3, 0x81, 0xff, 0xd, 0x1, 0x9, 0x2, 0x6d1, 0x5, 0xe, 0x4, 0x7, 0x660, 0x0, 0x4, 0x401, 0xffffffff, 0x10001, 0x7fffffff, 0x9, 0x0, 0x10000, 0x0, 0x7a2, 0x1, 0x80, 0x3, 0xe5, 0x9, 0x9d37, 0xdfaa, 0x6a, 0x101, 0x5, 0xfffffff9, 0x1, 0x5, 0x9, 0x8, 0xfb, 0x51, 0x3, 0x1, 0x3, 0x8, 0x0, 0xa, 0x3, 0x7, 0x7, 0xffffffff, 0xb172, 0x3, 0x4, 0x5, 0x2, 0x9, 0x3ff, 0xffffff7f, 0x9, 0x8, 0x5, 0x6, 0x6, 0x4, 0x1, 0x8, 0x80, 0x800, 0x9, 0x2, 0x401, 0xe, 0x9, 0xd2, 0x10000, 0xc, 0x8, 0x80, 0x68e, 0x5, 0xc, 0x4, 0x2, 0x5, 0xf5, 0xb, 0x27, 0x5, 0x3b4, 0x3, 0x8, 0xff, 0x8, 0x0, 0x100, 0xb0, 0x3ff, 0x9, 0x7, 0xfb7, 0x9, 0x1, 0x6, 0x9, 0x0, 0x1, 0x10, 0x9, 0x200, 0x6, 0x6, 0xc6, 0x1ba58, 0x5, 0x66f5d8d, 0x2, 0x1, 0x6, 0x8, 0xe6, 0x3, 0xfffffff7, 0x7f]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x8, 0xa8c, 0x7f, 0x2, 0x3, 0xa, 0xc8, 0xd, 0xb1a, 0x7fff, 0x3, 0x33c, 0x0, 0x3c, 0x800, 0x1000, 0x1, 0xad, 0x3, 0x5d, 0x5, 0x500000, 0x2, 0x2, 0x9, 0x6, 0x2, 0x80, 0x3, 0x9, 0x8001, 0x3ff, 0x3, 0x3, 0xd, 0x1, 0x7f, 0x7, 0x5, 0x6f, 0x1820698d, 0x1, 0x6, 0x1, 0x7, 0x1, 0x6, 0x8, 0x0, 0x0, 0x3, 0xdd, 0x6, 0x5b7, 0xc13, 0x10000, 0x89ff, 0xffff794b, 0xfaf, 0x6, 0xfffffffa, 0x9, 0x41e, 0x101, 0x800, 0x6, 0xc42, 0xc782, 0x9, 0x6, 0x5, 0x565, 0x2, 0x80000001, 0x8, 0x9, 0xd3, 0x9c, 0x8f9, 0x4, 0xb92, 0x1, 0x43b2, 0x3, 0x6, 0x4, 0x4, 0x1, 0x2, 0x1, 0x10001, 0x9, 0xfff, 0x101, 0x37f, 0x4, 0x319, 0x4, 0x6, 0x80, 0x0, 0x6, 0x1, 0x7, 0x8, 0x6, 0x3, 0x401, 0x2, 0x0, 0x6, 0x9, 0x9, 0x4, 0x101, 0x5, 0x0, 0xf, 0xdf, 0xd, 0x86b, 0x2, 0xfffffffa, 0xbb00, 0x7, 0x1, 0x6, 0x3, 0x55f, 0x7, 0x8, 0x3, 0xfffffff0, 0x6, 0x7, 0x8, 0x8, 0x3, 0x0, 0x0, 0x3, 0x30351102, 0x0, 0x6, 0xab, 0x4, 0x42, 0x4, 0x0, 0x10000, 0x942, 0x7, 0xffffff89, 0x1, 0x0, 0x7, 0x1, 0x5, 0x7fff, 0x6, 0xffff, 0xe, 0x10, 0x0, 0xc, 0xd7f1, 0x80000001, 0x9, 0x7, 0x8, 0x5, 0x7, 0x1, 0x7ff, 0x1, 0x8, 0x6, 0x401, 0x4, 0x6, 0x8, 0x7, 0x7fff, 0x5, 0x6, 0x5, 0x2, 0x4, 0x6, 0x8, 0xd, 0x4, 0x2, 0x800, 0x8, 0xcf, 0x7, 0x344a6358, 0x30c, 0x6, 0x4e, 0x9, 0x1, 0x4, 0x8, 0xfffffffa, 0x2, 0x8, 0x7ff, 0x81, 0x7fff, 0x6, 0x6, 0x3f, 0x40, 0x48, 0x3, 0x9, 0x1, 0x3, 0x7, 0xd5ee, 0x3, 0xef, 0xe0, 0xfffffff2, 0x9, 0x0, 0x2, 0xd82, 0x5, 0x7, 0x3, 0x7, 0x7, 0x5f, 0x7, 0xcf, 0x5, 0x2, 0x0, 0x7fff, 0x9, 0x23a, 0x1, 0x6, 0x5, 0x2, 0xa7f9, 0xcee5, 0x0, 0x0, 0xfffff70d, 0x7f, 0x6]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x119}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0x1, 0x4, 0x9, {0x0, 0x0, 0x0, 0x800, 0x0, 0xc}, {0x80, 0x0, 0xff, 0x3, 0x9, 0x7}, 0x80, 0x0, 0x58}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x5, 0x1, 0x2, 0x6, {0x3, 0x0, 0x8000, 0x7f, 0x5, 0x6}, {0x83, 0x1, 0x7ff, 0x40, 0x2, 0xe5}, 0x4, 0x6, 0x4}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7ff}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xd, 0x1, 0xfffffffe, 0xffff018b, 0x81, 0x3, 0xffffffff, 0x3, 0x7, 0x8, 0xce, 0x6, 0x5, 0xffff0000, 0x6, 0xb, 0x9, 0x7, 0x600, 0x0, 0x0, 0x9, 0x55, 0x800, 0x4, 0x7, 0x2, 0xe33, 0xffffffff, 0x7, 0x5, 0x5, 0x4c, 0x4, 0x8d9d, 0x3, 0xafae, 0x6, 0x4, 0x6, 0x7, 0x7ff, 0xf2b, 0x7, 0x800, 0x0, 0x6, 0x7fff, 0x800000, 0x6, 0x7, 0x4620, 0x8000, 0x8001, 0xecff, 0x9b3, 0x4, 0x7, 0x7, 0x7, 0x10001, 0x9, 0x40000000, 0x2c, 0x1ff, 0x1800000, 0x5, 0x800, 0x1, 0x200, 0x7, 0x81, 0x7ff, 0xfffffff9, 0xffff, 0x9, 0x80, 0x8, 0x3, 0x5825, 0x3, 0x2, 0x4, 0xaa14, 0x6, 0xfffff870, 0x6, 0x100, 0x1, 0x2, 0x2, 0x0, 0x5, 0x73fc, 0x160b, 0xfffffff7, 0x1, 0x4, 0x7, 0x5, 0x3, 0x5, 0x7f, 0x7, 0x4, 0x7ff, 0x7f, 0x3ff, 0x7fffffff, 0x40, 0x8, 0x1, 0x5, 0x2, 0x1, 0x1, 0x0, 0x2, 0xa00, 0x43a, 0x10000, 0x800, 0x3, 0xe, 0x1000, 0x2, 0x42, 0xd87, 0x70, 0x40, 0xffff, 0x9c2, 0xfff, 0xc893, 0x5, 0x4, 0x97, 0x600, 0x9, 0xbc, 0x8, 0x1ff, 0xf, 0x1, 0x7, 0x3ff, 0x7, 0xfffffffa, 0x8, 0x446, 0x200, 0x7fffffff, 0x3f, 0x7ff, 0x6, 0x1000, 0x1ff, 0x9, 0xc, 0x0, 0x9, 0x3, 0x3, 0x18, 0x1, 0x1, 0xa, 0x2, 0x7fffffff, 0x1, 0x6, 0x5c6b, 0x70b, 0x6, 0x8001, 0x0, 0x2, 0x6, 0xfffff801, 0xb, 0x0, 0x5, 0x1ff, 0x7, 0x53c6efbf, 0x7, 0x10000, 0x2, 0x3, 0x3, 0xd29, 0x4, 0x5, 0xe6d, 0x1, 0x9, 0x2, 0xff, 0x4af, 0x9, 0x800, 0x7, 0x5, 0x1, 0x38, 0xca16, 0x1ff, 0x80, 0x4, 0x2, 0xb7, 0x3, 0x6, 0xfff, 0x4, 0x9, 0x5, 0xfff, 0x6, 0x9, 0x509f426d, 0x6, 0x95, 0x6, 0x1000, 0x6, 0x6, 0x6, 0x44e, 0x9, 0x173, 0xf, 0xfffffff8, 0x2562, 0x9d3, 0x400, 0x2, 0xfff, 0x2, 0x0, 0x8000, 0x6f, 0x3, 0xdb5, 0xfffffff9, 0x8, 0xffff1d60, 0x9, 0x4, 0xb, 0x2, 0x7, 0xfe3, 0x6, 0x6, 0xa]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x20000000, 0x8, 0x5, 0x800, {0x2d, 0x0, 0xecd, 0x8, 0x2, 0x800}, {0x4, 0x2, 0x5da, 0x77, 0x2, 0x8f}, 0x0, 0x1000, 0xffffffff}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xcd, 0xd, 0xffffffff, 0x3, 0x757d8703, 0x2, 0x0, 0x6, 0x7, 0x3, 0x2, 0x9, 0x2, 0xb4, 0xf, 0x6, 0xffffffff, 0x0, 0x80000001, 0x9, 0xc10c, 0x0, 0x1, 0xce5c, 0x6, 0xfffffff8, 0x1, 0x7, 0x7, 0x7ff, 0x8, 0x0, 0x9, 0x5, 0x2, 0x4, 0x9, 0x4, 0x14cc, 0x25, 0x4, 0x2, 0x9, 0xdf, 0x6, 0x4, 0x400, 0x3, 0x10, 0x8, 0x400000, 0x29, 0x6d, 0x1, 0xd, 0x2, 0x3, 0x101, 0x7, 0x5, 0x194, 0x40, 0x5, 0x5, 0x2, 0x2, 0x40000000, 0x8000, 0x1, 0x1, 0x7, 0x5, 0x4, 0x8000, 0x8d52, 0x3, 0x4e6f, 0xd, 0xea, 0x9, 0x35b424d9, 0x8, 0xc90, 0x101, 0x6, 0x7, 0x4, 0xe8b, 0x7f, 0x9, 0x10001, 0x7, 0x5, 0x9, 0x2, 0x2, 0x4, 0x4, 0x9, 0x6, 0x6, 0x4, 0x2, 0x6, 0x0, 0x9, 0x2, 0x4, 0x6, 0x9, 0x0, 0x100, 0xfff, 0x8, 0xb19b, 0x800, 0x10000, 0xb, 0x0, 0x10000, 0xfffffff9, 0x1, 0x9f, 0xdc9, 0x5, 0x6, 0xddad28e, 0x101, 0x45, 0x0, 0x945, 0x7, 0x3d, 0x0, 0x6, 0x80000000, 0x9, 0x4, 0x400, 0x9, 0x7ff, 0x6, 0x2, 0x10000, 0x2, 0x3, 0x100, 0x3ff, 0x6, 0x2, 0x7, 0x5, 0xffffffff, 0x3, 0x7, 0x9, 0x4, 0x5, 0xfffffff8, 0x4, 0x1, 0xaf80, 0x7, 0x10000, 0x9, 0x78037672, 0xda85, 0x5, 0x39, 0xffffffff, 0xfffffffd, 0xe5, 0x7f, 0x9, 0x1, 0xfffffa5f, 0x5, 0x80000001, 0x5, 0x1504, 0x6, 0x2, 0xfffffffc, 0x8, 0x3, 0x0, 0x3bc2034a, 0x9, 0x7, 0x3, 0x3, 0x2, 0xbe4, 0xb, 0x2fa3cc24, 0x6, 0x0, 0x8, 0x8, 0x7, 0x9, 0x6, 0x6, 0x8156, 0x8, 0x5, 0xc64, 0x2, 0x7f, 0x0, 0x5, 0x80000001, 0xc, 0x7, 0x5, 0x0, 0x80000000, 0x7, 0x8001, 0x2, 0x3, 0x7, 0x5, 0x7ff, 0x9, 0x8b, 0x6, 0x4, 0x1, 0x2, 0x8, 0x80000001, 0xc, 0x10000, 0x0, 0x6, 0x0, 0x3, 0x8000, 0x233, 0x7, 0x8, 0x5, 0x2, 0x2, 0x0, 0x6, 0x0, 0x1, 0x0, 0x4, 0x2, 0x8b09, 0x9, 0x6, 0x7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8001}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x585f}, @TCA_POLICE_RATE64={0xc, 0x8, 0x88d1}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x6, 0xb886, 0x100, 0x7, {0x8, 0x2, 0x9, 0x5, 0x101, 0x200}, {0x8, 0x1, 0x5, 0x138a, 0xb5, 0x5}, 0x7, 0x5, 0x800}}]]}, {0x13, 0x6, "87d1714a7118646277e9c05841c2bf"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ct={0x174, 0x2, 0x0, 0x0, {{0x7}, {0x54, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "79f712727350aecc5d96229be2d363f3"}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0x15}}, @TCA_CT_ACTION={0x6, 0x3, 0x24}, @TCA_CT_LABELS_MASK={0x14, 0x8, "6781c3a08054a0b9e69aa126fb0345ff"}, @TCA_CT_ZONE={0x6, 0x4, 0x8}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}]}, {0xf9, 0x6, "2c823d27dee9a97e7a663dd6bfe1973ebdaa0bf47f7cf2415ef5bfdd7376848a37de85cff71dfd2082b376145422884c4a824833e317356a7285c37fce4c6855f57be0e0641c4fc51931ee527b16ed0ba21b10486ba537303a654ee9cbdfecde38a9cb25dd216b38a9b6d8903a0ad14fdac4fbb0192d7ee5b7dbb8b530f2081fc4d821478b86ed913098405317f95fda080557665ff19e2af1acdc85e493279bffc3f3fd3f671e91a8e1ad384ebf8ef85383f4f56f407e3c366dc4971d6827e882fbfaf05255eb6a9be81cdc1b8ea2395bc893e59ac511e9e5d128c56336fcbd5c0ec728669e01f16bd4f413f43b35365a715cff53"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x5}}}}, @m_xt={0x210, 0x5, 0x0, 0x0, {{0x7}, {0x13c, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_INDEX={0x8}, @TCA_IPT_TARG={0x118, 0x6, {0xff1a, 'mangle\x00', 0xb8, 0xf3dd, "2d00f21b3402ad74b6e52e07e3e9c84382758febba4374b0cb2fc2e45d485d59f5488174cd2183cb3dac3ec27c995dab97c6f52587c5284735f5b0b4df8644a4868c53b7687ea99831a75cb5fbddb6c78141fcdc1632cc396e14ada6895ea431bc5f816bae1dfbf8c78b8fc830b2706c35416bc4aaf7441e12568cc58871d5a98a171f7b4deb2667ae86e527cff321eefc6272276a95de6f2bd59aaea92711c642c29910c513703cf4c8ff3746098899cebfdd99c3d45d7ab752570a4248cb0368dc84468640699739e3d8c7828ad423099cda6d55f5e150860fde0d6787293e729168ff639c5dcf31ad56e4c6c9"}}]}, {0xb0, 0x6, "55084a169b13e247e5e3f8d492b7e011a29ce0c88f399b2b0a410eafb36930882535c10167773bc600feadf4fb536b8990dc06c0aaa2c4c265ad1e0e7a6fc7483771d7e0c74f0ae73f95dbd22c430e53a514266e9e7cdabda8afdd2f432c47a3897be80b6c5865140a34ad381db5924725d45833edcfee15e491c2edf8c2bfc5165bd3d091e62e90a30f9627ee47498f8b6bb9121980c3c7d8f43b32f8ccb39babb55f020ad91c3f33a02b33"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_xt={0x188, 0x1f, 0x0, 0x0, {{0x7}, {0xcc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0xffff8406}, @TCA_IPT_TARG={0x6c, 0x6, {0x4, 'raw\x00', 0x1, 0xa, "b8e9ac7d68ef17e006f6d0864f48083f90ab90960a9b020dee3d7e4847765733a6576aec14df070a986ac410b1ac5f95710d661d70b41467e338559163dfce90b7fc"}}, @TCA_IPT_TARG={0x42, 0x6, {0xf9, 'raw\x00', 0xb, 0x2, "406016134f412e588daa3c24d7f906f7f0031a184b184c6f"}}]}, {0x95, 0x6, "530712920d808c3b3ad58c4d760d72d7c16169c7f907076c5e808eea604b5d34dd5cbcb705b6d307b5e2280fe6698bc06c1a04555af3432d385cb24958d3e9d9699e0418c1458e4d04dcee783cfda4451db0c5d8e98f085271e4134ffe6580e22a25b3bb2429e8c3a2c6a4647534699cacfe4bc1bfce152cd60d98d8f59485deecde3c37fec72a1de5c0c1ee380eef51c6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x3e30}, 0x1, 0x0, 0x0, 0x8890}, 0x40) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x18, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x18}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r1, 0x402, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x10}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x8081) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x9, 0x4c032, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/sockstat6\x00') preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000040)=""/40, 0x28}], 0x1, 0x2, 0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, r5, 0x1, 0x101, 0x25dfdbfe, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0xc810) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000280)={0x0, &(0x7f0000000200)=""/127}) 5m6.391755285s ago: executing program 4 (id=928): r0 = socket$kcm(0x2, 0xa, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8d80, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x185041, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f00000004c0)={0x28, 0x2, 0x0, 0x4000, 0x0, 0x0, 0x800000be5}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) timer_create(0x1, &(0x7f00000003c0)={0x0, 0xd, 0x0, @thr={&(0x7f00000002c0)="994d8e67383e852d532a7dc284379ccff427e9200bbd42341df9a8945cef53f27d761dd5e16af3c3984d5596c13c8cdfcf081b1fa0e13782562d0d0cc25cf98ac64012c572751a698f3561759e08ffadcda74cc6f16b7efa7990e1fb5b29dcd904dae9e2aa53a5bfe7c133b17c5301b63766c7e17019ddcaa3f27830ce1555acf4f487dc627a294c545e9f7248107bf31c52a18da903295a2a7a", &(0x7f0000000380)="36f3e2e05739cf25c613cbb9d3e35623e100906234"}}, &(0x7f0000000400)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r2, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400004, 0xc, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000280)=0xb7) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x5) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0xb7) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 4m51.279805353s ago: executing program 36 (id=928): r0 = socket$kcm(0x2, 0xa, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8d80, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x185041, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f00000004c0)={0x28, 0x2, 0x0, 0x4000, 0x0, 0x0, 0x800000be5}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) timer_create(0x1, &(0x7f00000003c0)={0x0, 0xd, 0x0, @thr={&(0x7f00000002c0)="994d8e67383e852d532a7dc284379ccff427e9200bbd42341df9a8945cef53f27d761dd5e16af3c3984d5596c13c8cdfcf081b1fa0e13782562d0d0cc25cf98ac64012c572751a698f3561759e08ffadcda74cc6f16b7efa7990e1fb5b29dcd904dae9e2aa53a5bfe7c133b17c5301b63766c7e17019ddcaa3f27830ce1555acf4f487dc627a294c545e9f7248107bf31c52a18da903295a2a7a", &(0x7f0000000380)="36f3e2e05739cf25c613cbb9d3e35623e100906234"}}, &(0x7f0000000400)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r2, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400004, 0xc, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000280)=0xb7) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x5) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0xb7) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 4m2.559856511s ago: executing program 0 (id=1054): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x5, 0x0, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x20, 0x0, 0x6}]}) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000140)=""/117, 0x75}, {&(0x7f0000000580)=""/210, 0xd2}, {&(0x7f0000000740)=""/178, 0xb2}, {&(0x7f0000000800)=""/153, 0x99}, {&(0x7f00000008c0)=""/167, 0xa7}], 0x5, &(0x7f0000000a00)=""/41, 0x29}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="17", 0x1}], 0x1, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18, 0x80}, 0x40000) recvmsg$unix(r2, &(0x7f0000000cc0)={&(0x7f0000000540)=@abs, 0x6e, 0x0}, 0x22) close(0x3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC=r4, @ANYRES8, @ANYRES8=r1], 0x50) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="180200000000000000000000000000001800000001000000000000000700000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000200)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05327f9be20e2e16a06670b33781b64358066d9bb4b5ca95842cb39c843f7f7e7951be5b646b00b5cc9dcb93772b7242494c33adde3dccb64c345ed2724932f56623ceb76efc62aba67076169e46232ebbf566810ea897489143f907"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r5, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000100)=0xfffffffe, 0x4) sched_setattr(0x0, 0x0, 0x0) 4m1.635518682s ago: executing program 0 (id=1055): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x200040c4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0xffffffffffffff20, 0x0, 0x0, 0xffffffffffffffff, 0x100}, 0x2040) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000040), 0x8000000000000000, 0x20000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e24, 0x3, @private1, 0x5}}, 0xfffffffd, 0xa33c, 0x1ff, 0x5, 0x400}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000340)={r4, 0x8000}, 0x8) setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f0000000100)={0x6, {{0x2, 0x4e20, @rand_addr=0x64010101}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x31}}}}, 0x108) writev(r2, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a001700000000040037000900030001632564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) pipe2$9p(&(0x7f0000000000), 0x88080) 4m0.918354394s ago: executing program 0 (id=1058): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000ac0), 0x1, 0x0) writev(r0, &(0x7f0000000b40)=[{&(0x7f0000000b00)="f545", 0x2}], 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r1 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000100)=0x2, 0x4) r2 = socket$alg(0x26, 0x5, 0x0) syz_emit_ethernet(0x37, &(0x7f0000000040)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa2b22f0bc222b24ade40751195f9244fa662ca3b5be614f5db16df9b4e0da7d2fa2c561418f2d4c0b42ca63efeaf929d26c0da166fbcabcf98a8532b5352528299a356ce080676b1b62b50bf1596a4e4ac60a00fa9477d669bed80bcc21fd8b4f0aface89d83b7203c9747515b3b8062359b6f34ea94f5f75e67ae4e357886de4ef7309bf313f0ba9ccad5f855dc1285a816ab2f8"], 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f00000002c0)={0x2, 0x0, &(0x7f0000000280)=[0x0, 0x0]}) r4 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r4, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xfc}, 0x6}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000600)="8320", 0x2}], 0x1}, 0xd020) sendmsg$kcm(r4, &(0x7f00000005c0)={&(0x7f0000000840)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000400)="ba7f", 0x2}], 0x1}, 0x0) r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000180)={0x0, 0xc0fb, 0x80, 0x2, 0x27e}, &(0x7f0000000000)=0x0, &(0x7f0000000680)=0x0, &(0x7f0000000140)=0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$smackfs_revoke_subject(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000980)=@IORING_OP_STATX={0x15, 0x51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x800, 0x800, 0x1}) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xa) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r9, 0x4068aea3, &(0x7f00000004c0)={0x9f, 0x0, 0x1}) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) syz_io_uring_setup(0x4bd7, &(0x7f0000000300)={0x0, 0x8419, 0x20, 0x3, 0x6c, 0x0, r5}, &(0x7f0000000380), &(0x7f0000000440)=0x0, &(0x7f0000000480)) syz_ublk_add_dev(r5, r6, r10, r8, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x2, 0xe57, 0x0, 0x0, 0x1000, 0x7c}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000001580)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000140)='./file0\x00') r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r11, 0x0, 0x22) poll(&(0x7f00000001c0)=[{r2}], 0x1, 0x70) 4m0.003599561s ago: executing program 0 (id=1062): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) acct(&(0x7f0000000040)='./file0\x00') mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x8, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) 3m58.819928667s ago: executing program 0 (id=1067): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000000)={0x8, 0x48e}) write$cgroup_int(r1, &(0x7f0000000100)=0x6, 0x12) 3m55.60425682s ago: executing program 0 (id=1073): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xfeb1}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x23) 3m55.010353572s ago: executing program 37 (id=1073): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xfeb1}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x23) 8.501220704s ago: executing program 7 (id=1461): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) unshare(0xc040400) bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[], 0x50) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r1 = socket(0xa, 0x3, 0xff) eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x0, 0x800, 0x0, 0x100001, 0x5}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) close(r1) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000001280)={0x4, @win={{0x8, 0x283b0b32, 0x7ff, 0xcc4}, 0x2, 0x0, 0x0, 0x6, 0x0, 0x3}}) fsmount(r0, 0x0, 0x2) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000500)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xa3, &(0x7f00000002c0)=@any_dev={0xb, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0x0, 0x0, 0x6c}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x92e0, 0x400, 0x2100, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x8000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x2000, 0x0, 0x801f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x1, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xa, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x5, 0x7, 0x9, 0x3, 0x12, "4bf8269dc8c718c9d46b6fed87700d14836709"}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000000)={0xa, 0x4e22, 0x81, @private0, 0x40}, 0x1c, 0x0}, 0x20000854) r10 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)={0x60, r12, 0x1, 0x170bd2b, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x1ff, @mcast2, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x40}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x98}}, 0x8000) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x111}}, 0x20) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 7.718924854s ago: executing program 5 (id=1464): r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2) getdents64(r0, &(0x7f0000000200)=""/55, 0x37) getdents64(r0, 0xfffffffffffffffe, 0x29) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) r1 = accept4$bt_l2cap(r0, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x800) bind$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x2, @any, 0x7fff, 0x2}, 0xe) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, 0x2, 0x3, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_CFG_QUEUE_MAXLEN={0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x27}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x931, 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 7.353441225s ago: executing program 5 (id=1465): socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x9, &(0x7f0000000340)=0x0) io_submit(r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000015c0)={&(0x7f0000001480)=ANY=[@ANYBLOB="9f0000240000000c0000004100000000000007000000dada2fd8c998cd2f92a5f0c4000a2000000100000000000000005f2e61305f000000006100"/72], &(0x7f0000001540)=""/74, 0x48, 0x4a, 0x1}, 0x28) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0_to_bond\x00', 0x0}) fcntl$lock(r1, 0x6, &(0x7f0000000040)={0x2, 0x3, 0xfd8b, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b7c, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001600)=@deltfilter={0x3af4, 0x2d, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x7}}, [@TCA_CHAIN={0x8, 0xb, 0xb538b04}, @TCA_RATE={0x6, 0x5, {0x1}}, @TCA_RATE={0x6, 0x5, {0x20, 0xd}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8, 0xb, 0x5}, @filter_kind_options=@f_route={{0xa}, {0x2c68, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x9e}, @TCA_ROUTE4_POLICE={0x18, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}]}, @TCA_ROUTE4_ACT={0x1498, 0x6, [@m_ct={0x7c, 0x14, 0x0, 0x0, {{0x7}, {0x48, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e21}, @TCA_CT_ACTION={0x6, 0x3, 0x1b}, @TCA_CT_LABELS_MASK={0x14, 0x8, "b0e4fbcd5870176ee97693634d5111a3"}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x1000}, @TCA_CT_ACTION={0x6, 0x3, 0x22}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e23}, @TCA_CT_ACTION={0x6, 0x3, 0x20}]}, {0xf, 0x6, "15ac9c9107a810ccdbd71a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_bpf={0x130, 0x2, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0x2, 0x10000000, 0x0, 0xd4da}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}]}, {0xcd, 0x6, "0fa9b135d5b27fc2f12570b78bb6a7615e2ed50bf94b6831091e1bcad62dc367866946efc64cf4cce7578f7241046a0455b715e65924830f7cbfa70692900ece0e7c74fcdecae0952fdf5298478b85d6acb681129b9a9947188dfd242c752c3877fbe68264ece633355632491f1404c86593a6ab7d8010105159af52d02752efcbb1de1c04464d53d01e3f35d43ee9976946e1f02a73522d0d6f286fd9026d59a5961f92f9cd72c3b66d8b8357ce2e8b6bce94b2a3bec7d72a2f863cb4b70f8bbad7248e9d848c2bd7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_xt={0x128, 0xb, 0x0, 0x0, {{0x7}, {0x48, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x5}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}]}, {0xb9, 0x6, "bd8705a1a52c572bc6ba9af276dd126002da6c4aa82a7c1f6f381234903eeb5f5540cae6cf33e390e20190b6d78bc80b4d0a8c11560cccaf9b82d7501449f70918ca86200cb02d628846c90864b0d5c5cee38cf6f541cb9cee536a979b5f36cbf4ab5fe21fc79397aa9ba4e1c22a225933dd0b2c4bc09964eb5883ecb1c856e820d6c64ce906cbfe4f3215b654008dc331e8e6887d8230bd73d1201a3adfe46b721ba16774b59545945906af6fd36d746fb126798c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x4}}}}, @m_simple={0x1038, 0xe, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x188, 0x15, 0x0, 0x0, {{0x8}, {0x74, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x18, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xff}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x9}]}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x4}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_TYPE={0x6, 0x5, 0x7}, @TCA_IFE_TYPE={0x6, 0x5, 0x1}, @TCA_IFE_SMAC={0xa, 0x4, @random="ca86a66ca389"}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1ff, 0xe, 0x20000000, 0x1}, 0x1}}]}, {0xef, 0x6, "be54019a3badbec5bebb3f293c4e18204073f77c9eb58b1fff554d78e5d28065b6b43b6dee724a0039a75cffa1177fb831b9fd58ea50b50625c7c69cea4643ac04718422a7800d91deb09659271a60714e4fc9bd59425698d9404f5671f905c8ca9cec6a221d44fedfeb1589c3a019371071fd79a2ad2074c219b5f77e7a5129131c4295bc298191f46b8730194ef1b05a61436f7edcc4781ae99e88279055c003c69b4d260964eaf0b206ba0660c098b49766e5f78aaef0fee977c0034e7a9b56d6fb93b269b46bdb1eb4e82b3281630c3b1778bb17fe85b0bce959f462fa7e48fc950eb0e81a7314cbcc"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_ROUTE4_ACT={0x158c, 0x6, [@m_ife={0x64, 0x1c, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x14, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x9}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ct={0x11c, 0x3, 0x0, 0x0, {{0x7}, {0x6c, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x7ff}, @TCA_CT_MARK={0x8, 0x5, 0x10}, @TCA_CT_ZONE={0x6, 0x4, 0x2}, @TCA_CT_LABELS={0x14, 0x7, "7fb40f6104d07763e98e260ba6dcd3d3"}, @TCA_CT_LABELS={0x14, 0x7, "a7ec8c3b33e2b8a913be15cbd128d88a"}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @empty}, @TCA_CT_LABELS={0x14, 0x7, "21cfc14624e9cfc46a81a93a1567dfac"}]}, {0x8c, 0x6, "1837b03d8e54aa20484ee735834273c416aff5afa5d15d07948d51be5545049118a29c8fcf95c3893e5a7a08479ae3ce7bdeb6f0b224fb5b67d4264bc2c98ed59b5ff2c3a1c1564180abb10278df68897395d928e14df972c8f7c139249f9cbf12d9d19daa75deb970cf719ddc9ec67fce2fe2260269f949001c04010c89f4077afeee5b980cf584"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_ctinfo={0x84, 0x1c, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xd}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x7}, @TCA_CTINFO_ACT={0x18, 0x3, {0x6, 0x10000, 0x0, 0x4, 0x200}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x5}]}, {0x20, 0x6, "b9dc20f488b4b9d0d3daceaee141ac88900236827343641ccb05e5a7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbmod={0x12c, 0x16, 0x0, 0x0, {{0xb}, {0x7c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1ff}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7, 0x3, 0x3, 0x1bb, 0x5}, 0x7}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xc, 0x671, 0x10000000, 0x3, 0x762}, 0x4}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x8000}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3ff}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="77998a6fc48b"}]}, {0x87, 0x6, "c2ee49a4f0eabbe71068325c94ebe2d16175fa4a6c87656e476f7b3de6a69831555fdd1f74377af6e4edaecb5f9c2f8848eb2ba3fbc70626d74d252be3f3121b09e9cbc8a4593a40437cc16098f10706fad62df342d7abc17aa0c2c7a01eea4d9207b33087b5abdc2a12c700de71787e8e546380e09c08b1aba1b44ae05824cd71686f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbmod={0x34, 0x17, 0x0, 0x0, {{0xb}, {0x4}, {0x6, 0x6, "71a5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x2}}}}, @m_xt={0x116c, 0x13, 0x0, 0x0, {{0x7}, {0x112c, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0xa}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TARG={0x102a, 0x6, {0x6, 'security\x00', 0x9, 0x4, "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"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x9f, 0x6, {0x2, 'filter\x00', 0x0, 0x3ff, "de58eb51eeb4d34574f2774d5b82922e8ef00621edd4c26c32e0f865decba21e0406afda1b1404048c8bb57db1800ff9ca1ded3302b01f9a0d06e0a975504c455a264e2e57ba17013d4a0cb00a2c8c07b0843857e9f5a95936d119b45db68126af630ac5030b3f6787cb77b49257b24000ad799aa9"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}]}, {0x1c, 0x6, "4fa1b268507240de62b16721e1ebbbc05479eb7cd2999ab6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_sample={0xb8, 0x15, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xc}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x81e3, 0x10, 0x10000000, 0xffff, 0x2fcccecb}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}]}, {0x4a, 0x6, "be47956cad3387cef8621482ae01798707e10591353451375f17557a9e26b86618e03df31295b41e8b712631e7547ddde48909321ef3c028406e92c48d268d883e5c1ac28f4c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_ROUTE4_ACT={0x200, 0x6, [@m_gact={0xbc, 0x18, 0x0, 0x0, {{0x9}, {0x70, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0xff2, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0xffff, 0x7, 0x3, 0x0, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x7, 0x1, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0xffff8000, 0x0, 0x1, 0xfffff001}}, @TCA_GACT_PARMS={0x18, 0x2, {0x800, 0x4, 0x2, 0x40, 0xffff}}]}, {0x21, 0x6, "34905a2be52bd6ef6a649c9d8211716dc94bda3bce130411516acff2c7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbmod={0x140, 0xb, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7fffffff, 0x9, 0x5, 0x1, 0xd92d}, 0x8}}, @TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x7, 0x4, 0xffffffff, 0x9}, 0x1}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0xb1, 0x6, "8675fb478fe01917bc2375b1d407122fc5f9c3796407755eb3b88d58d02ea6c68bcbea50986c4873cdeae1d16889030fd30484161fba6a3910e48d93b07db8e652f84065a5d7be508a015a2d92f4e60b62948c6520d0397595c8439b5bd211ccfece7cd147742713078027db24ed7d341a538cd5bd63c7230fad82be5fc28cc7de00df7fab3eeeddec8437782eb77acaacaf671e60903c6e94c298a11cddb2cb7c0a3d56b2c622f2eadbcc8624"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0xae}, @TCA_ROUTE4_IIF={0x8, 0x4, r2}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x2a}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xe2}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x40}}, @filter_kind_options=@f_matchall={{0xd}, {0xe0c, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xfff2}}, @TCA_MATCHALL_ACT={0x928, 0x2, [@m_connmark={0xf4, 0x13, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0xfffffff8, 0x4, 0x0, 0x7}, 0x9f}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x9, 0x8, 0x8, 0x101}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x31f7, 0x5, 0x3, 0xa}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xc, 0x2, 0x20000000, 0x9d, 0x30}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x3, 0x20000000, 0x0, 0x1}, 0x9}}]}, {0x37, 0x6, "9b46ca38da6acbaaeb51c529adb530d859f7559b07c58fb57a80a1b9b4c94432f597eaccdac58e74b17113c05e333636aa3565"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_csum={0xcc, 0x19, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x19, 0x5, 0x0, 0x80000000}, 0x58}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x800, 0xe, 0x6, 0x5, 0xfffffffa}, 0x5d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x1c, 0x5, 0x0, 0x1}, 0x16}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xe, 0xfffffff7, 0x6, 0x9, 0x9}, 0x28}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0xd, 0xffffffffffffffff, 0x6, 0x8}, 0x5e}}]}, {0x13, 0x6, "af00d5417fa0e7815e8c3e99e5c181"}, {0xc, 0x7, {0x7cda96615b562956}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ct={0x180, 0x0, 0x0, 0x0, {{0x7}, {0x58, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @local}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @empty}, @TCA_CT_MARK={0x8, 0x5, 0xcea}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @rand_addr=0x64010102}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}}, @TCA_CT_ZONE={0x6, 0x4, 0x6}]}, {0x101, 0x6, "f9e2e55dc3c65cdcb4f1ab4ae26438134721269293a0d34eea290d2cf2c4ef7c2cbe67419293c327594e2919679d9c79673ddfb9a28766f414664c84997126a5adcbb3dc35d53e503d1648929bec5c3b47ed4156345181bc56270adfeeb8f3decd7822a5171d0876e550d3273d844766ead14c977166180c5892e02a8fea670e950f03cc15f9466e5d38e95b5962f39df469273df435b586e9f28d7818058592ac5d76bbed31681c9e43a42bd869445435e60bee9e5c946d8ff8b12a0fb6726b091007b4c090fea0e666a8ce12dc87cb08a001a03d02d9a024d08144316138871f8aaa64bc7e78d4cf4f9111aba1d8604d1d5e076e22e84976564ed7ec"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_bpf={0x134, 0x19, 0x0, 0x0, {{0x8}, {0x68, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x4, 0x7, 0x4, 0x3}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x0, 0x8, 0x6, 0x2}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file1\x00'}, @TCA_ACT_BPF_OPS={0x2c, 0x4, [{0xb1, 0x5, 0x80, 0x2}, {0x9, 0x8, 0x4, 0x6}, {0x8, 0x2, 0x91, 0x8}, {0x7, 0x0, 0x1e, 0x1}, {0x7fff, 0x5, 0x7, 0x8000}]}]}, {0xa5, 0x6, "9a1c11503ed71a20c4b802a3be9fd16ce10c436b7253d983b44fb7486152a752082073d2a3d7752ff67ab3842e5a2970f7540a9d4c830b648170258424928965cc34417c86db7f5f349897fb8f36a87f116b0860a548715c6d40f513fa305d29cdc90986637083cb21f6e3821cae5b1ecbae38a80320237d04843c4c5e4d0446cd216e2cd9896c1e36425dcf41044bd84ea8cf2f5e4a5ad2d8a3b17ef26b5d98db"}, {0xc, 0x7, {0x1, 0x202af077a8396e19}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_sample={0x124, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0xf7, 0x6, "2a41cac519e29e15fc511947da7232d2e044298dd3c0c63a55fb80384caa86d9c2080cedea34c9d8114705c4c10dad3cd00728514b2ee39cf975d48ff11c28df27218cb6878e5df7bfcf6611666ee1218a6af79a643a77ac149a9bec69710c5082010bf09b29676d72445527ff50e178c9f93417563229762787d87918c1ed7feb97eb5a7d7a87d5372b6fade6da19f8e2e152b7c94991bff6db124f89fb47a1977bff06acf01d5bd4ffa047ed84c60d0ad21f4ce8a5989c5ebb667733a5ef4d298d92557b8f956b01593367b644e796f9dd7ab0338320b39d2fdf11de84660aa083aa5053f9db58efa9470169b7fda7c8c23d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_skbmod={0xc0, 0x9, 0x0, 0x0, {{0xb}, {0x78, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xb5, 0x0, 0x5, 0x80, 0x6}, 0xc}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xf67c}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_SMAC={0xa}]}, {0x1f, 0x6, "88980584373f6de29adab2fdcc11a5c84dea93ad869bfba7db03e5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_vlan={0xac, 0x1c, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x66, 0x6, "e39a4924964714f5bef7b278c4f6c4a64be915022af10ea5a192eba128ee61c28bd7203fff861300bebfdc8510a7c23f706837b20b9fec6469df85aba526434e49778491c3df4038b0ee01837845c90765e4b135272c4c6980a61b159a11422db895"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_simple={0x98, 0x3, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x1, 0xaf, 0x20000000, 0x7fffffff}}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x0, 0x1, 0xfff, 0x401}}]}, {0x3c, 0x6, "28d57e1c9ac121d07d4c7e3b6b061d91ca6112b1914cd01dad6bcd551f60bf28346df0d9fed7849f1e56067c9eb37def4925102138e6ae04"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_csum={0x188, 0x8, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x101, 0x0, 0x5a, 0x7}, 0x6e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x1, 0x20000000, 0xfeb9, 0xffffffff}, 0x3c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x95, 0x7, 0x0, 0x200}, 0x2d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x0, 0x5, 0xfd, 0x5}, 0x53}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xb0dd, 0xec, 0x10000000, 0x9, 0x9}, 0x28}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x8000, 0x10000000, 0x9}, 0x5c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffffffff, 0xc6a, 0x4, 0x7, 0x7}, 0x6e}}]}, {0x97, 0x6, "576c8814e49c94620bc9cdf1c9850a3bd108f2ddfd60ea970e1aa03de025204f52c353e31cbb68f1717c24b82cdfc7238c649bfa93ee58acdd3b828903f4005a4b5a22c377b6867634c4aa874bedeec43224e4f38b0ff2e72ea00695e71575b2dda5d63885fe87a9b590e03c0e333b0b7f73b19252ee87984a0ce659b378f07e5c852e80018fbaa897bfc672082d3b80471299"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_ACT={0x4c0, 0x2, [@m_tunnel_key={0x108, 0x18, 0x0, 0x0, {{0xf}, {0x4c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x6, 0x2, 0x1}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @rand_addr=0x64010102}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}]}, {0x8d, 0x6, "b0924fbedfd817b797edb4c66d5cb0a3c70c846966b525e18364f758ed242c644bc69dd6c144f43a8fa60e30a32c32ba87bf36568c00efecfd07bb29ed225c956e21727a0e0f49cdaab3c9b8e458ba9512231bfe138e6577fc9c093843b3d0dbd4fac38be14376d360b5840eebe659a8c1dffcf585b5f303bbf4edbc4cae711234c4fbf02f0a7922ae"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_bpf={0xbc, 0xe, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x4, 0xf, 0x4, 0x1, 0x10000}}]}, {0x79, 0x6, "ab534cde6e3b06ba325b4e53065cc798f433942e7a83943f1e7bc0dbb770d603a6d2470068dab7b70a0cb0896358c081ae3bec78fedaa80f3f83ae8503e81175c09d0d59f5434a58d8d624091afa701dfb3f91fa085f7eddec4de79fca448e603dbb8f70c43d62f2658912a43a340910e775da47a8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_sample={0x140, 0x5, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5fb2}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xce6c, 0x1ff, 0x0, 0x3, 0x9}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x800}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0x10000, 0xffffffffffffffff, 0x5, 0xff}}]}, {0xb9, 0x6, "2423ce5f3154b50082e116e8df1c52bd9ba5d38f28e4c5d29caeb62214b2eaea5ee6c2dd685caaedfeae27c7c3dbd6a436e3c35a3fe03a98aba9928d92cb800e4fba65722cd46aeb63505c0697c98d5ea9ec13f25bf2e508a2362ad76c2b85e1321710cf0a4d4f9c55198a533ed91197e4add7f3f943ad5d89900c5c5dac360ba02b889a6daa1753da3e96949817cfe50550f464cb06302f0956a586cdd8c93eb9e8b279992385e7dfd4edb1eaede0018070aa63fd"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x6, 0x3}}}}, @m_csum={0xbc, 0x12, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x5, 0x6, 0xff}, 0x56}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x401, 0x2, 0x6, 0x6, 0x19}, 0x77}}]}, {0x58, 0x6, "c1f5b2cb2f5333f02cc812ef78c7816f2d8b6183fb0eb1519b1070a595acab5a9e2555f79e20a821d6767947c0b1ebb3249c5be5d8ea58d0732807535f263bdca232d21893e9c46cf71e566cc913bbe161954880"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbedit={0xfc, 0x11, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x401}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x3ff}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xbe}, @TCA_SKBEDIT_PTYPE={0x6}]}, {0xb0, 0x6, "acfd020606921abdd41626ab27657f525d701ecce89f1716890d09af4a7b9af412ea7380a78d3ac50e6e419b2d6ac6707f2cf2cdc8ff6f84d80e7b1168ba431c723d0d2d6f47ca6c77108b906ad7924c02ad30718b36189cf45814c06417f83b185abc1bb77a847f0fb8466fb578fb09ade3b084525a3f05069b9252bb7e8bc7ac5bc0faca2d488de7a91228fee2c69d9d0efa42a7b653b47a6027b57b27ea16b34668b5dbee29a4a790c900"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffff, 0x1}}]}}, @filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x3af4}}, 0x4004004) r4 = socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="1632800e13", 0x5}], 0x1) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x6e23, 0x5, @empty, 0x4}, 0x4a) listen(r5, 0x50) close(r5) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x1000, 0x2, 0x11, r6, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x8da6) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) userfaultfd(0x80001) 7.032281678s ago: executing program 5 (id=1466): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000005040)=[{{0x0, 0x0, &(0x7f0000000cc0)}}], 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) writev(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0xaeea) socket$kcm(0x2, 0x200000000000001, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000000200)={0x28, 0x5, r3, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x4}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, r3, 0x0, &(0x7f0000ae0000/0x2000)=nil, 0x2000, 0x7}) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000000280)={0x28, 0x2, r3, 0x0, &(0x7f0000000100)="d8", 0x1, 0x9}) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r5}], 0x1, 0x0, &(0x7f0000000100)={[0x2]}, 0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r7, &(0x7f0000000380)=ANY=[@ANYBLOB='b *:2 m'], 0x9) 7.026684799s ago: executing program 7 (id=1467): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000100), 0x3, 0x2) ioctl$VIDIOC_ENUMAUDOUT(r2, 0xc0345642, &(0x7f0000000140)={0x1, "47be1bd60870e85837ecedbd1eaffd9d6dfd03c337476a79cf053a7937a83ac9", 0x2}) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'s526\x00', [0x100, 0x5, 0xffffffca, 0x3, 0xe, 0x4, 0x79, 0x2, 0x80008, 0x0, 0x400, 0x1, 0x7, 0x1, 0x1, 0xfd, 0xfffffffb, 0x9, 0x3, 0x7fffffff, 0x89, 0xca9f, 0x0, 0x20001e58, 0xffffffff, 0xf39e, 0x6, 0x8, 0x2, 0x3, 0xfffffff8]}) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000040)={0x4000000, 0x92, 0x0, 0x1, 0x4}) readv(r0, &(0x7f0000000a00)=[{&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f00000003c0)=""/103, 0x67}, {&(0x7f0000000440)=""/39, 0x27}, {&(0x7f00000004c0)=""/94, 0x5e}, {&(0x7f0000000540)=""/26, 0x1a}, {0x0}, {&(0x7f0000000780)=""/239, 0xef}, {&(0x7f0000000880)=""/178, 0xb2}, {&(0x7f0000000940)=""/168, 0xa8}], 0x9) socket(0x11, 0x3, 0x8) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') socket$kcm(0x2, 0xa, 0x2) preadv(r3, &(0x7f0000001540)=[{&(0x7f0000000240)=""/207, 0xcf}], 0x1, 0x3a, 0xfffffffd) r4 = timerfd_create(0x0, 0x0) read(r4, &(0x7f0000000080)=""/9, 0x9) timerfd_settime(r4, 0x3, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000340), 0x80002) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x3}, 0x10) syz_ublk_setup_io_uring(0x100010f5, 0x0, 0x0, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000240)="9a6b49e7d4cbe70d6eebeedc864e74049114b10c9beb19663aa3372f4d22dbc5eac9669c1ff39b97563471bbb05fcbf7a4c8e540b79e142d60ab19254b35eb1b92d9903ea97f55a4c2bcc1d6ec4e5e372bef93a1c499faf7d4743ef86a05a084ba8925532b9e6507bfb5b4de229828f031d321213202838a335c796c607510c1ff3b382c4ace846d2caccf6e8b116d46e43e8aeedb0eae33fcbb9d43e4b5b08537afa76f6419fa8ab7f7dc32a3fb5f", 0xaf) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/cpu_byteorder', 0x0, 0x0) read$FUSE(r3, &(0x7f0000004e40)={0x2020}, 0x2020) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r6, 0x112, 0x9, 0x0, &(0x7f0000000280)) bind$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0xc0015) syz_emit_ethernet(0x31, &(0x7f0000000480)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@generic={0x88f7, "b9c2de6c9b411aeea7a2ca9ad6b1196b093feb56c74fa400"/35}}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) 5.923877208s ago: executing program 5 (id=1468): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000001cc0)={&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0x20000010) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000001100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x59}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@rand_addr=0xfffffffc, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0xfffd, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2, 0xfffffffffffffffc}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x8001}]}]}, 0xfc}}, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r8, 0x1, 0x10, 0x0, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 4.718525147s ago: executing program 5 (id=1469): r0 = getpid() r1 = socket$inet6(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000380)=0x70) setresuid(0x0, r2, r2) quotactl_fd$Q_GETQUOTA(r1, 0xffffffff80000702, r2, &(0x7f0000000240)) socket$packet(0x11, 0xa, 0x300) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_emit_ethernet(0x7c, &(0x7f0000000480)={@random="195df450dc04", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00', 0x46, 0x2c, 0xff, @dev, @loopback, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0xffff}}}}}}}}}, 0x0) r3 = io_uring_setup(0x3f2b, &(0x7f0000000040)={0x0, 0xca70, 0x80, 0x0, 0x20802fc}) r4 = socket$inet(0x2, 0x80001, 0x84) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130, 0x0, 0x2, {0x0, 0x0, 0x0, '\x00', {0x9ca7a16b958dcf33, 0x8001, 0xffffffffffffffff, 0xfffffff3, 0x0, 0x0, 0x1000, '\x00', 0x8000000000000001, 0x0, 0xffffffffffffc2f3, 0x0, {0xfffffffffffffffd, 0xfffffffc}, {0x5}, {0xc0d, 0x4}, {0x5, 0x5}, 0x62, 0x2, 0x7fff}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000740)={'erspan0\x00', &(0x7f0000000800)={'syztnl2\x00', 0x0, 0x10, 0x7808, 0x1, 0x1, {{0x59, 0x4, 0x2, 0x1, 0x164, 0x64, 0x0, 0x6, 0x2f, 0x0, @loopback, @multicast2, {[@timestamp_prespec={0x44, 0x64, 0xcd, 0x3, 0x4, [{@broadcast}, {@empty, 0xfffffff4}, {@private=0xa010102, 0xfa}, {@remote, 0x3}, {@broadcast, 0xa60c}, {@remote}, {@private=0xa010101, 0x6}, {@multicast2, 0xc}, {@rand_addr=0x64010102, 0xde}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xa14a}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x59}, {@multicast1, 0x3ff}]}, @noop, @timestamp_addr={0x44, 0x44, 0xd8, 0x1, 0x2, [{@multicast1, 0xff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@rand_addr=0x64010102, 0x2}, {@remote, 0x7}, {@remote, 0xfffffff7}, {@local, 0x7f}, {@broadcast, 0x7}, {@local, 0x4}]}, @noop, @rr={0x7, 0x7, 0xaf, [@broadcast]}, @timestamp={0x44, 0x20, 0x62, 0x0, 0x8, [0x1, 0x7f, 0x80000000, 0xa, 0x1, 0x7400, 0x2]}, @cipso={0x86, 0x28, 0xffffffffffffffff, [{0x2, 0x10, "17acfbec90fce6c058f9a5f321db"}, {0x6, 0x7, "1002a0303e"}, {0x0, 0x3, '`'}, {0x7, 0x8, "f4920350a62c"}]}, @cipso={0x86, 0x19, 0x1, [{0x5, 0x8, "30f837364039"}, {0x7, 0xb, "01eed61c8003784e94"}]}, @cipso={0x86, 0x3c, 0x2, [{0x1, 0x4, "3ce6"}, {0x0, 0x9, "b9c3786e65b1b6"}, {0x0, 0x12, "5907000030617349c2f4aefd7c4adca9"}, {0x0, 0x10, "3317dad38c5b8eb40faa19739789"}, {0x2, 0x7, "f47cfef46f"}]}]}}}}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0xc0686611, &(0x7f0000000040)={0x10200, 0x0, 0x41000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000080000000300000080000000", @ANYRES32=r6, @ANYBLOB="bb0a00"/20, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="00000000030000000200"/28], 0x50) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) ptrace$getsig(0x4202, r0, 0x2, &(0x7f0000000000)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r7 = fanotify_init(0xf00, 0x48401) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r7, 0x5, 0x4800003e, r8, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x42, 0x10) read$FUSE(r7, &(0x7f0000000f40)={0x2020}, 0x2020) 4.681593901s ago: executing program 7 (id=1470): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x4}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r1, 0x0, 0xd3, &(0x7f0000000100)={@multicast2, @multicast1, 0x1, "c6c0e6ec8755b5dc4e305886d95f0c6707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200, 0x489c, 0x2}, 0x3c) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)='0', 0x1}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x20000400) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b2, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x11, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000b40), 0x0, 0x0) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x79a9, 0x3000, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x1ffc, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x10000, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1000000, 0x2e5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4c2e, 0x80020, 0x0, 0x312}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x1fffff, 0x200000, 0xfffffffc, 0x0, 0x0, 0x2}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x78}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r11, &(0x7f0000000000)={0x1f, @none}, 0x8) r12 = gettid() r13 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_PIM(r13, 0x29, 0xcf, &(0x7f00000000c0)=0x4, 0x4) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r12}, &(0x7f0000bbdffc)) ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000180)={0xc11, 0x1, @ofdm={0x0, 0x1a, 0x2, 0x530d8db673896df, 0x4, 0xa, 0x4}}) 2.036080739s ago: executing program 7 (id=1471): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="0203"], 0x10}, 0x17, 0x7}, 0x0) r1 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) wait4(r1, 0x0, 0x80000000, 0x0) ptrace(0x10, r1) wait4(r1, 0x0, 0x1, &(0x7f0000000000)) 1.789475069s ago: executing program 5 (id=1472): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x64) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x40, r1, 0x1, 0xfffffffc, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf2502"], 0x1c}}, 0x4008054) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r8 = socket$can_bcm(0x1d, 0x2, 0x2) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000040)={0x9, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x5, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x16}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2e, 0x2}, @sadb_address={0x3, 0x5, 0x6c, 0x0, 0x0, @in={0x2, 0x4e21, @rand_addr=0x64010102}}]}, 0x50}, 0x1, 0x7}, 0x0) connect$can_bcm(r8, &(0x7f0000000200)={0x1d, r7}, 0x10) sendmsg$can_bcm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=r8, @ANYRES64=r7, @ANYRES64=r4, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r5) sendmsg$sock(r8, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) r10 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x3, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r11, r12, r13, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x64, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffebd}, 0x0, 0x80000080, 0x1}) io_uring_enter(r10, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) sendmsg$OSF_MSG_ADD(r14, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001240)={0x268, 0x0, 0x5, 0xd01, 0x0, 0x0, {0x3, 0x0, 0x7}, [{{0x254, 0x1, {{0x1, 0xf}, 0x7e, 0x6, 0x3, 0x5, 0x9, 'syz0\x00', "952dce84b269b33e5881f170dc39fa7dacfb7849d94aa6dc5917388b30e950d7", "5685c2dd06931cd6f0efbe2168baa6cbdff71e7ce4e91d4326ae1a89be2da024", [{0x0, 0x9, {0x2, 0x100}}, {0x3, 0xe, {0x0, 0x91}}, {0x5, 0x2, {0x3, 0x6}}, {0x2, 0x8, {0x0, 0xffff}}, {0x2dd, 0x3d, {0x2, 0x100}}, {0x7a5, 0xad, {0x2, 0x7}}, {0x97c, 0x7, {0x1, 0x3}}, {0x7ff, 0x0, {0x2, 0xef0}}, {0x25, 0x0, {0x1, 0x81}}, {0x100, 0xe, {0x1, 0x3ff}}, {0x5, 0x9, {0x2, 0x9}}, {0x800, 0xfff9, {0x2, 0xc6}}, {0x8, 0x2, {0x2, 0x100}}, {0x5ad, 0x7, {0x1, 0x5d7b0632}}, {0x7, 0x1, {0x3, 0x8}}, {0x1, 0x5, {0x2, 0x8}}, {0x800, 0x7, {0x1, 0x80000000}}, {0x6856, 0xfff7, {0x2}}, {0x6, 0x4, {0x1, 0x75}}, {0x9, 0x7, {0x1, 0x10000}}, {0x401, 0x8, {0x2, 0x1}}, {0x9, 0x6, {0x3, 0x7d5c}}, {0x2d, 0x2, {0x0, 0x8e}}, {0x5a90, 0x80, {0x3, 0x800}}, {0x1, 0x3, {0x3, 0x2}}, {0xdc, 0x8, {0x2, 0x5}}, {0x100, 0xb3, {0x2, 0xeab}}, {0x1, 0x9, {0x0, 0x6}}, {0x9ec, 0xb, {0x0, 0x10001}}, {0x9e, 0xffff, {0x2, 0xffffffff}}, {0x9, 0x9, {0x3, 0x2}}, {0xff, 0x0, {0x1, 0x8}}, {0x0, 0x9, {0x0, 0x7ce9}}, {0x3ff, 0xc1, {0x0, 0x400}}, {0xfff, 0x5, {0x3, 0xffffffff}}, {0x0, 0xe, {0x0, 0x1070}}, {0xffff, 0x92e7, {0x1, 0x3}}, {0x3, 0x8001, {0x1, 0x1}}, {0xfffb, 0x3, {0x2, 0x7}}, {0x81, 0x4, {0x5b3ad88d5527b98f, 0x400}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x80}, 0x20000090) 1.361713208s ago: executing program 7 (id=1473): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) keyctl$session_to_parent(0x12) getpid() r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1b, 0x200001ae, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000008000059000000000800000091111a000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000040)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000580), 0xaad80) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x20004, r2, 0x2}) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000300)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r5, 0xc010640b, &(0x7f0000000140)={r7}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue0\x00', 0xfffffffd}) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0xffffffffffffffff, 0xe19f, 0x8}, 0xc) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000006c0)={&(0x7f0000000400)="b4ce9a2f05557954248b678d3ef7734b306019a81557f71be1acc3ebe3953d8e7f9eb5c03c4aa5104090a8fe434dce09640c6e4cbc85a19114c014f2e16e8073ffd752a301d223766e659ea66aea59d1e3ed036fd5a9aa2de04c70559eb30c5a8d959c1147a177ccf95c998ce1c6ac8325276d0ee48d46ab6a237426a2e1b206918ea4951a2bcbc3931a0ff81e054f9430ca2bdba5406d", &(0x7f00000004c0)=""/179, &(0x7f00000005c0)="d353669c431cef44de377cef6ee86d6bf6e104bd395372af361ed9009de04667ef99f934c3cab75f7b19173fb3edcdeb6f8c0129ad42", &(0x7f0000000600)="816ac83739fe6d175d7aca78fa386fc125f7c94914f795c3c2c9e5d24a5642bd3bb08e7048d8fced7b21224b7df1c8d5eb1de14a46e3af86a2f052922215517d4258484c26969c635306efd5e9b380c6c21a9164a5c3e495607c371ad320c30b237508ab1fa2e27e6054b0097c546812ebd2e1", 0x6, r8, 0x4}, 0x38) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r9, 0x402c5342, &(0x7f0000000240)={0x0, 0x9, 0x5, {0x6, 0x8000000}, 0xd, 0x9}) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000740)={0xfffffffa, 0x3, 0x80000000, 0x3, 0x5, 0x3}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd000000000000044e690085000000a000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r11 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r11, 0xc100565c, &(0x7f0000000380)={0x3, 0x80, 0x2, {0x4, @meta={0x43465052, 0x63596048, 0x1760, 0xf29a, 0x72e21343}}, 0x3}) fsconfig$FSCONFIG_SET_FD(r10, 0x5, &(0x7f0000000140)='#-+\x00', 0x0, r11) syz_open_dev$video4linux(&(0x7f00000001c0), 0x5, 0x480001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r10, 0x0) ftruncate(r10, 0x200c17a) 0s ago: executing program 7 (id=1474): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00"/14], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0xfffffffffffffd9a, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x51}, 0x4000800) r6 = socket$vsock_stream(0x28, 0x1, 0x0) r7 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000140)=0x2000) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x192}}, 0x20}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r0, 0x0, 0x0}, 0x10) r8 = socket(0x11, 0xa, 0x0) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) rseq(&(0x7f0000001080), 0x20, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000050900010073797a30000000000900020073797a300000000014000380080001408bec84bf080002"], 0xc0}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) bind$can_raw(r8, &(0x7f0000000000), 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, 0x0, 0x24000001) setsockopt$netlink_NETLINK_RX_RING(r8, 0x10e, 0x6, &(0x7f0000000180)={0x48, 0x0, 0x5, 0x1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x17, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xffffffff}}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0xf, 0x1001, &(0x7f0000000780)=""/4097, 0x41100, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) kernel console output (not intermixed with test programs): T199] usb 1-1: config 2 interface 36 has no altsetting 0 [ 452.437235][ T199] usb 1-1: New USB device found, idVendor=1bc7, idProduct=3000, bcdDevice=69.9a [ 452.437250][ T199] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.437260][ T199] usb 1-1: Product: syz [ 452.437267][ T199] usb 1-1: Manufacturer: syz [ 452.437274][ T199] usb 1-1: SerialNumber: syz [ 453.122149][ T199] usb 1-1: USB disconnect, device number 24 [ 453.510623][ T5608] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 453.610902][ T5608] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 453.644840][ T5608] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 453.645478][ T5608] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 453.646657][ T5608] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 454.823429][ T5835] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 454.987261][ T5835] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 454.987279][ T5835] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.987289][ T5835] usb 6-1: Product: syz [ 454.987296][ T5835] usb 6-1: Manufacturer: syz [ 454.987303][ T5835] usb 6-1: SerialNumber: syz [ 456.707847][ T5611] Bluetooth: hci1: command tx timeout [ 457.653004][ T5835] rtl8150 6-1:1.0: couldn't reset the device [ 457.653241][ T5835] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 457.810342][ T5835] usb 6-1: USB disconnect, device number 24 [ 458.421712][ T5801] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 458.572678][ T5801] usb 1-1: Using ep0 maxpacket: 16 [ 458.578821][ T5801] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 227, changing to 11 [ 458.578850][ T5801] usb 1-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 458.578861][ T5801] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.588252][ T5801] usb 1-1: config 0 descriptor?? [ 458.755006][ T5608] Bluetooth: hci1: command tx timeout [ 459.387702][ T5801] hid_parser_main: 33 callbacks suppressed [ 459.387748][ T5801] apple 0003:05AC:027D.0002: unknown main item tag 0x0 [ 459.387769][ T5801] apple 0003:05AC:027D.0002: unknown main item tag 0x0 [ 459.387783][ T5801] apple 0003:05AC:027D.0002: unknown main item tag 0x0 [ 459.387798][ T5801] apple 0003:05AC:027D.0002: unknown main item tag 0x0 [ 459.387812][ T5801] apple 0003:05AC:027D.0002: unknown main item tag 0x0 [ 459.387827][ T5801] apple 0003:05AC:027D.0002: unknown main item tag 0x0 [ 459.387841][ T5801] apple 0003:05AC:027D.0002: unknown main item tag 0x0 [ 459.387854][ T5801] apple 0003:05AC:027D.0002: unknown main item tag 0x0 [ 459.387868][ T5801] apple 0003:05AC:027D.0002: unknown main item tag 0x0 [ 459.387882][ T5801] apple 0003:05AC:027D.0002: unknown main item tag 0x0 [ 459.485523][ T5801] apple 0003:05AC:027D.0002: unexpected long global item [ 459.486027][ T5801] apple 0003:05AC:027D.0002: parse failed [ 459.486090][ T5801] apple 0003:05AC:027D.0002: probe with driver apple failed with error -22 [ 459.603864][ T5801] usb 1-1: USB disconnect, device number 25 [ 460.069429][ T5611] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 460.129256][ T5611] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 460.151058][ T5611] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 460.209550][ T5611] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 460.212319][ T5611] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 460.836185][ T5608] Bluetooth: hci1: command tx timeout [ 461.062635][ T5835] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 461.218649][ T5835] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 461.218666][ T5835] usb 1-1: config 1 has no interface number 0 [ 461.218689][ T5835] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 461.218702][ T5835] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 461.218715][ T5835] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0xA has an invalid bInterval 33, changing to 9 [ 461.220397][ T5835] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 461.220413][ T5835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.220422][ T5835] usb 1-1: Product: syz [ 461.220429][ T5835] usb 1-1: Manufacturer: syz [ 461.220436][ T5835] usb 1-1: SerialNumber: syz [ 461.340252][ T9566] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 461.598710][ T9564] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 461.627385][ T5835] usb 1-1: No status endpoint found [ 462.028296][ T5801] usb 1-1: USB disconnect, device number 26 [ 462.156564][ T9586] netlink: 'syz.7.968': attribute type 1 has an invalid length. [ 463.338982][ T5608] Bluetooth: hci4: command tx timeout [ 463.347682][ T5608] Bluetooth: hci1: command tx timeout [ 463.516776][ T9593] __nla_validate_parse: 139 callbacks suppressed [ 463.516859][ T9593] netlink: 28 bytes leftover after parsing attributes in process `syz.7.968'. [ 464.614470][ T5835] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 465.496855][ T5611] Bluetooth: hci4: command tx timeout [ 465.554639][ T5835] usb 1-1: device descriptor read/64, error -71 [ 465.574569][ T9586] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 465.792683][ T5835] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 465.927822][ T5835] usb 1-1: device descriptor read/64, error -71 [ 466.039246][ T5835] usb usb1-port1: attempt power cycle [ 466.422668][ T5835] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 466.443055][ T5835] usb 1-1: device descriptor read/8, error -71 [ 466.553045][ T9627] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 466.697050][ T5835] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 466.699111][ T9630] binder: 9629:9630 ioctl c0306201 200000000080 returned -14 [ 466.713185][ T5835] usb 1-1: device descriptor read/8, error -71 [ 466.825012][ T5835] usb usb1-port1: unable to enumerate USB device [ 467.159771][ T9637] binder: 9636:9637 ioctl 4090ae82 200000000300 returned -22 [ 467.553330][ T5611] Bluetooth: hci4: command tx timeout [ 467.881215][ T9651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.983'. [ 471.202423][ T5611] Bluetooth: hci4: command tx timeout [ 474.958225][ T9652] can0: slcan on ptm0. [ 475.000813][ T9677] netlink: 36 bytes leftover after parsing attributes in process `syz.0.990'. [ 475.042764][ T9680] netlink: 36 bytes leftover after parsing attributes in process `syz.0.990'. [ 475.802085][ T37] kauditd_printk_skb: 7 callbacks suppressed [ 475.802096][ T37] audit: type=1326 audit(1785099502.055:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9684 comm="syz.7.992" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfb9d6de99 code=0x7ffc0000 [ 475.802123][ T37] audit: type=1326 audit(1785099502.055:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9684 comm="syz.7.992" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfb9d6de99 code=0x7ffc0000 [ 475.802145][ T37] audit: type=1326 audit(1785099502.055:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9684 comm="syz.7.992" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdfb9d2e6ce code=0x7ffc0000 [ 475.802167][ T37] audit: type=1326 audit(1785099502.055:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9684 comm="syz.7.992" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfb9d6de99 code=0x7ffc0000 [ 475.802189][ T37] audit: type=1326 audit(1785099502.055:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9684 comm="syz.7.992" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfb9d6de99 code=0x7ffc0000 [ 475.802212][ T37] audit: type=1326 audit(1785099502.055:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9684 comm="syz.7.992" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdfb9d2e6ce code=0x7ffc0000 [ 475.802237][ T37] audit: type=1326 audit(1785099502.055:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9684 comm="syz.7.992" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdfb9d2e6ce code=0x7ffc0000 [ 475.909227][ T37] audit: type=1326 audit(1785099502.065:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9684 comm="syz.7.992" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdfb9d2e6ce code=0x7ffc0000 [ 475.909271][ T37] audit: type=1326 audit(1785099502.065:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9684 comm="syz.7.992" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdfb9d2e6ce code=0x7ffc0000 [ 475.909294][ T37] audit: type=1326 audit(1785099502.065:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9684 comm="syz.7.992" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdfb9d2e6ce code=0x7ffc0000 [ 477.621002][ T9652] can0 (unregistered): slcan off ptm0. [ 478.133298][ T5610] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 478.484454][ T5610] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 478.484472][ T5610] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 478.484484][ T5610] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 478.486728][ T5610] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 478.486744][ T5610] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.486754][ T5610] usb 6-1: Product: syz [ 478.486761][ T5610] usb 6-1: Manufacturer: syz [ 478.486768][ T5610] usb 6-1: SerialNumber: syz [ 478.575414][ T5610] hub 6-1:1.0: bad descriptor, ignoring hub [ 478.575439][ T5610] hub 6-1:1.0: probe with driver hub failed with error -5 [ 478.899428][ T5610] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 25 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 479.292987][ T5610] usb 6-1: USB disconnect, device number 25 [ 479.311069][ T5610] usblp0: removed [ 483.183100][ T9726] binder: BINDER_SET_CONTEXT_MGR already set [ 483.183109][ T9726] binder: 9720:9726 ioctl 4018620d 200000004a80 returned -16 [ 484.057247][ T9739] FAULT_INJECTION: forcing a failure. [ 484.057247][ T9739] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 484.057270][ T9739] CPU: 0 UID: 0 PID: 9739 Comm: syz.0.1005 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 484.057284][ T9739] Tainted: [L]=SOFTLOCKUP [ 484.057287][ T9739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 484.057294][ T9739] Call Trace: [ 484.057298][ T9739] [ 484.057303][ T9739] dump_stack_lvl+0xe8/0x150 [ 484.057327][ T9739] should_fail_ex+0x467/0x600 [ 484.057347][ T9739] _copy_from_user+0x2d/0xb0 [ 484.057441][ T9739] memdup_user+0x5e/0xd0 [ 484.057514][ T9739] strndup_user+0x68/0xd0 [ 484.057527][ T9739] __se_sys_fsconfig+0x4d6/0x810 [ 484.057607][ T9739] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 484.057620][ T9739] ? ksys_write+0x248/0x270 [ 484.057659][ T9739] ? __pfx_ksys_write+0x10/0x10 [ 484.057674][ T9739] ? __x64_sys_fsconfig+0x20/0xc0 [ 484.057686][ T9739] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.057698][ T9739] do_syscall_64+0x174/0x580 [ 484.057710][ T9739] ? trace_irq_disable+0x3b/0x140 [ 484.057721][ T9739] ? clear_bhb_loop+0x40/0x90 [ 484.057734][ T9739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.057743][ T9739] RIP: 0033:0x7f61b5a9de99 [ 484.057754][ T9739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 484.057763][ T9739] RSP: 002b:00007f61b3cf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 484.057775][ T9739] RAX: ffffffffffffffda RBX: 00007f61b5d25fa0 RCX: 00007f61b5a9de99 [ 484.057782][ T9739] RDX: 0000200000000780 RSI: 0000000000000001 RDI: 0000000000000003 [ 484.057788][ T9739] RBP: 00007f61b3cf6090 R08: 0000000000000000 R09: 0000000000000000 [ 484.057793][ T9739] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 484.057802][ T9739] R13: 00007f61b5d26038 R14: 00007f61b5d25fa0 R15: 00007ffdfc4f9868 [ 484.057817][ T9739] [ 484.562624][ T5331] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 484.714179][ T5331] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 484.714197][ T5331] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 484.714208][ T5331] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 484.716117][ T5331] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 484.716133][ T5331] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.716143][ T5331] usb 6-1: Product: syz [ 484.716150][ T5331] usb 6-1: Manufacturer: syz [ 484.716157][ T5331] usb 6-1: SerialNumber: syz [ 484.820300][ T5331] hub 6-1:1.0: bad descriptor, ignoring hub [ 484.820322][ T5331] hub 6-1:1.0: probe with driver hub failed with error -5 [ 485.065355][ T5331] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 26 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 485.473539][ T5331] usb 6-1: USB disconnect, device number 26 [ 485.478708][ T5331] usblp0: removed [ 486.923917][ T43] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 486.923939][ T43] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.474527][ T9496] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.474600][ T9496] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.474781][ T9496] bridge_slave_0: entered allmulticast mode [ 487.512783][ T9496] bridge_slave_0: entered promiscuous mode [ 487.541183][ T9496] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.541252][ T9496] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.541430][ T9496] bridge_slave_1: entered allmulticast mode [ 487.578996][ T9496] bridge_slave_1: entered promiscuous mode [ 488.000409][ T9786] ªªªªªª: renamed from vlan0 (while UP) [ 488.030837][ T9496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 488.395419][ T9496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 488.452592][ T5331] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 489.680685][ T5331] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 489.680702][ T5331] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 489.680714][ T5331] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 489.683332][ T5331] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 489.683348][ T5331] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.683358][ T5331] usb 6-1: Product: syz [ 489.683365][ T5331] usb 6-1: Manufacturer: syz [ 489.683372][ T5331] usb 6-1: SerialNumber: syz [ 489.766727][ T5331] hub 6-1:1.0: bad descriptor, ignoring hub [ 489.766749][ T5331] hub 6-1:1.0: probe with driver hub failed with error -5 [ 489.959550][ T5331] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 490.147313][ T43] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 490.147335][ T43] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.505974][ T5331] usb 6-1: USB disconnect, device number 27 [ 490.511983][ T5331] usblp0: removed [ 490.593718][ T9496] team0: Port device team_slave_0 added [ 490.625974][ T9496] team0: Port device team_slave_1 added [ 491.290568][ T43] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 491.290590][ T43] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.377844][ T199] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 491.524103][ T199] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 491.524122][ T199] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.567359][ T9559] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.567427][ T9559] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.567592][ T9559] bridge_slave_0: entered allmulticast mode [ 491.598377][ T9559] bridge_slave_0: entered promiscuous mode [ 491.624824][ T199] usb 6-1: config 0 descriptor?? [ 491.628208][ T9496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 491.628218][ T9496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.628230][ T9496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.628717][ T9559] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.628780][ T9559] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.628896][ T9559] bridge_slave_1: entered allmulticast mode [ 491.709113][ T9559] bridge_slave_1: entered promiscuous mode [ 491.729957][ T199] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 491.731152][ T9496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 491.731163][ T9496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.731178][ T9496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.857726][ T199] gp8psk: usb in 128 operation failed. [ 491.879323][ T9821] binder: 9820:9821 ioctl c008aec1 2000000005c0 returned -22 [ 491.990931][ T9821] syz.5.1026 (9821): drop_caches: 2 [ 492.167874][ T199] gp8psk: usb in 137 operation failed. [ 492.167889][ T199] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 492.167909][ T199] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 492.287012][ T199] usb 6-1: USB disconnect, device number 28 [ 492.624951][ T9830] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1028'. [ 492.997886][ T9559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.196382][ T9559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.379110][ T9496] hsr_slave_0: entered promiscuous mode [ 493.391395][ T9496] hsr_slave_1: entered promiscuous mode [ 493.391914][ T9496] debugfs: 'hsr0' already exists in 'hsr' [ 493.391929][ T9496] Cannot create hsr debugfs directory [ 493.496752][ T9834] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1029'. [ 493.532838][ T9559] team0: Port device team_slave_0 added [ 493.560706][ T9559] team0: Port device team_slave_1 added [ 494.247799][ T9853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1032'. [ 495.959770][ T9559] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.959782][ T9559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.959796][ T9559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.187515][ T37] kauditd_printk_skb: 154 callbacks suppressed [ 496.187527][ T37] audit: type=1326 audit(1785099522.445:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9867 comm="syz.0.1035" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61b5a9de99 code=0x7fc00000 [ 496.259756][ T5260] 8021q: adding VLAN 0 to HW filter on device eth13 [ 496.285941][ T9559] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.285953][ T9559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.285967][ T9559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 497.031859][ T5801] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 497.194190][ T5801] usb 6-1: config index 0 descriptor too short (expected 45, got 28) [ 497.194207][ T5801] usb 6-1: config 1 descriptor has 1 excess byte, ignoring [ 497.194233][ T5801] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 497.197454][ T5801] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 497.197470][ T5801] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.197481][ T5801] usb 6-1: Product: syz [ 497.197488][ T5801] usb 6-1: Manufacturer: syz [ 497.197495][ T5801] usb 6-1: SerialNumber: syz [ 497.284635][ T5801] rtl8150 6-1:1.0: couldn't find required endpoints [ 497.284800][ T5801] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 497.337270][ T9879] sctp: [Deprecated]: syz.0.1039 (pid 9879) Use of int in max_burst socket option deprecated. [ 497.337270][ T9879] Use struct sctp_assoc_value instead [ 497.477374][ T5801] usb 6-1: USB disconnect, device number 29 [ 498.032833][ T5611] Bluetooth: hci3: unexpected event 0x03 length: 13 > 11 [ 498.298458][ T9559] hsr_slave_0: entered promiscuous mode [ 498.350259][ T9559] hsr_slave_1: entered promiscuous mode [ 498.405344][ T9559] debugfs: 'hsr0' already exists in 'hsr' [ 498.405362][ T9559] Cannot create hsr debugfs directory [ 499.195688][ T9923] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1045'. [ 499.216807][ T9919] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1044'. [ 499.694099][ T43] dummy0: left allmulticast mode [ 499.694185][ T43] dummy0: left promiscuous mode [ 499.694351][ T43] bridge0: port 3(dummy0) entered disabled state [ 499.941977][ T43] bridge_slave_1: left allmulticast mode [ 499.941998][ T43] bridge_slave_1: left promiscuous mode [ 499.942149][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.986845][ T43] bridge_slave_0: left allmulticast mode [ 499.986868][ T43] bridge_slave_0: left promiscuous mode [ 499.988216][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.190874][ T43] bridge_slave_1: left allmulticast mode [ 500.190898][ T43] bridge_slave_1: left promiscuous mode [ 500.244612][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.266842][ T9945] binder: 9941:9945 ioctl 4090ae82 200000000300 returned -22 [ 500.324486][ T43] bridge_slave_0: left allmulticast mode [ 500.324508][ T43] bridge_slave_0: left promiscuous mode [ 500.324661][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.558678][ T37] audit: type=1326 audit(1785099526.815:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9947 comm="syz.0.1051" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f61b5a9de99 code=0x0 [ 501.255470][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 501.261757][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 501.280312][ T43] bond0 (unregistering): Released all slaves [ 501.303862][ T43] bond1 (unregistering): Released all slaves [ 501.670007][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 501.695095][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 501.701258][ T43] bond0 (unregistering): Released all slaves [ 501.767206][ T9959] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1055'. [ 501.963266][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.963308][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.131567][ T9956] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 502.132380][ T9959] 0·: renamed from hsr0 (while UP) [ 502.207796][ T9959] 0·: entered allmulticast mode [ 502.207823][ T9959] hsr_slave_0: entered allmulticast mode [ 502.207840][ T9959] hsr_slave_1: entered allmulticast mode [ 502.208241][ T9959] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 502.487793][ T9962] tipc: Enabling of bearer rejected, failed to enable media [ 503.689471][ T9994] FAULT_INJECTION: forcing a failure. [ 503.689471][ T9994] name failslab, interval 1, probability 0, space 0, times 0 [ 503.689498][ T9994] CPU: 0 UID: 0 PID: 9994 Comm: syz.5.1064 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 503.689520][ T9994] Tainted: [L]=SOFTLOCKUP [ 503.689524][ T9994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 503.689530][ T9994] Call Trace: [ 503.689534][ T9994] [ 503.689540][ T9994] dump_stack_lvl+0xe8/0x150 [ 503.689564][ T9994] should_fail_ex+0x467/0x600 [ 503.689583][ T9994] should_failslab+0xa8/0x100 [ 503.689598][ T9994] kmem_cache_alloc_noprof+0xa4/0x650 [ 503.689610][ T9994] ? alloc_empty_file+0x5b/0x1d0 [ 503.689714][ T9994] ? alloc_empty_file+0x5b/0x1d0 [ 503.689728][ T9994] alloc_empty_file+0x5b/0x1d0 [ 503.689739][ T9994] dentry_open+0x44/0xa0 [ 503.689749][ T9994] big_key_read+0x190/0x370 [ 503.689836][ T9994] ? __pfx_big_key_read+0x10/0x10 [ 503.689850][ T9994] ? keyctl_read_key+0x1ff/0x490 [ 503.689860][ T9994] ? keyctl_read_key+0x1ff/0x490 [ 503.689873][ T9994] keyctl_read_key+0x2a2/0x490 [ 503.689886][ T9994] __se_sys_keyctl+0x38f/0x9d0 [ 503.689899][ T9994] ? __pfx___se_sys_keyctl+0x10/0x10 [ 503.689909][ T9994] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 503.689923][ T9994] ? rt_mutex_slowunlock+0x219/0x460 [ 503.689938][ T9994] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 503.689949][ T9994] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 503.689968][ T9994] ? fput+0xa0/0xd0 [ 503.689977][ T9994] ? ksys_write+0x248/0x270 [ 503.689991][ T9994] ? __pfx_ksys_write+0x10/0x10 [ 503.690006][ T9994] ? __x64_sys_keyctl+0x20/0xc0 [ 503.690017][ T9994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.690028][ T9994] do_syscall_64+0x174/0x580 [ 503.690040][ T9994] ? trace_irq_disable+0x3b/0x140 [ 503.690051][ T9994] ? clear_bhb_loop+0x40/0x90 [ 503.690063][ T9994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.690073][ T9994] RIP: 0033:0x7fc64661de99 [ 503.690084][ T9994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 503.690092][ T9994] RSP: 002b:00007fc644876028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 503.690104][ T9994] RAX: ffffffffffffffda RBX: 00007fc6468a5fa0 RCX: 00007fc64661de99 [ 503.690111][ T9994] RDX: 00002000000010c0 RSI: 000000000638d311 RDI: 000000000000000b [ 503.690118][ T9994] RBP: 00007fc644876090 R08: 0000000000000000 R09: 0000000000000000 [ 503.690124][ T9994] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000001 [ 503.690130][ T9994] R13: 00007fc6468a6038 R14: 00007fc6468a5fa0 R15: 00007ffea4773ca8 [ 503.690146][ T9994] [ 504.489819][ T9996] Invalid ELF header magic: != ELF [ 507.950758][T10025] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1071'. [ 509.042037][ T9496] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 509.232220][ T5608] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 509.349075][ T5608] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 509.369422][ T5608] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 509.371548][ T5608] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 509.388355][ T5608] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 509.535071][ T9496] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 509.648313][T10046] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 510.065057][ T9496] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 510.164822][ T9496] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 510.246415][ T9496] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 510.400878][ T9496] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 510.438722][ T9496] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 510.496819][ T9496] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 510.989930][T10063] vcan0: tx address claim with dest, not broadcast [ 511.473412][ T5611] Bluetooth: hci0: command tx timeout [ 513.570021][ T5611] Bluetooth: hci0: command tx timeout [ 513.637705][T10093] binder: BINDER_SET_CONTEXT_MGR already set [ 513.637715][T10093] binder: 10091:10093 ioctl 4018620d 200000004a80 returned -16 [ 513.704993][T10092] binder: 10091:10092 ioctl 4090ae82 200000000300 returned -22 [ 513.912855][ T43] hsr_slave_0: left promiscuous mode [ 513.944071][ T43] hsr_slave_1: left promiscuous mode [ 513.975238][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 513.996672][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 514.019937][ T5608] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 514.078904][ T5608] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 514.098020][ T5608] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 514.153677][ T5608] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 514.154672][ T5608] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 514.416965][ T43] hsr_slave_0: left promiscuous mode [ 514.417603][ T43] hsr_slave_1: left promiscuous mode [ 514.418060][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 514.418074][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 514.453321][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 514.453339][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 514.762051][ T43] veth1_macvtap: left promiscuous mode [ 514.762116][ T43] veth0_macvtap: left promiscuous mode [ 514.762265][ T43] veth1_vlan: left promiscuous mode [ 514.762364][ T43] veth0_vlan: left promiscuous mode [ 515.633512][ T5608] Bluetooth: hci0: command tx timeout [ 515.956276][ T37] audit: type=1326 audit(1785099545.187:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10120 comm="syz.7.1088" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdfb9d6de99 code=0x0 [ 516.272678][ T5608] Bluetooth: hci2: command tx timeout [ 516.449129][ T43] team0 (unregistering): Port device team_slave_1 removed [ 516.516472][ T43] team0 (unregistering): Port device team_slave_0 removed [ 517.195432][ T43] team0 (unregistering): Port device team_slave_1 removed [ 517.223570][ T43] team0 (unregistering): Port device team_slave_0 removed [ 517.715985][ T5608] Bluetooth: hci0: command tx timeout [ 517.948202][ T5260] 8021q: adding VLAN 0 to HW filter on device eth14 [ 518.360447][ T5608] Bluetooth: hci2: command tx timeout [ 521.529553][ T5608] Bluetooth: hci2: command tx timeout [ 523.101691][ T5608] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 523.151485][ T5608] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 523.171327][ T5608] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 523.210402][ T5608] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 523.211972][ T5608] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 523.557700][ T5608] Bluetooth: hci2: command tx timeout [ 525.393699][ T5608] Bluetooth: hci1: command tx timeout [ 526.222732][T10035] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.222849][T10035] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.222990][T10035] bridge_slave_0: entered allmulticast mode [ 526.256521][T10035] bridge_slave_0: entered promiscuous mode [ 526.394028][T10035] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.394102][T10035] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.394239][T10035] bridge_slave_1: entered allmulticast mode [ 526.402215][T10035] bridge_slave_1: entered promiscuous mode [ 527.027479][T10035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 527.076586][T10035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 527.476947][ T5608] Bluetooth: hci1: command tx timeout [ 527.590026][ T37] audit: type=1804 audit(1785099556.757:1619): pid=10239 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.5.1105" name="/newroot/158/cgroup.controllers" dev="tmpfs" ino=839 res=1 errno=0 [ 527.649186][ T37] audit: type=1800 audit(1785099556.907:1620): pid=10239 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.1105" name="cgroup.controllers" dev="tmpfs" ino=839 res=0 errno=0 [ 528.110944][T10035] team0: Port device team_slave_0 added [ 528.624873][T10035] team0: Port device team_slave_1 added [ 528.710291][T10253] binder: 10249:10253 ioctl 4090ae82 200000000300 returned -22 [ 528.793433][ T5260] 8021q: adding VLAN 0 to HW filter on device eth15 [ 529.087255][T10255] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1109'. [ 529.106567][T10035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 529.106578][T10035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.106591][T10035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 529.191688][T10035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 529.191700][T10035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.191713][T10035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 529.571579][ T5608] Bluetooth: hci1: command tx timeout [ 529.739062][T10096] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.739149][T10096] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.739327][T10096] bridge_slave_0: entered allmulticast mode [ 529.763164][T10096] bridge_slave_0: entered promiscuous mode [ 529.943056][T10276] xt_socket: unknown flags 0x30 [ 530.307631][ T5713] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 530.453790][ T5713] usb 6-1: Using ep0 maxpacket: 16 [ 530.463657][ T5713] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 530.463672][ T5713] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 530.465562][ T5713] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 530.465577][ T5713] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.465586][ T5713] usb 6-1: Product: syz [ 530.465593][ T5713] usb 6-1: Manufacturer: syz [ 530.465600][ T5713] usb 6-1: SerialNumber: syz [ 530.566264][ T5713] usb 6-1: 0:2 : does not exist [ 530.814482][ T5713] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 530.867810][T10096] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.867877][T10096] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.868039][T10096] bridge_slave_1: entered allmulticast mode [ 530.872201][T10096] bridge_slave_1: entered promiscuous mode [ 531.058190][T10282] overlayfs: failed to clone upperpath [ 531.282953][T10035] hsr_slave_0: entered promiscuous mode [ 531.284136][T10035] hsr_slave_1: entered promiscuous mode [ 531.289341][T10035] debugfs: 'hsr0' already exists in 'hsr' [ 531.289359][T10035] Cannot create hsr debugfs directory [ 531.459074][ T5713] usb 6-1: USB disconnect, device number 31 [ 531.553860][T10286] binder: 10284:10286 ioctl 4090ae82 200000000300 returned -22 [ 531.635727][ T5608] Bluetooth: hci1: command tx timeout [ 532.386654][T10096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 532.529564][T10096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 532.925090][T10297] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1121'. [ 533.122298][T10096] team0: Port device team_slave_0 added [ 533.164033][ T5713] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 533.364076][ T5713] usb 6-1: Using ep0 maxpacket: 8 [ 533.367417][ T5713] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 533.367437][ T5713] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 533.367447][ T5713] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 533.367458][ T5713] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 533.367468][ T5713] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 533.367489][ T5713] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 533.367500][ T5713] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.376750][ T5713] usb 6-1: config 0 descriptor?? [ 533.378787][ T5713] hub 6-1:0.0: bad descriptor, ignoring hub [ 533.378808][ T5713] hub 6-1:0.0: probe with driver hub failed with error -5 [ 533.858946][T10096] team0: Port device team_slave_1 added [ 534.259174][T10096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 534.259185][T10096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.259198][T10096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 534.388577][T10096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 534.388588][T10096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.388602][T10096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 534.555817][ T5608] Bluetooth: hci4: urb ffff888028a70900 submission failed (90) [ 534.647291][ T5713] usb 6-1: USB disconnect, device number 32 [ 534.847613][T10326] binder: BINDER_SET_CONTEXT_MGR already set [ 534.847623][T10326] binder: 10325:10326 ioctl 4018620d 200000004a80 returned -16 [ 535.202261][ T5260] 8021q: adding VLAN 0 to HW filter on device eth16 [ 535.254054][T10330] binder: 10329:10330 ioctl 4018620d 0 returned -22 [ 535.384121][T10168] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.384192][T10168] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.384406][T10168] bridge_slave_0: entered allmulticast mode [ 535.406146][T10168] bridge_slave_0: entered promiscuous mode [ 536.315458][T10096] hsr_slave_0: entered promiscuous mode [ 536.316271][T10096] hsr_slave_1: entered promiscuous mode [ 536.318957][T10096] debugfs: 'hsr0' already exists in 'hsr' [ 536.318974][T10096] Cannot create hsr debugfs directory [ 536.369232][T10168] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.369306][T10168] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.369447][T10168] bridge_slave_1: entered allmulticast mode [ 536.393868][T10168] bridge_slave_1: entered promiscuous mode [ 537.063574][T10350] : renamed from dummy0 (while UP) [ 537.328282][T10168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 541.622914][T10363] netlink: 'syz.7.1135': attribute type 11 has an invalid length. [ 541.675937][T10364] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1135'. [ 541.675957][T10364] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1135'. [ 542.066573][T10168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 542.224714][T10376] netlink: 'syz.7.1137': attribute type 39 has an invalid length. [ 543.836751][T10168] team0: Port device team_slave_0 added [ 546.524933][T10168] team0: Port device team_slave_1 added [ 547.516525][T10393] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1141'. [ 547.516544][T10393] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1141'. [ 547.516675][T10393] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1141'. [ 547.574570][T10395] netlink: 'syz.7.1141': attribute type 7 has an invalid length. [ 547.709573][T10168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 547.709585][T10168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 547.709598][T10168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 548.949283][T10406] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1144'. [ 548.976475][T10406] Bluetooth: MGMT ver 1.23 [ 549.318989][ T43] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.030520][ T5713] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 551.124228][T10412] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1146'. [ 551.207081][T10168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 551.207092][T10168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 551.207106][T10168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 551.249954][ T5713] usb 6-1: device descriptor read/64, error -71 [ 551.470867][T10415] netlink: 'syz.7.1147': attribute type 10 has an invalid length. [ 551.482934][ T5713] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 551.503106][ T43] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.613316][ T5713] usb 6-1: device descriptor read/64, error -71 [ 551.631887][T10415] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.650681][T10415] bond0: (slave team0): Enslaving as an active interface with an up link [ 551.689273][T10168] hsr_slave_0: entered promiscuous mode [ 551.690126][T10168] hsr_slave_1: entered promiscuous mode [ 551.691108][T10168] debugfs: 'hsr0' already exists in 'hsr' [ 551.691124][T10168] Cannot create hsr debugfs directory [ 551.722801][ T5713] usb usb6-port1: attempt power cycle [ 552.495053][T10404] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1144'. [ 552.495608][T10404] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1144'. [ 552.554220][ T5713] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 552.572964][ T5713] usb 6-1: device descriptor read/8, error -71 [ 552.812673][ T5713] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 552.833200][ T5713] usb 6-1: device descriptor read/8, error -71 [ 552.943174][ T5713] usb usb6-port1: unable to enumerate USB device [ 553.879705][T10426] overlayfs: failed to clone upperpath [ 554.067905][ T43] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.999784][ T43] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.225260][ T5260] 8021q: adding VLAN 0 to HW filter on device eth17 [ 556.122565][ T5835] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 556.272829][ T5835] usb 6-1: Using ep0 maxpacket: 8 [ 556.276015][ T5835] usb 6-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 556.276032][ T5835] usb 6-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 556.276042][ T5835] usb 6-1: Product: syz [ 556.276049][ T5835] usb 6-1: Manufacturer: syz [ 556.276056][ T5835] usb 6-1: SerialNumber: syz [ 556.280762][ T5835] usb 6-1: config 0 descriptor?? [ 556.352233][ T5835] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 556.479467][T10468] fuse: Bad value for 'fd' [ 556.862772][ T5835] gspca_zc3xx: reg_w_i err -110 [ 556.862834][ T5835] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 557.815371][ T5260] 8021q: adding VLAN 0 to HW filter on device eth18 [ 558.406204][ T5331] usb 6-1: USB disconnect, device number 37 [ 559.792023][ T5260] 8021q: adding VLAN 0 to HW filter on device eth19 [ 559.921708][T10514] FAULT_INJECTION: forcing a failure. [ 559.921708][T10514] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 559.921732][T10514] CPU: 0 UID: 0 PID: 10514 Comm: syz.5.1163 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 559.921749][T10514] Tainted: [L]=SOFTLOCKUP [ 559.921753][T10514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 559.921759][T10514] Call Trace: [ 559.921764][T10514] [ 559.921769][T10514] dump_stack_lvl+0xe8/0x150 [ 559.921791][T10514] should_fail_ex+0x467/0x600 [ 559.921809][T10514] _copy_from_user+0x2d/0xb0 [ 559.921823][T10514] ___sys_sendmsg+0x1c6/0x360 [ 559.921926][T10514] ? __lock_acquire+0x683/0x2ce0 [ 559.921941][T10514] ? __pfx____sys_sendmsg+0x10/0x10 [ 559.921955][T10514] ? kstrtouint+0x6e/0xe0 [ 559.921981][T10514] ? __fget_files+0x2a/0x420 [ 559.921991][T10514] ? __fget_files+0x3a8/0x420 [ 559.922006][T10514] __sys_sendmmsg+0x279/0x4d0 [ 559.922020][T10514] ? __pfx___sys_sendmmsg+0x10/0x10 [ 559.922035][T10514] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 559.922063][T10514] ? ksys_write+0x248/0x270 [ 559.922077][T10514] ? __pfx_ksys_write+0x10/0x10 [ 559.922091][T10514] __x64_sys_sendmmsg+0xa0/0xc0 [ 559.922103][T10514] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.922113][T10514] do_syscall_64+0x174/0x580 [ 559.922124][T10514] ? trace_irq_disable+0x3b/0x140 [ 559.922135][T10514] ? clear_bhb_loop+0x40/0x90 [ 559.922147][T10514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.922156][T10514] RIP: 0033:0x7fc64661de99 [ 559.922167][T10514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 559.922175][T10514] RSP: 002b:00007fc644876028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 559.922186][T10514] RAX: ffffffffffffffda RBX: 00007fc6468a5fa0 RCX: 00007fc64661de99 [ 559.922193][T10514] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000003 [ 559.922199][T10514] RBP: 00007fc644876090 R08: 0000000000000000 R09: 0000000000000000 [ 559.922205][T10514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 559.922210][T10514] R13: 00007fc6468a6038 R14: 00007fc6468a5fa0 R15: 00007ffea4773ca8 [ 559.922225][T10514] [ 560.307661][T10516] netlink: 16183 bytes leftover after parsing attributes in process `syz.5.1164'. [ 561.549072][T10541] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.401083][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.401125][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.866881][ T43] bridge_slave_1: left allmulticast mode [ 563.866904][ T43] bridge_slave_1: left promiscuous mode [ 563.867060][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.871611][ T43] bridge_slave_0: left allmulticast mode [ 563.871633][ T43] bridge_slave_0: left promiscuous mode [ 563.871783][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.930567][ T43] bridge_slave_1: left allmulticast mode [ 563.930590][ T43] bridge_slave_1: left promiscuous mode [ 563.930740][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.957705][ T43] bridge_slave_0: left allmulticast mode [ 563.957730][ T43] bridge_slave_0: left promiscuous mode [ 563.975259][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.044225][ T43] bridge_slave_1: left allmulticast mode [ 564.044248][ T43] bridge_slave_1: left promiscuous mode [ 564.044400][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.053630][ T43] bridge_slave_0: left allmulticast mode [ 564.053652][ T43] bridge_slave_0: left promiscuous mode [ 564.128229][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.332045][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 564.345702][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 564.347381][ T43] bond0 (unregistering): Released all slaves [ 564.353005][ T5331] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 564.478709][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 564.481199][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 564.501677][ T43] bond0 (unregistering): Released all slaves [ 564.517043][ T5331] usb 6-1: config 67 has an invalid interface number: 40 but max is 1 [ 564.517059][ T5331] usb 6-1: config 67 has an invalid interface number: 94 but max is 1 [ 564.517070][ T5331] usb 6-1: config 67 has no interface number 0 [ 564.517078][ T5331] usb 6-1: config 67 has no interface number 1 [ 564.517099][ T5331] usb 6-1: config 67 interface 40 has no altsetting 0 [ 564.517108][ T5331] usb 6-1: config 67 interface 94 has no altsetting 0 [ 564.518801][ T5331] usb 6-1: New USB device found, idVendor=12d1, idProduct=a184, bcdDevice=ad.3c [ 564.518816][ T5331] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.518825][ T5331] usb 6-1: Product: syz [ 564.518832][ T5331] usb 6-1: Manufacturer: syz [ 564.518839][ T5331] usb 6-1: SerialNumber: syz [ 565.200507][ T43] bond0 (unregistering): Released all slaves [ 565.419041][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 565.422294][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 565.444815][ T43] bond0 (unregistering): Released all slaves [ 565.491605][ T5260] 8021q: adding VLAN 0 to HW filter on device eth20 [ 565.992944][ T5331] option 6-1:67.40: GSM modem (1-port) converter detected [ 566.136553][ T43] tipc: Left network mode [ 566.169996][ T5331] usb 6-1: USB disconnect, device number 38 [ 566.226860][ T5331] option 6-1:67.40: device disconnected [ 566.880753][T10563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 567.241077][ T5954] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 567.394562][ T5954] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.394582][ T5954] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.394604][ T5954] usb 6-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 567.394615][ T5954] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.538939][ T5954] usb 6-1: config 0 descriptor?? [ 567.748784][T10575] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1174'. [ 567.749414][T10575] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1174'. [ 568.175668][ T5954] steelseries 0003:1038:12B6.0003: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.5-1/input0 [ 569.385123][ T5611] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 569.434642][ T5611] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 569.471737][ T5611] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 569.480996][ T5611] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 569.482266][ T5611] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 570.764186][ T5954] steelseries 0003:1038:12B6.0003: hid_hw_raw_request() failed with -71 [ 570.769254][ T5954] usb 6-1: USB disconnect, device number 39 [ 571.991238][ T5611] Bluetooth: hci4: command tx timeout [ 574.045102][ T5611] Bluetooth: hci4: command tx timeout [ 574.288457][ T43] hsr_slave_0: left promiscuous mode [ 574.304578][ T43] hsr_slave_1: left promiscuous mode [ 574.305208][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 574.349969][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 574.420489][ T43] hsr_slave_0: left promiscuous mode [ 574.432580][ T43] hsr_slave_1: left promiscuous mode [ 574.433219][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 574.487429][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 574.571910][ T5608] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 574.582547][ T5954] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 574.668970][ T5608] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 574.671073][ T5608] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 574.691938][ T5608] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 574.710880][ T5608] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 574.740640][ T5954] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.740687][ T5954] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 574.740700][ T5954] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.846998][ T5954] usb 6-1: config 0 descriptor?? [ 575.067777][ T5954] usbhid 6-1:0.0: can't add hid device: -71 [ 575.067854][ T5954] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 575.148126][ T5954] usb 6-1: USB disconnect, device number 40 [ 575.196067][ T43] hsr_slave_0: left promiscuous mode [ 575.217996][ T43] hsr_slave_1: left promiscuous mode [ 575.251010][ T43] hsr_slave_0: left promiscuous mode [ 575.251698][ T43] hsr_slave_1: left promiscuous mode [ 575.252172][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 575.271592][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 575.340859][ T37] audit: type=1326 audit(1785099604.597:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10620 comm="syz.5.1180" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64661de99 code=0x7ffc0000 [ 575.340892][ T37] audit: type=1326 audit(1785099604.597:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10620 comm="syz.5.1180" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64661de99 code=0x7ffc0000 [ 575.340914][ T37] audit: type=1326 audit(1785099604.597:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10620 comm="syz.5.1180" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64661de99 code=0x7ffc0000 [ 575.340935][ T37] audit: type=1326 audit(1785099604.597:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10620 comm="syz.5.1180" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64661de99 code=0x7ffc0000 [ 575.340956][ T37] audit: type=1326 audit(1785099604.597:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10620 comm="syz.5.1180" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64661de99 code=0x7ffc0000 [ 575.340977][ T37] audit: type=1326 audit(1785099604.597:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10620 comm="syz.5.1180" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc64661f707 code=0x7ffc0000 [ 575.340998][ T37] audit: type=1326 audit(1785099604.597:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10620 comm="syz.5.1180" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fc6465de6ce code=0x7ffc0000 [ 575.341524][ T37] audit: type=1326 audit(1785099604.597:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10620 comm="syz.5.1180" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fc6465de6ce code=0x7ffc0000 [ 575.341548][ T37] audit: type=1326 audit(1785099604.597:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10620 comm="syz.5.1180" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fc6465de6ce code=0x7ffc0000 [ 575.341712][ T37] audit: type=1326 audit(1785099604.597:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10620 comm="syz.5.1180" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fc6465de6ce code=0x7ffc0000 [ 575.612674][T10622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 575.754170][ T5954] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 575.921840][ T43] veth1_macvtap: left promiscuous mode [ 575.921905][ T43] veth0_macvtap: left promiscuous mode [ 575.922392][ T43] veth1_vlan: left promiscuous mode [ 575.939627][ T5954] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 575.939656][ T5954] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 575.939668][ T5954] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.982665][ T5954] usb 6-1: config 0 descriptor?? [ 576.051953][ T43] veth0_vlan: left promiscuous mode [ 576.114187][ T5611] Bluetooth: hci4: command tx timeout [ 576.351640][T10644] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1181'. [ 576.351656][T10644] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1181'. [ 576.729324][ T43] team0 (unregistering): Port device team_slave_1 removed [ 576.748844][ T43] team0 (unregistering): Port device team_slave_0 removed [ 576.824664][ T5954] aiptek 6-1:0.0: Aiptek using 400 ms programming speed [ 576.892960][ T5954] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input8 [ 576.915757][ T5611] Bluetooth: hci5: command tx timeout [ 578.214909][ T5611] Bluetooth: hci4: command tx timeout [ 579.048386][ T5611] Bluetooth: hci5: command tx timeout [ 579.292734][ T5954] usb 6-1: USB disconnect, device number 41 [ 579.294653][ C0] aiptek 6-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 580.043494][ T43] team0 (unregistering): Port device team_slave_1 removed [ 580.097612][ T43] team0 (unregistering): Port device team_slave_0 removed [ 581.072670][ T5611] Bluetooth: hci5: command tx timeout [ 581.103754][ T43] team0 (unregistering): Port device team_slave_1 removed [ 581.131509][ T43] team0 (unregistering): Port device team_slave_0 removed [ 581.799134][T10662] FAULT_INJECTION: forcing a failure. [ 581.799134][T10662] name failslab, interval 1, probability 0, space 0, times 0 [ 581.799157][T10662] CPU: 0 UID: 0 PID: 10662 Comm: syz.5.1185 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 581.799171][T10662] Tainted: [L]=SOFTLOCKUP [ 581.799174][T10662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 581.799180][T10662] Call Trace: [ 581.799184][T10662] [ 581.799189][T10662] dump_stack_lvl+0xe8/0x150 [ 581.799216][T10662] should_fail_ex+0x467/0x600 [ 581.799236][T10662] should_failslab+0xa8/0x100 [ 581.799250][T10662] kmem_cache_alloc_noprof+0xa4/0x650 [ 581.799261][T10662] ? fsnotify_add_mark_locked+0x65f/0x1340 [ 581.799376][T10662] ? fsnotify_add_mark_locked+0x65f/0x1340 [ 581.799393][T10662] fsnotify_add_mark_locked+0x65f/0x1340 [ 581.799411][T10662] ? rt_spin_unlock+0x163/0x200 [ 581.799428][T10662] __se_sys_inotify_add_watch+0xa82/0xf50 [ 581.799444][T10662] ? __pfx___se_sys_inotify_add_watch+0x10/0x10 [ 581.799456][T10662] ? __secure_computing+0xe7/0x2b0 [ 581.799499][T10662] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.799510][T10662] do_syscall_64+0x174/0x580 [ 581.799521][T10662] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.799530][T10662] ? clear_bhb_loop+0x40/0x90 [ 581.799543][T10662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.799553][T10662] RIP: 0033:0x7fc64661de99 [ 581.799564][T10662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 581.799572][T10662] RSP: 002b:00007fc644876028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fe [ 581.799583][T10662] RAX: ffffffffffffffda RBX: 00007fc6468a5fa0 RCX: 00007fc64661de99 [ 581.799590][T10662] RDX: 00000000040001a2 RSI: 00002000000006c0 RDI: 0000000000000004 [ 581.799596][T10662] RBP: 00007fc644876090 R08: 0000000000000000 R09: 0000000000000000 [ 581.799601][T10662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 581.799607][T10662] R13: 00007fc6468a6038 R14: 00007fc6468a5fa0 R15: 00007ffea4773ca8 [ 581.799622][T10662] [ 582.798637][T10671] netlink: 'syz.5.1187': attribute type 1 has an invalid length. [ 582.798649][T10671] netlink: 248 bytes leftover after parsing attributes in process `syz.5.1187'. [ 582.849440][T10668] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1187'. [ 583.110174][T10096] netdevsim netdevsim9: probe with driver netdevsim failed with error -12 [ 583.203983][ T5611] Bluetooth: hci5: command tx timeout [ 583.401710][ T5608] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 583.527810][ T5608] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 583.548724][ T5608] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 583.557115][ T5608] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 583.559879][ T5608] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 585.668836][ T5954] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 585.799568][ T5608] Bluetooth: hci7: command tx timeout [ 586.799903][ T5260] 8021q: adding VLAN 0 to HW filter on device eth4 [ 586.864866][ T5954] usb 6-1: config 67 has an invalid interface number: 40 but max is 1 [ 586.864883][ T5954] usb 6-1: config 67 has an invalid interface number: 94 but max is 1 [ 586.864893][ T5954] usb 6-1: config 67 has no interface number 0 [ 586.864901][ T5954] usb 6-1: config 67 has no interface number 1 [ 586.864923][ T5954] usb 6-1: config 67 interface 40 has no altsetting 0 [ 586.864931][ T5954] usb 6-1: config 67 interface 94 has no altsetting 0 [ 586.866910][ T5954] usb 6-1: New USB device found, idVendor=12d1, idProduct=a184, bcdDevice=ad.3c [ 586.866927][ T5954] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.866936][ T5954] usb 6-1: Product: syz [ 586.866948][ T5954] usb 6-1: Manufacturer: syz [ 586.866957][ T5954] usb 6-1: SerialNumber: syz [ 587.804019][ T5954] option 6-1:67.40: GSM modem (1-port) converter detected [ 587.897776][ T5608] Bluetooth: hci7: command tx timeout [ 587.930298][ T5954] usb 6-1: USB disconnect, device number 42 [ 587.960834][ T5954] option 6-1:67.40: device disconnected [ 589.954301][ T5608] Bluetooth: hci7: command tx timeout [ 593.765640][ T5608] Bluetooth: hci7: command tx timeout [ 595.603682][T10632] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.713801][T10632] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.713981][T10632] bridge_slave_0: entered allmulticast mode [ 595.744123][T10632] bridge_slave_0: entered promiscuous mode [ 595.836012][ T43] IPVS: stop unused estimator thread 0... [ 595.846451][T10794] syz.7.1209 (10794) used greatest stack depth: 18024 bytes left [ 595.865403][T10632] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.865471][T10632] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.865641][T10632] bridge_slave_1: entered allmulticast mode [ 595.889885][T10632] bridge_slave_1: entered promiscuous mode [ 597.505721][T10632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 597.506378][T10591] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.506455][T10591] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.506593][T10591] bridge_slave_0: entered allmulticast mode [ 597.508017][T10591] bridge_slave_0: entered promiscuous mode [ 597.621315][T10591] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.621383][T10591] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.621501][T10591] bridge_slave_1: entered allmulticast mode [ 597.648024][T10591] bridge_slave_1: entered promiscuous mode [ 597.650846][T10632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 597.996718][T10673] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.996808][T10673] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.996912][T10673] bridge_slave_0: entered allmulticast mode [ 598.029903][T10673] bridge_slave_0: entered promiscuous mode [ 598.061945][T10632] team0: Port device team_slave_0 added [ 598.079963][T10591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 598.104077][T10673] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.104145][T10673] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.104311][T10673] bridge_slave_1: entered allmulticast mode [ 598.108744][T10673] bridge_slave_1: entered promiscuous mode [ 598.110976][T10632] team0: Port device team_slave_1 added [ 598.155927][T10591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 598.843807][T10673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 598.888645][T10632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 598.888656][T10632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 598.888669][T10632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 598.890783][T10591] team0: Port device team_slave_0 added [ 598.893974][T10673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 598.895694][T10591] team0: Port device team_slave_1 added [ 599.126334][T10632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 599.126345][T10632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 599.126359][T10632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 600.070775][T10836] binder: 10834:10836 ioctl 4090ae82 200000000300 returned -22 [ 600.789220][T10673] team0: Port device team_slave_0 added [ 600.790497][T10591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 600.790507][T10591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 600.790520][T10591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 600.796483][T10673] team0: Port device team_slave_1 added [ 600.798788][T10591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 600.798797][T10591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 600.798810][T10591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 601.200417][T10673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 601.200429][T10673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 601.200442][T10673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 601.341259][T10632] hsr_slave_0: entered promiscuous mode [ 601.354422][T10632] hsr_slave_1: entered promiscuous mode [ 601.355127][T10632] debugfs: 'hsr0' already exists in 'hsr' [ 601.355141][T10632] Cannot create hsr debugfs directory [ 601.365222][T10673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 601.365232][T10673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 601.365246][T10673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 601.866490][T10591] hsr_slave_0: entered promiscuous mode [ 601.923180][T10591] hsr_slave_1: entered promiscuous mode [ 601.923722][T10591] debugfs: 'hsr0' already exists in 'hsr' [ 601.923737][T10591] Cannot create hsr debugfs directory [ 602.353032][ T5839] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 602.505962][ T5839] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 602.505981][ T5839] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 602.505993][ T5839] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 602.507730][ T5839] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 602.507746][ T5839] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.507756][ T5839] usb 6-1: Product: syz [ 602.507763][ T5839] usb 6-1: Manufacturer: syz [ 602.507770][ T5839] usb 6-1: SerialNumber: syz [ 602.523583][ T5839] hub 6-1:1.0: bad descriptor, ignoring hub [ 602.523605][ T5839] hub 6-1:1.0: probe with driver hub failed with error -5 [ 602.888234][ T5839] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 43 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 603.164792][ T5839] usb 6-1: USB disconnect, device number 43 [ 603.213771][T10673] hsr_slave_0: entered promiscuous mode [ 603.219097][T10673] hsr_slave_1: entered promiscuous mode [ 603.219629][T10673] debugfs: 'hsr0' already exists in 'hsr' [ 603.219643][T10673] Cannot create hsr debugfs directory [ 603.295130][ T5839] usblp0: removed [ 604.201626][T10911] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1228'. [ 606.999819][ T5839] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 607.142642][ T5839] usb 6-1: device descriptor read/64, error -71 [ 607.848114][T10924] vlan0: entered promiscuous mode [ 614.039221][T10978] netlink: 196 bytes leftover after parsing attributes in process `syz.5.1238'. [ 615.016048][T10993] binder: 10992:10993 ioctl 4090ae82 200000000300 returned -22 [ 615.202082][ T43] bridge_slave_1: left allmulticast mode [ 615.202106][ T43] bridge_slave_1: left promiscuous mode [ 615.202285][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.272567][ T43] bridge_slave_0: left allmulticast mode [ 615.272591][ T43] bridge_slave_0: left promiscuous mode [ 615.272755][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.311240][ T43] bridge_slave_1: left allmulticast mode [ 615.311265][ T43] bridge_slave_1: left promiscuous mode [ 615.311421][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.337020][ T43] bridge_slave_0: left allmulticast mode [ 615.337045][ T43] bridge_slave_0: left promiscuous mode [ 615.337201][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.391666][ T43] bridge_slave_1: left allmulticast mode [ 615.391693][ T43] bridge_slave_1: left promiscuous mode [ 615.391853][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.393343][ T37] kauditd_printk_skb: 120 callbacks suppressed [ 615.393355][ T37] audit: type=1800 audit(1785099644.657:1751): pid=11003 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.7.1244" name="nullb0" dev="tmpfs" ino=708 res=0 errno=0 [ 615.443690][ T43] bridge_slave_0: left allmulticast mode [ 615.443713][ T43] bridge_slave_0: left promiscuous mode [ 615.443864][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.186203][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 616.188689][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 616.190466][ T43] bond0 (unregistering): Released all slaves [ 616.285725][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 616.288458][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 616.290222][ T43] bond0 (unregistering): Released all slaves [ 616.374160][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 616.377847][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 616.379766][ T43] bond0 (unregistering): Released all slaves [ 616.399678][T11013] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 616.400139][T11013] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 616.983800][T11007] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.988577][T10632] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 618.543459][T10632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 618.590152][T11036] netlink: 'syz.5.1248': attribute type 1 has an invalid length. [ 618.592001][T10632] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 618.777346][T10632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 618.794975][T10632] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 618.965439][T11037] binder: 11035:11037 ioctl c0306201 200000001a80 returned -14 [ 619.168877][T10632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 619.278595][T10632] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 619.361336][T11048] binder: 11046:11048 ioctl 4090ae82 200000000300 returned -22 [ 619.369004][T10632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 620.904263][T11063] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1255'. [ 621.204214][ T43] hsr_slave_0: left promiscuous mode [ 621.204751][ T43] hsr_slave_1: left promiscuous mode [ 621.205309][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 621.206425][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 621.302557][ T43] hsr_slave_0: left promiscuous mode [ 621.346286][ T43] hsr_slave_1: left promiscuous mode [ 621.346911][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 621.385032][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 621.549797][ T43] hsr_slave_0: left promiscuous mode [ 621.564024][ T43] hsr_slave_1: left promiscuous mode [ 621.564728][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 621.614093][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 623.028066][ T43] team0 (unregistering): Port device team_slave_1 removed [ 623.107268][ T43] team0 (unregistering): Port device team_slave_0 removed [ 624.301194][ T43] team0 (unregistering): Port device team_slave_1 removed [ 624.334541][ T43] team0 (unregistering): Port device team_slave_0 removed [ 624.719801][ T43] team0 (unregistering): Port device team_slave_1 removed [ 624.746579][ T43] team0 (unregistering): Port device team_slave_0 removed [ 624.834428][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.834470][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.984540][ T5260] 8021q: adding VLAN 0 to HW filter on device eth1 [ 625.771699][T11124] netlink: 'syz.7.1267': attribute type 21 has an invalid length. [ 626.254298][T11134] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1270'. [ 627.046522][T10632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 627.126643][T10632] 8021q: adding VLAN 0 to HW filter on device team0 [ 627.146505][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.146581][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 627.375277][T11147] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1273'. [ 627.390849][ T8786] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.390924][ T8786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 629.978537][ T5611] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 630.046672][ T5611] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 630.083833][ T5611] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 630.130258][ T5611] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 630.145111][ T5611] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 631.081883][ T5260] 8021q: adding VLAN 0 to HW filter on device eth2 [ 632.155929][T11197] FAULT_INJECTION: forcing a failure. [ 632.155929][T11197] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 632.155951][T11197] CPU: 0 UID: 0 PID: 11197 Comm: syz.5.1281 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 632.155966][T11197] Tainted: [L]=SOFTLOCKUP [ 632.155969][T11197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 632.155976][T11197] Call Trace: [ 632.155981][T11197] [ 632.155985][T11197] dump_stack_lvl+0xe8/0x150 [ 632.156009][T11197] should_fail_ex+0x467/0x600 [ 632.156032][T11197] _copy_to_user+0x31/0xb0 [ 632.156047][T11197] simple_read_from_buffer+0xe1/0x170 [ 632.156171][T11197] proc_fail_nth_read+0x1be/0x230 [ 632.156226][T11197] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 632.156241][T11197] ? rw_verify_area+0x250/0x4d0 [ 632.156254][T11197] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 632.156264][T11197] vfs_read+0x219/0xa90 [ 632.156280][T11197] ? __pfx_vfs_read+0x10/0x10 [ 632.156293][T11197] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 632.156306][T11197] ? lockdep_hardirqs_on+0x7a/0x110 [ 632.156318][T11197] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 632.156329][T11197] ? mutex_lock_nested+0x152/0x1d0 [ 632.156342][T11197] ? fdget_pos+0x252/0x320 [ 632.156357][T11197] ksys_read+0x156/0x270 [ 632.156370][T11197] ? __pfx_ksys_read+0x10/0x10 [ 632.156380][T11197] ? fput+0xa0/0xd0 [ 632.156394][T11197] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.156405][T11197] do_syscall_64+0x174/0x580 [ 632.156416][T11197] ? trace_irq_disable+0x3b/0x140 [ 632.156428][T11197] ? clear_bhb_loop+0x40/0x90 [ 632.156440][T11197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.156449][T11197] RIP: 0033:0x7fc6465de6ce [ 632.156460][T11197] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 632.156468][T11197] RSP: 002b:00007fc644875fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 632.156480][T11197] RAX: ffffffffffffffda RBX: 00007fc6448766c0 RCX: 00007fc6465de6ce [ 632.156487][T11197] RDX: 000000000000000f RSI: 00007fc6448760a0 RDI: 0000000000000006 [ 632.156493][T11197] RBP: 00007fc644876090 R08: 0000000000000000 R09: 0000000000000000 [ 632.156499][T11197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 632.156504][T11197] R13: 00007fc6468a6038 R14: 00007fc6468a5fa0 R15: 00007ffea4773ca8 [ 632.156528][T11197] [ 632.273139][ T5611] Bluetooth: hci0: command tx timeout [ 632.849620][T11212] 9p: Bad value for 'rfdno' [ 634.366326][ T5611] Bluetooth: hci0: command tx timeout [ 635.354482][ T5608] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 635.510558][ T5608] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 635.536707][ T5608] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 635.537491][ T5608] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 635.538467][ T5608] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 636.429297][T11261] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1292'. [ 636.439187][ T5608] Bluetooth: hci0: command tx timeout [ 637.356487][T11261] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.490733][T11261] bridge_slave_1 (unregistering): left allmulticast mode [ 637.490758][T11261] bridge_slave_1 (unregistering): left promiscuous mode [ 637.490816][T11261] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.559046][ T5260] 8021q: adding VLAN 0 to HW filter on device eth3 [ 637.792864][T11275] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1296'. [ 637.820629][ T5608] Bluetooth: hci1: command tx timeout [ 638.512824][ T5608] Bluetooth: hci0: command tx timeout [ 640.236255][ T5608] Bluetooth: hci1: command tx timeout [ 640.906407][T10673] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 640.938389][T10673] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 641.013928][T10673] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 641.094800][T10673] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 641.584474][T11302] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1301'. [ 641.584531][T11302] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1301'. [ 641.702613][T10673] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 641.705595][T10673] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 641.786831][T11187] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.786901][T11187] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.787103][T11187] bridge_slave_0: entered allmulticast mode [ 641.791930][T11187] bridge_slave_0: entered promiscuous mode [ 641.909869][T10673] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 641.960268][T10673] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 642.000650][T11187] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.000860][T11187] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.001032][T11187] bridge_slave_1: entered allmulticast mode [ 642.024817][T11187] bridge_slave_1: entered promiscuous mode [ 642.208023][T11187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 642.275188][ T5611] Bluetooth: hci1: command tx timeout [ 642.313720][T11187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 642.504152][T11187] team0: Port device team_slave_0 added [ 642.569948][T11187] team0: Port device team_slave_1 added [ 642.597814][ T5611] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 642.598073][ T5611] Bluetooth: hci3: Injecting HCI hardware error event [ 642.631917][ T5608] Bluetooth: hci3: hardware error 0x00 [ 643.106038][T11187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 643.106051][T11187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 643.106065][T11187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 643.263094][T11187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 643.263106][T11187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 643.263121][T11187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 643.500143][ T5615] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 643.599710][ T5615] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 643.619844][ T5615] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 643.648305][ T5615] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 643.649765][ T5615] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 644.381146][ T5615] Bluetooth: hci1: command tx timeout [ 644.633969][T11187] hsr_slave_0: entered promiscuous mode [ 644.651061][T11187] hsr_slave_1: entered promiscuous mode [ 644.651736][T11187] debugfs: 'hsr0' already exists in 'hsr' [ 644.651752][T11187] Cannot create hsr debugfs directory [ 644.755554][ T5608] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 645.534425][T11338] nbd: socks must be embedded in a SOCK_ITEM attr [ 645.798239][T11338] block nbd0: shutting down sockets [ 645.996419][T11250] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.996487][T11250] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.996650][T11250] bridge_slave_0: entered allmulticast mode [ 645.998221][T11250] bridge_slave_0: entered promiscuous mode [ 646.046012][ T5608] Bluetooth: hci2: command tx timeout [ 646.123872][T11250] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.123942][T11250] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.124133][T11250] bridge_slave_1: entered allmulticast mode [ 646.128700][T11250] bridge_slave_1: entered promiscuous mode [ 646.314846][T11250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 646.352630][ T5954] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 646.361597][ T43] bridge_slave_1: left allmulticast mode [ 646.361619][ T43] bridge_slave_1: left promiscuous mode [ 646.361777][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.397123][ T43] bridge_slave_0: left allmulticast mode [ 646.397147][ T43] bridge_slave_0: left promiscuous mode [ 646.397339][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.502609][ T5954] usb 6-1: Using ep0 maxpacket: 32 [ 646.504519][ T5954] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 646.504536][ T5954] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 646.504556][ T5954] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 646.504567][ T5954] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.574184][ T5954] usb 6-1: config 0 descriptor?? [ 646.578667][ T5954] hub 6-1:0.0: USB hub found [ 646.789155][ T5954] hub 6-1:0.0: 1 port detected [ 646.860125][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 646.901499][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 646.926401][ T43] bond0 (unregistering): Released all slaves [ 646.970162][T11250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 646.994454][T11346] kAFS: No cell specified [ 647.019220][ T5954] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 647.019314][ T5954] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 647.059548][ T5954] usbhid 6-1:0.0: can't add hid device: -71 [ 647.059630][ T5954] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 647.177407][ T5954] usb 6-1: USB disconnect, device number 46 [ 647.709402][ T43] hsr_slave_0: left promiscuous mode [ 647.731323][ T43] hsr_slave_1: left promiscuous mode [ 647.740034][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 647.740537][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 648.115575][ T5608] Bluetooth: hci2: command tx timeout [ 648.219621][ T43] team0 (unregistering): Port device team_slave_1 removed [ 648.244455][ T43] team0 (unregistering): Port device team_slave_0 removed [ 648.282667][ T5954] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 648.412698][ T5954] usb 6-1: device descriptor read/64, error -71 [ 648.453882][T11250] team0: Port device team_slave_0 added [ 648.509438][T11250] team0: Port device team_slave_1 added [ 648.692844][ T5954] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 648.738376][T11250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 648.738389][T11250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 648.738402][T11250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 648.879954][ T5954] usb 6-1: device descriptor read/64, error -71 [ 648.994306][ T5954] usb usb6-port1: attempt power cycle [ 649.137972][T11250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 649.137986][T11250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 649.138001][T11250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 649.374576][ T5954] usb 6-1: new full-speed USB device number 49 using dummy_hcd [ 649.393351][ T5954] usb 6-1: device descriptor read/8, error -71 [ 649.715025][ T5954] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 649.733379][ T5954] usb 6-1: device descriptor read/8, error -71 [ 649.845522][ T5954] usb usb6-port1: unable to enumerate USB device [ 649.917093][T11250] hsr_slave_0: entered promiscuous mode [ 649.918016][T11250] hsr_slave_1: entered promiscuous mode [ 649.918690][T11250] debugfs: 'hsr0' already exists in 'hsr' [ 649.918705][T11250] Cannot create hsr debugfs directory [ 650.215339][ T5608] Bluetooth: hci2: command tx timeout [ 651.492520][ T5954] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 651.645943][ T5954] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 651.645961][ T5954] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 651.645974][ T5954] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 651.648183][ T5954] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 651.648201][ T5954] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.648211][ T5954] usb 6-1: Product: syz [ 651.648218][ T5954] usb 6-1: Manufacturer: syz [ 651.648226][ T5954] usb 6-1: SerialNumber: syz [ 651.762022][ T5954] hub 6-1:1.0: bad descriptor, ignoring hub [ 651.762046][ T5954] hub 6-1:1.0: probe with driver hub failed with error -5 [ 652.038440][ T5954] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 51 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 652.272788][ T5608] Bluetooth: hci2: command tx timeout [ 652.333234][ T5954] usb 6-1: USB disconnect, device number 51 [ 652.456334][ T5954] usblp0: removed [ 660.289662][T11318] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.289731][T11318] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.289904][T11318] bridge_slave_0: entered allmulticast mode [ 660.291490][T11318] bridge_slave_0: entered promiscuous mode [ 660.298922][T11318] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.298996][T11318] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.299173][T11318] bridge_slave_1: entered allmulticast mode [ 660.455345][T11318] bridge_slave_1: entered promiscuous mode [ 661.050435][T11187] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 661.090254][T11187] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 661.278774][T11405] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 661.731820][T11409] tmpfs: Bad value for 'nr_blocks' [ 661.860912][T11318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 661.874352][T11187] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 661.935030][T11187] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 662.022888][T11318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 662.026805][T11187] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 662.168727][T11187] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 662.591939][ T37] audit: type=1326 audit(1785099691.847:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11419 comm="syz.5.1329" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64661de99 code=0x7ffc0000 [ 662.628361][ T37] audit: type=1326 audit(1785099691.897:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11419 comm="syz.5.1329" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64661de99 code=0x7ffc0000 [ 662.630001][ T37] audit: type=1326 audit(1785099691.897:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11419 comm="syz.5.1329" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64661de99 code=0x7ffc0000 [ 662.630229][ T37] audit: type=1326 audit(1785099691.897:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11419 comm="syz.5.1329" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc64661de99 code=0x7ffc0000 [ 662.630625][ T37] audit: type=1326 audit(1785099691.897:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11419 comm="syz.5.1329" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64661de99 code=0x7ffc0000 [ 662.630650][ T37] audit: type=1326 audit(1785099691.897:1757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11419 comm="syz.5.1329" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64661de99 code=0x7ffc0000 [ 662.631264][ T37] audit: type=1326 audit(1785099691.897:1758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11419 comm="syz.5.1329" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64661de99 code=0x7ffc0000 [ 662.631289][ T37] audit: type=1326 audit(1785099691.897:1759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11419 comm="syz.5.1329" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc64661de99 code=0x7ffc0000 [ 662.631681][ T37] audit: type=1326 audit(1785099691.897:1760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11419 comm="syz.5.1329" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64661de99 code=0x7ffc0000 [ 662.631705][ T37] audit: type=1326 audit(1785099691.897:1761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11419 comm="syz.5.1329" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64661de99 code=0x7ffc0000 [ 664.492217][T11187] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 664.495089][T11187] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 664.561101][T11427] blktrace: Concurrent blktraces are not allowed on loop10 [ 664.755335][T11318] team0: Port device team_slave_0 added [ 664.838909][T11318] team0: Port device team_slave_1 added [ 664.972919][T11318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 664.972931][T11318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 664.972945][T11318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 665.046436][T11318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 665.046448][T11318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 665.046461][T11318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 666.541638][T11441] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 666.994541][T11318] hsr_slave_0: entered promiscuous mode [ 666.995470][T11318] hsr_slave_1: entered promiscuous mode [ 666.996090][T11318] debugfs: 'hsr0' already exists in 'hsr' [ 666.996105][T11318] Cannot create hsr debugfs directory [ 668.538476][ T43] bridge_slave_1: left allmulticast mode [ 668.538500][ T43] bridge_slave_1: left promiscuous mode [ 668.538700][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.540752][ T43] bridge_slave_0: left allmulticast mode [ 668.540771][ T43] bridge_slave_0: left promiscuous mode [ 668.595484][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.599962][ T43] bridge_slave_1: left allmulticast mode [ 668.599984][ T43] bridge_slave_1: left promiscuous mode [ 668.600136][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.649815][ T43] bridge_slave_0: left allmulticast mode [ 668.649839][ T43] bridge_slave_0: left promiscuous mode [ 668.649979][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.798198][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 669.823089][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 669.826066][ T43] bond0 (unregistering): Released all slaves [ 669.850815][T11482] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 671.679398][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 671.681800][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 671.683565][ T43] bond0 (unregistering): Released all slaves [ 671.714196][T11507] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1352'. [ 671.917598][T11510] FAULT_INJECTION: forcing a failure. [ 671.917598][T11510] name failslab, interval 1, probability 0, space 0, times 0 [ 671.917624][T11510] CPU: 0 UID: 0 PID: 11510 Comm: syz.5.1353 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 671.917639][T11510] Tainted: [L]=SOFTLOCKUP [ 671.917642][T11510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 671.917650][T11510] Call Trace: [ 671.917654][T11510] [ 671.917659][T11510] dump_stack_lvl+0xe8/0x150 [ 671.917681][T11510] should_fail_ex+0x467/0x600 [ 671.917700][T11510] should_failslab+0xa8/0x100 [ 671.917717][T11510] kmem_cache_alloc_noprof+0xa4/0x650 [ 671.917729][T11510] ? do_getname_kernel+0x54/0x230 [ 671.917826][T11510] ? do_getname_kernel+0x54/0x230 [ 671.917839][T11510] do_getname_kernel+0x54/0x230 [ 671.917847][T11510] ? kern_path+0x1b/0x150 [ 671.917859][T11510] kern_path+0x25/0x150 [ 671.917885][T11510] ubi_get_num_by_path+0xfd/0x310 [ 671.917942][T11510] ? __pfx_ubi_get_num_by_path+0x10/0x10 [ 671.917952][T11510] ? kasan_save_track+0x4f/0x80 [ 671.917987][T11510] ? __kmalloc_node_track_caller_noprof+0x57f/0x7c0 [ 671.917999][T11510] ? kmemdup_nul+0x36/0xf0 [ 671.918028][T11510] ubi_open_volume_path+0x84/0x1b0 [ 671.918041][T11510] ubifs_get_tree+0x113/0x74c0 [ 671.918128][T11510] ? ubifs_parse_param+0x1af/0x750 [ 671.918141][T11510] ? __pfx_smack_fs_context_parse_param+0x10/0x10 [ 671.918201][T11510] ? __pfx_ubifs_parse_param+0x10/0x10 [ 671.918215][T11510] ? rcu_is_watching+0x15/0xb0 [ 671.918230][T11510] ? kfree+0x4d/0x6c0 [ 671.918240][T11510] ? vfs_parse_monolithic_sep+0xd0/0x360 [ 671.918253][T11510] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 671.918264][T11510] ? vfs_parse_fs_qstr+0x163/0x1e0 [ 671.918277][T11510] ? __pfx_ubifs_get_tree+0x10/0x10 [ 671.918289][T11510] ? cap_capable+0x123/0x460 [ 671.918300][T11510] ? safesetid_security_capable+0xa9/0x1a0 [ 671.918314][T11510] vfs_get_tree+0x92/0x2a0 [ 671.918328][T11510] do_new_mount+0x319/0xdc0 [ 671.918362][T11510] ? cap_capable+0x123/0x460 [ 671.918373][T11510] ? __pfx_do_new_mount+0x10/0x10 [ 671.918383][T11510] ? ns_capable+0x89/0xe0 [ 671.918431][T11510] ? path_mount+0x647/0x1040 [ 671.918442][T11510] ? user_path_at+0xd4/0x160 [ 671.918455][T11510] __se_sys_mount+0x31d/0x420 [ 671.918468][T11510] ? __pfx___se_sys_mount+0x10/0x10 [ 671.918487][T11510] ? __x64_sys_mount+0x20/0xc0 [ 671.918496][T11510] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.918507][T11510] do_syscall_64+0x174/0x580 [ 671.918519][T11510] ? trace_irq_disable+0x3b/0x140 [ 671.918529][T11510] ? clear_bhb_loop+0x40/0x90 [ 671.918541][T11510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.918550][T11510] RIP: 0033:0x7fc64661de99 [ 671.918561][T11510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 671.918570][T11510] RSP: 002b:00007fc644876028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 671.918581][T11510] RAX: ffffffffffffffda RBX: 00007fc6468a5fa0 RCX: 00007fc64661de99 [ 671.918588][T11510] RDX: 0000200000000040 RSI: 0000200000000280 RDI: 0000200000000000 [ 671.918594][T11510] RBP: 00007fc644876090 R08: 0000000000000000 R09: 0000000000000000 [ 671.918600][T11510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 671.918606][T11510] R13: 00007fc6468a6038 R14: 00007fc6468a5fa0 R15: 00007ffea4773ca8 [ 671.918621][T11510] [ 671.918647][T11510] Invalid source name [ 671.918653][T11510] UBIFS error (pid: 11510): cannot open "/dev/nbd5", error -22 [ 672.726953][T11514] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 673.370075][T11520] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 673.370097][T11520] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 673.370832][T11520] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 673.370847][T11520] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 673.664785][T11522] netlink: 'syz.5.1358': attribute type 24 has an invalid length. [ 673.664800][T11522] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1358'. [ 673.797599][ T43] hsr_slave_0: left promiscuous mode [ 673.798155][ T43] hsr_slave_1: left promiscuous mode [ 673.798682][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 673.799151][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 673.843175][ T43] hsr_slave_0: left promiscuous mode [ 673.844229][ T43] hsr_slave_1: left promiscuous mode [ 673.844755][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 673.845802][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 674.786920][ T43] team0 (unregistering): Port device team_slave_1 removed [ 674.828622][ T43] team0 (unregistering): Port device team_slave_0 removed [ 678.357508][T11537] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 678.472053][ T43] team0 (unregistering): Port device team_slave_1 removed [ 678.551819][ T43] team0 (unregistering): Port device team_slave_0 removed [ 678.741161][T11522] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 679.932861][ T5835] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 679.940392][T11187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 680.017884][T11187] 8021q: adding VLAN 0 to HW filter on device team0 [ 680.122475][ T5835] usb 6-1: Using ep0 maxpacket: 16 [ 680.124038][ T5835] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 680.124057][ T5835] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 680.124068][ T5835] usb 6-1: config 0 interface 0 has no altsetting 0 [ 680.124088][ T5835] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 680.124100][ T5835] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.156944][ T5835] usb 6-1: config 0 descriptor?? [ 680.658381][ T3437] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.658459][ T3437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 680.664701][ T3349] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.664774][ T3349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 680.732944][ T5835] nzxt-smart2 0003:1E71:2009.0004: item fetching failed at offset 0/5 [ 680.733396][ T5835] nzxt-smart2 0003:1E71:2009.0004: probe with driver nzxt-smart2 failed with error -22 [ 680.846391][T11250] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 681.125585][T11250] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 681.243230][T11250] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 681.248817][T11250] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 681.254999][ T5954] usb 6-1: USB disconnect, device number 52 [ 681.532148][T11250] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 681.702954][T11250] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 682.883055][ T5954] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 682.883565][T11250] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 683.006891][T11250] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 683.094708][ T5954] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 683.094726][ T5954] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 683.094736][ T5954] usb 6-1: Product: syz [ 683.094743][ T5954] usb 6-1: SerialNumber: syz [ 683.097827][ T5954] usb 6-1: config 0 descriptor?? [ 683.609919][T11562] netlink: 'syz.5.1370': attribute type 2 has an invalid length. [ 683.614617][ T5801] usb 6-1: USB disconnect, device number 53 [ 684.602605][T11575] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 685.313846][T11250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 685.367924][T11250] 8021q: adding VLAN 0 to HW filter on device team0 [ 685.414091][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.414165][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 685.462292][ T3349] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.470382][ T3349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 686.229825][T11602] netlink: 'syz.7.1375': attribute type 79 has an invalid length. [ 686.275735][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.275776][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 689.079659][T11187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 690.564865][T11638] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 690.867347][ T5615] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 690.968632][ T5615] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 691.001785][ T5615] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 691.096548][ T5615] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 691.134073][ T5615] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 691.993059][T11318] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 691.996725][T11318] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 692.001006][T11318] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 692.004127][T11318] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 692.051642][T11318] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 692.111757][T11318] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 692.178433][T11318] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 692.201346][T11318] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 692.251667][T11658] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1384'. [ 692.251681][T11658] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1384'. [ 692.603930][T11250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 693.559262][ T5615] Bluetooth: hci4: command tx timeout [ 693.804199][ T5331] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 693.952775][ T5331] usb 6-1: Using ep0 maxpacket: 32 [ 693.986792][ T5331] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 693.986812][ T5331] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 694.024960][ T5331] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 694.024977][ T5331] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 694.024987][ T5331] usb 6-1: Product: syz [ 694.024994][ T5331] usb 6-1: Manufacturer: syz [ 694.149221][ T5331] hub 6-1:4.0: USB hub found [ 694.321962][ T5331] hub 6-1:4.0: 2 ports detected [ 694.577787][ T5331] hub 6-1:4.0: hub_hub_status failed (err = -71) [ 694.577810][ T5331] hub 6-1:4.0: config failed, can't get hub status (err -71) [ 694.643540][ T5331] usb 6-1: USB disconnect, device number 54 [ 694.739332][T11688] netlink: 'syz.7.1388': attribute type 1 has an invalid length. [ 694.739346][T11688] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1388'. [ 695.418006][ T5608] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 695.506997][ T5608] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 695.510348][ T5608] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 695.511745][ T5608] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 695.543090][ T5608] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 695.632448][ T5615] Bluetooth: hci4: command tx timeout [ 697.020162][T11318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 697.232684][ T5331] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 697.491121][ T5331] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 697.491141][ T5331] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 697.491162][ T5331] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 697.491174][ T5331] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.504152][ T5331] usb 6-1: config 0 descriptor?? [ 697.712430][ T5608] Bluetooth: hci4: command tx timeout [ 697.803305][ T5608] Bluetooth: hci0: command tx timeout [ 697.822832][ T5331] usbhid 6-1:0.0: can't add hid device: -71 [ 697.822916][ T5331] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 697.908203][ T5331] usb 6-1: USB disconnect, device number 55 [ 698.160524][T11318] 8021q: adding VLAN 0 to HW filter on device team0 [ 698.483503][ T5331] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 698.792926][ T5331] usb 6-1: Using ep0 maxpacket: 16 [ 698.795113][ T5331] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 698.795130][ T5331] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 698.795151][ T5331] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice= 0.40 [ 698.795162][ T5331] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.916733][ T5331] usb 6-1: config 0 descriptor?? [ 698.939053][ T5331] appledisplay 6-1:0.0: Submitting URB failed [ 698.939142][ T5331] appledisplay 6-1:0.0: probe with driver appledisplay failed with error -5 [ 699.397413][T11708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.398348][T11708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.496604][T11729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.497797][T11729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.872925][ T5608] Bluetooth: hci4: command tx timeout [ 699.872951][ T5608] Bluetooth: hci0: command tx timeout [ 700.039224][ T5331] usbhid 6-1:0.0: can't add hid device: -71 [ 700.039297][ T5331] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 700.134207][ T5331] usb 6-1: USB disconnect, device number 56 [ 700.175323][ T8786] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.175398][ T8786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 700.941295][ T9467] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.941371][ T9467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 701.953935][ T5615] Bluetooth: hci0: command tx timeout [ 703.870817][T11792] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1400'. [ 704.032693][ T5615] Bluetooth: hci0: command tx timeout [ 704.358979][ T5608] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 704.411409][ T5608] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 704.428646][ T5608] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 704.458891][ T5608] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 704.470964][ T5608] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 706.144483][ T5839] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 706.294687][ T5839] usb 6-1: Using ep0 maxpacket: 16 [ 706.296143][ T5839] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 706.296161][ T5839] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 706.296173][ T5839] usb 6-1: config 0 interface 0 has no altsetting 0 [ 706.296190][ T5839] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 706.296202][ T5839] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.362201][ T5839] usb 6-1: config 0 descriptor?? [ 707.224385][T11820] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1405'. [ 707.266219][ T5608] Bluetooth: hci1: command tx timeout [ 707.528008][ T1593] bridge_slave_1: left allmulticast mode [ 707.528033][ T1593] bridge_slave_1: left promiscuous mode [ 707.528213][ T1593] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.531463][ T5839] nzxt-smart2 0003:1E71:2009.0005: item fetching failed at offset 0/5 [ 707.562157][ T1593] bridge_slave_0: left allmulticast mode [ 707.562179][ T1593] bridge_slave_0: left promiscuous mode [ 707.562320][ T1593] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.606852][ T5839] nzxt-smart2 0003:1E71:2009.0005: probe with driver nzxt-smart2 failed with error -22 [ 707.653218][ T5839] usb 6-1: USB disconnect, device number 57 [ 709.156508][ T1593] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 709.159157][ T1593] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 709.185194][ T1593] bond0 (unregistering): Released all slaves [ 709.313433][ T5608] Bluetooth: hci1: command tx timeout [ 710.178293][T11639] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.178362][T11639] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.178556][T11639] bridge_slave_0: entered allmulticast mode [ 710.189956][T11639] bridge_slave_0: entered promiscuous mode [ 710.329753][T11639] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.329821][T11639] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.329972][T11639] bridge_slave_1: entered allmulticast mode [ 710.331471][T11639] bridge_slave_1: entered promiscuous mode [ 710.759770][ T1593] hsr_slave_0: left promiscuous mode [ 710.855432][ T1593] hsr_slave_1: left promiscuous mode [ 710.856511][ T1593] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 710.857000][ T1593] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 711.395175][ T5608] Bluetooth: hci1: command tx timeout [ 712.536923][ T1593] team0 (unregistering): Port device team_slave_1 removed [ 712.581942][ T1593] team0 (unregistering): Port device team_slave_0 removed [ 713.018869][T11866] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 713.388471][T11691] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.388539][T11691] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.388693][T11691] bridge_slave_0: entered allmulticast mode [ 713.390332][T11691] bridge_slave_0: entered promiscuous mode [ 713.502747][T11639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 713.509994][T11691] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.510061][T11691] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.510215][T11691] bridge_slave_1: entered allmulticast mode [ 713.511751][T11691] bridge_slave_1: entered promiscuous mode [ 713.525477][T11639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 713.550806][ T5608] Bluetooth: hci1: command tx timeout [ 713.886225][T11691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 713.910911][T11639] team0: Port device team_slave_0 added [ 713.931553][T11691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 713.943999][T11639] team0: Port device team_slave_1 added [ 714.430043][T11639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 714.430055][T11639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 714.430068][T11639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 714.525023][T11639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 714.525034][T11639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 714.525048][T11639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 714.527929][T11691] team0: Port device team_slave_0 added [ 715.623298][T11882] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1422'. [ 715.623359][T11882] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1422'. [ 715.624106][T11877] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 716.652542][T11691] team0: Port device team_slave_1 added [ 718.332250][T11691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 718.332262][T11691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 718.332276][T11691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 718.468845][T11639] hsr_slave_0: entered promiscuous mode [ 718.488545][T11639] hsr_slave_1: entered promiscuous mode [ 718.498878][T11639] debugfs: 'hsr0' already exists in 'hsr' [ 718.498897][T11639] Cannot create hsr debugfs directory [ 718.547039][T11691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 718.547051][T11691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 718.547066][T11691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 719.854160][T11691] hsr_slave_0: entered promiscuous mode [ 719.855024][T11691] hsr_slave_1: entered promiscuous mode [ 719.855740][T11691] debugfs: 'hsr0' already exists in 'hsr' [ 719.855755][T11691] Cannot create hsr debugfs directory [ 720.375442][ T5954] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 720.525351][ T5954] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 720.525384][ T5954] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 720.525395][ T5954] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.568084][ T5954] usb 6-1: config 0 descriptor?? [ 720.590660][ T5954] pwc: Askey VC010 type 2 USB webcam detected. [ 721.001725][ T5954] pwc: recv_control_msg error -32 req 02 val 2b00 [ 721.015872][ T5954] pwc: recv_control_msg error -32 req 02 val 2700 [ 721.016653][ T5954] pwc: recv_control_msg error -32 req 02 val 2c00 [ 721.040365][ T5954] pwc: recv_control_msg error -32 req 04 val 1000 [ 721.049920][ T5954] pwc: recv_control_msg error -32 req 04 val 1300 [ 721.050468][ T5954] pwc: recv_control_msg error -32 req 04 val 1400 [ 722.028113][T11929] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1432'. [ 722.686597][ T5260] 8021q: adding VLAN 0 to HW filter on device eth23 [ 722.847586][ T5954] pwc: recv_control_msg error -71 req 02 val 2000 [ 722.847935][ T5954] pwc: recv_control_msg error -71 req 02 val 2100 [ 722.849353][ T5954] pwc: recv_control_msg error -71 req 04 val 1500 [ 722.849695][ T5954] pwc: recv_control_msg error -71 req 02 val 2500 [ 722.850683][ T5954] pwc: recv_control_msg error -71 req 02 val 2400 [ 722.851668][ T5954] pwc: recv_control_msg error -71 req 02 val 2600 [ 722.862852][ T5954] pwc: recv_control_msg error -71 req 02 val 2900 [ 722.907814][ T5954] pwc: recv_control_msg error -71 req 02 val 2800 [ 722.931894][ T5954] pwc: recv_control_msg error -71 req 04 val 1100 [ 722.938020][ T5954] pwc: recv_control_msg error -71 req 04 val 1200 [ 723.260761][T11938] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 723.589516][ T5954] pwc: Registered as video103. [ 723.671014][ T5954] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input11 [ 723.757833][ T5954] usb 6-1: USB disconnect, device number 58 [ 723.806236][T11941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.052020][T11945] binder: 11943:11945 ioctl 4090ae82 200000000300 returned -22 [ 724.761181][T11955] netlink: 'syz.5.1439': attribute type 1 has an invalid length. [ 725.128003][T11793] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.128144][T11793] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.128485][T11793] bridge_slave_0: entered allmulticast mode [ 725.159418][T11793] bridge_slave_0: entered promiscuous mode [ 725.247645][T11793] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.247713][T11793] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.248133][T11793] bridge_slave_1: entered allmulticast mode [ 725.299509][T11793] bridge_slave_1: entered promiscuous mode [ 725.593706][T11793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 725.693623][T11793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 726.519815][T11793] team0: Port device team_slave_0 added [ 726.585132][T11793] team0: Port device team_slave_1 added [ 726.971281][T11989] 9p: Bad value for 'rfdno' [ 728.189462][T12016] netlink: 4595 bytes leftover after parsing attributes in process `syz.7.1448'. [ 728.719517][T11987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 728.720210][T11987] batadv_slave_1: entered promiscuous mode [ 728.768063][T12017] netlink: 4595 bytes leftover after parsing attributes in process `syz.7.1448'. [ 728.770558][T11793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 728.770568][T11793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 728.770581][T11793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 732.931244][T11793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 732.931255][T11793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 732.931269][T11793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 733.255515][T11793] hsr_slave_0: entered promiscuous mode [ 733.260354][T11793] hsr_slave_1: entered promiscuous mode [ 733.276467][T11793] debugfs: 'hsr0' already exists in 'hsr' [ 733.276485][T11793] Cannot create hsr debugfs directory [ 734.993518][T12084] loop8: detected capacity change from 0 to 7 [ 735.262725][T12084] Dev loop8: unable to read RDB block 7 [ 735.262762][T12084] loop8: unable to read partition table [ 735.262917][T12084] loop8: partition table beyond EOD, truncated [ 735.262940][T12084] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 736.157296][T12085] tipc: Enabling of bearer rejected, failed to enable media [ 741.905995][T12144] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1472'. [ 749.271732][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 749.271774][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.148545][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 810.148586][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 819.172217][ T5608] Bluetooth: hci4: command 0x0406 tx timeout [ 823.186286][ T5611] Bluetooth: hci0: command 0x0406 tx timeout [ 833.273615][ T5615] Bluetooth: hci1: command 0x0406 tx timeout [ 870.603021][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.603064][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 889.831420][ T38] INFO: task kworker/u8:12:1593 blocked for more than 145 seconds. [ 889.831440][ T38] Tainted: G L syzkaller #0 [ 889.831446][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 889.831452][ T38] task:kworker/u8:12 state:D stack:21792 pid:1593 tgid:1593 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 889.831484][ T38] Workqueue: netns cleanup_net [ 889.831593][ T38] Call Trace: [ 889.831597][ T38] [ 889.831604][ T38] __schedule+0x16dc/0x5500 [ 889.831631][ T38] ? __pfx___schedule+0x10/0x10 [ 889.831643][ T38] ? irqentry_exit+0x218/0x8f0 [ 889.831654][ T38] ? trace_irq_disable+0x3b/0x140 [ 889.831669][ T38] ? __pfx___schedule+0x10/0x10 [ 889.831677][ T38] ? rt_mutex_slowlock_block+0x33a/0x680 [ 889.831700][ T38] rt_mutex_schedule+0x76/0xf0 [ 889.831744][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 889.831762][ T38] ? rt_mutex_slowlock_block+0x33a/0x680 [ 889.831777][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 889.831792][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 889.831806][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 889.831826][ T38] ? devlink_pernet_pre_exit+0x129/0x420 [ 889.831872][ T38] ? devlink_pernet_pre_exit+0x129/0x420 [ 889.831887][ T38] ? devlink_pernet_pre_exit+0x129/0x420 [ 889.831898][ T38] mutex_lock_nested+0x168/0x1d0 [ 889.831914][ T38] devlink_pernet_pre_exit+0x129/0x420 [ 889.831928][ T38] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 889.831941][ T38] ? iput+0xb84/0xf00 [ 889.831988][ T38] ops_undo_list+0x17d/0x8d0 [ 889.832001][ T38] ? __pfx_ops_undo_list+0x10/0x10 [ 889.832011][ T38] ? rt_spin_unlock+0x157/0x200 [ 889.832025][ T38] ? idr_destroy+0x21b/0x2a0 [ 889.832064][ T38] ? rt_spin_unlock+0x163/0x200 [ 889.832079][ T38] cleanup_net+0x575/0x810 [ 889.832090][ T38] ? __pfx_cleanup_net+0x10/0x10 [ 889.832103][ T38] ? rcu_is_watching+0x15/0xb0 [ 889.832118][ T38] ? process_scheduled_works+0xa20/0x14e0 [ 889.832199][ T38] process_scheduled_works+0xa8e/0x14e0 [ 889.832225][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 889.832288][ T38] ? assign_work+0x3cf/0x5d0 [ 889.832304][ T38] worker_thread+0xa47/0xfb0 [ 889.832323][ T38] ? __kthread_parkme+0x71/0x1f0 [ 889.832366][ T38] kthread+0x388/0x470 [ 889.832380][ T38] ? __pfx_worker_thread+0x10/0x10 [ 889.832391][ T38] ? __pfx_kthread+0x10/0x10 [ 889.832405][ T38] ret_from_fork+0x514/0xb70 [ 889.832458][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 889.832472][ T38] ? __switch_to+0xc89/0x1420 [ 889.832511][ T38] ? __pfx_kthread+0x10/0x10 [ 889.832525][ T38] ret_from_fork_asm+0x1a/0x30 [ 889.832544][ T38] [ 889.832634][ T38] INFO: task syz-executor:11639 blocked for more than 145 seconds. [ 889.832643][ T38] Tainted: G L syzkaller #0 [ 889.832648][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 889.832653][ T38] task:syz-executor state:D stack:23024 pid:11639 tgid:11639 ppid:1 task_flags:0x400140 flags:0x00080002 [ 889.832681][ T38] Call Trace: [ 889.832684][ T38] [ 889.832690][ T38] __schedule+0x16dc/0x5500 [ 889.832715][ T38] ? __pfx___schedule+0x10/0x10 [ 889.832733][ T38] rt_mutex_schedule+0x76/0xf0 [ 889.832744][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 889.832765][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 889.832780][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 889.832794][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 889.832818][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 889.832831][ T38] ? new_device_store+0x13c/0x710 [ 889.832896][ T38] mutex_lock_nested+0x168/0x1d0 [ 889.832909][ T38] ? new_device_store+0x13c/0x710 [ 889.832924][ T38] new_device_store+0x13c/0x710 [ 889.832940][ T38] ? __pfx_new_device_store+0x10/0x10 [ 889.832954][ T38] ? sysfs_file_kobj+0x1a/0x230 [ 889.833012][ T38] ? sysfs_file_kobj+0x1e4/0x230 [ 889.833026][ T38] ? sysfs_kf_write+0x166/0x260 [ 889.833042][ T38] ? __pfx_sysfs_kf_write+0x10/0x10 [ 889.833055][ T38] kernfs_fop_write_iter+0x3a5/0x540 [ 889.833071][ T38] vfs_write+0x61e/0xbb0 [ 889.833089][ T38] ? __pfx_vfs_write+0x10/0x10 [ 889.833102][ T38] ? do_sys_openat2+0x14e/0x200 [ 889.833111][ T38] ? kmem_cache_free+0x187/0x6c0 [ 889.833131][ T38] ksys_write+0x156/0x270 [ 889.833144][ T38] ? __pfx_ksys_write+0x10/0x10 [ 889.833160][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.833172][ T38] do_syscall_64+0x174/0x580 [ 889.833185][ T38] ? clear_bhb_loop+0x40/0x90 [ 889.833202][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.833212][ T38] RIP: 0033:0x7f5895bde6ce [ 889.833222][ T38] RSP: 002b:00007ffecdfc4cc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 889.833232][ T38] RAX: ffffffffffffffda RBX: 000055557d47b500 RCX: 00007f5895bde6ce [ 889.833240][ T38] RDX: 0000000000000003 RSI: 00007ffecdfc4d50 RDI: 0000000000000005 [ 889.833246][ T38] RBP: 00007f5895cb4756 R08: 0000000000000000 R09: 0000000000000000 [ 889.833252][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 889.833258][ T38] R13: 00007ffecdfc4d50 R14: 00007f58969d4620 R15: 0000000000000003 [ 889.833273][ T38] [ 889.833289][ T38] INFO: task syz-executor:11793 blocked for more than 145 seconds. [ 889.833297][ T38] Tainted: G L syzkaller #0 [ 889.833302][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 889.833306][ T38] task:syz-executor state:D stack:22712 pid:11793 tgid:11793 ppid:1 task_flags:0x400140 flags:0x00080002 [ 889.833333][ T38] Call Trace: [ 889.833336][ T38] [ 889.833342][ T38] __schedule+0x16dc/0x5500 [ 889.833366][ T38] ? __pfx___schedule+0x10/0x10 [ 889.833384][ T38] rt_mutex_schedule+0x76/0xf0 [ 889.833395][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 889.833416][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 889.833431][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 889.833444][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 889.833464][ T38] ? del_device_store+0xd6/0x370 [ 889.833475][ T38] ? del_device_store+0xd6/0x370 [ 889.833487][ T38] ? del_device_store+0xd6/0x370 [ 889.833495][ T38] mutex_lock_nested+0x168/0x1d0 [ 889.833507][ T38] ? sysfs_file_kobj+0x1a/0x230 [ 889.833522][ T38] del_device_store+0xd6/0x370 [ 889.833532][ T38] ? sysfs_file_kobj+0x1a/0x230 [ 889.833545][ T38] ? __pfx_del_device_store+0x10/0x10 [ 889.833555][ T38] ? sysfs_file_kobj+0x1e4/0x230 [ 889.833582][ T38] ? sysfs_kf_write+0x166/0x260 [ 889.833598][ T38] ? __pfx_sysfs_kf_write+0x10/0x10 [ 889.833611][ T38] kernfs_fop_write_iter+0x3a5/0x540 [ 889.833626][ T38] vfs_write+0x61e/0xbb0 [ 889.833643][ T38] ? __pfx_vfs_write+0x10/0x10 [ 889.833656][ T38] ? do_sys_openat2+0x14e/0x200 [ 889.833665][ T38] ? kmem_cache_free+0x187/0x6c0 [ 889.833683][ T38] ksys_write+0x156/0x270 [ 889.833696][ T38] ? __pfx_ksys_write+0x10/0x10 [ 889.833712][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.833723][ T38] do_syscall_64+0x174/0x580 [ 889.833734][ T38] ? clear_bhb_loop+0x40/0x90 [ 889.833746][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.833755][ T38] RIP: 0033:0x7ff7262be6ce [ 889.833763][ T38] RSP: 002b:00007fffd5254988 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 889.833773][ T38] RAX: ffffffffffffffda RBX: 0000555558320500 RCX: 00007ff7262be6ce [ 889.833779][ T38] RDX: 0000000000000001 RSI: 00007fffd5254a10 RDI: 0000000000000005 [ 889.833785][ T38] RBP: 00007ff726394732 R08: 0000000000000000 R09: 0000000000000000 [ 889.833791][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 889.833797][ T38] R13: 00007fffd5254a10 R14: 00007ff7270b4620 R15: 0000000000000003 [ 889.833812][ T38] [ 889.833831][ T38] [ 889.833831][ T38] Showing all locks held in the system: [ 889.833839][ T38] 5 locks held by ktimers/0/16: [ 889.833885][ T38] 1 lock held by khungtaskd/38: [ 889.833890][ T38] #0: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 889.833954][ T38] 2 locks held by kcompactd0/41: [ 889.833970][ T38] 5 locks held by kworker/u8:11/1306: [ 889.833976][ T38] #0: ffff888040d0f138 ((wq_completion)krds_cp_wq#5/0){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 889.834001][ T38] #1: ffffc9000621fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 889.834025][ T38] #2: ffff88805f7ae3e0 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 889.834104][ T38] #3: ffffffff8e3075d0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 889.834126][ T38] #4: ffff88801e6fd958 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0xf1/0x2a0 [ 889.834149][ T38] 4 locks held by kworker/u8:12/1593: [ 889.834154][ T38] #0: ffff88801aea0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 889.834177][ T38] #1: ffffc900069afc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 889.834201][ T38] #2: ffffffff8f5a2e80 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 889.834222][ T38] #3: ffff888022293160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 889.834258][ T38] 4 locks held by kworker/u8:14/3349: [ 889.834263][ T38] 2 locks held by kworker/u8:16/3437: [ 889.834270][ T38] 1 lock held by udevd/4965: [ 889.834275][ T38] 4 locks held by kworker/0:3/5331: [ 889.834281][ T38] 2 locks held by crond/5338: [ 889.834286][ T38] #0: ffffffff8e3075d0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 889.834306][ T38] #1: ffff88801e6fd958 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0xf1/0x2a0 [ 889.834328][ T38] 2 locks held by getty/5353: [ 889.834332][ T38] #0: ffff88803623d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 889.834393][ T38] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 889.834445][ T38] 3 locks held by kworker/0:8/5839: [ 889.834451][ T38] 3 locks held by kworker/0:9/5954: [ 889.834456][ T38] #0: ffff88813ff1b938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 889.834480][ T38] #1: ffffc900058e7c40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 889.834503][ T38] #2: ffffffff8f5b1a38 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 889.834554][ T38] 2 locks held by syz-executor/7602: [ 889.834567][ T38] 3 locks held by kworker/u8:19/8786: [ 889.834573][ T38] #0: ffff888032570938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 889.834596][ T38] #1: ffffc9000617fc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 889.834620][ T38] #2: ffffffff8f5b1a38 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 889.834672][ T38] 3 locks held by kworker/u8:20/8787: [ 889.834678][ T38] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 889.834700][ T38] #1: ffffc90003c97c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 889.834724][ T38] #2: ffff8880423108d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 889.834753][ T38] 4 locks held by syz-executor/11639: [ 889.834759][ T38] #0: ffff88803585e500 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 889.834793][ T38] #1: ffff88805fda1478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 889.834818][ T38] #2: ffff8880291435a8 (kn->active#53){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 889.834845][ T38] #3: ffffffff8ee26cd8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x13c/0x710 [ 889.834872][ T38] 7 locks held by syz-executor/11691: [ 889.834877][ T38] #0: ffff88803585e500 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 889.834902][ T38] #1: ffff888079668c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 889.834926][ T38] #2: ffff8880291434b8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 889.834952][ T38] #3: ffffffff8ee26cd8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 889.834972][ T38] #4: ffff888022293160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 889.835044][ T38] #5: ffff8880374e6310 (&devlink->lock_key#16){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 889.835070][ T38] #6: ffffffff8f5b1a38 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 [ 889.835122][ T38] 4 locks held by syz-executor/11793: [ 889.835128][ T38] #0: ffff88803585e500 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 889.835153][ T38] #1: ffff88805dbf9878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 889.835177][ T38] #2: ffff8880291434b8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 889.835203][ T38] #3: ffffffff8ee26cd8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 889.835225][ T38] 5 locks held by dhcpcd-run-hook/12132: [ 889.835231][ T38] 6 locks held by syz.5.1472/12143: [ 889.835237][ T38] 1 lock held by syz-executor/12152: [ 889.835242][ T38] 4 locks held by syz-executor/12154: [ 889.835247][ T38] [ 889.835250][ T38] ============================================= [ 889.835250][ T38] [ 889.835256][ T38] NMI backtrace for cpu 0 [ 889.835266][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 889.835287][ T38] Tainted: [L]=SOFTLOCKUP [ 889.835290][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 889.835296][ T38] Call Trace: [ 889.835300][ T38] [ 889.835305][ T38] dump_stack_lvl+0xe8/0x150 [ 889.835321][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 889.835362][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 889.835406][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 889.835422][ T38] sys_info+0x135/0x170 [ 889.835435][ T38] watchdog+0xfd7/0x1030 [ 889.835449][ T38] ? watchdog+0x1c7/0x1030 [ 889.835460][ T38] kthread+0x388/0x470 [ 889.835474][ T38] ? __pfx_watchdog+0x10/0x10 [ 889.835482][ T38] ? __pfx_kthread+0x10/0x10 [ 889.835496][ T38] ret_from_fork+0x514/0xb70 [ 889.835512][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 889.835526][ T38] ? __switch_to+0xc89/0x1420 [ 889.835539][ T38] ? __pfx_kthread+0x10/0x10 [ 889.835553][ T38] ret_from_fork_asm+0x1a/0x30 [ 889.835575][ T38] [ 889.835588][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 889.835596][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 889.835608][ T38] Tainted: [L]=SOFTLOCKUP [ 889.835612][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 889.835617][ T38] Call Trace: [ 889.835620][ T38] [ 889.835624][ T38] vpanic+0x56c/0xa60 [ 889.835635][ T38] ? __pfx_vpanic+0x10/0x10 [ 889.835649][ T38] panic+0xc5/0xd0 [ 889.835658][ T38] ? __pfx_panic+0x10/0x10 [ 889.835668][ T38] ? nmi_cpu_backtrace+0x2b0/0x2d0 [ 889.835683][ T38] ? nmi_trigger_cpumask_backtrace+0x247/0x380 [ 889.835699][ T38] watchdog+0x1030/0x1030 [ 889.835711][ T38] ? watchdog+0x1c7/0x1030 [ 889.835723][ T38] kthread+0x388/0x470 [ 889.835736][ T38] ? __pfx_watchdog+0x10/0x10 [ 889.835744][ T38] ? __pfx_kthread+0x10/0x10 [ 889.835757][ T38] ret_from_fork+0x514/0xb70 [ 889.835772][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 889.835786][ T38] ? __switch_to+0xc89/0x1420 [ 889.835799][ T38] ? __pfx_kthread+0x10/0x10 [ 889.835813][ T38] ret_from_fork_asm+0x1a/0x30 [ 889.835829][ T38] [ 889.835888][ T38] Kernel Offset: disabled