last executing test programs: 14m32.293382947s ago: executing program 1 (id=1197): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0xe21}, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0xb000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (fail_nth: 3) syz_open_dev$loop(0x0, 0x1, 0x161000) 14m31.061280554s ago: executing program 1 (id=1204): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x51cfa, 0x0, 0x8000008, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) modify_ldt$write(0x1, &(0x7f0000000000)={0x3aa, 0x0, 0x2000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}, 0x10) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x339, @tick=0x3ff, 0x6, {0x8, 0x80}, 0x6, 0x1}) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@default_permissions}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f00000002c0)={0x26d6f436, 0x80000001, 0x1, 'queue0\x00', 0x3}) 14m30.568159472s ago: executing program 0 (id=1209): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000020680)={0xc000002, 0x1b30, &(0x7f0000019740)=[0x80, 0xd085, 0x1, 0x3ff, 0x10, 0x5, 0x7, 0x7, 0x4, 0x6, 0x1, 0x2, 0x5, 0x5, 0x7, 0x7f, 0x1, 0xff, 0xfff, 0xb, 0x1, 0x1, 0x66f, 0x550, 0x3, 0x6, 0x1, 0x480, 0xe, 0x5, 0x2, 0xc84, 0x8, 0x200, 0x3, 0xc, 0x941, 0x8001, 0xe, 0x2, 0x5, 0xff, 0x1, 0x4c36fe2f, 0x2, 0x3ff, 0x4, 0x2, 0x6, 0x4, 0x5, 0x1, 0x5, 0x4, 0x3, 0x10001, 0x0, 0x8, 0x90000000, 0xfffffffe, 0x8ec7, 0xd59, 0x6, 0x1000000, 0x3, 0x0, 0x8, 0x9, 0xfffffff9, 0xfffffff7, 0xc4, 0x2, 0x7ff, 0x80000000, 0xfff, 0x5, 0x6, 0x10001, 0x6, 0x4, 0x40, 0x2, 0x0, 0x0, 0x80000000, 0x6, 0x401, 0x46, 0x80, 0xff, 0xd18, 0x8, 0x3, 0x908, 0x5, 0x87e6, 0x0, 0x61b869f3, 0x80000001, 0xfb, 0x7, 0xff1, 0x7, 0x10000, 0x0, 0x7c3489ea, 0x2, 0x1, 0x0, 0x40, 0x4, 0x7, 0x8, 0x7ff, 0x7ff, 0x5, 0x7ff, 0x3a294ec9, 0x36a, 0x4, 0x8, 0x9, 0x6, 0x10001, 0xd1, 0x2, 0xce, 0x5, 0x3, 0x0, 0xc, 0x8, 0x80000000, 0x9, 0xfffffff7, 0x0, 0x8, 0x0, 0x2020000, 0x0, 0x1, 0x800, 0x3, 0xfb5, 0x5, 0x9, 0x0, 0x10000, 0x7, 0x3, 0x1, 0x1, 0x100, 0x1, 0xffffffff, 0xffff, 0x1, 0x27, 0x7825, 0xac, 0x800, 0x80000001, 0x1, 0x8001, 0xfff, 0x0, 0x6, 0x7, 0x200, 0x5, 0x9, 0xfffffff9, 0x81, 0x6, 0x7, 0x4, 0x9, 0x3, 0xd, 0x9, 0x101, 0x10, 0x380000, 0x6f, 0x5, 0x8000, 0x3ff, 0x8000, 0x697, 0x6, 0xb, 0x7, 0xffffff7f, 0x0, 0x0, 0x6, 0x3, 0x135d, 0x6, 0x0, 0x1, 0x6, 0x6, 0x5, 0x9b60, 0xb82, 0xed0, 0x88ff, 0x3c, 0x5, 0x5, 0x4, 0x4, 0x2, 0xf9e, 0x2, 0x9, 0xb, 0x4, 0x2, 0xd0a, 0x476, 0x0, 0xf6a, 0x3, 0xdc09, 0x6, 0x2, 0x1, 0x0, 0x200, 0x9, 0xcb5, 0xd8a1, 0x3, 0x7, 0xc, 0x8, 0x4, 0x7af, 0x33, 0x53d, 0x81, 0x5fa, 0xf05, 0x2, 0x40, 0x7ff, 0x7, 0x2, 0x0, 0x7fff, 0xfbd8, 0xc, 0x5, 0x9, 0x5, 0x0, 0x48f, 0x7ff, 0x0, 0x5, 0x80000000, 0xfffffffd, 0x80000000, 0x1, 0x3d, 0x6, 0xd92, 0x9, 0x5, 0x400, 0xf231, 0x7, 0xffffffff, 0x1d4e, 0x7, 0x8401, 0x0, 0x3, 0xe7c, 0x5, 0x6, 0x7fffffff, 0x7fffffff, 0x1, 0xe57, 0x1, 0x2, 0x0, 0x7, 0x80, 0x5, 0x7, 0x8, 0x3, 0x81, 0x3bcd080, 0x8, 0xb, 0xa, 0x4, 0x3, 0x7, 0x5, 0xfffffffc, 0x352, 0x6, 0x10, 0x7, 0x3, 0x8, 0x7, 0x5, 0x200, 0xe19, 0x1, 0x1000, 0x4, 0x7, 0x7fffffff, 0x956, 0x2, 0x6, 0x24, 0x5, 0x4, 0x10000, 0x7ff, 0x0, 0x2, 0x5d9e, 0x1, 0x7f, 0x5b53, 0x10000000, 0x3, 0x8000, 0x6, 0x81, 0x10001, 0x1, 0x2, 0x6, 0x80, 0xbd, 0x1ff, 0xb6b, 0x4, 0x8, 0x6, 0x80000001, 0x9036, 0x9, 0x2, 0x1, 0x8, 0x0, 0x9, 0xece0, 0x7ff, 0x6eef, 0x163, 0x80000001, 0x9, 0x6, 0xfffffffa, 0x16, 0x9, 0x4, 0x1, 0x2, 0x3, 0x6, 0x95, 0x3, 0x656, 0xfffffff2, 0x0, 0xfffffffb, 0x3, 0x1, 0x9, 0x2745, 0xffff8471, 0x2, 0x1ff, 0xffffff29, 0x5, 0x0, 0x4, 0x5, 0x5, 0x665, 0xebb, 0x2, 0x4, 0xfff, 0x6, 0xa2, 0x3ff, 0x1, 0x0, 0x100, 0xbd6a, 0x9, 0xbd4, 0x2, 0x9, 0x4, 0x200, 0x10001, 0x5, 0x3ff, 0x400, 0x100, 0x64, 0x0, 0x594c, 0xffff, 0x1df5, 0x7fff, 0x4, 0x4, 0x3, 0x1, 0x1, 0xbbb, 0xef, 0x3, 0x7fffffff, 0x2, 0x5, 0xffff, 0x1, 0xc, 0x0, 0xffffffff, 0xffff, 0xe1d4931, 0x4, 0x7fffffff, 0x0, 0x7, 0x6, 0x3, 0x7, 0x80000001, 0x10, 0xfffffffc, 0x400, 0x2, 0x7, 0x3d2, 0x0, 0xdd2, 0x0, 0x4, 0x10001, 0x585a7862, 0x1, 0x3, 0x7, 0x3, 0x8, 0x16, 0x1, 0x0, 0x7fffffff, 0x8f0, 0x800, 0xfc000000, 0x94c, 0x7, 0x6, 0x5, 0x9, 0x3, 0x81, 0x4, 0x200, 0x0, 0x100, 0x3, 0x9, 0x1, 0x1e5, 0x5, 0x8, 0x9, 0x6, 0xffffcaf8, 0x5, 0x6577, 0x5, 0x9, 0x2, 0x97, 0x5, 0x2, 0x3, 0x4, 0x4, 0x9, 0x0, 0xd, 0x3, 0x480, 0xffffffff, 0x2, 0xfa6, 0x9, 0x0, 0x2, 0x2, 0x1, 0x4, 0xffffc61d, 0x7fff, 0x1, 0x8000, 0x3af0, 0x3, 0x1ff, 0x7, 0x7, 0x2, 0x6, 0x800, 0x1, 0x0, 0xe, 0x5, 0x4, 0x70, 0x7fffffff, 0x80000001, 0x8, 0x6, 0xd3f, 0x10, 0x1, 0x1, 0xe, 0x8, 0xccd, 0xb, 0x81, 0x8, 0x8, 0x10000, 0x200, 0x78f, 0x0, 0x7, 0x6, 0x1000, 0x7, 0x2, 0x3, 0x7, 0x1, 0x4, 0x8, 0x3, 0x2, 0x0, 0x1, 0xf1e2, 0x0, 0x3, 0x8, 0x5, 0x3, 0x3, 0x8, 0x2, 0x85, 0x9, 0x9, 0x40, 0xa6e, 0x480, 0x0, 0x8001, 0x3, 0x5, 0x9, 0x2, 0x7ac, 0x7, 0x1, 0x1, 0x8, 0x7fffffff, 0x0, 0x4, 0x2, 0x5, 0xffffff9d, 0x7, 0x9, 0xffff, 0x1000, 0x4, 0x1, 0xea46, 0x1, 0x101, 0x47b, 0x6, 0x7, 0x2, 0x8, 0x1, 0x10001, 0x9, 0xffffff80, 0x5, 0x9ad, 0x3, 0x71b, 0x0, 0x8, 0x7, 0x0, 0x2, 0x9e85, 0x5bb7ead5, 0x400, 0xfff, 0x0, 0x0, 0x4, 0x3, 0x3, 0xf, 0x6f16, 0x2, 0x41db14a3, 0x2, 0x2, 0x2, 0x0, 0x1, 0x2, 0xffff, 0x4, 0x6, 0x4, 0x55, 0x0, 0x0, 0x7ff, 0x4, 0xcc, 0xa6a, 0x1, 0x1, 0x4e29, 0x5, 0x1, 0x7f, 0xe03, 0x5, 0x5, 0x5, 0x800, 0xb, 0x5f, 0x2, 0x7, 0xd26, 0x7e, 0x7fffffff, 0x3, 0xfffffff8, 0xe, 0x200, 0xf, 0xf, 0xfffff0d0, 0x9, 0x924c, 0x7, 0xff, 0xad, 0x1000, 0xfffffffe, 0x5, 0xbf, 0x1ff, 0xc, 0x3, 0x10000, 0x6, 0xffff0001, 0xcc3a, 0xaf, 0x8, 0x9, 0xf8, 0x0, 0x9, 0x1, 0x8, 0xff, 0x1ff, 0xffff83d1, 0x9, 0x9, 0x3, 0x7, 0x6, 0xd, 0x200, 0x4, 0x4, 0x4d, 0x400, 0x2, 0x9, 0xffff, 0x400, 0x1, 0xa0, 0x2, 0x8, 0x9, 0x7, 0x1, 0x4, 0x5, 0xdbd, 0x80, 0x9, 0xb8e0, 0x5, 0x181f, 0xb2ab, 0x3, 0x8, 0x7, 0x0, 0x5, 0xe, 0xe, 0xfffffbff, 0x0, 0x10000, 0x8, 0x10000, 0x800, 0x9, 0x7, 0x5, 0x2, 0x32, 0x9, 0xff, 0x6, 0x4, 0x6, 0x9, 0x4, 0x8, 0x2, 0x4, 0x3, 0x3, 0x1c1, 0x3, 0x3, 0x0, 0xffffffff, 0x30, 0x6c65, 0x5, 0xd55, 0xf, 0xffff, 0x7, 0x6, 0x475, 0x80000000, 0xffff0000, 0xd85abeb, 0x8, 0x7f, 0x80000, 0x0, 0xa, 0xcb, 0x3, 0x6, 0x0, 0x48c, 0x8d8b, 0x0, 0x100, 0x9, 0x7f, 0x0, 0x4, 0x3, 0x2, 0x1, 0x2, 0x0, 0xff, 0x2, 0xffffffff, 0x6, 0x3, 0x10000, 0x4, 0x5, 0x2, 0x113c, 0x0, 0x8000, 0xb, 0x7, 0x5, 0x9, 0x93b8, 0x5, 0x1, 0xada9, 0x80000000, 0x8, 0x4, 0x1, 0x6, 0x5, 0x8, 0x1, 0x3, 0xa081, 0x1, 0x351a, 0x2, 0x5c44, 0xe, 0x8, 0x2, 0x3cd698c9, 0xffffffff, 0x2, 0x0, 0x1, 0x0, 0x3, 0x8, 0x2, 0x2, 0x1, 0x10, 0x1, 0xb5, 0x7, 0x7, 0x26, 0x40, 0x4, 0x4, 0x5, 0x4, 0x1, 0x539, 0x5, 0x5, 0xfffffff9, 0x6, 0x9, 0x5, 0x1, 0x4, 0x10001, 0xfffffeff, 0xd20, 0x3, 0x7c98, 0x1, 0x0, 0x6, 0x40800, 0x10000, 0x1, 0x8, 0x4, 0x4, 0x6, 0x80000000, 0x8, 0x8, 0x2, 0x3, 0x0, 0x5812, 0x4, 0x3, 0x100, 0x0, 0xb, 0x9b, 0xa6, 0x0, 0x5, 0x11d03618, 0x3, 0xaac9, 0x8, 0xe, 0x498, 0x43466a30, 0x80, 0xfffffb92, 0x3c, 0x4ca1, 0x8000, 0x0, 0x39f, 0x400, 0x8, 0xcf9f, 0xa5, 0xbe, 0x3, 0x3ff, 0xa38, 0xf, 0x1, 0x2, 0x3, 0x3, 0x1, 0xab34, 0xe, 0x9, 0x7, 0x8001, 0x7f, 0x1, 0xfffffffa, 0x94c, 0xfff, 0x6, 0x100, 0x0, 0x1, 0x8, 0xc600, 0x7, 0x1, 0x2, 0x5, 0x401, 0x8000000, 0x400, 0xa0, 0x76d, 0x8001, 0x4, 0x0, 0x6, 0x5, 0x2, 0x2, 0x3, 0x104, 0x4, 0x34c, 0x4, 0x4, 0x6, 0xc95, 0xff, 0x333, 0x6, 0x80000000, 0xf, 0x5, 0x9, 0x6, 0xcd, 0xfffffffe, 0x2, 0x0, 0x2, 0x7ff, 0x2, 0x6fd7, 0x100, 0x3, 0x160, 0x8, 0x3, 0x5, 0x1471, 0x58ef, 0x1ff, 0x100, 0x6, 0xfffffffd, 0x0, 0x8001, 0xe, 0x2fc1, 0x0, 0x2, 0x842, 0x6, 0x2, 0x5, 0x800, 0x4, 0x872, 0x10001, 0x100, 0x7f780000, 0xc69, 0x6, 0x400, 0x7, 0x1ff, 0x0, 0x39c, 0x7fff, 0x6, 0x3, 0xf4, 0x4, 0x5fe, 0x8, 0x8, 0x0, 0x800, 0x3a22, 0x1, 0x73c2a66c, 0x2, 0x1, 0x2, 0x3, 0x23, 0x0, 0x7, 0x2, 0x8, 0x401, 0x6, 0x8001, 0xffffffff, 0x1, 0x7, 0x7, 0xff4e, 0x9, 0x3, 0x0, 0x2, 0x6, 0xa, 0x81, 0x0, 0x40000000, 0x80, 0x6, 0x6, 0x9, 0x20f, 0x6, 0x2, 0x101, 0xb6, 0x7f, 0x7, 0x4, 0x8, 0x3f, 0xa, 0xdb04, 0x2, 0x0, 0xadfa, 0x4b, 0x86, 0x8ffc, 0x3ff, 0x6, 0x300, 0xfffffee0, 0x7, 0x8, 0xd, 0x2, 0x1, 0x3, 0xf18, 0x0, 0xffff, 0xfffffe00, 0x0, 0x4295, 0x9, 0x13a0, 0x1, 0x8, 0x8, 0x3, 0x7, 0x6, 0x7, 0x1e87, 0x3, 0x5, 0x4, 0x5, 0x2c1b, 0x7, 0x3ff, 0x9, 0x6, 0x1, 0xf, 0x7, 0xfffffff9, 0x3, 0x80000000, 0x5dc99b85, 0x1ff, 0x200, 0x1ff, 0x6c07, 0x8, 0x5, 0x80000000, 0x2d, 0xfffffffd, 0x7, 0x9, 0x62b, 0x5, 0x7, 0x10001, 0xff, 0x6, 0x3, 0x4, 0x80, 0x5, 0x2, 0xfffffffd, 0x4, 0x9, 0x2, 0x2, 0xc, 0x8, 0x2, 0x3, 0x8000, 0x9, 0xffff, 0x4, 0x55, 0x8, 0x40, 0x7, 0x3, 0x1, 0xc2, 0x2d, 0xc8ef, 0x143c, 0xec1, 0x5ab, 0x2, 0x1, 0x925, 0x6, 0x8f3b, 0x7ff, 0x7, 0x2, 0x1, 0x0, 0x6, 0x2, 0x6, 0x9, 0x3b, 0x9, 0x7, 0x9, 0x7, 0x2, 0xff, 0xa43, 0x40, 0x7, 0xffffffff, 0x1, 0x8, 0x7034, 0x10000, 0xfffffffa, 0x2, 0x9, 0x5, 0x4, 0x8000, 0x786, 0xf7, 0x4, 0x3, 0x21, 0x9, 0x204, 0x5, 0x3, 0x36, 0x80, 0x7fff, 0x4, 0x80000000, 0x401, 0x1000000, 0x80, 0xe0b, 0x5, 0x1, 0xb, 0x5, 0x8, 0x2, 0x2f3b, 0x6, 0x8, 0x1, 0x653, 0x7, 0x9ce, 0x3, 0x8, 0xe6e6, 0x10000, 0x6, 0xfffffff9, 0x6, 0x7fffffff, 0xffff, 0x0, 0x100, 0xd8c, 0x6, 0x9, 0x3, 0x80000001, 0x1, 0xe, 0x5, 0x5, 0x3, 0xd819, 0x2, 0x7, 0x200, 0x7, 0x800, 0xfffffff1, 0x3, 0x81, 0x2, 0x3, 0x5, 0x9d, 0x6, 0x5, 0x2, 0x0, 0x7, 0x100, 0xfffff7f6, 0x1, 0x100, 0x80, 0x6, 0x98, 0x7, 0x3, 0xb, 0x0, 0x8, 0x66, 0xe, 0xff, 0x401, 0xe68, 0xffffffff, 0x3fb7, 0x9, 0x2, 0x200, 0xfffffffd, 0x2, 0x8, 0x0, 0x2b, 0x1, 0x3, 0x0, 0x6, 0xc50d3fc, 0x8, 0x845, 0xb, 0x5, 0x7, 0x3ff, 0x1, 0xdf0, 0x80000000, 0x3, 0xfffffff7, 0x9, 0x6, 0x3, 0x6, 0xe68, 0x9, 0xfffffc7a, 0x1a18, 0x4, 0x7, 0x0, 0xe, 0x1b0, 0x2, 0x5c5d, 0x1, 0xd4a3, 0x3, 0xfffffff8, 0x4, 0x9, 0x800, 0xdf, 0x761, 0x4, 0xfffffffd, 0x9, 0x3, 0x84e, 0xc, 0x5, 0x6, 0x9, 0x0, 0x0, 0x7, 0x6f, 0x8, 0x3438b423, 0x0, 0x5, 0x652, 0x8, 0x83a0, 0x9, 0x40, 0x5, 0x8, 0x400000, 0x101, 0x4, 0xa, 0x4, 0xd72a, 0x4, 0x7, 0x0, 0x6, 0x255, 0xfffffffa, 0x7, 0x0, 0x2, 0x0, 0x6, 0x40, 0x223d, 0x3, 0x7, 0x0, 0x4, 0x5, 0x3, 0xc0d, 0x9, 0x200, 0x6, 0xfffffffc, 0x9, 0x8, 0x6, 0x7, 0xe, 0x6, 0x235, 0x9, 0x49, 0x1, 0xa, 0x2, 0x9, 0xf0fc, 0x5, 0x1ff, 0x5, 0xc, 0x0, 0x5, 0x9f8, 0x0, 0x1, 0x9, 0x3, 0x0, 0x77, 0x200, 0x7, 0x10, 0x6a7, 0x81, 0x4, 0xff, 0x87f, 0x4, 0x21111ea6, 0x4, 0x8001, 0x4, 0x8, 0x7, 0x5, 0x3, 0x6, 0x0, 0x0, 0x2, 0x4, 0xfff, 0x7ea, 0xabe, 0x3, 0x9, 0xfffffff1, 0x5, 0xe974, 0x2, 0x5, 0x0, 0x9, 0x9, 0x8, 0x3, 0x652, 0x2c000, 0x2, 0xffffffff, 0x2, 0x1, 0x401, 0x8, 0x5, 0x9, 0x6, 0x200, 0xfffff951, 0x5, 0x1, 0x1, 0xf4, 0xf4, 0x0, 0xe49b, 0x7, 0xff, 0x0, 0xf, 0x8, 0xf, 0x10001, 0x200, 0xa3d, 0xe8, 0x5421207b, 0x7, 0x0, 0xca4c, 0x6, 0x2, 0x400, 0x0, 0x3, 0x2, 0x4, 0x6, 0x1ff, 0x5, 0x10, 0x101, 0x3ff, 0x0, 0x0, 0xd6bc, 0xd7, 0x9d65, 0x9, 0x7, 0xfffffff8, 0x63c7, 0xc1, 0x3, 0x1000, 0x3, 0x6, 0x2, 0x0, 0x7, 0xffffffff, 0x0, 0x2, 0x2, 0x5819d20, 0xa, 0x7f, 0xd, 0x8, 0x80000000, 0x9, 0x2, 0x10000, 0x3, 0xab0, 0x8, 0x6, 0x5, 0xfffffffa, 0x7, 0x1, 0x1, 0x8, 0x6, 0x6, 0x5f651ba1, 0x4841d1ec, 0x50, 0x9, 0x8, 0x401, 0x2, 0x101, 0x2, 0x9, 0xfffff5ee, 0x200, 0xd2, 0x7, 0x13, 0xc21, 0x8, 0x0, 0xdd, 0x9, 0xa2, 0x5, 0xb, 0x0, 0x7a6, 0x5, 0x5, 0xc6, 0x8001, 0x200, 0x7ff, 0x4, 0x0, 0xe6, 0x8, 0x8000, 0x7, 0x10001, 0x6304, 0xaf, 0x401, 0x1, 0x800, 0x0, 0xf, 0x40, 0x5, 0x7fff, 0x2, 0x8, 0x400, 0x10, 0xa8d6, 0xd, 0xdb1, 0x9000000, 0xce9, 0x7, 0x0, 0x6, 0xfffffb70, 0x2, 0x6, 0x80000001, 0x4, 0x7, 0x40, 0x3, 0x4, 0xb, 0x27, 0x80000000, 0x80000000, 0x3, 0x0, 0x5, 0xfffffffc, 0x946, 0x9, 0x7, 0xc0000000, 0x0, 0x0, 0x3, 0xd35b, 0x26, 0xa2, 0x7, 0x1, 0x2, 0x2, 0x100, 0x4, 0x800, 0x2, 0x735b9cfc, 0x7ff, 0x200, 0x1, 0x3000, 0x6, 0x9, 0x4752, 0x6, 0x9, 0x4, 0x2ab3, 0xb63aeed, 0xa8, 0x5, 0x5, 0x34, 0x3, 0x400, 0x0, 0x1a0, 0x3, 0x2, 0x7fffffff, 0x80000000, 0x9, 0x0, 0x3, 0xdba, 0xb0fa, 0x9, 0x100, 0x5, 0x4, 0xfffff9f6, 0x0, 0xcf, 0x3, 0xfffffff7, 0xdb, 0x7, 0x2, 0x8, 0x40, 0x10001, 0x5, 0x8, 0x7, 0xa, 0x4, 0x6, 0x8, 0x5, 0xfc, 0x0, 0xfffffffc, 0x6, 0xe0, 0x84, 0x3, 0x9, 0x4, 0x5, 0x5, 0x6b14, 0xb, 0x8, 0x0, 0x8a, 0x6, 0x200, 0x881, 0x3, 0x7, 0x0, 0x6, 0xfffffffa, 0x0, 0xfffffffc, 0x80000000, 0x7, 0x2, 0xf2, 0x0, 0x5, 0x4, 0xc, 0x200, 0xfffffffd, 0x2c8, 0x7, 0x1, 0x8, 0x1, 0x57, 0x3, 0x3, 0x6, 0x0, 0x20000000, 0x9, 0x7f, 0x3, 0x1, 0x3, 0x80000001, 0x10, 0x1000, 0xddaa, 0x4, 0x3, 0xf, 0x2, 0x8, 0x4, 0x2, 0x4, 0x6, 0xa58, 0x14, 0x10001, 0x8, 0x0, 0x6ca, 0x2, 0x5, 0x7, 0x42, 0x81, 0x6, 0x8, 0xf53, 0xc57c, 0xff, 0xd97, 0x6, 0x2, 0x1, 0x5, 0xff, 0x6822, 0x3, 0xd, 0xa000000, 0x8, 0x3, 0x8, 0x8, 0x5, 0x401, 0xb6c4, 0x200, 0x2, 0xfff, 0xfffffff9, 0x800, 0x59b2, 0x4, 0xad, 0x2, 0xfffffff8, 0xd6b, 0x0, 0x4, 0x8, 0x4e9, 0x1, 0x6, 0x9, 0x401, 0x7, 0x9, 0x51c, 0x2d, 0x401, 0x7, 0xfffffffe, 0x8, 0xe, 0x81, 0xec4, 0x3, 0x9, 0x1, 0x10001, 0x0, 0xfffffffa, 0x5, 0x3, 0xfffff801, 0x2, 0x6, 0x3, 0x80, 0x0, 0x1d, 0x6, 0x4, 0x6, 0x0, 0x4, 0x4e, 0x6, 0x6, 0x9, 0x8a7, 0x1, 0x7, 0x0, 0x9, 0x9943, 0x1000, 0x7, 0x1, 0x80, 0x7, 0x2, 0x4, 0x4, 0x1, 0xff, 0x1de6, 0xb, 0x1ff, 0x384f439f, 0x10001, 0x0, 0xff6a, 0xa, 0x0, 0x4, 0x8001, 0x86, 0x7, 0x1, 0x0, 0x1, 0x9, 0x4, 0xdbe, 0x7, 0xa, 0x6, 0x7ff, 0x3, 0x7, 0x3, 0x1ff, 0x2, 0x0, 0xffffffff, 0x2, 0xd, 0x0, 0x609, 0x844e, 0x5, 0x10000, 0x3, 0x941, 0xffffff81, 0x2, 0xfa, 0xeb5b, 0x9, 0x5, 0x0, 0xfffffffc, 0x9, 0x10001, 0x5, 0xcbd, 0x7, 0xe92, 0xfffffeff, 0x7f, 0x94a, 0x5, 0x40, 0x3ce, 0xfffffffb, 0xb95, 0x1, 0x8, 0x7, 0x80, 0x7, 0xc, 0x8, 0xff, 0x9, 0xffff419c, 0x100, 0x7, 0xb, 0x610, 0x0, 0x7, 0x200, 0x7, 0x5, 0xb, 0x8, 0x5, 0x400, 0xfff, 0xaf06, 0xfff, 0xe5a5, 0xfff, 0x4, 0x6, 0xfa52, 0x8, 0x8, 0xfffffffa, 0x6d693a9f, 0x0, 0x295, 0x101, 0x9, 0x4, 0x9, 0x6, 0x9, 0x10000, 0x422a8c55, 0x1, 0x3, 0x2, 0x8, 0x9, 0x2, 0x400, 0x4, 0x2, 0xf7bb, 0x2, 0x0, 0xc82, 0x9, 0x2400, 0xa83, 0x3, 0x1c, 0x5, 0x9, 0xa1, 0x0, 0x23, 0x80, 0x6, 0x81, 0x800, 0x3, 0x1ff, 0x6, 0x1000000, 0x80000001, 0x8, 0x74ad, 0x8853, 0xcf, 0x1, 0x8, 0xffffffb8, 0x5, 0x40, 0x2, 0x9, 0x4, 0x9, 0x5, 0x5, 0x3, 0x8, 0xfffffffb, 0x8, 0x0, 0x0, 0x2, 0x1, 0xfffffff7, 0xc8, 0x0, 0x0, 0x7fff, 0x6, 0x2, 0x9, 0x7fff, 0x7, 0x3, 0x6, 0x8, 0x8000, 0x1, 0x2, 0x7, 0x401, 0x10, 0xfffffff5, 0x6, 0x6, 0x1, 0x8000, 0x0, 0x19b3, 0x3ff, 0x9, 0x2, 0x8, 0x4, 0x5, 0xfffffc00, 0x80000001, 0x1, 0x6, 0x6, 0x9, 0x0, 0x2, 0x7f, 0xcbe, 0x7, 0x6e, 0xe5f7, 0x0, 0x6, 0x80000000, 0x3, 0xe, 0x39f8, 0x5, 0x5, 0xdb, 0x2, 0x8, 0x100, 0x7, 0x1, 0x7fffffff, 0x6, 0x3, 0x5, 0xd1a, 0xfffffffd, 0x7, 0x8, 0x10000, 0x7, 0xffff8001, 0x8, 0x8afb, 0x100, 0x5, 0xbb9, 0x0, 0x1, 0xd57, 0x6f8c, 0x7, 0xd, 0x9, 0x9, 0xe, 0x6, 0x6, 0x0, 0xfffffff9, 0x4, 0x8, 0xfffffffc, 0xff, 0x5, 0x4, 0x0, 0x1000, 0xffffffff, 0x5, 0xffffa95d, 0x401, 0x3, 0x7, 0x7, 0x7, 0x66, 0x3, 0x7, 0x9, 0xffffffff, 0xd, 0x800, 0x0, 0xc, 0x1, 0xff, 0xffffffff, 0x6, 0xe, 0xa1a8, 0x200, 0x9, 0x6, 0x5ccefcf7, 0xeb, 0x2, 0x9, 0x2, 0x3, 0x9, 0x0, 0x8f8, 0x4, 0xffffffff, 0xb, 0x36b1, 0x0, 0xff, 0x200, 0xb, 0x80000000, 0x6, 0x8001, 0x3, 0x6d, 0x2e, 0x4, 0x4, 0xf, 0x6, 0x2, 0xd6, 0x2, 0xc, 0x2, 0x9, 0x4, 0x0, 0x6, 0x1, 0xfffffe00, 0x9, 0x9, 0x5, 0x5, 0x80000001, 0x8, 0x6, 0x1, 0x400, 0x7, 0x1, 0x2, 0x2, 0x5, 0x0, 0x638, 0x3, 0x6, 0x4, 0xb00, 0x0, 0x8, 0x6, 0x5, 0x8, 0x5, 0xa8a9, 0x5, 0x8, 0xffffffff, 0x3ff, 0x4, 0x9, 0xcd7d, 0xdc, 0x7, 0x10, 0x0, 0xfffffffb, 0x6, 0x411e, 0xa, 0x4, 0x4, 0x7, 0x6, 0x7, 0x7, 0x1, 0x709, 0x7, 0x2, 0x9, 0xfffffffd, 0xe, 0x8, 0x9, 0x2, 0x1c4, 0x1, 0x40000000, 0x5, 0x2, 0x6, 0xc1, 0x0, 0xfffffffc, 0xfff, 0x46e7, 0x2, 0x9, 0x7fff, 0x5, 0xa03, 0x9, 0x6ed, 0x3, 0x0, 0x0, 0x44179523, 0xce, 0x7, 0x8001, 0x29, 0x101, 0x95, 0x9, 0x9, 0x6, 0x80, 0x9080, 0x3b, 0x410, 0x7, 0x6, 0x885, 0x2800, 0x8, 0x3ce2, 0x1, 0xc, 0x1, 0x5, 0x5, 0x8000, 0x0, 0x5, 0x4, 0x40, 0x6f, 0x3, 0x5, 0x5, 0x6, 0x1, 0x1, 0x10001, 0xfffffff7, 0x7fffffff, 0x0, 0x0, 0x7, 0x10000, 0x8, 0xfff, 0x0, 0x2, 0x0, 0x0, 0x6, 0x7, 0x5, 0xa4b7, 0x0, 0x200, 0xdf6, 0x8, 0x0, 0xfffffffd, 0xb, 0x100, 0x7fffffff, 0x4, 0x7f, 0x5, 0x6, 0x2, 0x6, 0x63, 0x5, 0x1, 0x61155440, 0x9, 0x0, 0x0, 0x5, 0x81, 0x8, 0x0, 0x2, 0x954, 0x6, 0x200, 0x7fffffff, 0x2, 0x7, 0x2, 0x4, 0xc, 0x6, 0x0, 0xfff, 0x8, 0x8, 0x800, 0x6, 0x8, 0x6, 0x83, 0x3, 0x6, 0xfffffff7, 0x1, 0x9, 0x2, 0x8, 0x0, 0x1, 0x0, 0x3, 0x40, 0xb1, 0x4, 0x1, 0x8, 0x7ff, 0x7, 0x1000, 0x8, 0x6, 0x5, 0x44, 0x8, 0x3, 0x80, 0x7, 0x7, 0x1, 0x997d, 0x1, 0x2, 0x9, 0x0, 0x81, 0xb, 0x2d9, 0x3, 0x0, 0x200, 0xfffff2ce, 0x1, 0x81, 0x6, 0x4, 0xc, 0x1, 0x6, 0x1, 0x0, 0x4, 0x5d7, 0x2, 0x2, 0xffffffff, 0xfffffff8, 0x8, 0x3, 0x7, 0x2, 0x9, 0xfffffc00, 0x3ff, 0x8, 0x8, 0x6, 0x5, 0x6, 0xa95, 0x0, 0x40, 0x5, 0x9, 0x1, 0x0, 0x5, 0x2, 0xffff0000, 0x7fffffff, 0xff, 0xdd1, 0x3ff, 0x8, 0x7, 0x100, 0x901, 0x8, 0x831, 0x6, 0x78, 0x2, 0x2, 0xffffffff, 0x8, 0x7, 0x6, 0x7403, 0x7, 0x9, 0x0, 0x1, 0x8, 0x7, 0xfe6, 0x3ff, 0x0, 0x4, 0x8, 0x7, 0x1495, 0xfffffffe, 0x2, 0x8, 0x1, 0xf88e, 0x0, 0x8, 0x5, 0x7fffffff, 0x5, 0xf, 0x2, 0x8001, 0xe, 0x200, 0xf4, 0xfffffeff, 0x460, 0x777, 0x1, 0x2, 0x3, 0x2, 0x3, 0x52b8, 0x0, 0x7f, 0xa6, 0x80000001, 0x401, 0x6, 0x7fffffff, 0x9, 0x6f44, 0x618, 0x110a, 0x5, 0x6, 0x1, 0x1, 0x1ff, 0x6, 0x7, 0x1a, 0x7f000000, 0x3, 0x10001, 0x7, 0x1, 0x8, 0x5, 0x2, 0xffffad7b, 0x2, 0x80000001, 0x2000000, 0x7f, 0x5f, 0x5, 0x3, 0x5, 0x5, 0xfffff001, 0xe, 0x68e, 0x1bf4dce2, 0xfffffffd, 0xffff494a, 0xea, 0x6, 0x80, 0x4, 0x3, 0x0, 0x0, 0x0, 0xdece, 0x8, 0x4, 0x6, 0x40, 0x0, 0x7f, 0x4, 0xff, 0x4, 0x80000000, 0xffffff5f, 0x3, 0x8, 0xdf3, 0x9, 0x0, 0x6, 0x346, 0x100, 0x40, 0x400, 0x7ff, 0x3, 0x101, 0x4000000, 0x7fffffff, 0x1000, 0x9, 0x1, 0xfffffff7, 0x5, 0xec5, 0xb, 0x3, 0x0, 0x3088, 0x3ff, 0x101, 0x7, 0x7, 0x1, 0x5d7, 0x4d, 0x6, 0x8, 0xfffffeff, 0x4, 0x1000, 0x7ff, 0x6, 0x2, 0x4, 0x400, 0xe4, 0x2, 0x0, 0xe0, 0x8000, 0x6, 0x7f, 0x8, 0x7, 0xffffffff, 0x1ff, 0x4187f352, 0xea84, 0x9, 0x6, 0x6688, 0x2, 0x80000000, 0x6, 0x322780, 0x4, 0x1ff, 0xfffffffe, 0x9, 0x10001, 0x0, 0x8, 0x70bf98ae, 0x4, 0x3d5, 0x2, 0x2, 0x5, 0x3ff, 0x3, 0x2, 0x3, 0x1, 0x5, 0xffffffff, 0x5, 0x2, 0xfffffff9, 0x6, 0x7fff, 0x401, 0x1, 0x4, 0x6, 0x2, 0x80, 0xffff7fff, 0x1, 0x0, 0x2, 0x9, 0xffff0000, 0x5, 0x0, 0x886, 0x9e4b, 0x1, 0x2d84, 0x5, 0x7, 0x6, 0x4, 0x200, 0x5, 0x1ff, 0xe, 0x7, 0xfffffff8, 0x1ff, 0x3, 0x0, 0x1ff, 0x5, 0x401, 0x0, 0x8, 0x1, 0xffffffff, 0x8, 0x8, 0xff, 0x1, 0x7, 0x7fff, 0x6d0f, 0x2, 0x4, 0x8, 0xf, 0x8, 0x5, 0x8, 0xc, 0xd1, 0x10001, 0x8, 0x3, 0xd4ff, 0x0, 0x200, 0x72, 0x0, 0x4, 0x6, 0xd, 0x0, 0x6, 0x0, 0x3ff, 0x2, 0x101, 0xffffffff, 0x800, 0x9, 0x1, 0x8d, 0x9, 0x9, 0x6, 0x3, 0x2, 0xe, 0x6, 0xdc1, 0x9, 0x3, 0xfffffffc, 0x80, 0x2, 0x5, 0x7, 0x10000, 0x100, 0x1, 0x4, 0x5, 0x7fff, 0x5, 0xa72d, 0xffffd23b, 0x7, 0xfffffff8, 0x7, 0xc7cb, 0xff, 0x401, 0x3, 0x9, 0x6, 0x0, 0x3ff, 0x80000001, 0x7, 0x2, 0x2, 0x2, 0x10000, 0x9, 0x2, 0x8, 0x9, 0x5, 0x39a, 0x64, 0x3, 0xfff, 0xb81, 0x8000, 0x7, 0xc133, 0xfffffffe, 0x7, 0x5, 0x2, 0x0, 0x6, 0x400, 0x9, 0xb, 0x0, 0x8000, 0x3, 0x10001, 0x1, 0x4, 0x3, 0x7f, 0x8, 0x1370, 0xf, 0xd79c, 0x0, 0x200, 0x8, 0xff, 0x9, 0x8, 0x16, 0x7, 0x6, 0xf7, 0x550, 0x40, 0x2, 0x100, 0xf, 0x0, 0x3, 0x4, 0x8, 0x8001, 0x0, 0x1, 0x9, 0xc, 0x1, 0xc971, 0x0, 0x70, 0x6, 0xff, 0xec6, 0x1ff, 0xff, 0x10001, 0x2bd0, 0x5, 0x4, 0x5, 0x1ff, 0x7, 0x7, 0x100, 0xf51, 0x5, 0x5, 0x3, 0x5, 0x2, 0xe6, 0x0, 0x8, 0x10, 0x101, 0x218b, 0xbe, 0x504e, 0x1, 0x401, 0x3, 0x80000000, 0x6, 0x7, 0x4e1, 0x359, 0x101, 0x1, 0x1, 0x9, 0x9, 0x3ff, 0x4, 0x3fffc, 0x4, 0x20000, 0x3, 0xc, 0x80000000, 0x3, 0x0, 0x9, 0x8, 0xd2, 0x8, 0xadd5, 0xca73, 0xffff, 0x3, 0x6, 0x0, 0x1, 0xffffffff, 0xe8, 0x800, 0x0, 0x10, 0x7, 0x5, 0x10, 0x7, 0x5, 0x0, 0x8001, 0x0, 0x5, 0xfffffff7, 0x9caf, 0x8001, 0x7f, 0x27, 0xdc615a7, 0x3, 0x8, 0x2, 0xe477, 0x8, 0x6, 0x898e, 0x1, 0x3, 0x2, 0x2e, 0x8000, 0x101, 0x0, 0x2, 0x8, 0x2, 0x8000, 0x0, 0xf, 0x7fffffff, 0x89, 0xd, 0x362, 0x401, 0x0, 0x10, 0x9, 0x31, 0x8, 0x7ff, 0x8, 0x401, 0x62, 0xffc00000, 0x3, 0x9, 0x5, 0x6, 0x9, 0x0, 0x8, 0x8, 0x101, 0x7f, 0x7, 0x1, 0x200, 0x0, 0x6, 0x5, 0x1, 0x5, 0x7, 0x55958a0, 0x4, 0x7, 0x2, 0x8001, 0x4, 0x7, 0xc, 0x7fffffff, 0x5, 0x1, 0x4542e6b8, 0x6, 0x7fff, 0x0, 0x8, 0x2, 0x6, 0x3ff, 0xa, 0x3, 0x80, 0x7, 0xfff, 0x8, 0x4, 0xb27, 0x8000, 0xffffdf47, 0x1, 0x80000000, 0x10000, 0x8, 0x9ef8, 0x4, 0x3, 0x400000, 0x9, 0x5, 0x9, 0x5, 0x8, 0x0, 0xe596, 0x80000000, 0x6, 0x8, 0x7fffffff, 0x1, 0x101, 0xfffffffe, 0x6, 0x3, 0xcc4, 0x7ff, 0x7fff, 0x6, 0x8001, 0x1ff, 0xc, 0x80000000, 0xb, 0x1e, 0x1, 0xc, 0xf, 0xf9, 0x2, 0x6, 0x5, 0x3, 0x1dfca153, 0xe0000000, 0x2400, 0x9, 0x2, 0x0, 0xbeef, 0xa, 0x101, 0x40, 0x8, 0x7, 0x5, 0xfffffffa, 0x3f5, 0x516, 0x6, 0x9, 0x3, 0x0, 0x2, 0x1, 0x4, 0x5, 0x8, 0x1, 0xfffffff7, 0xff, 0x4, 0x2, 0x8, 0x7fff, 0xbace, 0xfc, 0x6, 0x2, 0x5, 0xffff, 0x4, 0x7, 0x1ff, 0x7f, 0x1, 0x81, 0x401, 0x3, 0x3, 0x3, 0x1, 0x2, 0x7d8, 0x8, 0x2, 0x5, 0x3, 0x6, 0x5, 0x7, 0x1, 0xc000000, 0x2, 0x5, 0x4, 0x8, 0xfffffffa, 0x3, 0x7, 0x0, 0x9, 0x800, 0x2, 0xf8000000, 0x5, 0x2181, 0x4c, 0x9, 0x2, 0x4, 0x6, 0x80000000, 0x1, 0x1, 0x81e9, 0x200, 0x7be, 0x8000, 0x2d4, 0xfffffffc, 0x6ad, 0xc84, 0xff, 0x1, 0x3ff, 0x1, 0x8, 0x6a, 0x10000, 0x9, 0x10, 0x1, 0x2, 0x2, 0xfff, 0x4, 0xfffff263, 0x4, 0x58f3314c, 0x6, 0x5, 0x7, 0xfff, 0x7ac, 0x78, 0x37e4, 0x8, 0xbaf8, 0x336de1f5, 0x1, 0x33fea140, 0x7, 0x3, 0x7, 0x3, 0x8, 0x30a, 0x3, 0x2, 0x3, 0x0, 0x9, 0x3, 0x7, 0x7ff, 0x4, 0x7, 0x6, 0x0, 0x6, 0x10000, 0x0, 0x8, 0x6, 0x4, 0x4, 0x2b3, 0x401, 0x3ff, 0x6, 0x6, 0x7cce, 0xa38, 0x2, 0x1, 0x2, 0xfffffff8, 0x5, 0x3, 0x96, 0x1, 0x1, 0x711c, 0x9, 0x1, 0x9cc, 0x8, 0x9692, 0x8, 0xef4, 0x6, 0x1, 0x3ff, 0x1, 0x1, 0x0, 0x1, 0x5, 0x0, 0x5, 0x798, 0xf, 0x0, 0x35, 0x9, 0xff, 0xabd, 0x0, 0x3, 0x6, 0x3, 0x7, 0x8, 0x7, 0x7, 0x10, 0x0, 0x4, 0xcaa, 0x80, 0xfffffc00, 0x800, 0x1, 0x3, 0x5, 0x2, 0x6, 0x3, 0xbcf, 0xfffffffe, 0x3, 0x7ff, 0x9, 0x3, 0x4, 0x5, 0x4, 0xfe7, 0xff, 0x8, 0x80, 0x3, 0x0, 0xf2, 0x3, 0x8, 0xfffffffb, 0x1, 0x9, 0xfffffc01, 0x9aa, 0x4fd, 0x7, 0x8000, 0x6, 0x10, 0x81, 0x1, 0x0, 0x1, 0xfff, 0x525e, 0x7fff, 0xb329, 0x3, 0x154, 0x5, 0x8, 0x1, 0xd347, 0x1796, 0xe, 0x5, 0x3, 0xe5ef, 0x7, 0xfff, 0x6, 0x7df5, 0x6d0, 0x2, 0x8, 0xb72f, 0x401, 0x9a05, 0xe, 0x1f82, 0x7, 0x9, 0x2, 0x80000001, 0x5, 0x7ead, 0x8000, 0xbec6, 0x3, 0x8, 0x7fff, 0x7d, 0x7, 0x137, 0x4, 0xdae9, 0xed, 0xffffff49, 0x7, 0x7, 0xffffffb0, 0x1, 0x9, 0x846e, 0x3, 0x5, 0x7ff, 0xffffe5d5, 0x2, 0x4, 0x0, 0x1, 0xffff, 0x6, 0x75, 0x5, 0x7ff, 0x8, 0xc, 0x1, 0x9, 0xfffffff8, 0x0, 0x0, 0x6, 0x4, 0x2, 0x5, 0xc79, 0x2, 0x101, 0x4, 0x80000000, 0x0, 0x9, 0x3, 0x800, 0x4ebd, 0xe, 0x0, 0x7, 0x4, 0x3c29, 0xea, 0x7f, 0x7fff, 0x2, 0x0, 0xc2, 0x5, 0xffff, 0x42, 0x9, 0xfe0, 0xf, 0x2, 0x7f, 0x3, 0x69b4, 0x5, 0x2, 0x0, 0x8, 0xe, 0x9, 0x8, 0x0, 0x2, 0x1, 0x2, 0x4, 0x6, 0x1, 0x9, 0x10, 0x6, 0x3, 0x7, 0x100, 0x6, 0x100, 0xedbe, 0x2, 0x7fffffff, 0x4, 0xf5d, 0x5, 0x8, 0x6, 0xffff, 0x8, 0x2, 0x3, 0xffff, 0x81, 0x5, 0x9, 0x80000001, 0x7, 0x400, 0x7a, 0x0, 0xffffffff, 0x10001, 0x7, 0xec33, 0x2, 0xeda, 0x5, 0xc, 0x17, 0x0, 0x7, 0x8, 0x7fffffff, 0xf, 0x37c6, 0xc, 0x1, 0xfa4, 0x9, 0x3, 0x28246d4e, 0x2, 0x6, 0x0, 0x6, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4, 0x7, 0x9, 0x7, 0xfff, 0x1cf, 0x100, 0x101, 0x200, 0x2, 0x401, 0x6893, 0x9, 0x3, 0x5, 0x80, 0x644, 0x8b, 0x401, 0x9, 0x1, 0x9, 0x7, 0x7, 0x1, 0xb, 0x6, 0x2, 0x101, 0x3, 0xfffffff8, 0x7, 0xc4, 0x8000, 0x6873, 0x83, 0x5, 0x242, 0x401, 0xc2, 0x180000, 0x2, 0x7, 0x8, 0xfff, 0x0, 0xfffffffb, 0x3, 0x80, 0x7fffffff, 0x5, 0x8, 0x800, 0x5, 0x4, 0xc70, 0x4, 0x40, 0x2, 0x2, 0x2, 0x6, 0x6, 0x1, 0x7, 0x5, 0x6, 0x540bc9fe, 0x7, 0x8000, 0x8001, 0x7fd2f51, 0x4, 0x4, 0xfffffff1, 0x0, 0x5, 0x1000, 0x40, 0xfff, 0x4, 0x8000, 0xfc7, 0x400, 0x5, 0x8226, 0x4, 0xe, 0x4, 0x203c, 0x5, 0xa1a6, 0xd1d2, 0x5, 0x8000, 0x2295, 0x1, 0x1, 0x4, 0x81, 0x3, 0x8, 0x7, 0x9, 0xfff, 0x9, 0x5, 0x2, 0x4, 0x3, 0x7, 0x3, 0x8, 0x7ff, 0x10, 0x80000001, 0x336, 0x10, 0x2af5, 0x8, 0xa6, 0x2, 0x1, 0x1, 0x2b6, 0x1, 0x7, 0x1, 0x10000, 0x2, 0x1000, 0x1, 0x401, 0x6, 0x80000000, 0x1, 0x5, 0x8, 0x9, 0x4, 0xd, 0x10001, 0x0, 0x3, 0x3, 0x0, 0xffffffff, 0x8, 0x7, 0x3, 0x6, 0x2, 0x6, 0x100, 0x577, 0x0, 0x6, 0x7, 0x3, 0x6c6, 0x5, 0xffff, 0x8, 0xdb36, 0x6, 0x1, 0x0, 0x8, 0xc6, 0x1000, 0x9, 0x100000, 0x8, 0x54b, 0x9, 0x8, 0x7, 0x1, 0xfff, 0x2, 0xd, 0xf559, 0x3, 0x7, 0x5, 0x8, 0x5, 0x74, 0x10000000, 0x8000, 0x7, 0xc000000, 0x2, 0xe, 0x4, 0x9, 0x8, 0x0, 0x1ff, 0xe, 0x7f, 0xe4, 0x800, 0x8, 0x9, 0xffffa30c, 0xfffffff9, 0x8001, 0x5, 0x1, 0x6, 0xf, 0x4, 0x12000000, 0x0, 0x7, 0x2, 0x7, 0x3, 0x1, 0x5, 0x80000000, 0x5, 0x9, 0x8d, 0x1, 0x89, 0x2, 0xac5, 0xf5, 0x2, 0x2, 0x2, 0xb, 0x9, 0x4, 0x200, 0x5, 0x3, 0x5, 0x7fffffff, 0x100, 0xfffffffb, 0x0, 0x9, 0x1, 0xa0000, 0x8000000, 0x2, 0x3, 0x6, 0x7, 0x1, 0x7fffffff, 0x7, 0x7ff, 0x5, 0x9a8, 0x1, 0x4e, 0x3, 0x8, 0x4d3eb520, 0x3, 0x4, 0x80000001, 0x5, 0x9, 0x2, 0xc, 0x3, 0x0, 0x5e, 0x1, 0x81, 0x6, 0x6, 0x5, 0x8001, 0x6, 0xcd06, 0xc, 0x3, 0x3fad22e8, 0xfffffffa, 0x2, 0x1e981ef8, 0x0, 0x7fff, 0x2, 0x79b2, 0x1000, 0x8000, 0x4, 0x2, 0x0, 0x1, 0x2, 0x8, 0xb, 0x0, 0x8, 0x86, 0x7, 0xfffffff9, 0x8, 0x6, 0x401, 0x1, 0x7fff, 0x7fffffff, 0x6, 0x0, 0x5, 0x7, 0xc, 0x6, 0x6, 0x8, 0x4, 0xb, 0x80000000, 0x4f, 0xffff8001, 0x9, 0x1, 0xe946, 0xa, 0x5, 0x5, 0x1, 0x2, 0xa6, 0x8, 0xd9, 0x9, 0x10000, 0x6, 0x1d5, 0x2, 0x1, 0x1, 0x1, 0x5, 0x6059d639, 0x7, 0xa2, 0x5, 0x80000001, 0x81, 0x101, 0xf, 0x6, 0x200, 0x5, 0x7, 0xc0000000, 0x7ff, 0x9b1, 0x2, 0xbdc2, 0xfffffffc, 0x1, 0xb, 0x8, 0x8, 0x2, 0x5, 0x10001, 0x1, 0x0, 0x0, 0x3, 0x3, 0x9, 0x0, 0x35b, 0x4, 0x2, 0x0, 0x47, 0x8, 0xc, 0x2, 0x6, 0x0, 0x7, 0x4c3, 0x1000, 0x7, 0x6, 0x3, 0x8, 0x80000001, 0xf, 0x2, 0x401, 0x20000000, 0x100, 0x2, 0x1, 0xca, 0x7, 0x5, 0x2, 0x0, 0x0, 0x1, 0x5fb77040, 0x81, 0x6, 0x6, 0x80000000, 0xc, 0x6, 0xfffffff9, 0x6, 0x5a2b9d10, 0x1, 0x2, 0x4, 0x1ff, 0x1ff, 0x7ff, 0x7fff, 0x39ea, 0xa3e6, 0x4, 0x8001, 0x1ff, 0x6, 0xffff, 0xa57, 0x8, 0x7fffffff, 0x7, 0x2, 0x2, 0x80000000, 0x3ff, 0xfffff9dc, 0x5, 0x1, 0x8, 0x7, 0x3, 0x10, 0x8, 0x2, 0x9, 0x9, 0x3fc0000, 0x8, 0x7, 0x0, 0x5, 0x9, 0x6, 0x75, 0x1, 0x9, 0x0, 0x6, 0x7, 0x8, 0xffff, 0x1, 0x98c, 0x9, 0x9, 0x5, 0xca3, 0xa5e, 0x0, 0x1, 0xa, 0x5, 0x70aacbcb, 0xffff, 0x2, 0x5, 0x1, 0x7, 0x8, 0x3, 0xc0, 0x8001, 0x8, 0x100, 0x10000, 0x8, 0x3ff, 0x9, 0x4, 0x2, 0x100, 0x41, 0x5, 0x4, 0x1000, 0x3, 0x9, 0xd, 0xd, 0xd, 0x1, 0x400, 0xfff, 0x8, 0x1, 0x3, 0x4, 0x80000000, 0x9, 0x9, 0x4, 0x1, 0x7, 0x8001, 0x8, 0x4, 0x8951, 0x100, 0x3ff, 0x2, 0x5, 0x0, 0x2, 0x7, 0xfffffff9, 0x800, 0x0, 0x800, 0xe, 0x9, 0x11e, 0x8f4, 0x2, 0x80005, 0x2, 0x4, 0xbf78, 0xc29, 0x443b12b0, 0x5, 0x3, 0x18, 0xa8f, 0x1, 0x0, 0x8, 0x2, 0x3, 0x2, 0x80, 0x2, 0xf54, 0xffffffff, 0x800, 0x8, 0x7, 0x4, 0xd, 0xff, 0x8, 0x3, 0x0, 0x200, 0x5cc2cfc8, 0xb88f, 0x0, 0x96b, 0x7, 0xa0000000, 0x3, 0xdd, 0x5, 0x1000, 0x2, 0x2, 0x5, 0x0, 0x4, 0x1, 0x6, 0x5, 0xc, 0x9, 0x100, 0x9, 0x4, 0x9, 0x468, 0x9, 0x800, 0x7, 0xc3f2, 0xb, 0x1000, 0x3, 0xe1, 0x6, 0xf, 0x81, 0xffffff01, 0x400, 0x3ff, 0xe3d9, 0x7ff, 0x2, 0x1000, 0x7fff, 0x9, 0x5, 0x81, 0x8, 0x1a87, 0x3, 0x5c97, 0x9, 0xffffffff, 0x0, 0x400, 0xcd32, 0x10000, 0xfffffffa, 0x5, 0x10000, 0x9, 0x8001, 0x6, 0x2, 0x9, 0x7, 0x2, 0x7, 0x8b, 0x4, 0xff, 0x3, 0x2, 0xf5, 0x24bb, 0x5, 0x70e, 0xc, 0x6fd4, 0x1b, 0x80, 0x2400, 0x5, 0x7, 0x3, 0x4fe6, 0x2b65, 0x8, 0xd, 0x3ff, 0x0, 0x6, 0x9, 0x8, 0x7, 0x6, 0x8, 0x145635a4, 0x2a5, 0xfffffffc, 0x8b83, 0x1, 0x5, 0x7d, 0x8, 0x100, 0xe7, 0x2, 0x7d6d, 0x9, 0x6, 0x20000000, 0x80000000, 0x1, 0xfffff000, 0x5, 0x10000, 0x8, 0x0, 0x3, 0x6, 0x7, 0x1, 0x4, 0x6, 0xf2, 0x3, 0x1be200, 0x10000, 0x8, 0x2, 0x4, 0x16bc, 0x9, 0x2, 0x7, 0x59, 0x2, 0x12, 0xfffffff8, 0x6efa, 0xb, 0x5, 0x3, 0x0, 0x7, 0xfff, 0x9, 0x2, 0x7f, 0x4, 0x10f3, 0x80000000, 0x7fff, 0x8000, 0x8, 0xe, 0x3, 0x8001000, 0x4, 0xb28d, 0x4, 0x558, 0x2f01, 0x65, 0x2, 0x10000, 0x1, 0x6, 0x2, 0x400, 0x3, 0x99d0, 0x7, 0x4, 0x79, 0x1, 0x3ff, 0x5, 0x6, 0x47, 0x9, 0x7, 0x8, 0x7f, 0xcaf, 0x7, 0x3, 0xd75, 0x8, 0x4, 0x7, 0x253, 0xffffffff, 0xb3, 0x5, 0x6, 0x5, 0x81, 0x2, 0xfffffffe, 0x5, 0x3ff, 0xd, 0x1000, 0x3, 0x40, 0x4, 0x0, 0x8000, 0x0, 0x7fffffff, 0x1, 0x655, 0x7, 0x3, 0x2, 0x3, 0x10, 0xc9ca, 0x5, 0x0, 0x7, 0x0, 0x8, 0x8, 0x2, 0x8, 0x5, 0x6, 0x8, 0x2, 0x0, 0x8, 0x1, 0xe, 0x3, 0x2, 0xbf7, 0x8, 0xefa3, 0x4, 0x200, 0x0, 0x80000001, 0x5, 0x5, 0x5, 0x1, 0x9, 0x8, 0x4, 0xfffffff9, 0x5, 0x8, 0x5, 0x1, 0xfffffc00, 0x7, 0x0, 0x3, 0xc70, 0x4, 0x0, 0x1, 0x0, 0x47, 0xef, 0x4, 0x60000, 0xfffffff8, 0x9, 0x2, 0x2, 0x4e100000, 0xfff, 0x7ff, 0xffffb662, 0x101, 0x4e, 0x0, 0xf4, 0x521, 0x7, 0xa, 0x2, 0x4, 0x101, 0x9, 0x6, 0x6, 0x0, 0x3, 0x9, 0x400, 0x1, 0x3, 0x5, 0xb4, 0x31d, 0x0, 0x7fffffff, 0x23c, 0x8, 0x3, 0x3, 0x7, 0x8, 0x80, 0x87e2, 0x30, 0x4, 0xaa40, 0x7ff, 0x0, 0x4, 0x6, 0x6, 0x0, 0x7, 0x81, 0xd12, 0x5a6a, 0x6, 0x0, 0x7fffffff, 0x1, 0x2, 0x7f, 0x3ff, 0x8000, 0x40000000, 0x3, 0x0, 0x1, 0x2, 0x7, 0x92ca, 0x0, 0x10000, 0x7, 0xbbd, 0x7f, 0x0, 0x7, 0x9, 0xfffffffb, 0xffffbcc6, 0x2, 0x7abd, 0x3, 0x0, 0x5, 0x800, 0x6f1c, 0x0, 0x8, 0x8, 0x6, 0x80, 0x42d5, 0x800, 0xfff, 0x9, 0x3, 0x80000000, 0x1f2a, 0x203, 0x40, 0x7, 0x2, 0x0, 0x3, 0x394, 0x6, 0x8, 0x1, 0x3c0, 0x9, 0xd, 0x137, 0x10001, 0x61e9, 0x1, 0x1, 0x0, 0x5, 0x1, 0xffffff00, 0xb, 0x9, 0xfffffffb, 0x7, 0x200, 0x8000, 0x1b797940, 0xef39, 0x4, 0x73d5, 0x6, 0xfffffffd, 0x7, 0x40, 0x1, 0xa, 0x3, 0xff, 0x8bd, 0x2, 0x40, 0x1, 0x8, 0x9, 0x0, 0x3, 0x4, 0x3, 0x400, 0x7, 0xb4, 0x0, 0x7, 0x9, 0x3, 0x0, 0x4a, 0x2f, 0xc, 0x1, 0x8001, 0x8000, 0x0, 0x5, 0x9bd2, 0x7, 0x7, 0x8, 0xd9, 0x0, 0x6, 0x3ff, 0x4, 0xffff, 0x6, 0x3, 0x5, 0x8, 0x7, 0x8, 0xfffff2b8, 0x0, 0x5, 0x5, 0x4, 0xe, 0x5, 0x4, 0xfffffff3, 0x7, 0x7b, 0x4, 0x3, 0x6, 0x8, 0x3b1, 0xf, 0x2, 0x10000, 0x2, 0x0, 0xc0, 0x4, 0x80000000, 0x3, 0xfffffffa, 0xa655, 0x8, 0x3, 0x3, 0xaf, 0x0, 0xd62, 0x7, 0x1000, 0x6, 0x4, 0x0, 0xe9b, 0x10000, 0xf, 0x9, 0x10000, 0x80, 0x9, 0x8, 0x8, 0x1, 0x0, 0x8, 0xfffffff3, 0x1, 0x0, 0x2, 0xc5, 0x7, 0x4, 0x1, 0xc, 0x3, 0x9, 0x3, 0x8, 0x22b5, 0x80, 0x2, 0xff71, 0x9, 0x4fe, 0x9, 0x80000000, 0x0, 0x6, 0x7f, 0x2, 0x7, 0xf4, 0x6000000, 0x1000000, 0x8c, 0x1ff, 0xffffff7f, 0x0, 0x101, 0xd884, 0x7, 0x3, 0x9f1, 0x101, 0x0, 0x1, 0x3, 0x0, 0x73d, 0x10001, 0x1, 0xc8, 0x4, 0x5200, 0x4, 0xffffffff, 0x0, 0x3, 0x0, 0x7, 0x94ae, 0x5adc, 0x7fff, 0x0, 0x8000, 0x79b5, 0x70c, 0x3ff, 0x8001, 0x5, 0xd, 0x6, 0x800, 0x3ff, 0x1ff, 0xbbe5, 0x4, 0x0, 0x0, 0xe00, 0x93ec, 0x7, 0x1bf, 0x4, 0x10001, 0x2, 0x10000, 0xffff, 0x64, 0x9, 0xafac1f03, 0x7, 0x5, 0x1, 0x0, 0xfd, 0x8, 0x10, 0xffffffff, 0x9, 0xb, 0x26d59d99, 0x1, 0x7, 0x2, 0x8, 0x2, 0x7f, 0x6, 0x7, 0x9, 0xfff, 0x5, 0x6f, 0x3, 0x3, 0x4, 0x5, 0x9, 0x100, 0x80000001, 0xfffffff7, 0x1fe, 0x10000, 0x9, 0xe, 0xd, 0x401, 0x8, 0x7, 0x5, 0x2, 0xb2, 0x9, 0x1, 0xd, 0xed9, 0x6, 0x5, 0x7bd, 0x4, 0x6, 0x7, 0x7fffffff, 0x0, 0x7f, 0x3ff, 0x401, 0x9, 0x5, 0x7, 0x6, 0x5, 0x8d, 0x7, 0x7, 0x5, 0x1ff, 0x0, 0xdf182890, 0x8, 0x6, 0x7, 0x2c79, 0x5, 0x9, 0x7fff, 0x1, 0xe23, 0xf, 0x3, 0x401, 0x0, 0xe, 0x2, 0x4, 0xe, 0x9, 0x3, 0x7, 0x7ea, 0x5, 0x863, 0xd4, 0xa35, 0x0, 0x10000, 0x5, 0x5, 0xffff, 0xd49, 0x9bc5, 0x0, 0xc76, 0x13, 0x8, 0x7, 0x0, 0x7fffffff, 0x3, 0x4, 0x7fff, 0x5, 0x6, 0x7ff, 0x0, 0x40000, 0x8000, 0x9, 0x81, 0x0, 0x8, 0x0, 0xaf0, 0x0, 0xffffffff, 0x800, 0x0, 0xf, 0x7, 0x6, 0x9, 0x6, 0xc700, 0x35, 0xfffffbff, 0x8, 0x4, 0x0, 0x400000, 0x0, 0x7, 0x7, 0x6, 0x5, 0x6, 0x3, 0x4, 0x5, 0x5, 0x7, 0x5, 0x8, 0x0, 0x9, 0x1ff, 0x2634, 0x8, 0x80, 0x5, 0x1, 0x2, 0x7, 0x2, 0x5, 0x93e, 0x7, 0x6, 0xe, 0x38000, 0x100, 0x101, 0xef, 0x2, 0x10ae480, 0x800, 0xfffffff9, 0x0, 0x45ab, 0x2, 0xa62, 0x9b9e, 0x1, 0x4e9, 0x4, 0x3, 0x400, 0xfffffffc, 0x2, 0x2, 0x4, 0x1, 0x10001, 0xfffffff7, 0x5, 0x7fff, 0x7, 0xd8000000, 0x10001, 0x1, 0x80000001, 0x0, 0x0, 0x8000, 0x5, 0x8, 0x5, 0x1000, 0x81, 0xe, 0x8, 0x5a51b000, 0x2, 0xe838, 0x10, 0xffffffff, 0x200, 0x9, 0x81, 0x1ff, 0x2, 0x6, 0x10000, 0x1, 0x8, 0x3, 0xfffffe01, 0xb, 0xa3, 0xdea5, 0x344, 0x5, 0x149, 0x4, 0x7, 0x1, 0x80000000, 0x2, 0x247, 0x6, 0x9, 0x7fffffff, 0x3, 0x7, 0x81, 0x2, 0x10, 0x1000, 0x7fffffff, 0x932, 0x1, 0x10000, 0x10000, 0x4, 0x3, 0x7, 0x4, 0x5, 0x7d, 0x0, 0x0, 0x3, 0x9, 0xfffffff8, 0xf, 0x9, 0x4ff4, 0x7, 0x0, 0x800, 0x2, 0x9, 0x1, 0x8, 0xf4, 0x10000, 0x0, 0x5, 0xa, 0x400, 0x2, 0x6, 0xffffffff, 0x6, 0x7, 0x1, 0x0, 0xa98a, 0x8, 0x96, 0x0, 0x2, 0x9f, 0x10000, 0xc, 0x8, 0x1, 0xc, 0x6f8, 0x422, 0x910, 0x0, 0x8, 0x9, 0x5, 0x7, 0x2, 0x3, 0x8, 0x0, 0x5, 0x2, 0x81, 0x5, 0x5, 0x5, 0x10001, 0xffffffff, 0x5, 0xffff, 0xb, 0x0, 0x3, 0x9, 0x5, 0x2f0, 0x4, 0x8, 0xffffffc0, 0x100, 0x6, 0x0, 0x8, 0x0, 0x200, 0x0, 0x2, 0x80, 0x9, 0x4, 0x7fff, 0x800, 0x0, 0x7ff, 0xffff, 0x1, 0x8, 0x2, 0x1000, 0xa7, 0xb42, 0x7, 0x0, 0x0, 0x3f5fd751, 0x6, 0x7, 0x8, 0xb0, 0x0, 0x4, 0x9, 0x5, 0x10001, 0xb7, 0x5, 0x400, 0x9, 0x3a, 0x8, 0x4, 0x0, 0x6, 0x3, 0x8, 0xd990, 0x40, 0x6, 0x2, 0x8, 0x8, 0x81, 0xbd20, 0x6, 0x2, 0x5, 0x3, 0xffffffff, 0xffff0000, 0x38a3, 0x80000000, 0x1, 0x3, 0x3, 0x401, 0x7fffffff, 0x1, 0x6, 0x8, 0x8, 0x8000, 0x4, 0x9, 0x8, 0xe, 0xfff, 0x179, 0x0, 0x0, 0x1, 0xff, 0xea, 0x94f, 0xc, 0x9, 0x5, 0xa6, 0x8, 0x5, 0x5, 0x4, 0x1, 0x7e96, 0x5, 0x0, 0x9, 0x8001, 0x9, 0x6, 0xffff, 0x8, 0x6e9c6ca0, 0x94f, 0x6, 0x2, 0x4, 0x2, 0x3, 0x8cc, 0x9, 0xd, 0xfffff800, 0x8, 0x7, 0xffffff00, 0x5, 0xc, 0x7, 0x1, 0x3, 0x7, 0x100, 0xa3aa, 0x7, 0x5, 0x0, 0x2, 0x80000000, 0x5, 0x8, 0x7, 0x2, 0x7, 0xc, 0xfffffeff, 0x7, 0xfb6, 0xb04, 0x9, 0x0, 0x2, 0x6, 0x675, 0x6, 0x3, 0x2, 0x60, 0xfffffffb, 0xfffff839, 0x0, 0x100000, 0x6, 0x100, 0x0, 0x4570, 0xb1d, 0xfffff801, 0x5, 0x400, 0x3, 0x3, 0x9, 0x1000000, 0x7, 0xcec, 0x7, 0x3, 0x4, 0x7, 0x7, 0x10001, 0x101, 0x70, 0x5, 0x8000, 0x7, 0x8, 0x4, 0x13, 0xfffffffa, 0xd9020, 0x0, 0x9, 0x5cac, 0x80000000, 0xa, 0x189, 0x7, 0x7ff, 0x8, 0x9, 0x4, 0x7fff, 0xf9, 0x5, 0x8, 0x80000001, 0x8001, 0x80000001, 0x4, 0xfff, 0x7, 0x8, 0x80, 0x0, 0x9, 0x8001, 0x7, 0x8, 0x40, 0x3, 0xf59e000, 0x2, 0x4, 0x0, 0x5, 0x7ff, 0x0, 0x2, 0x4d84, 0xffffffff, 0x6, 0x8, 0x2, 0xef9a, 0x0, 0xfffffffb, 0xffff0000, 0x30000000, 0x1, 0x8, 0x800, 0x5, 0xffffffff, 0x3, 0x9f0, 0x3, 0x6, 0x7, 0x0, 0x4, 0x7f, 0x8, 0x10000, 0x0, 0x41428f5a, 0x5912, 0x3, 0xe, 0x4, 0x0, 0x9, 0x4, 0x5, 0x0, 0x3, 0x5, 0x9, 0xfffffff8, 0x9, 0x9, 0x6, 0x8, 0x5, 0x80, 0x1, 0x6, 0x5, 0x7, 0xc, 0x345, 0x7, 0x1, 0x81, 0xffffffff, 0x9, 0x6, 0x7f628002, 0x4, 0xffffffff, 0xd, 0x1, 0x81, 0x8, 0x2, 0x80000000, 0x6, 0x9, 0x80000000, 0x1, 0x5, 0x2, 0x67, 0x556, 0x1, 0x9, 0x3e, 0x10001, 0x6, 0x10001, 0x0, 0x60399ea0, 0xf8c7, 0x10001, 0x1ff, 0x5, 0x0, 0x1, 0x8, 0x9, 0x3, 0x176, 0x9, 0x3, 0x5, 0xffffffff, 0x9, 0x6, 0x67, 0x100, 0xf, 0x6, 0x4, 0x8, 0x0, 0xc00, 0x8000, 0x80000001, 0x80000001, 0x1, 0x8, 0x8, 0x7f, 0x2, 0x1000, 0x3, 0x1000, 0x400, 0x8, 0x3df, 0x1, 0xfffffff5, 0x5, 0x1000, 0xffffffee, 0x401, 0x7, 0x6, 0x8, 0x6, 0x0, 0x7fffffff, 0xfffff801, 0x1, 0x4, 0xc, 0x7fffffff, 0x2ca, 0x6, 0x6, 0x4, 0x1, 0x1, 0x5, 0x1, 0x69, 0x18, 0xfff, 0x2, 0x7, 0x400, 0x1, 0x10001, 0x2, 0xb, 0x3, 0x80, 0x0, 0x6, 0x40008, 0x0, 0xb3cf, 0x3ff, 0x5, 0xd, 0x52, 0x2, 0xfffff801, 0x7fffffff, 0x80000000, 0x80000000, 0x7, 0x7, 0x5, 0x1, 0x3, 0x4, 0x10001, 0x3, 0x1f6e, 0x3, 0x9, 0x5, 0x0, 0x0, 0x4, 0x4, 0x7, 0xdaa4, 0xfffffff8, 0x0, 0x5, 0x34b7, 0xffffffff, 0x4, 0xa, 0x0, 0xa6b0, 0x4, 0x4, 0xf5, 0x2, 0x7, 0x3, 0x80000000, 0x2, 0xe, 0x8, 0xfffffffb, 0x2, 0x40000000, 0x1000, 0xffffff05, 0x10b, 0x4, 0x1, 0x2, 0x3, 0xff, 0x6, 0x3, 0x3, 0x5, 0x7f, 0x0, 0x4, 0xfffffffc, 0x8, 0x8, 0x9, 0x3, 0xfffffff8, 0x1, 0x3, 0x2, 0x6, 0x200, 0x6b21, 0x5, 0xee, 0x2, 0x8, 0x800, 0xe, 0x1, 0x800, 0x401, 0x8, 0x2, 0x6, 0x7, 0x6, 0x5, 0x2, 0x80000000, 0xa9b4, 0xa, 0xa7, 0xfffffffe, 0x736, 0x2, 0x7, 0x95, 0x9, 0x0, 0x8, 0x9, 0x6, 0x6c90, 0x4, 0x3, 0x3, 0x3ff, 0x1, 0x1, 0x8d7, 0x4, 0x65400000, 0x5, 0xfffffffe, 0x9, 0x58b82e4c, 0x7, 0x9, 0x9, 0x8, 0x100, 0x80, 0x200, 0x8, 0x9, 0x2, 0x9, 0xda45, 0x8, 0x1, 0x7ff, 0x7f, 0xf, 0x9, 0xb, 0x80000001, 0x8000, 0x10, 0xffffffff, 0x2, 0x4, 0x1, 0x7, 0x8, 0x10001, 0x2, 0x0, 0x101, 0x3, 0x2, 0x3, 0x80, 0x5b, 0x2, 0xbf1a, 0x7, 0x81, 0x8, 0x1, 0xb228, 0x6, 0x101, 0x9, 0x6, 0x8e, 0x2, 0x6, 0x0, 0xcc79, 0x1, 0x9, 0x1, 0x8000, 0x2, 0x4, 0x3, 0x2f, 0x8, 0x2, 0x5df28ff8, 0x3a3, 0x3, 0xfffffffe, 0x0, 0xffff9fba, 0x5, 0x81, 0x7, 0x7, 0xd, 0xcbc9, 0x1, 0x9, 0x0, 0x5, 0x4e, 0x7, 0x3, 0x7, 0x401, 0x0, 0x6, 0x7, 0x8000, 0x0, 0x0, 0x7, 0x10000, 0x8001, 0x9, 0x2, 0x6, 0x6, 0x200, 0xc, 0x61c26f93, 0x7fff, 0x7f, 0x80000001, 0x6, 0x8, 0x3e, 0x866d, 0x1, 0x3ff, 0x0, 0x6, 0xe, 0x9, 0x5, 0x617, 0x0, 0xfffffffd, 0xb78a, 0x9e9c, 0x1, 0xddb, 0xc, 0x6, 0x7, 0x7, 0x0, 0x1ff, 0x1, 0x3, 0x1, 0x2, 0x5, 0x2, 0x6, 0xfffffffd, 0x1ff, 0x65, 0x4, 0x7, 0x3, 0xeab, 0xa, 0xa, 0x101, 0xc12d, 0x4b9, 0x80000001, 0x0, 0xe5ce, 0x3, 0x0, 0x7fffffff, 0x7fff, 0x9a, 0x5, 0x9b9e, 0xfd, 0x40, 0x84de, 0x6, 0x3, 0x4a58cd49, 0xe, 0xff, 0x7, 0x7fffffff, 0x9, 0x3, 0x1, 0xa1, 0x4, 0x22, 0x4, 0x4, 0x5, 0x711, 0xccf, 0xe5a, 0x7ff, 0x0, 0xa, 0x3, 0x24, 0x7, 0x9, 0x6, 0x4, 0xb, 0x80000000, 0x2, 0x200, 0xf, 0x5, 0x6, 0x240, 0xfc6, 0x6, 0x0, 0x7fffffff, 0x7fffffff, 0x3, 0x6, 0x6201, 0x7, 0x7, 0x4b, 0x3, 0x8, 0x0, 0xfff, 0x2800, 0xffff, 0x7ff, 0x8, 0x1, 0xffff, 0x7, 0x2, 0x0, 0x800, 0x2, 0xf9, 0xb, 0x1ff, 0x9, 0xf0, 0x5, 0xffff, 0x6, 0x0, 0x92, 0x1, 0x8001, 0x0, 0xd0, 0xd6fe, 0x2, 0x9, 0x0, 0xffffffff, 0xa2, 0x9, 0x2, 0x5, 0x4, 0x558ef7f7, 0xa, 0xc, 0x30000000, 0x1, 0x10, 0x1, 0xd, 0xcc27, 0x9, 0x10, 0x4, 0x9, 0x7ff, 0x795, 0x3, 0xfe, 0xfffff3e5, 0x81, 0x4, 0x9, 0x8, 0x77ea, 0x5, 0xa, 0x6, 0x4, 0x8, 0x9, 0xeca, 0x8, 0x3, 0x3, 0x8, 0x7, 0x5, 0x10, 0x1462df8f, 0xfffffffd, 0x9, 0x34b6, 0x8, 0x5, 0xff, 0x4, 0x80000000, 0x4, 0x200, 0x7, 0xfffffffd, 0x10001, 0x5, 0x6, 0x3, 0x4, 0x6, 0x4, 0xfffffffc, 0x0, 0x8, 0xc, 0xc, 0x1, 0x8000, 0x8, 0x9, 0x6, 0x9, 0x0, 0xc0000, 0x33, 0x81, 0x2, 0x5, 0x7ff, 0xa59, 0x3, 0x1, 0xb, 0x3, 0xa5d0, 0x40, 0x0, 0x5, 0x1, 0x1, 0x38e6bdc7, 0x8000, 0x3, 0xff, 0x4, 0x7, 0x800, 0x20000, 0xfffffff8, 0xd7, 0x3, 0xf, 0x6, 0xfffffff7, 0x5, 0x3, 0x1ff, 0x2, 0x9, 0x5, 0x6, 0xfffffffd, 0x3, 0x3ff, 0x7, 0x3, 0x9, 0x4, 0x4, 0x5, 0x2, 0x224739d9, 0x8, 0x9, 0x1ff, 0x4, 0xffff8001, 0xcc7, 0x1, 0x2, 0x2, 0x7fff, 0x0, 0x8000, 0x0, 0x9, 0x7fff, 0xfffffffd, 0x10001, 0x28, 0xfffffffb, 0xaa, 0x0, 0x44e, 0x2, 0x9, 0x7fff, 0xffffffff, 0x3, 0xf, 0x150, 0x812, 0xa1, 0x0, 0x80000000, 0x80, 0x100, 0x8, 0x7ff, 0x4, 0x9, 0x3, 0x5, 0x2, 0x84, 0x6, 0x6, 0x6, 0x6, 0x8001, 0x2, 0x100, 0xd9, 0x7, 0xa, 0x8, 0x9, 0x3, 0x6, 0x0, 0x6, 0xf0, 0x0, 0xe, 0x1, 0xfffffffa, 0x9, 0x3, 0x7, 0x7, 0x4, 0x1, 0x1356, 0xdd4a, 0x7fffffff, 0x8, 0x4ee8, 0x7fffffff, 0xcf92, 0xfffffffd, 0x6, 0xfffffffd, 0xb7c2, 0x5, 0x7, 0x2061c618, 0x3, 0x7, 0x3, 0x8, 0x8, 0x2, 0xfffffffd, 0x0, 0x5, 0x7fffffff, 0xc, 0x7, 0x7ff, 0xabc8, 0x1, 0x3, 0x2, 0x25e, 0x2, 0xfffffff8, 0xfffffff0, 0xffffffff, 0x0, 0x6, 0x3, 0x65, 0x4, 0x7, 0x7fffffff, 0x0, 0x152, 0x9, 0x2, 0x1, 0x80000001, 0x7, 0x3, 0x8, 0x349, 0x7, 0x7, 0xfffffbff, 0x3ff, 0x40, 0x101, 0x3c4, 0x1, 0x8, 0x862, 0x9e20, 0x3, 0x3, 0x0, 0xfffffffc, 0x2, 0x1, 0xe2, 0x5, 0x3, 0x7fffffff, 0xc261, 0x10001, 0xe, 0x2, 0x182d7007, 0xcb0a, 0x3b19, 0x9, 0x7, 0x0, 0x5ee6, 0x4f20, 0x8, 0xffffffff, 0x7, 0x3, 0x5, 0x3, 0x6, 0x10001, 0x0, 0x3, 0x7, 0x9, 0xffff, 0x6, 0x1000, 0x81, 0x2, 0x3, 0x5, 0xc3a6, 0x2, 0x80000001, 0x9, 0x6, 0xc, 0xec200000, 0x3, 0x100, 0x3, 0x10000, 0x4, 0xb39b, 0x1, 0x8, 0x8001, 0x3, 0x3, 0x7, 0x1ff, 0x6, 0x0, 0x3, 0x0, 0xca, 0x0, 0x3ff, 0x40, 0x6, 0xfffffffb, 0x9, 0x0, 0x6, 0x800, 0x3ff, 0xfffffffa, 0x800, 0x80, 0x2, 0x0, 0x8, 0x8, 0x0, 0x9, 0x2, 0x1, 0xf, 0x5, 0x9, 0x5, 0x4, 0x6, 0x7, 0x9, 0xffffffff, 0x88e, 0x7fff, 0x7ce6, 0xffffffff, 0x6, 0xeb, 0x4, 0x2, 0xd9, 0x6, 0x8, 0x5, 0x65e0, 0x1, 0x3, 0x0, 0x7fff, 0x8, 0x80000000, 0x1, 0xb568, 0xa30, 0x5, 0xb, 0x8, 0xe817, 0xc50, 0xae, 0x400, 0x7, 0x2, 0xfffffff9, 0x100, 0x4, 0x5, 0xfffffffb, 0x7f, 0x7, 0x1ff, 0xd76, 0x2, 0x4, 0xc1, 0xd, 0x0, 0x2, 0x9, 0x6, 0x8, 0x6, 0xfffff801, 0x4, 0x1000, 0x80000000, 0xfffffeff, 0x5, 0x9, 0x800, 0x3, 0x7fffffff, 0x4, 0x2, 0xfffffff8, 0x0, 0x7fff, 0x1, 0x9, 0x8, 0x7fff, 0x10001, 0xc, 0x4, 0x7, 0x8001, 0x5, 0x5, 0x7, 0x5, 0x2819, 0x8558, 0x2, 0xe7d, 0x8, 0x6, 0x6, 0x7, 0x20000000, 0x5, 0xfff, 0xfff, 0x398b8734, 0xff, 0x8001, 0x4, 0x5, 0x5fb, 0x7, 0x4, 0x1, 0x7, 0xffff6fc2, 0x4, 0x55d6, 0x989, 0x0, 0x0, 0xf, 0x7f, 0x4, 0x5, 0x4, 0x7b, 0x2, 0xfffffffb, 0x1, 0x5, 0x1000, 0xe, 0x0, 0xfffffffb, 0x0, 0x48, 0x4, 0x4800, 0x2, 0xfffffff8, 0x1, 0x0, 0x4, 0x4, 0x9, 0xf, 0x0, 0x1, 0xcc, 0x10, 0x8, 0x4, 0x9, 0x400, 0x7ff, 0x7, 0x7, 0x7, 0xd, 0x80000001, 0xfffffff9, 0x45669c8b, 0xffffffff, 0xffff8a39, 0x8, 0x3, 0x2, 0x7, 0x7fff, 0x5, 0x10, 0xc670, 0x1, 0x8, 0x8001, 0x7fff, 0x8, 0x80, 0x1, 0x0, 0xf9e9, 0x0, 0x9, 0x0, 0xe, 0x4, 0x9, 0xa, 0xffffffff, 0x1, 0x5, 0x8893, 0xeb, 0x8, 0x5, 0x1, 0x80, 0xffffffff, 0xfff, 0x3, 0x80000000, 0x5e, 0x3, 0x1, 0x2, 0x8000, 0x3, 0x6d, 0x2, 0x5, 0xffffffff, 0x9, 0x0, 0x1, 0x9, 0x800, 0xffffffff, 0x76a96331, 0x7, 0x0, 0xc001, 0x0, 0x6, 0xb079, 0xff, 0x7fff, 0x7, 0x98, 0xfffffff8, 0x1, 0x2, 0xc, 0x4, 0x7, 0x9, 0x5044, 0x7, 0x7fff, 0x6, 0x4, 0x1, 0x800, 0x80, 0x4, 0x1, 0x5, 0x4, 0x10, 0x3ff, 0x9, 0x8, 0x707, 0x0, 0x6, 0x1, 0x8, 0xeb, 0x8, 0x8, 0x0, 0x8, 0xf2d, 0x6, 0x46800, 0x1, 0x3, 0x7, 0x4, 0x0, 0x401, 0x3, 0x81, 0x7, 0x4, 0x7fffffff, 0x101, 0x0, 0x7, 0x9, 0x40, 0x1, 0x0, 0x3, 0x6, 0x5, 0x7, 0x8001, 0x3ff, 0x3, 0x0, 0xfffffdd3, 0x10001, 0x3, 0x5, 0xa000000, 0x2, 0xffffffe3, 0x61, 0x9, 0x2, 0x2000, 0x7, 0x9, 0x2, 0x9, 0x3, 0x7, 0x249b0510, 0x4, 0x88, 0x10000, 0x43f3c3ea, 0x0, 0x4, 0xfffffff8, 0x10001, 0xffff, 0x400, 0x8, 0x9, 0x5, 0xfffffff8, 0x2, 0x8, 0x0, 0x400, 0x2, 0x6, 0x3, 0x8, 0xfc, 0xbe2e, 0x4, 0x8, 0x10, 0x9, 0xfffffff9, 0xc, 0x1, 0x8, 0x400, 0x5, 0x8, 0x6, 0x9, 0x0, 0x3b, 0x4, 0xfffffffd, 0xffffff00, 0x10, 0x8000, 0x9, 0x80, 0x81, 0x4, 0xfffffffc, 0x9, 0xc00000, 0xffffffff, 0x3, 0x7f8, 0x298c, 0x6, 0x3, 0x8, 0x6, 0xa8c9, 0x8, 0x8, 0x0, 0x1, 0x6359, 0x5, 0x5, 0x8, 0x2, 0xb, 0x4, 0x8, 0xffffffff, 0x0, 0x4, 0x1, 0xe6, 0x800, 0x0, 0x4, 0xf, 0x841e, 0x6, 0x80000000, 0x3a6, 0x200, 0x9, 0x6de, 0x80000001, 0x4, 0x9, 0x2, 0x6, 0x661d, 0x7, 0x6, 0x401, 0x10000, 0x2, 0x6, 0xfffffffc, 0x7, 0x200, 0x8, 0xa, 0xd6, 0x3, 0xf9, 0x23, 0xb92, 0xf, 0x38c, 0x4, 0xf395, 0x4, 0x1, 0x156, 0xd02, 0x8001, 0x8, 0x3, 0x3, 0x2, 0x3, 0x1, 0x4, 0x5, 0x8, 0x2, 0x92, 0x7, 0xbfb, 0x7, 0x6, 0x5, 0x3, 0x6, 0x4, 0xa, 0x3, 0x2, 0x9, 0x0, 0x8000, 0x10000, 0x10000, 0x254, 0x149, 0x3, 0x6, 0x80000000, 0x6a62, 0x868, 0x200, 0x8f1, 0x1, 0x10001, 0x3, 0x314, 0x9, 0x5, 0x0, 0x9, 0x9, 0x4275, 0x4, 0x401, 0x3, 0x6, 0x2, 0xc, 0x8, 0x9, 0x1, 0x5, 0x9, 0x8, 0x1, 0x2, 0x6f58, 0x6, 0x4, 0xa, 0x0, 0x7f, 0x1, 0x4, 0x8, 0x0, 0x6, 0x0, 0xffffff80, 0x3, 0x7, 0x9, 0x6, 0xf, 0xfffffff8, 0xdd3b, 0x9, 0x7, 0x0, 0x7, 0xffff7fff, 0x0, 0xe28a, 0x1ff, 0xfffffffe, 0x4, 0xfffffffb, 0x5, 0x1, 0x4, 0x9, 0x0, 0x0, 0xfff, 0x1ff, 0x6, 0xfffffffc, 0x54b4, 0x2, 0x3, 0x3, 0xd0000000, 0x3, 0x1, 0x9, 0x8, 0x3, 0x4, 0x9, 0xc0fd, 0x3, 0x3, 0x81, 0x5d, 0x80, 0x80000000, 0x5, 0x6, 0x5, 0x0, 0x3, 0x8, 0x5, 0x10000, 0x0, 0x0, 0x7, 0x80, 0x0, 0x5, 0x7fffffff, 0x5, 0x32a5cd5c, 0x200, 0x1000, 0x7, 0x3, 0x9, 0x1, 0x200, 0x4, 0x4, 0xb, 0x8, 0x2, 0x7ff, 0x3, 0x3, 0x7, 0x8, 0x7fff, 0x8, 0x100000, 0x217f8891, 0x0, 0x7c76ef2, 0x9, 0x644, 0x3ff, 0xc9, 0x40, 0x0, 0x633e0372, 0x101, 0x81, 0xf, 0x9, 0x6, 0x1ff, 0x10000, 0xfffffff9, 0x88, 0x3, 0x4, 0x54, 0x8, 0x903, 0x1, 0x7, 0x8, 0x1, 0x9, 0x0, 0x0, 0x6, 0x1, 0xfffffe01, 0x6, 0x9, 0x4, 0x5, 0x80, 0x9, 0x9, 0x2, 0x9, 0x8000, 0x2, 0x8, 0x1, 0x2, 0x5, 0x1, 0x1f930108, 0x5, 0xb, 0x10001, 0x6, 0x4, 0x7, 0x5, 0x727e27d5, 0x401, 0x2, 0x158, 0x5, 0xa6ef, 0x7, 0x5, 0x9, 0x8e9, 0x5, 0x9cf, 0x8001, 0x3, 0x4, 0x8, 0x547, 0xffff0000, 0x7, 0x6, 0x8000, 0x80, 0x6, 0x7fff, 0x8, 0x78, 0x3636, 0x80, 0xbe, 0x9, 0x1000, 0x3, 0x2, 0xf7, 0x49, 0x0, 0x3, 0x7fffffff, 0xfffffff8, 0x10, 0x5, 0x5, 0x40, 0x7, 0xcd, 0x6, 0x6, 0x101, 0x5, 0xfdee, 0x200, 0x7, 0x400, 0x4, 0x4, 0x8, 0x7, 0x1, 0xffffffff, 0x200, 0xb704, 0x5, 0x9, 0x1, 0xbc23, 0x3, 0x9, 0x2, 0x3, 0x14d2, 0x2, 0x7, 0x2, 0x82c, 0x0, 0xf00, 0x6a, 0x1, 0x8, 0xfffffffa, 0x5, 0x9, 0x1, 0xb539fe87, 0x0, 0x226bfd5b, 0x8, 0xfffffffa, 0x7f, 0x7, 0x0, 0x5d10, 0x9, 0x10000, 0x80000000, 0x5be5a7e4, 0x7f, 0x6, 0xff, 0xcd0, 0xb, 0x3, 0x6, 0xd, 0x40, 0x0, 0x6, 0x7, 0x6, 0x7fffffff, 0x3c2, 0x6, 0x6, 0x9, 0x6a, 0x7, 0x3ff, 0x2e29559b, 0x81, 0x7fff, 0x400, 0x3, 0x6, 0x4, 0x5, 0x5, 0x1000, 0xf602, 0x3, 0x401, 0x2, 0x18, 0x5, 0x7, 0xfffffffb, 0xffffffff, 0x1, 0x6d2, 0x4, 0x6, 0x175, 0x7, 0xffff, 0x9, 0x3, 0x9, 0x1, 0xffff, 0x80000000, 0xffffffff, 0x6, 0x7, 0xd42c, 0xfffffffe, 0x200000, 0xe43, 0x400000, 0xfffffeff, 0x9, 0x8, 0x4, 0x8, 0x101, 0x5, 0x800, 0x401, 0x585ffc63, 0x24, 0x7, 0x3, 0x6, 0xfffff801, 0xfffffffa, 0x2, 0x6, 0x4, 0x9, 0xdb, 0x80, 0x9, 0x9, 0xe, 0xd, 0x8000, 0x3, 0x6, 0x8, 0x0, 0x80000000, 0xff, 0xfffffffd, 0xffffffff, 0x0, 0x5, 0xb0, 0x0, 0x5ec8, 0x7fffffff, 0x81, 0x9, 0x5, 0x4, 0x3ff, 0x6, 0x12de, 0x5, 0x0, 0x8, 0x1a46, 0x0, 0x6, 0x9, 0x1d20, 0x1, 0x2, 0x4203, 0x738, 0xa7f, 0x2, 0x7, 0xfffffffa, 0x3, 0x9, 0x3562, 0x9, 0x3800, 0x6, 0x28f, 0xd6, 0xf99, 0x72d, 0x6, 0x100, 0x5, 0x7ff, 0x400, 0xffff, 0x1, 0xffff, 0x2, 0x3, 0x8, 0x400, 0xab14, 0xbc55, 0x400, 0x4, 0x7f, 0x6, 0x7, 0x0, 0x81, 0xffffffff, 0x5, 0x1, 0xb, 0x10000, 0x778, 0x3, 0x0, 0x0, 0x5a6, 0x6, 0x2, 0x21, 0x9, 0x1, 0x100, 0x0, 0x0, 0x0, 0x5, 0x6, 0xc3b, 0x9, 0x4, 0x9, 0x3, 0x2b9, 0x9, 0x6, 0x6, 0xdb0, 0x2, 0x4, 0x9, 0x4, 0x9, 0x8001, 0x938, 0x7fff, 0x7fff, 0x0, 0x7fff], 0x7, 0x7f}) 14m30.379896822s ago: executing program 1 (id=1210): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x20, 0x3f, 0x107, 0x70bd2b, 0x0, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x48, 0x0, 0x0, @fd}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 14m30.346112732s ago: executing program 2 (id=1211): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x20, 0x3f, 0x107, 0x70bd2b, 0x0, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x48, 0x0, 0x0, @fd}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) (fail_nth: 3) 14m30.182653766s ago: executing program 0 (id=1213): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x4) read$msr(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_bcm(0x1d, 0x2, 0x2) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000040)='securityfs\x00', 0x800000, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x100) write(r0, &(0x7f0000000980)="3c5c0f0d0000000080000016fbce502205414000200000d96811eaa6e6594fc346e7de338f14e0206a5ed8e9822f57264d6d6547cc4ef05beffd91a390501c1249aca6acebed9a31c812ad3daf7dcde785e57a3bc13130a8e8c3aaf8a3b64c30ef0d910c6e226d1c898de80139d5d73f3da2f8d81152bdedc699ca7d5c3bd3d9950a62cf46291a883bfe1246259d11eecf81d103784dc33dda498b8249a24989cbd2ca300fa7534d7b7456d1c2b080dcdf743dae00633e21f88d6cabb6903df9c3b94eefaf699f75bff2159bb2c2cdba6716fad5abc04c4f9159ea4bcd878d21d4ac9ef4d012f8bf6250702870ec55635607529dba84", 0xf6) 14m30.110267186s ago: executing program 1 (id=1214): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) io_setup(0x2d, &(0x7f0000000040)=0x0) r2 = eventfd(0x8) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, 0x0) io_cancel(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4, r0, &(0x7f0000000080)="e2919cb07b644111de435e0e0e2cea5c3fac87bfc1b826cfb73936beed8e9b6713b4d901eb29c6ade7b624130a88e32331b4b9f1c1df225db580d5f3711810", 0x3f, 0x4, 0x0, 0x2, r2}, &(0x7f0000000100)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r3, 0x5601, 0xfffffffffffffffc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x96, 0x0, &(0x7f0000000140)="259a53f271a76d2608054c6588a8290c9d150dd259043bad4fe3cf6b51e6ff2c87b354372d5a046e3b03b918a0f01527520355d0824a6ca7b3d1a284ae16c1909d83cfaa30541b5f48a00509f98192447226c54a0f7da1c38d7a5cec117fcdb81d11c98ff1dba81c8af33b2460334f65c1d4ce0863340de0214963cb2abd96d714c7238b3772c3846cbb7ef86c7fc68df3d856d00edd", 0x0, 0x10, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 14m30.061140275s ago: executing program 2 (id=1216): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x42, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000140), 0x200000, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, 0x0, 0x0) write$P9_RVERSION(r2, &(0x7f0000000c40)=ANY=[], 0x13) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000100)={0x10201, 0x2, 0x8a3cf09075152e30, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000bfd000/0x400000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000050000e3ffffffff7f00000018"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x3b, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000700)=[{&(0x7f0000000180)="390000001300034700000000c3e4ffff000000000100000056000000190004000400000007fd17e5ffff08001400"/57, 0x39}], 0x1) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r6) sendmsg$TIPC_NL_NET_SET(r6, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x94, r7, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x80, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000800}, 0x400c084) writev(r6, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x40, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000080)=@any_dev={0x3, 0xf9, 0x0, 0x0, 0x1000, 0x1e5, 0x0, 0x0, 0x4}}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) 14m29.890325581s ago: executing program 2 (id=1217): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000340)=0x1008) read$dsp(r0, &(0x7f00000001c0)=""/62, 0x3e) (fail_nth: 2) 14m29.889572273s ago: executing program 0 (id=1218): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x44}}, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x70bd26, 0x25dfdbfb, {0x2, 0x10, 0x10, 0x0, 0x9, 0x0, 0x0, 0x6, 0x10007}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, @FRA_DST={0x8, 0x1, @empty}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 14m29.741655965s ago: executing program 1 (id=1220): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x51cfa, 0x0, 0x8000008, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) modify_ldt$write(0x1, &(0x7f0000000000)={0x3aa, 0x0, 0x2000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}, 0x10) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x339, @tick=0x3ff, 0x6, {0x8, 0x80}, 0x6, 0x1}) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@default_permissions}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f00000002c0)={0x26d6f436, 0x80000001, 0x1, 'queue0\x00', 0x3}) 14m29.654078716s ago: executing program 0 (id=1222): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa080045"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x3, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14m28.915390968s ago: executing program 2 (id=1224): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x14, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}}, 0x0, 0x32, 0x0, 0xfffffffd}, 0x28) ioctl(r1, 0xe, &(0x7f0000000080)="eb2f94d41369955408d8bbd755aa37bb91409f3335c6bedd5b52626ed9e6c7e97b58527bdf1726d87cf7ac58ca2809db2b7c127b27abab5c9f4034455e4564ac3416ae2d4e09247d7954ca131f070d8c8c527ce39d85b3b7d3e59bd6800d681c325369cb1ac43cc68ab951e5eec53efa664cac16fb0c1b7c266d044cf5081b1baf43035237fd9b5fe6c7541885627f7f34990534b2fe4923c6a277df5744e754f0d450213721e34b273c") 14m28.90702992s ago: executing program 0 (id=1225): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x38, r1, 0x1, 0x0, 0x1, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0xc082}, 0x24004080) 14m28.860887194s ago: executing program 1 (id=1227): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa080045"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) ioctl$NILFS_IOCTL_GET_SUINFO(r0, 0x80186e84, &(0x7f00000019c0)={&(0x7f0000001940)=[{0x8, 0x5}, {0x0, 0x0, 0x1}, {0x0, 0x8001}, {0x5, 0xc, 0x2}, {0x0, 0x5}, {0x8, 0x756b}], 0x6, 0x10, 0x1, 0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setresuid(0x0, 0xee01, 0x0) r2 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x13) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x1, 0x4, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000380), 0xc, r3}, 0x38) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000001500)={@local, @empty, 0x0}, &(0x7f0000001540)=0xc) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001700)={&(0x7f0000001580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdc, 0xdc, 0x5, [@var={0xd, 0x0, 0x0, 0xe, 0x1}, @volatile={0x1, 0x0, 0x0, 0x9, 0x3}, @type_tag={0x8, 0x0, 0x0, 0x12, 0x4}, @union={0xe, 0x6, 0x0, 0x5, 0x1, 0x2, [{0x7, 0x0, 0x252}, {0x2, 0x5, 0xfffffff7}, {0x8, 0x5, 0x7fff}, {0x1, 0x0, 0x8}, {0x2, 0x0, 0x8}, {0xb, 0x2, 0x1}]}, @struct={0x2, 0x4, 0x0, 0x4, 0x1, 0x2, [{0xa, 0x1, 0x2}, {0x3, 0x3, 0x2}, {0x7, 0x2, 0x9}, {0xf, 0x4, 0x4}]}, @fwd={0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0xfb26}}]}, {0x0, [0x30, 0x61, 0x5f]}}, &(0x7f0000001680)=""/123, 0xf9, 0x7b, 0x1, 0xfffffffd, 0x85d74e3b662ca1f2}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000017c0)={0x8, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001880)={0x8, 0x7, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb}, [@generic={0x8, 0x7, 0x9, 0x3, 0x7f}, @alu={0x4, 0x1, 0x8, 0x0, 0xa, 0x40, 0xfffffffffffffffc}, @map_fd={0x18, 0x4, 0x1, 0x0, r3}]}, &(0x7f0000000100)='syzkaller\x00', 0x10001, 0x1000, &(0x7f0000000500)=""/4096, 0x41000, 0x0, '\x00', r4, @fallback=0x1, r5, 0x8, &(0x7f0000001740)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000001780)={0x0, 0x9, 0x2, 0xec}, 0x10, r6, 0xffffffffffffffff, 0x6, 0x0, &(0x7f0000001800)=[{0x2, 0x1, 0x9, 0xb}, {0x1, 0x1, 0xe, 0x6}, {0x3, 0x5, 0x1, 0xa}, {0x5, 0x2, 0xa, 0x2}, {0x3, 0x1, 0x8, 0xa}, {0x3, 0x3, 0x3, 0xc}], 0x10, 0x3}, 0x94) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000440)={[0x3, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2f, &(0x7f0000000280)={0x0, {{0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x401}}, {{0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0xa}, 0xae}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x90}, [@ldst={0x2, 0x0, 0xb}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @flow_dissector}, 0x48) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 14m28.61720297s ago: executing program 2 (id=1229): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x4) read$msr(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_bcm(0x1d, 0x2, 0x2) mount(0x0, 0x0, &(0x7f0000000040)='securityfs\x00', 0x800000, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x100) write(r0, &(0x7f0000000980)="3c5c0f0d0000000080000016fbce502205414000200000d96811eaa6e6594fc346e7de338f14e0206a5ed8e9822f57264d6d6547cc4ef05beffd91a390501c1249aca6acebed9a31c812ad3daf7dcde785e57a3bc13130a8e8c3aaf8a3b64c30ef0d910c6e226d1c898de80139d5d73f3da2f8d81152bdedc699ca7d5c3bd3d9950a62cf46291a883bfe1246259d11eecf81d103784dc33dda498b8249a24989cbd2ca300fa7534d7b7456d1c2b080dcdf743dae00633e21f88d6cabb6903df9c3b94eefaf699f75bff2159bb2c2cdba6716fad5abc04c4f9159ea4bcd878d21d4ac9ef4d012f8bf6250702870ec55635607529dba84", 0xf6) 14m28.613906093s ago: executing program 0 (id=1230): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x3, 0x4) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd0a) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/ieee80211/phy0/aql_enable\x00', 0x1, 0x4) write(r2, &(0x7f0000000200)='1', 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCMBIS(r3, 0x5416, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff90850000007300000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 14m25.484602253s ago: executing program 2 (id=1231): r0 = syz_ublk_setup_io_uring(0x1580, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x401, 0x0, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x1000, 0x1ffc, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x0, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x1, 0x7a, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x40, 0x1, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) (fail_nth: 3) ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40086f52, &(0x7f0000000440)={0x3, &(0x7f0000000340)=[{0x24, '\x00', @data=0x4, 0xad}]}) 14m11.514434332s ago: executing program 32 (id=1230): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x3, 0x4) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd0a) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/ieee80211/phy0/aql_enable\x00', 0x1, 0x4) write(r2, &(0x7f0000000200)='1', 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCMBIS(r3, 0x5416, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff90850000007300000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 14m9.485058428s ago: executing program 33 (id=1227): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa080045"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) ioctl$NILFS_IOCTL_GET_SUINFO(r0, 0x80186e84, &(0x7f00000019c0)={&(0x7f0000001940)=[{0x8, 0x5}, {0x0, 0x0, 0x1}, {0x0, 0x8001}, {0x5, 0xc, 0x2}, {0x0, 0x5}, {0x8, 0x756b}], 0x6, 0x10, 0x1, 0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setresuid(0x0, 0xee01, 0x0) r2 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x13) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x1, 0x4, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000380), 0xc, r3}, 0x38) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000001500)={@local, @empty, 0x0}, &(0x7f0000001540)=0xc) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001700)={&(0x7f0000001580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdc, 0xdc, 0x5, [@var={0xd, 0x0, 0x0, 0xe, 0x1}, @volatile={0x1, 0x0, 0x0, 0x9, 0x3}, @type_tag={0x8, 0x0, 0x0, 0x12, 0x4}, @union={0xe, 0x6, 0x0, 0x5, 0x1, 0x2, [{0x7, 0x0, 0x252}, {0x2, 0x5, 0xfffffff7}, {0x8, 0x5, 0x7fff}, {0x1, 0x0, 0x8}, {0x2, 0x0, 0x8}, {0xb, 0x2, 0x1}]}, @struct={0x2, 0x4, 0x0, 0x4, 0x1, 0x2, [{0xa, 0x1, 0x2}, {0x3, 0x3, 0x2}, {0x7, 0x2, 0x9}, {0xf, 0x4, 0x4}]}, @fwd={0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0xfb26}}]}, {0x0, [0x30, 0x61, 0x5f]}}, &(0x7f0000001680)=""/123, 0xf9, 0x7b, 0x1, 0xfffffffd, 0x85d74e3b662ca1f2}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000017c0)={0x8, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001880)={0x8, 0x7, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb}, [@generic={0x8, 0x7, 0x9, 0x3, 0x7f}, @alu={0x4, 0x1, 0x8, 0x0, 0xa, 0x40, 0xfffffffffffffffc}, @map_fd={0x18, 0x4, 0x1, 0x0, r3}]}, &(0x7f0000000100)='syzkaller\x00', 0x10001, 0x1000, &(0x7f0000000500)=""/4096, 0x41000, 0x0, '\x00', r4, @fallback=0x1, r5, 0x8, &(0x7f0000001740)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000001780)={0x0, 0x9, 0x2, 0xec}, 0x10, r6, 0xffffffffffffffff, 0x6, 0x0, &(0x7f0000001800)=[{0x2, 0x1, 0x9, 0xb}, {0x1, 0x1, 0xe, 0x6}, {0x3, 0x5, 0x1, 0xa}, {0x5, 0x2, 0xa, 0x2}, {0x3, 0x1, 0x8, 0xa}, {0x3, 0x3, 0x3, 0xc}], 0x10, 0x3}, 0x94) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000440)={[0x3, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2f, &(0x7f0000000280)={0x0, {{0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x401}}, {{0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0xa}, 0xae}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x90}, [@ldst={0x2, 0x0, 0xb}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @flow_dissector}, 0x48) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 14m7.690086429s ago: executing program 34 (id=1228): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa080045"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x3, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 3) 14m7.339734381s ago: executing program 35 (id=1231): r0 = syz_ublk_setup_io_uring(0x1580, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x401, 0x0, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x1000, 0x1ffc, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x0, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x1, 0x7a, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x40, 0x1, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) (fail_nth: 3) ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40086f52, &(0x7f0000000440)={0x3, &(0x7f0000000340)=[{0x24, '\x00', @data=0x4, 0xad}]}) 10m20.582862187s ago: executing program 6 (id=1237): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) syz_usb_connect$midi(0x0, 0x0, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x51cfa, 0x0, 0x8000008, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) modify_ldt$write(0x1, &(0x7f0000000000)={0x3aa, 0x0, 0x2000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}, 0x10) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x339, @tick=0x3ff, 0x6, {0x8, 0x80}, 0x6, 0x1}) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@default_permissions}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f00000002c0)={0x26d6f436, 0x80000001, 0x1, 'queue0\x00', 0x3}) 10m18.989361877s ago: executing program 6 (id=1408): openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) syz_open_dev$loop(&(0x7f0000000540), 0x200000b1, 0x8a681) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket(0xa, 0x3, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="34000000130001002cbd70000000000007000000", @ANYRES32, @ANYBLOB="000000000000000014001a80100005800c000180080001"], 0x34}}, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000580)=@newqdisc={0x240, 0x24, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xffea, 0x8}, {0xd, 0x7}}, [@q_dsmark={{0xb}, {0x2c, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xcdfa}]}}, @q_dsmark={{0xb}, {0x44, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xfff}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xc5}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xd}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xffff}, @TCA_DSMARK_DEFAULT_INDEX={0x6}]}}, @q_dsmark={{0xb}, {0x28, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x48, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x401}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x24}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xfc01}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xf5cc}]}}, @q_dsmark={{0xb}, {0x30, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xe480}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}]}}, @q_dsmark={{0xb}, {0x30, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x9}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x21}]}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0x240}, 0x1, 0x0, 0x0, 0x4000000}, 0x8801) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x11, 0x0, 0x3, {[@window={0x3, 0xc}]}}}}}}}}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e23}, 0x6e) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fcntl$getown(r0, 0x9) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 10m17.148148575s ago: executing program 6 (id=1411): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="3c1204"], 0x98) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1c0) chdir(&(0x7f00000001c0)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) move_pages(0x0, 0x2000025a, &(0x7f00000003c0)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil], &(0x7f0000000540)=[0x1, 0x1], &(0x7f0000001680), 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c0000000206010800000000000000000100000005000100070000000900020073797a30000000001400078008001240fffffffe080013400000ffff050004000000000010000300686173683a69702c6d616300050005000a0000"], 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0xfc, 0x4, 0x0, 0x9, 0x900}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_HWID={0x5, 0x4, 0x8}}}}]}, 0x38}}, 0x2000a080) 10m17.06472132s ago: executing program 4 (id=1412): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000080)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x40, 0x71, 0x10, 0x1d}}, &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, 0x0, 0x20004000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010000108000000000000000000100000", @ANYRES32=0x0, @ANYBLOB="a18500000000000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x9, 0x6}}, './file0\x00'}) ioctl$EVIOCGPHYS(r9, 0x80404507, &(0x7f0000000480)=""/148) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x8090}, 0x0) r10 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DMA_BUF_SET_NAME_A(r10, 0x40046201, &(0x7f0000000340)='syz0\x00') sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_SPLICE={0x1e, 0x40, 0x0, @fd_index, 0x4, 0x9, 0x10000, 0x0, 0x1, {0x0, r11, r10}}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003d40)={0x18, 0x1e, 0x825, 0x70bd22, 0x25dfdbfa, {0x1e}, [@nested={0x4, 0x22}]}, 0x18}, 0x1, 0x0, 0x0, 0x4841}, 0x10) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xeb3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0xe000, 0x0, 0x77, 0x0, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6, 0x2}, {0xeeee0000, 0x9000, 0x3, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xeeee0000, 0x1000, 0x0, 0x0, 0x7, 0x0, 0x40, 0x1, 0x45, 0x3, 0x4, 0xf9}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x9}, {0x10000, 0xffff1000, 0x3, 0x4, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0x4}, {0xffff1000, 0xffffffff, 0x0, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0x8080000, 0xa000, 0xa, 0x4, 0x0, 0x0, 0xd7, 0x20}, {0x0, 0x6000, 0xd, 0x0, 0xa4, 0x5, 0x8, 0x40, 0x26, 0x80, 0x0, 0xfe}, {0x1, 0x3}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0x3c01, 0x8000000, [0x80000001, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe]}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x2000) 10m13.264971176s ago: executing program 4 (id=1413): userfaultfd(0x80001) socket$l2tp(0x2, 0x2, 0x73) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xf, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) syz_io_uring_setup(0x14f0, &(0x7f0000000140)={0x0, 0xa555, 0x200, 0x1, 0x282, 0x0, r0}, &(0x7f0000000200), &(0x7f0000000240), 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845) 10m13.10517845s ago: executing program 6 (id=1417): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_setup(0xb, &(0x7f0000000080)=0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120110010928fc10ac059102254301020301090212000100004000090484000003e102"], 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x8000) io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x8, 0x44, r0, 0x0, 0x0, 0x4010, 0x0, 0x65aee9a9ce9dc6b4}]) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0x400}}) shutdown(r2, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x5423, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) close(r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4893a, 0xa}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0xffffff80, 0x720, 0x9}}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40801}, 0x4090) 10m10.169894098s ago: executing program 7 (id=1238): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb20d}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'dvmrp1\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xec, r1, 0x800, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x480c4}, 0x800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000002f, &(0x7f0000000100)="b9ff0f316844268cb89e14f008004ce0050000000000002c77030a89079f03b180004415050300845013f2325f0094090519fa0000880b943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c060000000000005992078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc04308461738190da450296b0ac014968ce23eefc9d4246dd14afbf79a228326c3acc240d7da058fa4806d1f5f7ff40000001600"/249, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) 10m9.768918907s ago: executing program 4 (id=1418): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000080)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x40, 0x71, 0x10, 0x1d}}, &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xc8f}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x20004000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010000108000000000000000000100000", @ANYRES32=0x0, @ANYBLOB="a18500000000000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x9, 0x6}}, './file0\x00'}) ioctl$EVIOCGPHYS(r9, 0x80404507, &(0x7f0000000480)=""/148) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8090}, 0x0) r10 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DMA_BUF_SET_NAME_A(r10, 0x40046201, &(0x7f0000000340)='syz0\x00') sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ptrace$peekuser(0x3, 0xffffffffffffffff, 0x7fffffffffffffff) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_SPLICE={0x1e, 0x40, 0x0, @fd_index, 0x4, 0x9, 0x10000, 0x0, 0x1, {0x0, r11, r10}}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003d40)={0x14, 0x1e, 0x825, 0x70bd22, 0x25dfdbfa, {0x1e}}, 0x14}, 0x1, 0x0, 0x0, 0x4841}, 0x10) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xeb3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0xe000, 0x0, 0x77, 0x0, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6, 0x2}, {0xeeee0000, 0x9000, 0x3, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xeeee0000, 0x1000, 0x0, 0x0, 0x7, 0x0, 0x40, 0x1, 0x45, 0x3, 0x4, 0xf9}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x9}, {0x10000, 0xffff1000, 0x3, 0x4, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0x4}, {0xffff1000, 0xffffffff, 0x0, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0x8080000, 0xa000, 0xa, 0x4, 0x0, 0x0, 0xd7, 0x20}, {0x0, 0x6000, 0xd, 0x0, 0xa4, 0x5, 0x8, 0x40, 0x26, 0x80, 0x0, 0xfe}, {0x1, 0x3}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0x3c01, 0x8000000, [0x80000001, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe]}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x2000) 10m6.335240772s ago: executing program 4 (id=1420): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000100), 0x4, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000000)={0x0, 0x1, 0x2001}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r2, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000b80)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d500891e58a3f851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7bebc905a984c7bbb7bb3c689ef", 0xdd}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000e40)="31fdffffffffffffff74098b2e5e55a1828636f60fbfcfdac56c75f1687f0c562874230300d69f117e766bdbad0c2171ad6227e1173afcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbb9de494c9721d9bf80f2f75c3b4bea78e385ea382294882839a22674037b89108a1420e33eb9be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d889c8c569334e9547e1e343b451d9025c4e153612d4674b9411fb4de29559900bcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a48793d7368b992a889f51854c7b63c180", 0xdb}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x2090) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x9, 0x80002, 0xfffffffd) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x800, 0xfff8, 0x3, 0x7, 0xfffffe00}, &(0x7f00000000c0)=0x14) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={r4, 0x2c, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, @in={0x2, 0xffff, @multicast2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={r4, 0x1ff}, 0x8) 10m5.905471177s ago: executing program 8 (id=1239): syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100003f3fdc20221802324a130102030109021b0001000010000904cd"], 0x0) io_setup(0xfffffff9, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="183f0000000000000000000003000000950000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x2, 0x1007, &(0x7f00000005c0)=""/4103, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0xc0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) socket(0x400000000010, 0x2, 0x0) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', 0x0}) r1 = socket$inet(0x2, 0x4000000000000001, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'bond_slave_0\x00', 0x8000}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000280)=ANY=[@ANYBLOB="f9ffb2a15ddfab6ba679f48558c6f94cb632a86f43adaf7b6d98ba1f64000000ec1a0cb36f0f5c612f397d651d6fb91e6af4d8a09fa92b4907f1c86237dcea0ab41dcc06ef7bc1c3ec625c7305d5bd7f06581b7fbe3475a921adca684a4099b35b7a814e33b43508bad575cdcb1aca724817bc67c1e34f25e423bef610cce1ac733b7901eaea33861d6203317ba59571c03982bbe2a30c86df458b57af560aaa3401e3bd54120feb1cb1424f67d657ab4845d2ab5f5552ab49001e31ad1b562718e6a713e02bde1ece9b1a96e5fe82bd29f4908c7715185103266b25c4b23a6e5b9ffc78fd756e86f75c", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 10m5.544705681s ago: executing program 6 (id=1422): sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x14}}, 0x4000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xaece, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_icmp(0x2, 0x2, 0x1) close(r3) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) 10m5.309158214s ago: executing program 7 (id=1423): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/ping_group_range\x00', 0x2, 0x0) writev(r0, &(0x7f0000002840)=[{&(0x7f00000002c0)="89e360", 0x3}], 0x1) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00068008"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) openat$fuse(0xffffffffffffff9c, &(0x7f0000002240), 0x2, 0x0) accept4(r1, 0x0, 0x0, 0x800) fsopen(0x0, 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = socket$tipc(0x1e, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r4, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x3, {{0x2, 0x4}, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4008011}, 0x40880) setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x1, 0x0, 0x0) 10m4.512985685s ago: executing program 4 (id=1424): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) r3 = socket$can_j1939(0x1d, 0x2, 0x7) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x38f9, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000003480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x8, @private0, 0x5}, 0x1c, &(0x7f0000000b80)=[{&(0x7f00000000c0)="e3", 0x1}], 0x1}}], 0x1, 0x24044045) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x78f7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x50) ioctl$XFS_IOC_PATH_TO_HANDLE(r4, 0xc0385869, &(0x7f0000000540)={r4, &(0x7f0000000440)='[$^}\x00', 0x10401, &(0x7f0000000480)={@align=0x10001, {0x9, 0x4719, 0x2, 0x100}}, 0x7, &(0x7f00000004c0)={@_ha_fsid}, &(0x7f0000000500)=0x6}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0x1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x9, [@struct={0xf, 0x7, 0x0, 0x4, 0x1, 0x4, [{0x10, 0x2, 0x3}, {0x8, 0x3, 0x3}, {0x8, 0x2, 0x10}, {0xb, 0x0, 0xb5}, {0xa, 0x5, 0x100}, {0x8, 0x5, 0x80000000}, {0x0, 0x0, 0x7}]}]}, {0x0, [0x61, 0x61, 0x30, 0x2e, 0x5f, 0x30, 0x0]}}, &(0x7f0000000900)=""/220, 0x81, 0xdc, 0x1, 0x101}, 0x28) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000ac0)={0x0, 0x5, 0x8}, 0xc) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b40)=@generic={&(0x7f0000000b00)='./file0\x00', 0x0, 0x18}, 0x18) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000bc0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2}, 0x50) pipe2(&(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$FUSE_INIT(r13, &(0x7f0000000100)={0x78}, 0xfeb1) write$UHID_INPUT(r13, &(0x7f0000000180)={0x8, {"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", 0x1000}}, 0xffffff05) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c40)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x3}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x2d, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@generic={0xd, 0x3, 0x2, 0x83e, 0x3ff}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xfffffff7}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3}, @map_val={0x18, 0xb, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x559}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='syzkaller\x00', 0x9, 0x0, &(0x7f0000000800), 0x41000, 0x0, '\x00', 0x0, 0x25, r9, 0x8, &(0x7f0000000a40)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000a80)={0x2, 0x2, 0x7, 0x4}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000cc0)=[r10, r11, r12, r13, 0x1, r14], &(0x7f0000000d00)=[{0x5, 0x2, 0x0, 0x8}, {0x2, 0x4, 0x4, 0x4}, {0x1, 0x3, 0xb, 0x6}, {0x4, 0x4, 0xb, 0xe}, {0x2, 0x3, 0x10}, {0x1, 0x3, 0xf, 0x4}, {0x0, 0x3, 0x4, 0xc}, {0x5, 0x1, 0x1, 0x6}, {0x0, 0x4, 0x9, 0x4}], 0x10, 0xc4a}, 0x94) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x5}, &(0x7f0000000180)=0x8) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x42100}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_MTU={0x8, 0x4, 0xd7}, @IFLA_PHYS_SWITCH_ID={0x14, 0x24, "b1dee967c6016b9cb01e8768afde588f"}]}, 0x50}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @private2, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x89}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) 10m3.963701416s ago: executing program 4 (id=1425): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) vmsplice(r0, &(0x7f0000000cc0)=[{&(0x7f0000000100)="03", 0x1}], 0x10000000000002fa, 0x0) rmdir(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') chdir(&(0x7f0000000100)='./file0\x00') mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x7) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r2}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x0, 0x2000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000140)=0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000520"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x2000002, 0xe, 0x0, &(0x7f00000000c0)="df33cf1e1ed5748b6ae18c9bc4e6", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe, 0x8000ffa1}, {0xfffffff9, 0x80500}]}}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000006680)) times(0xfffffffffffffffc) setresuid(0x0, 0xee00, 0x0) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 10m3.757141375s ago: executing program 8 (id=1426): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000a40), r0) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fedbdf251100"], 0x24}, 0x1, 0x0, 0x0, 0x884}, 0x4044802) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r2) r4 = socket(0x2d, 0x2, 0x0) recvmmsg(r4, &(0x7f0000001cc0)=[{{0x0, 0x0, 0x0}, 0x10000}], 0x1, 0x60, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r5, 0x400, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000002100000005002000000000000c001f00706879300a"], 0x28}}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r3, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_dev$video(&(0x7f0000000040), 0x400, 0x0) ioctl$VIDIOC_S_FMT(r8, 0xc0d05640, &(0x7f0000000340)={0xc, @pix={0x7, 0xd77, 0x56555959, 0x0, 0x1e7a, 0x0, 0x7, 0x7, 0x0, 0x1, 0x2}}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000020)={&(0x7f0000000200)=ANY=[], 0xe1c}}, 0x0) 10m3.742864572s ago: executing program 6 (id=1427): socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="34000000130001002cbd70000000000007000000", @ANYRES32, @ANYBLOB="000000000000000014001a80100005800c000180080001"], 0x34}}, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000580)=@newqdisc={0x240, 0x24, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xffea, 0x8}, {0xd, 0x7}}, [@q_dsmark={{0xb}, {0x2c, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xcdfa}]}}, @q_dsmark={{0xb}, {0x44, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xfff}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xc5}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xd}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xffff}, @TCA_DSMARK_DEFAULT_INDEX={0x6}]}}, @q_dsmark={{0xb}, {0x28, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x48, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x401}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x24}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xfc01}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xf5cc}]}}, @q_dsmark={{0xb}, {0x30, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xe480}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}]}}, @q_dsmark={{0xb}, {0x30, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x9}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x21}]}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0x240}, 0x1, 0x0, 0x0, 0x4000000}, 0x8801) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x11, 0x0, 0x3, {[@window={0x3, 0xc}]}}}}}}}}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e23}, 0x6e) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 10m1.638711593s ago: executing program 7 (id=1429): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) kexec_load(0x3, 0x0, &(0x7f00000005c0), 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[], 0x50}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8", 0x3}, {&(0x7f0000000b80)}, {&(0x7f0000000300)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c48a495fe7b4ad514001062f581e6274d711db9add53f7917e1dc555ac517ae0000000000000030656808", 0x41}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, 0x0, 0x0, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00), 0x0, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x141400) openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000fd0020851000000600000018", @ANYRES64], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x1e}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 9m47.611002764s ago: executing program 36 (id=1427): socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="34000000130001002cbd70000000000007000000", @ANYRES32, @ANYBLOB="000000000000000014001a80100005800c000180080001"], 0x34}}, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000580)=@newqdisc={0x240, 0x24, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xffea, 0x8}, {0xd, 0x7}}, [@q_dsmark={{0xb}, {0x2c, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xcdfa}]}}, @q_dsmark={{0xb}, {0x44, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xfff}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xc5}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xd}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xffff}, @TCA_DSMARK_DEFAULT_INDEX={0x6}]}}, @q_dsmark={{0xb}, {0x28, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x48, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x401}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x24}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xfc01}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xf5cc}]}}, @q_dsmark={{0xb}, {0x30, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xe480}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}]}}, @q_dsmark={{0xb}, {0x30, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x9}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x21}]}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0x240}, 0x1, 0x0, 0x0, 0x4000000}, 0x8801) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x11, 0x0, 0x3, {[@window={0x3, 0xc}]}}}}}}}}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e23}, 0x6e) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 9m46.608838749s ago: executing program 37 (id=1426): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000a40), r0) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fedbdf251100"], 0x24}, 0x1, 0x0, 0x0, 0x884}, 0x4044802) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r2) r4 = socket(0x2d, 0x2, 0x0) recvmmsg(r4, &(0x7f0000001cc0)=[{{0x0, 0x0, 0x0}, 0x10000}], 0x1, 0x60, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r5, 0x400, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000002100000005002000000000000c001f00706879300a"], 0x28}}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r3, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_dev$video(&(0x7f0000000040), 0x400, 0x0) ioctl$VIDIOC_S_FMT(r8, 0xc0d05640, &(0x7f0000000340)={0xc, @pix={0x7, 0xd77, 0x56555959, 0x0, 0x1e7a, 0x0, 0x7, 0x7, 0x0, 0x1, 0x2}}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000020)={&(0x7f0000000200)=ANY=[], 0xe1c}}, 0x0) 9m44.610895814s ago: executing program 38 (id=1425): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) vmsplice(r0, &(0x7f0000000cc0)=[{&(0x7f0000000100)="03", 0x1}], 0x10000000000002fa, 0x0) rmdir(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') chdir(&(0x7f0000000100)='./file0\x00') mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x7) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r2}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x0, 0x2000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000140)=0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000520"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x2000002, 0xe, 0x0, &(0x7f00000000c0)="df33cf1e1ed5748b6ae18c9bc4e6", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe, 0x8000ffa1}, {0xfffffff9, 0x80500}]}}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000006680)) times(0xfffffffffffffffc) setresuid(0x0, 0xee00, 0x0) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 9m42.776402565s ago: executing program 39 (id=1429): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) kexec_load(0x3, 0x0, &(0x7f00000005c0), 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[], 0x50}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8", 0x3}, {&(0x7f0000000b80)}, {&(0x7f0000000300)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c48a495fe7b4ad514001062f581e6274d711db9add53f7917e1dc555ac517ae0000000000000030656808", 0x41}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, 0x0, 0x0, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00), 0x0, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x141400) openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000fd0020851000000600000018", @ANYRES64], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x1e}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 9.344722135s ago: executing program 3 (id=2278): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xc3, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = gettid() socket$inet6(0xa, 0x800000000000002, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) exit(0x2c30) getpriority(0x1, r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001000e20300e80b0000002fb0bfc1d1446049ac0000000000004a14ada7e92f7d02b16fd88ca0ec88d5", @ANYRES32=0x0, @ANYBLOB="070d000001a0010014000300776c616e3100000000000000000000000a0001000180c20000010000"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r5 = syz_open_dev$video(&(0x7f0000000180), 0x7, 0x0) ioctl$VIDIOC_S_FREQUENCY(r5, 0x402c5639, &(0x7f0000000380)={0x0, 0x2, 0x300}) fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x1, r3}) ioctl$TCFLSH(r2, 0x5608, 0x40000000000002) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af00, &(0x7f00000000c0)=0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x4b564d07, 0x0, 0xfffffd}]}) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="a370749f6d2ebaa59c0ab887ed85234d3e52bb10a8fb3dbfe40bf70476e6be360c93c4acf86e711c4d94fe6407b90eecb521093e837e7e6d9f1829a99616d2fda10339eb6c90fa05e8802db8663f3ea29785a5046ec93b16250d8dc532aeb0f3f496a6d57392bf5e8d509cb723360b2584c0", 0x72, 0xc84) 8.157314992s ago: executing program 3 (id=2280): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x90, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0x7c, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x1, [[]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0x90}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x70bd25, 0x4000000, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) (fail_nth: 3) 7.761021264s ago: executing program 3 (id=2281): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000000)=0x20003, 0x4) getsockopt$inet6_tcp_buf(r0, 0x6, 0x8, 0x0, &(0x7f0000001040)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000340)="c4e17d6f520fc4c115ed5a00f30f5c37b9800000c00f3235000100000f30b8010000000f01d90fc73066ba4200b808000000ef0f20d835080000000f22d80f300f017900", 0x44}], 0x1, 0x0, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0, 0x800) set_mempolicy(0x2, &(0x7f0000001000)=0x5, 0x8005) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x67a, 0x8000000000000000, 0x3fe, 0x0, 0x1000, 0x2, 0x4002004c4, 0x1000, 0x0, 0x97, 0x200000000010, 0x3, 0x2, 0x4, 0x63, 0x1aa], 0x2, 0x400}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.157209444s ago: executing program 3 (id=2282): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x5000, 0x6, @loopback, 0x7}, 0x1c) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800010000000000000000000014000780080011400000000005001500000000000500010006000000050005000a00000005000400000000000900020073797a300000000014000300686173683a69702c706f72742c6970"], 0x60}}, 0x0) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f0000000040)={0x3, 0xe}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x84001, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newnexthop={0x44, 0x68, 0x1, 0x0, 0x10000000, {0x2}, [@NHA_ENCAP={0x14, 0x8, 0x0, 0x1, @LWT_BPF_OUT={0x10, 0x2, 0x0, 0x1, @LWT_BPF_PROG_NAME={0xc, 0x2, 'batadv0\x00'}}}, @NHA_ID={0x8, 0x6, 0xf0}, @NHA_OIF={0x8, 0x5, r6}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x2}]}, 0x44}}, 0x40) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x2c, 0x7, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1c}, 0xc0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x10, 0x0, 0x10000000001780}, {0x10, 0x0, 0x8}]}) 5.977019981s ago: executing program 9 (id=2283): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4, 0x8}}, 0xe8) connect$inet6(r0, 0x0, 0x0) 5.801232694s ago: executing program 9 (id=2284): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000005200000008000300", @ANYRES32=r3, @ANYBLOB="3ed8973343a43c7614e86fbb2a5989e948667b54ff01a59221b24cc6f3c7e03f407a494408d429177fca1fc79c4eaa05ada4063518b4cda3588c67974a9a35bde5718f0dcd7098be04355216e42e8b7b1e1fbb8e4c"], 0x1c}}, 0x0) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000200)) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={0x0, 0xf}, &(0x7f0000000040)=0x8) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xcb, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x1, 0x0, 0xf8}, 0xc) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f00000002c0)={0x0, 0x2, r0, 0x5}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_LEAVE_OCB(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r2, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1000, 0x4f}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x7c, 0x30, 0x1, 0x8000000, 0x3, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x10001, 0x69, 0x6, 0x1, 0xd817}, 0x2}}, @TCA_MPLS_TTL={0x5, 0x7, 0x93}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x7c}}, 0x0) syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) write$tun(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="143cede28499", @ANYRES64=r7], 0xb2) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x2, 0x3, 0x5, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x27}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x4}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0xa}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xcf, 0x3}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x7}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_clone3(&(0x7f0000000440)={0x122020080, 0x0, 0x0, 0x0, {0x8000002f}, 0x0, 0x0, 0x0, 0x0}, 0x20) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000000380), 0x4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000080)={r5, @in={{0x2, 0x4e23, @empty}}, 0x456, 0x8000, 0x5, 0x0, 0x4, 0x8, 0xe}, 0x9c) 5.369514885s ago: executing program 3 (id=2287): mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='dctcp', 0x5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x4000000) r1 = syz_usb_connect(0x0, 0x68, &(0x7f0000000600)=ANY=[@ANYBLOB="12010003185d9f4004041203c142010203010902560001a01380050904a80806f03b6f010905011020008103080705f4ba35c2ba090507073902c309050710210006050109050a10ff03050473"], &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$printer(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x109}) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="d788", 0x2}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='\\x01020304 2000000000 0 0 0 krb5 \\x00000000', 0x2b) 5.134974549s ago: executing program 9 (id=2289): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = syz_usb_connect(0x0, 0x61, &(0x7f0000000600)={{0x12, 0x1, 0x300, 0x18, 0x5d, 0x9f, 0x40, 0x404, 0x312, 0x42c1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0xa0, 0x13, 0x80, 0x5, "", [{{0x9, 0x4, 0xa8, 0x8, 0x6, 0xf0, 0x3b, 0x6f, 0x1, [], [{{0x9, 0x5, 0x1, 0x10, 0x20, 0x81, 0x3, 0x8, [@generic={0x7, 0x5, "f4ba35c2ba"}]}}, {{0x9, 0x5, 0x7, 0x1, 0x3ff, 0x6, 0x3, 0x4}}, {{0x9, 0x5, 0x0, 0x3, 0x7fe, 0x39, 0x2, 0xc3}}, {{0x9, 0x5, 0x7, 0x10, 0x20, 0x6, 0x5, 0x1}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0x5, 0x4, 0x73}}, {{0x9, 0x5, 0xc, 0x1e, 0x40, 0x0, 0x7, 0x6}}]}}]}}]}}, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000400)={0x20, 0x1, 0x18, "8103ccf040bd73b92a4b2da919b0ea4445929d29f4502a3c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000400012800c0001006d6163766c616e003000028008000300030000000900", @ANYRES32=r3], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@ifindex, r0, 0x36, 0x4}, 0x20) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x4, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r5, 0x40104593, &(0x7f0000001740)={0x0, 0x0, 0x0}) write$char_usb(r5, &(0x7f0000000040)="e2", 0xff0f) 2.226468622s ago: executing program 5 (id=2294): rt_sigpending(&(0x7f0000002080), 0x8) 2.220101932s ago: executing program 3 (id=2295): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfc}}, 0x16}, 0xfffffffffffffe32) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x24088000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002300)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r3, 0x1, &(0x7f0000000400)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x2}]) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) 1.976105588s ago: executing program 5 (id=2296): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmmsg$sock(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r0, 0x1) 1.807537278s ago: executing program 5 (id=2297): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0xfffc, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000080)={0xfffffe01, 0x9, 0xbf3ffe01, 0x8001, 0x2, "202b9809007d0000cd681ec267a000", 0x6, 0xd}) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f00000002c0)) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0xfd, 0x0, 0xfe, 0x22, 0x0, 0x7, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3}, 0xe) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') sendmsg$NL80211_CMD_DEL_PMK(r3, 0x0, 0x2000050) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040)=0x10001, 0x4) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r4 = socket(0x28, 0x5, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r5, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r5, 0x1) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x4, 0x11, 0x0, @empty, @empty}, {0xfffc, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002400)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f00000056c0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 1.806503072s ago: executing program 9 (id=2298): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x35}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x39) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000ac0)=r0, 0x4) syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0b080045ec5728006700000206907864010001ac14143259bd61c4a5ee41c863ab1a344cb277aa00000e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc2000590780006"], 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000040)={0xfdfdffff, 0xf, 0xffffffff, 0x40000005, 0xb, "088aefdd2000"}) r4 = dup(r3) write$UHID_INPUT(r4, 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0xc008ae05, &(0x7f0000000540)={0x8, 0x0, [{0x0, 0x6, 0x4, 0x8, 0x200, 0x6, 0x80000001}, {0xb, 0x16b2, 0x0, 0x50ce45ed, 0x2, 0x9, 0x4}, {0xb, 0x7, 0x1, 0x1ff, 0xb7, 0x3914, 0x5}, {0xa, 0x9, 0x4, 0x4, 0x9, 0x2, 0xd}, {0x80000019, 0x7, 0x6, 0xfff, 0x5, 0x4, 0x6}, {0xc0000001, 0x7, 0x5, 0x8, 0x2, 0x7128}, {0x80000019, 0xa, 0x1, 0xfffffffd, 0x40, 0x3, 0x5}, {0x80000019, 0x6, 0x4, 0x8, 0x800, 0x6ed4ddad, 0x1}]}) sendmsg$nl_netfilter(r4, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x118}, 0x1, 0x0, 0x0, 0x80}, 0x10) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a000040050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970000c000780080006"], 0x58}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r5 = fsopen(&(0x7f0000000140)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000080)={0x0, 0x300fdfd, 0x8, 0x14, 0x100, 0x0}) close(r5) add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000000)="5ea39da44e4f30dd914b402ba5d0143b000000dc7e00"/33, 0xfffffffffffffd21, 0xfffffffffffffffc) 1.359784083s ago: executing program 9 (id=2299): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0xfffc, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000080)={0xfffffe01, 0x9, 0xbf3ffe01, 0x8001, 0x2, "202b9809007d0000cd681ec267a000", 0x6, 0xd}) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f00000002c0)) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0xfd, 0x0, 0xfe, 0x22, 0x0, 0x7, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3}, 0xe) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') sendmsg$NL80211_CMD_DEL_PMK(r3, 0x0, 0x2000050) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040)=0x10001, 0x4) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r4 = socket(0x28, 0x5, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r5, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r5, 0x1) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x4, 0x11, 0x0, @empty, @empty}, {0xfffc, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002400)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f00000056c0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) 621.648136ms ago: executing program 5 (id=2300): connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000cc0), 0xfd45) 457.159017ms ago: executing program 5 (id=2301): r0 = socket$nl_route(0x10, 0x3, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000140)={&(0x7f0000ac8000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x2000, 0x2, 0x2}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0xfca33000) socket(0x23, 0x3, 0x202) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0xe4}, 0x1, 0x0, 0x0, 0x8801}, 0x20050840) socket$inet6_tcp(0xa, 0x1, 0x0) keyctl$set_reqkey_keyring(0xe, 0x0) syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(0x0, 0x80000) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) writev(0xffffffffffffffff, &(0x7f0000000800), 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x6) close(0x3) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) close(0x3) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000002c0)={r5, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x100, {0x0, 0x0, 0x0, r5, {0xe, 0x1}}}, 0x24}}, 0x4) 289.710851ms ago: executing program 9 (id=2302): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0xfffc, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000080)={0xfffffe01, 0x9, 0xbf3ffe01, 0x8001, 0x2, "202b9809007d0000cd681ec267a000", 0x6, 0xd}) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f00000002c0)) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0xfd, 0x0, 0xfe, 0x22, 0x0, 0x7, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3}, 0xe) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') sendmsg$NL80211_CMD_DEL_PMK(r3, 0x0, 0x2000050) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040)=0x10001, 0x4) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r4 = socket(0x28, 0x5, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r5, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r5, 0x1) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x4, 0x11, 0x0, @empty, @empty}, {0xfffc, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002400)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f00000056c0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x2, 0x0) sysfs$1(0x1, &(0x7f0000000040)='hfsplus\x00') 0s ago: executing program 5 (id=2303): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000800)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x0, 0x0, 0x0, 0x3}}]}}, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') mkdir(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1ff) symlink(&(0x7f0000000f00)='./config/usb_gadget/g1/functions/ncm.usb0\x00', &(0x7f0000001000)='./config/usb_gadget/g1/configs/c.1/ncm.usb0\x00') openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x7e6) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x163a42, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/test/memory.oom_control\x00', 0x20042, 0x0) write(r0, &(0x7f0000000200)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) kernel console output (not intermixed with test programs): 7f32e43ae0d9 [ 1199.350969][T15395] RDX: 0000000000000050 RSI: 0000200000002300 RDI: 000000000000000a [ 1199.350975][T15395] RBP: 00007f32e2606090 R08: 0000000000000000 R09: 0000000000000000 [ 1199.350981][T15395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1199.350987][T15395] R13: 00007f32e4636038 R14: 00007f32e4635fa0 R15: 00007ffe3f82f878 [ 1199.351002][T15395] [ 1199.493227][ T5698] usb 6-1: New USB device found, idVendor=0856, idProduct=ac33, bcdDevice= 0.f8 [ 1199.496174][ T5698] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.496188][ T5698] usb 6-1: Product: syz [ 1199.496195][ T5698] usb 6-1: Manufacturer: syz [ 1199.496202][ T5698] usb 6-1: SerialNumber: syz [ 1199.529548][ T5698] usb 6-1: config 0 descriptor?? [ 1199.531263][ T5698] hub 6-1:0.0: bad descriptor, ignoring hub [ 1199.531295][ T5698] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1199.532113][ T5698] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 1199.535101][ T5698] usb 6-1: Detected SIO [ 1199.699815][ T5698] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1199.819402][ T5698] usb 6-1: USB disconnect, device number 56 [ 1199.838467][ T5698] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1199.948055][ T5698] ftdi_sio 6-1:0.0: device disconnected [ 1200.157243][T15157] team0: Port device team_slave_0 added [ 1200.246587][T15157] team0: Port device team_slave_1 added [ 1200.344666][T15139] hsr_slave_0: entered promiscuous mode [ 1200.347278][T15139] hsr_slave_1: entered promiscuous mode [ 1200.349726][T15139] debugfs: 'hsr0' already exists in 'hsr' [ 1200.349744][T15139] Cannot create hsr debugfs directory [ 1200.473308][ T13] hsr_slave_0: left promiscuous mode [ 1200.475550][ T13] hsr_slave_1: left promiscuous mode [ 1200.476144][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1200.476268][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1200.476828][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1200.476841][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1202.218351][ T13] veth1_macvtap: left promiscuous mode [ 1202.218416][ T13] veth0_macvtap: left promiscuous mode [ 1202.218556][ T13] veth1_vlan: left promiscuous mode [ 1202.218664][ T13] veth0_vlan: left promiscuous mode [ 1204.033679][ T5814] usb 4-1: USB disconnect, device number 20 [ 1204.207357][ T37] kauditd_printk_skb: 30 callbacks suppressed [ 1204.207369][ T37] audit: type=1800 audit(1786889976.928:4457): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15417 res=0 errno=0 [ 1204.422011][ T37] audit: type=1800 audit(1786889977.138:4458): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16155 res=0 errno=0 [ 1204.476670][ T37] audit: type=1800 audit(1786889977.188:4459): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15663 res=0 errno=0 [ 1204.700910][ T37] audit: type=1800 audit(1786889977.418:4460): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15417 res=0 errno=0 [ 1204.882048][ T37] audit: type=1800 audit(1786889977.598:4461): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15663 res=0 errno=0 [ 1205.321729][ T37] audit: type=1800 audit(1786889978.038:4462): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16155 res=0 errno=0 [ 1205.466189][ T37] audit: type=1800 audit(1786889978.178:4463): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16155 res=0 errno=0 [ 1205.715667][ T37] audit: type=1800 audit(1786889978.438:4464): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15417 res=0 errno=0 [ 1205.897203][ T37] audit: type=1800 audit(1786889978.618:4465): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15417 res=0 errno=0 [ 1206.096882][ T37] audit: type=1800 audit(1786889978.818:4466): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15417 res=0 errno=0 [ 1206.163279][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1209.401149][ T37] audit: type=1800 audit(1786889982.118:4467): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15417 res=0 errno=0 [ 1209.462795][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1209.609448][ T37] audit: type=1800 audit(1786889982.328:4468): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15417 res=0 errno=0 [ 1209.855040][ T37] audit: type=1800 audit(1786889982.578:4469): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15417 res=0 errno=0 [ 1209.931417][T15157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1209.931428][T15157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1209.931445][T15157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1210.100776][ T37] audit: type=1800 audit(1786889982.818:4470): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15663 res=0 errno=0 [ 1210.133181][T15157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1210.133192][T15157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1210.133206][T15157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1210.395583][ T37] audit: type=1800 audit(1786889983.108:4471): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16155 res=0 errno=0 [ 1210.559654][ T37] audit: type=1800 audit(1786889983.278:4472): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16155 res=0 errno=0 [ 1210.581561][ T6018] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1210.769055][ T6018] usb 6-1: Using ep0 maxpacket: 16 [ 1210.769618][ T6018] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1210.770624][ T6018] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 1210.770638][ T6018] usb 6-1: config 0 has no interface number 0 [ 1210.774232][ T6018] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.774248][ T6018] usb 6-1: Product: syz [ 1210.774255][ T6018] usb 6-1: Manufacturer: syz [ 1210.774262][ T6018] usb 6-1: SerialNumber: syz [ 1210.796000][ T37] audit: type=1800 audit(1786889983.518:4473): pid=15449 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=402341 res=0 errno=0 [ 1210.843375][ T37] audit: type=1800 audit(1786889983.568:4474): pid=15449 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=402373 res=0 errno=0 [ 1210.846428][ T6018] usb 6-1: config 0 descriptor?? [ 1210.856384][ T6018] hub 6-1:0.132: bad descriptor, ignoring hub [ 1210.856419][ T6018] hub 6-1:0.132: probe with driver hub failed with error -5 [ 1210.890512][ T37] audit: type=1800 audit(1786889983.608:4475): pid=15449 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=402348 res=0 errno=0 [ 1210.890545][ T37] audit: type=1800 audit(1786889983.608:4476): pid=15449 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=402349 res=0 errno=0 [ 1211.005685][ T6018] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.132/input/input45 [ 1211.063005][T15157] hsr_slave_0: entered promiscuous mode [ 1211.095743][T15157] hsr_slave_1: entered promiscuous mode [ 1211.099523][T15157] debugfs: 'hsr0' already exists in 'hsr' [ 1211.099541][T15157] Cannot create hsr debugfs directory [ 1211.146708][T15461] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2085'. [ 1211.254180][T15473] FAULT_INJECTION: forcing a failure. [ 1211.254180][T15473] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1211.254202][T15473] CPU: 0 UID: 0 PID: 15473 Comm: syz.3.2089 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1211.254216][T15473] Tainted: [L]=SOFTLOCKUP [ 1211.254220][T15473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1211.254226][T15473] Call Trace: [ 1211.254231][T15473] [ 1211.254236][T15473] dump_stack_lvl+0xe8/0x150 [ 1211.254255][T15473] should_fail_ex+0x467/0x600 [ 1211.254274][T15473] _copy_to_user+0x31/0xb0 [ 1211.254287][T15473] simple_read_from_buffer+0xe1/0x170 [ 1211.254300][T15473] proc_fail_nth_read+0x1be/0x230 [ 1211.254313][T15473] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1211.254325][T15473] ? rw_verify_area+0x250/0x4d0 [ 1211.254338][T15473] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1211.254348][T15473] vfs_read+0x219/0xa90 [ 1211.254363][T15473] ? __pfx_vfs_read+0x10/0x10 [ 1211.254375][T15473] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1211.254389][T15473] ? lockdep_hardirqs_on+0x7a/0x110 [ 1211.254400][T15473] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1211.254412][T15473] ? mutex_lock_nested+0x152/0x1d0 [ 1211.254425][T15473] ? fdget_pos+0x252/0x320 [ 1211.254440][T15473] ksys_read+0x156/0x270 [ 1211.254452][T15473] ? __pfx_ksys_read+0x10/0x10 [ 1211.254468][T15473] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1211.254479][T15473] do_syscall_64+0x174/0x580 [ 1211.254499][T15473] ? trace_irq_disable+0x3b/0x140 [ 1211.254514][T15473] ? clear_bhb_loop+0x70/0xc0 [ 1211.254526][T15473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1211.254536][T15473] RIP: 0033:0x7f919d9fe90e [ 1211.254546][T15473] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1211.254555][T15473] RSP: 002b:00007f919bc95fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1211.254566][T15473] RAX: ffffffffffffffda RBX: 00007f919bc966c0 RCX: 00007f919d9fe90e [ 1211.254573][T15473] RDX: 000000000000000f RSI: 00007f919bc960a0 RDI: 0000000000000003 [ 1211.254579][T15473] RBP: 00007f919bc96090 R08: 0000000000000000 R09: 0000000000000000 [ 1211.254585][T15473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1211.254591][T15473] R13: 00007f919dcc6038 R14: 00007f919dcc5fa0 R15: 00007ffd68611088 [ 1211.254607][T15473] [ 1211.278692][T15461] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1212.353653][ T6021] usb 6-1: USB disconnect, device number 57 [ 1214.872143][ T37] kauditd_printk_skb: 12 callbacks suppressed [ 1214.872158][ T37] audit: type=1800 audit(1786889987.588:4489): pid=15449 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=402540 res=0 errno=0 [ 1214.872186][ T37] audit: type=1800 audit(1786889987.588:4490): pid=15449 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=402538 res=0 errno=0 [ 1215.490690][ T37] audit: type=1800 audit(1786889988.208:4491): pid=15449 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="properties" dev="sysfs" ino=402506 res=0 errno=0 [ 1215.515402][ T37] audit: type=1800 audit(1786889988.238:4492): pid=15449 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="bustype" dev="sysfs" ino=402509 res=0 errno=0 [ 1215.626208][ T37] audit: type=1800 audit(1786889988.348:4493): pid=15449 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="name" dev="sysfs" ino=402502 res=0 errno=0 [ 1215.702351][ T37] audit: type=1800 audit(1786889988.428:4494): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15417 res=0 errno=0 [ 1215.775194][ T37] audit: type=1800 audit(1786889988.498:4495): pid=15463 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="phys" dev="sysfs" ino=402503 res=0 errno=0 [ 1215.859329][ T37] audit: type=1800 audit(1786889988.578:4496): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15663 res=0 errno=0 [ 1216.110626][ T37] audit: type=1800 audit(1786889988.828:4497): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16155 res=0 errno=0 [ 1216.190588][ T37] audit: type=1800 audit(1786889988.908:4498): pid=15139 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=24660 res=0 errno=0 [ 1216.221461][T15495] unsupported nla_type 97 [ 1217.727875][ T5588] Bluetooth: hci2: link tx timeout [ 1217.735979][ T5588] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1217.767078][ T5588] Bluetooth: hci2: link tx timeout [ 1217.767094][ T5588] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1217.789900][ T5588] Bluetooth: hci2: link tx timeout [ 1217.789916][ T5588] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1217.806856][ T5588] Bluetooth: hci2: link tx timeout [ 1217.806871][ T5588] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1217.815144][ T5588] Bluetooth: hci2: link tx timeout [ 1217.815159][ T5588] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1217.886673][ T5588] Bluetooth: hci2: link tx timeout [ 1217.886687][ T5588] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1218.377044][T15546] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1218.472581][ T6018] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1218.620302][ T6018] usb 10-1: Using ep0 maxpacket: 16 [ 1218.620891][ T6018] usb 10-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1218.621900][ T6018] usb 10-1: config 0 has an invalid interface number: 132 but max is 0 [ 1218.621914][ T6018] usb 10-1: config 0 has no interface number 0 [ 1218.623865][ T6018] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1218.623879][ T6018] usb 10-1: Product: syz [ 1218.623887][ T6018] usb 10-1: Manufacturer: syz [ 1218.623894][ T6018] usb 10-1: SerialNumber: syz [ 1218.627257][ T6018] usb 10-1: config 0 descriptor?? [ 1218.629051][ T6018] hub 10-1:0.132: bad descriptor, ignoring hub [ 1218.629084][ T6018] hub 10-1:0.132: probe with driver hub failed with error -5 [ 1218.714516][ T6018] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.132/input/input46 [ 1218.975544][T15550] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2101'. [ 1219.137199][ T5242] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1219.830483][ T5588] Bluetooth: hci2: command 0x0406 tx timeout [ 1220.302049][ T5698] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1220.459055][ T5698] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1220.459093][ T5698] usb 6-1: New USB device found, idVendor=0404, idProduct=0312, bcdDevice=42.c1 [ 1220.460879][ T5698] usb 6-1: config 160 has an invalid interface number: 168 but max is 0 [ 1220.460894][ T5698] usb 6-1: config 160 has an invalid descriptor of length 0, skipping remainder of the config [ 1220.460904][ T5698] usb 6-1: config 160 has no interface number 0 [ 1220.460931][ T5698] usb 6-1: config 160 interface 168 altsetting 8 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 1220.460944][ T5698] usb 6-1: config 160 interface 168 altsetting 8 endpoint 0x84 has invalid maxpacket 49717, setting to 1024 [ 1220.460957][ T5698] usb 6-1: config 160 interface 168 altsetting 8 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1220.460969][ T5698] usb 6-1: config 160 interface 168 altsetting 8 endpoint 0x7 has an invalid bInterval 195, changing to 11 [ 1220.460982][ T5698] usb 6-1: config 160 interface 168 altsetting 8 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 1220.460995][ T5698] usb 6-1: config 160 interface 168 altsetting 8 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 1220.461007][ T5698] usb 6-1: config 160 interface 168 has no altsetting 0 [ 1220.574904][ T5698] usb 6-1: string descriptor 0 read error: -22 [ 1220.574999][ T5698] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.617271][T15570] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1220.618499][ T37] kauditd_printk_skb: 39 callbacks suppressed [ 1220.618509][ T37] audit: type=1800 audit(1786889993.338:4538): pid=15449 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=405063 res=0 errno=0 [ 1220.663927][ T5698] io_edgeport 6-1:160.168: required endpoints missing [ 1220.664640][ T37] audit: type=1800 audit(1786889993.388:4539): pid=15449 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=405092 res=0 errno=0 [ 1220.675948][ T37] audit: type=1800 audit(1786889993.398:4540): pid=15449 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=405070 res=0 errno=0 [ 1220.676465][ T37] audit: type=1800 audit(1786889993.398:4541): pid=15449 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=405071 res=0 errno=0 [ 1220.753040][ T37] audit: type=1800 audit(1786889993.478:4542): pid=15449 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=405072 res=0 errno=0 [ 1220.790268][ T37] audit: type=1800 audit(1786889993.518:4543): pid=15449 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=405112 res=0 errno=0 [ 1221.070222][ T37] audit: type=1800 audit(1786889993.788:4544): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15417 res=0 errno=0 [ 1221.146568][T15572] binder: 15571:15572 ioctl c0306201 200000000680 returned -14 [ 1221.242657][ T37] audit: type=1800 audit(1786889993.968:4545): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15417 res=0 errno=0 [ 1221.540119][T15550] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1221.823637][ T37] audit: type=1800 audit(1786889994.548:4546): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16155 res=0 errno=0 [ 1221.865586][ T5698] usb 10-1: USB disconnect, device number 26 [ 1221.917458][ T37] audit: type=1800 audit(1786889994.638:4547): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=405212 res=0 errno=0 [ 1222.449532][ T5596] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:201' [ 1222.449551][ T5596] CPU: 0 UID: 0 PID: 5596 Comm: kworker/u9:5 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1222.449566][ T5596] Tainted: [L]=SOFTLOCKUP [ 1222.449571][ T5596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1222.449578][ T5596] Workqueue: hci6 hci_rx_work [ 1222.449661][ T5596] Call Trace: [ 1222.449666][ T5596] [ 1222.449673][ T5596] dump_stack_lvl+0xe8/0x150 [ 1222.449691][ T5596] sysfs_create_dir_ns+0x271/0x2a0 [ 1222.449704][ T5596] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1222.449718][ T5596] ? rt_spin_unlock+0x163/0x200 [ 1222.449730][ T5596] kobject_add_internal+0x62c/0xce0 [ 1222.449749][ T5596] kobject_add+0x163/0x240 [ 1222.449761][ T5596] ? rt_spin_unlock+0x157/0x200 [ 1222.449773][ T5596] ? __pfx_kobject_add+0x10/0x10 [ 1222.449791][ T5596] ? get_device_parent+0x370/0x3a0 [ 1222.449851][ T5596] device_add+0x3fa/0xb80 [ 1222.449865][ T5596] hci_conn_add_sysfs+0xd5/0x210 [ 1222.449899][ T5596] le_conn_complete_evt+0xfef/0x1580 [ 1222.449956][ T5596] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1222.449970][ T5596] ? lockdep_hardirqs_on+0x7a/0x110 [ 1222.449983][ T5596] ? rt_mutex_slowunlock+0x219/0x460 [ 1222.449999][ T5596] ? skb_pull_data+0xf0/0x200 [ 1222.450021][ T5596] hci_le_enh_conn_complete_evt+0x189/0x490 [ 1222.450035][ T5596] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 1222.450050][ T5596] hci_event_packet+0x67a/0xf10 [ 1222.450086][ T5596] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1222.450102][ T5596] ? __pfx_hci_event_packet+0x10/0x10 [ 1222.450113][ T5596] ? rt_spin_unlock+0x157/0x200 [ 1222.450127][ T5596] ? hci_send_to_monitor+0xe2/0x590 [ 1222.450143][ T5596] hci_rx_work+0x3ee/0x1020 [ 1222.450159][ T5596] ? process_scheduled_works+0xa20/0x14e0 [ 1222.450170][ T5596] process_scheduled_works+0xa8e/0x14e0 [ 1222.450196][ T5596] ? __pfx_process_scheduled_works+0x10/0x10 [ 1222.450211][ T5596] ? assign_work+0x3cf/0x5d0 [ 1222.450225][ T5596] worker_thread+0xa47/0xfb0 [ 1222.450250][ T5596] kthread+0x388/0x470 [ 1222.450264][ T5596] ? __pfx_worker_thread+0x10/0x10 [ 1222.450274][ T5596] ? __pfx_kthread+0x10/0x10 [ 1222.450288][ T5596] ret_from_fork+0x514/0xb70 [ 1222.450305][ T5596] ? __pfx_ret_from_fork+0x10/0x10 [ 1222.450319][ T5596] ? __switch_to+0xc89/0x1420 [ 1222.450332][ T5596] ? __pfx_kthread+0x10/0x10 [ 1222.450346][ T5596] ret_from_fork_asm+0x1a/0x30 [ 1222.450369][ T5596] [ 1222.455381][ T5596] kobject: kobject_add_internal failed for hci6:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1222.455414][ T5596] Bluetooth: hci6: failed to register connection device [ 1222.630090][T11156] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1222.820598][T11156] usb 10-1: device descriptor read/64, error -71 [ 1223.026383][ T5698] usb 6-1: USB disconnect, device number 58 [ 1223.069829][T11156] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1223.212717][T11156] usb 10-1: device descriptor read/64, error -71 [ 1223.322893][T11156] usb usb10-port1: attempt power cycle [ 1223.606210][ T5242] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1223.660040][T11156] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1223.680208][T11156] usb 10-1: device descriptor read/8, error -71 [ 1223.939847][T11156] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1223.964107][T11156] usb 10-1: device descriptor read/8, error -71 [ 1224.070005][T11156] usb usb10-port1: unable to enumerate USB device [ 1225.052703][ T5588] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1225.106109][ T5588] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1225.124843][ T5588] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1225.151712][ T5588] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1225.185116][ T5588] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1225.795141][T15621] FAULT_INJECTION: forcing a failure. [ 1225.795141][T15621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1225.795164][T15621] CPU: 0 UID: 0 PID: 15621 Comm: syz.5.2118 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1225.795179][T15621] Tainted: [L]=SOFTLOCKUP [ 1225.795183][T15621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1225.795189][T15621] Call Trace: [ 1225.795194][T15621] [ 1225.795199][T15621] dump_stack_lvl+0xe8/0x150 [ 1225.795218][T15621] should_fail_ex+0x467/0x600 [ 1225.795237][T15621] _copy_to_iter+0x1e4/0x1810 [ 1225.795253][T15621] ? __lock_acquire+0x683/0x2ce0 [ 1225.795264][T15621] ? kstrtouint+0x6e/0xe0 [ 1225.795281][T15621] ? __pfx__copy_to_iter+0x10/0x10 [ 1225.795294][T15621] ? __lock_acquire+0x683/0x2ce0 [ 1225.795308][T15621] ? __might_fault+0xaf/0x130 [ 1225.795321][T15621] netlink_getsockopt+0x343/0x650 [ 1225.795339][T15621] ? __pfx_netlink_getsockopt+0x10/0x10 [ 1225.795358][T15621] do_sock_getsockopt+0x6ae/0x7e0 [ 1225.795375][T15621] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1225.795394][T15621] ? __fget_files+0x3a8/0x420 [ 1225.795404][T15621] ? __fget_files+0x2a/0x420 [ 1225.795417][T15621] __x64_sys_getsockopt+0x1aa/0x250 [ 1225.795431][T15621] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1225.795442][T15621] do_syscall_64+0x174/0x580 [ 1225.795454][T15621] ? trace_irq_disable+0x3b/0x140 [ 1225.795469][T15621] ? clear_bhb_loop+0x70/0xc0 [ 1225.795480][T15621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1225.795490][T15621] RIP: 0033:0x7f78124ae0d9 [ 1225.795501][T15621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1225.795510][T15621] RSP: 002b:00007f7810706028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1225.795521][T15621] RAX: ffffffffffffffda RBX: 00007f7812735fa0 RCX: 00007f78124ae0d9 [ 1225.795528][T15621] RDX: 000000000000000b RSI: 000000000000010e RDI: 0000000000000003 [ 1225.795535][T15621] RBP: 00007f7810706090 R08: 00002000000003c0 R09: 0000000000000000 [ 1225.795541][T15621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1225.795547][T15621] R13: 00007f7812736038 R14: 00007f7812735fa0 R15: 00007ffc0e7664f8 [ 1225.795561][T15621] [ 1226.535520][ T37] kauditd_printk_skb: 13 callbacks suppressed [ 1226.535532][ T37] audit: type=1800 audit(1786889999.258:4561): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16155 res=0 errno=0 [ 1226.734477][ T37] audit: type=1800 audit(1786889999.458:4562): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15417 res=0 errno=0 [ 1226.827054][ T37] audit: type=1800 audit(1786889999.548:4563): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15663 res=0 errno=0 [ 1227.419175][ T5588] Bluetooth: hci3: command tx timeout [ 1227.510642][ T37] audit: type=1800 audit(1786890000.228:4564): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15663 res=0 errno=0 [ 1227.970839][ T37] audit: type=1800 audit(1786890000.698:4565): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15417 res=0 errno=0 [ 1228.135444][ T37] audit: type=1800 audit(1786890000.778:4566): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16155 res=0 errno=0 [ 1228.162192][ T37] audit: type=1800 audit(1786890000.888:4567): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15663 res=0 errno=0 [ 1228.177786][ T37] audit: type=1800 audit(1786890000.898:4568): pid=15647 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.9.2123" name="pm_print_times" dev="sysfs" ino=1416 res=0 errno=0 [ 1228.301214][T15652] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2125'. [ 1229.225939][ T37] audit: type=1800 audit(1786890001.948:4569): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16155 res=0 errno=0 [ 1229.495577][ T37] audit: type=1800 audit(1786890002.218:4570): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16155 res=0 errno=0 [ 1229.499098][T15657] Bluetooth: hci3: command tx timeout [ 1229.599646][T15650] loop2: detected capacity change from 0 to 7 [ 1229.638137][T15650] Dev loop2: unable to read RDB block 7 [ 1229.638171][T15650] loop2: unable to read partition table [ 1229.638315][T15650] loop2: partition table beyond EOD, truncated [ 1229.638336][T15650] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1229.842312][ T5814] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1230.000202][ T5814] usb 10-1: Using ep0 maxpacket: 16 [ 1230.000792][ T5814] usb 10-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1230.002133][ T5814] usb 10-1: config 0 has an invalid interface number: 132 but max is 0 [ 1230.002147][ T5814] usb 10-1: config 0 has no interface number 0 [ 1230.004107][ T5814] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.004120][ T5814] usb 10-1: Product: syz [ 1230.004128][ T5814] usb 10-1: Manufacturer: syz [ 1230.004152][ T5814] usb 10-1: SerialNumber: syz [ 1230.089233][ T5814] usb 10-1: config 0 descriptor?? [ 1230.094907][ T5814] hub 10-1:0.132: bad descriptor, ignoring hub [ 1230.094940][ T5814] hub 10-1:0.132: probe with driver hub failed with error -5 [ 1230.151092][ T5814] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.132/input/input47 [ 1230.612912][T15663] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2127'. [ 1230.623164][T15657] Bluetooth: hci6: command 0x0406 tx timeout [ 1231.230487][ T5814] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 1231.380583][ T5814] usb 4-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 1231.401162][ T5814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.401179][ T5814] usb 4-1: Product: syz [ 1231.401186][ T5814] usb 4-1: Manufacturer: syz [ 1231.401193][ T5814] usb 4-1: SerialNumber: syz [ 1231.494093][T15657] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1231.542362][T15657] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1231.545414][T15657] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1231.546130][T15657] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1231.546723][T15657] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1231.578657][T15657] Bluetooth: hci3: command tx timeout [ 1231.887979][ T5814] usb 4-1: config 0 descriptor?? [ 1231.913272][ T37] kauditd_printk_skb: 33 callbacks suppressed [ 1231.913284][ T37] audit: type=1800 audit(1786890004.638:4604): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15663 res=0 errno=0 [ 1231.945715][ T37] audit: type=1800 audit(1786890004.668:4605): pid=15449 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=405642 res=0 errno=0 [ 1231.980148][ T5814] gspca_main: spca508-2.14.0 probing 041e:4018 [ 1231.998281][ T37] audit: type=1800 audit(1786890004.708:4606): pid=15449 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=405653 res=0 errno=0 [ 1231.998311][ T37] audit: type=1800 audit(1786890004.718:4607): pid=15653 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=405597 res=0 errno=0 [ 1232.060644][ T37] audit: type=1800 audit(1786890004.788:4608): pid=15653 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=405629 res=0 errno=0 [ 1232.083303][ T37] audit: type=1800 audit(1786890004.798:4609): pid=15653 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=405604 res=0 errno=0 [ 1232.154039][ T5814] gspca_spca508: reg_read err -32 [ 1232.224646][ T37] audit: type=1800 audit(1786890004.948:4610): pid=15653 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=405605 res=0 errno=0 [ 1232.537697][ T37] audit: type=1800 audit(1786890005.258:4611): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15663 res=0 errno=0 [ 1232.663459][ T5814] gspca_spca508: reg_read err -110 [ 1232.663995][ T5814] gspca_spca508: reg_read err -32 [ 1232.665022][ T5814] gspca_spca508: reg_read err -32 [ 1232.668503][ T5814] gspca_spca508: reg_read err -32 [ 1232.678522][ T5814] gspca_spca508: reg write: error -32 [ 1232.678584][ T5814] spca508 4-1:0.0: probe with driver spca508 failed with error -32 [ 1232.728189][ T37] audit: type=1800 audit(1786890005.438:4612): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16155 res=0 errno=0 [ 1232.728221][ T37] audit: type=1800 audit(1786890005.438:4613): pid=15653 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=405626 res=0 errno=0 [ 1233.699310][ T5596] Bluetooth: hci3: command tx timeout [ 1233.903659][ T5596] Bluetooth: hci0: command tx timeout [ 1235.021705][ T6018] usb 10-1: USB disconnect, device number 31 [ 1235.978067][ T5596] Bluetooth: hci0: command tx timeout [ 1238.057817][ T5596] Bluetooth: hci0: command tx timeout [ 1238.582285][T11050] bridge_slave_1: left allmulticast mode [ 1238.582309][T11050] bridge_slave_1: left promiscuous mode [ 1238.582478][T11050] bridge0: port 2(bridge_slave_1) entered disabled state [ 1238.651688][ T37] kauditd_printk_skb: 24 callbacks suppressed [ 1238.651701][ T37] audit: type=1800 audit(1786890011.378:4638): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15663 res=0 errno=0 [ 1238.760107][ T37] audit: type=1800 audit(1786890011.488:4639): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16155 res=0 errno=0 [ 1238.934185][T11050] bridge_slave_0: left allmulticast mode [ 1238.934207][T11050] bridge_slave_0: left promiscuous mode [ 1238.945719][T11050] bridge0: port 1(bridge_slave_0) entered disabled state [ 1239.742367][ T37] audit: type=1800 audit(1786890012.468:4640): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16155 res=0 errno=0 [ 1240.050186][T11050] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1240.052857][T11050] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1240.054593][T11050] bond0 (unregistering): Released all slaves [ 1240.133866][ T6021] usb 4-1: USB disconnect, device number 21 [ 1240.138750][ T5596] Bluetooth: hci0: command tx timeout [ 1240.361652][ T37] audit: type=1800 audit(1786890013.058:4641): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15663 res=0 errno=0 [ 1240.375816][T15756] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2140'. [ 1240.386531][ T37] audit: type=1800 audit(1786890013.108:4642): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15417 res=0 errno=0 [ 1240.387633][T15757] FAULT_INJECTION: forcing a failure. [ 1240.387633][T15757] name failslab, interval 1, probability 0, space 0, times 0 [ 1240.387655][T15757] CPU: 0 UID: 0 PID: 15757 Comm: syz.3.2141 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1240.387670][T15757] Tainted: [L]=SOFTLOCKUP [ 1240.387674][T15757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1240.387680][T15757] Call Trace: [ 1240.387684][T15757] [ 1240.387690][T15757] dump_stack_lvl+0xe8/0x150 [ 1240.387709][T15757] should_fail_ex+0x467/0x600 [ 1240.387727][T15757] should_failslab+0xa8/0x100 [ 1240.387739][T15757] kmem_cache_alloc_noprof+0xa4/0x650 [ 1240.387755][T15757] ? alloc_empty_file+0x5b/0x1d0 [ 1240.387769][T15757] ? alloc_empty_file+0x5b/0x1d0 [ 1240.387786][T15757] alloc_empty_file+0x5b/0x1d0 [ 1240.387800][T15757] path_openat+0x8f/0x3850 [ 1240.387815][T15757] ? __kernel_text_address+0xd/0x30 [ 1240.387830][T15757] ? unwind_get_return_address+0x4d/0x90 [ 1240.387841][T15757] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1240.387856][T15757] ? arch_stack_walk+0xfb/0x150 [ 1240.387872][T15757] ? stack_trace_save+0xa9/0x100 [ 1240.387889][T15757] do_file_open+0x23e/0x4a0 [ 1240.387903][T15757] ? __pfx_do_file_open+0x10/0x10 [ 1240.387913][T15757] ? __kasan_slab_alloc+0x6c/0x80 [ 1240.387946][T15757] ? do_open_execat+0xad/0x590 [ 1240.387959][T15757] do_open_execat+0x12b/0x590 [ 1240.387969][T15757] ? __might_fault+0xaf/0x130 [ 1240.387980][T15757] ? __pfx_do_open_execat+0x10/0x10 [ 1240.387997][T15757] alloc_bprm+0x24/0x640 [ 1240.388009][T15757] do_execveat_common+0x172/0x670 [ 1240.388024][T15757] __x64_sys_execveat+0xc7/0xf0 [ 1240.388036][T15757] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1240.388046][T15757] do_syscall_64+0x174/0x580 [ 1240.388059][T15757] ? trace_irq_disable+0x3b/0x140 [ 1240.388074][T15757] ? clear_bhb_loop+0x70/0xc0 [ 1240.388086][T15757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1240.388096][T15757] RIP: 0033:0x7f919da3e0d9 [ 1240.388106][T15757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1240.388115][T15757] RSP: 002b:00007f919bc96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1240.388127][T15757] RAX: ffffffffffffffda RBX: 00007f919dcc5fa0 RCX: 00007f919da3e0d9 [ 1240.388134][T15757] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 1240.388140][T15757] RBP: 00007f919bc96090 R08: 0000000000001000 R09: 0000000000000000 [ 1240.388147][T15757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1240.388153][T15757] R13: 00007f919dcc6038 R14: 00007f919dcc5fa0 R15: 00007ffd68611088 [ 1240.388168][T15757] [ 1241.085778][ T37] audit: type=1800 audit(1786890013.808:4643): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16155 res=0 errno=0 [ 1241.171033][ T37] audit: type=1800 audit(1786890013.898:4644): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15417 res=0 errno=0 [ 1241.721996][ T37] audit: type=1800 audit(1786890014.448:4645): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15663 res=0 errno=0 [ 1242.122022][ T37] audit: type=1800 audit(1786890014.848:4646): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15417 res=0 errno=0 [ 1242.215572][ T37] audit: type=1800 audit(1786890014.938:4647): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16155 res=0 errno=0 [ 1242.541292][ T6021] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1242.690017][ T6021] usb 10-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 1242.691043][ T6021] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1242.692988][ T6021] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.693002][ T6021] usb 10-1: Product: syz [ 1242.693009][ T6021] usb 10-1: Manufacturer: syz [ 1242.693017][ T6021] usb 10-1: SerialNumber: syz [ 1243.217154][ T6021] dvbdev: DVB: registering new adapter (DEC3000-s) [ 1243.411243][T15778] program syz.9.2146 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1243.517659][ T6021] usb 10-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC3000-s Frontend)... [ 1243.851789][ T37] kauditd_printk_skb: 13 callbacks suppressed [ 1243.851802][ T37] audit: type=1800 audit(1786890016.578:4661): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15663 res=0 errno=0 [ 1243.860146][ T37] audit: type=1800 audit(1786890016.588:4662): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=406457 res=0 errno=0 [ 1243.910697][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 1243.910738][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 1243.992763][ T37] audit: type=1800 audit(1786890016.718:4663): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15417 res=0 errno=0 [ 1243.995498][ T6021] ttusb_dec_send_command: command bulk message failed: error -71 [ 1244.072023][ T6021] usb 10-1: USB disconnect, device number 32 [ 1244.128135][T11050] hsr_slave_0: left promiscuous mode [ 1244.128642][T11050] hsr_slave_1: left promiscuous mode [ 1244.129131][T11050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1244.131227][T11050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1244.232370][T11050] veth1_vlan: left promiscuous mode [ 1244.317883][T11050] veth0_vlan: left promiscuous mode [ 1244.345378][ T37] audit: type=1800 audit(1786890017.068:4664): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16155 res=0 errno=0 [ 1244.416985][ T37] audit: type=1800 audit(1786890017.128:4665): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15663 res=0 errno=0 [ 1244.423691][ T37] audit: type=1800 audit(1786890017.148:4666): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=406742 res=0 errno=0 [ 1244.498581][T15801] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2152'. [ 1244.648282][ T37] audit: type=1800 audit(1786890017.378:4667): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15663 res=0 errno=0 [ 1245.379698][ T37] audit: type=1800 audit(1786890018.108:4668): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15417 res=0 errno=0 [ 1248.758412][ T37] audit: type=1800 audit(1786890021.488:4669): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15663 res=0 errno=0 [ 1249.138892][ T37] audit: type=1800 audit(1786890021.868:4670): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16155 res=0 errno=0 [ 1249.300254][T11050] team0 (unregistering): Port device team_slave_1 removed [ 1249.332467][T11050] team0 (unregistering): Port device team_slave_0 removed [ 1249.628960][ T37] audit: type=1800 audit(1786890022.358:4671): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15417 res=0 errno=0 [ 1250.210261][ T37] audit: type=1800 audit(1786890022.938:4672): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16155 res=0 errno=0 [ 1250.341516][ T37] audit: type=1800 audit(1786890023.068:4673): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15663 res=0 errno=0 [ 1250.604357][ T5596] Bluetooth: hci5: unexpected event for opcode 0x2035 [ 1250.780594][ T37] audit: type=1800 audit(1786890023.478:4674): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15663 res=0 errno=0 [ 1250.858712][ T37] audit: type=1800 audit(1786890023.588:4675): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15417 res=0 errno=0 [ 1250.944287][T15829] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2161'. [ 1251.149200][ T37] audit: type=1800 audit(1786890023.877:4676): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15663 res=0 errno=0 [ 1251.392930][ T37] audit: type=1800 audit(1786890024.117:4677): pid=15832 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.2162" name="protocol" dev="sysfs" ino=43796 res=0 errno=0 [ 1251.536121][ T37] audit: type=1800 audit(1786890024.257:4678): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15417 res=0 errno=0 [ 1251.612113][ T37] audit: type=1800 audit(1786890024.337:4679): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15663 res=0 errno=0 [ 1254.881030][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 1254.881043][ T37] audit: type=1800 audit(1786890027.597:4681): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15663 res=0 errno=0 [ 1255.789358][T15856] FAULT_INJECTION: forcing a failure. [ 1255.789358][T15856] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1255.789382][T15856] CPU: 0 UID: 0 PID: 15856 Comm: syz.5.2167 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1255.789405][T15856] Tainted: [L]=SOFTLOCKUP [ 1255.789412][T15856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1255.789423][T15856] Call Trace: [ 1255.789432][T15856] [ 1255.789442][T15856] dump_stack_lvl+0xe8/0x150 [ 1255.789480][T15856] should_fail_ex+0x467/0x600 [ 1255.789499][T15856] _copy_to_user+0x31/0xb0 [ 1255.789512][T15856] simple_read_from_buffer+0xe1/0x170 [ 1255.789526][T15856] proc_fail_nth_read+0x1be/0x230 [ 1255.789539][T15856] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1255.789551][T15856] ? rw_verify_area+0x250/0x4d0 [ 1255.789564][T15856] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1255.789574][T15856] vfs_read+0x219/0xa90 [ 1255.789589][T15856] ? __pfx_vfs_read+0x10/0x10 [ 1255.789601][T15856] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1255.789615][T15856] ? lockdep_hardirqs_on+0x7a/0x110 [ 1255.789627][T15856] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1255.789639][T15856] ? mutex_lock_nested+0x152/0x1d0 [ 1255.789653][T15856] ? fdget_pos+0x252/0x320 [ 1255.789667][T15856] ksys_read+0x156/0x270 [ 1255.789680][T15856] ? __pfx_ksys_read+0x10/0x10 [ 1255.789695][T15856] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1255.789706][T15856] do_syscall_64+0x174/0x580 [ 1255.789718][T15856] ? trace_irq_disable+0x3b/0x140 [ 1255.789733][T15856] ? clear_bhb_loop+0x70/0xc0 [ 1255.789745][T15856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1255.789755][T15856] RIP: 0033:0x7f781246e90e [ 1255.789766][T15856] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1255.789774][T15856] RSP: 002b:00007f78106e4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1255.789785][T15856] RAX: ffffffffffffffda RBX: 00007f78106e56c0 RCX: 00007f781246e90e [ 1255.789793][T15856] RDX: 000000000000000f RSI: 00007f78106e50a0 RDI: 0000000000000004 [ 1255.789799][T15856] RBP: 00007f78106e5090 R08: 0000000000000000 R09: 0000000000000000 [ 1255.789805][T15856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1255.789811][T15856] R13: 00007f7812736128 R14: 00007f7812736090 R15: 00007ffc0e7664f8 [ 1255.789827][T15856] [ 1256.578574][ T37] audit: type=1800 audit(1786890029.307:4682): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16155 res=0 errno=0 [ 1257.866217][T15850] lo: entered promiscuous mode [ 1258.052960][T15850] tunl0: entered promiscuous mode [ 1258.053514][T15850] gre0: entered promiscuous mode [ 1258.067867][T15850] gretap0: entered promiscuous mode [ 1258.161297][T15850] erspan0: entered promiscuous mode [ 1258.197252][T15850] ip_vti0: entered promiscuous mode [ 1258.197734][T15850] ip6_vti0: entered promiscuous mode [ 1258.198083][T15850] sit0: entered promiscuous mode [ 1258.250558][T15850] ip6tnl0: entered promiscuous mode [ 1258.250950][T15850] ip6gre0: entered promiscuous mode [ 1258.251495][T15850] syz_tun: entered promiscuous mode [ 1258.251938][T15850] ip6gretap0: entered promiscuous mode [ 1258.257932][T15850] bridge0: entered promiscuous mode [ 1258.260503][T15850] vcan0: entered promiscuous mode [ 1258.260975][T15850] bond0: entered promiscuous mode [ 1258.260985][T15850] bond_slave_0: entered promiscuous mode [ 1258.261089][T15850] bond_slave_1: entered promiscuous mode [ 1258.304023][T15850] team0: entered promiscuous mode [ 1258.304038][T15850] team_slave_0: entered promiscuous mode [ 1258.304184][T15850] team_slave_1: entered promiscuous mode [ 1258.311844][T15850] dummy0: entered promiscuous mode [ 1258.312478][T15850] nlmon0: entered promiscuous mode [ 1258.347285][T15850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1258.347762][T15850] veth0: entered promiscuous mode [ 1258.348445][T15850] veth1: entered promiscuous mode [ 1258.364731][T15850] wg0: entered promiscuous mode [ 1258.365741][T15850] wg1: entered promiscuous mode [ 1258.387683][T15850] wg2: entered promiscuous mode [ 1258.388242][T15850] veth0_to_bridge: entered promiscuous mode [ 1258.400378][ T37] audit: type=1800 audit(1786890031.127:4683): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15663 res=0 errno=0 [ 1258.406095][T15850] veth1_to_bridge: entered promiscuous mode [ 1258.434253][T15850] veth0_to_bond: entered promiscuous mode [ 1258.435291][ T6018] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1258.480391][T15850] veth1_to_bond: entered promiscuous mode [ 1258.558145][T15850] veth0_to_team: entered promiscuous mode [ 1258.679683][T15850] veth1_to_team: entered promiscuous mode [ 1258.683989][T15850] veth0_to_batadv: entered promiscuous mode [ 1258.684525][T15850] batadv_slave_0: entered promiscuous mode [ 1258.760849][T15850] veth1_to_batadv: entered promiscuous mode [ 1258.763204][T15850] batadv_slave_1: entered promiscuous mode [ 1258.787524][T15850] xfrm0: entered promiscuous mode [ 1258.787966][T15850] veth0_to_hsr: entered promiscuous mode [ 1258.872946][T15850] veth1_to_hsr: entered promiscuous mode [ 1258.880487][T15850] hsr0: entered promiscuous mode [ 1258.881067][T15850] veth1_virt_wifi: entered promiscuous mode [ 1258.896644][T15850] veth0_virt_wifi: entered promiscuous mode [ 1258.912443][T15850] virt_wifi0: entered promiscuous mode [ 1258.926511][T15850] vlan0: entered promiscuous mode [ 1258.939403][T15850] vlan1: entered promiscuous mode [ 1258.940554][T15850] macvlan0: entered promiscuous mode [ 1258.952394][T15850] macvlan1: entered promiscuous mode [ 1258.953221][T15850] ipvlan0: entered promiscuous mode [ 1258.988265][ T6018] usb 10-1: Using ep0 maxpacket: 16 [ 1258.988857][ T6018] usb 10-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1258.989906][ T6018] usb 10-1: config 0 has an invalid interface number: 132 but max is 0 [ 1258.989919][ T6018] usb 10-1: config 0 has no interface number 0 [ 1258.992086][ T6018] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.992100][ T6018] usb 10-1: Product: syz [ 1258.992108][ T6018] usb 10-1: Manufacturer: syz [ 1258.992115][ T6018] usb 10-1: SerialNumber: syz [ 1259.012496][ T6018] usb 10-1: config 0 descriptor?? [ 1259.036159][ T6018] hub 10-1:0.132: bad descriptor, ignoring hub [ 1259.036194][ T6018] hub 10-1:0.132: probe with driver hub failed with error -5 [ 1259.043363][ T37] audit: type=1800 audit(1786890031.767:4684): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15663 res=0 errno=0 [ 1259.054066][ T6018] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.132/input/input48 [ 1259.056686][ T37] audit: type=1800 audit(1786890031.787:4685): pid=15734 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=408199 res=0 errno=0 [ 1259.074766][ T37] audit: type=1800 audit(1786890031.797:4686): pid=15734 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=408231 res=0 errno=0 [ 1259.074796][ T37] audit: type=1800 audit(1786890031.797:4687): pid=15734 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=408206 res=0 errno=0 [ 1259.080996][T15850] ipvlan1: entered promiscuous mode [ 1259.103241][ T37] audit: type=1800 audit(1786890031.827:4688): pid=15734 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=408207 res=0 errno=0 [ 1259.199823][T15850] macvtap0: entered promiscuous mode [ 1259.315892][T15850] macsec0: entered promiscuous mode [ 1259.348193][T15850] geneve0: entered promiscuous mode [ 1259.369527][T15850] geneve1: entered promiscuous mode [ 1259.370069][T15850] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1259.374720][T15850] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 1259.410593][T15850] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 1259.411362][T15850] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 1259.439741][T15860] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2168'. [ 1259.441787][T15850] mac80211_hwsim hwsim25 wlan0: entered promiscuous mode [ 1259.442301][T15850] mac80211_hwsim hwsim26 wlan1: entered promiscuous mode [ 1259.492786][ T37] audit: type=1800 audit(1786890032.217:4689): pid=15734 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=408228 res=0 errno=0 [ 1259.493412][ T37] audit: type=1800 audit(1786890032.217:4690): pid=15734 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=408229 res=0 errno=0 [ 1259.893721][ T37] kauditd_printk_skb: 13 callbacks suppressed [ 1259.893733][ T37] audit: type=1800 audit(1786890032.617:4704): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=408303 res=0 errno=0 [ 1259.935088][ T37] audit: type=1800 audit(1786890032.657:4705): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=408316 res=0 errno=0 [ 1260.053563][ T37] audit: type=1800 audit(1786890032.777:4706): pid=15741 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="phys" dev="sysfs" ino=408276 res=0 errno=0 [ 1260.300971][ T37] audit: type=1800 audit(1786890033.027:4707): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15417 res=0 errno=0 [ 1260.482588][ T37] audit: type=1800 audit(1786890033.207:4708): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15663 res=0 errno=0 [ 1260.723649][ T37] audit: type=1800 audit(1786890033.447:4709): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16155 res=0 errno=0 [ 1260.979919][ T37] audit: type=1800 audit(1786890033.707:4710): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15417 res=0 errno=0 [ 1261.321448][ T37] audit: type=1800 audit(1786890034.047:4711): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16155 res=0 errno=0 [ 1261.860536][T15893] FAULT_INJECTION: forcing a failure. [ 1261.860536][T15893] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1261.860560][T15893] CPU: 0 UID: 0 PID: 15893 Comm: syz.3.2174 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1261.860574][T15893] Tainted: [L]=SOFTLOCKUP [ 1261.860578][T15893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1261.860585][T15893] Call Trace: [ 1261.860590][T15893] [ 1261.860595][T15893] dump_stack_lvl+0xe8/0x150 [ 1261.860617][T15893] should_fail_ex+0x467/0x600 [ 1261.860637][T15893] prepare_alloc_pages+0x223/0x690 [ 1261.860654][T15893] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1261.860668][T15893] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1261.860681][T15893] ? __pfx_policy_nodemask+0x10/0x10 [ 1261.860692][T15893] ? filemap_get_entry+0x374/0x3f0 [ 1261.860705][T15893] ? pte_alloc_one+0x7e/0x380 [ 1261.860716][T15893] ? __do_fault+0xd1/0x2a0 [ 1261.860726][T15893] ? do_pte_missing+0x659/0x28f0 [ 1261.860735][T15893] ? handle_mm_fault+0xd28/0x13f0 [ 1261.860750][T15893] ? __pfx_filemap_get_entry+0x10/0x10 [ 1261.860765][T15893] alloc_pages_mpol+0xce/0x280 [ 1261.860778][T15893] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 1261.860791][T15893] shmem_get_folio_gfp+0x6ee/0x1c40 [ 1261.860806][T15893] ? __pfx___css_rstat_updated+0x10/0x10 [ 1261.860829][T15893] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1261.860844][T15893] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 1261.860857][T15893] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 1261.860871][T15893] shmem_fault+0x170/0x380 [ 1261.860884][T15893] __do_fault+0x138/0x2a0 [ 1261.860896][T15893] do_pte_missing+0x659/0x28f0 [ 1261.860910][T15893] ? mt_find+0x481/0x630 [ 1261.860929][T15893] handle_mm_fault+0xd28/0x13f0 [ 1261.860948][T15893] ? handle_mm_fault+0xe8/0x13f0 [ 1261.860963][T15893] ? __pfx_handle_mm_fault+0x10/0x10 [ 1261.860987][T15893] ? lock_mm_and_find_vma+0xa7/0x340 [ 1261.861000][T15893] do_user_addr_fault+0x744/0x1340 [ 1261.861023][T15893] exc_page_fault+0x6a/0xc0 [ 1261.861036][T15893] asm_exc_page_fault+0x26/0x30 [ 1261.861047][T15893] RIP: 0010:filldir+0x29f/0x630 [ 1261.861062][T15893] Code: df 49 29 ef 48 b8 00 f0 ff ff ff 7f 00 00 49 39 c7 4c 0f 47 f8 bf 07 00 00 00 44 89 f6 e8 39 8a 82 ff 0f 01 cb 48 8b 44 24 20 <49> 89 47 08 48 bd 00 00 00 00 00 fc ff df 48 8b 44 24 40 48 89 03 [ 1261.861071][T15893] RSP: 0018:ffffc90003dd7b08 EFLAGS: 00050293 [ 1261.861080][T15893] RAX: 0000000000000000 RBX: 0000200000000000 RCX: ffff888011de1f00 [ 1261.861088][T15893] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000007 [ 1261.861094][T15893] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1261.861100][T15893] R10: 0000000000000100 R11: ffffffff82434070 R12: ffffffff8b80d4c0 [ 1261.861106][T15893] R13: 0000000000000001 R14: 0000000000000001 R15: 0000200000000000 [ 1261.861115][T15893] ? __pfx_filldir+0x10/0x10 [ 1261.861133][T15893] ? filldir+0x297/0x630 [ 1261.861149][T15893] ? __pfx_filldir+0x10/0x10 [ 1261.861168][T15893] proc_map_files_readdir+0x25f/0xa80 [ 1261.861181][T15893] ? get_pid_task+0x20/0x1f0 [ 1261.861198][T15893] ? iterate_dir+0x215/0x4e0 [ 1261.861211][T15893] ? __pfx_proc_map_files_readdir+0x10/0x10 [ 1261.861229][T15893] ? iterate_dir+0x215/0x4e0 [ 1261.861240][T15893] ? down_read_killable+0x14c/0x220 [ 1261.861255][T15893] ? __pfx_down_read_killable+0x10/0x10 [ 1261.861268][T15893] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1261.861280][T15893] ? lockdep_hardirqs_on+0x7a/0x110 [ 1261.861291][T15893] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1261.861306][T15893] iterate_dir+0x2f1/0x4e0 [ 1261.861320][T15893] __se_sys_getdents+0xf1/0x270 [ 1261.861334][T15893] ? __pfx___se_sys_getdents+0x10/0x10 [ 1261.861345][T15893] ? ksys_write+0x248/0x270 [ 1261.861355][T15893] ? __pfx_filldir+0x10/0x10 [ 1261.861369][T15893] ? __pfx_ksys_write+0x10/0x10 [ 1261.861384][T15893] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1261.861395][T15893] do_syscall_64+0x174/0x580 [ 1261.861408][T15893] ? clear_bhb_loop+0x70/0xc0 [ 1261.861420][T15893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1261.861430][T15893] RIP: 0033:0x7f919da3e0d9 [ 1261.861440][T15893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1261.861447][T15893] RSP: 002b:00007f919bc96028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 1261.861457][T15893] RAX: ffffffffffffffda RBX: 00007f919dcc5fa0 RCX: 00007f919da3e0d9 [ 1261.861464][T15893] RDX: 00000000000000a3 RSI: 0000200000000000 RDI: 0000000000000003 [ 1261.861470][T15893] RBP: 00007f919bc96090 R08: 0000000000000000 R09: 0000000000000000 [ 1261.861476][T15893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1261.861481][T15893] R13: 00007f919dcc6038 R14: 00007f919dcc5fa0 R15: 00007ffd68611088 [ 1261.861498][T15893] [ 1262.863546][ T37] audit: type=1800 audit(1786890035.547:4712): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15417 res=0 errno=0 [ 1263.181838][T11050] bridge_slave_1: left allmulticast mode [ 1263.181862][T11050] bridge_slave_1: left promiscuous mode [ 1263.182011][T11050] bridge0: port 2(bridge_slave_1) entered disabled state [ 1263.553311][ T37] audit: type=1800 audit(1786890036.277:4713): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15663 res=0 errno=0 [ 1263.610150][T11050] bridge_slave_0: left allmulticast mode [ 1263.610174][T11050] bridge_slave_0: left promiscuous mode [ 1263.610423][T11050] bridge0: port 1(bridge_slave_0) entered disabled state [ 1264.752482][T15928] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1264.998232][ T6018] usb 10-1: USB disconnect, device number 33 [ 1265.229517][T11050] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1265.248630][T11050] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1265.253041][T11050] bond0 (unregistering): Released all slaves [ 1265.545015][ T37] audit: type=1800 audit(1786890038.277:4714): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15417 res=0 errno=0 [ 1265.633932][ T37] audit: type=1800 audit(1786890038.357:4715): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16155 res=0 errno=0 [ 1265.921748][T11050] hsr_slave_0: left promiscuous mode [ 1265.930520][T11050] hsr_slave_1: left promiscuous mode [ 1265.931135][T11050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1265.931632][T11050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1266.014348][ T5698] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 1266.167736][ T5698] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1266.167772][ T5698] usb 10-1: New USB device found, idVendor=0404, idProduct=0312, bcdDevice=42.c1 [ 1266.171428][ T5698] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1266.171450][ T5698] usb 10-1: can't read configurations, error -71 [ 1266.257472][ T37] audit: type=1800 audit(1786890038.987:4716): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15417 res=0 errno=0 [ 1266.701236][T11050] team0 (unregistering): Port device team_slave_1 removed [ 1266.744450][T11050] team0 (unregistering): Port device team_slave_0 removed [ 1266.815092][ T37] audit: type=1800 audit(1786890039.537:4717): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16155 res=0 errno=0 [ 1267.067752][T15943] 9p: Bad value for 'rfdno' [ 1267.132770][ T37] audit: type=1800 audit(1786890039.847:4718): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15663 res=0 errno=0 [ 1267.178052][ T37] audit: type=1800 audit(1786890039.897:4719): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=409643 res=0 errno=0 [ 1267.214559][T15944] fuse: Unknown parameter '0x000000000000000d0x000000000000000d000èÈ0000000r_id' [ 1267.469469][ T37] audit: type=1800 audit(1786890040.197:4720): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16155 res=0 errno=0 [ 1267.533890][ T37] audit: type=1800 audit(1786890040.257:4721): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15417 res=0 errno=0 [ 1267.586950][ T37] audit: type=1800 audit(1786890040.307:4722): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15663 res=0 errno=0 [ 1267.776626][ T37] audit: type=1800 audit(1786890040.497:4723): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15663 res=0 errno=0 [ 1267.884619][T15961] FAULT_INJECTION: forcing a failure. [ 1267.884619][T15961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1267.884642][T15961] CPU: 0 UID: 0 PID: 15961 Comm: syz.5.2186 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1267.884657][T15961] Tainted: [L]=SOFTLOCKUP [ 1267.884661][T15961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1267.884667][T15961] Call Trace: [ 1267.884672][T15961] [ 1267.884677][T15961] dump_stack_lvl+0xe8/0x150 [ 1267.884696][T15961] should_fail_ex+0x467/0x600 [ 1267.884714][T15961] _copy_to_user+0x31/0xb0 [ 1267.884727][T15961] simple_read_from_buffer+0xe1/0x170 [ 1267.884740][T15961] proc_fail_nth_read+0x1be/0x230 [ 1267.884753][T15961] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1267.884765][T15961] ? rw_verify_area+0x250/0x4d0 [ 1267.884778][T15961] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1267.884788][T15961] vfs_read+0x219/0xa90 [ 1267.884804][T15961] ? __pfx_vfs_read+0x10/0x10 [ 1267.884816][T15961] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1267.884829][T15961] ? lockdep_hardirqs_on+0x7a/0x110 [ 1267.884841][T15961] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1267.884853][T15961] ? mutex_lock_nested+0x152/0x1d0 [ 1267.884866][T15961] ? fdget_pos+0x252/0x320 [ 1267.884881][T15961] ksys_read+0x156/0x270 [ 1267.884893][T15961] ? __pfx_ksys_read+0x10/0x10 [ 1267.884909][T15961] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1267.884919][T15961] do_syscall_64+0x174/0x580 [ 1267.884931][T15961] ? trace_irq_disable+0x3b/0x140 [ 1267.884946][T15961] ? clear_bhb_loop+0x70/0xc0 [ 1267.884959][T15961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1267.884968][T15961] RIP: 0033:0x7f781246e90e [ 1267.884978][T15961] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1267.884986][T15961] RSP: 002b:00007f78106e4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1267.884998][T15961] RAX: ffffffffffffffda RBX: 00007f78106e56c0 RCX: 00007f781246e90e [ 1267.885004][T15961] RDX: 000000000000000f RSI: 00007f78106e50a0 RDI: 0000000000000006 [ 1267.885011][T15961] RBP: 00007f78106e5090 R08: 0000000000000000 R09: 0000000000000000 [ 1267.885017][T15961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1267.885022][T15961] R13: 00007f7812736128 R14: 00007f7812736090 R15: 00007ffc0e7664f8 [ 1267.885038][T15961] [ 1268.223004][T15612] bridge0: port 1(bridge_slave_0) entered blocking state [ 1268.223072][T15612] bridge0: port 1(bridge_slave_0) entered disabled state [ 1268.223221][T15612] bridge_slave_0: entered allmulticast mode [ 1268.251138][T15612] bridge_slave_0: entered promiscuous mode [ 1268.275959][T15612] bridge0: port 2(bridge_slave_1) entered blocking state [ 1268.276026][T15612] bridge0: port 2(bridge_slave_1) entered disabled state [ 1268.276145][T15612] bridge_slave_1: entered allmulticast mode [ 1268.278057][T15612] bridge_slave_1: entered promiscuous mode [ 1268.467723][T15684] bridge0: port 1(bridge_slave_0) entered blocking state [ 1268.467789][T15684] bridge0: port 1(bridge_slave_0) entered disabled state [ 1268.467900][T15684] bridge_slave_0: entered allmulticast mode [ 1268.469639][T15684] bridge_slave_0: entered promiscuous mode [ 1268.518369][T15612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1268.548138][T15684] bridge0: port 2(bridge_slave_1) entered blocking state [ 1268.548206][T15684] bridge0: port 2(bridge_slave_1) entered disabled state [ 1268.548368][T15684] bridge_slave_1: entered allmulticast mode [ 1268.551960][T15684] bridge_slave_1: entered promiscuous mode [ 1268.585280][T15612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1269.002693][T15612] team0: Port device team_slave_0 added [ 1269.065906][T15612] team0: Port device team_slave_1 added [ 1269.123882][ T5698] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1269.129037][T15684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1269.139335][T15684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1269.281757][ T5698] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1269.281796][ T5698] usb 4-1: New USB device found, idVendor=0404, idProduct=0312, bcdDevice=42.c1 [ 1269.282602][ T5698] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1269.282620][ T5698] usb 4-1: can't read configurations, error -71 [ 1269.510611][T15612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1269.510622][T15612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1269.510635][T15612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1269.513278][T15684] team0: Port device team_slave_0 added [ 1269.618976][T11050] bridge_slave_1: left allmulticast mode [ 1269.619001][T11050] bridge_slave_1: left promiscuous mode [ 1269.619176][T11050] bridge0: port 2(bridge_slave_1) entered disabled state [ 1269.621093][T11050] bridge_slave_0: left allmulticast mode [ 1269.621112][T11050] bridge_slave_0: left promiscuous mode [ 1269.621286][T11050] bridge0: port 1(bridge_slave_0) entered disabled state [ 1269.968835][T15976] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1270.227912][T11050] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1270.265643][T11050] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1270.352543][T11050] bond0 (unregistering): Released all slaves [ 1270.558752][T15684] team0: Port device team_slave_1 added [ 1270.563031][T15612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1270.563042][T15612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1270.563056][T15612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1270.907630][ T37] kauditd_printk_skb: 9 callbacks suppressed [ 1270.907641][ T37] audit: type=1800 audit(1786890043.637:4733): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15417 res=0 errno=0 [ 1270.977497][ T37] audit: type=1800 audit(1786890043.707:4734): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15663 res=0 errno=0 [ 1271.051602][ T37] audit: type=1800 audit(1786890043.777:4735): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16155 res=0 errno=0 [ 1271.354871][T11050] hsr_slave_0: left promiscuous mode [ 1271.368194][T11050] hsr_slave_1: left promiscuous mode [ 1271.369135][T11050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1271.393692][ T5698] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1271.419657][T11050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1271.443560][ T37] audit: type=1800 audit(1786890044.167:4736): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15417 res=0 errno=0 [ 1271.605109][ T5698] usb 6-1: Using ep0 maxpacket: 8 [ 1271.612328][ T5698] usb 6-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 1271.632544][ T5698] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 1271.632563][ T5698] usb 6-1: Product: syz [ 1271.632570][ T5698] usb 6-1: Manufacturer: syz [ 1271.632577][ T5698] usb 6-1: SerialNumber: syz [ 1271.651761][ T5698] usb 6-1: config 0 descriptor?? [ 1271.674021][ T37] audit: type=1800 audit(1786890044.397:4737): pid=15734 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=413876 res=0 errno=0 [ 1271.680962][ T37] audit: type=1800 audit(1786890044.407:4738): pid=15734 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=413908 res=0 errno=0 [ 1271.680998][ T37] audit: type=1800 audit(1786890044.407:4739): pid=15734 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=413883 res=0 errno=0 [ 1271.689959][ T37] audit: type=1800 audit(1786890044.417:4740): pid=15734 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=413884 res=0 errno=0 [ 1271.695239][ T5698] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 1271.911325][ T37] audit: type=1800 audit(1786890044.637:4741): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16155 res=0 errno=0 [ 1272.102709][ T5698] gspca_sn9c2028: read1 error 0 [ 1272.142592][ T37] audit: type=1800 audit(1786890044.867:4742): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15417 res=0 errno=0 [ 1272.373859][T16020] program syz.9.2200 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1272.559679][ T5814] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1272.603666][ T5698] gspca_sn9c2028: read1 error -110 [ 1272.604119][ T5698] gspca_sn9c2028: read1 error -32 [ 1272.604177][ T5698] sn9c2028 6-1:0.0: probe with driver sn9c2028 failed with error -32 [ 1272.705509][ T5814] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1272.705546][ T5814] usb 4-1: New USB device found, idVendor=0404, idProduct=0312, bcdDevice=42.c1 [ 1272.706513][ T5814] usb 4-1: config 160 has an invalid interface number: 168 but max is 0 [ 1272.706527][ T5814] usb 4-1: config 160 has an invalid descriptor of length 0, skipping remainder of the config [ 1272.706537][ T5814] usb 4-1: config 160 has no interface number 0 [ 1272.706562][ T5814] usb 4-1: config 160 interface 168 altsetting 8 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 1272.706575][ T5814] usb 4-1: config 160 interface 168 altsetting 8 endpoint 0x84 has invalid maxpacket 49717, setting to 1024 [ 1272.706588][ T5814] usb 4-1: config 160 interface 168 altsetting 8 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1272.706599][ T5814] usb 4-1: config 160 interface 168 altsetting 8 endpoint 0x7 has an invalid bInterval 195, changing to 11 [ 1272.706611][ T5814] usb 4-1: config 160 interface 168 altsetting 8 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 1272.706624][ T5814] usb 4-1: config 160 interface 168 altsetting 8 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 1272.706636][ T5814] usb 4-1: config 160 interface 168 has no altsetting 0 [ 1272.708590][ T5814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.708603][ T5814] usb 4-1: Product: syz [ 1272.708611][ T5814] usb 4-1: Manufacturer: syz [ 1272.708618][ T5814] usb 4-1: SerialNumber: syz [ 1272.918959][T16019] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1273.136683][ T5814] io_edgeport 4-1:160.168: required endpoints missing [ 1273.170766][ T5814] usb 4-1: USB disconnect, device number 24 [ 1273.528070][T11050] team0 (unregistering): Port device team_slave_1 removed [ 1273.603034][T11050] team0 (unregistering): Port device team_slave_0 removed [ 1273.707806][T16026] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 1274.104729][ T6018] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 1274.139921][T15684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1274.139932][T15684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1274.139946][T15684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1274.222693][T15684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1274.222704][T15684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1274.222719][T15684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1274.260036][ T6018] usb 10-1: Using ep0 maxpacket: 32 [ 1274.260641][ T6018] usb 10-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 1274.276435][ T6018] usb 10-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 1274.276455][ T6018] usb 10-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1274.276468][ T6018] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1274.276488][ T6018] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.349852][ T6018] usb 10-1: config 0 descriptor?? [ 1274.461303][T15612] hsr_slave_0: entered promiscuous mode [ 1274.462581][ T5814] usb 6-1: USB disconnect, device number 59 [ 1274.540370][T15612] hsr_slave_1: entered promiscuous mode [ 1274.630712][T15612] debugfs: 'hsr0' already exists in 'hsr' [ 1274.630731][T15612] Cannot create hsr debugfs directory [ 1274.791188][ T6018] greenasia 0003:0E8F:0012.0007: unknown main item tag 0x2 [ 1274.791210][ T6018] greenasia 0003:0E8F:0012.0007: unknown main item tag 0x0 [ 1274.791226][ T6018] greenasia 0003:0E8F:0012.0007: unknown main item tag 0x0 [ 1274.791240][ T6018] greenasia 0003:0E8F:0012.0007: unknown main item tag 0x0 [ 1274.791254][ T6018] greenasia 0003:0E8F:0012.0007: unbalanced collection at end of report description [ 1274.791639][ T6018] greenasia 0003:0E8F:0012.0007: parse failed [ 1274.791675][ T6018] greenasia 0003:0E8F:0012.0007: probe with driver greenasia failed with error -22 [ 1275.069977][ T5698] usb 10-1: USB disconnect, device number 36 [ 1275.253304][ T6018] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1275.430507][T15684] hsr_slave_0: entered promiscuous mode [ 1275.431382][T15684] hsr_slave_1: entered promiscuous mode [ 1275.431892][T15684] debugfs: 'hsr0' already exists in 'hsr' [ 1275.431907][T15684] Cannot create hsr debugfs directory [ 1275.448278][ T6018] usb 6-1: Using ep0 maxpacket: 16 [ 1275.453186][ T6018] usb 6-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 1275.454347][ T6018] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 1275.454361][ T6018] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1275.454370][ T6018] usb 6-1: config 0 has no interface number 0 [ 1275.456564][ T6018] usb 6-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 1275.456577][ T6018] usb 6-1: Product: syz [ 1275.456584][ T6018] usb 6-1: Manufacturer: syz [ 1275.456591][ T6018] usb 6-1: SerialNumber: syz [ 1275.499395][ T6018] usb 6-1: config 0 descriptor?? [ 1275.963311][ T6018] uvcvideo 6-1:0.105: Found UVC 0.00 device syz (046c:14e8) [ 1275.963452][ T6018] uvcvideo 6-1:0.105: No valid video chain found. [ 1275.965365][ T37] kauditd_printk_skb: 33 callbacks suppressed [ 1275.965375][ T37] audit: type=1800 audit(1786890048.697:4776): pid=15734 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=415640 res=0 errno=0 [ 1275.966488][ T37] audit: type=1800 audit(1786890048.697:4777): pid=15734 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=415641 res=0 errno=0 [ 1275.966514][ T37] audit: type=1800 audit(1786890048.697:4778): pid=15734 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=415620 res=0 errno=0 [ 1275.975380][ T37] audit: type=1800 audit(1786890048.707:4779): pid=15734 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=415642 res=0 errno=0 [ 1276.364106][ T37] audit: type=1800 audit(1786890049.007:4780): pid=15734 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=415820 res=0 errno=0 [ 1276.488680][ T37] audit: type=1800 audit(1786890049.217:4781): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15417 res=0 errno=0 [ 1276.634767][ T6018] usb 6-1: USB disconnect, device number 60 [ 1276.786638][ T37] audit: type=1800 audit(1786890049.517:4782): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16155 res=0 errno=0 [ 1276.881831][ T37] audit: type=1800 audit(1786890049.607:4783): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15417 res=0 errno=0 [ 1277.031030][ T5596] Bluetooth: hci0: link tx timeout [ 1277.031226][ T5596] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1277.061704][ T37] audit: type=1800 audit(1786890049.787:4784): pid=15612 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=24660 res=0 errno=0 [ 1277.061734][ T37] audit: type=1800 audit(1786890049.787:4785): pid=15612 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=24659 res=0 errno=0 [ 1277.093226][T15657] Bluetooth: hci0: link tx timeout [ 1277.093241][T15657] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1277.116802][T15657] Bluetooth: hci0: link tx timeout [ 1277.116815][T15657] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1277.140418][T15657] Bluetooth: hci0: link tx timeout [ 1277.140433][T15657] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1277.149605][T15657] Bluetooth: hci0: link tx timeout [ 1277.149618][T15657] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1277.705337][T16062] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1278.434965][T16074] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2216'. [ 1278.806069][T16076] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2217'. [ 1279.070392][T16074] vlan0: entered promiscuous mode [ 1279.070411][T16074] virtio_net virtio1 eth0: entered promiscuous mode [ 1279.100131][T15657] Bluetooth: hci0: command 0x0406 tx timeout [ 1279.251731][T16078] < [ 1279.376522][T16080] FAULT_INJECTION: forcing a failure. [ 1279.376522][T16080] name failslab, interval 1, probability 0, space 0, times 0 [ 1279.376546][T16080] CPU: 0 UID: 0 PID: 16080 Comm: syz.9.2219 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1279.376561][T16080] Tainted: [L]=SOFTLOCKUP [ 1279.376565][T16080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1279.376571][T16080] Call Trace: [ 1279.376576][T16080] [ 1279.376581][T16080] dump_stack_lvl+0xe8/0x150 [ 1279.376602][T16080] should_fail_ex+0x467/0x600 [ 1279.376620][T16080] should_failslab+0xa8/0x100 [ 1279.376633][T16080] kmem_cache_alloc_noprof+0xa4/0x650 [ 1279.376648][T16080] ? security_inode_alloc+0x39/0x310 [ 1279.376661][T16080] ? security_inode_alloc+0x39/0x310 [ 1279.376677][T16080] security_inode_alloc+0x39/0x310 [ 1279.376690][T16080] inode_init_always_gfp+0x983/0xd40 [ 1279.376708][T16080] ? __pfx_proc_alloc_inode+0x10/0x10 [ 1279.376719][T16080] alloc_inode+0x82/0x1b0 [ 1279.376734][T16080] new_inode+0x1f/0x170 [ 1279.376742][T16080] ? proc_pid_make_inode+0x19/0x130 [ 1279.376757][T16080] proc_pid_make_inode+0x21/0x130 [ 1279.376771][T16080] proc_task_instantiate+0x54/0x2b0 [ 1279.376784][T16080] proc_fill_cache+0x2a8/0x390 [ 1279.376797][T16080] ? __pfx_proc_task_instantiate+0x10/0x10 [ 1279.376808][T16080] ? __pfx_proc_fill_cache+0x10/0x10 [ 1279.376823][T16080] ? __task_pid_nr_ns+0x399/0x470 [ 1279.376839][T16080] proc_task_readdir+0x751/0xc70 [ 1279.376852][T16080] ? proc_task_readdir+0x3bc/0xc70 [ 1279.376864][T16080] ? __pfx_proc_task_readdir+0x10/0x10 [ 1279.376875][T16080] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1279.376888][T16080] ? lockdep_hardirqs_on+0x7a/0x110 [ 1279.376900][T16080] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1279.376914][T16080] iterate_dir+0x2f1/0x4e0 [ 1279.376929][T16080] __se_sys_getdents64+0xf1/0x280 [ 1279.376944][T16080] ? __pfx___se_sys_getdents64+0x10/0x10 [ 1279.376963][T16080] ? ksys_write+0x248/0x270 [ 1279.376974][T16080] ? __pfx_filldir64+0x10/0x10 [ 1279.376987][T16080] ? __pfx_ksys_write+0x10/0x10 [ 1279.377003][T16080] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1279.377014][T16080] do_syscall_64+0x174/0x580 [ 1279.377025][T16080] ? trace_irq_disable+0x3b/0x140 [ 1279.377040][T16080] ? clear_bhb_loop+0x70/0xc0 [ 1279.377052][T16080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1279.377063][T16080] RIP: 0033:0x7f32e43ae0d9 [ 1279.377074][T16080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1279.377083][T16080] RSP: 002b:00007f32e2606028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 1279.377095][T16080] RAX: ffffffffffffffda RBX: 00007f32e4635fa0 RCX: 00007f32e43ae0d9 [ 1279.377102][T16080] RDX: 0000000000000043 RSI: ffffffffffffffff RDI: 0000000000000004 [ 1279.377109][T16080] RBP: 00007f32e2606090 R08: 0000000000000000 R09: 0000000000000000 [ 1279.377115][T16080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1279.377121][T16080] R13: 00007f32e4636038 R14: 00007f32e4635fa0 R15: 00007ffe3f82f878 [ 1279.377140][T16080] [ 1279.874813][T16085] netlink: 'syz.3.2221': attribute type 1 has an invalid length. [ 1279.939235][T16086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2221'. [ 1280.091962][T16085] bond1: entered promiscuous mode [ 1280.108524][T16085] bond1: entered allmulticast mode [ 1280.108919][T16085] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1280.302159][T16086] bond1 (unregistering): Released all slaves [ 1281.133556][ T37] kauditd_printk_skb: 23 callbacks suppressed [ 1281.133647][ T37] audit: type=1800 audit(1786890053.867:4809): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15417 res=0 errno=0 [ 1281.197820][ T37] audit: type=1800 audit(1786890053.927:4810): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15663 res=0 errno=0 [ 1281.399097][ T37] audit: type=1800 audit(1786890054.107:4811): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16155 res=0 errno=0 [ 1281.487854][T16101] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1281.604318][ T37] audit: type=1800 audit(1786890054.307:4812): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15663 res=0 errno=0 [ 1281.635454][T16109] device-mapper: ioctl: Invalid data size in the ioctl structure: 4097311102 [ 1281.727722][T16114] netlink: 'syz.5.2229': attribute type 1 has an invalid length. [ 1281.874303][ T37] audit: type=1800 audit(1786890054.607:4813): pid=15684 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=24659 res=0 errno=0 [ 1281.879281][ T37] audit: type=1800 audit(1786890054.607:4814): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15417 res=0 errno=0 [ 1281.879542][T15612] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1281.935846][ T37] audit: type=1800 audit(1786890054.667:4815): pid=16114 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.2229" name="new_id" dev="sysfs" ino=21437 res=0 errno=0 [ 1281.968452][ T37] audit: type=1800 audit(1786890054.697:4816): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16155 res=0 errno=0 [ 1281.995221][ T37] audit: type=1800 audit(1786890054.727:4817): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=418888 res=0 errno=0 [ 1282.097365][T16120] netlink: 'syz.9.2230': attribute type 1 has an invalid length. [ 1282.098147][T15612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1282.197598][T16122] FAULT_INJECTION: forcing a failure. [ 1282.197598][T16122] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1282.197622][T16122] CPU: 0 UID: 0 PID: 16122 Comm: syz.9.2230 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1282.197637][T16122] Tainted: [L]=SOFTLOCKUP [ 1282.197640][T16122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1282.197654][T16122] Call Trace: [ 1282.197659][T16122] [ 1282.197663][T16122] dump_stack_lvl+0xe8/0x150 [ 1282.197683][T16122] should_fail_ex+0x467/0x600 [ 1282.197702][T16122] _copy_from_iter+0x1d3/0x1660 [ 1282.197719][T16122] ? rcu_is_watching+0x15/0xb0 [ 1282.197733][T16122] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1282.197749][T16122] ? __pfx__copy_from_iter+0x10/0x10 [ 1282.197763][T16122] ? __alloc_skb+0x276/0x7a0 [ 1282.197776][T16122] ? __alloc_skb+0x276/0x7a0 [ 1282.197788][T16122] ? netlink_sendmsg+0x650/0xb40 [ 1282.197802][T16122] ? skb_put+0x112/0x210 [ 1282.197814][T16122] netlink_sendmsg+0x6c0/0xb40 [ 1282.197830][T16122] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1282.197843][T16122] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1282.197857][T16122] ? __kernel_text_address+0xd/0x30 [ 1282.197871][T16122] ? unwind_get_return_address+0x4d/0x90 [ 1282.197883][T16122] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1282.197894][T16122] sock_sendmsg_nosec+0x13a/0x180 [ 1282.197912][T16122] ____sys_sendmsg+0x565/0x870 [ 1282.197923][T16122] ? __might_fault+0xaf/0x130 [ 1282.197936][T16122] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1282.197952][T16122] ? import_iovec+0x73/0xa0 [ 1282.197964][T16122] ___sys_sendmsg+0x2a5/0x360 [ 1282.197975][T16122] ? __lock_acquire+0x683/0x2ce0 [ 1282.197987][T16122] ? __pfx____sys_sendmsg+0x10/0x10 [ 1282.198016][T16122] ? __fget_files+0x2a/0x420 [ 1282.198025][T16122] ? __fget_files+0x3a8/0x420 [ 1282.198038][T16122] __x64_sys_sendmsg+0x1b7/0x290 [ 1282.198052][T16122] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1282.198072][T16122] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1282.198083][T16122] do_syscall_64+0x174/0x580 [ 1282.198096][T16122] ? clear_bhb_loop+0x70/0xc0 [ 1282.198108][T16122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1282.198118][T16122] RIP: 0033:0x7f32e43ae0d9 [ 1282.198129][T16122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1282.198137][T16122] RSP: 002b:00007f32e25e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1282.198148][T16122] RAX: ffffffffffffffda RBX: 00007f32e4636090 RCX: 00007f32e43ae0d9 [ 1282.198155][T16122] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005 [ 1282.198162][T16122] RBP: 00007f32e25e5090 R08: 0000000000000000 R09: 0000000000000000 [ 1282.198168][T16122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1282.198174][T16122] R13: 00007f32e4636128 R14: 00007f32e4636090 R15: 00007ffe3f82f878 [ 1282.198189][T16122] [ 1282.566528][T16120] bond1: entered promiscuous mode [ 1282.566553][T16120] bond1: entered allmulticast mode [ 1282.616234][T16120] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1282.633753][T15612] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1282.657208][ T37] audit: type=1800 audit(1786890055.387:4818): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15417 res=0 errno=0 [ 1282.751000][T15612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1282.820608][T15612] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1282.876283][T15612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1282.895338][T15612] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1282.928067][T15612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1283.084430][T16138] FAULT_INJECTION: forcing a failure. [ 1283.084430][T16138] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1283.084453][T16138] CPU: 0 UID: 0 PID: 16138 Comm: syz.5.2232 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1283.084467][T16138] Tainted: [L]=SOFTLOCKUP [ 1283.084471][T16138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1283.084477][T16138] Call Trace: [ 1283.084481][T16138] [ 1283.084487][T16138] dump_stack_lvl+0xe8/0x150 [ 1283.084507][T16138] should_fail_ex+0x467/0x600 [ 1283.084525][T16138] _copy_to_user+0x31/0xb0 [ 1283.084538][T16138] simple_read_from_buffer+0xe1/0x170 [ 1283.084551][T16138] proc_fail_nth_read+0x1be/0x230 [ 1283.084565][T16138] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1283.084577][T16138] ? rw_verify_area+0x250/0x4d0 [ 1283.084590][T16138] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1283.084600][T16138] vfs_read+0x219/0xa90 [ 1283.084615][T16138] ? __pfx_vfs_read+0x10/0x10 [ 1283.084628][T16138] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1283.084641][T16138] ? lockdep_hardirqs_on+0x7a/0x110 [ 1283.084661][T16138] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1283.084673][T16138] ? mutex_lock_nested+0x152/0x1d0 [ 1283.084686][T16138] ? fdget_pos+0x252/0x320 [ 1283.084701][T16138] ksys_read+0x156/0x270 [ 1283.084713][T16138] ? __pfx_ksys_read+0x10/0x10 [ 1283.084729][T16138] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1283.084739][T16138] do_syscall_64+0x174/0x580 [ 1283.084751][T16138] ? trace_irq_disable+0x3b/0x140 [ 1283.084768][T16138] ? clear_bhb_loop+0x70/0xc0 [ 1283.084780][T16138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1283.084790][T16138] RIP: 0033:0x7f781246e90e [ 1283.084800][T16138] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1283.084808][T16138] RSP: 002b:00007f78106c3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1283.084820][T16138] RAX: ffffffffffffffda RBX: 00007f78106c46c0 RCX: 00007f781246e90e [ 1283.084826][T16138] RDX: 000000000000000f RSI: 00007f78106c40a0 RDI: 0000000000000004 [ 1283.084833][T16138] RBP: 00007f78106c4090 R08: 0000000000000000 R09: 0000000000000000 [ 1283.084839][T16138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1283.084844][T16138] R13: 00007f7812736218 R14: 00007f7812736180 R15: 00007ffc0e7664f8 [ 1283.084860][T16138] [ 1283.903600][T15612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1283.994942][T15612] 8021q: adding VLAN 0 to HW filter on device team0 [ 1284.166411][T16153] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2237'. [ 1284.193290][T11050] bridge0: port 1(bridge_slave_0) entered blocking state [ 1284.193509][T11050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1284.707414][T16159] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1284.789091][T16159] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1285.925065][T16182] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 1285.925065][T16182] [ 1285.951527][T16182] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 1285.962045][T16182] CIFS: Attempting to mount //127.0.0.1/share [ 1286.262821][T16191] hugetlbfs: Unknown parameter 'Œµ4@' [ 1286.468765][ T37] kauditd_printk_skb: 11 callbacks suppressed [ 1286.468777][ T37] audit: type=1800 audit(1786890059.197:4830): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16155 res=0 errno=0 [ 1287.059973][ T37] audit: type=1800 audit(1786890059.787:4831): pid=15734 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=419412 res=0 errno=0 [ 1287.153586][ T37] audit: type=1800 audit(1786890059.887:4832): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=419433 res=0 errno=0 [ 1287.175991][T15657] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1287.263832][T15657] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1287.267279][T15657] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1287.367593][T15657] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1287.479979][T15657] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1287.642177][ T37] audit: type=1800 audit(1786890060.377:4833): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16155 res=0 errno=0 [ 1287.643385][T16182] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1287.643675][T16182] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1287.689438][ T37] audit: type=1800 audit(1786890060.417:4834): pid=15741 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=419522 res=0 errno=0 [ 1287.702857][ T37] audit: type=1800 audit(1786890060.437:4835): pid=15734 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=419511 res=0 errno=0 [ 1287.952336][ T37] audit: type=1800 audit(1786890060.677:4836): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15417 res=0 errno=0 [ 1288.804746][ T37] audit: type=1800 audit(1786890061.527:4837): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15663 res=0 errno=0 [ 1288.864816][T16211] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2247'. [ 1288.997132][ T37] audit: type=1800 audit(1786890061.727:4838): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15663 res=0 errno=0 [ 1288.998665][T15684] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1289.083691][T15684] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1289.104050][ T37] audit: type=1800 audit(1786890061.837:4839): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15417 res=0 errno=0 [ 1289.261130][T15684] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1289.285749][T15684] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1289.305041][T15684] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1289.867428][ T5596] Bluetooth: hci2: command tx timeout [ 1289.951699][T15684] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1289.957331][T15684] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1290.042300][T15684] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1291.891612][ T5596] Bluetooth: hci2: command tx timeout [ 1293.970834][ T5596] Bluetooth: hci2: command tx timeout [ 1294.010367][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 1294.010378][ T37] audit: type=1800 audit(1786890066.737:4844): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16155 res=0 errno=0 [ 1294.256815][ T37] audit: type=1800 audit(1786890066.987:4845): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15663 res=0 errno=0 [ 1294.355757][ T37] audit: type=1800 audit(1786890067.087:4846): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15417 res=0 errno=0 [ 1294.505657][ T37] audit: type=1800 audit(1786890067.237:4847): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16155 res=0 errno=0 [ 1295.045468][ T37] audit: type=1800 audit(1786890067.777:4848): pid=16249 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=419548 res=0 errno=0 [ 1295.084036][T15657] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1295.172918][T15657] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1295.230600][ T37] audit: type=1800 audit(1786890067.957:4849): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=419559 res=0 errno=0 [ 1295.232393][T15657] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1295.235303][T15657] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1295.282891][T15657] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1295.454241][ T37] audit: type=1800 audit(1786890068.187:4850): pid=16249 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=419578 res=0 errno=0 [ 1295.483979][ T37] audit: type=1800 audit(1786890068.217:4851): pid=16249 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=419589 res=0 errno=0 [ 1295.686229][ T37] audit: type=1800 audit(1786890068.417:4852): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16155 res=0 errno=0 [ 1296.054822][ T37] audit: type=1800 audit(1786890068.787:4853): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16155 res=0 errno=0 [ 1296.054887][ T5596] Bluetooth: hci2: command tx timeout [ 1296.596783][T16276] af_packet: tpacket_rcv: packet too big, clamped from 64 to 4294967272. macoff=96 [ 1297.490429][ T5596] Bluetooth: hci3: command tx timeout [ 1297.955734][T16298] FAULT_INJECTION: forcing a failure. [ 1297.955734][T16298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1297.955759][T16298] CPU: 0 UID: 0 PID: 16298 Comm: syz.5.2264 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1297.955774][T16298] Tainted: [L]=SOFTLOCKUP [ 1297.955777][T16298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1297.955785][T16298] Call Trace: [ 1297.955789][T16298] [ 1297.955795][T16298] dump_stack_lvl+0xe8/0x150 [ 1297.955814][T16298] should_fail_ex+0x467/0x600 [ 1297.955832][T16298] _copy_to_user+0x31/0xb0 [ 1297.955845][T16298] __se_sys_splice+0x38b/0x490 [ 1297.955860][T16298] ? __pfx___se_sys_splice+0x10/0x10 [ 1297.955874][T16298] ? __x64_sys_splice+0x21/0xf0 [ 1297.955885][T16298] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1297.955895][T16298] do_syscall_64+0x174/0x580 [ 1297.955908][T16298] ? trace_irq_disable+0x3b/0x140 [ 1297.955923][T16298] ? clear_bhb_loop+0x70/0xc0 [ 1297.955935][T16298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1297.955945][T16298] RIP: 0033:0x7f78124ae0d9 [ 1297.955956][T16298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1297.955964][T16298] RSP: 002b:00007f7810706028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1297.955975][T16298] RAX: ffffffffffffffda RBX: 00007f7812735fa0 RCX: 00007f78124ae0d9 [ 1297.955983][T16298] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 1297.955988][T16298] RBP: 00007f7810706090 R08: 0000000000000004 R09: 0000000000000000 [ 1297.955995][T16298] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 1297.956001][T16298] R13: 00007f7812736038 R14: 00007f7812735fa0 R15: 00007ffc0e7664f8 [ 1297.956017][T16298] [ 1298.180404][ T5924] usb 4-1: new low-speed USB device number 25 using dummy_hcd [ 1298.330342][ T5924] usb 4-1: device descriptor read/64, error -71 [ 1298.600256][ T5924] usb 4-1: new low-speed USB device number 26 using dummy_hcd [ 1298.733844][T16292] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1298.733862][T16292] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1298.750246][ T5924] usb 4-1: device descriptor read/64, error -71 [ 1298.863387][ T5924] usb usb4-port1: attempt power cycle [ 1299.200133][ T5924] usb 4-1: new low-speed USB device number 27 using dummy_hcd [ 1299.259064][ T5924] usb 4-1: device descriptor read/8, error -71 [ 1299.279634][T16292] vhci_hcd vhci_hcd.0: Device attached [ 1299.383479][ T6018] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 1299.570230][ T5924] usb 4-1: new low-speed USB device number 28 using dummy_hcd [ 1299.570413][ T5596] Bluetooth: hci3: command tx timeout [ 1299.597942][ T5924] usb 4-1: device descriptor read/8, error -71 [ 1299.705206][ T5924] usb usb4-port1: unable to enumerate USB device [ 1299.922056][T16294] netlink: 'syz.9.2263': attribute type 12 has an invalid length. [ 1299.922069][T16294] netlink: 'syz.9.2263': attribute type 29 has an invalid length. [ 1299.922076][T16294] netlink: 148 bytes leftover after parsing attributes in process `syz.9.2263'. [ 1299.922087][T16294] netlink: 59 bytes leftover after parsing attributes in process `syz.9.2263'. [ 1300.091094][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 1300.091106][ T37] audit: type=1800 audit(1786890072.827:4862): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16155 res=0 errno=0 [ 1300.404889][ T37] audit: type=1800 audit(1786890073.137:4863): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15663 res=0 errno=0 [ 1301.649892][ T5596] Bluetooth: hci3: command tx timeout [ 1303.729648][ T5596] Bluetooth: hci3: command tx timeout [ 1305.712514][T16308] vhci_hcd: connection reset by peer [ 1305.868702][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.868744][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 1306.760321][ T37] audit: type=1800 audit(1786890079.497:4864): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15417 res=0 errno=0 [ 1306.797344][T15503] vhci_hcd vhci_hcd.3: stop threads [ 1306.798472][T15503] vhci_hcd vhci_hcd.3: release socket [ 1306.834886][ T37] audit: type=1800 audit(1786890079.557:4865): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15663 res=0 errno=0 [ 1306.902862][ T37] audit: type=1800 audit(1786890079.637:4866): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16155 res=0 errno=0 [ 1307.989995][T16339] FAULT_INJECTION: forcing a failure. [ 1307.989995][T16339] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1307.990018][T16339] CPU: 0 UID: 0 PID: 16339 Comm: syz.9.2271 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1307.990033][T16339] Tainted: [L]=SOFTLOCKUP [ 1307.990037][T16339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1307.990044][T16339] Call Trace: [ 1307.990048][T16339] [ 1307.990053][T16339] dump_stack_lvl+0xe8/0x150 [ 1307.990072][T16339] should_fail_ex+0x467/0x600 [ 1307.990090][T16339] _copy_from_user+0x2d/0xb0 [ 1307.990102][T16339] __copy_msghdr+0x390/0x590 [ 1307.990119][T16339] ___sys_sendmsg+0x213/0x360 [ 1307.990131][T16339] ? __lock_acquire+0x683/0x2ce0 [ 1307.990144][T16339] ? __pfx____sys_sendmsg+0x10/0x10 [ 1307.990158][T16339] ? kstrtouint+0x6e/0xe0 [ 1307.990184][T16339] ? __fget_files+0x2a/0x420 [ 1307.990194][T16339] ? __fget_files+0x3a8/0x420 [ 1307.990208][T16339] __sys_sendmmsg+0x279/0x4d0 [ 1307.990223][T16339] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1307.990239][T16339] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1307.990262][T16339] ? ksys_write+0x248/0x270 [ 1307.990275][T16339] ? __pfx_ksys_write+0x10/0x10 [ 1307.990289][T16339] __x64_sys_sendmmsg+0xa0/0xc0 [ 1307.990301][T16339] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1307.990311][T16339] do_syscall_64+0x174/0x580 [ 1307.990322][T16339] ? trace_irq_disable+0x3b/0x140 [ 1307.990341][T16339] ? clear_bhb_loop+0x70/0xc0 [ 1307.990353][T16339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1307.990363][T16339] RIP: 0033:0x7f32e43ae0d9 [ 1307.990373][T16339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1307.990382][T16339] RSP: 002b:00007f32e2606028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1307.990394][T16339] RAX: ffffffffffffffda RBX: 00007f32e4635fa0 RCX: 00007f32e43ae0d9 [ 1307.990401][T16339] RDX: 0000000000000002 RSI: 00002000000008c0 RDI: 0000000000000004 [ 1307.990408][T16339] RBP: 00007f32e2606090 R08: 0000000000000000 R09: 0000000000000000 [ 1307.990414][T16339] R10: 931766f6319eed44 R11: 0000000000000246 R12: 0000000000000001 [ 1307.990420][T16339] R13: 00007f32e4636038 R14: 00007f32e4635fa0 R15: 00007ffe3f82f878 [ 1307.990435][T16339] [ 1308.219021][ T6021] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1308.419821][ T6021] usb 4-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 1308.421186][ T6021] usb 4-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 1308.427550][ T6021] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.427566][ T6021] usb 4-1: Product: syz [ 1308.427573][ T6021] usb 4-1: Manufacturer: syz [ 1308.427580][ T6021] usb 4-1: SerialNumber: syz [ 1308.534867][T15503] vhci_hcd vhci_hcd.3: disconnect device [ 1308.597623][ T37] audit: type=1800 audit(1786890081.327:4867): pid=16340 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=420225 res=0 errno=0 [ 1308.609527][ T6018] usb 39-1: device descriptor read/64, error -110 [ 1308.639265][ T37] audit: type=1800 audit(1786890081.377:4868): pid=16340 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=420257 res=0 errno=0 [ 1308.668961][ T37] audit: type=1800 audit(1786890081.377:4869): pid=16340 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=420232 res=0 errno=0 [ 1308.694717][ T37] audit: type=1800 audit(1786890081.407:4870): pid=16340 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=420233 res=0 errno=0 [ 1308.809152][ T6021] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 1308.814606][ T6018] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1309.213826][ T6021] gspca_mr97310a: reg read [21] error -71 [ 1309.213902][ T6021] mr97310a 4-1:1.0: probe with driver mr97310a failed with error -71 [ 1309.238348][ T6021] usb 4-1: USB disconnect, device number 29 [ 1309.245944][ T37] audit: type=1800 audit(1786890081.967:4871): pid=16340 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=420254 res=0 errno=0 [ 1309.302466][ T37] audit: type=1800 audit(1786890082.037:4872): pid=16340 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=420255 res=0 errno=0 [ 1309.365672][ T37] audit: type=1800 audit(1786890082.097:4873): pid=16340 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=420256 res=0 errno=0 [ 1311.294981][T16372] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1312.165654][ T37] kauditd_printk_skb: 7 callbacks suppressed [ 1312.165665][ T37] audit: type=1800 audit(1786890084.907:4881): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15663 res=0 errno=0 [ 1312.440248][ T37] audit: type=1800 audit(1786890085.177:4882): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15417 res=0 errno=0 [ 1312.664000][T16385] netlink: 'syz.3.2280': attribute type 3 has an invalid length. [ 1312.770769][T11156] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1312.825767][ T37] audit: type=1800 audit(1786890085.557:4883): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=421989 res=0 errno=0 [ 1312.918545][T11156] usb 6-1: Using ep0 maxpacket: 16 [ 1312.919210][T11156] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1312.920259][T11156] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 1312.920272][T11156] usb 6-1: config 0 has no interface number 0 [ 1312.922457][T11156] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.922470][T11156] usb 6-1: Product: syz [ 1312.922533][T11156] usb 6-1: Manufacturer: syz [ 1312.922541][T11156] usb 6-1: SerialNumber: syz [ 1313.027535][T16371] kvm: pic: non byte read [ 1313.208970][T11156] usb 6-1: config 0 descriptor?? [ 1313.225928][ T37] audit: type=1800 audit(1786890085.957:4884): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15417 res=0 errno=0 [ 1313.282708][ T37] audit: type=1800 audit(1786890086.017:4885): pid=16340 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=422008 res=0 errno=0 [ 1313.326597][T16371] kvm: pic: level sensitive irq not supported [ 1313.445478][ T37] audit: type=1800 audit(1786890086.177:4886): pid=16340 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=422040 res=0 errno=0 [ 1313.446689][ T37] audit: type=1800 audit(1786890086.177:4887): pid=16340 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=422015 res=0 errno=0 [ 1313.505881][ T37] audit: type=1800 audit(1786890086.237:4888): pid=16340 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=422016 res=0 errno=0 [ 1313.532167][T11156] hub 6-1:0.132: bad descriptor, ignoring hub [ 1313.532274][T11156] hub 6-1:0.132: probe with driver hub failed with error -5 [ 1313.613117][T16383] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2279'. [ 1313.689541][T11156] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.132/input/input49 [ 1314.186446][T11156] input: failed to attach handler mousedev to device input49, error: -2 [ 1314.228217][ T37] audit: type=1800 audit(1786890086.957:4889): pid=16340 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=422037 res=0 errno=0 [ 1314.228246][ T37] audit: type=1800 audit(1786890086.957:4890): pid=16340 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=422038 res=0 errno=0 [ 1314.301226][T11156] usb 6-1: USB disconnect, device number 61 [ 1314.676495][T16398] netlink: 'syz.3.2282': attribute type 2 has an invalid length. [ 1314.980653][T16409] sg_write: data in/out 760160/136 bytes for SCSI command 0x0-- guessing data in; [ 1314.980653][T16409] program syz.9.2284 not setting count and/or reply_len properly [ 1315.591317][T11156] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1315.742119][T11156] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1315.742155][T11156] usb 4-1: New USB device found, idVendor=0404, idProduct=0312, bcdDevice=42.c1 [ 1315.743123][T11156] usb 4-1: config 160 has an invalid interface number: 168 but max is 0 [ 1315.743137][T11156] usb 4-1: config 160 has an invalid descriptor of length 0, skipping remainder of the config [ 1315.743147][T11156] usb 4-1: config 160 has no interface number 0 [ 1315.743173][T11156] usb 4-1: config 160 interface 168 altsetting 8 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 1315.743185][T11156] usb 4-1: config 160 interface 168 altsetting 8 endpoint 0x84 has invalid maxpacket 49717, setting to 1024 [ 1315.743198][T11156] usb 4-1: config 160 interface 168 altsetting 8 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1315.743211][T11156] usb 4-1: config 160 interface 168 altsetting 8 endpoint 0x7 has an invalid bInterval 195, changing to 11 [ 1315.743224][T11156] usb 4-1: config 160 interface 168 altsetting 8 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 1315.743236][T11156] usb 4-1: config 160 interface 168 altsetting 8 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 1315.743249][T11156] usb 4-1: config 160 interface 168 has no altsetting 0 [ 1315.746014][T11156] usb 4-1: string descriptor 0 read error: -22 [ 1315.746089][T11156] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.798185][ T5313] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 1315.925552][T16422] bridge0: port 1(bridge_slave_0) entered disabled state [ 1315.947406][T16192] bridge0: port 1(bridge_slave_0) entered blocking state [ 1315.947482][T16192] bridge0: port 1(bridge_slave_0) entered disabled state [ 1315.947650][T16192] bridge_slave_0: entered allmulticast mode [ 1315.971237][T16416] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1315.990414][ T5313] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1315.990450][ T5313] usb 10-1: New USB device found, idVendor=0404, idProduct=0312, bcdDevice=42.c1 [ 1315.991457][ T5313] usb 10-1: config 160 has an invalid interface number: 168 but max is 0 [ 1315.991471][ T5313] usb 10-1: config 160 has no interface number 0 [ 1315.991498][ T5313] usb 10-1: config 160 interface 168 altsetting 8 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 1315.991511][ T5313] usb 10-1: config 160 interface 168 altsetting 8 endpoint 0x84 has invalid maxpacket 49717, setting to 1024 [ 1315.991524][ T5313] usb 10-1: config 160 interface 168 altsetting 8 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1315.991536][ T5313] usb 10-1: config 160 interface 168 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 1315.991546][ T5313] usb 10-1: config 160 interface 168 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 1315.991557][ T5313] usb 10-1: config 160 interface 168 altsetting 8 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 1315.991570][ T5313] usb 10-1: config 160 interface 168 altsetting 8 bulk endpoint 0xC has invalid maxpacket 64 [ 1315.991581][ T5313] usb 10-1: config 160 interface 168 altsetting 8 has 7 endpoint descriptors, different from the interface descriptor's value: 6 [ 1315.991594][ T5313] usb 10-1: config 160 interface 168 has no altsetting 0 [ 1315.994518][ T5313] usb 10-1: string descriptor 0 read error: -22 [ 1315.994593][ T5313] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.128327][T16192] bridge_slave_0: entered promiscuous mode [ 1316.173323][T11156] io_edgeport 4-1:160.168: required endpoints missing [ 1316.216128][T16192] bridge0: port 2(bridge_slave_1) entered blocking state [ 1316.216196][T16192] bridge0: port 2(bridge_slave_1) entered disabled state [ 1316.216368][T16192] bridge_slave_1: entered allmulticast mode [ 1316.276634][T16421] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1316.276928][T16421] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1316.276985][T16421] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1316.278089][T16192] bridge_slave_1: entered promiscuous mode [ 1316.342395][ T5313] io_edgeport 10-1:160.168: required endpoints missing [ 1316.859501][T16192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1316.862750][T16435] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2289'. [ 1316.862769][T16435] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2289'. [ 1316.943649][T16192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1316.982287][T15504] bridge_slave_1: left allmulticast mode [ 1316.982311][T15504] bridge_slave_1: left promiscuous mode [ 1316.982729][T15504] bridge0: port 2(bridge_slave_1) entered disabled state [ 1316.985700][T15504] bridge_slave_0: left allmulticast mode [ 1316.985720][T15504] bridge_slave_0: left promiscuous mode [ 1316.985863][T15504] bridge0: port 1(bridge_slave_0) entered disabled state [ 1317.336356][ T37] kauditd_printk_skb: 46 callbacks suppressed [ 1317.336368][ T37] audit: type=1800 audit(1786890090.067:4937): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15663 res=0 errno=0 [ 1317.549461][T16441] netlink: 'syz.5.2291': attribute type 21 has an invalid length. [ 1317.549477][T16441] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2291'. [ 1317.590459][T15504] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1317.593332][T15504] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1317.595272][T15504] bond0 (unregistering): Released all slaves [ 1317.641616][T16264] bridge0: port 1(bridge_slave_0) entered blocking state [ 1317.641685][T16264] bridge0: port 1(bridge_slave_0) entered disabled state [ 1317.642341][T16264] bridge_slave_0: entered allmulticast mode [ 1317.644280][T16264] bridge_slave_0: entered promiscuous mode [ 1317.798414][T16441] netlink: 'syz.5.2291': attribute type 5 has an invalid length. [ 1317.798429][T16441] netlink: 'syz.5.2291': attribute type 6 has an invalid length. [ 1317.798435][T16441] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2291'. [ 1317.805147][T16264] bridge0: port 2(bridge_slave_1) entered blocking state [ 1317.805224][T16264] bridge0: port 2(bridge_slave_1) entered disabled state [ 1317.805361][T16264] bridge_slave_1: entered allmulticast mode [ 1317.863327][T16264] bridge_slave_1: entered promiscuous mode [ 1317.980683][ T37] audit: type=1800 audit(1786890090.697:4938): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15663 res=0 errno=0 [ 1318.065326][ T37] audit: type=1800 audit(1786890090.797:4939): pid=16443 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.2292" name="current_clocksource" dev="sysfs" ino=5073 res=0 errno=0 [ 1318.107254][T16192] team0: Port device team_slave_0 added [ 1318.118671][T15504] hsr_slave_0: left promiscuous mode [ 1318.119206][T15504] hsr_slave_1: left promiscuous mode [ 1318.119998][T15504] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1318.120614][T15504] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1318.202447][ T37] audit: type=1800 audit(1786890090.937:4940): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15663 res=0 errno=0 [ 1318.368586][ T6018] usb 4-1: USB disconnect, device number 30 [ 1318.432435][ T37] audit: type=1800 audit(1786890091.167:4941): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15663 res=0 errno=0 [ 1318.491662][ T37] audit: type=1800 audit(1786890091.227:4942): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15417 res=0 errno=0 [ 1318.566562][T16448] loop2: detected capacity change from 0 to 7 [ 1318.666091][ T37] audit: type=1800 audit(1786890091.397:4943): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15663 res=0 errno=0 [ 1318.797367][ T5313] usb 10-1: USB disconnect, device number 37 [ 1318.923899][ T37] audit: type=1800 audit(1786890091.657:4944): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15663 res=0 errno=0 [ 1318.976992][ T37] audit: type=1800 audit(1786890091.707:4945): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16155 res=0 errno=0 [ 1319.015260][T16448] loop2: [ 1319.015276][T16448] loop2: partition table partially beyond EOD, truncated [ 1319.286648][ T37] audit: type=1800 audit(1786890092.017:4946): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16155 res=0 errno=0 [ 1320.222178][T15504] team0 (unregistering): Port device team_slave_1 removed [ 1320.276595][T15504] team0 (unregistering): Port device team_slave_0 removed [ 1321.080627][T16482] ------------[ cut here ]------------ [ 1321.080637][T16482] !work->func [ 1321.080648][T16482] WARNING: kernel/workqueue.c:4335 at __flush_work+0xc68/0xd70, CPU#0: syz.5.2303/16482 [ 1321.080684][T16482] Modules linked in: [ 1321.080702][T16482] CPU: 0 UID: 0 PID: 16482 Comm: syz.5.2303 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1321.080717][T16482] Tainted: [L]=SOFTLOCKUP [ 1321.080721][T16482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1321.080728][T16482] RIP: 0010:__flush_work+0xc68/0xd70 [ 1321.080743][T16482] Code: 6b 8b e8 cb 7e 13 00 48 c7 c7 00 30 1c 8e 48 89 de e9 49 ff ff ff e8 67 a3 37 00 90 0f 0b 90 e9 45 ff ff ff e8 59 a3 37 00 90 <0f> 0b 90 31 c0 49 bd f8 f8 f8 f8 f8 f8 f8 f8 e9 2d ff ff ff e8 3f [ 1321.080751][T16482] RSP: 0018:ffffc90004a5fa20 EFLAGS: 00010287 [ 1321.080760][T16482] RAX: ffffffff818e2537 RBX: ffff88802bbaa1b0 RCX: 0000000000080000 [ 1321.080768][T16482] RDX: ffffc900173ba000 RSI: 0000000000000764 RDI: 0000000000000765 [ 1321.080775][T16482] RBP: ffffc90004a5fbd0 R08: 0000000000000000 R09: 0000000000000000 [ 1321.080782][T16482] R10: dffffc0000000000 R11: fffffbfff1f5f267 R12: dffffc0000000000 [ 1321.080789][T16482] R13: 1ffff11005775436 R14: 1ffff9200094bf4c R15: ffff88802bbaa198 [ 1321.080797][T16482] FS: 00007f78106e56c0(0000) GS:ffff888125c3a000(0000) knlGS:0000000000000000 [ 1321.080806][T16482] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1321.080813][T16482] CR2: 00007f780fe7ed58 CR3: 000000005e30a000 CR4: 00000000003526f0 [ 1321.080823][T16482] Call Trace: [ 1321.080828][T16482] [ 1321.080838][T16482] ? __pfx___flush_work+0x10/0x10 [ 1321.080854][T16482] ? rcu_is_watching+0x15/0xb0 [ 1321.080869][T16482] ? work_grab_pending+0x3d1/0x930 [ 1321.080889][T16482] ? __cancel_work_sync+0x5c/0x110 [ 1321.080904][T16482] __cancel_work_sync+0xbe/0x110 [ 1321.080918][T16482] f_midi_free+0xac/0x1f0 [ 1321.080999][T16482] config_usb_cfg_unlink+0x236/0x260 [ 1321.081045][T16482] configfs_symlink+0xde9/0x1030 [ 1321.081067][T16482] ? __pfx_configfs_symlink+0x10/0x10 [ 1321.081084][T16482] ? bpf_lsm_inode_symlink+0x9/0x20 [ 1321.081103][T16482] vfs_symlink+0x18b/0x330 [ 1321.081116][T16482] ? security_path_symlink+0xfd/0x360 [ 1321.081133][T16482] filename_symlinkat+0x1cd/0x420 [ 1321.081149][T16482] ? __pfx_filename_symlinkat+0x10/0x10 [ 1321.081165][T16482] ? do_getname+0x151/0x250 [ 1321.081178][T16482] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1321.081191][T16482] __se_sys_symlinkat+0x4e/0x2b0 [ 1321.081204][T16482] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1321.081215][T16482] do_syscall_64+0x174/0x580 [ 1321.081228][T16482] ? trace_irq_disable+0x3b/0x140 [ 1321.081242][T16482] ? clear_bhb_loop+0x70/0xc0 [ 1321.081254][T16482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1321.081264][T16482] RIP: 0033:0x7f78124ae0d9 [ 1321.081275][T16482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1321.081283][T16482] RSP: 002b:00007f78106e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 1321.081293][T16482] RAX: ffffffffffffffda RBX: 00007f7812736090 RCX: 00007f78124ae0d9 [ 1321.081300][T16482] RDX: 00002000000005c0 RSI: ffffffffffffff9c RDI: 0000200000000580 [ 1321.081307][T16482] RBP: 00007f7812545024 R08: 0000000000000000 R09: 0000000000000000 [ 1321.081314][T16482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1321.081320][T16482] R13: 00007f7812736128 R14: 00007f7812736090 R15: 00007ffc0e7664f8 [ 1321.081336][T16482] [ 1321.081348][T16482] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1321.081357][T16482] CPU: 0 UID: 0 PID: 16482 Comm: syz.5.2303 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1321.081371][T16482] Tainted: [L]=SOFTLOCKUP [ 1321.081374][T16482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1321.081380][T16482] Call Trace: [ 1321.081386][T16482] [ 1321.081390][T16482] vpanic+0x56c/0xa60 [ 1321.081405][T16482] ? __pfx__printk+0x10/0x10 [ 1321.081416][T16482] ? __pfx_vpanic+0x10/0x10 [ 1321.081428][T16482] ? is_bpf_text_address+0x292/0x2b0 [ 1321.081439][T16482] ? is_bpf_text_address+0x26/0x2b0 [ 1321.081455][T16482] panic+0xc5/0xd0 [ 1321.081468][T16482] ? __pfx_panic+0x10/0x10 [ 1321.081493][T16482] __warn+0x315/0x4c0 [ 1321.081505][T16482] ? __flush_work+0xc68/0xd70 [ 1321.081519][T16482] ? __flush_work+0xc68/0xd70 [ 1321.081531][T16482] __report_bug+0x276/0x570 [ 1321.081552][T16482] ? __flush_work+0xc68/0xd70 [ 1321.081566][T16482] ? __pfx___report_bug+0x10/0x10 [ 1321.081577][T16482] ? stack_depot_save_flags+0x3ec/0x800 [ 1321.081592][T16482] ? __bfs+0x153/0x290 [ 1321.081602][T16482] ? __pfx_hlock_conflict+0x10/0x10 [ 1321.081617][T16482] ? check_path+0x21/0x40 [ 1321.081629][T16482] ? check_noncircular+0xda/0x150 [ 1321.081642][T16482] ? __bfs+0x153/0x290 [ 1321.081650][T16482] ? __pfx_hlock_conflict+0x10/0x10 [ 1321.081662][T16482] ? __flush_work+0xc68/0xd70 [ 1321.081674][T16482] report_bug+0x16a/0x220 [ 1321.081694][T16482] ? __flush_work+0xc68/0xd70 [ 1321.081705][T16482] ? __flush_work+0xc6a/0xd70 [ 1321.081717][T16482] handle_bug+0x9c/0x200 [ 1321.081731][T16482] exc_invalid_op+0x1a/0x50 [ 1321.081745][T16482] asm_exc_invalid_op+0x1a/0x20 [ 1321.081756][T16482] RIP: 0010:__flush_work+0xc68/0xd70 [ 1321.081768][T16482] Code: 6b 8b e8 cb 7e 13 00 48 c7 c7 00 30 1c 8e 48 89 de e9 49 ff ff ff e8 67 a3 37 00 90 0f 0b 90 e9 45 ff ff ff e8 59 a3 37 00 90 <0f> 0b 90 31 c0 49 bd f8 f8 f8 f8 f8 f8 f8 f8 e9 2d ff ff ff e8 3f [ 1321.081776][T16482] RSP: 0018:ffffc90004a5fa20 EFLAGS: 00010287 [ 1321.081785][T16482] RAX: ffffffff818e2537 RBX: ffff88802bbaa1b0 RCX: 0000000000080000 [ 1321.081793][T16482] RDX: ffffc900173ba000 RSI: 0000000000000764 RDI: 0000000000000765 [ 1321.081799][T16482] RBP: ffffc90004a5fbd0 R08: 0000000000000000 R09: 0000000000000000 [ 1321.081805][T16482] R10: dffffc0000000000 R11: fffffbfff1f5f267 R12: dffffc0000000000 [ 1321.081812][T16482] R13: 1ffff11005775436 R14: 1ffff9200094bf4c R15: ffff88802bbaa198 [ 1321.081824][T16482] ? __flush_work+0xc67/0xd70 [ 1321.081843][T16482] ? __pfx___flush_work+0x10/0x10 [ 1321.081858][T16482] ? rcu_is_watching+0x15/0xb0 [ 1321.081872][T16482] ? work_grab_pending+0x3d1/0x930 [ 1321.081890][T16482] ? __cancel_work_sync+0x5c/0x110 [ 1321.081904][T16482] __cancel_work_sync+0xbe/0x110 [ 1321.081917][T16482] f_midi_free+0xac/0x1f0 [ 1321.081930][T16482] config_usb_cfg_unlink+0x236/0x260 [ 1321.081946][T16482] configfs_symlink+0xde9/0x1030 [ 1321.081966][T16482] ? __pfx_configfs_symlink+0x10/0x10 [ 1321.081982][T16482] ? bpf_lsm_inode_symlink+0x9/0x20 [ 1321.081996][T16482] vfs_symlink+0x18b/0x330 [ 1321.082008][T16482] ? security_path_symlink+0xfd/0x360 [ 1321.082023][T16482] filename_symlinkat+0x1cd/0x420 [ 1321.082040][T16482] ? __pfx_filename_symlinkat+0x10/0x10 [ 1321.082055][T16482] ? do_getname+0x151/0x250 [ 1321.082068][T16482] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1321.082079][T16482] __se_sys_symlinkat+0x4e/0x2b0 [ 1321.082092][T16482] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1321.082103][T16482] do_syscall_64+0x174/0x580 [ 1321.082114][T16482] ? trace_irq_disable+0x3b/0x140 [ 1321.082128][T16482] ? clear_bhb_loop+0x70/0xc0 [ 1321.082140][T16482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1321.082150][T16482] RIP: 0033:0x7f78124ae0d9 [ 1321.082158][T16482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1321.082166][T16482] RSP: 002b:00007f78106e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 1321.082176][T16482] RAX: ffffffffffffffda RBX: 00007f7812736090 RCX: 00007f78124ae0d9 [ 1321.082183][T16482] RDX: 00002000000005c0 RSI: ffffffffffffff9c RDI: 0000200000000580 [ 1321.082190][T16482] RBP: 00007f7812545024 R08: 0000000000000000 R09: 0000000000000000 [ 1321.082196][T16482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1321.082202][T16482] R13: 00007f7812736128 R14: 00007f7812736090 R15: 00007ffc0e7664f8 [ 1321.082218][T16482] [ 1321.082277][T16482] Kernel Offset: disabled