last executing test programs: 1m6.158494909s ago: executing program 3 (id=102): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x7, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RTC_WKALM_SET(r2, 0x40187014, &(0x7f0000000000)={0x1}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000340)=0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) timer_settime(r4, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_io_uring_setup(0x5c2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000240), &(0x7f0000000580)) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x980a, 0x2, 0x400002, 0x101}, 0x0, &(0x7f0000000040)) r5 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) bind$inet(r5, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r5, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=""/127, 0x7f}}], 0x1, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 1m5.793434861s ago: executing program 3 (id=103): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000001800)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x4, 0x2, 0x0, @private=0xa010300, @multicast2}, @address_request={0x11, 0x0, 0x0, 0x2}}}}}, 0x0) 1m5.640378799s ago: executing program 3 (id=106): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'ip6tnl0\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0x1, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r0, {0x7, 0xfff3}, {0x2, 0xfff1}, {0x2, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x9}}, @TCA_RATE={0x6, 0x5, {0x9, 0x3}}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x35) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) r5 = mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x8c2, 0x30, &(0x7f0000000080)={0x3, 0x8, 0x6, 0xc07}) mq_getsetattr(r5, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) syz_open_dev$vbi(&(0x7f0000000180), 0x2, 0x2) setsockopt$sock_attach_bpf(r6, 0x107, 0x8, &(0x7f0000000000), 0x4) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000540)="b88a000000000000000000008100", 0x5bc}], 0x1}, 0x0) recvmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mq_timedreceive(r5, &(0x7f0000000100)=""/90, 0x5a, 0x0, 0x0) 1m3.867950809s ago: executing program 3 (id=110): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b189a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0/file0/file0\x00', 0x0, 0x18e5811, 0x0) (fail_nth: 17) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x84000, 0x0) 1m3.698588285s ago: executing program 3 (id=111): r0 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x841, 0x0) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040)="4dc07f94", 0x4) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x54000, 0x2000, &(0x7f0000b07000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4048aecb, &(0x7f0000000000)) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8080000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5}, @IFLA_IPTUN_ENCAP_DPORT={0x6}]}}}]}, 0x44}}, 0x4000010) 1m3.330756096s ago: executing program 3 (id=112): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000380)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[{}, {}, {}, {}, {}], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x5, 0x7, 0x6}) ioctl$DRM_IOCTL_MODE_GETENCODER(r2, 0xc01464a6, &(0x7f0000000400)={r3}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1}) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0x14}, @l2cap_cid_le_signaling={{0x10}, @l2cap_ecred_conn_rsp={{0x18, 0xf8, 0xc}, {0x1, 0x1, 0x773, 0xf, [0x9ada, 0x7f]}}}}, 0x19) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r4], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040)}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_bt_hci(r5, 0x800448d2, &(0x7f0000000040)) accept4$unix(r0, 0x0, 0x0, 0x80800) 1m2.878324689s ago: executing program 32 (id=112): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000380)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[{}, {}, {}, {}, {}], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x5, 0x7, 0x6}) ioctl$DRM_IOCTL_MODE_GETENCODER(r2, 0xc01464a6, &(0x7f0000000400)={r3}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1}) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0x14}, @l2cap_cid_le_signaling={{0x10}, @l2cap_ecred_conn_rsp={{0x18, 0xf8, 0xc}, {0x1, 0x1, 0x773, 0xf, [0x9ada, 0x7f]}}}}, 0x19) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r4], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040)}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_bt_hci(r5, 0x800448d2, &(0x7f0000000040)) accept4$unix(r0, 0x0, 0x0, 0x80800) 59.097659576s ago: executing program 1 (id=128): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000080)={0x24, r0, 0x1, 0x70bd2b, 0x25dfdbfe, {{0x21, 0x0, 0x300}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x103f}]}, 0x24}, 0x1, 0x0, 0x0, 0x63f44ed5f350319d}, 0x24048000) 59.029610157s ago: executing program 1 (id=129): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000080)=""/24, 0x18}, {&(0x7f0000000280)=""/138, 0x8a}, {&(0x7f0000000340)=""/102, 0x66}, {&(0x7f0000000200)=""/14, 0xe}], 0x5, 0x0, 0x0, 0x800}, 0x4000018) r1 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8001) ioctl$GIO_FONTX(r2, 0x4b6b, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x200400a0}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000040)={0x0, 'veth0_vlan\x00', {0x7fffffff}, 0x4}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) setfsgid(0xee00) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002500)=@newchain={0x408c, 0x64, 0x300, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x8, 0xd}, {0xfff3, 0x7371685dadbaefa2}, {0xfff3, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x8}}, @filter_kind_options=@f_basic={{0xa}, {0x404c, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x5}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x10, 0x9}}, @TCA_BASIC_POLICE={0x18, 0x4, [@TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}]}, @TCA_BASIC_ACT={0x4020, 0x3, [@m_pedit={0xedc, 0xf, 0x0, 0x0, {{0xa}, {0xe6c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe68, 0x2, {{{0x5, 0x9, 0xfffffffffffffff7, 0x6, 0x3}, 0x7, 0x5, [{0x71, 0x9, 0x0, 0xc, 0x3, 0x9}, {0x9, 0x7, 0x3, 0xe7e, 0x5, 0x53}, {0x80, 0x4e0, 0x8000, 0x5, 0x800, 0x2}]}, [{0xc00, 0x9, 0x5, 0x442, 0x5, 0x8001}, {0xcbc1, 0x2, 0x0, 0x6, 0x6, 0xfffffff9}, {0x100, 0x8, 0x516d, 0x0, 0x8, 0xfffffffa}, {0x9e9, 0x1c00000, 0x44b, 0x4, 0x4, 0x400}, {0x5, 0x3, 0x200, 0x4, 0xe, 0x5}, {0x7f, 0xa, 0x5dc0, 0x6, 0x5, 0x80000001}, {0x2, 0x3ff, 0x4, 0x9, 0x80000000, 0x2}, {0x7, 0xe77, 0xfffffc01, 0xfffff918, 0x80000000, 0x6}, {0x1000, 0x7ff, 0x8, 0xf, 0xc, 0x8}, {0x9, 0x8, 0x3, 0xe, 0x10, 0x86d}, {0x3, 0x1, 0x1a10, 0x7, 0xf6c, 0x7}, {0x3, 0x4, 0x371, 0x8, 0x4, 0x80000001}, {0x9, 0x5, 0x6, 0x0, 0x3, 0x1ff}, {0x5, 0x6, 0x10001, 0x7, 0x1}, {0x1, 0x4, 0x8000, 0x1, 0xf1, 0x7}, {0x9, 0xcf3021a, 0xe89, 0x8, 0x9, 0x3}, {0x9, 0x3, 0x38, 0x2, 0x4, 0x9}, {0x61, 0x1, 0x1, 0x7, 0x0, 0xff}, {0x5, 0xe78f, 0x3, 0x3, 0x1e2, 0xfffff3db}, {0x5, 0x6, 0xf4d1, 0x6, 0x0, 0x101}, {0xfff, 0x6, 0x10000, 0x1e, 0x64517409, 0x7f}, {0x7f, 0xfffffffb, 0xca1, 0x1, 0x7f, 0xffff1aaf}, {0x713, 0x14f6fb32, 0xfffffffc, 0x80000001, 0x2, 0x2}, {0x2, 0x0, 0x3, 0x2, 0x3, 0x5}, {0x6, 0x1, 0xfffffffc, 0x3, 0x9}, {0x200, 0xffffffff, 0xe, 0x4, 0x8, 0x7}, {0xc, 0x4, 0x3, 0x1, 0x4, 0xff}, {0x1, 0x6, 0x515f, 0x6, 0x5, 0x4}, {0x400, 0x3, 0x401, 0x0, 0xa5b, 0x7ff}, {0x0, 0x8, 0x7fffffff, 0x19d0, 0x8}, {0x1, 0x8, 0x100, 0x9, 0x7, 0x7}, {0xc7, 0xff, 0x4, 0x3, 0x3, 0x744}, {0x6, 0x8, 0x23, 0x7, 0x5, 0xc2}, {0x8, 0xfffffffc, 0x4, 0x5, 0xffff, 0x5}, {0x7, 0x1, 0xd, 0x1, 0xb165, 0x10001}, {0x4, 0x1, 0x9, 0x9, 0x5, 0x100}, {0x2, 0x7ff, 0x3, 0x0, 0x6, 0x9}, {0x6, 0x0, 0x7d46, 0xc000000, 0x6}, {0x3, 0x10, 0x100, 0xfffffffd, 0x6a, 0x5}, {0x8001, 0x3, 0x1ff, 0x5, 0x7, 0x9}, {0x0, 0x5, 0x80000001, 0x6, 0xffffffff, 0x4}, {0x70090bd2, 0x7fff, 0xfffffff9, 0x0, 0x1, 0xfffffffc}, {0x4, 0xffffffff, 0x94f, 0x400, 0x8001, 0x2}, {0x7, 0x800, 0xfffffff8, 0x2, 0xff, 0x8ac}, {0x8, 0x3, 0x8, 0x7, 0x8, 0x2}, {0x9, 0x7b2b, 0x0, 0x80000000, 0x101, 0x6}, {0x5, 0x81, 0x1000, 0x80000000, 0x1000, 0xb}, {0x0, 0x7f, 0x26f, 0x2, 0x1, 0x8000000}, {0x6, 0x9, 0x9, 0xfffffffe, 0x2, 0x10001}, {0x3, 0x8, 0x2d7, 0xffff0001, 0x9, 0x68}, {0x8, 0xf55, 0x8, 0x6553, 0x3, 0x2}, {0xad65, 0x5, 0x0, 0x1, 0x100, 0x9}, {0x0, 0x8, 0x9, 0x4, 0xb, 0x8}, {0x5, 0x7, 0x8, 0x6, 0x401, 0x800}, {0x0, 0xf3, 0x3, 0xe, 0x8}, {0x5, 0x6, 0x4, 0x1, 0x6, 0x100}, {0x1, 0x0, 0x3ff, 0x1, 0x5689, 0x10}, {0x5, 0x37d4, 0x1, 0xe, 0xfffffffd, 0x5}, {0x50f, 0x80, 0x1, 0x336, 0x8001, 0x5}, {0x7, 0x800, 0xffffffff, 0x6, 0xb, 0x1}, {0x8, 0x3ff, 0xfffffc00, 0x9aa6eac, 0x0, 0xfff}, {0xfff, 0x8000, 0x2, 0xe793, 0x2, 0xfffffffc}, {0x4, 0xac, 0x9, 0x800, 0x74b}, {0x0, 0xba73, 0x0, 0x2, 0x200, 0x6}, {0x3, 0x8, 0x3ff, 0x5, 0x200, 0x1000}, {0x3, 0x5, 0x1, 0x7ff, 0x7, 0x9}, {0x0, 0x1ff, 0x3, 0x6, 0x9, 0x5e}, {0x5, 0x0, 0x2, 0x1, 0x0, 0x5}, {0x1, 0x0, 0xfffff800, 0x3, 0x8, 0x899}, {0x153, 0x8, 0x7, 0x2, 0x6, 0x7}, {0x6, 0x6, 0x10001, 0x94000000, 0xb, 0x2}, {0x1, 0xfffffffb, 0xfffffff7, 0x7c4, 0x1, 0x1}, {0x1, 0xce5, 0x9, 0x2, 0x40, 0x8}, {0x0, 0x2, 0x5, 0x10, 0x7}, {0x5, 0x8, 0x200, 0x9, 0x90, 0xfffffffc}, {0x7fff, 0xc3, 0x6, 0x1, 0xfff, 0x7}, {0x8000, 0x3, 0xffffffff, 0x7, 0x2, 0x18}, {0x7, 0x6, 0xfffffffe, 0x10000, 0x1, 0x6}, {0x6, 0x3, 0xb, 0x5, 0x180}, {0xaf, 0x0, 0xfffffffe, 0xf, 0x5, 0x5}, {0xb1, 0x1, 0xffff7fff, 0x2, 0x80, 0xacc}, {0xf782, 0x6, 0x2, 0x7, 0x4}, {0x1200000, 0x7, 0x200, 0xe7, 0xfff, 0x56d7ec69}, {0xc, 0xd1, 0xd22d, 0x3ff, 0x1, 0x2}, {0x5565, 0x0, 0x7ff, 0x1525, 0x400, 0x5}, {0x6, 0x7, 0x7, 0x10000, 0xffff0000, 0x80000000}, {0x9, 0x6, 0x80000001, 0x2, 0x9, 0x6}, {0x6, 0x1, 0x3, 0x6, 0xffffff18, 0xfffffff8}, {0x8, 0xd, 0x5, 0xf, 0xfffffff5, 0xff}, {0x4, 0x7ff, 0x5, 0x4, 0x8, 0x8}, {0x80, 0x7, 0x4, 0x4, 0x100, 0x3}, {0x2, 0xffff, 0x0, 0x9, 0xad, 0x5fe42e20}, {0x0, 0x3ff, 0x9, 0x2, 0x435, 0x8}, {0x437b, 0x0, 0x979c, 0xb5398f7a, 0x10001, 0xc0000}, {0xf6f, 0x1, 0xc32b, 0x2, 0xfffffff8, 0x9}, {0x10001, 0xa, 0xfffffffe, 0x6, 0xd, 0x16ec}, {0x5, 0x45, 0xd9a, 0x0, 0x5, 0x1000}, {0x1, 0x6a, 0xffffff81, 0xf0, 0x9, 0x2}, {0x4, 0xfffffff8, 0x32, 0xc9, 0x5, 0x7}, {0xff, 0x8, 0xfffffff8, 0x66f, 0x5000, 0x7ff}, {0xf, 0x1000, 0x5b5, 0x6, 0x3, 0x4}, {0x2, 0x8, 0x7fffffff, 0x101, 0x5, 0x1}, {0x9, 0x8, 0xb9, 0x1d5aeaea, 0xf, 0x4}, {0x7, 0xd, 0x1, 0x5, 0x1, 0x1}, {0x8, 0xffffffff, 0x10001, 0xf71d, 0x2, 0x8000}, {0xc, 0xfffffff9, 0x80000001, 0x4, 0xc004, 0x2}, {0x800, 0x9, 0x1, 0x2, 0x6, 0x6}, {0x6, 0x6, 0xffffffff, 0x80000001, 0x0, 0x7}, {0x80000001, 0x8, 0x7fff, 0xd2a7, 0x94a, 0x5}, {0x6, 0x64b, 0xefd, 0x2, 0xb, 0x21}, {0x4, 0x1, 0x5, 0x0, 0x54b, 0x7}, {0x5, 0x6, 0x8, 0x9, 0xfffffff9, 0x40}, {0x7, 0x8, 0x4, 0x8000, 0x7fffffff, 0x7fffffff}, {0xffff8001, 0xfffff85a, 0x1, 0xf757, 0x3, 0xf050}, {0x400, 0x0, 0x5, 0x8, 0x6, 0x6}, {0xb2, 0x2, 0x7, 0x0, 0x0, 0x6}, {0x2, 0x6, 0x6, 0x3, 0x5bd}, {0x401, 0x1, 0x5c0, 0x3, 0x2, 0x1ff}, {0x0, 0x5, 0xfffffffe, 0x8, 0xb, 0x80000000}, {0x3, 0x314, 0x6, 0x5, 0x7, 0x6}, {0x7fffffff, 0xfffffffc, 0x4, 0x1, 0x7, 0x4}, {0x9, 0xb1c, 0x8, 0xfffffffa, 0x3b3, 0x7}, {0x2, 0x1, 0xe119, 0x2, 0x2, 0x3}, {0x5b, 0x9, 0xfffffff9, 0x6, 0x6, 0x6}, {0x9, 0x6, 0x94, 0x40, 0x0, 0x3}, {0x1, 0x1000, 0x1, 0x6, 0x401, 0xb}, {0x0, 0xff, 0x3, 0x2, 0x100, 0x8c3}, {0x6, 0x9, 0x7fff, 0x3, 0x7, 0x8}], [{0x5, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x7e7a7a1c634443e5}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {}, {}, {}, {0x4}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x4}, {0x4, 0xb5c062ed431bad38}, {0x5}, {0x5, 0x1}, {0x5}, {0x5}, {}, {0x4, 0x1}, {0x7}, {0x5, 0x1}, {0x3, 0x1}, {0x8}, {0x2}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x3}, {}, {0x2, 0x1}, {0x1}, {}, {0x3}, {0x6, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x3b84092ad9e840cb, 0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x5}, {0x5}, {0x2, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {}, {}, {0x0, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {0x4}, {0x5}, {0x2, 0x1}, {0x2}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4}, {0x3}, {0x3}, {0x3, 0x1}, {0x4}, {0x4}, {0x3, 0x1}, {0x4}, {0x4}, {0x5}, {0x4, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x3}, {0x0, 0x1}], 0x1}}]}, {0x47, 0x6, "7c59637f401cf4af78110d6941e9a3744d84a2eeae98e179755aeb3eb45621601691f29eae362219c86350b3f290da1584b2c3b44ed69f33171263b8de8f4ea8561257"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_pedit={0x1fa0, 0x15, 0x0, 0x0, {{0xa}, {0x1eb4, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xf10, 0x2, {{{0x8, 0x3f0, 0x4, 0x8000, 0x4}, 0x6, 0xf2, [{0x4, 0xfffffff9, 0x9, 0x6, 0x1, 0x7}, {0x7, 0x9, 0xd, 0x0, 0x401, 0x5}, {0x100, 0x0, 0x101, 0x5, 0xb5c3, 0xd}, {0x6, 0x5, 0x9, 0x1, 0x9, 0x4f9}, {0xffffff80, 0x0, 0x3, 0x3, 0x4, 0x3}, {0xb, 0x1, 0x0, 0x5, 0x7, 0x7}, {0x1c0000, 0xfa, 0x9, 0x8001, 0x0, 0x4}, {0x6, 0xea6b, 0x3, 0x3, 0x42a82ade, 0x2}, {0x1, 0x8, 0x80, 0xfde4, 0x5, 0x2daf8ca9}, {0xd2cb, 0x8b0, 0x8, 0x2, 0x5, 0x7}]}, [{0x8, 0x0, 0xf7ab, 0x8, 0x4, 0x5}, {0x1, 0x1ff, 0x8, 0x10001, 0x80000001, 0x6}, {0x1000, 0xfffffffa, 0x0, 0x5, 0x6, 0x8001}, {0x6, 0x2, 0x6, 0x200, 0x1, 0x8000}, {0x6, 0x3, 0x4452, 0x80000000, 0xe, 0x7}, {0x11, 0x3, 0x200, 0x8, 0x10001}, {0x6, 0x1054, 0x62, 0x9, 0x7fffffff, 0xfff}, {0x5, 0x80, 0x3, 0x0, 0x8, 0x6}, {0x9, 0x5, 0x7, 0x2, 0x200, 0x360}, {0x8, 0xb, 0x6, 0x8, 0x80, 0x1}, {0x101, 0x3f7, 0x5, 0x1, 0x4, 0x87}, {0x7, 0x2, 0xf0a9, 0x6, 0x80000001, 0x1}, {0x8, 0xe, 0x7, 0x75fa, 0x6, 0xa}, {0xff, 0x10001, 0x5, 0x9e8a, 0x5, 0xbe5}, {0xfffffffd, 0x6, 0x0, 0x1, 0x0, 0x8}, {0x81, 0x1000, 0x9, 0x4, 0x1a9, 0x1}, {0x8, 0x8, 0x0, 0x0, 0x9, 0x7}, {0xc, 0x6, 0x6, 0x2, 0x4, 0x8}, {0x9, 0x1, 0x2, 0x1, 0x7, 0x7f}, {0x9, 0xbd, 0x4, 0x6e, 0x6}, {0x0, 0x4bd, 0x8, 0x3, 0x0, 0x5}, {0xfffffeff, 0x8, 0x3, 0x4, 0x3b, 0xa}, {0x4, 0x3, 0x7fff, 0x7aa1, 0xe6bc, 0x8}, {0x7, 0x9, 0x2, 0x56, 0x5, 0xffffffff}, {0x101, 0x8, 0x1, 0x2, 0x1, 0x2}, {0x80000000, 0x0, 0x7, 0x40, 0x2, 0xe}, {0x6, 0x9, 0x9, 0x7, 0x7fffffff, 0x8}, {0xa, 0xfff, 0xfffffff8, 0xc78, 0x10000, 0x6}, {0x0, 0x10, 0x818c, 0x1, 0x4, 0x5}, {0x6, 0x8001, 0xb, 0xfffffffa, 0x7, 0x6}, {0x1, 0x7, 0x80000001, 0xe220, 0x8, 0x8000}, {0x2c, 0x0, 0x3, 0x2, 0x7f, 0x5}, {0x6, 0x81, 0xffff, 0x0, 0x9ef, 0xa}, {0x4, 0x6, 0x1, 0x1, 0x6, 0x6}, {0x3e47, 0xa90, 0xfffffffb, 0x6, 0x0, 0x4000000}, {0x7, 0x3, 0x5, 0xbc3, 0xf, 0xe07e}, {0x4, 0x80, 0xc, 0x93, 0x9, 0x4}, {0x8, 0x4, 0x3, 0xe, 0x800, 0x7126}, {0x7, 0x7, 0x0, 0x5, 0x10001, 0x6}, {0xe, 0x2, 0xa, 0xc, 0x9, 0x2}, {0x10000, 0x9, 0x5, 0x5a4f, 0xf2c, 0xa}, {0x2, 0x75, 0x9, 0x0, 0x4, 0x4055cf65}, {0x8001, 0x6, 0x8, 0x4, 0xa, 0x6}, {0xcb, 0x2, 0x7, 0x5, 0x0, 0xf2e}, {0x2, 0x1000, 0x8, 0x6, 0x7, 0x2}, {0x80000001, 0x9, 0x4, 0x118, 0x40, 0x5}, {0x2199, 0x9, 0x4, 0x6, 0xf, 0x3}, {0x81, 0xa5, 0x7, 0x9, 0x8}, {0x6, 0x5, 0x3, 0xc, 0x2, 0xfff}, {0x5, 0x4978280a, 0x1, 0x6, 0x6, 0x101}, {0x7, 0x3, 0x71, 0x9, 0x0, 0x7}, {0x9, 0x5, 0x8, 0xf4, 0x0, 0x7}, {0x97e, 0xfff, 0xd1a, 0x9, 0x5d0, 0x4}, {0x67e, 0xd2, 0xe, 0x14, 0x55ae, 0x3}, {0x0, 0x0, 0x8000, 0x6, 0x0, 0x6}, {0x3, 0x1, 0x29, 0x0, 0x5}, {0x5bb, 0x0, 0xf, 0x5, 0x2ea9cf0b, 0x8}, {0x0, 0x6, 0xfffffff9, 0xffff8000, 0x7ff, 0x1}, {0x5, 0x6, 0x3, 0x85a1, 0x6, 0x4}, {0x6, 0x6, 0x88f9, 0xb9, 0x0, 0xa}, {0x10000, 0x2, 0x2, 0xf, 0x2, 0x8}, {0x6, 0x5, 0x3, 0x0, 0x0, 0x4adc90dd}, {0x7, 0x2, 0x8, 0x3, 0x7f, 0x1}, {0x0, 0x9, 0xfffffffe, 0x7, 0x6, 0x20000}, {0x8, 0x1, 0x3, 0x0, 0x401, 0x7}, {0x2, 0x4, 0xffffffff, 0x200, 0xeeb, 0x2}, {0x2, 0x2, 0x1bf, 0x2, 0x9, 0x3}, {0x6, 0x2, 0x1400, 0xca5, 0x81, 0x7}, {0x10000, 0x7fffffff, 0x7, 0xe, 0xffffff80, 0x9}, {0x5, 0x2, 0x4, 0x44, 0x401, 0x8}, {0xfff, 0xf9, 0x3, 0x40, 0x7, 0x5}, {0x7fff, 0x4, 0xe, 0x9635, 0xfffffff9, 0x80000001}, {0x9, 0x1, 0xfffeffff, 0x81, 0x5, 0x1}, {0xfffffff7, 0x5a468abb, 0x6, 0x7, 0x1, 0x24fb}, {0x5, 0x40, 0x8, 0x85, 0x401, 0x2a7e}, {0xa2c8, 0x5, 0x2, 0x9, 0x5, 0x5}, {0x1, 0x2, 0x10000, 0x40, 0x1ff, 0x2}, {0x7ff, 0x3ff, 0x91, 0xd644, 0xffffffff, 0xf9e5}, {0x8, 0xb85f, 0x7, 0x3, 0x0, 0x3}, {0x6, 0xf, 0x0, 0x0, 0x8, 0x36c8}, {0xfffffff7, 0x0, 0x1, 0xaa7, 0x4, 0x9}, {0x8, 0x7, 0x7, 0x9, 0x8}, {0x0, 0x3, 0x5, 0x400, 0x2, 0xffff}, {0x6, 0x9, 0xb3, 0xe50c, 0x3, 0x9}, {0x4, 0x100, 0xa, 0x9, 0xf, 0x800}, {0xfffffff3, 0x9, 0x8001, 0x1, 0x87c, 0x58}, {0x1, 0x1c347bad, 0x8, 0x100, 0xfffffffb, 0xf}, {0x4, 0x3ff, 0x99d, 0x9, 0xed, 0x1}, {0x77d, 0x7, 0x5, 0x4, 0x5, 0x5}, {0xfff, 0x1932, 0x7f, 0xa375, 0x0, 0xffff}, {0x0, 0x1, 0xff, 0x8, 0x7b, 0x6}, {0x0, 0x1ff, 0x0, 0x7fff, 0x9, 0x5}, {0xffffffff, 0x8b, 0x8, 0x6, 0xe, 0x7}, {0x1, 0x10000, 0xdc6, 0xfffff4b6, 0x9, 0x49}, {0x3, 0x7, 0x8b47, 0x4, 0x10000, 0x4}, {0xa, 0x2, 0xcca8, 0x3, 0x7, 0x7}, {0x401, 0x5, 0xc, 0x6, 0x6}, {0x2, 0x0, 0x8, 0x563fee57, 0x2}, {0x7, 0x800, 0x8, 0x8001, 0x7, 0x6}, {0x7d4, 0x0, 0xffffff7f, 0x0, 0x9, 0x5e0a7f53}, {0xa5, 0x7, 0x93e7, 0xffffffff, 0x6}, {0x3517b3a9, 0xe, 0x6, 0x93, 0x6, 0x4}, {0x6, 0xa, 0x4, 0x6, 0x2, 0x5}, {0x6f, 0xe2, 0xff, 0x3, 0xfff, 0x10}, {0x7, 0x4, 0x4, 0x3, 0x6, 0x5}, {0x80, 0x3, 0x2c3206e3, 0xcebb, 0x4, 0x7}, {0x4, 0x9, 0xd4, 0x8, 0x6, 0x3ff}, {0xff, 0x3, 0x3, 0xa, 0x4, 0x5}, {0x5, 0x2f6, 0x7ebb, 0x4, 0x3, 0x7}, {0xb124, 0xc, 0x7, 0x6, 0x800, 0x8}, {0x101, 0x0, 0x7fffffff, 0xe30, 0x1, 0x9}, {0x5c, 0x1ff, 0x5, 0x7, 0x9, 0x2}, {0x9, 0xb64a, 0x2, 0xcc, 0x3}, {0x5, 0x7, 0x0, 0x7ff, 0x3, 0x300}, {0x80, 0x200, 0x7, 0x8, 0x80000001, 0x549f}, {0xffffffff, 0x3, 0x800, 0x895, 0x3, 0x7f}, {0x3941, 0x5, 0xffffff81, 0x80000001, 0x8}, {0x23, 0x0, 0xffff, 0x0, 0x8001, 0x5}, {0x101000, 0xfffffc00, 0x7, 0x38e, 0xca, 0x5}, {0x0, 0x546dc646, 0x1000, 0x3, 0x3, 0x963}, {0x3972, 0x891d, 0x1, 0x713, 0xd, 0x4}, {0x5, 0x55, 0x91, 0x5, 0x2700, 0x400}, {0x7, 0x5, 0x8, 0x7, 0x7, 0x4}, {0x6, 0x7, 0x0, 0x5, 0x6, 0x3}, {0x4, 0x3, 0x7, 0x2, 0x9, 0x100}, {0x4, 0x0, 0x7, 0x6, 0x1, 0x773}, {0xa4000000, 0xfffff18c, 0x10, 0x0, 0x3, 0x9}, {0x2, 0x200007, 0xfffffff7, 0x2, 0xa, 0xfffffffa}], [{0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {}, {0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {}, {0x3}, {0x5}, {0x0, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5}, {0x4}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x1}, {0x3}, {0x0, 0x1}, {}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x3}, {}, {0x1}, {}, {}, {0x5}, {0x2}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x6, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x3}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x3}, {0x5, 0x1}, {0x1}, {0x3}, {0x5}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x84, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4030315f18784}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_KEYS_EX={0x54, 0x5, 0x0, 0x1, [{0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}]}, @TCA_PEDIT_PARMS_EX={0xec8, 0x4, {{{0x5, 0xffffffff, 0x3, 0x7ff, 0xe}, 0x8, 0x5, [{0x0, 0xf3e, 0x7ff, 0xcd1b, 0x4, 0x8000}, {0xb6, 0x2, 0x0, 0x4, 0xfff, 0x10001}, {0xcae, 0x0, 0xffff2854, 0x1, 0x7fff, 0x408d}, {0x3, 0x8, 0x4, 0xe3, 0x6}, {0x7fff, 0x7, 0x5, 0x2b20, 0x7f, 0x7}, {0xd, 0x5, 0x6, 0x10, 0x6, 0x1}, {0x5322, 0x5, 0x3ff, 0x3, 0x0, 0xffffffff}]}, [{0x80, 0x2, 0x10, 0x8, 0x9, 0x8}, {0x9, 0x4, 0x80000000, 0x8000, 0x40d, 0x6}, {0xfffffffd, 0x3, 0x7, 0x7, 0x1000, 0xfffffffc}, {0x5, 0x9, 0x2, 0x2, 0x3, 0x9c}, {0x22, 0x6, 0x6, 0x80, 0x0, 0xfffffffa}, {0x7fffffff, 0x8, 0x7, 0x666, 0x7, 0x2}, {0x2, 0x1, 0x83ad, 0x0, 0x5, 0x2b81f059}, {0x1ff, 0x9, 0x3, 0x9, 0xa8, 0x2}, {0x81, 0x800, 0x5, 0x4, 0x8, 0x4}, {0xfffffffc, 0x1, 0x9, 0x9, 0x2, 0xf12}, {0x5, 0x4, 0xe, 0x7, 0xfff, 0x800}, {0x5, 0x80, 0x5, 0xb2f0, 0x8, 0x1}, {0x5, 0x400, 0x0, 0xd63, 0xb, 0x1}, {0x1, 0x40, 0x81, 0x0, 0x1, 0x9}, {0x800, 0x8, 0xfffffffe, 0x3, 0x9, 0x8}, {0xb6e, 0x4, 0x80}, {0x0, 0x7, 0x800, 0xff, 0x3, 0x4}, {0x7, 0x5, 0x4, 0x2, 0x0, 0xe}, {0x6, 0x7, 0x5, 0xfffff801, 0x9, 0xfffffff7}, {0x1, 0x9a87, 0x1, 0x7, 0x3, 0x9}, {0x6, 0x4, 0x8, 0x1, 0x100}, {0x500, 0x3, 0x3, 0x5, 0x101, 0x101}, {0x6, 0x5, 0x3, 0x2, 0x9, 0x6}, {0x8000, 0x7, 0x9, 0xc9d, 0x0, 0x7}, {0x5, 0x1, 0x45, 0x8, 0x5, 0x38}, {0x3, 0x4, 0x3ff, 0x1, 0x4, 0x4}, {0x1, 0x80000000, 0xffff7fff, 0xc, 0x5, 0x2}, {0x7, 0x80000001, 0x4, 0x1, 0x8, 0x2}, {0x3, 0x5, 0x8, 0x29, 0x62, 0x7}, {0xc, 0x3, 0x6, 0x1, 0x7, 0x3}, {0x5, 0x2, 0x5, 0xf, 0x4, 0x9b}, {0x2e88, 0x7, 0xfffffff7, 0xffff, 0x7fffffff, 0xffff712b}, {0x80, 0x3, 0x1, 0x2c40, 0x1000}, {0x80, 0x8, 0xfffffffa, 0x2, 0x5, 0x2}, {0xfffff8e7, 0x5, 0x9c, 0x0, 0x0, 0x5c7bedcd}, {0x1000, 0x9, 0x2, 0x1000, 0x3}, {0x3, 0xa, 0x0, 0xffffffff, 0x400, 0x2}, {0x1, 0x4, 0x3, 0x3, 0x6, 0xfffffff8}, {0x10001, 0x9, 0x4, 0xfffffffb, 0x4f, 0x9}, {0x2, 0x0, 0x2, 0x9, 0x80, 0x7}, {0x4, 0x800, 0x0, 0x262, 0xffffffff, 0x9}, {0x2, 0x5, 0xffff7082, 0x9, 0x2, 0xd}, {0x4, 0xffffffff, 0xb, 0x4, 0xd364, 0xfffffffe}, {0x9, 0x101, 0x8, 0x0, 0x4a46, 0x8}, {0x1, 0x2e, 0x6, 0x3, 0x81, 0x1}, {0x6, 0x7fffffff, 0x7fff, 0x8, 0x7ff, 0xffff02b3}, {0x9, 0x4, 0x7ff, 0x7, 0x9, 0xac}, {0xfffffffd, 0x101, 0x5, 0x0, 0x5, 0x7fffffff}, {0x8, 0xcbf, 0x40000000, 0x4, 0x2a280000, 0x8}, {0x2, 0x4, 0x8, 0x3, 0x193, 0x6}, {0x100, 0x80, 0xd, 0x8, 0x2c6, 0x9}, {0x5, 0x2, 0x0, 0x4, 0xd0, 0x8dd}, {0xbb, 0xfffffffd, 0xfffffbff, 0x401, 0x0, 0x5}, {0x1000, 0xa7b, 0x2, 0x63, 0x11633a4a}, {0x0, 0x7bd4, 0x9, 0x60c, 0x4, 0x7}, {0x0, 0x7, 0x8, 0x3, 0x4, 0x5}, {0x1ff, 0x6, 0x1, 0x10, 0x9, 0x1}, {0xd, 0x7b64, 0x7ff, 0x3, 0xfffff000, 0x9}, {0x4, 0xffffffff, 0x90cf, 0xfffffff1, 0x1, 0x8}, {0x7fff, 0x80, 0x6, 0x5, 0x7, 0x9}, {0x2400, 0x0, 0x5, 0xd59, 0x1000, 0x10001}, {0x3, 0x6, 0x5, 0x0, 0xff, 0x10001}, {0x2, 0x3, 0x0, 0xf, 0x2, 0x1}, {0x1, 0x7, 0x2, 0xfffffff6, 0x0, 0x6}, {0xfff, 0x3, 0x8, 0xb1, 0x0, 0x3}, {0xe, 0x9, 0x101, 0xfffff001, 0x3, 0xd}, {0x2, 0x2, 0xffffffff, 0x0, 0xfffffeff, 0x5ac8}, {0x20000000, 0xfffffffc, 0xfffffffe, 0x3, 0x2, 0x9}, {0x7, 0xb24, 0x5, 0xfffff545, 0x1, 0xfe}, {0x2, 0x46, 0x5, 0x1c92, 0x4, 0x4}, {0x7, 0x4, 0x0, 0x1, 0x3}, {0x4, 0x541d, 0x9, 0xfffffff8, 0x80000000, 0x4}, {0x2, 0x2, 0x63c, 0x6c, 0x932, 0x6}, {0x1aa5, 0x80000001, 0x80, 0xff, 0xffffffff, 0x9}, {0x6, 0xe4, 0x6, 0x1, 0x7, 0xfffffff8}, {0x7, 0x3, 0x401, 0x3, 0x2, 0x5}, {0x4, 0x1, 0x10000, 0x39f, 0x3, 0x9}, {0x400, 0x3, 0x4, 0x6, 0x4, 0x9}, {0x8000, 0x7fffffff, 0x8, 0x7f, 0x1, 0x2}, {0x7, 0x7, 0x1, 0x3, 0x8000, 0x7}, {0x29a8, 0x4, 0x7fff, 0x1e, 0x0, 0x8000}, {0x7b3, 0x3361dac, 0xba47, 0x80000000, 0x7, 0x5405bb7a}, {0x9, 0x101, 0x7, 0xf, 0xde, 0x4}, {0x5a, 0xc, 0x1, 0x1, 0x0, 0x7fff}, {0x8, 0x7, 0x0, 0x71f, 0x81, 0x30e4}, {0x5, 0xfc, 0x6, 0x4, 0x2, 0x5}, {0x401, 0x8, 0x3ff, 0x3, 0x7d, 0x6}, {0x7, 0xec, 0x6, 0x5, 0x5, 0x9}, {0x80, 0xaa342d5, 0x40, 0x81c5, 0x40, 0x5}, {0x0, 0x9, 0x6, 0x1, 0x3, 0x4}, {0x34b, 0x4, 0x800, 0x634, 0x7, 0x9}, {0x7f, 0x4, 0x8, 0x3ab, 0x2, 0x8}, {0x7, 0x101, 0x6, 0x8, 0x8, 0x7}, {0x5, 0x3fa3d25b, 0x95, 0x6, 0x2, 0x81}, {0x1, 0xc1e, 0xa36, 0x200, 0xfffffffa}, {0x3, 0x6, 0x4, 0x3, 0x1}, {0x7, 0xffffffff, 0x5cc96f18, 0xf5, 0x5, 0xb}, {0x4, 0x8, 0x9, 0x8, 0x2, 0x167}, {0x3, 0x3, 0x9, 0xf2a, 0x8001, 0xb1}, {0x9b49, 0xc14a, 0x1000, 0xfffffff8, 0x9}, {0x9, 0x6, 0x3, 0x10000, 0x80, 0x8}, {0x10, 0x5, 0x85, 0x8, 0x5bb, 0x101}, {0x4, 0x8, 0xfffffff7, 0x8, 0xd59, 0x25aa}, {0x3, 0x10000, 0xfff, 0x7, 0xb2, 0xb28b}, {0x81, 0xfffffab0, 0x10000, 0x1d45, 0x200, 0x6}, {0x40, 0x3, 0x7f, 0x1, 0x3, 0x6}, {0x17, 0xffffffce, 0x2, 0x5, 0x8, 0x945b}, {0xb350, 0x0, 0x80000000, 0xcf, 0x1, 0x10001}, {0x3, 0x1, 0x9, 0x7b32, 0x5, 0xff}, {0xf, 0xe71, 0x7fff, 0x9, 0xffff, 0x4}, {0x800, 0x2, 0x0, 0xfffffffe, 0x7, 0x1299}, {0x8, 0x7, 0x8, 0x6, 0x8, 0x7}, {0x7, 0x4157, 0x3, 0x1, 0x6, 0x4}, {0x5, 0x2, 0xfffffffd, 0x6, 0x9, 0x1}, {0x6, 0xc, 0x1, 0x1, 0x9fa, 0x6f1}, {0x8, 0x0, 0x4, 0x5, 0x9e, 0x4}, {0x0, 0x3, 0x7a, 0x9, 0x8000, 0x5}, {0xc, 0x8, 0x7, 0x4e, 0x8, 0x3c8}, {0x1, 0x1, 0x9, 0x4, 0x1, 0x8}, {0x1, 0x9, 0x5, 0xe1, 0x1, 0x4}, {0x0, 0xa0, 0x101, 0x4, 0x5}, {0xf, 0x400, 0x0, 0x3, 0x3, 0xffffffff}, {0x80000001, 0x55, 0x4, 0x1, 0x401, 0x944}, {0x7ff, 0x9e68, 0x80000001, 0x2, 0x2, 0x4}, {0x0, 0x800, 0x34d, 0x7, 0x401, 0x8000}, {0x80, 0x5, 0x3, 0x1bf, 0x40, 0x6d537a7e}, {0x3, 0x81, 0x7, 0x6, 0x6, 0x5}, {0xffffffff, 0xfff, 0x436, 0x0, 0xfffffffc, 0x8}], [{0x3}, {0x4}, {0x1, 0x1}, {0x1ca95bb51246a14}, {0x3, 0x1}, {0x1}, {0x1}, {0x6}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x5}, {0x5}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x95e9f70074d7a324}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x3}, {0x3, 0x1}, {0x4}, {0x1}, {0x3}, {0x5}, {}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x2}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {}, {0x5}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {}, {}, {0x1}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x5}, {0x3}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2c5501f7f19e6e2e}, {0x1}, {0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x5}, {}, {}, {0x5, 0x1}, {0x4, 0x4fb36c2a6b72e9b2}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x1}, {0x6}, {0x5}, {0x2}, {0x1}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {}, {}, {0x3, 0x1}]}}]}, {0xc3, 0x6, "cdd9ce3c3d7c3df639cf47e3ca479aece8327e6fa0351b86a621c859f98e17f4fd5a2cfe5a780c5447b79c558b906b5e4053736e613e280494ad007960368117176572d9364c2dccfb4f07ebcb85d4d97c33d85ea8fc801242c49fb94955b7442239398c36952902cecdfa1df6fcfaa7ed41bbbb1a448f979e7106c313edcfa730ce2ba1d9a741298dba499f376abc8869652ddd7848e0f3c834ebcc5e18c9effa8d2dfc90041274eca7bfd116adbeceaeb708ecb409f6216318665efb9c19"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_vlan={0xec, 0x20, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xd686, 0x1, 0x1, 0xf, 0x100}, 0x1}}]}, {0xa3, 0x6, "d4cc2bcde1415301225a752a54a74a53f4ebd03fa262b839b6d1275ec892fcd0631351604c15451b95b3af2e58c427c78096a10630d8723985e44a6e5d69a4ef342ea7df140afce4057377016d7bea716a0fa17b11165d6b4c4c548f62336387af16820e795c388f4a661f77cb08dad0dff54ea57006a3ca3792ac0001187902f58b69005a9c89ca0a8e11bd6083bee04c72b1f35617275bbd6a5236cf668e"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_vlan={0x140, 0x15, 0x0, 0x0, {{0x9}, {0x78, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7, 0xffff5089, 0x4, 0x8, 0x372}, 0x1}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4b, 0x81, 0x3, 0x4, 0x519}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xd46}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x3, 0x9, 0x8, 0x100, 0xe0000}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}]}, {0x9d, 0x6, "8c45b92b234ab053cded44c79ef3f5acc0af1a6ccfea5312cf49fe260d5113f6269a6844d250c0a36a9f505294a275d1164610542a95e581f2acab18ed3ab96cc0d98f06c42a1b2b4506cd06a9d90902de686dbb8f5486da6432c370f0de3e8cf5835cd98b8ea482716f94d308c14b45ed359c007e7d8b90c7f3900d2b9853cf25c3d74865f0192c15e3cd26d787c469604f1cad15de89daf5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x6, 0x1}}}}, @m_pedit={0xf74, 0x8, 0x0, 0x0, {{0xa}, {0xefc, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x3, 0x0, 0x0, 0x0, 0x1ec6}, 0x4, 0x3}, [{0x2, 0x21, 0x300, 0x76ff, 0x19, 0xffffffff}, {0x5, 0x2, 0x7, 0x1000, 0x6, 0x7}, {0x8000, 0x2d88, 0x3, 0xff, 0xe, 0xfffffffc}, {0x8, 0x2, 0x9, 0x20000000, 0x9, 0xff}, {0x7ff, 0x7, 0x4, 0xd4, 0x3, 0x8}, {0x18e, 0x6, 0x7, 0xbb, 0x1000, 0x7}, {0xa, 0x5, 0x12ad, 0x6, 0x1, 0x2}, {0x2, 0x0, 0x461c, 0x1, 0x7, 0x214}, {0x2, 0xff, 0x7ff, 0x0, 0x5, 0x1e}, {0x2b13, 0x4, 0x1, 0x3, 0x10000}, {0x6, 0x8a29, 0x1, 0x530, 0xfc000000, 0x6}, {0x1, 0x7fff, 0x92b, 0x7f, 0xffffffff, 0x9}, {0x80000000, 0x5, 0x9, 0x6, 0x8, 0x4}, {0xfce, 0x7, 0x464d, 0x7, 0x3, 0x8}, {0xf151, 0xef7, 0xb60, 0x442b, 0x3}, {0x7, 0x10, 0x7, 0x2, 0xfa5, 0xffffffaf}, {0x4, 0x4eb, 0x9, 0x4, 0x1, 0x800}, {0xf7, 0x9e17, 0x5, 0x1, 0x5, 0x1}, {0x4, 0x2, 0x3ff, 0x8ef, 0x8, 0x9}, {0x3, 0x7, 0x1f8, 0x3, 0x0, 0x4}, {0xb, 0x3, 0x7ff, 0x2, 0xe6, 0x9}, {0x5, 0xfffffffa, 0x2817, 0xfffffffb, 0x14, 0x9}, {0x401, 0x7, 0x4, 0x3, 0x5, 0x3}, {0x6, 0x2, 0x0, 0xfffffffd, 0xfffffe9f, 0x2}, {0x0, 0x4, 0x6, 0x1, 0x5, 0x3}, {0x500, 0x7, 0x2, 0xffffff89, 0x7ff, 0x1}, {0x4, 0x10000, 0x7, 0x8, 0x7ff, 0xffffff23}, {0x8, 0x4, 0x3ff, 0x4, 0x4, 0x7}, {0x7, 0x8, 0xb5, 0x4, 0x8, 0xd}, {0x3, 0x759, 0x40, 0x0, 0xb46, 0xf}, {0xfff, 0xc1, 0x3, 0x100, 0x4e, 0x7}, {0x80000000, 0x80, 0x7, 0x1ff, 0x5, 0x5}, {0x4, 0x466, 0x65, 0x6, 0x3, 0x7}, {0xc80, 0x4, 0x6, 0xef, 0x5, 0x1000}, {0x3, 0x2, 0x0, 0x9, 0x8, 0xcf54}, {0x5, 0x2, 0x2, 0x91b, 0x400, 0x5}, {0xf, 0x4, 0x5, 0x4, 0xfffffff9, 0x6}, {0x5, 0x1, 0x80000000, 0x8001, 0x9, 0x101}, {0x3, 0x6, 0x400, 0x23, 0xb42, 0x8}, {0x4, 0x1, 0x5, 0x1, 0x1, 0x3ff}, {0x2, 0x4, 0xb1, 0x6, 0x3, 0x5}, {0xecd, 0x0, 0xffffffff, 0x5, 0x4, 0x3}, {0x6, 0x3, 0x8ddb, 0x3, 0x6, 0xd7}, {0x3, 0x401, 0x2, 0x7fffffff, 0x700, 0x5}, {0x5, 0x8f9, 0xa, 0x400, 0x5, 0x53}, {0x8001, 0x10001, 0x80000000, 0xe, 0x10000, 0xd}, {0x4, 0x7ff, 0xc7, 0x81, 0x8, 0x10}, {0x2, 0x5, 0x8, 0x5}, {0x9, 0x80, 0xfff, 0x7, 0x2, 0xb}, {0x7, 0xe57, 0x9, 0x1, 0x7ea1, 0xa5dc}, {0x4, 0x2, 0x40, 0x7, 0xffffffff, 0x8}, {0x7fff, 0x30, 0x4, 0xfffff3fb, 0x6, 0x5}, {0x3, 0x4e, 0x9, 0x9, 0x8}, {0xfffffffc, 0x5ae8, 0x1, 0x5, 0x400, 0x39}, {0x6, 0x3, 0x4, 0xc, 0xf, 0x6}, {0x0, 0x8, 0x0, 0x0, 0x1000, 0x9}, {0x7ff, 0xe, 0x5, 0x5803, 0x400, 0x5}, {0x5a1, 0x0, 0x4, 0x5, 0x6, 0x1}, {0xffffff7f, 0x9, 0x0, 0xc6da, 0xfffffffc, 0x4}, {0x8, 0x5, 0x4, 0x5, 0x3, 0x7}, {0xfffffffb, 0xa3, 0x5, 0x81, 0x8000, 0x6}, {0x1000, 0x5, 0x6ea, 0x0, 0x81, 0x13}, {0x7, 0xdb9, 0xa, 0xd, 0x4, 0x3}, {0x5, 0xf, 0x1, 0x1, 0x5, 0xfffffff8}, {0x1, 0x0, 0x3ff, 0x6, 0x100, 0x4}, {0x0, 0x3, 0x6, 0x5, 0x80, 0xffff8000}, {0x5, 0x1, 0x2, 0x81, 0x4, 0x1}, {0x7, 0x9, 0x8000, 0x5, 0xfff}, {0x6, 0x7, 0x1, 0x9, 0x1, 0xd399}, {0xfd, 0xfffffffb, 0x4, 0x8, 0x3, 0x2}, {0x7, 0x4, 0x5, 0x8001, 0x3, 0x7eb0}, {0x10000, 0x2, 0x100, 0x1, 0x7fff, 0x7}, {0x3, 0x200000, 0xbeff, 0x6, 0x9, 0x3}, {0x6, 0xe, 0x7f9, 0x6, 0x1, 0x3}, {0x7, 0x7, 0x53fd4cdf, 0x7, 0x4, 0xa4c}, {0x32, 0x6, 0x0, 0x9, 0x1ff, 0x2}, {0x61, 0x2, 0xe774, 0x5f5, 0xe4, 0x9}, {0x100, 0x8, 0x80, 0x2, 0x3, 0xfab}, {0x4, 0xfffff801, 0x1, 0xb, 0x2, 0x5}, {0xff, 0x81, 0x5, 0xfffffffa, 0x5, 0x4e}, {0x862, 0x9, 0xffffffff, 0x9, 0xffffffff, 0xf5}, {0xe3bc, 0x76803a64, 0x800, 0x5, 0x1, 0x9}, {0xe038, 0x8, 0x5, 0x2, 0x6, 0x7fff}, {0x0, 0xe539, 0x6, 0x6a11, 0x2, 0x8001}, {0x5, 0xc, 0x8000000, 0x401, 0xff, 0x5}, {0x6, 0x137f, 0x8, 0x4, 0x1, 0x9}, {0x0, 0x6, 0xfffffc01, 0x401, 0x10, 0x623}, {0x467b0529, 0x80000000, 0x2, 0x101, 0x401, 0x7ff}, {0xf, 0x1000, 0x5, 0x2, 0x8, 0x3}, {0x8, 0x6d11d27, 0x5, 0x949, 0xffffffff, 0x9}, {0x8, 0x10, 0x9, 0x10001, 0x8, 0x618}, {0x7fff, 0x3, 0x10000, 0xe, 0x9, 0xff}, {0xfd, 0x6, 0x0, 0x5, 0x7f, 0x1}, {0x8000, 0xb6, 0x4, 0x4, 0x7, 0x9}, {0x5, 0x3, 0xe751, 0x9, 0x17, 0xb61}, {0x4, 0x3, 0x7, 0x5, 0x800, 0x4}, {0x0, 0xb0b, 0x1, 0x1ff, 0x4, 0xf6}, {0xfffffffa, 0x1, 0x8, 0x1, 0x9, 0xfffff001}, {0x7, 0x8, 0x6, 0x0, 0x3, 0x4}, {0x6, 0xad, 0xfffffff8, 0x9, 0xd, 0x2b}, {0xffffffff, 0xffffffff, 0x7, 0x6827, 0x5, 0x8000}, {0x7fffffff, 0x2, 0x10e, 0x3, 0x86, 0x5}, {0x400, 0x9, 0x7, 0x0, 0x8, 0xb}, {0x10001, 0x5, 0x800, 0x8, 0x0, 0x5}, {0xcf85, 0x0, 0x0, 0x6, 0x82c0, 0x3}, {0x6c78, 0x1000, 0x4, 0x1000, 0x7, 0x9}, {0x4, 0x4, 0x70b, 0x3, 0x7fff, 0x9}, {0x2, 0x2, 0x4, 0x41c, 0x2, 0x7}, {0xfffffffa, 0x7, 0x8, 0x8, 0x3, 0xf}, {0xfa, 0xb, 0x7cc2, 0xff, 0x5, 0xf}, {0xc, 0x6, 0x3, 0x8, 0xffffffff, 0x2}, {0x9, 0x4, 0xfffffff7, 0x827, 0x62, 0x3ff}, {0x2, 0xb, 0x5b000000, 0x0, 0x9, 0x3}, {0x120, 0xfffffffd, 0xb, 0xffffe67f}, {0x8, 0x101, 0x7fffffff, 0xfffffffe, 0x0, 0x4}, {0x4, 0x5, 0x3f3, 0x0, 0x1, 0x7decc6b7}, {0x2f, 0x400, 0x3, 0x9, 0x101, 0x3}, {0x1ff, 0x282d, 0x40, 0x8, 0x3, 0x2}, {0x2, 0x7f, 0x8, 0xa799, 0x2, 0xff}, {0x0, 0x8, 0x2, 0xa, 0xfffffffc, 0x9}, {0xfffffff7, 0x5, 0x7, 0x3, 0xb, 0x8}, {0x4, 0xe1, 0x80, 0x1, 0x3, 0x1}, {0x81, 0x8, 0x8000, 0xc93, 0x6f7, 0x8}, {0x0, 0xff, 0x7ff, 0xc, 0x5, 0x10001}, {0xf, 0x10000, 0x2, 0x0, 0x5, 0x6}, {0x10000, 0x7, 0x1000, 0xf24, 0x8, 0xa48}, {0x1, 0xe, 0x10000, 0xe16, 0x2, 0x9}, {0x6, 0x0, 0x6, 0x21d, 0x7, 0xa}], [{0x4, 0x1}, {0x5}, {0x3}, {}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x1}, {0x5}, {0x3}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x3}, {0x5, 0x8930b70370f072b1}, {0x2, 0x1}, {0x0, 0x1}, {0x6, 0x80e7ea6417721761}, {0x4}, {0x0, 0x1}, {0x1}, {0x2}, {0x2, 0x1}, {0x2}, {}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x17cbd6d3e9b0bc1a}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x5}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x2, 0xf238fc572f37104d}, {0x5}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x5}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {}, {0x3}, {0x1, 0xa5208f660f1a92ad}, {0x45d31fbed5d179cd, 0x1}, {}, {0x3}, {0x2}, {0x2, 0x1}, {0x2}, {0x1}, {0x5}, {}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0xde403add4bff709a, 0x1}, {0x1}, {0x3, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0xd8, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x4f, 0x6, "83025303964159a47ee487d622de5d6d3d468f1aaed047e9620277c90d3b665b6d7525425bea86a3ad5be3bb321c4bc4f335d0eebe10e678fba5d260c6cbe137a4302884d22d544645c4f0"}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x2}}]}, 0x408c}}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000007c0)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x303}, "a95972fc5ec50719", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r0, 0x1) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) r9 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pread64(r9, &(0x7f0000000880)=""/4143, 0xfffffffffffffd94, 0x1000) 58.790006616s ago: executing program 1 (id=131): syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_CLASS_OF_DEV={{0xf4}, 0xad}}}, 0x7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) fcntl$addseals(r2, 0x409, 0x765c8c0db5b2d26) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_FPU(r3, 0x81a0ae8c, &(0x7f00000003c0)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000a2da2b008c80c92f", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd700000400000130000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b00070000000600110000000000"], 0x4c}}, 0x4040000) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) r8 = memfd_secret(0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={0xffffffffffffffff, r8, 0x2e, 0x4608, @void}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000001c0)) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x30, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @random=0x9, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x4, 0x24}}}, 0x40) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @void, @void}, 0x1e) 58.076156444s ago: executing program 1 (id=135): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b189a, 0x0) r0 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f0000000140)=@attr_other={0x0, 0xe, 0x2, &(0x7f0000000080)=0x1}) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0/file0/file0\x00', 0x0, 0x18e5811, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x84000, 0x0) 58.021917621s ago: executing program 1 (id=137): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$sg(&(0x7f00000005c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="ea00000009000000a187", @ANYRES16, @ANYBLOB="2b1008a22f29"]) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a000100000000000000000002000001001f00000038000008000100ac1414"], 0x24}}, 0x40) socket$igmp6(0xa, 0x3, 0x2) 57.717888958s ago: executing program 1 (id=139): r0 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x81, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x40) (async) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x40) r1 = accept4$unix(r0, &(0x7f0000000080), &(0x7f0000000100)=0x6e, 0xc0800) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0xffffffffffffffff, 0x2}, 0xc) (async) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0xffffffffffffffff, 0x2}, 0xc) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000200)={{r2}, "bf9327e580f22b0dc32a43ef7a2a33560ef810e329798930e90982827fb970943ac25e19ba414e74aac73bfdef0cc24a4f3144870ef3cea8fd63b49282816794df82c8dc8e010f801651c335844c4765bd2028aa41882bb18a4aba42aba3fdc99880aca9f45036a57d1f4cfa05aa88f6c45c1471ba21bec6364ac4f399592e7a0fdc8af0c2bdb47bbfc3ea7b14fd648d657fbf1fb85ca6d83efb8e9cc524567d34e061b173f7df98735ba549bc814474d04d18d039d3a90e28b9b81c5aa72301244a92c161786b414ebaa61d218fed36f47f1da8eae416cbdce0669d7c1846ed07f7ee3bafe5d075166a557e89140553a6a294f13a1af5c98374ceeae62931fcca506902670127614b279352b0534d850fa7207f6168967602ce80488bf37baecc36841c3d1e7279761b03c3eee0f627b04325d531195f6464c32138a1647fa8235c268a106ab4fa9033b9cb5430f484fb4f10b2269b08fd593e104cbedaae147edb4dfdd1263bc53333c7838878648fc0f43189cd86184c384ba52475e5b900b8ebbc23c88bffb581f4e875699330367810e1791a66ce2001ccab7d8cd0fa0b113adf8f3388fe49fa2a66451d7bee47353de9c8a4b6cd1c2d0175dd6fb3a664f9b8af33019c4d038eb33a4a558af399c1d61f76d2d0a9cb83905486466707718f1318f9fd2af9aec1ffc0cf7731e3e324a228b5ffd5ce808afce54c8a23a251a5ac950f074552ed0ee4e54815aa7042d45d87c505207e3d3d07bcfcb7509a315beebe4869c8fde7875e61fea8f410d0b09823d0093f533bb6a7d48b0fc86f3ea6409bf57cda1f72c14a3eaa5f094ae4c5221253f12048976c513e0cc1aacfb417233490a552a9cc279c2d8b76f130bc0c8fbf76765a5624ceb5b6473cf80c9f511e0eeccb1bfbc3147349943037300932fc72ca169634fd1836866bf6d02810b841ec6f7a2ae6e471c5012fc9d336b72b39e421175e398994b46d12e91a4587c8e1e7de18db5c4b3c79fc7a87f8a96bc00e296954c063844e52a7d3a4830403754cc7e234874b698e6e0b6984abf46df04e32d155a40337a9509b86f4cdaf17c385549bacdf6e42dc2f45a1cece98739ebd7ccfe2b1537ba6c7013fef39ab948d661ee83d7062ccf7e424de8ba4868fb17896a82c8093d9c8eefbdd17eee117c89fd4d3b5d9b56aa50c255d9f141b16e13b32d61071a3a2e78f3425d3900614352e247955188194be00a3ee5f0f2fde5c38a396f93bc8ab9aa8e4b97ff1a0fcf391acfd95e9d3cd3fd278a5283220bce276f43f052a805f8636aceaf9b0e0546559878235cb90c530d101db9beb54235fc9f3120a83273f238111c00978e7b4927937b54752246cbd5c38f58a4da9057bfa6bb46531289497e29e716041f861567c31f1f55475e57937c71067d4ba7c1357c5e14802a74d3539ec98397eb705a7cfdd655954eefd621096b801e215e554ad4df9527afc9b43520db5557533922b4ef17e6c30b5e12fe11256c9e2d26d6aadddf1b9e73be65d4c6a6b45931516a2c97294d3262e55d988be730ffad205baf054d3a9845a3f668a59af814165c1c2764a3a1b625eb287ccd84acf43d3da72bcf42a9ad356bf9b7afc5b3efa408bcc1b800d5ef622500afca68dad90c150951662b53ce9248a74135d876d9771c6fd7e6c7019259c41aac5e00bf44494a67678ad78a37d62fd166fddc2856ba06c4694599865b34f4fdc500d87b13934f44452f0ae109e77f32174a374ee97edfb2389e636d060f53d08e177cfa9904a2b5dc94748882a528e1b00a2bee18fe573beffc6400b2fe718123768b56c7035e33f8cf0f5c492dd82b1d0227fd3476addc63b8c66d4aec6381540cc95adfee0f3a055b8463ecfb40334d6b5b6d9cee648b9318f11780550ca5569b5ee1739000564d59bc738d65ed8a5750fb240be12968b0e8c01b217c6366fab2c277e1ab5047f3f462ceb6fde0579880cc7837bd7604191a5329bfca04da3c05988ffc589f10463c4ad8df2cfea3e05dabe7c8fa789ef69ea178ef154ca979971fc9c89ae520230547ce2bdc884d0deeab49bfb58c9d49bf10291251220feba5d3dd1b549fca4e92a53d42d5fe9f7c00a8d7951362886f04f8697e36cb6c59a19cba70f54cf7217c9ec6050c07c73b4cb707f89e4b084e54b7c1319ef835f1ddb3ea936b2443cb112d1c3336e0a9a24f7722e5424c85c77423848e8ff9bdee9c5adcd7d4ce6d732eff198fd435e1bb3b12dd6a6603770d246ad9ab3b42e3bfbe71c8b944bf99f7f13d714205285034101ef6cce3fa8d5423bf41c27d3c0e83b2e119555a36643d907de7caeb20a887c60829db1ace05371bdb25ca1510de78cded6aa55e9420d1e825f19d7e3fd9a0d2c9e1b14dc2cbb76f797d3bb48a873fc78e9b94e95627a443d939ce931ba55f048f33e024b70c84c6a70df416f4f51a829baf76fd5ca86c9c68bd6e7e4ad9bfb169c381240151824f68949f67e69e69e4db81d3ba2cc3ee8a68c6fbc6ee0ca2222866318d6514ddf88e311fd916a4154c0c0b4132f5b28315deffa761606f23ddf60a949a2f9d8964a778513824a5aa8aca9ac6349691b4c2652d7bfdb210f825eb445ba78706fbe69c0528d3a4b3f92825bbd21d1bd00b71acfd7ed41cf2eddbac8ac700709f965c01f06fb3865bd6cf76e5fa2b17f34c637ff87faa985900bbb0158ff336aa2cf40dc8d43e7c84a55110e807da44d350bb7fb8211a485e49d42b8a4909da3749c30fb6469a1386750fb43d81c1a4001563e306e3194ed1e82afb9a7cbe420710646efaa631fa0668118c70ef307caaf0f7856dfbe47e9d85e70ac36cfcf165c2cfb61887635876df4831562c1034478dcd1847b19e1bc6fc05dc947c5c591362800347dc386057a3c1fbe10116ad882a25c6aa1d98262492c085bbb0ddd04f71934ef140c9614c14f7ab115f24647e303e91ea5e4fd7a0b653525fbe38bcf596ad2bd354375a0bb284e06c3998aea8839aaca10120aae000b0202e4a2d156a34b332ee8c770a1ec091b64fe5eb543bb0c3784527505d28ab4df25c2846b0ef777ff7fe88795886f56b9887ea4e50b9d92c1d8dad0a1027bfc82e8b4e0b4141f7cb952af363fe081ccbace4cef8a3d228774441bb7efa579683f681218c4ef833c4b5a5742f17d294c93450f4b3228fa79e4c29e5d6da81dc704b578bad45a3b6cc2d5f730cc2e75b7341b022012dd35de8b15396b74cf9599939e293eeebeba7073a53fc4c254b9e8a91718dc283fd573bb9d1eaf7edbf5c3305ec15b823324ec123bab1029d40b73e700cb90d863cebea50ad6f9ba3210d7ecb3c356075e6cd98c3215234ee318591d53609dafcab8fff6427aa32440c3deafb21e9aead8c9101dbbc8a27d4b02c0cbb71514fefa88013b2ea4ffce63decc6ac4aea1588ed90584bc97d5c0607b365d8b880bed865b1dc9d63fc4a9a40ace0afe43f71555c907521365141be094fe574009859eb4cc3a4b913ff1066dbd3b94663e53f983a3e3a77b3f531cac1270d79f0bc498f9b6bb3cd25401c78288e44deb4443b6d4f83a5671068525b8fe2fd584331d070965f36844e69cb6b1ccb870d8aba0c3867a65d9ef7fdba3db2091dd6cba437fef14f8a0e2d6d4b2e0d769a251e2fdfd99451b6366003d4fe45d0e8a3e52c82631439d43f1faf2f902327c1f1ed09aa73490c9202d810c81272793ec4e74c79b803a3e5d084bf7e0bea376236418262fe6f2b934740500a99e7ce39cbfc389726c7a257bbe954b04c7780b1c87c5f319f614bcf0503b3b148fb2597e80b7f4e93b91c32429a19550cbc5b05b596e14db47f12edbff1ab46564cd59d4ce97cde19d8f73d162266fc31cec97003ce3dbdb410000683458b092f277d89f93c5f497b48fda67f9f14426a661f196992477d28f70b53b255ae98a37d8426dcc902a4e5366ba123042a788a1b480178965e73227861e45177a257c377d8686bdc836dde60eefaaf4a66e801d4460f9ef847f33022c5f53f824c851db2c6aaeb29d1526f7132ade02c46de66cac61c402f92622619e05723a22c7216fb96697223ee277dc131bdf5998f5dc16c1ba31168c628555f0aee39dcc0d4c9aa74d8d3b414065045aae56522384dc9e61ad415d1a45bd96598c6127cebf1f103a600be7189d57e7b4bac6c749f56e24679f0c42d6be5356151df63a4df0786924e203bcf61ede9346e87055a33ef528437c0bf36882a6abaeac2f9a04a4bbc5dcb74f1651e2d663423c2e0d33261371bfe19d4e351e8271ba1496ffcfb1a4a1ddbe7c1fa412fd2dad398c7ae9038e9405e341b0c3a580185ab8cd78455d881c9f0cc1210f049cfe61d2af85088092397312edc411c1b980c9b56ae948c31b928e1bff05b31c78e9be6932a7faec4bdac07956f3f553e91e32699ce587e925e49c82e6f72000308855064958d7d878ed272a3f43c20169f242ec0b5e343cd1fca79f26ec5a0b529a4e9191ba717eed2303499f70393fdaaa20bd155690736839adebeb9425407700349c7e5c1ac8c1528c5a7edb81bfd2e7b0d5e748d3ca1d95b753ed8109723f8e94722541322eae1cdf47471ce22504d14d7b5c76564cdc720cdf3bcf7cdaef20d12a6ac4e5096c34d0f83f14096ad8eb20338c6a4848b6c6cb3e6254421f591334df3d38951f7d6a523818ea338059ef5c8838a62f4e685beed9b2d97ea5430f8c2c1bf3e8087a74b49f49a4fceb469dffca0608359b730a1213a6b3b8a876495b31af5c2e6f6a7c8324b5247c86ace89ff98e8c918423241c2d45e61d44a650d8449ade8c108ada65b30b4bdf5228b6a69a1ec47e5310f574ade70879a0e777e1ece1b1ccb559155ca18fab6b8e0e7ffaa28ab582c3591a8eb1fb3c855f37edd5ffc0d9c477e0159b71eee4ba48a21505a6d7a1233c387bb9247cbdbef99ce502902e7f3db0e0de50e96a7ae48fc7303d7810f14f7ec856696c83895d482a5e80a3ce80fa32eb3e1f4d3d56153a7149ad335139830519a695dcdf57b260518da5e7fad55fb76c1d65d780391396756e302a1a8b280d88a14c56f50e081114a0d7ccdedce52477abd7f9cd1a5b2450f1bcbbc61f98a4ce562c03b69a86d24f89d92dd73a2e490d33ebb061dbd13b19305df2317f0dd310473b004359367ab459222b7478901f1929075dde098b9e5c0108a6bddf3c152c2ae726d41b507b51898956202745118d83076172f8ca3321b02c4bd62a75e748e7315ca643c8e478cde92d4984a2ce9d1a93e4a4f1906f7e695771e447c3ea5b7c9781690ee5ebd0f71c4effae799b295fa5f9673fbe27ebdfd20eee63bc0eac887e76d6c486372a16c1ce32826f3da2cc9f09dcbcc837f24b1c95fa5ef3636c98290be263968c3aa6e62c8f6c024557a60114b76117844802628c2fcea07c4c247053598aab52250ae1556c4cb9d72968e99372d8340de2611b34433528c297838b12c84af54b45221c2780ac2904d99e4e6b18bf045fbd6fbc65982082e40fd8714e05a4fb2a4e4e109b2ac69e8b3d638053ea76da8f6a10e25bd2a4c6f87a0703b9375caeceaee82d239aa5e8b68ae0ca30cbd106961950548f5e55c2b91ba097ad142ba0407d7ce2dca80599df64cb0ce68123c974cc17c678bada08c6f2ba48d9cac23537bf57aef14f71574ec5c12fa3cd48600ea277923a127d0289919e0c8c01e1dfa69fcdccb4bfbb19162409290d22425294b625b84c84b545c957307d9b46621b0025c84bdc6fbfd6d37807"}) r3 = openat$bsg(0xffffff9c, &(0x7f0000001200)='/dev/bsg/0:0:0:0\x00', 0x204440, 0x0) close_range(r0, r3, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r3, 0x5382, &(0x7f0000001240)) r4 = syz_open_procfs(0x0, &(0x7f0000001280)='numa_maps\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x4, 0x42, &(0x7f00000012c0)={{0x12, 0x1, 0x310, 0x3f, 0xb7, 0x9d, 0x37d05367249318d1, 0xb05, 0x170c, 0xea3b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x30, 0x1, 0x80, 0x57, 0x40, 0xfb, [{{0x9, 0x4, 0x43, 0x9, 0x0, 0x7e, 0xce, 0xef, 0x6, [@uac_as={[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x4, 0x3, 0xc, 0x8, "80ca52a45520f27e"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xfff, 0x5, 0x8, "b5d8aa269f"}]}]}}]}}]}}, &(0x7f0000001640)={0xa, &(0x7f0000001340)={0xa, 0x6, 0x310, 0xda, 0xf0, 0x0, 0xff, 0x8}, 0x138, &(0x7f0000001380)={0x5, 0xf, 0x138, 0x6, [@ssp_cap={0x1c, 0x10, 0xa, 0x7f, 0x4, 0x9, 0xf00, 0x3, [0xff00, 0x0, 0xf, 0x60c0]}, @generic={0x22, 0x10, 0x3, "32bd909d47933c5980f5c87c2b09d913e49f5374448a4431b474b7f96d4ecd"}, @generic={0xd3, 0x10, 0x3, "f90048a8a0d4ac2ac1b32cff6abe0d7b1fe5da634909e9ac823290da4f68584fef8585da73241472c8097c326b607a7ad4e576e02afd90161d2c4e96006b4f4b7620f65f7a60c12e65c91ac9dec621dc9124a06c3723545b22fc40cfb162c4dc58164c4d72aea85e55559c8410b409817699d9fa41150da7f2b6c61946078eb14a16dfb7427429f3b34f8391250f7a65eb9812b942126542dcb3d5c5b4dd02ecbb2c082410a92fa44614aa250c927e39a8c1a87714072c0a3be8f31a5ff3e228180cddd9ed759e2cc5e0e5c20d90f118"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x98, 0xf9, 0x1, 0x2, 0xda}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "694290b669ba81519ecb69e31344e52d"}]}, 0x2, [{0xda, &(0x7f00000014c0)=@string={0xda, 0x3, "7c19dcb642b250d8380dfd5939ed98839d0a1ab42a53a8eb8eb9b4eae0fcf3045bcec0224d954797a6eec2fd6c1ca14262589165833afc6ef66cce55352b5d5e727a1692f7cea79f3074b9764bf22952b0e291cf8ae5c760259ec51b94930d243d74235850dc6ed7f5a93382ab9decad226e9fc71d54aa4e0876496b7381cea8f6e6c72ac387e20490e57a1e5a2fcb5c6f4fc94ac3a706791ad4d0801785baa7f4fdb1809cd0fa10e07e6ded4d037780223ba6f85a7b9f91992de226640956d7fbdd6fb653a83646544558ee853e152800f91bdb8472757f"}}, {0x4b, &(0x7f00000015c0)=@string={0x4b, 0x3, "5af858fede79702676d7299e8d082d03cf4dde6fddf59c0238204dbd49ccbc4561dded9e653db4eef6b9e4de4faa1525889b6950cc2965296988d85569cc8ba6a634e755376f24e6e8"}}]}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000016c0)={0x4, &(0x7f0000001680)=[{0x9, 0x3, 0xfd}, {0x1, 0x7, 0x9}, {0x5, 0x80, 0xb, 0x401}, {0x5, 0x7, 0x6, 0x5}]}) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001740), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000001780)={'wpan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000001780)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000017c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r5, &(0x7f0000001880)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x34, r7, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20000802) syz_genetlink_get_family_id$nl802154(&(0x7f0000001900), r5) (async) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001900), r5) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r5, &(0x7f0000001a40)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001940)={0x90, r10, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4a}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x6}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xdd}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x40080}, 0x4) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000001a80)={0x5, 0x8, 0x1}) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000001ac0)={0x26, 0xfffffffb, 0xfffffffb, 0x3ebc, 0x12, "25c712e3403605d7072324a88b7585b6748453"}) (async) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000001ac0)={0x26, 0xfffffffb, 0xfffffffb, 0x3ebc, 0x12, "25c712e3403605d7072324a88b7585b6748453"}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000001b80)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000001b40)={0xffffffffffffffff}, 0x7eab5ec741d28c24, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000001bc0)={0x12, 0x10, 0xfa00, {&(0x7f0000001b00), r11, r0}}, 0x18) openat$nmem0(0xffffff9c, &(0x7f0000001c00), 0x800, 0x0) (async) r12 = openat$nmem0(0xffffff9c, &(0x7f0000001c00), 0x800, 0x0) getsockopt$MRT6(r12, 0x29, 0xce, &(0x7f0000001c40), &(0x7f0000001c80)=0x4) (async) getsockopt$MRT6(r12, 0x29, 0xce, &(0x7f0000001c40), &(0x7f0000001c80)=0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000001d00)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000001cc0), 0x106, 0x6}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000001d00)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000001cc0)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r12, &(0x7f0000001d40)={0x6, 0x118, 0xfa00, {{0x29d, 0x6fdb, "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", 0x4, 0xfd, 0x40, 0x6, 0x1, 0x1, 0x9f}, r13}}, 0x120) (async) write$RDMA_USER_CM_CMD_CONNECT(r12, &(0x7f0000001d40)={0x6, 0x118, 0xfa00, {{0x29d, 0x6fdb, "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", 0x4, 0xfd, 0x40, 0x6, 0x1, 0x1, 0x9f}, r13}}, 0x120) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000001ec0)={'erspan0\x00', &(0x7f0000001e80)={'syztnl0\x00', 0x0, 0x7830, 0x40, 0x1, 0x1ff, {{0x7, 0x4, 0x3, 0x23, 0x1c, 0x64, 0x0, 0x3, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp={0x44, 0x8, 0x71, 0x0, 0xd, [0x7]}]}}}}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001f00)={0x1b, 0x0, 0x0, 0xfffffff9, 0x0, r4, 0x4c3f, '\x00', r14, r4, 0x2, 0x4, 0x1}, 0x50) 57.603180625s ago: executing program 33 (id=139): r0 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x81, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x40) (async) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x40) r1 = accept4$unix(r0, &(0x7f0000000080), &(0x7f0000000100)=0x6e, 0xc0800) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0xffffffffffffffff, 0x2}, 0xc) (async) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0xffffffffffffffff, 0x2}, 0xc) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000200)={{r2}, "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"}) r3 = openat$bsg(0xffffff9c, &(0x7f0000001200)='/dev/bsg/0:0:0:0\x00', 0x204440, 0x0) close_range(r0, r3, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r3, 0x5382, &(0x7f0000001240)) r4 = syz_open_procfs(0x0, &(0x7f0000001280)='numa_maps\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x4, 0x42, &(0x7f00000012c0)={{0x12, 0x1, 0x310, 0x3f, 0xb7, 0x9d, 0x37d05367249318d1, 0xb05, 0x170c, 0xea3b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x30, 0x1, 0x80, 0x57, 0x40, 0xfb, [{{0x9, 0x4, 0x43, 0x9, 0x0, 0x7e, 0xce, 0xef, 0x6, [@uac_as={[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x4, 0x3, 0xc, 0x8, "80ca52a45520f27e"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xfff, 0x5, 0x8, "b5d8aa269f"}]}]}}]}}]}}, &(0x7f0000001640)={0xa, &(0x7f0000001340)={0xa, 0x6, 0x310, 0xda, 0xf0, 0x0, 0xff, 0x8}, 0x138, &(0x7f0000001380)={0x5, 0xf, 0x138, 0x6, [@ssp_cap={0x1c, 0x10, 0xa, 0x7f, 0x4, 0x9, 0xf00, 0x3, [0xff00, 0x0, 0xf, 0x60c0]}, @generic={0x22, 0x10, 0x3, "32bd909d47933c5980f5c87c2b09d913e49f5374448a4431b474b7f96d4ecd"}, @generic={0xd3, 0x10, 0x3, "f90048a8a0d4ac2ac1b32cff6abe0d7b1fe5da634909e9ac823290da4f68584fef8585da73241472c8097c326b607a7ad4e576e02afd90161d2c4e96006b4f4b7620f65f7a60c12e65c91ac9dec621dc9124a06c3723545b22fc40cfb162c4dc58164c4d72aea85e55559c8410b409817699d9fa41150da7f2b6c61946078eb14a16dfb7427429f3b34f8391250f7a65eb9812b942126542dcb3d5c5b4dd02ecbb2c082410a92fa44614aa250c927e39a8c1a87714072c0a3be8f31a5ff3e228180cddd9ed759e2cc5e0e5c20d90f118"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x98, 0xf9, 0x1, 0x2, 0xda}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "694290b669ba81519ecb69e31344e52d"}]}, 0x2, [{0xda, &(0x7f00000014c0)=@string={0xda, 0x3, "7c19dcb642b250d8380dfd5939ed98839d0a1ab42a53a8eb8eb9b4eae0fcf3045bcec0224d954797a6eec2fd6c1ca14262589165833afc6ef66cce55352b5d5e727a1692f7cea79f3074b9764bf22952b0e291cf8ae5c760259ec51b94930d243d74235850dc6ed7f5a93382ab9decad226e9fc71d54aa4e0876496b7381cea8f6e6c72ac387e20490e57a1e5a2fcb5c6f4fc94ac3a706791ad4d0801785baa7f4fdb1809cd0fa10e07e6ded4d037780223ba6f85a7b9f91992de226640956d7fbdd6fb653a83646544558ee853e152800f91bdb8472757f"}}, {0x4b, &(0x7f00000015c0)=@string={0x4b, 0x3, "5af858fede79702676d7299e8d082d03cf4dde6fddf59c0238204dbd49ccbc4561dded9e653db4eef6b9e4de4faa1525889b6950cc2965296988d85569cc8ba6a634e755376f24e6e8"}}]}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000016c0)={0x4, &(0x7f0000001680)=[{0x9, 0x3, 0xfd}, {0x1, 0x7, 0x9}, {0x5, 0x80, 0xb, 0x401}, {0x5, 0x7, 0x6, 0x5}]}) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001740), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000001780)={'wpan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000001780)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000017c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r5, &(0x7f0000001880)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x34, r7, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20000802) syz_genetlink_get_family_id$nl802154(&(0x7f0000001900), r5) (async) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001900), r5) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r5, &(0x7f0000001a40)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001940)={0x90, r10, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4a}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x6}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xdd}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x40080}, 0x4) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000001a80)={0x5, 0x8, 0x1}) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000001ac0)={0x26, 0xfffffffb, 0xfffffffb, 0x3ebc, 0x12, "25c712e3403605d7072324a88b7585b6748453"}) (async) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000001ac0)={0x26, 0xfffffffb, 0xfffffffb, 0x3ebc, 0x12, "25c712e3403605d7072324a88b7585b6748453"}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000001b80)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000001b40)={0xffffffffffffffff}, 0x7eab5ec741d28c24, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000001bc0)={0x12, 0x10, 0xfa00, {&(0x7f0000001b00), r11, r0}}, 0x18) openat$nmem0(0xffffff9c, &(0x7f0000001c00), 0x800, 0x0) (async) r12 = openat$nmem0(0xffffff9c, &(0x7f0000001c00), 0x800, 0x0) getsockopt$MRT6(r12, 0x29, 0xce, &(0x7f0000001c40), &(0x7f0000001c80)=0x4) (async) getsockopt$MRT6(r12, 0x29, 0xce, &(0x7f0000001c40), &(0x7f0000001c80)=0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000001d00)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000001cc0), 0x106, 0x6}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000001d00)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000001cc0)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r12, &(0x7f0000001d40)={0x6, 0x118, 0xfa00, {{0x29d, 0x6fdb, "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", 0x4, 0xfd, 0x40, 0x6, 0x1, 0x1, 0x9f}, r13}}, 0x120) (async) write$RDMA_USER_CM_CMD_CONNECT(r12, &(0x7f0000001d40)={0x6, 0x118, 0xfa00, {{0x29d, 0x6fdb, "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", 0x4, 0xfd, 0x40, 0x6, 0x1, 0x1, 0x9f}, r13}}, 0x120) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000001ec0)={'erspan0\x00', &(0x7f0000001e80)={'syztnl0\x00', 0x0, 0x7830, 0x40, 0x1, 0x1ff, {{0x7, 0x4, 0x3, 0x23, 0x1c, 0x64, 0x0, 0x3, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp={0x44, 0x8, 0x71, 0x0, 0xd, [0x7]}]}}}}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001f00)={0x1b, 0x0, 0x0, 0xfffffff9, 0x0, r4, 0x4c3f, '\x00', r14, r4, 0x2, 0x4, 0x1}, 0x50) 6.208716663s ago: executing program 0 (id=417): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000, 0x4000}}], 0xf00, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000000)=0x400000d2, 0x4) shutdown(r1, 0x0) 6.129322374s ago: executing program 0 (id=420): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="24000000760009ee"], 0x24}, 0x1, 0x5502000000000000, 0x0, 0x4000000}, 0x0) socket$rds(0x15, 0x5, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="221dee05c88ec96f29b12119267fa508"], 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000880)={0x80, r2, 0x1, 0x400000, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x4e, 0x1, '\x03\xdf\xe4\xdd\x9en\xfa\x9er\xe4\x06^\x1d\xd0\xabL?\x17V\x84\x92\xfa\x01\x92%\xf4\xf5W$\xdb\xd9\xd7&H\x80\xef|\xefM\xa0\x8at\xe9G\xa3\x1c\xe6u\x0f\x9a\x05\xe4K\xd9]zn\xda\b;\xb4\x0e\xa3\xd6>\f\x00\x00\xdd\xd4\xa0\xc6\xf5\xe4'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x4084c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0xffffffff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0xe8, 0x4c, 0x1a, 0x0, 0x73, 0x218, 0x258, 0x258, 0x218, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0x0, 0x0, 0x0, 0xff000000], [0x0, 0xffffff00], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x88, 0x0, 0x0, 0x1e}, 0x0, 0xc8, 0xe8, 0x0, {}, [@common=@hl={{0x24}, {0x0, 0x1}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xc8, 0x130, 0x0, {}, [@common=@icmp6={{0x24}, {0x0, "e1f6"}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x0, 0x6, 0x5, 'syz1\x00', 'syz1\x00', {0x72b3}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x33c) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) r4 = socket$can_raw(0x1d, 0x3, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGSND(r5, 0x8040451a, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = fcntl$getown(r4, 0x9) ptrace$peek(0x2, r7, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000000340)=0x0) timer_settime(r9, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) 4.669228449s ago: executing program 2 (id=428): r0 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x3) 4.668606872s ago: executing program 2 (id=430): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1b, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x5}, 0x18) io_uring_setup(0x7a4e, &(0x7f0000000580)={0x0, 0x838e, 0x8000, 0x600002, 0x38f}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x6b, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x2}, 0x94) syz_io_uring_setup(0x110, &(0x7f0000000380)={0x0, 0xfffffff8, 0x0, 0x2}, &(0x7f00000007c0), &(0x7f0000000800)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 3.277390554s ago: executing program 4 (id=434): r0 = socket$inet6_udp(0xa, 0x2, 0x0) listen(r0, 0x5) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd8, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xc4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000240)={@empty, 0x17, r1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000700)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000300)={0x3b0, r3, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xab5, 0x1b}}}}, [@NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x5}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_TX_RATES={0x184, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x1, 0x4}, {0x7, 0x5}, {0x5, 0x7}, {0x2, 0x4}, {0x0, 0xa}, {0x3, 0x8}, {0x1, 0x6}, {0x0, 0x3}, {0x3, 0x1}, {0x4, 0x7}, {0x0, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {}, {0x3, 0x5}, {0x0, 0xa}, {0x6, 0x9}, {0x0, 0xa}, {0x1, 0x1}, {0x1, 0x6}, {0x2, 0x4}, {0x7, 0x3}, {0x1, 0x8}, {0x0, 0x4}, {0x0, 0x4}, {0x7, 0x1}, {0x0, 0x2}, {0x0, 0x3}, {0x7, 0x1}, {}, {0x1, 0x8}, {0x7, 0x4}, {0x5, 0x4}, {0x5, 0x4}, {0x4, 0x8}, {0x6, 0x7}, {0x1, 0x3}, {0x4, 0x2}, {0x7, 0x4}, {0x1, 0x7}, {0x3, 0x8}, {0x3, 0x3}, {0x0, 0xa}, {0x3, 0x3}, {0x1, 0x8}, {0x6, 0x7}, {0x4, 0x6}, {0x3, 0x3}, {0x1, 0x7}, {0x2, 0x3}, {0x0, 0x9}, {0x0, 0x1}, {0x4, 0x7}, {0x2, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffd3, 0x2, 0xe, 0x920, 0x2, 0x2, 0x7, 0x7e]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xf, 0x9, 0x10, 0x2, 0x7, 0x6000, 0x8]}}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8a69, 0x1, 0xf55, 0x1b, 0x8, 0x2, 0x4, 0xff]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4c80, 0x3, 0xfffd, 0x2, 0x9, 0xb, 0x1, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x38, 0x2, [{}, {0x3, 0x7}, {0x2, 0x2}, {0x6, 0x3}, {0x7, 0x2}, {0x5, 0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x4}, {0x5, 0x5}, {0x7, 0xa}, {0x4, 0x4}, {0x3, 0x9}, {0x7, 0x4}, {0x4, 0x6}, {0x0, 0x7}, {0x5, 0xa}, {0x7, 0xa}, {0x6, 0x3}, {0x0, 0x7}, {0x7, 0xa}, {0x1, 0x6}, {0x4, 0x7}, {0x3, 0x1}, {0x5, 0x4}, {0x2, 0x3}, {0x1, 0x3}, {0x2, 0x1}, {0x6, 0x5}, {0x1, 0x9}, {0x6, 0x9}, {0x1, 0x7}, {0x0, 0x2}, {0x5, 0x4}, {0x5, 0x8}, {0x3, 0x3}, {0x4, 0x8}, {0x4, 0x7}, {0x1, 0xa}, {0x3, 0x1}, {0x4, 0x5}, {0x4, 0x3}, {0x6, 0x2}, {0x2, 0x8}, {0x5, 0x3}, {0x1, 0x18}, {0x1, 0xa}, {0x0, 0x2}, {0x7, 0x3}, {0x7, 0x6}, {0x1, 0x4}, {0x0, 0x7}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x16, 0xc, 0x6b]}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7317, 0x9, 0x56, 0x3, 0x3, 0x9, 0xa62]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x6, 0x0, 0x400, 0x10, 0x4, 0x3, 0x6]}}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x4, 0x6}, {0x7, 0xa}, {0x4, 0x9}, {0x3, 0x5}, {0x0, 0x1}, {0x0, 0x2}, {0x0, 0x2}, {0x7, 0x1}, {0x1, 0x7}, {0x0, 0x1}, {0x4, 0x2}, {0x4, 0x7}, {0x1, 0x5}, {0x4, 0x1}, {0x1, 0x7}, {0x5, 0x2}, {0x1, 0x1}, {0x1, 0x4}, {}]}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x1a0, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0xc, 0x4d, 0x36, 0x16, 0x0, 0x18, 0x36, 0x6, 0x3, 0x36, 0x5, 0x12, 0x18, 0x60, 0x5a, 0x6c, 0x9, 0x16, 0x6, 0x3, 0xb, 0x6, 0x12, 0xc, 0x1, 0x1b, 0x36, 0x24]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd76, 0x66, 0xa23a, 0x1, 0x1, 0xffff, 0x2, 0x100]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x4, 0x3}, {0x2, 0x2}, {0x1, 0x1}, {0x1, 0x3}, {0x2, 0x1}, {0x7, 0x9}, {0x4, 0x7}, {0x1, 0x8}, {0x0, 0x2}, {0x1, 0x2}, {0x1, 0xa}, {0x5, 0x3}, {0x6, 0x4}, {0x3}, {0x5, 0x7}, {0x3, 0x3}, {0x2, 0x4}, {0x6, 0x9}, {}, {0x6, 0x5}, {0x6, 0x7}, {0x3, 0x6}, {0x0, 0x4}, {0x4, 0x4}, {0x0, 0x7}, {0x3, 0x1}, {0x7, 0x5}, {0x4, 0xa}, {0x5, 0x6}, {0x6, 0x6}, {0x5, 0x1}, {0x3, 0x3}, {0x2, 0xa}, {0x0, 0x4}, {0x6, 0x1}, {0x0, 0x7}, {0x4, 0x1}, {0x2, 0x3}, {0x7, 0x6}, {0x1, 0x8}, {0x1, 0x9}, {0x7, 0x7}, {0x3, 0x2}, {0x2}, {0x3, 0x2}, {0x5, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xc, 0x200, 0xe, 0xfff, 0x5, 0x100, 0xffff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x9, 0x6, 0x6, 0x4, 0x1000, 0xd, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x7, 0x2, 0xc6, 0xd2, 0x685, 0xd95, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x0, 0x3}, {0x4, 0x2}, {0x3, 0x7}, {0x1, 0x1}, {0x7, 0x9}, {0x7, 0x9}, {0x2}, {0x1, 0x9}, {0x6, 0x5}, {0x3, 0x2}, {0x3, 0x4}, {0x0, 0x7}, {0x7, 0x8}, {0x1, 0x7}, {0x0, 0x4}, {0x0, 0x9}, {0x5, 0x2}, {0x3, 0x1}, {0x0, 0x5}, {0x7, 0x2}, {0x5, 0x6}, {0x0, 0x5}, {0x5, 0x3}, {0x0, 0x1}, {0x2, 0x5}, {0x7, 0x9}, {}, {0x0, 0x7}, {0x2, 0x9}, {0x1}, {0x0, 0x5}, {0x1, 0x1}, {0x2, 0xa}, {0x0, 0x2}, {0x2, 0x9}, {0x0, 0xa}, {0x7, 0x9}, {0x0, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x3}, {0x0, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0xa, 0x8, 0x0, 0x101, 0x7ff, 0x400, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x1c, 0xf, 0x5, 0x9, 0x6, 0xfff, 0x8]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1fc00}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}], @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x40}, @NL80211_MESHCONF_NOLEARN={0x5}]}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x3b0}, 0x1, 0x0, 0x0, 0x10}, 0x40000) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000740)={0x0, 0x4}, &(0x7f0000000780)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f00000007c0)={r5, 0x9}, 0x8) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r6, 0x89f6, &(0x7f0000000840)={'sit0\x00', &(0x7f0000000800)={@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1, 0x0, 0x20, 0x0, [{@private}, {}]}}) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000880), &(0x7f00000008c0)=0xc) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), r2) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000980)={@private, @remote, 0x0}, &(0x7f00000009c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000b00)={'syztnl0\x00', &(0x7f0000000a00)={'sit0\x00', r1, 0x20, 0x1, 0x8, 0x0, {{0x2f, 0x4, 0x2, 0x15, 0xbc, 0x67, 0x0, 0x38, 0x6, 0x0, @multicast2, @multicast2, {[@end, @generic={0x8403dcb975d2c2e4, 0x2}, @rr={0x7, 0x7, 0xd, [@multicast2]}, @timestamp_addr={0x44, 0x44, 0xb, 0x1, 0x4, [{@loopback, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@multicast1, 0x523}, {@loopback, 0x9}, {@loopback, 0x3}, {@rand_addr=0x64010102, 0x8000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@remote, 0x9}]}, @timestamp_addr={0x44, 0x4c, 0xc1, 0x1, 0xb, [{@private=0xa010102, 0x2}, {@private=0xa010102, 0x8}, {@remote, 0x6}, {@local, 0x1}, {@empty, 0x1}, {@multicast2, 0x1654bda5}, {@remote, 0x401}, {@empty, 0x8001}, {@private=0xa010100}]}, @noop, @timestamp_addr={0x44, 0xc, 0xe5, 0x1, 0x8, [{@multicast2, 0x2}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000bc0)={'ip6_vti0\x00', &(0x7f0000000b40)={'ip6gre0\x00', r1, 0x29, 0x5, 0x3, 0x8, 0x32, @local, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x20, 0x4, 0x4}}) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000ec0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000c00)={0x268, r8, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x24040000}, 0x20004801) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000f00), &(0x7f0000000f40)=0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001000)={'ip6tnl0\x00', &(0x7f0000000f80)={'syztnl0\x00', r9, 0x4, 0x7, 0x4, 0x8000, 0x1, @dev={0xfe, 0x80, '\x00', 0x13}, @empty, 0x700, 0x7809, 0x9, 0x9}}) r13 = openat2(0xffffffffffffff9c, &(0x7f0000001040)='./file0\x00', &(0x7f0000001080)={0x14404, 0x40, 0x16}, 0x18) bind$tipc(r13, 0x0, 0x0) ioctl$USBDEVFS_DISCARDURB(r13, 0x550b, &(0x7f00000010c0)=0x3) getsockopt$inet_sctp_SCTP_MAXSEG(r13, 0x84, 0xd, &(0x7f0000001100)=@assoc_value={r5, 0x9}, &(0x7f0000001140)=0x8) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r13, 0x10f, 0x84, &(0x7f0000001180), &(0x7f00000011c0)=0x4) r14 = socket$xdp(0x2c, 0x3, 0x0) sendmmsg(r14, &(0x7f0000001440)=[{{&(0x7f0000001200)=@ll={0x11, 0x19, r12, 0x1, 0x4, 0x6, @random="5a02dc13b5a4"}, 0x80, &(0x7f0000001300)=[{&(0x7f0000001280)="ec8e14adcc10afac55dcb588de9ab24b76e232e8d52484ff7f26881a1ad26eb5e5fde3799eb3761f3ecefb0a89", 0x2d}, {&(0x7f00000012c0)="7dd6474e02147cc78f33507fbd7f0358442ea365e6dfd9f07c9a6a32aa15", 0x1e}], 0x2, &(0x7f0000001340)=[{0x28, 0x103, 0x8001, "42ab65dbf782185cab4bd8650d90ec9907235f16f4588e7db1"}, {0xa8, 0x119, 0x2, "6a33e3a1e81a1a3d3722f41398afd93233e9dae55f2ac26f2193cf8d880e39dca2b052bb8faa9c881349b4c6f6fc9b2759ead73cb31a1f278c5fb9157bf818b9052cdc4a67035fc4310b6d8f8bb813a3030a72070ec30fbf4fc167d78907f6f9e0b6d1e329da2f9f5e04761609ffc561e858faea3e566d25d6c3bc6352deeb64026c46bbcb403c443a1d8330815273b23ee8bd02c0a5fe2dbabd40"}], 0xd0}}], 0x1, 0x20040000) 3.120109886s ago: executing program 4 (id=435): socket(0x2, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000004000000000000000000000a02000000ffffffff000000010500000000000000000100e10500000000000000000100000000000000005f0000000000"], 0x0, 0x50, 0x0, 0x1}, 0x28) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x38) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x2) ioctl$KVM_GET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee2, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$mouse(&(0x7f0000000340), 0x0, 0x8042) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000007c0)={'syz1\x00', {0x7, 0x0, 0xfffb, 0x8001}, 0x3d, [0x3, 0x0, 0x1, 0x6, 0x2, 0x1, 0x5, 0x7, 0xffffffff, 0x4, 0x4, 0x6, 0x338f, 0x1, 0x7, 0x0, 0x306, 0x7, 0x2, 0x9, 0x2, 0x6, 0x1, 0xffffffff, 0x6, 0x7, 0x4, 0x0, 0x2, 0x10000, 0xc, 0xeb83, 0x10001, 0x2, 0x1000000, 0x1, 0x4, 0x8, 0x7, 0x6, 0x660, 0x4000043, 0xc443ecb1, 0x5, 0x5, 0x4, 0x200008a1, 0x401, 0x400007, 0x6d, 0x5, 0xc, 0x6, 0x249a, 0x6, 0x5a30, 0xe788, 0x8001, 0x2, 0x5, 0xab, 0x8, 0x4, 0x6], [0x200, 0x139, 0x6, 0x271, 0x2, 0x9a9, 0x3, 0x80002, 0x5, 0xe779, 0x9, 0x10000, 0x10001, 0x8, 0x3ff, 0x0, 0xfff, 0x5, 0x1000006, 0x8, 0xc, 0x6, 0x0, 0x9d, 0x6, 0xb, 0x1, 0xfffffffd, 0x16f4, 0x1, 0x400, 0x5, 0x0, 0x953b, 0x8, 0x9, 0x8, 0x0, 0xec0, 0xbd, 0x9, 0xff, 0x6596, 0x8, 0x3, 0x7f, 0xb, 0x6, 0x3, 0x9, 0x7, 0x0, 0xf78, 0xd, 0x35ce0cb3, 0x0, 0x0, 0xb, 0x5b0, 0x18f, 0x10, 0x7, 0x3, 0xb], [0x222e, 0xa, 0xffffffff, 0x3, 0x6f083aad, 0x5, 0xffffffff, 0x1, 0xfffffffd, 0x2, 0x7d, 0x8000004, 0x1, 0x1, 0xe0, 0x7ff, 0xff, 0x9, 0x1e, 0x3162, 0x800, 0x101, 0x100, 0x4, 0x6, 0x2c, 0x7, 0xfffffff8, 0xffffffff, 0x80000000, 0x26, 0x6, 0x1, 0x0, 0x4a, 0x575b089f, 0xbd3e, 0x4, 0x1, 0x9bd7, 0x3, 0x0, 0x9, 0x6, 0x7, 0x7, 0x0, 0x4, 0x4, 0xa55, 0x6, 0x3, 0x0, 0xfff, 0x40000000, 0x5, 0x7, 0x4, 0x7, 0x800, 0xffffffff, 0x85, 0x6, 0xc], [0x0, 0x8000, 0x1, 0x9, 0x3, 0xb, 0x7, 0x10000, 0x5, 0xe47f, 0xecd, 0x4, 0x3, 0x3f47, 0x8000006, 0x3, 0x200, 0x1, 0x0, 0x601f, 0x2, 0x9, 0xd, 0x1, 0x1, 0x1000ff, 0x9, 0x10001, 0x5, 0x2, 0x1000, 0x10, 0x4, 0xd8, 0x2, 0x8, 0x9, 0x2, 0x7fffffff, 0x9, 0x200040, 0xfffffff7, 0x2, 0xf14, 0xf, 0x1, 0x3, 0x9, 0x0, 0x8, 0x3, 0x7, 0x1a00000, 0x77a, 0x5, 0xffffffff, 0x2, 0x2000004, 0x8000, 0x7ffffffd, 0x40, 0x3, 0x2, 0x6]}, 0x45c) r3 = syz_open_dev$evdev(&(0x7f0000000280), 0x2, 0x822f01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x12d8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000002c00ef5f"], 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x800) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006d61637365630000100002800c0004000200000100c2800008000500", @ANYRES32=r6], 0x48}, 0x1, 0x0, 0x0, 0x8090}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x100) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x90) utime(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) 2.609318707s ago: executing program 0 (id=436): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) 2.608403354s ago: executing program 2 (id=437): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wg2\x00'}) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000480)={[{0x2b, 'rdma'}]}, 0x6) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r2, 0x8982, &(0x7f00000000c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000008, 0x12, r0, 0x100000000) 2.557867983s ago: executing program 0 (id=438): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x8000000010, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r0}, 0x10) 2.545502506s ago: executing program 0 (id=439): r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x80200) ioctl$SG_IO(r0, 0x2285, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x45, &(0x7f00000001c0)=[{0x200000000006, 0x0, 0x10, 0x7ffc1ffb}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) write$evdev(r1, &(0x7f0000000180)=[{{0x77359400}, 0x5, 0x2, 0x2144}, {{0x77359400}, 0x3, 0x4, 0x80000001}], 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x4, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xd}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x805}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x2, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x8, 0x1, 0x0, r7}], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.530926054s ago: executing program 5 (id=440): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RTC_WKALM_SET(r1, 0x40187014, &(0x7f0000000000)={0x1}) fcntl$getown(0xffffffffffffffff, 0x9) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000340)=0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) timer_settime(r3, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_io_uring_setup(0x5c2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000240), &(0x7f0000000580)) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x980a, 0x2, 0x400002, 0x101}, 0x0, &(0x7f0000000040)) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) bind$inet(r4, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r4, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=""/127, 0x7f}}], 0x1, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 2.369491502s ago: executing program 2 (id=441): openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000040)={0x3, 0x2, 0x7, 0x483, 0x77d, 0x3, 0x90, 0xbfffffffffc}, 0x0, &(0x7f0000000180)={0x8, 0x6, 0x3, 0xb, 0xc, 0x3, 0x37339521, 0x5}, &(0x7f0000000200)={r0, r1+10000000}, 0x0) pselect6(0x40, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x2, 0x80000000000004, 0x6}, 0x0, &(0x7f0000000400)={0x1c, 0x0, 0x800000000000, 0xfffffffffffffffe, 0x1000000000, 0xfffffffffffffffc, 0xfffffffffffffffe}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) openat$vsock(0xffffff9c, &(0x7f0000000000), 0x422042, 0x0) 2.225700085s ago: executing program 5 (id=442): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0x5f) (async) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x7d, 0x1ff, 0x1, 0x1}, 0x1c) (async) recvmmsg$unix(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f0000000840)}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/98, 0x62}], 0x1}}], 0x4, 0x400000a0, 0x0) (async) socket$kcm(0x2b, 0x1, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0xe, &(0x7f0000004100)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) (async, rerun: 32) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) (async, rerun: 32) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) chmod(&(0x7f0000000080)='./file0\x00', 0x0) (async) pipe2$watch_queue(&(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r5, &(0x7f0000000000)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) (async) listen(r5, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000d00)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2000009}, 0x18) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYRES8=r2, @ANYRESOCT=r4, @ANYRESOCT, @ANYRESHEX=r6, @ANYBLOB=',version=9p2000,\x00']) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r7, &(0x7f0000000040)=""/41, 0x29) 2.19927828s ago: executing program 4 (id=443): r0 = socket$nl_route(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/210, 0xd2}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f00000002c0)=""/178, 0xb2}, {&(0x7f00000000c0)=""/86, 0x56}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/69, 0x45}], 0x6, 0x3, 0x801) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="580000001000030400000000000000000000740087eb03cd0450b3a3aed986b783a00f0677ff9085471c5d10ef3b808fe95e2d44dbfa8388e7770350a86fa766b11bd845d6f8ccb64d954ad1c5dc294d9e1b67b66c", @ANYRES32=0x0, @ANYBLOB="0000000003120100380012800b00010067656e657665000028000280050009000100000005000a000000000014000700fc0200"/64], 0x58}, 0x1, 0x0, 0x0, 0x24008890}, 0x0) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xfffffffffffffea1, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @broadcast}, 0xc) r5 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r5, &(0x7f0000000380)=[{&(0x7f0000000640)=""/212, 0xd4}], 0x1, 0x6, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r6, 0x0, 0x13, 0x0, &(0x7f0000000c00)) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{0x0}], 0x1, 0x0, 0x0, 0xc9e}, 0x25000000) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x4000000000010046) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 2.139773549s ago: executing program 5 (id=444): r0 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x81b}}, './file0\x00'}) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="19c31800000000000045cedc3b7302dadf009500000000009460d0d73dee55c000715322b14e1a93dacdf467a6f9890f13e054800b936e122af12c18042072c4727492e7916b8b17d883e2b9c9669804d9b02849ee2da373d8ef612a5e081171acf6f901007f172d06255437eaccef343825074e6137084b0750caab432d0ab84f76a44087d548b01ade5293c4792a24a69ba60cadea8da423b35eff9b2af8e162"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00'}, 0x18) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xfffd, 0x3}, 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYRES64=r4, @ANYRESOCT=r5, @ANYRES16=r2], 0x2c}, 0x1, 0x0, 0x0, 0x4048001}, 0xc084) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000140)={0x50}, 0xffd3) syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x20, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x4}) io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r7, 0x1, 0x6, @multicast}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x4) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x39) syz_fuse_handle_req(r3, &(0x7f0000000ac0)="abf1d48a68385974c19b44dda2beff0eb12822af1afc24ce19d58a7f5858a2ce592f72eff5c49828f572311a337fa2a1355ccc8c8de30256a89b35903e34a1074622d793e1876882e2bd604eb4ed8ddbb598ad353bd90a9ed1aca2e0ab86ca27b3356a963866f7bc794fbf2c92ab53f5a30bbaba7b626e3bac68dda186a4d60c114ac61629efaab6122ee9020f6829d7bd81d2316e480f6588235fbb126217909cebc29442b392172c7daabc9848d53f8a10aebae192a9cf84a52ef8e5ad56cd9c38f6e85aec707356ade4379968d712c4455af7305040aa0433af44e7573715104e103e420f9bb90478a983e4033c65eec4e1b30ba8d540106f70b5525af92560d42f09502eb39d4769a0d42f27592b1ea7c3f4d58b625b4997faa7c3547ed0e321af293d18f42c1997faeb02ef7673b2bb0f3e9880756a122f340eed11eab10852eb5c345dc4fbbeb5149848d249a7add5ca9c28b2bb266bc41cc86b7b96985235c5c47939f4a29ec923e79e71f43c28c4655e995a2cf9a453b7dd2e2bee64200160b05d9c74711be384f88235661f32ee3dc8ed105c93a3c951aa52985a8b711f2baf57158ee2bee88d26de381c206a8be18efa88473ea3656a3406526bb883dcb76410dc57e5290a997b2786aeb7c6d0f0b3021661c4246892bbe870365960ce618d16318a0dff5381caf08e758d326f424cc46aaded79103b110f624cb6d3ae7c8c7d14306b04e097f53a1995e125e97213d2b5d312538c657437a757596e750b7e5faed2ccc6d0f2a71145c2b870684a8e1d690e28ef60c326dcb48cb8c83d4fe98f35576c2926fc36c2e1a045522cf8d6ca15dfbb9dafd7b0fdcffef599815f33d482267cc2afa1bf876a8947c075e4e0c09e080d7829487b3f41404e6b9bb45a223283226cd56eeb5cd0cc24c1ed8eed935ff31c0c5174c22c233dad4209811f4f56923e5004170697df730f231f54668862b35f8e60c938aca85fcf55d4221af5f145c18e6292fde05a470ec33e9632c77e18034d06ac2020fe93bf018de719a2accc73f30e6aa2241247f4db33ffcfd5259713305f0e942d071e1278f40485ff5782da6a24ccd35ae4a2d6c781685d1e27e3b41132d87ca390e732191bd2cdff42282abf37c4fedc0eb91b9ec96c3bcea059d6007615dafe495bd20680a68c9db92312a198e3a72918197b7ca9f05a92657567dc99db4e91bb07001a813549047eb326243e8307d756fb1c9c5c7535bf36dd7014bd576514053b6d68709e21f9b5ca21a572154b6ab5b4f30a7bd94cdb989c9551a1e45cfc4681d576ac49c34b585bb1d221e9bc9476cbea830ca5aad10a7dfe026dcc82812e77c644e9e4cda07d045228b24767aaa0e58894ba33bb7522ebe915453fc028cfbf681023eef3cf3bf033e7d2ff2e56871dc6ae3f55d52afe40703c44b8bc3a7e9db91306e257e4630755fcbd85eccc4928899d5a83fe0e47952540d559d325c69d25b37ee5793a750d0cbfaaae00035148ae020acfd4e460074d9352f3ac6f13671aeaff56836d59ae58298241066873d78e4149cc6af74aa69c23dcaaf30a76cfed29f9356e6ec2d17947738f1568269d2cea8c9508fed89106b38ab2baae2eaf6a91a7dad5e39103a441076469abd6beabd5b3febc8b07ddba816899f2fff76d7c31596569813205c5bc4dd8a73d9c8cd4016f8214d82a14f960a9d1e68c926b646be2407a2df7873fada32d54ed0b76383b28c9a56ba88a7c7c712d86a8ebef5123481555edf84458bf84309c91f5f380559f118253c358fc855c942b52933560cf305ea52bbd3c9075534b509cad8dc1d9676c6bb998c396b6c5f632952c187d5ebf7579ef53082387d2d2392d6dd4606349b1acf852795b136bcbceff9611493bea247181b1d4fa5bfdf417bfb707424deacf2ba8046cdeb837166e0e8785508245cfccc2792511c1efaf05d8ad4d976e915754965177e2ac20f032a64f58b748bd5a944b2703513e77898fc8684a4d33fee3a9763c68041b57e163b206a8c52c7b409b75ae1a7e526510c30b1972ea2522b3f7cef699e15f979c6962459da65637b887938b513837e4b1a93d87af07c1e118ffb00b689cfd050841592878dfa9da4ac25a36ca2fee91bc983c5ddff9ccfd95f1ee898e96f9a3e02de312ca692c9f625cdaaf742a1e6e1829a21d7db86c75db2fb0a9bb3ffe42d6cc7e1474d2aabd350ce8bdebeb48fd2da0d37ab4ad38917aea9bdb3c1e69c793fa08ecd5e584513d81e8e886602d129921561c5dbf8991bf4e70c122113f14ba2e965c711a483041b48fb05a689c3e24e2b7361123aa0644dd13589f65e61ac2d5cb75d20016540b91caa35e368d5a21f384eefd5bc117923ef5527596a33124f8a23083354d89815002249591865c5d4ad78995ea0ef8e637e61c4b3d5bfc591b39da069ce45b9021b9a070e155eead058f00718733eb3fb65f249204c3ea9f60d8ecf140af9bb7fb90b4afa9a3616fb31717d44d92a796d6ca38f04b988884bc8faad9105231671723f34f4ae4d24a1eca6fe6cbd8afb33b87eea8d5d4ef55a5bc0d82e99bacef082738e869e32c96c3d8f54daffb7463a0b5733a675c7684d58cc2cbd8f64ee768e2e034fba2996424effb6c2b8495d4914440e50bbcc23eebb58b7d2cefe736ea0cac5297658b6457dc241e4a82b59bfa4d5246112e9270b90fd0b46fe3207f33301c7b2637b854f0429fd6354ac80103e443ff72a15829208a95383845e58813efca4dd0949849e3afaa73d01f1cb52a556e034dc99dca6bd25dda1830dec5a9b10b2d0c2d0b0132c88672752e3baf277330821c0145215454e8b7b9458d7f8ade6375d07b4c7968c8233a243f93442e38f8b8ca0085c421bac0dc01c9d2420c85e4b743b1a84b8fd50295ff320528360ebdd4aee2813bad6367163c02903646c7d827e0ba8599922c6b1543cbb3aba0138fd4e56feb6df0ec50d4f6894537bed77fa229f9190ec0326bbb98d68b3fd5f271772e9f82c74737ba6599cae6f2ae40b96a037ad5ebe0093244e9a2ca17e794c7ec51da3b58e36b50f6c908b7c284b8383e8f0e5b334434c37dec005e0a1b0f6d3ae4eecbb35cdd17855a878849e9eb6aa42c853b7a7f3de755c1ca0434f8d512db8de54ec6df4021c5bc0161d044dab0d79f8cee8082a2e380841e74bbd90150701327efe0cca79a8788c939cc7acbd26710772339a542524379d1d7cc75dd53f91802a0451c984b5887aec1e44752cd8a3f275ecf9bab4fabebf9b00a2828d022133f0bc38469dc9f795bc327e2d67e9e299d9086cbadd5ef49284247966a59dceaca59e5717e1eacc5df82ae3c54c3397847de9f8507c19e679d201c02f7c7cb3ab17dd59e6b0c7b0dca3da363c841bb5b00e9a191b71e863e487e21799de88f3ef3d07aa8ee8c1cdf9691d33e1f7d31cf7d70ff30d9b8fff13d6b5878f7f2a09b069330c006009c743be7c6edfc4369dc7e52f0a358494309ef5b198d2ad07661eec4272f0bba1444a901ef40a528a940184aa5a2035e6b47719c5c1d9721c10532fca78f52565264a59ea8ecf57d77a8cb7be0226c7ed0d150cb3cb1bdca450868a043c33b7b8a885f59ebbc402b248db04b84f5c60b1c78a363eb39b5551b54dcf2caa1f88568dcc9bf59bc3455dd4f1e413d8b0bdb51cdb40bea9b13599ba06fbee4dab3658f34d7a7cd25f9e02a583744c1ad95b943ec5824b1e7350d8e3afd0c005a46e4c26739e02da1e6ae0b7de3fc0caba1000cae13f273b1209def9edd3b9605f8ce5b88cf7ec5e852c4c849c48c62a71304d0e7924232e6cef462a0bbeb61eb81adaf8937752930f79a1c99b51454632bc19872007abcb85e7371085f469a275dbee30df0e20a594794d4f136daa531614fa4b60fc0e883089179847c702e11f3f92773ff34211456d5b1d0606541dc53d04353c2afbab85a306166737ed8bd3af1d8585a9ab5271c61f6cb44e32081ab903d558c9452c0ce1bb809dc772bc4168bc81dd974a7c6ea8df5a7425d746c85790a865085985a0da469043ffe0ee52692641b078185b66d7a6912c4a864272cf6de600ba41daa79f2f82df97c605af9ed40f1ad3c6b03b4bf4db598cda8acaaf1d0bc174409557109c24a88a6807687407968723ad54a30bfc78d2e630644dbe81883cb171530422faf93a3a9fee1c6c0c9b06a417f87a9076caa7f5a7068ad1f144caa537720f7c3d5cd178ab2bf70a7cf62b0a3dd85fa1acf71f201d75146e3fc2b8c115ca742d6d3c7c1b18293be7d2f3a47e2ff08003a61f6f47ba107caf3eb65df57ac1907f671b763912547dcef447e3a899db6fbc30de0b8632131077dfbc8b47328dff893c2e58f6c122c3cbfd5e6567bd4f8e8785cd154821a2e2381d33aba36923fe7ac9327a4eaecc6c2d7ddaf25f9728dd7844d34801f207b63f764b4e643324380b383d2b2086ca0a3b77e3ebaf6605dd59d80a9787d7127661566e35499762159d01429a7626fa13112cd997b71013dab4f58e08cc5328c52d80e2e735dd5e9a3cb5f364b133ebaa96a1cef2b983d0e106d88e7d76457939a09ac22d51b29b49437426ab67fb5b64d6f874e2dd7f45ecf0240b8c9243654bf7d55e2552454fd23e9b9acad8907d01fa16cccaa51faae6c0b209753245896988f65c27d7ac8cdfc63da1ce2556722b4797c22da0887a4b3239026cbb8f55109756244f9f741fc2a6dcc6c27538b7fefea8bebaabecd6f74cc84f9c0349d747ce076e4a73fffdd8a62fcd84182930d284bf5d26edb4be815987cf48de5c63f97062aa05fdfb1ccbe39eac0b358dd5b6d3b50be4e9c6b4ea4777ec8b5d3891730e00d0bd20db72e798ea75c20a34288b32e324058fc5f61af4e7756861bcef41a3c991e1f14cb0ee1145498de9bab591fb6f315b0f81343640cde23dfb03a6bb088ca28934943b601089a816437be5081dbfb595e401fdd74e2edda385f2b60a81d2c9f93362d6667914dc85f4a9abd9439e5c71d2b6e85bcea77e710b4cde2b8372537e3bf813ddd1c9ec34151061f56613fcf04fc0172d5690d5a7752be1441c9c6277552297f6789f0a8b17e7766f8d8d712e7d67c3c17fadfbe6efea4d262ec1517fd06660f45479346aa43c85cf2ab1bbdc7a647ff17eb59f153e2895e0013b0d42a1bf452de8650e085b22da32fdb846529fd96ad8fcb1aa324d58ae4d868040432767b64e1675d0e34c8ffc5d706c76387a706a0a7d55ffbdf3ad265098668ec76ea3b460d42751c4173e291ccf8ecbe1791a2a3932e49d4b7ff160e50836bda59e33b93f7e7df902b4b50dd232fc7851ff4a6185481b213ffd55f2466e7be4ff2d56278ad880c943ca7005d7276b7a8109473d9b5c072da8e92d6ed96a3685824f31411501c21c2fa4f6e774cd52751d020ce91aa6604752798e5a028038314eb2db096aa17d4c4d92c090c84c818f3fe6ab0f982a742bacce7d237e34ebb2d363cd49f26d0a78c4775cfc474ceb8c068f7b5d31a66dfe76a03d960eb576e98388f744463f2073b47bb043ed77d358bddb2bfa8766fad1c987b04361891207d5c6bf9c11a5b3841f6b05479ce6353aec300e6ef3166611d42d23c7ba54dea6ea286849003a3ada17d7348fab0fe59d7c8c1d250df8936020108b27998f7984c9ec95d60dd7eeffd2d945a834aa042ba76c531e00a75b09464b56381be303a9992d62320a7fbded2b6415d12539828174b523611c625df93b00b9c1b990c94d6bcdca355ed095851753aebf5a38ab818513837781e2f40007335ba1fff17fdbb9a13d6cf9a44e868ade6e8667b235ce2550a0b257897f20c23048cb229b167ab292bd1188bd070a10467a56770c916d858a4c1918a9db7b840155788fc99069b80ea3593f0b9292038702230c22a27729539024aad714c7e8e05cf46079ea4abde0632273167175e9a0fe2fc0eefa40854d9a711bcf91aa6409b82b765e47a51b52a102c37c4ac0b600b2e2f27c10bb115ea869c7c5c94018407d1490e61d384f3bd14b1d6306abcb52fabe2551c5dc2493576ed2bf72214d2b77833ec4ea57531f22913486783e45c637a3a878594c2419877caf506f7bd0d89a66799bc859e01879843543c412006939d691386cbac685e7f368337de0f508b483c790f6512fb8dcb2e60fec06b4bc312dd4ec69d1caf412c2b514d58e73e0c0b4e4e3a734fb8b882b8ad842b2fb42462ff28e05978409c0487d8fdaafe34db543b0ad9213bcc6cb612aeab5fb207af8ca45d24ead7bc4e7ce0f9f42e51b81d114b33463f129f46cfac62813625ab9712540f1f91a3168e00b5ce7322e4466d47c54aca1dda442879cde16385621c0f60f6861ea4e3496bfe2a9216ab170f3a6c1987955a43418a2ee98e8497dbbc8945a8c644ecb036b3658b21844c0237b965c373769ab92d43f69049633919c52731479640fd687517e25a7aa985c6b799df208871f43748c6297a6da3a8753056845666f2934e60d3d778cd8a3f4329b90c3561acd26975c6be5cb473340ca4ab0f93dcbcc9dcd72d6ed6a311922421ae44d00e89602ff3d261d3272f200e289c1e5ee77651bfa1eec949de8d17dc3a503ffb0cbcb71554e3f1f291304e20381fd0f8c6c3f1737303e5d541eeabd3e7c1ce8cbc5bdf84ea921d1725e15cdb37a1848d6f9029951caa6b4743548d592a384a3b0677cbbacfe8a68b863e15264cebd5b88e60a2757f06ba036a991cc67774975d908cba24ce7efeeee4bb37e488326a2e44ae07ef7c44d4dc5ada0325e18ccf4d466befcbb769da97f338e2e71219b674b3177eef93d554b289630a79b447de972b1191b3938543191f27b5e5d1e5c806e193230921cf62a6d602a52c7c029f92b83976870b7585aea83746f572d49b6252be6f1b9eebb3e954d78806c41ddffce28131fbce0141b63d27f5ef879be9cb56a24ba1c86b9d57da1eed2e98cf03b81b6d1552463a321e861fae1d6fd8ba5382d7682073d319752a70409fab815b4a072bd5ec013e3146d3015af796fa9f1d5259788fc617be6f647dc99be843f0d2c7e3e0e14d9f6319cb6f84427e8c38721c5fef0b57d46f7f89303d4901a027df91b09b6fe2361968afca4c23760418f5817a6476734b5ef8e3120cef02997e9e7583c1a7354cf0375d9000aebdf3e1df6dd80e0659b71ea80a151d285459df013ed0f2c3180ca236160fc62689153e64b5d0f5da1e91b0d630cb3ec51f3efe4f9b3bd765944fb8f02a6ede62b5c2ab66d7a5e9ad3a7100a632f5397eafd8970fd8ed779c5f957bfd4d8df04d2ef564763ce0eaa612b05cbb60c3edac8967bc713d4ad99467f2e50bfb82931e841c266aaaafbc75261eb3ffa8c563d7d77c0d1b005441dee63230cee95e7ce54bbb153807d107ad1a6f14d55766267ba6dbcbaea7b3896b6227ebe59f848bf13707a2d84919a281cf17e841a7e34bbe92bd88442fd47444ee49c601afd7517669d299eda282240f72c80c5b565b9d33e54490d45061ff4e09916283d940ee44918627ed2e9e18dd52a193348cebea2be7072fe7563893ddee0043a4e7203b691429116e61e14672c9d2100dd033d63d9a2072cff16ff5c3581d7f949167afc7f78a6d42fea22b53a9692b13cb2e94c0ef850ff2d2c770a1161408f3df15dc4c98654c4b2757dc0a71b34805615706a5950c8c9087cd937d2c56ca7be216a8bf92516d9e056154fb63ca98bc0da0ae102024afdea32136c8eaabcd5b36efbbd6ab72de60d96f70e0c99a1b84a6716540022ab7f8ba38ccd6ae5b2652fc4d56ae178fa62151f35551d6ff7fc5038cb224c03bbfbd465e6ce9bc02356e615501ba974c100b1b98f4e81808bff171f077fdf7c51da119786f254da40edf5db052342e8562e32ec8f0c566c700c700a3dbd6878159eed00e7f667cb5ba5fa4102d68b81f7a4c474644ebb15e7fccd524693d0a3b09a31ffd5028a8e33abfd71c564c42b316f44955e5680fb71563a69e57b1617528e2c6bf4a609f9aa089a4ccdc51b4d0647ccae1cdc95935bc1208fc3e30a678668b1b191af41714ea5f15277e8fbad37042607da8b20edc2cfa4621dbc8fd90a108dadcc6e84a1cbbc32bec0363d2cb8a86838dcf7039eb510051706d6aae4382b74d510cd0754598691296be933567a0f4d8a5dfdf870b168716eafadf15d401e46b2a87bc44bc0a7a4797ab3741e6a56a6c02d492086f01dd34c52dd836a568115f5d76db1a48d7a850eed5c2b80dfd24732126899462796546832cf80ff9330997b73452ed51ac9f4c8c9412dd295aa20873904f7d65f76142efcfc0264163a920bc8a333478602fa4269ad310a329ac25430cc2f0b43e911a75503b91d388675549a4eff9713aefa394e3e83888635780df9d9c0233cf2c758ff8c459e3b8bbb55ebfbcca9cd9a4334465525ab7e6c86c618ce4c62721ba92eb6518b02da262b1554101cf8e70be61f6e9d2526bd39fab05307051763087f1bfacf2e9e1bd5d4df32fe58541de30162dbc06d0fb8ea90e295c7e84be4af9c0183b53a0c2f828c16c230b355186f99dbea98c3182720645c026eb87dd78181af6a7cc5bf0c5498ba2cabe3ed6cb38ccf09cd94b15054180d03d3f7636cd7d19b52ed8ec7005b85d3ff8d4e4bbb576b39c314388b61a84fcec090b516c16b02cffb0554d9ce6a001745d4d51b3d459b744aa660d374c7f4215a4a23bf36ad11f1b2392982d44432595685a66ff949c426da97ec1f3b7b630450f0ab6fa393b927e6b6b6a9277346600451951bd92733da2f8b0e3d430ff01f949701b4a69afc89d82708e645a05c6bd8a34c701e7f9d6e838a7cbc722ecb797be50b8e4f1175db9a84a487b4d995ff566cf0bf200d453ce1160c34d5e883e1bbd881b4254e72d545d627e3786aac3291d73926e1d5f203ea8f627100458a56a1f31e8624ccd1b7887a71dd28b4ce20ca9710742a0a4051e5a7a98e67748d75b1303aa90d61ca83a5a4a1ccdcc52928da0b3840e9fdf14d849643f8c64de5d3c1f7fe0fb42cb60ad7b4717899b86af84a94dc75ce65e47d736f23cf30653a3d50765bc5390081ee51ce00b7548abdcb8f1bfeb139cbabff4dedc9f9652b7654b1efdbde065da1f6e66b977f4fd4e6d6498fd5b639985c726914894c4347fa7f650c37f491fd5630c631ef1477e50bb8c2d7de97b790ed663709213b7108049d2807be90692026e2624c97a532e77365c86b7c1f3d394ac40a1e1d3abd2ce79fc916803db1f75634c926b447b0914e6fdd88824f4e6872c93a6b81a65fff20c4f0de49bb428b04b86575824ca73b6aee66beec05921adc4054ada12f0723752127dfae738c99163b110435c5643c53c0641984588c1ed4965412b46ab77db7bee0b2472cf0860f8502cea2737b5264b804855d066f5df8a0a3aacca8a90e146d56f302a40750154efa492e3013c92f66d94463b888b5df8bbbe68f610b7c97c1af868f6b991b670eeccca4da54eaff75d2003b97256187651b2ee709279f93a7670ea697213c684787cdee57b6536f40444a27653a2d6190d7370553dc6c066602f6871534d9929faf508c058fb3515b22de77b7da2d57018a5e5bc310a5ebd46663db2fb2e661317ac0c734adf38cebf16e325964f5d185bfc753f747a0a0e2f6ef3d28ea4ae24ae03341c756bc5b09684d4e582adff98832d231f46b62a4e6c3724d3b2707e676c4f9355608ad12cb8e289ede80c1d607412d391bbde81e1f98e5cda9970ee41a7c8bf62cc553a0499629e938f2f299fa04653fa2b905a906ab230b71d34115812b2577f55d673edef467772cae47a1faf693c785a4a13ed09713ed612a534985305da36c36349561dce7d779699a58fba520c57b183aceb16dc00fffb3eb6c6f299ca780b18297de3c4384650d15b9dbb6bb8d1ebcf080bfc6a00f5075cc1bb36ee7fe69ee9a37858201b7c0e0e0d8e08d6959f1210608034afeac7e057c243d6d21cdab98077c35543c2a04b80f68da46040d1a8ca872f1f82952c446bb2697c7aeebdbdc536973bad586f4c9c7a11954116ec2df6b49830126ddb78851c26bd4da8774ebeed86d524f817a6471dbf094d233e282e03cdbe21e6640d5e7069f2e0574e9acfc57fb981b350c0209d82e860e32462bf628a127dfd52bc3f7baff7f96b1d6ee23e41fc587389d8caf816a3ecc547f18d28866bea2eaf3c5c482c30f2c692bc20861a2ea2b6c79800ee99d97f4b86ad9edf386142404c7ff791f5bba47a440cd7ce2d346bad67f4dbc9c0009f635409ec5ffeed14ef78bc52264b414d4eba0e7ec5769f42a6898165557c799fe4909d6765be71c016d40dc47efb5ad2233aedc107bda037695d1df9ce14f6c542af53b3baee343fad35b411056f098345bc36debe8c73c1f9e8cf1b85c0ddeccf2b837d2c96c7a41facbce5c674079e016fe7620b66c6178dea7e4df534cba30ada81ad7b33ed12d6f4460d5a356b15c16d1d60fdc2e3a2477cb36a77cb66681fccc9a5ddf4edac5441f46f454c851c7d598f276ff90fe7638000bbd8fedc1b19b2d49830ab78202b25fa57326566364225d2c2bae169f4d817bc5abcbc3f038481713d0180a98a7d50378741966299e118dbe8a3789affd5d07ca896323c0e9fa5d4676839df6423ca9b0633db72571eb82b7cda4f456487b95d3672d5b57ec5a904226ccfe8dd19b92eb5fda88254d5a8f3e7be838cee37ac6db354384e672ad5be9aad1e99a136649cd4bfc1adc03e4dc77c319eb36c86fd0610afc0dac255318c3fe9baf674b7004491d7bcaf5cd36e1527f684b7e2202dbac973ce4b9c3d147f47e34016b0de6e424091cc07e87dc35af971d076b0b322743c9aff95ace66937a5901d4578ce8ce866d4f3465425dd92003c19a2451ca0de6f81da8d9c08aa4f44c09f0b7cc2db051ce1964b85926870c11f05cf7138d26c18163bb389746a54d59078024f59e5752cc3af9d97521e5036bdba025cdb3e71d50929f746bd43d73d73b6f698529110f7578e2ba72c0d8713a9659152eefb95941cd6c7379f0f46540245397414c316a563a2c87b1082c98a3c9b719ea4b1b91d4fd728ceda8247d21f1fc5cd3ab7a4ffa80fdcc8ab37ad8dc7e18a47082b406595c0601015473a277b1eb3a2e4424f2c5bf10d287c63af51b688fd9dfe3965990d515b94ec70d67be56744cdb72ef238c5cea16ed72bd5870484777f0efc67115587914997d17715e8a51023e5683479aca382da691d47f63104df3e619ea76e27b1e01680a95abe9704bdc1f1d885a4e388788f0bf00c5baa86b699674029fb51ad3955601415ecf50d18a5657edfc74d825074f792cb5298731a4acb0d4fecf82a18bc631bc32e2baa67569ed0adb6218e46749f4d6b4736829d5a18524ce9f634a9455a01a6b7be2186bd78e953c7f9830d0a5d71d200356b3a118bd01ed362a2a54cfc82c0cb0ae526efefdc38fbb4b27009e7b66aea4bba1f9a9db65f3b31e51e7b6e809f16c6a746ad12a331734008177ec940c31476c1823a5c4279c202106fd3d280861c209e651657", 0x2000, &(0x7f00000063c0)={&(0x7f0000000440)={0x50, 0x0, 0x40, {0x7, 0x2b, 0x8, 0x21000, 0x7, 0x6, 0x5, 0x7fffffff, 0x0, 0x0, 0x10, 0x2}}, &(0x7f00000004c0)={0x18, 0x0, 0x7, {0x40}}, &(0x7f0000000500)={0x18, 0x0, 0x6, {0xffffffffffffffff}}, &(0x7f0000000540)={0x18, 0xffffffffffffffda, 0x7, {0x6}}, &(0x7f0000000580)={0x18, 0x0, 0xb105, {0x5}}, &(0x7f0000000780)={0x28, 0x0, 0xff, {{0x4, 0xf73, 0x2}}}, &(0x7f00000007c0)={0x60, 0x0, 0x8, {{0x9, 0x8, 0x7, 0x1ff, 0x10001, 0x5, 0x7ffc, 0x36}}}, &(0x7f0000000840)={0x18, 0x0, 0x1996, {0x100}}, &(0x7f0000000880)={0x1a, 0x0, 0x1, {'syzkaller\x00'}}, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x0, 0x5}}, &(0x7f0000000940)={0x78, 0x0, 0x7fff, {0x66, 0x5, 0x0, {0x3, 0xd000000000, 0x5, 0x0, 0xfff, 0x0, 0x4, 0x4, 0xa0df, 0x6000, 0x4, 0x0, 0x0, 0x0, 0xffffff81}}}, &(0x7f0000003ac0)={0x90, 0xffffffffffffffda, 0x4, {0x0, 0x1, 0x80, 0x80, 0x0, 0x80000000, {0x0, 0x7fffffffffffffff, 0x0, 0x3, 0x8be, 0x9, 0x120a, 0xd6, 0x2, 0x8a8f006e14190c16, 0x0, 0x0, 0x0, 0x5, 0x5d}}}, &(0x7f0000003b80)={0x60, 0x0, 0xa, [{0x0, 0x5, 0xf, 0x4, 'contention_end\x00'}, {0x3, 0x971, 0xa, 0x9, 'syzkaller\x00'}]}, &(0x7f0000003dc0)={0x1f8, 0xffffffffffffffda, 0xd, [{{0x1, 0x3, 0x6, 0x8001, 0x0, 0xa2f8, {0x0, 0x4, 0x4, 0xfc75, 0x8000000000000001, 0x401, 0x33, 0x2, 0x200, 0x1000, 0x5, 0x0, 0x0, 0x5, 0xa}}, {0x1, 0xfff, 0x2, 0x9, '\x1a&'}}, {{0x0, 0x3, 0x80, 0x100000001, 0xea6, 0x0, {0x0, 0x1, 0x8000, 0x86b, 0x7, 0x3, 0x200, 0x40, 0x9, 0x6000, 0xfff, 0x0, 0xee01, 0x9}}, {0x5, 0xf5b, 0xf, 0x4, 'contention_end\x00'}}, {{0x4, 0x3, 0x7, 0xd, 0x3, 0x8, {0x3, 0x740, 0x3144c00000000000, 0x882, 0xbedd, 0x3ff, 0x7, 0xa75, 0x2, 0x4000, 0xa37a, 0xee00, 0x0, 0x9, 0x7fff}}, {0x3, 0xffffffffffffffff, 0x1, 0x5, '\x00'}}]}, &(0x7f0000004000)={0xa0, 0x0, 0xfffffffffffffff7, {{0x5, 0x3, 0x3, 0x10001, 0x5, 0xe, {0x1, 0x2, 0x10000, 0x3, 0x6, 0xb2, 0x0, 0x0, 0x1, 0x1000, 0x54, 0xffffffffffffffff, 0x0, 0x4, 0x6}}, {0x0, 0x4}}}, &(0x7f00000040c0)={0x20, 0x0, 0x2, {0xa5, 0x0, 0x2, 0x3}}, &(0x7f0000006280)={0x130, 0x0, 0x7ff, {0x4, 0x7, 0x0, '\x00', {0x8000, 0x2, 0xc0, 0x3, 0x0, 0x0, 0x1000, '\x00', 0x6, 0x8000000000000001, 0x10, 0xbf7, {0x4, 0xfffffff7}, {0x4, 0x4800}, {0x4, 0x1}, {0x7, 0xd0d}, 0x8, 0x5, 0xfffffff1, 0x9}}}}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x18) ioctl$KVM_SET_USER_MEMORY_REGION2(r9, 0x40a0ae49, &(0x7f0000000100)={0x101ff, 0x5, 0x100000, 0x1000, &(0x7f0000ffc000/0x1000)=nil, 0x4, r10}) write(r8, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) 1.390093514s ago: executing program 2 (id=445): setresuid(0xee01, 0xee00, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x10, 0x1403, 0x1, 0x70bd2d}, 0x10}, 0x1, 0x0, 0x0, 0x854}, 0xf000000) 1.389793438s ago: executing program 2 (id=446): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1b, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x5}, 0x18) io_uring_setup(0x7a4e, &(0x7f0000000580)={0x0, 0x838e, 0x8000, 0x600002, 0x38f}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x6b, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x2}, 0x94) syz_io_uring_setup(0x110, &(0x7f0000000380)={0x0, 0xfffffff8, 0x0, 0x2}, &(0x7f00000007c0), &(0x7f0000000800)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 906.447497ms ago: executing program 4 (id=447): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x24}}, 0x0) 889.451503ms ago: executing program 5 (id=448): setresuid(0xee01, 0xee00, 0x0) mount$9p_xen(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x200a, &(0x7f00000000c0)={'trans=xen,', {[{@version_9p2000}, {@posixacl}, {@aname={'aname', 0x3d, '\\'}}, {@fscache}, {@access_client}], [{@fsmagic={'fsmagic', 0x3d, 0x3974}}]}}) r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="10010000031401802dbd700000000000"], 0x10}, 0x1, 0x0, 0x0, 0x854}, 0x0) 818.94973ms ago: executing program 4 (id=449): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x9, 0x8000, 0x8, 0x10002, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x0, 0x4}, 0x50) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) pread64(r4, 0x0, 0x0, 0x7) bind$netlink(r4, &(0x7f0000000500)={0x10, 0x0, 0x25dfdbfc, 0x2000000}, 0xc) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc4, 0xc4, 0x4, [@func={0x1, 0x0, 0x0, 0xc, 0x2}, @enum64={0xe, 0x6, 0x0, 0x13, 0x1, 0x9, [{0xd, 0x9, 0x7}, {0xe, 0x1ff, 0x8000}, {0xd, 0xa020, 0x5}, {0xe, 0x8, 0x9}, {0x3, 0x1}, {0xf, 0x400, 0x5}]}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x13, 0x0, 0x80, 0x1}, @typedef={0xc, 0x0, 0x0, 0x8, 0x3}, @union={0x6, 0x5, 0x0, 0x5, 0x1, 0xf, [{0x3, 0x3, 0x7}, {0xe, 0x3, 0x9}, {0x2, 0x3, 0x2}, {0x10, 0x5, 0x1}, {0x8, 0x1, 0xfff}]}]}, {0x0, [0x30, 0x2e]}}, &(0x7f0000000240)=""/199, 0xe0, 0xc7, 0x1, 0x0, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x7, 0x66, 0x9004, 0xa000, r1, 0x2, '\x00', r3, r4, 0x0, 0x4, 0x5, 0x6, @value=r5}, 0x50) 818.55459ms ago: executing program 5 (id=450): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RTC_WKALM_SET(r1, 0x40187014, &(0x7f0000000000)={0x1}) fcntl$getown(0xffffffffffffffff, 0x9) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000340)=0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) timer_settime(r3, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_io_uring_setup(0x5c2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000240), &(0x7f0000000580)) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x980a, 0x2, 0x400002, 0x101}, 0x0, &(0x7f0000000040)) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) bind$inet(r4, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r4, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=""/127, 0x7f}}], 0x1, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 808.518222ms ago: executing program 0 (id=451): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000003980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000000240)={0x78, 0x0, r1, {0x2000000007, 0x0, 0x0, {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x0, 0x1ff, 0xa000}}}, 0x78) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8082, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r3, 0x4068aea3, &(0x7f00000002c0)={0x74, 0x0, 0x30}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000006a00210625bd7000fddbdf250a000000ffffffff0000000000100000"], 0x20}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000100)=0xd) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f0000000180)={0x17c04, 0xffffffffffffffff, 0x84, 0x75ea, 0x800004}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) 750.136245ms ago: executing program 4 (id=452): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) listen(r0, 0xfff) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x7de56d6f4a9da95b) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffc}, 0x1c) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$apparmor_exec(r3, &(0x7f0000000300)={'exec ', '\x00'}, 0x6) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r7, &(0x7f0000000000), 0x8) getsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) syz_usb_connect(0x6, 0x0, 0x0, &(0x7f0000001b80)={0xa, &(0x7f0000001740)={0xa, 0x6, 0x310, 0x8, 0xa, 0x4, 0xff, 0xf}, 0x0, 0x0, 0x7, [{0x4, &(0x7f00000017c0)=@lang_id={0x4, 0x3, 0x2c09}}, {0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0xc0a}}, {0x3, &(0x7f0000000400)=ANY=[@ANYRES16=r5]}, {0x0, 0x0}, {0x2, &(0x7f0000001900)=ANY=[@ANYBLOB='\x00\x00']}, {0x1f, &(0x7f00000003c0)=ANY=[@ANYBLOB="1f03caa55aa475add4665172d44668060000d14e9baf1955e4bd9c1191c961bb"]}, {0x95, &(0x7f00000004c0)=ANY=[@ANYBLOB="950319545cd88b20105939d5669c5375f9418a613021f237acdd78f682271bdcd127c90991e4df"]}]}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) 0s ago: executing program 5 (id=453): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_CLIENT(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r0, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x60084) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x1, @empty, 0x4}, 0x1c) sendto$inet6(r3, &(0x7f00000005c0)="ecf839f3bd", 0x5, 0x0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) sendfile(r5, r7, 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r10, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast]}, 0x48) r11 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r11, &(0x7f0000000000)={{0x6, @rose, 0x2}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r11, 0x80) r12 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r12, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='400:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) kernel console output (not intermixed with test programs): e [ 59.907392][ T6120] hsr0: entered allmulticast mode [ 59.909055][ T6120] hsr_slave_0: entered allmulticast mode [ 59.910912][ T6120] hsr_slave_1: entered allmulticast mode [ 59.920812][ T6120] Zero length message leads to an empty skb [ 59.942790][ T6024] usb 5-1: Using ep0 maxpacket: 16 [ 59.951420][ T6024] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 59.962954][ T6024] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 59.966926][ T6024] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.970425][ T6024] usb 5-1: Product: syz [ 59.972195][ T6024] usb 5-1: Manufacturer: syz [ 59.974820][ T6024] usb 5-1: SerialNumber: syz [ 59.981005][ T6122] capability: warning: `syz.1.25' uses deprecated v2 capabilities in a way that may be insecure [ 59.991138][ T6024] usb 5-1: config 0 descriptor?? [ 60.009245][ T6024] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 60.025085][ T6024] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 60.752972][ T5950] Bluetooth: hci2: command tx timeout [ 61.047671][ T6024] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 61.073376][ T6145] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 61.173178][ T6038] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 61.303745][ T40] audit: type=1326 audit(1767251307.155:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6148 comm="syz.2.30" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 61.319082][ T40] audit: type=1326 audit(1767251307.155:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6148 comm="syz.2.30" exe="/syz-executor" sig=0 arch=40000003 syscall=352 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 61.338025][ T40] audit: type=1326 audit(1767251307.155:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6148 comm="syz.2.30" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 61.354109][ T40] audit: type=1326 audit(1767251307.155:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6148 comm="syz.2.30" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 61.360404][ T40] audit: type=1326 audit(1767251307.155:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6148 comm="syz.2.30" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 61.369360][ T40] audit: type=1326 audit(1767251307.155:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6148 comm="syz.2.30" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 61.375754][ T40] audit: type=1326 audit(1767251307.155:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6148 comm="syz.2.30" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 61.382179][ T40] audit: type=1326 audit(1767251307.155:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6148 comm="syz.2.30" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 61.435703][ T6154] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 61.525015][ T6160] xt_CT: You must specify a L4 protocol and not use inversions on it [ 61.554346][ T5945] Bluetooth: hci3: command tx timeout [ 61.556289][ T5950] Bluetooth: hci1: command tx timeout [ 61.633203][ T5950] Bluetooth: hci0: command tx timeout [ 61.720760][ T6159] syz.2.32 (6159): /proc/6158/oom_adj is deprecated, please use /proc/6158/oom_score_adj instead. [ 61.733980][ T1123] sr 2:0:0:0: [sr0] tag#16 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 61.738049][ T1123] sr 2:0:0:0: [sr0] tag#16 Sense Key : Illegal Request [current] [ 61.741240][ T1123] sr 2:0:0:0: [sr0] tag#16 Add. Sense: Invalid command operation code [ 61.744780][ T1123] sr 2:0:0:0: [sr0] tag#16 CDB: Write(10) 2a 00 00 00 00 00 00 00 02 00 [ 61.748269][ T1123] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 61.752540][ T1123] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 62.207154][ T6024] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 62.217580][ T6024] em28xx 5-1:0.0: board has no eeprom [ 62.302875][ T6024] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 62.311294][ T6024] em28xx 5-1:0.0: dvb set to bulk mode. [ 62.317639][ T53] em28xx 5-1:0.0: Binding DVB extension [ 62.428822][ T53] em28xx 5-1:0.0: Registering input extension [ 62.986343][ T6006] usb 5-1: USB disconnect, device number 2 [ 62.989023][ T6006] em28xx 5-1:0.0: Disconnecting em28xx [ 62.990876][ T6006] em28xx 5-1:0.0: Closing input extension [ 63.010355][ T6006] em28xx 5-1:0.0: Freeing device [ 68.068389][ T6225] No source specified [ 68.078015][ T6225] netlink: 'syz.1.39': attribute type 20 has an invalid length. [ 68.206670][ T6229] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 68.894902][ T6214] netlink: 'syz.0.38': attribute type 3 has an invalid length. [ 69.306713][ T6243] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 69.309535][ T6243] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 69.314150][ T6243] vhci_hcd vhci_hcd.0: Device attached [ 69.351726][ T6251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.49'. [ 69.359683][ T6251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.49'. [ 69.502873][ T53] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 69.563370][ T53] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 70.276717][ T6248] vhci_hcd: connection reset by peer [ 70.279456][ T12] vhci_hcd vhci_hcd.2: stop threads [ 70.281520][ T12] vhci_hcd vhci_hcd.2: release socket [ 70.285832][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 70.381337][ T6262] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 71.464807][ T6276] vlan0: entered promiscuous mode [ 71.474423][ T6276] team0: Port device vlan0 added [ 72.293580][ T6290] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 72.295805][ T6290] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 72.315583][ T6290] vhci_hcd vhci_hcd.0: Device attached [ 73.061404][ T6291] vhci_hcd: connection closed [ 73.062752][ T1049] vhci_hcd vhci_hcd.2: stop threads [ 73.066314][ T1049] vhci_hcd vhci_hcd.2: release socket [ 73.068440][ T1049] vhci_hcd vhci_hcd.2: disconnect device [ 73.801412][ T6308] netlink: 40 bytes leftover after parsing attributes in process `syz.1.62'. [ 73.806133][ T6308] process 'syz.1.62' launched './file1' with NULL argv: empty string added [ 73.812184][ T6308] IPv6: NLM_F_CREATE should be specified when creating new route [ 73.832737][ T6309] netlink: 'syz.2.63': attribute type 29 has an invalid length. [ 73.835303][ T6309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.63'. [ 73.838706][ T6309] veth0_to_bridge: entered promiscuous mode [ 74.479324][ T6311] warning: `syz.3.64' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 74.559446][ T6305] veth0_to_bridge: left promiscuous mode [ 74.662798][ T53] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 75.785336][ T6329] No source specified [ 75.812770][ T40] audit: type=1326 audit(1767251321.655:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6323 comm="syz.0.67" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0xffff0000 [ 75.956609][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 75.959536][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.138114][ T6007] usb usb42-port1: attempt power cycle [ 76.584558][ T6335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 76.639481][ T6335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 76.737227][ T6007] usb usb42-port1: unable to enumerate USB device [ 76.852371][ T6340] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 76.854687][ T6340] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 76.858458][ T6340] vhci_hcd vhci_hcd.0: Device attached [ 77.032792][ T6007] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 77.102789][ T6007] usb 41-1: new full-speed USB device number 3 using vhci_hcd [ 77.557278][ T6341] vhci_hcd: connection reset by peer [ 77.562416][ T12] vhci_hcd vhci_hcd.2: stop threads [ 77.570064][ T12] vhci_hcd vhci_hcd.2: release socket [ 77.572073][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 77.695768][ T6360] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 77.697945][ T6360] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 77.700658][ T6360] vhci_hcd vhci_hcd.0: Device attached [ 77.764717][ T6361] vhci_hcd: connection closed [ 77.768267][ T1191] vhci_hcd vhci_hcd.3: stop threads [ 77.771914][ T1191] vhci_hcd vhci_hcd.3: release socket [ 77.778804][ T1191] vhci_hcd vhci_hcd.3: disconnect device [ 79.122535][ T6384] evm: overlay not supported [ 79.434665][ T6402] netlink: 'syz.2.91': attribute type 1 has an invalid length. [ 79.447331][ T6402] 8021q: adding VLAN 0 to HW filter on device bond1 [ 79.463718][ T6402] bond1: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 79.468358][ T6402] bond1: entered allmulticast mode [ 79.479311][ T6402] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 79.491057][ T6402] netlink: 28 bytes leftover after parsing attributes in process `syz.2.91'. [ 79.494747][ T6402] bond1: left allmulticast mode [ 79.496683][ T6402] 8021q: adding VLAN 0 to HW filter on device bond1 [ 79.513587][ T4271] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 79.543945][ T6406] netlink: 12 bytes leftover after parsing attributes in process `syz.2.92'. [ 79.547514][ T6406] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.622783][ T1143] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 79.625756][ T1143] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 79.638315][ T6407] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 79.641154][ T6407] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 79.645134][ T6407] vhci_hcd vhci_hcd.0: Device attached [ 79.732794][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 79.742299][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 79.862824][ T1191] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 79.866070][ T1191] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 79.922915][ T143] usb 38-1: SetAddress Request (2) to port 0 [ 79.925809][ T143] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 79.932967][ T6408] vhci_hcd: connection closed [ 79.933336][ T1191] vhci_hcd vhci_hcd.0: stop threads [ 79.937894][ T1191] vhci_hcd vhci_hcd.0: release socket [ 79.941378][ T1191] vhci_hcd vhci_hcd.0: disconnect device [ 79.973723][ T1191] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 79.976315][ T1191] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 80.083652][ T1143] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 80.150113][ T6418] capability: warning: `syz.3.94' uses 32-bit capabilities (legacy support in use) [ 80.953360][ T6435] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 80.955558][ T6435] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 80.966834][ T6435] vhci_hcd vhci_hcd.0: Device attached [ 80.990609][ T6434] pim6reg: entered allmulticast mode [ 81.011911][ T40] audit: type=1326 audit(1767251326.815:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6430 comm="syz.2.100" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 81.022180][ T40] audit: type=1326 audit(1767251326.815:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6430 comm="syz.2.100" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 81.032476][ T40] audit: type=1326 audit(1767251326.815:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6430 comm="syz.2.100" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 81.041837][ T40] audit: type=1326 audit(1767251326.815:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6430 comm="syz.2.100" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 81.051057][ T40] audit: type=1326 audit(1767251326.815:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6430 comm="syz.2.100" exe="/syz-executor" sig=0 arch=40000003 syscall=369 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 81.060458][ T40] audit: type=1326 audit(1767251326.815:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6430 comm="syz.2.100" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 81.069713][ T40] audit: type=1326 audit(1767251326.815:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6430 comm="syz.2.100" exe="/syz-executor" sig=0 arch=40000003 syscall=437 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 81.078948][ T40] audit: type=1326 audit(1767251326.825:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6430 comm="syz.2.100" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 81.088209][ T40] audit: type=1326 audit(1767251326.825:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6430 comm="syz.2.100" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 81.097365][ T40] audit: type=1326 audit(1767251326.825:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6430 comm="syz.2.100" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 81.625085][ T6438] vhci_hcd: connection reset by peer [ 81.629369][ T46] vhci_hcd vhci_hcd.0: stop threads [ 81.631136][ T46] vhci_hcd vhci_hcd.0: release socket [ 81.633027][ T46] vhci_hcd vhci_hcd.0: disconnect device [ 82.182778][ T6007] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 82.217536][ T6463] block device autoloading is deprecated and will be removed. [ 82.517702][ T1147] Bluetooth: hci4: Frame reassembly failed (-84) [ 82.520800][ T4271] Bluetooth: hci4: Frame reassembly failed (-84) [ 82.692548][ T6468] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 82.695348][ T6468] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 82.699284][ T6468] vhci_hcd vhci_hcd.0: Device attached [ 82.982798][ T6060] usb 44-1: SetAddress Request (2) to port 0 [ 82.985457][ T6060] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 83.056089][ T6471] vhci_hcd: connection reset by peer [ 83.058143][ T1147] vhci_hcd vhci_hcd.3: stop threads [ 83.059788][ T1147] vhci_hcd vhci_hcd.3: release socket [ 83.061659][ T1147] vhci_hcd vhci_hcd.3: disconnect device [ 83.337783][ T6475] ======================================================= [ 83.337783][ T6475] WARNING: The mand mount option has been deprecated and [ 83.337783][ T6475] and is ignored by this kernel. Remove the mand [ 83.337783][ T6475] option from the mount to silence this warning. [ 83.337783][ T6475] ======================================================= [ 83.671401][ T6480] FAULT_INJECTION: forcing a failure. [ 83.671401][ T6480] name failslab, interval 1, probability 0, space 0, times 0 [ 83.677516][ T6480] CPU: 2 UID: 0 PID: 6480 Comm: syz.3.110 Tainted: G L syzkaller #0 PREEMPT(full) [ 83.677537][ T6480] Tainted: [L]=SOFTLOCKUP [ 83.677540][ T6480] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 83.677559][ T6480] Call Trace: [ 83.677563][ T6480] [ 83.677567][ T6480] dump_stack_lvl+0x16c/0x1f0 [ 83.677607][ T6480] should_fail_ex+0x512/0x640 [ 83.677625][ T6480] ? __kmalloc_cache_noprof+0x5f/0x800 [ 83.677641][ T6480] should_failslab+0xc2/0x120 [ 83.677658][ T6480] __kmalloc_cache_noprof+0x80/0x800 [ 83.677670][ T6480] ? __lock_acquire+0x436/0x2890 [ 83.677682][ T6480] ? get_mountpoint+0x174/0x4f0 [ 83.677697][ T6480] ? get_mountpoint+0x174/0x4f0 [ 83.677710][ T6480] get_mountpoint+0x174/0x4f0 [ 83.677724][ T6480] attach_recursive_mnt+0x26f/0x1b30 [ 83.677735][ T6480] ? find_held_lock+0x2b/0x80 [ 83.677752][ T6480] ? __pfx_attach_recursive_mnt+0x10/0x10 [ 83.677762][ T6480] ? do_raw_spin_unlock+0x172/0x230 [ 83.677776][ T6480] ? _raw_spin_unlock+0x28/0x50 [ 83.677797][ T6480] ? graft_tree+0x1a2/0x240 [ 83.677806][ T6480] graft_tree+0x1a2/0x240 [ 83.677816][ T6480] path_mount+0x19eb/0x23a0 [ 83.677826][ T6480] ? rcu_is_watching+0x12/0xc0 [ 83.677845][ T6480] ? __pfx_path_mount+0x10/0x10 [ 83.677856][ T6480] ? kmem_cache_free+0x2d8/0x770 [ 83.677870][ T6480] ? putname+0xf5/0x1a0 [ 83.677883][ T6480] ? putname+0xf5/0x1a0 [ 83.677895][ T6480] ? __ia32_sys_mount+0x291/0x310 [ 83.677906][ T6480] __ia32_sys_mount+0x291/0x310 [ 83.677917][ T6480] ? __pfx___ia32_sys_mount+0x10/0x10 [ 83.677929][ T6480] ? do_user_addr_fault+0x843/0x1370 [ 83.677947][ T6480] __do_fast_syscall_32+0xe8/0x680 [ 83.677967][ T6480] do_fast_syscall_32+0x32/0x80 [ 83.677985][ T6480] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 83.677999][ T6480] RIP: 0023:0xf7f55579 [ 83.678009][ T6480] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 83.678020][ T6480] RSP: 002b:00000000f544655c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 83.678031][ T6480] RAX: ffffffffffffffda RBX: 0000000080000100 RCX: 0000000080000180 [ 83.678039][ T6480] RDX: 0000000000000000 RSI: 00000000018e5811 RDI: 0000000000000000 [ 83.678045][ T6480] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 83.678051][ T6480] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 83.678057][ T6480] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 83.678072][ T6480] [ 84.182320][ T4271] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.246859][ T4271] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.321899][ T4271] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.384717][ T4271] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.523479][ T5950] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 84.562605][ T4271] bridge_slave_1: left allmulticast mode [ 84.565688][ T4271] bridge_slave_1: left promiscuous mode [ 84.569279][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.593195][ T4271] bridge_slave_0: left allmulticast mode [ 84.595413][ T4271] bridge_slave_0: left promiscuous mode [ 84.597725][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.612919][ T1143] net_ratelimit: 78 callbacks suppressed [ 84.612937][ T1143] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 84.632862][ T1040] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 84.652810][ T1040] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 84.673008][ T1143] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 84.692820][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 84.713209][ T1040] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 84.733867][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 84.762797][ T1040] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 84.778495][ T5945] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.782084][ T5945] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.786719][ T5945] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.790646][ T5945] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.792791][ T1040] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 84.793887][ T5945] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.823795][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 84.957032][ T4271] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.963512][ T4271] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.967278][ T4271] bond0 (unregistering): Released all slaves [ 85.002821][ T143] usb 38-1: device descriptor read/8, error -110 [ 85.413457][ T143] usb usb38-port1: attempt power cycle [ 85.765592][ T6486] chnl_net:caif_netlink_parms(): no params data found [ 85.846397][ T4271] hsr_slave_0: left promiscuous mode [ 85.849202][ T4271] hsr_slave_1: left promiscuous mode [ 85.851905][ T4271] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.855502][ T4271] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.859338][ T4271] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.862398][ T4271] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.869121][ T6515] fuse: Unknown parameter 'æ0x0000000000000006' [ 85.874512][ T4271] veth1_macvtap: left promiscuous mode [ 85.877126][ T4271] veth0_macvtap: left promiscuous mode [ 85.879076][ T4271] veth1_vlan: left promiscuous mode [ 85.880937][ T4271] veth0_vlan: left promiscuous mode [ 85.908286][ T6515] usb usb8: usbfs: process 6515 (syz.1.115) did not claim interface 0 before use [ 85.983439][ T143] usb usb38-port1: unable to enumerate USB device [ 86.154343][ T4271] team0 (unregistering): Port device team_slave_1 removed [ 86.176983][ T4271] team0 (unregistering): Port device team_slave_0 removed [ 86.194848][ T73] cfg80211: failed to load regulatory.db [ 86.452776][ T6007] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 86.627842][ T6007] usb 7-1: Using ep0 maxpacket: 8 [ 86.631057][ T6486] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.640630][ T6486] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.646087][ T6007] usb 7-1: device descriptor read/all, error -61 [ 86.656473][ T6486] bridge_slave_0: entered allmulticast mode [ 86.661437][ T6486] bridge_slave_0: entered promiscuous mode [ 86.669577][ T6486] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.675371][ T6486] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.678506][ T6486] bridge_slave_1: entered allmulticast mode [ 86.681876][ T6486] bridge_slave_1: entered promiscuous mode [ 86.712578][ T6486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.721223][ T6486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.756251][ T6486] team0: Port device team_slave_0 added [ 86.759338][ T6486] team0: Port device team_slave_1 added [ 86.772055][ T6486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.774857][ T6486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.783080][ T6007] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 86.786812][ T6486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.791510][ T6486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.794036][ T6486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.806584][ T6486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.833894][ T5945] Bluetooth: hci3: command tx timeout [ 86.839876][ T6486] hsr_slave_0: entered promiscuous mode [ 86.842467][ T6486] hsr_slave_1: entered promiscuous mode [ 86.844733][ T6486] debugfs: 'hsr0' already exists in 'hsr' [ 86.846616][ T6486] Cannot create hsr debugfs directory [ 86.922795][ T6007] usb 7-1: device descriptor read/64, error -71 [ 86.956469][ T6486] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 86.960641][ T6486] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 86.964819][ T6486] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 86.969010][ T6486] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.006962][ T6486] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.009474][ T6486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.011292][ T6546] netlink: 'syz.0.121': attribute type 10 has an invalid length. [ 87.012487][ T6486] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.016714][ T6486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.029049][ T6546] batman_adv: batadv0: Adding interface: team0 [ 87.031132][ T6546] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.033115][ T6007] usb usb7-port1: attempt power cycle [ 87.038896][ T6546] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 87.060651][ T6546] netlink: 'syz.0.121': attribute type 10 has an invalid length. [ 87.063254][ T6546] netlink: 2 bytes leftover after parsing attributes in process `syz.0.121'. [ 87.067843][ T6546] team0: entered promiscuous mode [ 87.069528][ T6546] team_slave_0: entered promiscuous mode [ 87.071459][ T6546] team_slave_1: entered promiscuous mode [ 87.077784][ T6546] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.080686][ T6546] batman_adv: batadv0: Interface activated: team0 [ 87.083045][ T6546] batman_adv: batadv0: Interface deactivated: team0 [ 87.085223][ T6546] batman_adv: batadv0: Removing interface: team0 [ 87.088257][ T6546] bridge0: port 3(team0) entered blocking state [ 87.090100][ T6546] bridge0: port 3(team0) entered disabled state [ 87.092248][ T6546] team0: entered allmulticast mode [ 87.094072][ T6546] team_slave_0: entered allmulticast mode [ 87.096011][ T6546] team_slave_1: entered allmulticast mode [ 87.097991][ T6546] vlan0: entered allmulticast mode [ 87.099716][ T6546] veth0_vlan: entered allmulticast mode [ 87.106485][ T6546] bridge0: port 3(team0) entered blocking state [ 87.108798][ T6546] bridge0: port 3(team0) entered forwarding state [ 87.138248][ T6486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.145757][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.148748][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.159588][ T6486] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.166193][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.168557][ T4271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.189439][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.191820][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.327679][ T6486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.373972][ T6007] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 87.393668][ T6007] usb 7-1: device descriptor read/8, error -71 [ 87.486279][ T6486] veth0_vlan: entered promiscuous mode [ 87.491098][ T6486] veth1_vlan: entered promiscuous mode [ 87.507162][ T6486] veth0_macvtap: entered promiscuous mode [ 87.511088][ T6486] veth1_macvtap: entered promiscuous mode [ 87.522240][ T6486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.531520][ T6486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.539633][ T92] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.544142][ T92] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.547061][ T92] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.551894][ T92] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.584200][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.587075][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.618875][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.622357][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.642744][ T6007] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 87.663367][ T6007] usb 7-1: device descriptor read/8, error -71 [ 87.773390][ T6007] usb usb7-port1: unable to enumerate USB device [ 88.005017][ T6589] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 88.007117][ T6589] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 88.009868][ T6589] vhci_hcd vhci_hcd.0: Device attached [ 88.032865][ T6060] usb 44-1: device descriptor read/8, error -110 [ 88.182796][ T6026] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 88.242786][ T6026] usb 45-1: new full-speed USB device number 2 using vhci_hcd [ 88.300775][ T6596] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 88.304726][ T6597] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 88.447060][ T6060] usb usb44-port1: attempt power cycle [ 88.563620][ T6590] vhci_hcd: connection reset by peer [ 88.566597][ T92] vhci_hcd vhci_hcd.4: stop threads [ 88.568863][ T92] vhci_hcd vhci_hcd.4: release socket [ 88.572739][ T92] vhci_hcd vhci_hcd.4: disconnect device [ 88.811570][ T6618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 88.866678][ T6618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 88.912818][ T5945] Bluetooth: hci3: command tx timeout [ 89.023532][ T6060] usb usb44-port1: unable to enumerate USB device [ 89.663164][ T1222] net_ratelimit: 138 callbacks suppressed [ 89.663176][ T1222] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 89.668785][ T1222] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 89.783485][ T4271] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 89.822904][ T46] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 89.827173][ T6636] mmap: syz.0.136 (6636) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 89.831685][ T92] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.847634][ T4271] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 89.893199][ T46] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 89.896755][ T46] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 89.979462][ T92] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.003271][ T4271] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 90.007646][ T4271] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 90.033565][ T5950] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.038127][ T5950] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.042306][ T5950] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.049423][ T5950] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.052917][ T5950] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.073585][ T92] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.124802][ T46] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 90.133164][ T6060] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 90.166351][ T92] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.178736][ T6654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.226471][ T6651] chnl_net:caif_netlink_parms(): no params data found [ 90.236630][ T6658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.292799][ T6060] usb 9-1: Using ep0 maxpacket: 8 [ 90.297840][ T6060] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 90.302587][ T6060] usb 9-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 90.314356][ T6651] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.314854][ T6060] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 90.316790][ T6651] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.320646][ T6060] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.326412][ T6651] bridge_slave_0: entered allmulticast mode [ 90.328870][ T6060] usbtmc 9-1:16.0: bulk endpoints not found [ 90.329262][ T6651] bridge_slave_0: entered promiscuous mode [ 90.342216][ T6651] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.362796][ T6651] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.365403][ T6651] bridge_slave_1: entered allmulticast mode [ 90.374892][ T6651] bridge_slave_1: entered promiscuous mode [ 90.424148][ T6651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.428882][ T6651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.444893][ T92] bridge_slave_1: left allmulticast mode [ 90.446925][ T92] bridge_slave_1: left promiscuous mode [ 90.448855][ T92] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.454215][ T92] bridge_slave_0: left allmulticast mode [ 90.456063][ T92] bridge_slave_0: left promiscuous mode [ 90.458017][ T92] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.664816][ T92] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.669416][ T92] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.673774][ T92] bond0 (unregistering): Released all slaves [ 90.694444][ T6651] team0: Port device team_slave_0 added [ 90.700370][ T6651] team0: Port device team_slave_1 added [ 90.719060][ T6651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.721577][ T6651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.730955][ T6651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.735699][ T6651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.737937][ T6651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.747225][ T6651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.823814][ T6651] hsr_slave_0: entered promiscuous mode [ 90.826674][ T6651] hsr_slave_1: entered promiscuous mode [ 90.828854][ T6651] debugfs: 'hsr0' already exists in 'hsr' [ 90.830733][ T6651] Cannot create hsr debugfs directory [ 90.995928][ T5945] Bluetooth: hci3: command tx timeout [ 90.998896][ T6651] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 91.015784][ T6651] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 91.043698][ T92] hsr_slave_0: left promiscuous mode [ 91.047506][ T92] hsr_slave_1: left promiscuous mode [ 91.050883][ T92] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.054253][ T92] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.060521][ T92] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.064606][ T92] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.075779][ T92] veth1_macvtap: left promiscuous mode [ 91.077688][ T92] veth0_macvtap: left promiscuous mode [ 91.079853][ T92] veth1_vlan: left promiscuous mode [ 91.082172][ T92] veth0_vlan: left promiscuous mode [ 91.389041][ T92] team0 (unregistering): Port device team_slave_1 removed [ 91.414956][ T92] team0 (unregistering): Port device team_slave_0 removed [ 91.616267][ T6651] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 91.624179][ T6651] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 91.754937][ T6651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.772153][ T6651] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.780318][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.782805][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.789394][ T1191] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.791831][ T1191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.999657][ T6651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.123219][ T5945] Bluetooth: hci2: command tx timeout [ 92.215939][ T6651] veth0_vlan: entered promiscuous mode [ 92.221351][ T6651] veth1_vlan: entered promiscuous mode [ 92.258169][ T6651] veth0_macvtap: entered promiscuous mode [ 92.265724][ T6651] veth1_macvtap: entered promiscuous mode [ 92.276955][ T6651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.291220][ T6651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.300862][ T92] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.311242][ T92] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.317871][ T92] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.325494][ T92] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.372276][ T92] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.375659][ T92] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.389958][ T1191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.393226][ T1191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.455564][ T6726] overlayfs: overlapping lowerdir path [ 92.459905][ T6726] overlayfs: failed to resolve './file0': -2 [ 92.523634][ T6732] FAULT_INJECTION: forcing a failure. [ 92.523634][ T6732] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 92.528216][ T6732] CPU: 3 UID: 0 PID: 6732 Comm: syz.5.149 Tainted: G L syzkaller #0 PREEMPT(full) [ 92.528235][ T6732] Tainted: [L]=SOFTLOCKUP [ 92.528238][ T6732] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 92.528245][ T6732] Call Trace: [ 92.528250][ T6732] [ 92.528255][ T6732] dump_stack_lvl+0x16c/0x1f0 [ 92.528276][ T6732] should_fail_ex+0x512/0x640 [ 92.528291][ T6732] _copy_to_user+0x32/0xd0 [ 92.528305][ T6732] simple_read_from_buffer+0xcb/0x170 [ 92.528322][ T6732] proc_fail_nth_read+0x197/0x240 [ 92.528341][ T6732] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 92.528359][ T6732] ? rw_verify_area+0xcf/0x6c0 [ 92.528373][ T6732] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 92.528391][ T6732] vfs_read+0x1e4/0xcf0 [ 92.528407][ T6732] ? __pfx___mutex_lock+0x10/0x10 [ 92.528425][ T6732] ? __pfx_vfs_read+0x10/0x10 [ 92.528438][ T6732] ? find_held_lock+0x2b/0x80 [ 92.528456][ T6732] ? __fget_files+0x20e/0x3c0 [ 92.528476][ T6732] ksys_read+0x12a/0x250 [ 92.528490][ T6732] ? __pfx_ksys_read+0x10/0x10 [ 92.528506][ T6732] ? __do_sys_memfd_create+0x3fc/0xba0 [ 92.528521][ T6732] __do_fast_syscall_32+0xe8/0x680 [ 92.528540][ T6732] do_fast_syscall_32+0x32/0x80 [ 92.528557][ T6732] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 92.528571][ T6732] RIP: 0023:0xf707d579 [ 92.528580][ T6732] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 92.528590][ T6732] RSP: 002b:00000000f546d590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 92.528601][ T6732] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f546d620 [ 92.528608][ T6732] RDX: 000000000000000f RSI: 00000000f7416ff4 RDI: 0000000000000000 [ 92.528614][ T6732] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 92.528619][ T6732] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 92.528625][ T6732] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 92.528639][ T6732] [ 92.688837][ T6736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.748925][ T6740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.796841][ T6739] trusted_key: syz.5.150 sent an empty control message without MSG_MORE. [ 92.853343][ T73] usb 9-1: USB disconnect, device number 2 [ 93.072738][ T5945] Bluetooth: hci3: command tx timeout [ 93.384270][ T6752] Driver unsupported XDP return value 0 on prog (id 31) dev N/A, expect packet loss! [ 93.393551][ T6026] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 94.093984][ T6783] netlink: 'syz.2.161': attribute type 29 has an invalid length. [ 94.099925][ T6783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.161'. [ 94.105747][ T6783] veth0_to_bridge: entered promiscuous mode [ 94.202818][ T5945] Bluetooth: hci2: command tx timeout [ 94.202898][ T24] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 94.362766][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 94.366532][ T24] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 94.370762][ T24] usb 9-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.376907][ T24] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 94.380578][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.393875][ T24] usbtmc 9-1:16.0: bulk endpoints not found [ 94.742812][ T13] net_ratelimit: 131 callbacks suppressed [ 94.742830][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 94.751970][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 94.846169][ T6777] veth0_to_bridge: left promiscuous mode [ 94.862900][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 94.865732][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 94.979693][ T6803] overlayfs: failed to resolve './bus': -2 [ 94.979788][ T6802] overlayfs: failed to resolve './bus': -2 [ 94.983019][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 94.987702][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 95.102767][ T1222] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 95.105745][ T1222] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 95.222919][ T1222] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 95.225700][ T1222] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 95.577431][ T6812] FAULT_INJECTION: forcing a failure. [ 95.577431][ T6812] name failslab, interval 1, probability 0, space 0, times 0 [ 95.582720][ T6812] CPU: 3 UID: 0 PID: 6812 Comm: syz.2.168 Tainted: G L syzkaller #0 PREEMPT(full) [ 95.582746][ T6812] Tainted: [L]=SOFTLOCKUP [ 95.582751][ T6812] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 95.582762][ T6812] Call Trace: [ 95.582768][ T6812] [ 95.582774][ T6812] dump_stack_lvl+0x16c/0x1f0 [ 95.582803][ T6812] should_fail_ex+0x512/0x640 [ 95.582821][ T6812] ? __kmalloc_cache_noprof+0x5f/0x800 [ 95.582842][ T6812] should_failslab+0xc2/0x120 [ 95.582867][ T6812] __kmalloc_cache_noprof+0x80/0x800 [ 95.582885][ T6812] ? v9fs_init_fs_context+0x47/0x590 [ 95.582915][ T6812] ? v9fs_init_fs_context+0x47/0x590 [ 95.582936][ T6812] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 95.582959][ T6812] v9fs_init_fs_context+0x47/0x590 [ 95.582981][ T6812] ? __pfx_v9fs_init_fs_context+0x10/0x10 [ 95.583002][ T6812] alloc_fs_context+0x629/0xf50 [ 95.583023][ T6812] path_mount+0xe21/0x23a0 [ 95.583039][ T6812] ? rcu_is_watching+0x12/0xc0 [ 95.583064][ T6812] ? __pfx_path_mount+0x10/0x10 [ 95.583080][ T6812] ? kmem_cache_free+0x2d8/0x770 [ 95.583100][ T6812] ? putname+0xf5/0x1a0 [ 95.583118][ T6812] ? putname+0xf5/0x1a0 [ 95.583135][ T6812] ? __ia32_sys_mount+0x291/0x310 [ 95.583151][ T6812] __ia32_sys_mount+0x291/0x310 [ 95.583167][ T6812] ? __pfx___ia32_sys_mount+0x10/0x10 [ 95.583184][ T6812] ? do_user_addr_fault+0x843/0x1370 [ 95.583207][ T6812] __do_fast_syscall_32+0xe8/0x680 [ 95.583234][ T6812] do_fast_syscall_32+0x32/0x80 [ 95.583266][ T6812] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 95.583287][ T6812] RIP: 0023:0xf70ed579 [ 95.583300][ T6812] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 95.583315][ T6812] RSP: 002b:00000000f54dd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 95.583331][ T6812] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800000c0 [ 95.583341][ T6812] RDX: 0000000080004500 RSI: 0000000000000000 RDI: 0000000080000100 [ 95.583351][ T6812] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 95.583360][ T6812] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 95.583367][ T6812] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 95.583388][ T6812] [ 95.711930][ T6814] netlink: 56 bytes leftover after parsing attributes in process `syz.5.169'. [ 96.874432][ T5950] Bluetooth: hci2: command tx timeout [ 96.922611][ T143] usb 9-1: USB disconnect, device number 3 [ 97.342242][ T6853] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 97.347579][ T6853] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 98.264794][ T6835] bridge_slave_0: left allmulticast mode [ 98.266772][ T6835] bridge_slave_0: left promiscuous mode [ 98.268783][ T6835] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.297244][ T6835] bridge_slave_1: left allmulticast mode [ 98.302171][ T6835] bridge_slave_1: left promiscuous mode [ 98.333646][ T6835] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.379833][ T6835] bond0: (slave bond_slave_0): Releasing backup interface [ 98.389984][ T6835] bond0: (slave bond_slave_1): Releasing backup interface [ 98.416675][ T6835] team0: Port device team_slave_0 removed [ 98.428260][ T6835] team0: Port device team_slave_1 removed [ 98.430789][ T6835] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.435382][ T6835] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.445807][ T6835] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.452046][ T6835] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.599401][ T6880] : renamed from bond_slave_0 (while UP) [ 98.922720][ T5950] Bluetooth: hci2: command tx timeout [ 99.082754][ T6060] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 99.232855][ T6060] usb 9-1: Using ep0 maxpacket: 8 [ 99.239516][ T6060] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 99.244912][ T6060] usb 9-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 99.250583][ T6060] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 99.253888][ T6060] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.263207][ T6060] usbtmc 9-1:16.0: bulk endpoints not found [ 99.449214][ T53] hid-generic 0000:0000:0003.0002: unknown main item tag 0x6 [ 99.461673][ T53] hid-generic 0000:0000:0003.0002: unexpected long global item [ 99.466676][ T53] hid-generic 0000:0000:0003.0002: probe with driver hid-generic failed with error -22 [ 99.675339][ T6913] netlink: 'syz.2.183': attribute type 1 has an invalid length. [ 99.678633][ T6913] netlink: 280 bytes leftover after parsing attributes in process `syz.2.183'. [ 99.685905][ T6913] netlink: 16 bytes leftover after parsing attributes in process `syz.2.183'. [ 99.702754][ T6060] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 99.803205][ T1143] net_ratelimit: 95 callbacks suppressed [ 99.804411][ T1143] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 99.811771][ T1143] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 99.932782][ T1143] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 99.936324][ T1143] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 100.031718][ T6060] usb 5-1: config 0 has no interfaces? [ 100.036233][ T6060] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 100.039916][ T6060] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.043225][ T1147] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 100.046889][ T1147] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 100.050579][ T6060] usb 5-1: config 0 descriptor?? [ 100.152886][ T1040] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 100.156546][ T1040] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 100.275654][ T1147] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 100.278915][ T1147] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 100.832786][ T73] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 100.982767][ T73] usb 10-1: Using ep0 maxpacket: 8 [ 100.986372][ T73] usb 10-1: config 0 interface 0 has no altsetting 0 [ 100.989721][ T73] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 100.993968][ T73] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.000101][ T73] usb 10-1: config 0 descriptor?? [ 101.440762][ T73] mcp2221 0003:04D8:00DD.0003: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 101.602992][ T76] usb 5-1: USB disconnect, device number 3 [ 101.692480][ T73] usb 10-1: USB disconnect, device number 2 [ 101.706520][ T5950] Bluetooth: Unexpected continuation frame (len 140) [ 101.808954][ T6938] input: syz1 as /devices/virtual/input/input7 [ 101.834726][ T6937] FAULT_INJECTION: forcing a failure. [ 101.834726][ T6937] name failslab, interval 1, probability 0, space 0, times 0 [ 101.837751][ T6007] usb 9-1: USB disconnect, device number 4 [ 101.840506][ T6937] CPU: 1 UID: 0 PID: 6937 Comm: syz.0.188 Tainted: G L syzkaller #0 PREEMPT(full) [ 101.840524][ T6937] Tainted: [L]=SOFTLOCKUP [ 101.840528][ T6937] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 101.840534][ T6937] Call Trace: [ 101.840538][ T6937] [ 101.840542][ T6937] dump_stack_lvl+0x16c/0x1f0 [ 101.840564][ T6937] should_fail_ex+0x512/0x640 [ 101.840576][ T6937] ? fs_reclaim_acquire+0xae/0x150 [ 101.840595][ T6937] should_failslab+0xc2/0x120 [ 101.840612][ T6937] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 101.840629][ T6937] ? kasprintf+0xc7/0x100 [ 101.840644][ T6937] ? kvasprintf+0xbc/0x150 [ 101.840655][ T6937] kvasprintf+0xbc/0x150 [ 101.840666][ T6937] ? __pfx_kvasprintf+0x10/0x10 [ 101.840679][ T6937] ? __pfx_vsnprintf+0x10/0x10 [ 101.840697][ T6937] kasprintf+0xc7/0x100 [ 101.840709][ T6937] ? __pfx_kasprintf+0x10/0x10 [ 101.840721][ T6937] ? __pfx_add_uevent_var+0x10/0x10 [ 101.840734][ T6937] ? __pfx_vsnprintf+0x10/0x10 [ 101.840750][ T6937] ? __pfx_input_devnode+0x10/0x10 [ 101.840761][ T6937] device_get_devnode+0x166/0x2c0 [ 101.840779][ T6937] dev_uevent+0x4c6/0x8c0 [ 101.840794][ T6937] ? __pfx_dev_uevent+0x10/0x10 [ 101.840811][ T6937] ? __asan_memcpy+0x3c/0x60 [ 101.840824][ T6937] ? kobject_get_path+0x8e/0x2d0 [ 101.840840][ T6937] ? kobject_uevent_env+0x498/0x1920 [ 101.840851][ T6937] ? __pfx_dev_uevent+0x10/0x10 [ 101.840867][ T6937] kobject_uevent_env+0x6ac/0x1920 [ 101.840881][ T6937] ? bus_to_subsys+0x131/0x160 [ 101.840900][ T6937] device_del+0x623/0x9f0 [ 101.840913][ T6937] ? __pfx_device_del+0x10/0x10 [ 101.840929][ T6937] cdev_device_del+0x1d/0x110 [ 101.840947][ T6937] evdev_disconnect+0x40/0xb0 [ 101.840961][ T6937] __input_unregister_device+0x226/0x4d0 [ 101.840979][ T6937] input_unregister_device+0xb9/0x100 [ 101.840996][ T6937] uinput_destroy_device+0x1f4/0x260 [ 101.841009][ T6937] uinput_ioctl_handler.isra.0+0x8a9/0x1df0 [ 101.841021][ T6937] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 101.841034][ T6937] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 101.841048][ T6937] ? find_held_lock+0x2b/0x80 [ 101.841067][ T6937] ? fput+0x70/0xf0 [ 101.841077][ T6937] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 101.841095][ T6937] ? __pfx_uinput_compat_ioctl+0x10/0x10 [ 101.841106][ T6937] __ia32_compat_sys_ioctl+0x242/0x370 [ 101.841121][ T6937] __do_fast_syscall_32+0xe8/0x680 [ 101.841140][ T6937] do_fast_syscall_32+0x32/0x80 [ 101.841157][ T6937] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 101.841170][ T6937] RIP: 0023:0xf709d579 [ 101.841179][ T6937] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 101.841190][ T6937] RSP: 002b:00000000f548d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 101.841200][ T6937] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000005502 [ 101.841206][ T6937] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 101.841212][ T6937] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 101.841218][ T6937] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 101.841224][ T6937] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 101.841242][ T6937] [ 102.024255][ T6944] FAULT_INJECTION: forcing a failure. [ 102.024255][ T6944] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.028607][ T6944] CPU: 1 UID: 0 PID: 6944 Comm: syz.2.191 Tainted: G L syzkaller #0 PREEMPT(full) [ 102.028625][ T6944] Tainted: [L]=SOFTLOCKUP [ 102.028628][ T6944] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 102.028635][ T6944] Call Trace: [ 102.028639][ T6944] [ 102.028643][ T6944] dump_stack_lvl+0x16c/0x1f0 [ 102.028663][ T6944] should_fail_ex+0x512/0x640 [ 102.028678][ T6944] _copy_from_user+0x2e/0xd0 [ 102.028691][ T6944] get_compat_msghdr+0xa7/0x170 [ 102.028706][ T6944] ? __pfx_get_compat_msghdr+0x10/0x10 [ 102.028724][ T6944] ___sys_sendmsg+0x1ae/0x1d0 [ 102.028739][ T6944] ? __pfx____sys_sendmsg+0x10/0x10 [ 102.028759][ T6944] ? find_held_lock+0x2b/0x80 [ 102.028781][ T6944] __sys_sendmsg+0x16d/0x220 [ 102.028795][ T6944] ? __pfx___sys_sendmsg+0x10/0x10 [ 102.028814][ T6944] ? do_user_addr_fault+0x843/0x1370 [ 102.028829][ T6944] __do_fast_syscall_32+0xe8/0x680 [ 102.028848][ T6944] do_fast_syscall_32+0x32/0x80 [ 102.028865][ T6944] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 102.028879][ T6944] RIP: 0023:0xf70ed579 [ 102.028887][ T6944] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 102.028897][ T6944] RSP: 002b:00000000f54dd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 102.028909][ T6944] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 102.028915][ T6944] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 102.028921][ T6944] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 102.028927][ T6944] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 102.028933][ T6944] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 102.028946][ T6944] [ 102.031178][ T6946] Invalid ELF header len 8 [ 102.290742][ T6967] netlink: 'syz.0.196': attribute type 29 has an invalid length. [ 102.297611][ T6967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.196'. [ 102.327528][ T6967] veth0_to_bridge: entered promiscuous mode [ 102.396644][ T6973] overlayfs: missing 'lowerdir' [ 103.229382][ T6959] veth0_to_bridge: left promiscuous mode [ 103.343856][ T6998] netlink: 24 bytes leftover after parsing attributes in process `syz.2.202'. [ 103.746043][ T7024] FAULT_INJECTION: forcing a failure. [ 103.746043][ T7024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.751076][ T7024] CPU: 0 UID: 0 PID: 7024 Comm: syz.4.208 Tainted: G L syzkaller #0 PREEMPT(full) [ 103.751094][ T7024] Tainted: [L]=SOFTLOCKUP [ 103.751097][ T7024] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 103.751104][ T7024] Call Trace: [ 103.751107][ T7024] [ 103.751112][ T7024] dump_stack_lvl+0x16c/0x1f0 [ 103.751132][ T7024] should_fail_ex+0x512/0x640 [ 103.751146][ T7024] _copy_from_user+0x2e/0xd0 [ 103.751159][ T7024] get_compat_msghdr+0xa7/0x170 [ 103.751173][ T7024] ? __pfx_get_compat_msghdr+0x10/0x10 [ 103.751191][ T7024] ___sys_sendmsg+0x1ae/0x1d0 [ 103.751212][ T7024] ? __pfx____sys_sendmsg+0x10/0x10 [ 103.751239][ T7024] ? find_held_lock+0x2b/0x80 [ 103.751272][ T7024] __sys_sendmsg+0x16d/0x220 [ 103.751292][ T7024] ? __pfx___sys_sendmsg+0x10/0x10 [ 103.751311][ T7024] ? do_user_addr_fault+0x843/0x1370 [ 103.751328][ T7024] __do_fast_syscall_32+0xe8/0x680 [ 103.751347][ T7024] do_fast_syscall_32+0x32/0x80 [ 103.751364][ T7024] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 103.751377][ T7024] RIP: 0023:0xf7f42579 [ 103.751386][ T7024] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 103.751396][ T7024] RSP: 002b:00000000f53b055c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 103.751406][ T7024] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000040 [ 103.751413][ T7024] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 103.751419][ T7024] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 103.751425][ T7024] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 103.751430][ T7024] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 103.751443][ T7024] [ 104.669779][ T7043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.728269][ T7043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.822834][ T92] net_ratelimit: 82 callbacks suppressed [ 104.822847][ T92] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 104.827668][ T92] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 104.933859][ T1222] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 104.936440][ T1222] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 105.043733][ T1143] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 105.046469][ T1143] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 105.154172][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 105.157475][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 105.244741][ T7009] Set syz1 is full, maxelem 65536 reached [ 105.274027][ T1143] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 105.366903][ T7049] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 105.367026][ T7045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.369128][ T7049] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 105.380057][ T7049] vhci_hcd vhci_hcd.0: Device attached [ 105.401850][ T7049] overlayfs: missing 'lowerdir' [ 105.427105][ T7045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.434833][ T7054] netlink: 16 bytes leftover after parsing attributes in process `syz.5.216'. [ 105.612768][ T6060] usb 45-1: new high-speed USB device number 3 using vhci_hcd [ 106.159241][ T7050] vhci_hcd: connection reset by peer [ 106.161773][ T1191] vhci_hcd vhci_hcd.4: stop threads [ 106.164366][ T1191] vhci_hcd vhci_hcd.4: release socket [ 106.166622][ T1191] vhci_hcd vhci_hcd.4: disconnect device [ 106.954239][ T7083] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.009033][ T7083] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.194537][ T7085] netlink: 56 bytes leftover after parsing attributes in process `syz.5.224'. [ 107.978146][ T7116] netlink: 'syz.2.229': attribute type 1 has an invalid length. [ 108.013955][ T7116] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 108.018335][ T7116] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 108.070305][ T7119] gretap1: entered promiscuous mode [ 108.196099][ T7119] bond2: (slave gretap1): making interface the new active one [ 108.199609][ T7119] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 108.227033][ T7120] netlink: 'syz.4.232': attribute type 29 has an invalid length. [ 108.241680][ T7120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.232'. [ 108.246525][ T7121] veth0_to_bridge: entered promiscuous mode [ 108.256688][ T7124] misc userio: Invalid payload size [ 108.278156][ T7116] netlink: 32 bytes leftover after parsing attributes in process `syz.2.229'. [ 108.302547][ T7116] macvlan2: entered promiscuous mode [ 108.305992][ T7116] macvlan2: entered allmulticast mode [ 108.308519][ T7116] bond2: entered promiscuous mode [ 108.311412][ T7116] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 108.331446][ T7116] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 108.337499][ T7116] bond2: left promiscuous mode [ 108.841215][ T7114] veth0_to_bridge: left promiscuous mode [ 108.935234][ T7139] netlink: 20 bytes leftover after parsing attributes in process `syz.4.239'. [ 108.955040][ T7143] netlink: 56 bytes leftover after parsing attributes in process `syz.5.241'. [ 109.112822][ T7148] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8 [ 109.345302][ T7155] netlink: 12 bytes leftover after parsing attributes in process `syz.0.245'. [ 109.761988][ T7166] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 109.764362][ T7166] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 109.768407][ T7166] vhci_hcd vhci_hcd.0: Device attached [ 109.773938][ T7167] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 109.776631][ T7159] bridge0: port 4(syz_tun) entered blocking state [ 109.778034][ T1143] vhci_hcd vhci_hcd.2: stop threads [ 109.779562][ T7159] bridge0: port 4(syz_tun) entered disabled state [ 109.781023][ T1143] vhci_hcd vhci_hcd.2: release socket [ 109.781035][ T1143] vhci_hcd vhci_hcd.2: disconnect device [ 109.793148][ T7159] syz_tun: entered allmulticast mode [ 109.799829][ T7159] syz_tun: entered promiscuous mode [ 109.803770][ T7159] bridge0: port 4(syz_tun) entered blocking state [ 109.806019][ T7159] bridge0: port 4(syz_tun) entered forwarding state [ 109.843605][ T1143] net_ratelimit: 84 callbacks suppressed [ 109.843618][ T1143] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 109.848964][ T1143] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 109.914307][ T7172] FAULT_INJECTION: forcing a failure. [ 109.914307][ T7172] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.918565][ T7172] CPU: 3 UID: 0 PID: 7172 Comm: syz.5.250 Tainted: G L syzkaller #0 PREEMPT(full) [ 109.918582][ T7172] Tainted: [L]=SOFTLOCKUP [ 109.918585][ T7172] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 109.918592][ T7172] Call Trace: [ 109.918596][ T7172] [ 109.918601][ T7172] dump_stack_lvl+0x16c/0x1f0 [ 109.918622][ T7172] should_fail_ex+0x512/0x640 [ 109.918637][ T7172] _copy_from_user+0x2e/0xd0 [ 109.918654][ T7172] move_addr_to_kernel+0x65/0x170 [ 109.918666][ T7172] __sys_connect+0xb1/0x160 [ 109.918677][ T7172] ? __pfx___sys_connect+0x10/0x10 [ 109.918697][ T7172] ? __pfx_ksys_write+0x10/0x10 [ 109.918714][ T7172] ? do_user_addr_fault+0x843/0x1370 [ 109.918729][ T7172] __ia32_sys_connect+0x71/0xb0 [ 109.918740][ T7172] ? lockdep_hardirqs_on+0x7c/0x110 [ 109.918756][ T7172] __do_fast_syscall_32+0xe8/0x680 [ 109.918774][ T7172] do_fast_syscall_32+0x32/0x80 [ 109.918791][ T7172] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 109.918805][ T7172] RIP: 0023:0xf707d579 [ 109.918813][ T7172] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 109.918824][ T7172] RSP: 002b:00000000f546d55c EFLAGS: 00000296 ORIG_RAX: 000000000000016a [ 109.918835][ T7172] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800001c0 [ 109.918841][ T7172] RDX: 000000000000000a RSI: 0000000000000000 RDI: 0000000000000000 [ 109.918847][ T7172] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 109.918853][ T7172] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 109.918859][ T7172] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 109.918872][ T7172] [ 109.982884][ T1049] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 109.985613][ T1049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 110.093726][ T1147] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 110.097721][ T1147] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 110.204121][ T1147] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 110.206705][ T1147] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 110.225985][ T7176] netlink: 'syz.5.251': attribute type 1 has an invalid length. [ 110.271255][ T7176] bond1: entered promiscuous mode [ 110.273190][ T7176] bond1: entered allmulticast mode [ 110.275569][ T7176] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.313073][ T1049] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 110.316894][ T1049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 110.457531][ T7182] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.559811][ T7182] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.645374][ T7182] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.707368][ T7182] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.742767][ T6060] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 110.786487][ T1143] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.796013][ T1143] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.805494][ T1143] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.815074][ T1147] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.196536][ T7194] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 111.198691][ T7194] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 111.201500][ T7194] vhci_hcd vhci_hcd.0: Device attached [ 111.256805][ T7184] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 111.408052][ T7200] fuse: Bad value for 'fd' [ 111.483032][ T6027] usb 42-1: SetAddress Request (6) to port 0 [ 111.485725][ T6027] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 112.002817][ T7195] vhci_hcd: connection reset by peer [ 112.004789][ T1147] vhci_hcd vhci_hcd.2: stop threads [ 112.007164][ T1147] vhci_hcd vhci_hcd.2: release socket [ 112.009514][ T1147] vhci_hcd vhci_hcd.2: disconnect device [ 112.357870][ T7212] netlink: 'syz.0.260': attribute type 29 has an invalid length. [ 112.361538][ T7212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.260'. [ 112.369460][ T7212] veth0_to_bridge: entered promiscuous mode [ 112.389940][ T7213] hub 8-0:1.0: USB hub found [ 112.392876][ T7213] hub 8-0:1.0: 1 port detected [ 112.823757][ T7215] netlink: 24 bytes leftover after parsing attributes in process `syz.2.261'. [ 113.040541][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 113.040552][ T40] audit: type=1800 audit(1767251358.885:42): pid=7221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.264" name="bus" dev="overlay" ino=488 res=0 errno=0 [ 113.106432][ T7209] veth0_to_bridge: left promiscuous mode [ 113.266049][ T7228] overlay: Unknown parameter 'obj_type' [ 113.381311][ T7229] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 113.383516][ T7229] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 113.386287][ T7229] vhci_hcd vhci_hcd.0: Device attached [ 113.418843][ T7235] netlink: 80 bytes leftover after parsing attributes in process `syz.4.269'. [ 113.424631][ T7235] netlink: 4 bytes leftover after parsing attributes in process `syz.4.269'. [ 113.474397][ T6505] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 113.632819][ T6505] usb 5-1: Using ep0 maxpacket: 8 [ 113.637155][ T6505] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 113.641310][ T6505] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.647045][ T6505] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 113.650747][ T6505] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.662866][ T24] usb 48-1: SetAddress Request (2) to port 0 [ 113.664764][ T6505] usbtmc 5-1:16.0: bulk endpoints not found [ 113.665309][ T24] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd [ 113.882854][ T7232] vhci_hcd: connection reset by peer [ 113.913595][ T4360] vhci_hcd vhci_hcd.5: stop threads [ 113.915574][ T4360] vhci_hcd vhci_hcd.5: release socket [ 113.917497][ T4360] vhci_hcd vhci_hcd.5: disconnect device [ 114.321733][ T7241] 8021q: VLANs not supported on vxcan1 [ 114.425346][ T7246] syzkaller0: entered promiscuous mode [ 114.427466][ T7246] syzkaller0: entered allmulticast mode [ 114.932770][ T12] net_ratelimit: 91 callbacks suppressed [ 114.932784][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 114.938067][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 115.026857][ T7274] netlink: 'syz.5.280': attribute type 29 has an invalid length. [ 115.029812][ T7274] netlink: 8 bytes leftover after parsing attributes in process `syz.5.280'. [ 115.035884][ T7274] veth0_to_bridge: entered promiscuous mode [ 115.043887][ T7191] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 115.047167][ T7191] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 115.153308][ T61] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 115.157439][ T61] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 115.264409][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 115.267781][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 115.382978][ T46] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 115.386312][ T46] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 115.538609][ T7278] netlink: 'syz.2.281': attribute type 29 has an invalid length. [ 115.541415][ T7278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.281'. [ 115.546143][ T7278] veth0_to_bridge: entered promiscuous mode [ 115.738409][ T7270] veth0_to_bridge: left promiscuous mode [ 116.144212][ T7282] RDS: rds_bind could not find a transport for ::ffff:172.20.20.35, load rds_tcp or rds_rdma? [ 116.243102][ T73] usb 5-1: USB disconnect, device number 4 [ 116.302921][ T7291] netlink: 288 bytes leftover after parsing attributes in process `syz.4.286'. [ 116.512824][ T6027] usb 42-1: device descriptor read/8, error -110 [ 116.544198][ T7275] veth0_to_bridge: left promiscuous mode [ 116.946805][ T6027] usb usb42-port1: attempt power cycle [ 117.018760][ T7308] FAT-fs (loop0): unable to read boot sector [ 117.505618][ T6027] usb usb42-port1: unable to enumerate USB device [ 117.593128][ T7357] usb 1-1: USB disconnect, device number 2 [ 117.612278][ T7358] netlink: 20 bytes leftover after parsing attributes in process `syz.4.297'. [ 118.330462][ T7372] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 118.334298][ T7384] netlink: 56 bytes leftover after parsing attributes in process `syz.5.304'. [ 118.752860][ T24] usb 48-1: device descriptor read/8, error -110 [ 119.163727][ T24] usb usb48-port1: attempt power cycle [ 119.447588][ T7404] fuse: Bad value for 'fd' [ 119.722532][ T7417] netlink: 'syz.2.315': attribute type 29 has an invalid length. [ 119.725422][ T7417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.315'. [ 119.729710][ T7417] veth0_to_bridge: entered promiscuous mode [ 119.737499][ T24] usb usb48-port1: unable to enumerate USB device [ 119.765394][ T7422] No source specified [ 120.002832][ T1143] net_ratelimit: 82 callbacks suppressed [ 120.002851][ T1143] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 120.007784][ T1143] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 120.112799][ T1143] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 120.119934][ T1143] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 120.223012][ T1147] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 120.226375][ T1147] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 120.332831][ T1143] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 120.336633][ T1143] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 120.431509][ T7410] veth0_to_bridge: left promiscuous mode [ 120.443016][ T1143] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 120.449990][ T1143] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 120.616300][ T7428] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 120.818431][ T7439] binder: 7435:7439 ioctl 4010640d 80000080 returned -22 [ 120.966116][ T7450] FAULT_INJECTION: forcing a failure. [ 120.966116][ T7450] name failslab, interval 1, probability 0, space 0, times 0 [ 120.970358][ T7450] CPU: 0 UID: 0 PID: 7450 Comm: syz.4.324 Tainted: G L syzkaller #0 PREEMPT(full) [ 120.970376][ T7450] Tainted: [L]=SOFTLOCKUP [ 120.970379][ T7450] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 120.970386][ T7450] Call Trace: [ 120.970391][ T7450] [ 120.970395][ T7450] dump_stack_lvl+0x16c/0x1f0 [ 120.970415][ T7450] should_fail_ex+0x512/0x640 [ 120.970441][ T7450] ? __kmalloc_cache_noprof+0x5f/0x800 [ 120.970456][ T7450] should_failslab+0xc2/0x120 [ 120.970473][ T7450] __kmalloc_cache_noprof+0x80/0x800 [ 120.970486][ T7450] ? cls_bpf_change+0x1ff/0x1d80 [ 120.970505][ T7450] ? cls_bpf_change+0x1ff/0x1d80 [ 120.970521][ T7450] cls_bpf_change+0x1ff/0x1d80 [ 120.970540][ T7450] ? find_held_lock+0x2b/0x80 [ 120.970555][ T7450] ? __pfx_cls_bpf_change+0x10/0x10 [ 120.970570][ T7450] ? tc_new_tfilter+0x1e00/0x2340 [ 120.970588][ T7450] ? __mutex_unlock_slowpath+0x161/0x790 [ 120.970614][ T7450] ? __pfx_cls_bpf_change+0x10/0x10 [ 120.970630][ T7450] tc_new_tfilter+0xa35/0x2340 [ 120.970654][ T7450] ? __pfx_tc_new_tfilter+0x10/0x10 [ 120.970668][ T7450] ? kmem_cache_free+0x2d8/0x770 [ 120.970687][ T7450] ? __lock_acquire+0x436/0x2890 [ 120.970704][ T7450] ? find_held_lock+0x2b/0x80 [ 120.970717][ T7450] ? __pfx_tc_new_tfilter+0x10/0x10 [ 120.970732][ T7450] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 120.970748][ T7450] ? __pfx_tc_new_tfilter+0x10/0x10 [ 120.970764][ T7450] rtnetlink_rcv_msg+0x95e/0xe90 [ 120.970780][ T7450] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 120.970798][ T7450] ? ref_tracker_free+0x37c/0x830 [ 120.970813][ T7450] netlink_rcv_skb+0x158/0x420 [ 120.970829][ T7450] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 120.970845][ T7450] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 120.970865][ T7450] ? netlink_deliver_tap+0x1ae/0xd30 [ 120.970883][ T7450] netlink_unicast+0x5aa/0x870 [ 120.970900][ T7450] ? __pfx_netlink_unicast+0x10/0x10 [ 120.970915][ T7450] ? security_socket_getpeersec_dgram+0xe8/0x290 [ 120.970935][ T7450] netlink_sendmsg+0x8c8/0xdd0 [ 120.970953][ T7450] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.970970][ T7450] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 120.970991][ T7450] ____sys_sendmsg+0xa5d/0xc30 [ 120.971010][ T7450] ? __pfx_____sys_sendmsg+0x10/0x10 [ 120.971026][ T7450] ? get_compat_msghdr+0x11a/0x170 [ 120.971046][ T7450] ___sys_sendmsg+0x134/0x1d0 [ 120.971060][ T7450] ? __pfx____sys_sendmsg+0x10/0x10 [ 120.971080][ T7450] ? find_held_lock+0x2b/0x80 [ 120.971107][ T7450] __sys_sendmsg+0x16d/0x220 [ 120.971121][ T7450] ? __pfx___sys_sendmsg+0x10/0x10 [ 120.971140][ T7450] ? do_user_addr_fault+0x843/0x1370 [ 120.971156][ T7450] __do_fast_syscall_32+0xe8/0x680 [ 120.971175][ T7450] do_fast_syscall_32+0x32/0x80 [ 120.971192][ T7450] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 120.971206][ T7450] RIP: 0023:0xf7f42579 [ 120.971215][ T7450] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 120.971225][ T7450] RSP: 002b:00000000f543655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 120.971236][ T7450] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080006040 [ 120.971242][ T7450] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 120.971248][ T7450] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 120.971254][ T7450] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 120.971260][ T7450] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 120.971273][ T7450] [ 121.014521][ T7448] FAULT_INJECTION: forcing a failure. [ 121.014521][ T7448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.097159][ T7448] CPU: 3 UID: 0 PID: 7448 Comm: syz.2.323 Tainted: G L syzkaller #0 PREEMPT(full) [ 121.097177][ T7448] Tainted: [L]=SOFTLOCKUP [ 121.097180][ T7448] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 121.097187][ T7448] Call Trace: [ 121.097191][ T7448] [ 121.097195][ T7448] dump_stack_lvl+0x16c/0x1f0 [ 121.097229][ T7448] should_fail_ex+0x512/0x640 [ 121.097245][ T7448] _copy_to_user+0x32/0xd0 [ 121.097265][ T7448] simple_read_from_buffer+0xcb/0x170 [ 121.097289][ T7448] proc_fail_nth_read+0x197/0x240 [ 121.097321][ T7448] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 121.097351][ T7448] ? rw_verify_area+0xcf/0x6c0 [ 121.097369][ T7448] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 121.097387][ T7448] vfs_read+0x1e4/0xcf0 [ 121.097403][ T7448] ? __pfx___mutex_lock+0x10/0x10 [ 121.097421][ T7448] ? __pfx_vfs_read+0x10/0x10 [ 121.097435][ T7448] ? find_held_lock+0x2b/0x80 [ 121.097453][ T7448] ? __fget_files+0x20e/0x3c0 [ 121.097474][ T7448] ksys_read+0x12a/0x250 [ 121.097488][ T7448] ? __pfx_ksys_read+0x10/0x10 [ 121.097507][ T7448] __do_fast_syscall_32+0xe8/0x680 [ 121.097526][ T7448] do_fast_syscall_32+0x32/0x80 [ 121.097543][ T7448] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 121.097557][ T7448] RIP: 0023:0xf70ed579 [ 121.097565][ T7448] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 121.097576][ T7448] RSP: 002b:00000000f54dd590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 121.097587][ T7448] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54dd620 [ 121.097593][ T7448] RDX: 000000000000000f RSI: 00000000f7486ff4 RDI: 0000000000000000 [ 121.097599][ T7448] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 121.097605][ T7448] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 121.097611][ T7448] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 121.097624][ T7448] [ 121.462800][ T53] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 121.612756][ T53] usb 7-1: Using ep0 maxpacket: 8 [ 121.619670][ T53] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 121.631148][ T53] usb 7-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 121.636426][ T53] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 121.640397][ T53] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.648428][ T7460] netlink: 3 bytes leftover after parsing attributes in process `syz.4.327'. [ 121.665793][ T7460] batadv1: entered allmulticast mode [ 121.674848][ T53] usbtmc 7-1:16.0: bulk endpoints not found [ 122.066482][ T7465] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 122.068700][ T7465] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 122.071511][ T7465] vhci_hcd vhci_hcd.0: Device attached [ 122.087252][ T7465] netlink: 20 bytes leftover after parsing attributes in process `syz.0.328'. [ 122.091314][ T7465] smc: net device wlan1 applied user defined pnetid SYZ1 [ 122.227485][ T7474] netlink: 56 bytes leftover after parsing attributes in process `syz.4.331'. [ 122.343317][ T6027] usb 38-1: SetAddress Request (6) to port 0 [ 122.345445][ T6027] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 122.508182][ T7476] bridge_slave_0: left allmulticast mode [ 122.510190][ T7476] bridge_slave_0: left promiscuous mode [ 122.548899][ T7476] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.597412][ T7476] bridge_slave_1: left allmulticast mode [ 122.599510][ T7476] bridge_slave_1: left promiscuous mode [ 122.602523][ T7476] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.681260][ T7476] bond0: (slave bond_slave_0): Releasing backup interface [ 122.742101][ T7476] bond0: (slave bond_slave_1): Releasing backup interface [ 122.755985][ T7466] vhci_hcd: connection reset by peer [ 122.758827][ T1040] vhci_hcd vhci_hcd.0: stop threads [ 122.760816][ T1040] vhci_hcd vhci_hcd.0: release socket [ 122.762629][ T1040] vhci_hcd vhci_hcd.0: disconnect device [ 122.817154][ T7476] team0: Port device team_slave_0 removed [ 122.872586][ T7476] team0: Port device team_slave_1 removed [ 122.875795][ T7476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.878308][ T7476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.884245][ T7476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.886816][ T7476] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.256695][ T73] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 123.259493][ T73] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 123.262007][ T73] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 123.264622][ T73] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 123.267329][ T73] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 123.270829][ T73] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 123.274271][ T73] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 123.277547][ T73] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 123.280792][ T73] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 123.284287][ T73] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 123.292241][ T73] hid-generic 0000:0000:0003.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 123.301510][ T7485] FAULT_INJECTION: forcing a failure. [ 123.301510][ T7485] name failslab, interval 1, probability 0, space 0, times 0 [ 123.306717][ T7485] CPU: 3 UID: 0 PID: 7485 Comm: syz.4.333 Tainted: G L syzkaller #0 PREEMPT(full) [ 123.306736][ T7485] Tainted: [L]=SOFTLOCKUP [ 123.306740][ T7485] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 123.306746][ T7485] Call Trace: [ 123.306750][ T7485] [ 123.306760][ T7485] dump_stack_lvl+0x16c/0x1f0 [ 123.306781][ T7485] should_fail_ex+0x512/0x640 [ 123.306794][ T7485] ? fs_reclaim_acquire+0xae/0x150 [ 123.306812][ T7485] should_failslab+0xc2/0x120 [ 123.306830][ T7485] __kmalloc_cache_noprof+0x80/0x800 [ 123.306843][ T7485] ? kobject_uevent_env+0x265/0x1920 [ 123.306857][ T7485] ? kobject_uevent_env+0x265/0x1920 [ 123.306868][ T7485] kobject_uevent_env+0x265/0x1920 [ 123.306879][ T7485] ? __pfx_dev_uevent_name+0x10/0x10 [ 123.306892][ T7485] ? kobject_put+0xaf/0x6f0 [ 123.306908][ T7485] ? _raw_spin_unlock+0x28/0x50 [ 123.306925][ T7485] device_release_driver_internal+0x51c/0x620 [ 123.306942][ T7485] bus_remove_device+0x22f/0x450 [ 123.306955][ T7485] device_del+0x396/0x9f0 [ 123.306968][ T7485] ? __pfx_device_del+0x10/0x10 [ 123.306981][ T7485] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 123.306998][ T7485] hid_destroy_device+0x19c/0x240 [ 123.307016][ T7485] uhid_char_write+0xdcb/0x1060 [ 123.307032][ T7485] ? __pfx_uhid_char_write+0x10/0x10 [ 123.307046][ T7485] vfs_write+0x2a0/0x11d0 [ 123.307065][ T7485] ? __pfx_vfs_write+0x10/0x10 [ 123.307079][ T7485] ? find_held_lock+0x2b/0x80 [ 123.307094][ T7485] ? __fget_files+0x204/0x3c0 [ 123.307112][ T7485] ? __fget_files+0x20e/0x3c0 [ 123.307131][ T7485] ksys_write+0x1f8/0x250 [ 123.307145][ T7485] ? __pfx_ksys_write+0x10/0x10 [ 123.307161][ T7485] ? do_user_addr_fault+0x843/0x1370 [ 123.307177][ T7485] __do_fast_syscall_32+0xe8/0x680 [ 123.307196][ T7485] do_fast_syscall_32+0x32/0x80 [ 123.307213][ T7485] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 123.307226][ T7485] RIP: 0023:0xf7f42579 [ 123.307235][ T7485] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 123.307245][ T7485] RSP: 002b:00000000f543655c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 123.307255][ T7485] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 123.307262][ T7485] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 123.307268][ T7485] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 123.307274][ T7485] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 123.307279][ T7485] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 123.307293][ T7485] [ 123.325840][ T7486] fido_id[7486]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 123.502922][ T7488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.557872][ T7492] FAULT_INJECTION: forcing a failure. [ 123.557872][ T7492] name failslab, interval 1, probability 0, space 0, times 0 [ 123.558160][ T7488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.562088][ T7492] CPU: 3 UID: 0 PID: 7492 Comm: syz.5.336 Tainted: G L syzkaller #0 PREEMPT(full) [ 123.562105][ T7492] Tainted: [L]=SOFTLOCKUP [ 123.562109][ T7492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 123.562116][ T7492] Call Trace: [ 123.562120][ T7492] [ 123.562124][ T7492] dump_stack_lvl+0x16c/0x1f0 [ 123.562144][ T7492] should_fail_ex+0x512/0x640 [ 123.562157][ T7492] ? __kvmalloc_node_noprof+0x129/0xa40 [ 123.562174][ T7492] should_failslab+0xc2/0x120 [ 123.562191][ T7492] __kvmalloc_node_noprof+0x14a/0xa40 [ 123.562205][ T7492] ? __pfx_dev_addr_init+0x10/0x10 [ 123.562218][ T7492] ? lockdep_init_map_type+0x5c/0x270 [ 123.562229][ T7492] ? alloc_netdev_mqs+0xaef/0x1550 [ 123.562247][ T7492] ? alloc_netdev_mqs+0xaef/0x1550 [ 123.562261][ T7492] alloc_netdev_mqs+0xaef/0x1550 [ 123.562279][ T7492] rtnl_create_link+0xc08/0xf60 [ 123.562295][ T7492] rtnl_newlink+0xb3b/0x1f50 [ 123.562314][ T7492] ? __pfx_rtnl_newlink+0x10/0x10 [ 123.562329][ T7492] ? lockdep_hardirqs_on+0x7c/0x110 [ 123.562347][ T7492] ? kmem_cache_free+0x2d8/0x770 [ 123.562361][ T7492] ? kfree_skbmem+0x1a4/0x1f0 [ 123.562384][ T7492] ? find_held_lock+0x2b/0x80 [ 123.562398][ T7492] ? __dev_queue_xmit+0x782/0x46b0 [ 123.562413][ T7492] ? find_held_lock+0x2b/0x80 [ 123.562426][ T7492] ? __pfx_rtnl_newlink+0x10/0x10 [ 123.562440][ T7492] ? __pfx_rtnl_newlink+0x10/0x10 [ 123.562453][ T7492] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 123.562468][ T7492] ? __pfx_rtnl_newlink+0x10/0x10 [ 123.562483][ T7492] rtnetlink_rcv_msg+0x95e/0xe90 [ 123.562499][ T7492] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 123.562519][ T7492] ? ref_tracker_free+0x37c/0x830 [ 123.562533][ T7492] netlink_rcv_skb+0x158/0x420 [ 123.562550][ T7492] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 123.562566][ T7492] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 123.562587][ T7492] ? netlink_deliver_tap+0x1ae/0xd30 [ 123.562604][ T7492] netlink_unicast+0x5aa/0x870 [ 123.562621][ T7492] ? __pfx_netlink_unicast+0x10/0x10 [ 123.562654][ T7492] netlink_sendmsg+0x8c8/0xdd0 [ 123.562674][ T7492] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.562691][ T7492] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 123.562712][ T7492] ____sys_sendmsg+0xa5d/0xc30 [ 123.562731][ T7492] ? __pfx_____sys_sendmsg+0x10/0x10 [ 123.562747][ T7492] ? get_compat_msghdr+0x11a/0x170 [ 123.562767][ T7492] ___sys_sendmsg+0x134/0x1d0 [ 123.562781][ T7492] ? __pfx____sys_sendmsg+0x10/0x10 [ 123.562802][ T7492] ? find_held_lock+0x2b/0x80 [ 123.562824][ T7492] __sys_sendmsg+0x16d/0x220 [ 123.562838][ T7492] ? __pfx___sys_sendmsg+0x10/0x10 [ 123.562860][ T7492] ? do_user_addr_fault+0x843/0x1370 [ 123.562877][ T7492] __do_fast_syscall_32+0xe8/0x680 [ 123.562896][ T7492] do_fast_syscall_32+0x32/0x80 [ 123.562914][ T7492] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 123.562927][ T7492] RIP: 0023:0xf707d579 [ 123.562936][ T7492] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 123.562947][ T7492] RSP: 002b:00000000f546d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 123.562958][ T7492] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800005c0 [ 123.562965][ T7492] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 123.562971][ T7492] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 123.562977][ T7492] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 123.562983][ T7492] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 123.562997][ T7492] [ 123.865467][ T7503] netlink: 56 bytes leftover after parsing attributes in process `syz.5.341'. [ 124.217931][ T6060] usb 7-1: USB disconnect, device number 6 [ 124.982549][ T7518] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 125.007122][ T7518] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 125.010738][ T7518] overlayfs: failed to look up (tracing) for ino (-66) [ 125.022862][ T12] net_ratelimit: 97 callbacks suppressed [ 125.022881][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 125.028205][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 125.133193][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 125.153245][ T4360] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 125.156233][ T4360] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 125.233409][ T40] audit: type=1326 audit(1767251371.085:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7524 comm="syz.0.348" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 125.240804][ T40] audit: type=1326 audit(1767251371.085:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7524 comm="syz.0.348" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 125.252027][ T40] audit: type=1326 audit(1767251371.085:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7524 comm="syz.0.348" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 125.259463][ T40] audit: type=1326 audit(1767251371.085:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7524 comm="syz.0.348" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 125.266481][ T40] audit: type=1326 audit(1767251371.085:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7524 comm="syz.0.348" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 125.267039][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 125.273751][ T40] audit: type=1326 audit(1767251371.085:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7524 comm="syz.0.348" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 125.283382][ T40] audit: type=1326 audit(1767251371.085:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7524 comm="syz.0.348" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 125.287140][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 125.290639][ T40] audit: type=1326 audit(1767251371.085:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7524 comm="syz.0.348" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 125.312752][ T40] audit: type=1326 audit(1767251371.085:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7524 comm="syz.0.348" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 125.321253][ T40] audit: type=1326 audit(1767251371.095:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7524 comm="syz.0.348" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 125.403566][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 125.406287][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 125.435655][ T7533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.491402][ T7533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.497091][ T7534] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 125.499682][ T7534] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 125.509252][ T7534] vhci_hcd vhci_hcd.0: Device attached [ 125.524251][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 125.953332][ T6060] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 126.068879][ T7535] vhci_hcd: connection closed [ 126.070728][ T1049] vhci_hcd vhci_hcd.0: stop threads [ 126.074177][ T1049] vhci_hcd vhci_hcd.0: release socket [ 126.076123][ T1049] vhci_hcd vhci_hcd.0: disconnect device [ 126.122782][ T6060] usb 10-1: Using ep0 maxpacket: 8 [ 126.126201][ T6060] usb 10-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 126.129669][ T6060] usb 10-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 126.134347][ T6060] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 126.137250][ T6060] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.148609][ T6060] usbtmc 10-1:16.0: bulk endpoints not found [ 126.877476][ T7550] 9p: Unknown Cache mode or invalid value fscach [ 126.906978][ T7552] netlink: 56 bytes leftover after parsing attributes in process `syz.4.355'. [ 127.402901][ T6027] usb 38-1: device descriptor read/8, error -110 [ 127.803777][ T6027] usb usb38-port1: attempt power cycle [ 127.987883][ T7560] Cannot find add_set index 0 as target [ 127.993497][ T7560] Bluetooth: MGMT ver 1.23 [ 128.373625][ T6027] usb usb38-port1: unable to enumerate USB device [ 128.716845][ T6027] usb 10-1: USB disconnect, device number 3 [ 129.728986][ T7586] netlink: 'syz.4.364': attribute type 4 has an invalid length. [ 129.953134][ T7592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.022933][ T7592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.102983][ T1049] net_ratelimit: 82 callbacks suppressed [ 130.103003][ T1049] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 130.108721][ T1049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 130.208896][ T7600] netlink: 'syz.4.368': attribute type 10 has an invalid length. [ 130.211697][ T7600] netlink: 40 bytes leftover after parsing attributes in process `syz.4.368'. [ 130.212928][ T1143] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 130.241355][ T7600] team0: Port device geneve0 added [ 130.242782][ T1147] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 130.247193][ T1147] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 130.352894][ T1143] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 130.356272][ T1143] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 130.462852][ T1147] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 130.466287][ T1147] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 130.582778][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 130.777077][ T7611] netlink: 24 bytes leftover after parsing attributes in process `syz.2.371'. [ 131.485314][ T7624] ubi31: attaching mtd0 [ 131.525593][ T7624] ubi31: scanning is finished [ 131.527942][ T7624] ubi31: empty MTD device detected [ 131.658775][ T4360] Bluetooth: hci4: Frame reassembly failed (-84) [ 131.662489][ T7631] netlink: 56 bytes leftover after parsing attributes in process `syz.2.377'. [ 131.744734][ T7633] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.800505][ T7633] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.005471][ T7635] bridge_slave_0: left allmulticast mode [ 132.007589][ T7635] bridge_slave_0: left promiscuous mode [ 132.024046][ T7635] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.135560][ T7624] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 132.155198][ T7635] bridge_slave_1: left allmulticast mode [ 132.157375][ T7635] bridge_slave_1: left promiscuous mode [ 132.160306][ T7635] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.175200][ T7624] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 132.177782][ T7624] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 132.180058][ T7624] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 132.182498][ T7624] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 132.224741][ T7624] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 132.229828][ T7624] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1891800354 [ 132.238997][ T7635] bond0: (slave bond_slave_0): Releasing backup interface [ 132.268619][ T7635] bond0: (slave bond_slave_1): Releasing backup interface [ 132.283455][ T7635] team0: Port device team_slave_0 removed [ 132.301379][ T7635] team0: Port device team_slave_1 removed [ 132.305307][ T7635] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.308071][ T7635] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.321517][ T7635] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.324705][ T7635] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.384715][ T7624] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 132.391787][ T7638] ubi31: background thread "ubi_bgt31d" started, PID 7638 [ 132.780702][ T7645] tipc: Started in network mode [ 132.782918][ T7645] tipc: Node identity b6e0c595ff77, cluster identity 4711 [ 132.786059][ T7645] tipc: Enabled bearer , priority 0 [ 132.791252][ T7645] syzkaller0: entered promiscuous mode [ 132.795145][ T7645] syzkaller0: entered allmulticast mode [ 132.815562][ T7645] tipc: Resetting bearer [ 132.838339][ T7645] tipc: Resetting bearer [ 132.848653][ T7645] tipc: Disabling bearer [ 133.073634][ T7647] FAULT_INJECTION: forcing a failure. [ 133.073634][ T7647] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 133.079666][ T7647] CPU: 2 UID: 0 PID: 7647 Comm: syz.2.381 Tainted: G L syzkaller #0 PREEMPT(full) [ 133.079717][ T7647] Tainted: [L]=SOFTLOCKUP [ 133.079723][ T7647] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 133.079735][ T7647] Call Trace: [ 133.079742][ T7647] [ 133.079751][ T7647] dump_stack_lvl+0x16c/0x1f0 [ 133.079783][ T7647] should_fail_ex+0x512/0x640 [ 133.079807][ T7647] should_fail_alloc_page+0xe7/0x130 [ 133.079838][ T7647] prepare_alloc_pages+0x401/0x670 [ 133.079873][ T7647] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 133.079897][ T7647] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 133.079927][ T7647] ? is_bpf_text_address+0x94/0x1a0 [ 133.079957][ T7647] ? kernel_text_address+0x8d/0x100 [ 133.079978][ T7647] ? __kernel_text_address+0xd/0x40 [ 133.079998][ T7647] ? unwind_get_return_address+0x59/0xa0 [ 133.080023][ T7647] ? arch_stack_walk+0xa6/0x100 [ 133.080048][ T7647] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 133.080083][ T7647] ? check_path.constprop.0+0x24/0x50 [ 133.080112][ T7647] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 133.080142][ T7647] ? policy_nodemask+0xea/0x4e0 [ 133.080172][ T7647] alloc_pages_mpol+0x1fb/0x550 [ 133.080201][ T7647] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 133.080228][ T7647] ? kasan_save_track+0x14/0x30 [ 133.080251][ T7647] ? __kasan_kmalloc+0xaa/0xb0 [ 133.080273][ T7647] ? __get_vm_area_node+0x101/0x330 [ 133.080307][ T7647] alloc_pages_noprof+0x131/0x390 [ 133.080336][ T7647] get_free_pages_noprof+0x10/0xb0 [ 133.080359][ T7647] __kasan_populate_vmalloc+0xa0/0x220 [ 133.080389][ T7647] alloc_vmap_area+0x98d/0x2a50 [ 133.080428][ T7647] ? __pfx_alloc_vmap_area+0x10/0x10 [ 133.080462][ T7647] __get_vm_area_node+0x1ca/0x330 [ 133.080495][ T7647] __vmalloc_node_range_noprof+0x247/0x16b0 [ 133.080515][ T7647] ? vmalloc_array_noprof+0x43/0x70 [ 133.080537][ T7647] ? rcu_is_watching+0x12/0xc0 [ 133.080561][ T7647] ? trace_mm_page_alloc+0x11b/0x180 [ 133.080588][ T7647] ? __alloc_frozen_pages_noprof+0x292/0x2430 [ 133.080614][ T7647] ? vmalloc_array_noprof+0x43/0x70 [ 133.080638][ T7647] ? is_bpf_text_address+0x8a/0x1a0 [ 133.080664][ T7647] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 133.080684][ T7647] ? __lock_acquire+0x436/0x2890 [ 133.080705][ T7647] ? __lock_acquire+0x436/0x2890 [ 133.080722][ T7647] ? register_lock_class+0x41/0x4b0 [ 133.080743][ T7647] ? vmalloc_array_noprof+0x43/0x70 [ 133.080766][ T7647] __vmalloc_node_noprof+0xad/0xf0 [ 133.080784][ T7647] ? vmalloc_array_noprof+0x43/0x70 [ 133.080810][ T7647] __vmalloc_noprof+0xa3/0x120 [ 133.080827][ T7647] ? __pfx___vmalloc_noprof+0x10/0x10 [ 133.080848][ T7647] ? find_held_lock+0x2b/0x80 [ 133.080871][ T7647] ? __might_fault+0xe3/0x190 [ 133.080893][ T7647] vmalloc_array_noprof+0x43/0x70 [ 133.080916][ T7647] do_update_counters.constprop.0+0x53/0x9d0 [ 133.080952][ T7647] do_ebt_set_ctl+0x3ff/0x460 [ 133.080972][ T7647] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 133.080992][ T7647] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 133.081022][ T7647] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 133.081055][ T7647] nf_setsockopt+0x8d/0xf0 [ 133.081085][ T7647] ip_setsockopt+0xcb/0xf0 [ 133.081109][ T7647] tcp_setsockopt+0xa7/0x100 [ 133.081135][ T7647] smc_setsockopt+0x1b6/0xa00 [ 133.081156][ T7647] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 133.081187][ T7647] ? __pfx_smc_setsockopt+0x10/0x10 [ 133.081211][ T7647] ? aa_sock_opt_perm+0xfd/0x1b0 [ 133.081240][ T7647] ? __pfx_smc_setsockopt+0x10/0x10 [ 133.081262][ T7647] do_sock_setsockopt+0xf3/0x1d0 [ 133.081292][ T7647] __sys_setsockopt+0x120/0x1a0 [ 133.081318][ T7647] __ia32_sys_setsockopt+0xbc/0x160 [ 133.081340][ T7647] ? __do_fast_syscall_32+0x9a/0x680 [ 133.081368][ T7647] ? lockdep_hardirqs_on+0x7c/0x110 [ 133.081394][ T7647] __do_fast_syscall_32+0xe8/0x680 [ 133.081425][ T7647] do_fast_syscall_32+0x32/0x80 [ 133.081454][ T7647] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 133.081478][ T7647] RIP: 0023:0xf70ed579 [ 133.081495][ T7647] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 133.081512][ T7647] RSP: 002b:00000000f54dd55c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 133.081531][ T7647] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000000 [ 133.081544][ T7647] RDX: 0000000000000081 RSI: 0000000080000200 RDI: 0000000000000060 [ 133.081556][ T7647] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 133.081567][ T7647] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 133.081578][ T7647] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 133.081604][ T7647] [ 133.082085][ T7647] syz.2.381: vmalloc error: size 16, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 133.262131][ T7647] CPU: 3 UID: 0 PID: 7647 Comm: syz.2.381 Tainted: G L syzkaller #0 PREEMPT(full) [ 133.262150][ T7647] Tainted: [L]=SOFTLOCKUP [ 133.262154][ T7647] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 133.262161][ T7647] Call Trace: [ 133.262165][ T7647] [ 133.262171][ T7647] dump_stack_lvl+0x16c/0x1f0 [ 133.262191][ T7647] warn_alloc+0x248/0x3a0 [ 133.262206][ T7647] ? __pfx_warn_alloc+0x10/0x10 [ 133.262219][ T7647] ? kfree+0x2f8/0x6e0 [ 133.262230][ T7647] ? __get_vm_area_node+0x2cd/0x330 [ 133.262249][ T7647] ? __get_vm_area_node+0x2cd/0x330 [ 133.262265][ T7647] ? __get_vm_area_node+0x1dc/0x330 [ 133.262280][ T7647] ? __get_vm_area_node+0x208/0x330 [ 133.262300][ T7647] __vmalloc_node_range_noprof+0xbe0/0x16b0 [ 133.262311][ T7647] ? rcu_is_watching+0x12/0xc0 [ 133.262327][ T7647] ? trace_mm_page_alloc+0x11b/0x180 [ 133.262343][ T7647] ? __alloc_frozen_pages_noprof+0x292/0x2430 [ 133.262358][ T7647] ? vmalloc_array_noprof+0x43/0x70 [ 133.262374][ T7647] ? is_bpf_text_address+0x8a/0x1a0 [ 133.262391][ T7647] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 133.262402][ T7647] ? __lock_acquire+0x436/0x2890 [ 133.262414][ T7647] ? __lock_acquire+0x436/0x2890 [ 133.262424][ T7647] ? register_lock_class+0x41/0x4b0 [ 133.262436][ T7647] ? vmalloc_array_noprof+0x43/0x70 [ 133.262449][ T7647] __vmalloc_node_noprof+0xad/0xf0 [ 133.262460][ T7647] ? vmalloc_array_noprof+0x43/0x70 [ 133.262475][ T7647] __vmalloc_noprof+0xa3/0x120 [ 133.262486][ T7647] ? __pfx___vmalloc_noprof+0x10/0x10 [ 133.262499][ T7647] ? find_held_lock+0x2b/0x80 [ 133.262512][ T7647] ? __might_fault+0xe3/0x190 [ 133.262526][ T7647] vmalloc_array_noprof+0x43/0x70 [ 133.262540][ T7647] do_update_counters.constprop.0+0x53/0x9d0 [ 133.262557][ T7647] do_ebt_set_ctl+0x3ff/0x460 [ 133.262569][ T7647] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 133.262582][ T7647] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 133.262599][ T7647] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 133.262619][ T7647] nf_setsockopt+0x8d/0xf0 [ 133.262638][ T7647] ip_setsockopt+0xcb/0xf0 [ 133.262666][ T7647] tcp_setsockopt+0xa7/0x100 [ 133.262687][ T7647] smc_setsockopt+0x1b6/0xa00 [ 133.262699][ T7647] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 133.262718][ T7647] ? __pfx_smc_setsockopt+0x10/0x10 [ 133.262731][ T7647] ? aa_sock_opt_perm+0xfd/0x1b0 [ 133.262750][ T7647] ? __pfx_smc_setsockopt+0x10/0x10 [ 133.262763][ T7647] do_sock_setsockopt+0xf3/0x1d0 [ 133.262783][ T7647] __sys_setsockopt+0x120/0x1a0 [ 133.262799][ T7647] __ia32_sys_setsockopt+0xbc/0x160 [ 133.262824][ T7647] ? __do_fast_syscall_32+0x9a/0x680 [ 133.262841][ T7647] ? lockdep_hardirqs_on+0x7c/0x110 [ 133.262858][ T7647] __do_fast_syscall_32+0xe8/0x680 [ 133.262876][ T7647] do_fast_syscall_32+0x32/0x80 [ 133.262893][ T7647] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 133.262907][ T7647] RIP: 0023:0xf70ed579 [ 133.262916][ T7647] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 133.262927][ T7647] RSP: 002b:00000000f54dd55c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 133.262938][ T7647] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000000 [ 133.262945][ T7647] RDX: 0000000000000081 RSI: 0000000080000200 RDI: 0000000000000060 [ 133.262951][ T7647] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 133.262958][ T7647] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 133.262964][ T7647] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 133.262978][ T7647] [ 133.375032][ T7647] Mem-Info: [ 133.376270][ T7647] active_anon:10871 inactive_anon:2947 isolated_anon:0 [ 133.376270][ T7647] active_file:4997 inactive_file:42703 isolated_file:0 [ 133.376270][ T7647] unevictable:1772 dirty:540 writeback:0 [ 133.376270][ T7647] slab_reclaimable:8100 slab_unreclaimable:54761 [ 133.376270][ T7647] mapped:26141 shmem:9602 pagetables:1329 [ 133.376270][ T7647] sec_pagetables:308 bounce:0 [ 133.376270][ T7647] kernel_misc_reclaimable:0 [ 133.376270][ T7647] free:40194 free_pcp:10758 free_cma:0 [ 133.395880][ T7647] Node 0 active_anon:32kB inactive_anon:88kB active_file:4kB inactive_file:140kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:16kB dirty:12kB writeback:0kB shmem:3540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9536kB pagetables:1704kB sec_pagetables:1128kB all_unreclaimable? yes Balloon:0kB [ 133.406438][ T7647] Node 1 active_anon:43452kB inactive_anon:11700kB active_file:19984kB inactive_file:170672kB unevictable:3552kB isolated(anon):0kB isolated(file):0kB mapped:104548kB dirty:2148kB writeback:0kB shmem:34868kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:4636kB pagetables:3612kB sec_pagetables:104kB all_unreclaimable? no Balloon:0kB [ 133.416608][ T7647] Node 0 DMA free:2316kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:100kB local_pcp:32kB free_cma:0kB [ 133.426110][ T7647] lowmem_reserve[]: 0 289 289 289 289 [ 133.427931][ T7647] Node 0 DMA32 free:18832kB boost:2048kB min:15380kB low:18712kB high:22044kB reserved_highatomic:2048KB free_highatomic:264KB active_anon:32kB inactive_anon:88kB active_file:4kB inactive_file:140kB unevictable:3536kB writepending:12kB zspages:0kB present:1032196kB managed:296812kB mlocked:0kB bounce:0kB free_pcp:8444kB local_pcp:768kB free_cma:0kB [ 133.438079][ T7647] lowmem_reserve[]: 0 0 0 0 0 [ 133.439615][ T7647] Node 1 DMA32 free:139628kB boost:18432kB min:65576kB low:77360kB high:89144kB reserved_highatomic:0KB free_highatomic:0KB active_anon:43452kB inactive_anon:11700kB active_file:19984kB inactive_file:170672kB unevictable:3552kB writepending:2148kB zspages:3112kB present:1048432kB managed:948212kB mlocked:16kB bounce:0kB free_pcp:35960kB local_pcp:3168kB free_cma:0kB [ 133.450722][ T7647] lowmem_reserve[]: 0 0 0 0 0 [ 133.452841][ T7647] Node 0 DMA: 37*4kB (U) 11*8kB (UM) 6*16kB (UM) 6*32kB (UM) 2*64kB (M) 1*128kB (M) 0*256kB 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2316kB [ 133.457675][ T7647] Node 0 DMA32: 334*4kB (UE) 73*8kB (UMEH) 49*16kB (UMEH) 120*32kB (UMEH) 34*64kB (UMEH) 23*128kB (UME) 8*256kB (UME) 4*512kB (M) 3*1024kB (UM) 0*2048kB 0*4096kB = 18832kB [ 133.463347][ T7647] Node 1 DMA32: 2467*4kB (UME) 618*8kB (UM) 49*16kB (UME) 98*32kB (UME) 107*64kB (UME) 141*128kB (UME) 59*256kB (UME) 32*512kB (UME) 19*1024kB (UM) 16*2048kB (UM) 3*4096kB (U) = 139628kB [ 133.470019][ T7647] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 133.473576][ T7647] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 133.477989][ T7647] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 133.481563][ T7647] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 133.486480][ T7647] 58443 total pagecache pages [ 133.488232][ T7647] 1163 pages in swap cache [ 133.489722][ T7647] Free swap = 113812kB [ 133.491249][ T7647] Total swap = 124996kB [ 133.493188][ T7647] 524155 pages RAM [ 133.494560][ T7647] 0 pages HighMem/MovableOnly [ 133.496209][ T7647] 209059 pages reserved [ 133.497608][ T7647] 0 pages cma reserved [ 133.555747][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 133.555759][ T40] audit: type=1326 audit(1767251379.405:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7658 comm="syz.2.384" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 133.569080][ T40] audit: type=1326 audit(1767251379.405:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7658 comm="syz.2.384" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 133.577055][ T40] audit: type=1326 audit(1767251379.415:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7658 comm="syz.2.384" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 133.584371][ T40] audit: type=1326 audit(1767251379.415:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7658 comm="syz.2.384" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 133.591088][ T40] audit: type=1326 audit(1767251379.415:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7658 comm="syz.2.384" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 133.597931][ T40] audit: type=1326 audit(1767251379.415:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7658 comm="syz.2.384" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 133.605899][ T40] audit: type=1326 audit(1767251379.415:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7658 comm="syz.2.384" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 133.616530][ T40] audit: type=1326 audit(1767251379.415:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7658 comm="syz.2.384" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 133.624069][ T40] audit: type=1326 audit(1767251379.415:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7658 comm="syz.2.384" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 133.632335][ T40] audit: type=1326 audit(1767251379.415:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7658 comm="syz.2.384" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 133.719520][ T5950] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 133.839521][ T7666] netlink: 188 bytes leftover after parsing attributes in process `syz.5.386'. [ 133.889662][ T7669] netlink: 56 bytes leftover after parsing attributes in process `syz.5.388'. [ 134.241918][ T7659] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 134.244111][ T7659] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 134.247222][ T7659] vhci_hcd vhci_hcd.0: Device attached [ 134.277332][ T7678] vhci_hcd: connection closed [ 134.277611][ T1143] vhci_hcd vhci_hcd.2: stop threads [ 134.281886][ T1143] vhci_hcd vhci_hcd.2: release socket [ 134.284488][ T1143] vhci_hcd vhci_hcd.2: disconnect device [ 134.456497][ T7683] netlink: 'syz.4.390': attribute type 29 has an invalid length. [ 134.461236][ T7683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.390'. [ 135.244936][ T1049] net_ratelimit: 95 callbacks suppressed [ 135.244948][ T1049] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 135.251506][ T1049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 135.388603][ T7693] netlink: 'syz.2.392': attribute type 29 has an invalid length. [ 135.391511][ T7693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.392'. [ 135.542102][ T1143] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 135.548010][ T1143] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 135.785264][ T1216] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 135.794607][ T1216] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 135.912846][ T4360] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 135.916233][ T4360] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 136.023180][ T46] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 136.026281][ T46] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 136.102254][ T7697] bridge1: entered promiscuous mode [ 136.104036][ T7697] bridge1: entered allmulticast mode [ 136.109045][ T7697] team0: Port device bridge1 added [ 136.119935][ T7697] bridge0: port 1(team0) entered blocking state [ 136.122026][ T7697] bridge0: port 1(team0) entered disabled state [ 136.124237][ T7697] team0: entered allmulticast mode [ 136.128085][ T7697] team0: entered promiscuous mode [ 136.255855][ T7699] input: syz1 as /devices/virtual/input/input9 [ 136.719546][ T7707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.398'. [ 137.405014][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.407782][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.808382][ T7728] netlink: 'syz.2.402': attribute type 29 has an invalid length. [ 138.811294][ T7728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.402'. [ 140.207980][ T40] kauditd_printk_skb: 61 callbacks suppressed [ 140.207997][ T40] audit: type=1326 audit(1767251386.055:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7751 comm="syz.4.409" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42579 code=0x7ffc0000 [ 140.227222][ T40] audit: type=1326 audit(1767251386.055:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7751 comm="syz.4.409" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42579 code=0x7ffc0000 [ 140.234781][ T40] audit: type=1326 audit(1767251386.055:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7751 comm="syz.4.409" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7f42579 code=0x7ffc0000 [ 140.242162][ T7752] trusted_key: encrypted_key: insufficient parameters specified [ 140.246909][ T40] audit: type=1326 audit(1767251386.055:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7751 comm="syz.4.409" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42579 code=0x7ffc0000 [ 140.255764][ T40] audit: type=1326 audit(1767251386.055:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7751 comm="syz.4.409" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42579 code=0x7ffc0000 [ 140.256850][ T7752] trusted_key: encrypted_key: keylen parameter is missing [ 140.264416][ T40] audit: type=1326 audit(1767251386.055:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7751 comm="syz.4.409" exe="/syz-executor" sig=0 arch=40000003 syscall=175 compat=1 ip=0xf7f42579 code=0x7ffc0000 [ 140.267056][ T1216] net_ratelimit: 62 callbacks suppressed [ 140.267073][ T1216] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 140.275420][ T40] audit: type=1326 audit(1767251386.055:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7751 comm="syz.4.409" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42579 code=0x7ffc0000 [ 140.288403][ T1216] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 140.292037][ T40] audit: type=1326 audit(1767251386.055:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7751 comm="syz.4.409" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42579 code=0x7ffc0000 [ 140.302781][ T24] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 140.309362][ T40] audit: type=1326 audit(1767251386.055:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7751 comm="syz.4.409" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7f42579 code=0x7ffc0000 [ 140.327693][ T40] audit: type=1326 audit(1767251386.055:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7751 comm="syz.4.409" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42579 code=0x7ffc0000 [ 140.407459][ T4360] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 140.411157][ T4360] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 140.452778][ T24] usb 10-1: Using ep0 maxpacket: 32 [ 140.455965][ T24] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 140.461032][ T24] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 140.464541][ T24] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 140.467284][ T24] usb 10-1: Product: syz [ 140.468732][ T24] usb 10-1: Manufacturer: syz [ 140.470394][ T24] usb 10-1: SerialNumber: syz [ 140.473364][ T24] usb 10-1: config 0 descriptor?? [ 140.480571][ T7748] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 140.484812][ T24] hub 10-1:0.0: bad descriptor, ignoring hub [ 140.487473][ T24] hub 10-1:0.0: probe with driver hub failed with error -5 [ 140.523447][ T1147] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 140.526258][ T1147] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 140.632845][ T4360] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 140.635752][ T4360] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 140.695292][ T7748] comedi comedi3: 8255: I/O port conflict (0x20000005,4) [ 140.725212][ T7766] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 140.728264][ T7766] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 140.733877][ T7766] vhci_hcd vhci_hcd.0: Device attached [ 140.742796][ T1147] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 140.746250][ T1147] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 140.834814][ T829] usb 10-1: USB disconnect, device number 4 [ 141.023037][ T6027] usb 46-1: SetAddress Request (2) to port 0 [ 141.026185][ T6027] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 141.056517][ T7767] vhci_hcd: connection reset by peer [ 141.125665][ T1040] vhci_hcd vhci_hcd.4: stop threads [ 141.128054][ T1040] vhci_hcd vhci_hcd.4: release socket [ 141.130252][ T1040] vhci_hcd vhci_hcd.4: disconnect device [ 141.450284][ T7798] netlink: 12 bytes leftover after parsing attributes in process `syz.0.420'. [ 141.471986][ T7798] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 141.769566][ T7810] netlink: 56 bytes leftover after parsing attributes in process `syz.4.424'. [ 142.964976][ T7826] Bluetooth: Invalid esc byte 0x02 [ 142.986617][ T46] Bluetooth: (null): Invalid header checksum [ 145.005695][ T7853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.437'. [ 145.292837][ T1216] net_ratelimit: 75 callbacks suppressed [ 145.292850][ T1216] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 145.297770][ T1216] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 145.374951][ T7874] netlink: 56 bytes leftover after parsing attributes in process `syz.4.443'. [ 145.404412][ T46] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 145.409026][ T46] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 145.514847][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 145.526202][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 145.632759][ T4360] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 145.636842][ T4360] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 145.654244][ T7882] veth0_to_bridge: entered promiscuous mode [ 145.722068][ T7883] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 145.743588][ T4360] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 145.822374][ T7861] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 145.824614][ T7861] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 145.827735][ T7861] vhci_hcd vhci_hcd.0: Device attached [ 146.040555][ T7884] vhci_hcd: connection closed [ 146.040765][ T1216] vhci_hcd vhci_hcd.0: stop threads [ 146.044712][ T1216] vhci_hcd vhci_hcd.0: release socket [ 146.046575][ T1216] vhci_hcd vhci_hcd.0: disconnect device [ 146.092823][ T24] usb 38-1: enqueue for inactive port 0 [ 146.112810][ T6027] usb 46-1: device descriptor read/8, error -110 [ 146.503763][ T6027] usb usb46-port1: attempt power cycle [ 146.513155][ T7877] veth0_to_bridge: left promiscuous mode [ 146.593281][ T24] usb usb38-port1: attempt power cycle [ 146.817801][ T7903] CUSE: unknown device info "ÿ" [ 146.819625][ T7903] CUSE: zero length info key specified [ 147.063690][ T6027] usb usb46-port1: unable to enumerate USB device [ 147.175995][ T24] usb usb38-port1: unable to enumerate USB device [ 147.686482][ T7939] [ 147.687648][ T7939] ====================================================== [ 147.690719][ T7939] WARNING: possible circular locking dependency detected [ 147.693824][ T7939] syzkaller #0 Tainted: G L [ 147.696611][ T7939] ------------------------------------------------------ [ 147.699659][ T7939] syz.5.453/7939 is trying to acquire lock: [ 147.702242][ T7939] ffff88801301ac88 (&of->mutex){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 [ 147.706118][ T7939] [ 147.706118][ T7939] but task is already holding lock: [ 147.709389][ T7939] ffff888022be6c30 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12d0 SYZFAIL: failed to recv rpc [ 147.713088][ T7939] fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 147.713088][ T7939] which lock already depends on the new lock. [ 147.713088][ T7939] [ 147.717742][ T7939] [ 147.717742][ T7939] the existing dependency chain (in reverse order) is: [ 147.721702][ T7939] [ 147.721702][ T7939] -> #3 (&p->lock){+.+.}-{4:4}: [ 147.724891][ T7939] __mutex_lock+0x1aa/0x1ca0 [ 147.727374][ T7939] seq_read_iter+0xe1/0x12d0 [ 147.729650][ T7939] kernfs_fop_read_iter+0x46c/0x610 [ 147.732192][ T7939] copy_splice_read+0x618/0xc20 [ 147.734505][ T7939] do_splice_read+0x285/0x370 [ 147.736812][ T7939] splice_file_to_pipe+0x109/0x120 [ 147.739282][ T7939] do_sendfile+0x400/0xe50 [ 147.741183][ T7939] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 147.743244][ T7939] __do_fast_syscall_32+0xe8/0x680 [ 147.745218][ T7939] do_fast_syscall_32+0x32/0x80 [ 147.747061][ T7939] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 147.749344][ T7939] [ 147.749344][ T7939] -> #2 (&pipe->mutex){+.+.}-{4:4}: [ 147.751878][ T7939] __mutex_lock+0x1aa/0x1ca0 [ 147.753619][ T7939] anon_pipe_write+0x15d/0x1bd0 [ 147.755510][ T7939] __kernel_write_iter+0x720/0xb10 [ 147.757392][ T7939] __kernel_write+0xf5/0x140 [ 147.759156][ T7939] autofs_notify_daemon+0x4db/0xd60 [ 147.761045][ T7939] autofs_wait+0x10f3/0x1ac0 [ 147.762773][ T7939] autofs_mount_wait+0x132/0x3c0 [ 147.764602][ T7939] autofs_d_automount+0x4b2/0x960 [ 147.766498][ T7939] __traverse_mounts+0x1b9/0x830 [ 147.768303][ T7939] step_into_slowpath+0x772/0xf50 [ 147.770160][ T7939] path_lookupat+0x627/0xc40 [ 147.771810][ T7939] filename_lookup+0x224/0x5f0 [ 147.773629][ T7939] kern_path+0x35/0x50 [ 147.775200][ T7939] lookup_bdev+0xd8/0x280 [ 147.777295][ T7939] resume_store+0x1d6/0x490 [ 147.779224][ T7939] kobj_attr_store+0x58/0x80 [ 147.780959][ T7939] sysfs_kf_write+0xf2/0x150 [ 147.782669][ T7939] kernfs_fop_write_iter+0x3af/0x570 [ 147.784633][ T7939] vfs_write+0x7d3/0x11d0 [ 147.786596][ T7939] ksys_write+0x12a/0x250 [ 147.788474][ T7939] __do_fast_syscall_32+0xe8/0x680 [ 147.790371][ T7939] do_fast_syscall_32+0x32/0x80 [ 147.792275][ T7939] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 147.794513][ T7939] [ 147.794513][ T7939] -> #1 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 147.797052][ T7939] __mutex_lock+0x1aa/0x1ca0 [ 147.798743][ T7939] autofs_notify_daemon+0x4a6/0xd60 [ 147.800668][ T7939] autofs_wait+0x10f3/0x1ac0 [ 147.802355][ T7939] autofs_mount_wait+0x132/0x3c0 [ 147.804269][ T7939] autofs_d_automount+0x4b2/0x960 [ 147.806485][ T7939] __traverse_mounts+0x1b9/0x830 [ 147.808310][ T7939] step_into_slowpath+0x772/0xf50 [ 147.810177][ T7939] path_lookupat+0x627/0xc40 [ 147.811821][ T7939] filename_lookup+0x224/0x5f0 [ 147.813569][ T7939] kern_path+0x35/0x50 [ 147.815091][ T7939] lookup_bdev+0xd8/0x280 [ 147.817145][ T7939] resume_store+0x1d6/0x490 [ 147.819388][ T7939] kobj_attr_store+0x58/0x80 [ 147.821469][ T7939] sysfs_kf_write+0xf2/0x150 [ 147.823157][ T7939] kernfs_fop_write_iter+0x3af/0x570 [ 147.825113][ T7939] vfs_write+0x7d3/0x11d0 [ 147.827085][ T7939] ksys_write+0x12a/0x250 [ 147.829119][ T7939] __do_fast_syscall_32+0xe8/0x680 [ 147.830947][ T7939] do_fast_syscall_32+0x32/0x80 [ 147.832700][ T7939] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 147.834979][ T7939] [ 147.834979][ T7939] -> #0 (&of->mutex){+.+.}-{4:4}: [ 147.837348][ T7939] __lock_acquire+0x1669/0x2890 [ 147.839102][ T7939] lock_acquire+0x179/0x330 [ 147.840724][ T7939] __mutex_lock+0x1aa/0x1ca0 [ 147.842355][ T7939] kernfs_seq_start+0x4f/0x2a0 [ 147.844111][ T7939] seq_read_iter+0x2c1/0x12d0 [ 147.845856][ T7939] kernfs_fop_read_iter+0x46c/0x610 [ 147.847701][ T7939] copy_splice_read+0x618/0xc20 [ 147.849469][ T7939] do_splice_read+0x285/0x370 [ 147.851172][ T7939] splice_file_to_pipe+0x109/0x120 [ 147.853008][ T7939] do_sendfile+0x400/0xe50 [ 147.854626][ T7939] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 147.856799][ T7939] __do_fast_syscall_32+0xe8/0x680 [ 147.858633][ T7939] do_fast_syscall_32+0x32/0x80 [ 147.860435][ T7939] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 147.862647][ T7939] [ 147.862647][ T7939] other info that might help us debug this: [ 147.862647][ T7939] [ 147.865976][ T7939] Chain exists of: [ 147.865976][ T7939] &of->mutex --> &pipe->mutex --> &p->lock [ 147.865976][ T7939] [ 147.869764][ T7939] Possible unsafe locking scenario: [ 147.869764][ T7939] [ 147.872103][ T7939] CPU0 CPU1 [ 147.873888][ T7939] ---- ---- [ 147.875728][ T7939] lock(&p->lock); [ 147.877140][ T7939] lock(&pipe->mutex); [ 147.879309][ T7939] lock(&p->lock); [ 147.881598][ T7939] lock(&of->mutex); [ 147.883033][ T7939] [ 147.883033][ T7939] *** DEADLOCK *** [ 147.883033][ T7939] [ 147.886358][ T7939] 2 locks held by syz.5.453/7939: [ 147.888546][ T7939] #0: ffff88801309f468 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 147.892267][ T7939] #1: ffff888022be6c30 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12d0 [ 147.896101][ T7939] [ 147.896101][ T7939] stack backtrace: [ 147.898627][ T7939] CPU: 1 UID: 0 PID: 7939 Comm: syz.5.453 Tainted: G L syzkaller #0 PREEMPT(full) [ 147.898661][ T7939] Tainted: [L]=SOFTLOCKUP [ 147.898668][ T7939] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 147.898679][ T7939] Call Trace: [ 147.898689][ T7939] [ 147.898697][ T7939] dump_stack_lvl+0x116/0x1f0 [ 147.898728][ T7939] print_circular_bug+0x275/0x340 [ 147.898758][ T7939] check_noncircular+0x146/0x160 [ 147.898790][ T7939] __lock_acquire+0x1669/0x2890 [ 147.898810][ T7939] ? __kvmalloc_node_noprof+0x3ac/0xa40 [ 147.898838][ T7939] ? kernfs_fop_read_iter+0x46c/0x610 [ 147.898869][ T7939] lock_acquire+0x179/0x330 [ 147.898884][ T7939] ? kernfs_seq_start+0x4f/0x2a0 [ 147.898911][ T7939] ? __pfx___might_resched+0x10/0x10 [ 147.898938][ T7939] __mutex_lock+0x1aa/0x1ca0 [ 147.898964][ T7939] ? kernfs_seq_start+0x4f/0x2a0 [ 147.898992][ T7939] ? kernfs_seq_start+0x4f/0x2a0 [ 147.899020][ T7939] ? __pfx___mutex_lock+0x10/0x10 [ 147.899051][ T7939] ? rcu_is_watching+0x12/0xc0 [ 147.899076][ T7939] ? trace_kmalloc+0x2b/0xb0 [ 147.899100][ T7939] ? __kvmalloc_node_noprof+0x3c9/0xa40 [ 147.899127][ T7939] ? kernfs_seq_start+0x4f/0x2a0 [ 147.899152][ T7939] kernfs_seq_start+0x4f/0x2a0 [ 147.899179][ T7939] seq_read_iter+0x2c1/0x12d0 [ 147.899204][ T7939] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 147.899230][ T7939] kernfs_fop_read_iter+0x46c/0x610 [ 147.899260][ T7939] copy_splice_read+0x618/0xc20 [ 147.899287][ T7939] ? __pfx_aa_file_perm+0x10/0x10 [ 147.899313][ T7939] ? __pfx_copy_splice_read+0x10/0x10 [ 147.899343][ T7939] ? __fget_files+0x204/0x3c0 [ 147.899369][ T7939] ? __pfx_copy_splice_read+0x10/0x10 [ 147.899394][ T7939] do_splice_read+0x285/0x370 [ 147.899421][ T7939] splice_file_to_pipe+0x109/0x120 [ 147.899450][ T7939] do_sendfile+0x400/0xe50 [ 147.899477][ T7939] ? __pfx_do_sendfile+0x10/0x10 [ 147.899500][ T7939] ? putname+0xf5/0x1a0 [ 147.899518][ T7939] ? __ia32_sys_futex_time32+0x1d9/0x460 [ 147.899542][ T7939] ? __ia32_sys_futex_time32+0x2fc/0x460 [ 147.899592][ T7939] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 147.899614][ T7939] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 147.899643][ T7939] __do_fast_syscall_32+0xe8/0x680 [ 147.899673][ T7939] do_fast_syscall_32+0x32/0x80 [ 147.899704][ T7939] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 147.899727][ T7939] RIP: 0023:0xf707d579 [ 147.899742][ T7939] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 147.899759][ T7939] RSP: 002b:00000000f546d55c EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 147.899778][ T7939] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000009 [ 147.899790][ T7939] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000000 [ 147.899801][ T7939] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 147.899813][ T7939] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 147.899824][ T7939] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 147.899842][ T7939] [ 148.470110][ T4360] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.595818][ T4360] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.707083][ T4360] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.757333][ T4360] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.836243][ T7903] bridge0: port 4(syz_tun) entered disabled state [ 148.840037][ T7903] syz_tun (unregistering): left allmulticast mode [ 148.842166][ T7903] syz_tun (unregistering): left promiscuous mode [ 148.844594][ T7903] bridge0: port 4(syz_tun) entered disabled state [ 148.914885][ T4360] team0: Port device geneve0 removed [ 149.012590][ T4360] bond0 (unregistering): Released all slaves [ 150.352882][ T12] net_ratelimit: 81 callbacks suppressed [ 150.352901][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 150.358694][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 150.462914][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 150.466039][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 150.572848][ T1216] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 150.593399][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 150.596056][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 150.697617][ T4360] hsr_slave_0: left promiscuous mode [ 150.699673][ T4360] hsr_slave_1: left promiscuous mode [ 150.702765][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 150.705739][ T4360] veth1_vlan: left promiscuous mode [ 150.707463][ T4360] veth0_vlan: left promiscuous mode [ 150.722819][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 150.742766][ T1191] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 151.307176][ T4360] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.356745][ T4360] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.425860][ T4360] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.495815][ T4360] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.590870][ T4360] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.685878][ T4360] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.746115][ T4360] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.795920][ T4360] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.854318][ T4360] team0: left allmulticast mode [ 151.856292][ T4360] team0: left promiscuous mode [ 151.857936][ T4360] bridge0: port 1(team0) entered disabled state [ 151.979503][ T4360] team0: Port device bridge1 removed [ 152.094206][ T4360] bond0 (unregistering): Released all slaves [ 152.157219][ T4360] bond1 (unregistering): Released all slaves [ 152.167639][ T4360] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 152.183950][ T4360] bond2 (unregistering): (slave gretap1): Releasing active interface [ 152.414975][ T4360] bond0 (unregistering): Released all slaves [ 152.476747][ T4360] bond1 (unregistering): Released all slaves [ 152.481480][ T4360] bond2 (unregistering): Released all slaves [ 152.564633][ T4360] tipc: Left network mode [ 152.879386][ T4360] hsr_slave_0: left promiscuous mode [ 152.881672][ T4360] hsr_slave_1: left promiscuous mode [ 152.885508][ T4360] hsr_slave_0: left promiscuous mode [ 152.887737][ T4360] hsr_slave_1: left promiscuous mode [ 152.892245][ T4360] veth1_macvtap: left promiscuous mode [ 152.894979][ T4360] veth0_macvtap: left promiscuous mode [ 152.896969][ T4360] veth1_vlan: left promiscuous mode [ 152.898951][ T4360] veth0_vlan: left promiscuous mode [ 152.903256][ T4360] veth1_macvtap: left promiscuous mode [ 152.905117][ T4360] veth0_macvtap: left promiscuous mode [ 152.907054][ T4360] veth1_vlan: left promiscuous mode [ 152.909417][ T4360] veth0_vlan: left promiscuous mode [ 153.093370][ T4360] pim6reg (unregistering): left allmulticast mode