last executing test programs: 14m58.581268707s ago: executing program 0 (id=1567): syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) futex_waitv(&(0x7f0000001740)=[{0x10, &(0x7f0000001380)=0xffffffeffffffffe, 0x6}], 0x1, 0x0, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getpid() syz_open_dev$usbfs(0x0, 0x80, 0x113201) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r3) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x8c}}, 0x0) write(r2, &(0x7f00000000c0)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r4, &(0x7f0000000700)="3100d90daaa91f198d99db922334963f621e49a6ca0b870113948d1bd6e243e5da22cf2ba7bca0e3865eaa6666cca12e329a784c6e63a08e7d57f2e2a6fa1f85d8a30f16645140e37208d917f43c0e86486bb3e9fd67f758c7f029fcbacd68c67fd996ba190681103b5cb8dbd189543ac4d64867e39469625a900852b3220d4788d9f52245fb79fec8cffbcf9a5d9764a4d5c3af2d283279ca35f820d073a1f7a0e134b89c8a9433c78e6698004ab5f3584de90135190d323bf6d75843821518979868ae7c7734", 0xc7) 14m57.950783592s ago: executing program 1 (id=1575): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x163442, 0x5) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000140)={0x17c04, r1, 0x3052, 0x973f, 0x81, 0x1}) 14m57.701923798s ago: executing program 1 (id=1578): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x13, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x7, 0x0, 0x4}, {0x6}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@li, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x51}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x2}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) dup2(0xffffffffffffffff, r0) 14m56.771327547s ago: executing program 1 (id=1579): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='270', 0xffffffffffffff1d) syz_io_uring_setup(0x46f9, &(0x7f0000000000)={0x0, 0x0, 0x10, 0x2, 0x30d, 0x0, r0}, 0x0, 0x0, 0x0) socket(0x2, 0x1, 0x0) syz_io_uring_setup(0x6283, &(0x7f0000000140)={0x0, 0xa50c, 0x20, 0x0, 0x10365}, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000003000)='./dir0\x00', 0x0) mount(&(0x7f0000003100)=@filename='127.0.0.1:6789:/\x00', &(0x7f0000003000)='./dir0\x00', &(0x7f0000003200)='ceph\x00', 0x0, 0x0) 14m56.683959091s ago: executing program 1 (id=1584): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, 0x0, 0x40814) sendmsg$nl_route(r1, 0x0, 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, 0x0, 0x2001, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_usbip_server_init(0x4) socket$tipc(0x1e, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x2) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x230}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x10, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) (fail_nth: 1) 14m55.809505232s ago: executing program 0 (id=1586): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x163442, 0x5) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000140)={0x17c04, r1, 0x3052, 0x973f, 0x81, 0x1}) 14m55.132500382s ago: executing program 0 (id=1588): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/md0\x00', 0x4002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r2, 0xc0485660, &(0x7f00000001c0)={0x2, 0x0, @raw_data}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x8, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x1, @remote}, 0xa, 0x0, 0x3}}, 0x26) sendmmsg$inet(r5, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)}}], 0x1a000, 0x8040) ioctl(r0, 0x80480911, 0x0) 14m55.132110931s ago: executing program 1 (id=1589): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xe760ab69196f335c}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x3, 0xb}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r7 = socket$kcm(0xa, 0x1, 0x106) mount(0x0, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000100)='debugfs\x00', 0x2008011, &(0x7f0000000280)='gid=0,no9\xe1\x12 \x91\xfdP\x83\x0e\xb9G!8\xb0\x89\x99\x81\x02\x85\x1cE\b\x9f\x0f8-\xf6\xa4 \x99\x8d\x1d\x8a\xc7\xc5\x96\xe8Ee\xd5\xac\x18(\x9d\tIr\xdd\\\x95\x9eu}\x06ib\x88\x8c\x9d\xde\xeaT0;\xb4\x1f\x8cm\x15y\xb4[Gc\xaf\xee#\xcf>Qk\xcf\xfc\x12bY\xfc&\x93\xe0\xcc#\x93w\x84@/VV\xbc\x0eL\xeb~1\x832\xa7\xf7l\x1b\xffh\x96O\x84h\x1b\'\x15\xae\xc8\xfbrK1\x1b\x82\\kU{!\x8fe\xbd\xfa\xf3\xac\xdc\x9a7\xbb\xdf\xdf\n\xc4U\xfa\x15\x03e\xe2[\xa6\xd3\xce%\b#s\x05\x00\x00\xc0\x03\x84\x0e\xc3\x0e\xce\x1e\xe4\xc8\xd4s\xd8\xe4W\x8a\x18j\xc4S\xbf\xc9\xcc1\x87\xa0\f\x91/\x8b\a\xdd\x1bj\xff\xae\xfcJM\x9b\xc3\xe6q\xc1T\x19\xa9,\xef\x8ax\xbb\x18\xe7\x99\xff\x10\x15S\x19\'?\xfbt/\x86\xc6\xd3\xb2c\xc4*\x06\x05NT\xaa_\x97\xda8\xc8\xd0\x8d\x87Yk\xa1\x83\x9f\x86.[\x83\xdf&\x13\xcc\xb9\x01`D7R\xb7o\xa1\x1e\xffD#\t\x18i\xed\xa4<\x9c\x02\x00\x82\xbd\x93\x9e+\x03\xc6w?\x83\x05\x0e\xf3TB]\xc0V\x1b\xf3\xfe\xe1s1r\xcb\xbc9\x19#3k\xd4#r\x9e=C\xd6k\xf89S\xb3\xf4\x84\xd8)\x17L\xeb\xf4\xf3iW\xe6\x9b\x8a\x13\x01\x0ej\x88N\xb5\xf7e;\xdd\xe1\xfc\x9c\x8a\xae>=n\xb3\x12\x7f\x94\x19~\x93\x92xK\x9b\x9e\xa6\x9e\x16v\"e\xe80\xa3%oS\xb4\xad\xb1\xb6\xe0\xef\x1fy\xf2\x1aN\xd7\xee\\*6\xa6\x8e\x84 \xc5\xc0\xd4/\x0eVg\xc1\xd9\xcb\xdc\xc7p)1\x00u\xa5\x8c\n\x91l\xef\x17\xfc\xc2\xef\xb9\x03\b*\x1c\xc6\xe8\x9a\xe0o\xba\x1d {%\x904\xa2\x8f\xed\xca%Z\x1a#\xddA7\x1b\xdf\xd5]\xc6\x0f\x9a\xf5)g\x8c\x98\x9e\xe6\x9b\xbd\x96\xc3\xb6}3\x98r\\.o\xe0\xee\x1d\x80\x0f\x8c\xa0%>]\x9a{=\xdd\x80\x13.\x96\xf9]u\x96P\xdb+A\xaa\xce\x9dP\xde\v\x16\x1d\x05\xbe\xd3\x8c\x99\xb2\x1b\xccX\xfdy\x05\xb0Q]bB') socket$tipc(0x1e, 0x5, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f00000000c0)={0x6, 0xd44, 0xffffffff}) setsockopt$sock_attach_bpf(r7, 0x29, 0x1a, 0x0, 0x4) 14m54.873148921s ago: executing program 1 (id=1594): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='1', 0x1) (fail_nth: 6) 14m54.173171622s ago: executing program 0 (id=1595): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000008"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) listen(r2, 0x5) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi0\x00', 0x2, 0x0) 14m54.000648157s ago: executing program 0 (id=1596): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0xb, 0x12, r0, 0x0) munmap(&(0x7f0000ff9000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ff8000/0x2000)=nil) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a010800000000000000000200000009"], 0xf0}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in=@loopback, 0x2, 0x4}]}]}, 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@migrate={0xa0, 0x21, 0x1, 0x4, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4a) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./bus/file0\x00', &(0x7f0000000140)={0x240, 0x80, 0x10}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/apparmor/parameters/debug\x00', 0x1, 0x0) 14m53.923439596s ago: executing program 0 (id=1597): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x22, 0xa01, 0x0, 0x0, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000ffdbdf25010000004c000280bc00018008000100040000000800010002000000080001000600000008000100070000000800010006000000080001000700000008000100070000000c0001000000000000000000100002800c0001"], 0x70}, 0x1, 0x0, 0x0, 0x40005}, 0x40) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1801000030"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1/completion_nsec\x00', 0x1, 0x0) 14m39.386376715s ago: executing program 32 (id=1594): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='1', 0x1) (fail_nth: 6) 14m38.588808963s ago: executing program 33 (id=1597): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x22, 0xa01, 0x0, 0x0, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000ffdbdf25010000004c000280bc00018008000100040000000800010002000000080001000600000008000100070000000800010006000000080001000700000008000100070000000c0001000000000000000000100002800c0001"], 0x70}, 0x1, 0x0, 0x0, 0x40005}, 0x40) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1801000030"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1/completion_nsec\x00', 0x1, 0x0) 9.613413542s ago: executing program 2 (id=5010): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4102}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000022c0)=@delchain={0x54b8, 0x65, 0x8, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xfffb, 0xffe0}, {0xa, 0x6}, {0xa, 0xfff2}}, [@filter_kind_options=@f_route={{0xa}, {0x5480, 0x2, [@TCA_ROUTE4_ACT={0xdc, 0x6, [@m_ife={0xd8, 0x7, 0x0, 0x0, {{0x8}, {0x4c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xef33, 0x1, 0x4, 0x8, 0x1}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @link_local}, @TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x4}]}, {0x66, 0x6, "dc7212743e1e452f99f205747a2fed9ed4489476a6fae4c6b4a096ac6f77302143ec79a230b0652f58a2537d7769ff0e93bbd65347a1b2f5d151387caf9e7d1d9384548a1639f9bf62fdc2f7f3622c81b7a322606f98cf5d77f96f913dc30476a4fd"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_ROUTE4_ACT={0x53a0, 0x6, [@m_gact={0x10e4, 0xe, 0x0, 0x0, {{0x9}, {0xb8, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x101, 0x7fffffff, 0xffffffffffffffff, 0xff58, 0x81}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb85, 0xf580, 0xffffffffffffffff, 0x2, 0x9}}, @TCA_GACT_PARMS={0x18, 0x2, {0x74, 0x9, 0x6, 0x7ff, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1582, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x5, 0x3, 0x9, 0xfffff449}}, @TCA_GACT_PARMS={0x18, 0x2, {0x10000, 0x8, 0x2, 0x8, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0xf, 0x8, 0x0, 0x3, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x80, 0x4, 0x7fff, 0x2}}]}, {0x1004, 0x6, "3f53aad1c5630d524569fe354f61f3889647a8fd66102e523e04219545639c45f20c20e110ce0e7d8881477467dd38a4d8daba8ab5f6f051a41bde81845775da58b729314bc7392fee9f295f095278b80aa1510bef28dbb1d659157a7c497e21874545e0b7f288241cb68b3ae455832a1d92db12b499b5df4028b3710024ef58733bb99798c791bf8c1866a2aab5694258a93f972606840c8fa4a647e71509a2ceabdb1dfc5f42407ad9b909e503a16d3b7dd42ee942ab753d3a85e4177bab678b24fe842e2dd3df117b361d160f72077f5ac6b8f8d42bc38fea164070113289df7cc509e6c2ca3756618d4b41d2e29f415f66cbb09fa6ebeffd97b245c773fc80f4881c22577b43996795f018595fdcd4f1497c22fee0bdf0c38791baa3ec09c18f060afb280822b46b85d83968c40cddc16998db7f5f4b408df8eb71567df06a23f4d01180939f9392a584874ec8e9ff89e99c39bf8fa584317deafe85d54336f408fab0522da4a30f2e89c128d984c35681c83ccb43364f0f1486096d2e65a8e811a3f7a9c53a329bdf70b63f250302e5c76af3dddca30dfce6d1dd6560812e948ac141ca1343d3b1ef81b3812dbf6dbd67a6695e5d63bae650dabb99b13a39704296da4cb6d96d3a1ce8772b9744261bfb650ef87b54f562ef08fc851d2298001fa4bfa76887867b0ab3c54948a151fd2ab04efbfed9f3f1a709306842180ca21e84e13be0632674ed704c8fb489704b23ede29105af1a5a0054285a4c989614fce2572121377155c1864f0565239e3284c360b94f7b112b64c34432af3eacf5d1729257f82cc1afe646bc3d270c4a2ea4f8cfddb0fb27efef28901d81073daa5aaf004611d50e8367cd4bf10e6c8adef26e0bdfa46ca8c4a474ec5e6dcb91e43892964a49ccb896837b644211073f6373c699e7fa6a56111d63c72b197dba2c1612322d0cca43375bf024561e6b23809f79ea1d7cea9ce82c6bcb32a2b405b29e1e99f2837a19462034303ec3cfcd1582f62f8f2cf70220ab1c0c67840a80e0b2932c9fb7086d5c049abe65c875cbd79746ab44b4f82b2cc3f2c9ceeb164c2c1a260f903b78b2acfa8d0dd1d67d96e1d007c68cb01e9dab5805ebf7f640ae6ecf511ab670162a507816639b61cbf25ccdf4b782e5b02287953198828e449f633c6a862af1a5dc9e76a69626d1f09d12c082113942e82a58622b0d2f3aa700d34ac74f4b214962bddf0882effa56f887267dade00402999615217138facffc91e8ed97130159d82e9dddddb06a4b8cfa7c1311f6968959b082f5d2e2327c2b343385462c878dfdfb95a4b290151907a4c84fd2c2d291fcc1215a75fa99545f2b7b50cc17c21ff9cb72ed94a4b6650b867adaeadc28d2892dcd29a15ea46cb8deb87a9ff5ca5f93e191625c316a87f0484ba6700843c504532ee2001fe7f6095698d910bf8788a91aae7673f68e58d4b3d384856df3f65e0287b626be0c0feed878aa547d661d58ba93d031833c1d5ca9d4dd4a960a65781a58749c80bdfacc12018d9c1f096b2b2d3b5a7ae023e042c9138a658404e49683a8a70fd83fde92bb96a2bdf29c695c17c8aebac2b9abf323c02d5854fa3ba463110762ce87906bf56a7e9ece1875575a1c6526d65b9902805548a7e68f12853df1e1108cef16405e6d0f6b0a2357393ff73e33f9ee7daacf2c0363f628af7dec2426c2349753c36153c896e398e115648e6d4b836624325199862f70846ae49e405e4b016f47494318112533a9e0690da9316bb366e3cf2ca452629a5f2070b045598e75af24b3065a7dd37dd386fd604452381e8a0a77a9cf82f78da92370d58679a816ab930b72d26c7608e70d3c7f37b7f4e98ed92571cfa73a8175683e04d6a037b58dbdfd0f3d007d019e78c17db417d964f689d16358add151183598ef1f042966f7700c5cf0231ba1fcb6919111b578e556d5c062c35d2e6d113a14b51db4a6b102671ac375dbe3c96a258b1c7975a3c49a7aed38e92100847f3afced8bb4e7b51bfbfd3feadb73988b6cb1fce38808e17d8c2801e07f49aef24daf9b6b046d6da1ef50f5977c4e84408b6d5cf4a616bc8a90daeade00a89be631772a8600a6465362b61b3f319a30ca5c99817c1e0fb54dfc42c6572a08bbbd0391eb027c139e2f911803b2eb7fea285c1c0655f7e9a48fb7c97b562d40a60fd0471ebbb94cd272ea35f3f99b9ab9aca2efe3c31a1d5f7bb71a864dbc499fdb713b09a8d916995647b7ddeb6e9d04e0084ad06732d2a23d7e0548b5ae09c0c7a3ccf05fb536c05b00df6a3d696c58d9c14f476593fbb7bfcc24e0e076910f975bb91947377484f544ae380d18da958b69f4a8864e37e2cf5e11eea1bf71ee2fe33fe49016f660be678cefc585410af0ab68374806950b955dc511c9505f777d22ef59a3f26147c00f48bfa39d72e6174f65774926c7271994121122efd048c0e4ee7f6457759e4df58544687dcfc0103d8b948fadd601e056e20c64e61729434f998b638cabffcc8e5ab0d6c2352b12f642882a3576021cda61440615e1a799a549412c172b80f852181c44ed10d9882435d68c063db2f6a53ccf79290c1f24904130410e1c8da6c5fb339772f0f380447ee43b148c7c7c25735c2f4e09fd2551b88f29f5a882c6f18460c6892cdd47c404104298d3c0cbd3a9aeed34f6167c4a97d6c10ea9a74bca3ef64d577f781cd4dbf1d03c21025e1ab67de048994ffdca6ecb48be04c59fcc6d4eef1ec11066f061f4fb697aede990cae59c97d65940889a873c716c8c7ca2bab635e5f15c2e0eb3010e1bd8b81d80720c1cd20b83202b04832befd8c98e335888ec06b93b6d4c0068f4071c10183b2e6f6669024ffb0d2b17497762f2fdde95cde7d87fa295f54b7d136b6e288cf5903a2f1f702879c191ae8d98a317f16dd0f8c1549a223306013ee842d4b611d23cf71ded88f60a004fbbd6324d9015adc17b00135ad77cbd12bd4e51c46989e88b525ea02dadf6112f81614eb3bc0e94292647ae38315a42570d87129a3739906ddb8d072f3bae8ee3bfc98f6a46aa01c6a34a88eea3b96c2d5af0df6d255e66508cb396f65ae958dd83cae6d5774a15f7a1ec7d4d7958479ad5fe1a604243a51523fcf8df89b332e0c1a9312ad6edc8fa084e09f0b01b90d0001b37292b59a0829b2cc6f489b8e827fb3882a0cdfdcbb98024f76797ed15d38ad162d2a7289f21f9485ef4e81fad31917eeb67db77a52af4f4a773f2fa6345731ede83f74fc2ef5f1d4750fcc5854eef7075b32e38d4b434d8a2058877df39dbd454bfbdac037ef2e8929d5a06218565965ee022ac9617a575edae99349694de68ad342de7f7b92562183d9e261648754af95090f8e398621594cc3fa3399a5ab7d750cf976fd92f3b2956d1d7a3838425b393928a51adb1c99ee0b85fe3656fc6074161ece6d03fcd57a71234fa9c6f690c6c13ea599ae8fea389779e683d18985663529cbe7127eff57a73cb10d7c3cba69c2733c805dcac28d6264eb84223597df2f6a99777e83d441f6dfab366910ec4de74f59797d0f2ab3f115d93daf8385985fee7b34999c9be4765615be11c48d627727496ee1117096e5ad980a12dfbf9d8516c428bc78bcb01b47b95eb81e48a6b009a0a7925440fa47f0b79865c0b482dd0aeaae1d106e42526b37b6264cbac1e4df1048c6af9a1ce0aa7078a7a6db26ef95ddb057d0e773ca9a65faede56cb9f310b7cc4a1fde1bbd29372935ce0b821dc86881ec88186bc460135e727f25bee413c67679a84d54b89d8d8e26bc6fa6aa465c749ca9e5195ebb8ae9e3ca21398560ead62d153272e23cf46b8ebc12e76f6fc76acf9882b507f88cee99e674c1371e7c5e4b9d62727d4b5221e5ed565ded5b7a0a392e3dc6384b531770cb2c4c49df76f3bc2702be8d8d9280e56707cea3ddb46244a66e90528693b17a4df0ed0cf14df55351716379fadfb31df37a8186b1789baea0af793228dba424a5e25cfc61a664bd9d17c7b1c444b9507b80db6c4a01da5a5eb38985c673375bedfab162a9c682b05c96e7b133c870634c79d5447ed13fdd4c9ed8aedb7d8980866d58ee69f88cffa25826a370debd3ccbddac3eff4fbdbe1e84dde8058e16104d194e65ab13abcf66b870e34253a10bc7cb1189b45ba5a502d213051ab5d3e78c9a71c163b7c6cbfb74cebc9824d8d07e9d6417f4ec8d3c4e990c5553918bb02e411be6ed995d8c18d556bf3b92328a075b81baae1c1f51fe22cf9fe7838a6431269f8682764516c30c495c3681aa13d13f425b083c7af0819173d1cd376977762dd90d496752f22edf060a490a654b0fb42616d8d8606452b928903b084bffc86d4d04c331c656713e01de1dad0dd9bc8511b795d924e891ef0e976d0aadda4cc9782ac5c37ed97512a4af6f0412bad1864aafddde601f4c311d4dd6e1da44f0bef10c8dedc2415dd3748636e580594023f26fa292a4f5bc62636e5ccf96db75728da5df96d201ff18dcde9f9df3e6c4dfe659505920cc3da91adc2b0889fdb699bff09a0d12553f2fb2bd75935d8ab2b38a079f141fa7a36f4f69129302be4d289084dfb1269d0a6a46358c8cd749cba06ee44f7f75e5a474a9b6c29a04a1afb64fa5811485c79f52db6d1d75ba46d3d7c0d5d2f712ff0bec5af4d7207564351ab4b345ee698032f473b0d628b6158a6d9d38d4b436fb74e3d70e9727a45bbfc0eb44833723fdd6d52673f25cee3956264a987ecd7ae49437765d31252dc905f8cee12e89854bfb406c9c39ede004e20b6d45df2808254805753b43107e60bbce834bfdd321b190bfbb081d99ffcdbf8245a275198c62e0c705ad51db0a364b9d2054161750320d742437a31620026c50ded7b7a9e130c5889ea341c6e9d1d18632802fd3098d63256a4e949b6bc6779bde2ec1c9ea5ef407ce8e3b0f23e3e80ba1f3f01c13c1ffca12b047dfcfde8bf9578fc48d6f4521e8425bc3a29d24630a160a07fb3eec9e1567ec1a7395dc7cc14003f136c99899a267f612f15d36e155a9249d99c30e63da98f319b000e4019922b99fc31ab8293f59d75251e8e456a6447ad222405fc0dba31290c9b1bbb7417b8950a289121096651df78cc12f5fe5acdd1eb3e43df0dd83bcdeeb38ff085853d72da98a16ed6f2239d393656632cb08b6bd321a36f44e1fbe45b85b8e14e1d56c145e47746ab94fe6105989c83afc8708e43b7ffda0e2a5234a6fb4c6cb5d54b63d3b0fe2211c1b813240f06ccbd47b94ab367366537a380da76481cb682c36106e8ff255ce706331206ee06c8568985c0c840b3832689df573cb586407da7b4486a511c02463287f7fdeab4541199f3726a69f6e5dfeb6e1e9b78962044963665328c77c95a8e182e494615c662cb1da01139bf8b84c6fed89607c1ffa6b6d3848ad41667db333bb962c7e4e1c921df26ac65025126f74d65439abb494c59a93ea4817e4c47a9275aca57b616206e70cade66a2874fc038283b1c3a50710bb7fd431a2e02a4bc26add544f7e09cd0b99b59739bd0b6120085299a8efc3cff3ed6af42d9f2adb5ca6e5ea041b4f00266893484c1e59912d3242fe92efee7594f5c65f201435174fe6486838cacf8a4e834fc286fb329da8457f1255d278292a4abcb35bcb7bc8a57b1e25d53d89fb6823e390318305798870cb203c9feecb1b0d6598f6ec0f4805ffd08e01a401383e816bd6d71f44489adb859fd107961fe146e117e754f6fc9208b8d3995af836d983495cb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_police={0x548, 0x4, 0x0, 0x0, {{0xb}, {0x49c, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0xd, 0x4, 0xfffffc01, 0x10, 0x0, 0x1ff, 0x89, 0xfe1, 0x80000001, 0x5, 0x80000001, 0x9d8b, 0xc, 0x8, 0x0, 0x6, 0xfffffff8, 0x7, 0xa1801d92, 0x4, 0x7, 0xfff, 0x89a, 0x7, 0xfffffff4, 0x5, 0x400, 0x2, 0x2, 0x9, 0x5, 0x1bb00, 0x6, 0x1, 0x9, 0x8, 0x1, 0x1, 0xc72, 0x7, 0x5, 0x67, 0x9, 0x0, 0x81, 0x7566, 0xadd, 0x80000000, 0x180, 0x511, 0x9b, 0x6, 0xe, 0x71a, 0x2, 0xff, 0x8, 0x80000001, 0xfff, 0x200, 0x9, 0x7, 0xb575, 0x1ff, 0x2, 0x40, 0x2, 0x8f5, 0x7fffffff, 0xff, 0x5, 0x63, 0x2, 0x4, 0x1, 0x2, 0x3, 0x0, 0x8, 0x0, 0x8, 0x2, 0xfffffff7, 0x4, 0x0, 0xfffffffa, 0x1, 0xd9, 0x0, 0x9, 0x5, 0x40, 0x80000000, 0x5, 0x747, 0x1c466ce2, 0xff, 0x313, 0x676, 0x8, 0x8, 0x0, 0x1, 0xfff, 0x2, 0x400, 0x1a5, 0xfffffffa, 0x7ff, 0x1, 0x4, 0x5, 0x6, 0xffffff00, 0x3, 0x2, 0x1, 0x3, 0x1, 0x1000, 0x8001, 0x6, 0x80000001, 0xc, 0x7, 0x5, 0x3, 0x1, 0x7, 0xfff, 0xfffffffd, 0x8, 0x7604, 0xfffffff7, 0x8001, 0x3, 0x8, 0xc0, 0x8, 0xc, 0x7, 0x8, 0x400, 0x3, 0x5, 0x401, 0x5, 0x9, 0x0, 0x2, 0xe9, 0x8, 0x2, 0xf, 0x7, 0x1000, 0x6, 0x1, 0xfff, 0x91, 0x6, 0xf, 0xf9, 0x8, 0x80, 0x9, 0xbba000, 0x7, 0x7fffffff, 0x7fffffff, 0x3, 0x101, 0xd, 0x9, 0x7f, 0x3165, 0x9, 0xa, 0x1, 0xfffffffe, 0x3, 0xfffffff1, 0x400, 0x101, 0x0, 0x800, 0x9, 0x3031, 0x6, 0x7, 0x2, 0xd21, 0x7, 0x7, 0x94, 0x5, 0x7fffffff, 0x0, 0x4, 0x6, 0x8, 0x800, 0x5f, 0x1, 0x4, 0xe, 0xa, 0x40, 0x7fffffff, 0x81, 0x5, 0x8001, 0x100, 0x80000000, 0x0, 0x3, 0x800, 0x0, 0x5, 0x1ff, 0xfffff1a2, 0x9, 0x1, 0x2, 0xffffffff, 0x7ff, 0x9, 0x6, 0x1, 0x8, 0x0, 0x7, 0x0, 0xffff, 0x313f0000, 0xff, 0x1, 0x4f, 0x40, 0x54, 0x7, 0x3, 0x10, 0x8, 0x9, 0xfffffff7, 0xdb, 0x1, 0x915, 0x5, 0x7fffffff, 0x0, 0x27f299, 0x2, 0x1]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RESULT={0x8}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7a96, 0x0, 0x10, 0x6, 0x0, {0x4, 0x1, 0x7, 0x2, 0x8, 0xf7d}, {0x0, 0x2, 0xfff8, 0x9, 0x6, 0x7}, 0x7, 0x5ff8, 0x6}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffffffff}]]}, {0x81, 0x6, "6797f3d932631f0f352992732f8ce80ac14772ac2b77573b6d1f68be5f142429f27f74a0f6467ad115e7d18e1d97a19127d3e1845e43b926e2173d67a87a566a3510bd71d1c442e390060505db65b95e827172204a61427db2d5c8f6c79343e4841e16e24f80c983ac1d9c6605c8b41d4f04708db9fe370aa1ce46c422"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_pedit={0x3d70, 0x1e, 0x0, 0x0, {{0xa}, {0x3c50, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xec8, 0x2, {{{0x10, 0x81, 0x8, 0x8, 0x6}, 0x8, 0x5, [{0x2, 0x1ff, 0x1, 0xffff231c, 0xb0ee, 0xcb97}, {0x80, 0x3, 0x6, 0xfff, 0x6, 0x7}, {0x7c6436a3, 0x2, 0xd3, 0xffffffff, 0x6, 0x9}, {0x0, 0x9, 0xfffffff7, 0x0, 0x43, 0x7fffffff}, {0x7ff, 0x9, 0x5, 0x3669, 0xfffffeff, 0xffff}, {0x8000, 0x3, 0x5, 0x52, 0x4, 0x2}, {0x100, 0x6, 0x6, 0xffffff00, 0x64, 0x8}]}, [{0x7f, 0x3, 0xffffff57, 0x7, 0x0, 0x7}, {0x6, 0x9, 0x3, 0x55, 0xfffffff2, 0x401}, {0x4, 0x3e6, 0x7, 0x1, 0x7648, 0x9}, {0x0, 0xf04b, 0xfffffe01, 0x5b, 0x0, 0xb}, {0x8, 0x3, 0x3, 0xe, 0x9, 0xd2c7}, {0x3, 0x7, 0x2, 0x3d4e977, 0x8, 0xc6}, {0x0, 0x101, 0x9, 0x9, 0x10, 0x1}, {0x7fff, 0x6, 0x800, 0x0, 0x1, 0x7fffffff}, {0x3, 0x6, 0x0, 0x2a, 0x4, 0x7}, {0x6, 0x7dc, 0xd90, 0x5, 0xffff5656, 0x6b}, {0x3ff, 0x2455, 0x0, 0x8, 0x10, 0x600}, {0x2, 0x1, 0x6, 0x1000, 0x0, 0x4}, {0xda, 0x1ff, 0x1ff, 0x4753, 0x7fff, 0xc3}, {0x6, 0x6, 0xfeb, 0xb2, 0x9, 0xb}, {0x9571, 0x2, 0x5, 0xcea, 0x1, 0x2}, {0x6, 0x5, 0x80, 0x0, 0x0, 0x4}, {0x800, 0x7, 0x1, 0x7, 0x0, 0x12d}, {0x0, 0xff, 0x2, 0x6, 0x100, 0x1}, {0xfffffff8, 0x8, 0x6, 0x5, 0x8, 0x80}, {0x8, 0x0, 0xc, 0x9, 0xb29, 0xf80e}, {0x7, 0xfc4, 0x0, 0x6589, 0x6, 0xbd}, {0x8f9e, 0x3, 0x8001, 0x184, 0xe8, 0xf7}, {0xfd, 0x9c, 0xfffffff1, 0x8, 0xa3, 0x5}, {0x1, 0x40, 0x7, 0x8, 0x80000000, 0x101}, {0x7ff, 0xff, 0x8, 0xe, 0x7fff, 0x7}, {0x80000000, 0x9, 0xdca, 0x9, 0xaf, 0x6}, {0x7d5, 0xc, 0xf, 0x4, 0x1}, {0x34, 0x6, 0x7, 0x0, 0x2, 0xd}, {0x100, 0xfffffffc, 0x678, 0xa9c, 0x5, 0x7}, {0xe, 0x2, 0x7, 0x8d1, 0x0, 0x3}, {0xf2, 0x1, 0x7f, 0xffffffb7, 0x401, 0xffff}, {0x1, 0x2, 0x2, 0x4, 0x3, 0x101}, {0x9, 0x4, 0x7fffffff, 0x63, 0x401}, {0x4, 0x4, 0xe, 0xf, 0x1ff, 0x81}, {0x0, 0x1, 0x9, 0x80000000, 0x7, 0x200}, {0x10001, 0x1, 0x8, 0x6, 0x5, 0xfffffc00}, {0x0, 0x7, 0x7ff, 0x3, 0x8001, 0x1}, {0x6, 0x10000, 0xffffff01, 0x8, 0x1, 0x35}, {0x6, 0x9, 0x1, 0x447, 0x4a, 0x191}, {0x7f, 0x7e, 0xce, 0x9, 0x2, 0x8}, {0x10000, 0x7ff, 0x2, 0x2, 0x80800, 0x5}, {0x1ff, 0x1, 0x2, 0x0, 0xd0, 0x6}, {0x4, 0x4, 0x3, 0x9, 0x2, 0x5}, {0x200, 0xff, 0x10, 0x6, 0x6, 0x8}, {0x2, 0x10001, 0x0, 0x81, 0x6, 0x67}, {0x200, 0x3, 0x101, 0x1, 0x2, 0x400}, {0x3, 0x5, 0x4, 0xfff, 0x66, 0xfff}, {0x3, 0x8, 0x1, 0x9, 0x10000, 0xb}, {0x5, 0x8000, 0xb, 0xfa, 0xd691, 0x8}, {0x3, 0x6, 0x7f, 0x2, 0x59783587, 0x8000}, {0x8, 0xa747, 0x40, 0xb7, 0x2, 0xfffffff8}, {0x30, 0x3ff, 0x0, 0x80000001, 0x2, 0x2}, {0x2, 0xa5, 0x4, 0x6, 0x6, 0x7}, {0xd49a15a6, 0x3, 0x6, 0x3ff, 0xd6c0, 0x6}, {0xa, 0x2, 0x2, 0x10, 0xff, 0x34e}, {0x100, 0x6, 0x6, 0xfff, 0x5, 0x8000}, {0x1ff, 0x3, 0x2, 0x0, 0x2, 0x2}, {0x1, 0x4, 0xff, 0x1ff, 0x1, 0xfa}, {0xfffffffd, 0x9, 0x42f, 0x1, 0x1, 0x1000}, {0x8, 0x1, 0x0, 0xa, 0xde4, 0x3}, {0x8, 0x2, 0x80000000, 0x9, 0x5, 0x8}, {0x3, 0x1, 0x800, 0xfffffff8, 0x1, 0xb8}, {0x10000, 0xf, 0x5, 0x4, 0xc, 0xfffff800}, {0xcce, 0x3, 0x9, 0x2, 0xfffff7e6, 0xed2}, {0xd03, 0x6, 0x1, 0x8, 0x4f5, 0x4}, {0x3, 0x6, 0x18c0, 0x6747, 0x5d, 0x5}, {0x1, 0x9, 0x1ff, 0x7, 0x80000001, 0x4}, {0x21f, 0x1, 0x6c, 0x4, 0x3, 0x6}, {0x5, 0x4, 0x7f, 0x5, 0x3, 0x734}, {0x9, 0x7fff, 0x3, 0x5, 0x800, 0x9}, {0x10000, 0xa392, 0x7, 0x35, 0xfff, 0x2}, {0x7ff, 0x7f, 0x3, 0x3, 0xfffffffb, 0x18d33955}, {0xfffffff5, 0x6, 0x3, 0x4, 0xe, 0x2}, {0x3, 0x9, 0x2, 0x3, 0x7fffffff, 0x7}, {0x2, 0x615, 0x8001, 0x8001, 0x3, 0x3}, {0x96, 0x3, 0x1, 0x0, 0x9, 0x6}, {0x5, 0x5, 0x0, 0x0, 0x5, 0xffffffff}, {0x5, 0xfffffffb, 0x3, 0x5, 0x1, 0x6}, {0x0, 0x7, 0x8, 0x7, 0x9, 0x7f}, {0xfffffffa, 0x80000000, 0x34, 0xb06f, 0x2, 0x400}, {0x2572beec, 0x7, 0x9d, 0x94, 0x5, 0x3}, {0xd, 0x7fffffff, 0x2, 0x3, 0x8000, 0x5}, {0xf1, 0x2e, 0x7, 0x3, 0x1000, 0x80000001}, {0x3, 0x10, 0x9, 0x10, 0x81, 0x7}, {0x9, 0x0, 0x7, 0x1, 0x7, 0xb}, {0xacb0, 0x7ff, 0xa78d, 0x2, 0x4, 0x5}, {0x7, 0x7, 0x6, 0x4000, 0x8, 0x7ff}, {0x9, 0x9, 0xfffff8de, 0x3ff, 0x7f, 0x67}, {0x9845, 0x2, 0x8, 0x3, 0x9, 0x6}, {0x8, 0x659, 0x1, 0x6, 0x2, 0x80}, {0xe, 0x1, 0x8, 0xffffffff, 0x3, 0x9}, {0xedd, 0x101, 0x8000, 0x8, 0x0, 0x1}, {0x4, 0x81, 0x3, 0x2, 0xe, 0x1}, {0x4, 0xff, 0xeba1647, 0x2, 0xff, 0x5}, {0xe6, 0x9, 0xdf2, 0x2, 0x7fff, 0x52ce}, {0x9, 0x5, 0x8, 0xffffffff, 0x5, 0x6}, {0x4, 0x80000000, 0x2, 0x8, 0x7, 0x1}, {0x101, 0x7, 0x9, 0x80, 0x6, 0x4}, {0x8, 0x8, 0x4, 0xdab7, 0xb361, 0x7}, {0x1, 0x2, 0xf6c1, 0xcf, 0x8, 0x1}, {0x553, 0x1, 0xff, 0x0, 0x6, 0xfff}, {0x8, 0x1, 0x3, 0x244e0d3c, 0x0, 0x5}, {0x4, 0x4, 0x7fff, 0x7, 0x101, 0x7}, {0x1, 0x7, 0x7, 0xffffffff, 0xecd7, 0xa2f0}, {0x5, 0x901, 0x1, 0xfffffffc, 0x3, 0x1}, {0x5, 0x3, 0x7fff, 0x80, 0x2, 0x2}, {0xffffff1a, 0x10, 0x7, 0x3, 0x3, 0xe0f}, {0x5, 0x40000000, 0x1ff, 0x9, 0x3, 0x9}, {0x3, 0x2, 0x1, 0xbf, 0xd10, 0x6988}, {0xffb8, 0x3, 0x21b, 0x284, 0x6, 0xd0c65ea5}, {0x10, 0x6d, 0x5c, 0x8, 0x100, 0x8}, {0xfffffffb, 0x1, 0x2, 0xe, 0xde5, 0x8}, {0x1, 0xc, 0xe84, 0x7fff, 0x9, 0x3}, {0x401, 0x8, 0x8, 0x80000001, 0xffffffff, 0x8}, {0xffb6, 0x8, 0x40, 0x6, 0x3f, 0x3}, {0x3, 0x2, 0x7, 0xff, 0x8, 0x8}, {0x0, 0x200, 0x2, 0x7, 0x1, 0x6}, {0x5, 0x8, 0x8, 0x0, 0x49, 0x7}, {0x0, 0x6a7b, 0x5, 0x18000000, 0x3, 0xff}, {0x1ff, 0x1, 0x7, 0xe0000000, 0x7, 0x9}, {0x2, 0xfffffffd, 0x7, 0x3, 0x1, 0x5}, {0x80000000, 0x3, 0x4, 0xee, 0x0, 0x1}, {0x2, 0x5, 0x8, 0x7, 0x9, 0xffffffff}, {0x6, 0x7f, 0x6, 0x8, 0x6, 0x5}, {0x0, 0xf42, 0x5, 0x8, 0x2, 0x5}, {0x7, 0xc6f9, 0x6, 0x3299, 0x100, 0x9}, {0x8000, 0x7fff, 0x1b4, 0x1, 0x9, 0x28}, {0xd, 0x1, 0x10001, 0x40, 0xff}], [{}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4}, {0x4}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0xa6253131161db633}, {}, {}, {0x5}, {0x4}, {}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x7}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x2}, {0x1}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x5}, {0x5}, {}, {0x4, 0x1}, {0x4}, {0x5}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x1}, {}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x4}, {0x2}, {0x2}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {0x3}, {0x7}, {0x2}]}}, @TCA_PEDIT_PARMS={0xec8, 0x2, {{{0x6, 0x8, 0x0, 0x4, 0x4}, 0x1, 0x7, [{0x4, 0x100, 0x4, 0x1, 0x0, 0x5}, {0xffffffff, 0xffff02b6, 0x9, 0x6, 0xc, 0x2}, {0x5, 0x3, 0x3, 0x7, 0xfcc6}, {0xfffffffc, 0x9, 0xa86a, 0x6, 0x2, 0x7}, {0x4, 0x4, 0x6, 0x6, 0x9, 0x6b}, {0x6, 0x4, 0x16c9532, 0x3, 0x8, 0x9}, {0x568, 0xf, 0x0, 0xd, 0x1, 0x3}]}, [{0x8, 0x6, 0x80000001, 0x6, 0xfffffff9, 0xdc0}, {0x0, 0x1, 0xc, 0x3, 0x400, 0x3}, {0x66, 0x5, 0x1, 0x6, 0x101, 0x67}, {0xc, 0x6, 0x8, 0x1, 0x5, 0x9}, {0x1, 0x9, 0xfd0, 0x7, 0x7fffffff, 0x33a1}, {0x1, 0x0, 0x2, 0x0, 0x2, 0x2ce}, {0x7fffffff, 0x800, 0x9, 0x2, 0x0, 0x8}, {0x4, 0x15e2, 0xad, 0x100, 0x100, 0x7}, {0x7, 0x5, 0x5, 0x3ef, 0xc291, 0x101}, {0xfffeffff, 0x8, 0x4, 0x7, 0x3, 0x7}, {0xc8c4, 0x3, 0x3, 0x1, 0x0, 0x48f}, {0xc0, 0x5, 0x1, 0xe, 0xffff, 0x4}, {0x6, 0x3, 0x2, 0x7, 0x800, 0x1}, {0x6, 0x6, 0x49748100, 0x2, 0x9, 0x4}, {0x5, 0x8, 0x5, 0x2, 0x5, 0x1}, {0xf, 0x5, 0x3, 0xfffffff9, 0x7, 0x2}, {0x1, 0x7fffffff, 0xfffffff8, 0x2, 0x8, 0x4}, {0x380000, 0x5, 0x7, 0x8, 0x6}, {0x9, 0xf9, 0x7, 0x400, 0x7, 0x80}, {0x3, 0x60, 0x5, 0x1, 0x7fffffff}, {0x9098, 0x10001, 0xff, 0x6, 0x7f, 0x40}, {0xf56, 0x6, 0xf7c5, 0x7f, 0x9, 0x2}, {0x9, 0x1, 0x1, 0xff3, 0x7ff, 0x8}, {0x3, 0xffff, 0x3, 0x401, 0x9, 0x93d}, {0x3f22, 0x80000000, 0x4d, 0x5, 0x9, 0xffff}, {0x0, 0x7, 0x9, 0x6, 0x1, 0x2}, {0xfffffc01, 0x2, 0x3, 0x80, 0x9, 0x4}, {0x8001, 0x2000, 0x0, 0x8, 0x1, 0x10}, {0x1ff, 0x9, 0x7, 0x1a36b61e, 0x2, 0x9154}, {0x4, 0x60f, 0x800, 0x1, 0xc, 0x2}, {0xab8, 0x2, 0x101, 0xffff3443, 0x9, 0x5}, {0x8, 0xb7f, 0x0, 0x7f, 0x6, 0xe73}, {0xfffffffb, 0x9, 0x9, 0xdecc, 0x7, 0x9}, {0x3, 0x87fd, 0x6, 0xac, 0xd5, 0x6}, {0xdfd3, 0x2, 0xff, 0x4, 0x100, 0x3}, {0x4, 0x8, 0x8, 0x100, 0x1ec, 0x6}, {0xd, 0x7, 0x0, 0xff, 0x3, 0x5}, {0x4, 0x5, 0x4d, 0x1, 0x5, 0x7}, {0x7f, 0x0, 0x6, 0x85c, 0xef7a, 0xfffffffa}, {0x3, 0x9, 0x3, 0x6, 0x95, 0x7}, {0x80000001, 0xac, 0x9, 0xa4, 0x10000, 0x8}, {0x2, 0x7, 0x1, 0x65e6fc65, 0xb743, 0x2}, {0x9e42, 0x3, 0x10000, 0x8, 0x6, 0x9}, {0x0, 0xd7, 0x6, 0x4, 0x8, 0x9}, {0x7, 0x7fff, 0x1000, 0x10000, 0xfff, 0x9}, {0x3a, 0x27, 0x1, 0xfffffc00, 0x3, 0x2}, {0x7, 0xf, 0x3, 0x10000, 0x4, 0x7fffffff}, {0x7, 0x8, 0x80, 0x9, 0x5, 0x3ff}, {0xea43, 0x3, 0x3, 0x6, 0x10000, 0x9}, {0x5, 0x5, 0xffffff81, 0x5, 0x7, 0x4}, {0xf8000000, 0x0, 0x9, 0xffff, 0x81, 0x1}, {0x5, 0xff, 0x7180, 0x9, 0x3}, {0x1000, 0xeb5, 0x7, 0x5, 0x1000, 0x2}, {0x8, 0x4, 0xfffffffb, 0x8a06}, {0x7ce, 0x1, 0xf, 0xa, 0x0, 0x8}, {0x9, 0x9, 0x4, 0x2, 0x1}, {0x8, 0xa79, 0x2, 0x9, 0x6b, 0x5}, {0x6, 0xb4, 0x4, 0xa, 0x7}, {0x7, 0x3, 0x9, 0x4, 0x6}, {0x0, 0x5, 0x4fd, 0x92, 0x8a, 0x24000}, {0xf8d, 0x7, 0x5, 0x6, 0x9c04, 0x61}, {0xe2, 0x6, 0xa6ee, 0x9, 0xf3, 0x6}, {0xff, 0xfffff300, 0x400, 0x3, 0x0, 0x5}, {0x9, 0x2, 0x9cf, 0x80000001, 0x7ff, 0xffff075f}, {0x81, 0x10001, 0x40, 0x4, 0xa178, 0x20000}, {0x5, 0xe798, 0xb04b, 0x1, 0x3ff, 0xe}, {0xf5, 0x8, 0x8, 0x5, 0x59, 0xd}, {0x6, 0x1, 0x10000, 0x800, 0x5, 0x6}, {0x1, 0x5, 0x7fff, 0xfffffff6, 0x0, 0x5}, {0xffff8001, 0x0, 0x4, 0x4, 0x5689, 0x5}, {0x1, 0x9, 0x6, 0x7ff, 0x5b2532dc, 0x5}, {0x0, 0xc62, 0x6, 0x4, 0x6, 0x1000}, {0x6, 0x2, 0x4, 0x7, 0x1, 0x277}, {0x2, 0x6, 0x2, 0x0, 0xffff7ded, 0xff}, {0x3ff, 0x0, 0x1, 0x2bd9, 0x7fffffff, 0xfffffffd}, {0x6, 0x6aca, 0x8, 0x1, 0xbc, 0x5}, {0x7f, 0x8, 0x1, 0x6, 0x9, 0xfffffff8}, {0x81, 0x2, 0x7fff, 0x6, 0xfffffe00, 0x7}, {0xb, 0x8f, 0x1, 0x8, 0x8, 0x3}, {0x7e79, 0x14, 0x1, 0x8, 0x81, 0x8}, {0x8, 0x5, 0x4, 0x101, 0x800, 0x1}, {0x1, 0x2, 0x8, 0x6, 0xfffffff7, 0x2}, {0x6d3, 0x6, 0x2, 0xfff, 0x3432}, {0x1a, 0x0, 0x9, 0x3, 0x6, 0x44c}, {0x7fffffff, 0xeeb0, 0x6, 0x2, 0x9, 0x1}, {0x9, 0x1, 0x940a, 0x0, 0x8, 0x9}, {0x5, 0x100, 0x3, 0x213, 0x7, 0x9}, {0x6, 0xffffffff, 0x7, 0x1, 0xffffffc0, 0x10000}, {0x0, 0x7, 0x1ff, 0x26, 0x2, 0xfffffffc}, {0xcc9, 0x4, 0x4, 0x2, 0x1, 0xfffffff8}, {0x2, 0xf, 0x100, 0x2, 0x1, 0x6}, {0x8, 0x0, 0x6, 0x1, 0x7, 0x100}, {0x100, 0x6, 0x6, 0x4, 0x5, 0x88}, {0x9, 0x4c6, 0x1, 0x9e, 0x7f, 0x2}, {0xa, 0x7f, 0x9, 0x6b82d324, 0x8, 0x8f}, {0x8, 0x1, 0x2, 0x5, 0x9, 0x8}, {0x0, 0xfffffffe, 0x4, 0xdb, 0xd2, 0x7}, {0x0, 0x8, 0x0, 0x3, 0x9, 0xc}, {0x5, 0x9, 0x9, 0x2, 0x5, 0x98cb}, {0x8, 0x4, 0x8, 0x3e, 0x8, 0x3ff}, {0x1, 0x5, 0x10000, 0x0, 0x81, 0x9}, {0xffc00000, 0x0, 0xf, 0x3, 0xfffffffa, 0x5}, {0x7fffffff, 0x6, 0x4, 0xffffffff, 0x3ff, 0x2}, {0xc, 0x6, 0x9, 0x80000001, 0x9, 0x9e4f}, {0x7, 0xfffffffe, 0x2, 0x80000001, 0x3, 0x8}, {0x5, 0x2, 0x4, 0x0, 0x9, 0x5}, {0x5, 0x3, 0x0, 0x0, 0x6, 0xe}, {0x0, 0x1, 0xfffffff8, 0x0, 0xfff, 0x4a}, {0x57a6, 0x5, 0x2, 0x9, 0x1, 0x6}, {0xa1, 0x9f, 0x1, 0x2, 0x7e2c, 0x4}, {0x8e, 0x8, 0x1ff, 0x3, 0xd, 0x9}, {0x0, 0x5, 0xffffff95, 0x0, 0x2, 0x67}, {0x1, 0x11, 0x5, 0xe8b3, 0x10000, 0x35}, {0x10, 0x7d, 0xeb5, 0x0, 0x28, 0x5}, {0xffffffff, 0x1, 0x3, 0xffffed0a, 0x80, 0xa7}, {0xfffffff5, 0x8, 0x6, 0x40, 0x3, 0xfffff375}, {0x0, 0x5, 0x8, 0x9ac, 0xcd017d6, 0x9}, {0xad, 0x8, 0x800, 0x4, 0x3, 0x4}, {0x1, 0x68, 0x9, 0x10001, 0x6, 0x3}, {0x2, 0x9, 0x4, 0x2, 0xbc6, 0xfc}, {0xff, 0xc9a6, 0x46, 0x4, 0xffffffff, 0xfffffff7}, {0xb, 0x6, 0x1400, 0x2, 0x32, 0x9}, {0x9, 0x5, 0x8, 0x0, 0x247c, 0x7}, {0x8000, 0x1, 0x3, 0x89f, 0x9, 0x9}, {0x9, 0x6, 0x5, 0x0, 0x6, 0x7fff}, {0x2, 0xe107, 0x6, 0x5, 0x2, 0x6}, {0x65, 0x9, 0x400, 0x1, 0x42eadf0b, 0xcbb}, {0x1, 0xce2, 0xb, 0x1, 0x4, 0xb3}], [{0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x4}, {0x75fcf789a1cafb54, 0x1}, {}, {0x4, 0x1}, {0xc}, {0x2}, {0x3, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x6, 0x1}, {0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x6}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x2}, {0x6}, {0x85d014fad816e58d}, {0x5}, {0x6, 0x1}, {0x4, 0x1}, {0x3}, {0x2}, {0x4}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x7, 0x1}, {0x2, 0x1}, {0x1}, {0x4}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x4}, {0x5}, {}, {0x4, 0x1}, {0x4}, {0x4, 0x1}, {}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {}, {}, {0x1}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0xf4f011634e4071fb, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x7, 0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x1}, {0x5, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x5}, {}, {0x5, 0x1}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x5683cf8b932cca86}, {}, {0x5}]}}, @TCA_PEDIT_KEYS_EX={0xdc, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_KEYS_EX={0x74, 0x5, 0x0, 0x1, [{0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x24668c46f3ab3301}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe80, 0x4, {{{0x9, 0x3, 0x10000009, 0x10000, 0x7f}, 0x0, 0x94, [{0x4, 0x8, 0x8, 0x3, 0x100, 0x2}, {0x3, 0x7f, 0x1, 0x7f, 0x3, 0x5}, {0x2, 0x6, 0x18, 0xa, 0x5, 0x41}, {0x2, 0x1, 0x2, 0x140000, 0x4, 0x9c}]}, [{0x5, 0x3, 0x8, 0x400, 0x8, 0x7}, {0xd90, 0x4, 0xc, 0x8000, 0x6256}, {0x9e7, 0xa27, 0x2, 0x101, 0xf, 0x3}, {0x8, 0xca, 0x6, 0x48d, 0x800, 0xffffff60}, {0x8000, 0x1, 0x4c35, 0x8e, 0x7, 0xffffffff}, {0x5, 0x7, 0x7, 0x7, 0x5, 0x7}, {0x87, 0x4, 0x4, 0xe4, 0x8, 0x4}, {0x2, 0x61, 0x2, 0xe, 0x6, 0x8}, {0x2fd2, 0xf, 0x97, 0x0, 0x28000, 0x80}, {0x5, 0xfffffff9, 0x43eedb0e, 0x8, 0x1, 0xc9eb}, {0x9, 0xffffffff, 0x0, 0x0, 0x7, 0xffffff01}, {0x200, 0x8, 0xfffffff9, 0x9, 0x800100}, {0x3, 0x5, 0x4, 0x6ca, 0x1, 0x9}, {0x6, 0x5, 0x862, 0x8e, 0x81, 0x3}, {0xfffffff4, 0x1, 0x4, 0x5, 0x0, 0x8}, {0x5b4, 0x8, 0xa, 0x1, 0x4, 0x9}, {0x3, 0x90000, 0xfffffffc, 0xffffb91a, 0x4, 0x3}, {0x1, 0x4, 0x2, 0x6000000, 0xffffffff, 0x5}, {0x1ce, 0x2, 0x9, 0x4, 0x7}, {0x7, 0xa3c, 0x2207aa7f, 0x9, 0x1, 0x8}, {0xaef, 0x80000001, 0x14f1, 0xace6, 0x1, 0x2f}, {0x2, 0x1, 0xa9, 0x10, 0x8, 0x7fff}, {0x8, 0x7f, 0xfffffffa, 0x401, 0x3, 0x6}, {0x7, 0x2, 0x2, 0xc35b, 0x3, 0x80000001}, {0x8, 0x4, 0x0, 0x2, 0x9, 0x1}, {0x7fffffff, 0x1, 0x9, 0x1, 0x6de0, 0x6}, {0xfffffffe, 0x9, 0x0, 0x47, 0x7, 0x1}, {0x3, 0x4, 0x3, 0x0, 0x100, 0x40}, {0x6, 0x4, 0x81, 0xfffffffe, 0x30b, 0x1c000000}, {0x7e79132f, 0x4, 0x79f, 0xfffffffc, 0x5, 0x4}, {0x2, 0x6, 0x100, 0x7, 0x6, 0x40}, {0x7, 0x7, 0x0, 0x0, 0x2, 0x4}, {0x7, 0x400, 0x100, 0x98, 0x6, 0x401}, {0x9, 0x5, 0x800, 0x4, 0xffffff80, 0xb733}, {0x8001, 0x8, 0x5, 0xf, 0x2, 0x9}, {0x2, 0x0, 0x5, 0x1, 0xa, 0x9}, {0x9, 0x7, 0x3f, 0x4, 0x10001}, {0x58f5, 0x1, 0x5, 0x4, 0x8000, 0x10000}, {0x1ff, 0x1, 0x6, 0x14, 0xbd1, 0x7}, {0xffffff81, 0x2, 0x800000, 0x200, 0x1b19eb5f, 0x5e}, {0xfffffffa, 0x8000, 0x3, 0x7, 0x5, 0x2}, {0x3, 0xd12, 0xe1, 0x1, 0x4, 0x1}, {0x6, 0xfd, 0xf358, 0x2, 0x10, 0x9}, {0xfffffeff, 0x74, 0xff, 0x0, 0x2feb936e, 0xf4}, {0x101, 0x1eeb, 0x5, 0x1, 0xfffffff8, 0x1}, {0x7, 0xb, 0xe, 0x8, 0x81}, {0x7, 0x6, 0x6, 0xfffffffa, 0xfffffffc}, {0xe, 0x6, 0x2, 0x67b, 0x1, 0xa}, {0x7, 0xfffffff8, 0xffff, 0x6, 0x6, 0x9}, {0x10, 0x4, 0x7, 0x0, 0x3, 0x6}, {0xa3, 0x401, 0x6, 0x1ff, 0x8, 0x4}, {0xfffffffb, 0x25ab, 0x5, 0xe5a, 0x2, 0x8}, {0x6b, 0x800, 0x4, 0xf, 0x200, 0xfffffffa}, {0x5, 0x0, 0x0, 0x737, 0x4}, {0x4, 0x6, 0x2, 0x4, 0x8, 0x3}, {0x8d1, 0x6, 0x6a, 0x3, 0x6, 0x5}, {0x7, 0x1, 0x3, 0x9, 0xff, 0x8}, {0xfd, 0x5, 0x7ad314af, 0x9, 0x1, 0x400}, {0xfffffffc, 0xfffffff8, 0x1, 0x7, 0xf5d6}, {0x2, 0x10000, 0x3, 0x0, 0xa, 0x2}, {0x2, 0xa24, 0x1, 0xd, 0x5, 0x80000001}, {0x6, 0xffffe804, 0x7e, 0x27, 0x7, 0x8}, {0x9, 0x80, 0x4, 0x0, 0x2, 0x3}, {0x1, 0x2, 0x0, 0x800, 0xdc0, 0x1}, {0x400, 0x4, 0xe, 0x0, 0x40}, {0xab3, 0x2082, 0xe1, 0x94, 0x10000, 0x8001}, {0x8, 0x0, 0x3, 0x8, 0x1ff, 0x2980f8cf}, {0x3, 0x6, 0x7, 0x6, 0xdec, 0x5a6}, {0x8, 0x7, 0x1a3, 0x400, 0x9, 0x8}, {0xf, 0x4, 0x547d, 0x9c, 0xcee, 0x5}, {0x0, 0x5, 0xffffffff, 0x80000000, 0xa4, 0x900000}, {0x3, 0x4, 0x5, 0x800}, {0x1, 0x3, 0x0, 0x0, 0x5b, 0x1000}, {0x8, 0x5, 0x0, 0x0, 0x1, 0x26ae}, {0x6, 0x3, 0x1, 0x10000, 0x3, 0xb}, {0x9, 0x200, 0x60, 0x645, 0x3, 0xe5a3}, {0xfff, 0x411, 0xe, 0x3, 0x7ff, 0xb}, {0x2, 0xa6, 0x5, 0x8, 0x9, 0x5}, {0x7, 0x2, 0x2, 0x5, 0xffff, 0x9}, {0x1, 0x8b65, 0x3, 0x1, 0x1f8, 0x3}, {0xff, 0xc2b, 0xfb8, 0x5, 0xe28, 0x8001}, {0x7, 0x2, 0x2, 0x4, 0x1, 0x80000001}, {0x10000, 0x7fff, 0x401, 0x7, 0x10, 0x10}, {0x1, 0x6, 0x5, 0xffff8000, 0x3ff, 0x5}, {0x0, 0x8, 0x1, 0x1b5, 0x3, 0x2}, {0x8, 0x8, 0x3b, 0x0, 0x0, 0x6}, {0x3, 0x3, 0xfffffffc, 0x15, 0x9, 0x8}, {0x4, 0x5, 0x7, 0x9, 0xd8e6}, {0x1, 0x9, 0xffffffff, 0x7, 0x800000, 0x4}, {0xf25, 0x0, 0x9, 0x6, 0x2, 0x2}, {0x8, 0x7, 0x0, 0x0, 0x0, 0xb}, {0x10000, 0x4, 0x2, 0x8, 0x5fd, 0x4}, {0x1053feb2, 0x6, 0x4, 0x3, 0xb, 0x8}, {0x7, 0x80, 0x40e1, 0x101, 0x142d, 0xfffffffa}, {0x1065d884, 0x9, 0x9, 0xd521, 0x9, 0xde}, {0x9, 0xffffff78, 0x22a, 0x5, 0x6, 0x100}, {0x1, 0xc7, 0x9, 0x0, 0x3, 0x5}, {0x7, 0x517aaabb, 0x9, 0x0, 0x4800, 0x36}, {0x7, 0x1, 0x4, 0x9, 0x8, 0x8}, {0x1ff, 0xfffffffb, 0xffffffaa, 0x6, 0x1, 0x1}, {0x72ce, 0x401, 0x509f, 0x610, 0x20000000, 0xab1}, {0x3, 0x401, 0x1000, 0xfffffffe, 0x6, 0x4}, {0x2, 0x5, 0xfffffff5, 0xffff, 0x2}, {0x4, 0x10, 0xb7f, 0xfde, 0x6ced, 0x9000000}, {0x1, 0x31, 0x4, 0x101, 0x2417, 0x100}, {0xfffffffc, 0xffff, 0xfffffffe, 0x1, 0x6, 0x2}, {0x4bb, 0xbbb, 0x7, 0x8, 0x1}, {0xe, 0xa4e, 0x9, 0x3, 0x700000, 0x1}, {0x7fff, 0x6, 0x1ff, 0xfff, 0x3, 0x7}, {0x2, 0x8, 0xe2a7, 0xa6, 0x4, 0x20000000}, {0x7, 0x8, 0x1, 0x9b, 0x3, 0x3}, {0x1ff, 0x2, 0x0, 0x6, 0x0, 0x80000000}, {0x101, 0x3, 0xffff, 0x4, 0x5, 0x2473}, {0x18, 0x9, 0x5, 0x7, 0x1, 0x6}, {0x0, 0xb2c9f20c, 0x0, 0x3, 0xfffffffe, 0x4}, {0x8000, 0x9, 0x4, 0x8, 0x170c, 0x3}, {0x7, 0x80, 0x6, 0xc431, 0x7, 0x8}, {0x10001, 0x0, 0x1, 0x101, 0x7, 0xb7}, {0x6687, 0x8, 0xc, 0x3, 0x4, 0x25}, {0x4, 0x1, 0x4, 0x2, 0x9, 0x100}, {0x3, 0x5, 0xffffffff, 0x8, 0x3, 0x472c}, {0x3f71, 0x4, 0x1ff, 0x9d97, 0x40, 0x9}, {0x8, 0x7, 0x6, 0xff, 0x3, 0x93c}, {0x3ff, 0x6, 0x1, 0x80000001, 0x8, 0x46}, {0x7f, 0x0, 0x9, 0x5, 0x80, 0x2}, {0x9, 0x40, 0xffff, 0x5, 0x101, 0x7fff}, {0x1, 0x7, 0x9, 0x2, 0x2, 0x6}, {0x0, 0x8, 0x6, 0xab, 0x48}], [{0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x5, 0x2}, {0x5, 0x1}, {0x1}, {0x1, 0x1}, {0x6}, {0x1, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x2}, {0x9, 0x1}, {0x3, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x5}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x7, 0x1}, {0x5}, {0x5, 0x1}, {0x3}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x1}, {}, {0x2}, {0x3, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x5}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x6}, {0x3, 0x1}, {0x1}, {0x5}, {0x4}, {0x3}, {0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3}, {0x3}, {0x5, 0x1}, {0x3}, {0x5}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {0x0, 0x1}, {0x1, 0x3}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {0x1}, {0x3, 0x1}, {0x1}, {0x2}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x5}]}}, @TCA_PEDIT_PARMS={0xe80, 0x2, {{{0xf3, 0x8, 0x10000000, 0x8, 0x8}, 0x7f, 0x9, [{0x0, 0x1, 0x5, 0x67, 0x89d1, 0x4}, {0xa, 0x48879ea4, 0xc8, 0x9, 0x81, 0x8c}, {0x7, 0x8, 0x2, 0x6, 0x8, 0x4}, {0xf196, 0xfffffffa, 0x2, 0x0, 0x7, 0x4}]}, [{0x2, 0xffffffff, 0x8, 0xd, 0x5, 0x4f}, {0x2bdb, 0x8, 0xaa, 0x6, 0x6, 0x794e68ff}, {0x7475, 0x7, 0xffffffff, 0x4, 0xca2c, 0x5d}, {0x1, 0x9, 0xb, 0x0, 0xffffffff}, {0xffffff99, 0x3, 0x3, 0x2, 0x5, 0x40000}, {0x1, 0xfffff800, 0x80000000, 0x1000, 0x8, 0x8}, {0x3ff, 0x400, 0xd, 0x100, 0xb9e, 0x7}, {0x1, 0x0, 0x0, 0x1, 0x2, 0x5}, {0x8000, 0x7, 0x8, 0x77d, 0x3, 0x8}, {0x9, 0x9, 0x311a, 0x1, 0x5, 0x4}, {0x0, 0x5, 0x2, 0x101, 0x10001, 0xfffffffe}, {0x5, 0x7e, 0x0, 0x1, 0x0, 0xd29}, {0x5a4, 0xfffff281, 0x221f, 0x8, 0x3}, {0x3, 0x100, 0x6, 0x7ff, 0x7e, 0x25}, {0x8ef, 0x5c3, 0x6, 0x96a8, 0x8, 0x1000}, {0x4, 0xc0000, 0x80, 0x1, 0x0, 0x4}, {0x5, 0x7fffffff, 0x7, 0x80000, 0x3}, {0x4a4, 0x400, 0x4, 0x2, 0xb076, 0xb}, {0x8001, 0x6, 0xff0e0000, 0x9, 0x7, 0x5}, {0xfff, 0x5, 0x8, 0x9, 0x8, 0x8}, {0x9, 0x0, 0x9e05, 0xfffffffe, 0x6, 0x5}, {0x9, 0x7, 0x2, 0x6, 0x4, 0x3}, {0xb20, 0x7, 0x8000, 0x7, 0x14ea12b9, 0x6}, {0x7f, 0x7, 0x8, 0x44, 0x9, 0x9}, {0x3, 0x4, 0x7, 0x9b, 0x0, 0x1}, {0x4, 0x9, 0x988b, 0x1, 0x7, 0xd}, {0x2, 0x8, 0x4, 0xef51, 0x9, 0x1}, {0x7fff, 0x5, 0x1000, 0x10001, 0x10c00, 0x4}, {0x8, 0x2, 0x9, 0x9, 0x4, 0x101}, {0x3, 0x6, 0x6, 0x2, 0xab32, 0x7f}, {0x807, 0xd, 0x7, 0x2, 0xc4d, 0x9}, {0x4, 0x40, 0x2, 0x6cc, 0x7fff, 0x47}, {0x8, 0x5, 0x2, 0x6, 0x0, 0x4}, {0x530, 0x7ff, 0x1, 0x0, 0x2, 0x9}, {0x81, 0x8, 0x9, 0xe2, 0x3ff, 0xfffffffa}, {0x7, 0x4, 0x3, 0xb, 0x6, 0x3}, {0x7b57, 0x64f, 0xf5, 0x10000, 0x7, 0x92f8}, {0x1, 0x50, 0x400, 0x6f, 0x2, 0x5}, {0x101, 0x2, 0x5, 0x9, 0x1b4, 0x101}, {0x5, 0x81, 0x9, 0x6083645a, 0x0, 0x6}, {0x2, 0x3, 0x8000, 0x0, 0x8, 0x3}, {0x5, 0x6, 0x5, 0x0, 0x5}, {0xfffeffff, 0x1, 0xff, 0x0, 0x2}, {0x2, 0x4, 0x2, 0x2, 0x200, 0x8}, {0x3, 0x80000000, 0x80000001, 0x5, 0xa3b, 0x2116}, {0x5d6, 0x2, 0xc24, 0x5, 0x4, 0x3}, {0x4, 0xfffffffc, 0x1, 0x5, 0x1, 0x1}, {0x5, 0x9a, 0x101, 0x7, 0x72d, 0x8}, {0x7, 0xfffffffc, 0x9, 0x1, 0x2, 0x8}, {0x9, 0x9, 0x7ff, 0x1000, 0x0, 0x75b3}, {0x7, 0x7, 0x6, 0x0, 0x5}, {0x800, 0x0, 0x6d, 0x4, 0x8, 0xa4}, {0x3, 0x6, 0x1000, 0x6, 0x3, 0x40}, {0x200, 0x800, 0x4b, 0xe, 0x8185, 0x4}, {0x0, 0x2dd, 0x8, 0x7, 0x9, 0xffff}, {0x6, 0x931d, 0xc4e, 0x80000000, 0x2b2, 0x1000}, {0xb3, 0x9, 0x0, 0x0, 0x7, 0x62a0}, {0x5, 0x5, 0x7, 0xffff8d22, 0x7, 0x2}, {0x5, 0xd, 0x3ff, 0x8, 0x4, 0x3}, {0xde, 0x8, 0x9648, 0x0, 0x4, 0x2}, {0x5, 0x5, 0x7, 0x3, 0x3, 0xb80}, {0x81, 0x7, 0x7f, 0xa, 0x1c581349, 0x80000000}, {0x8000, 0xffffffc0, 0x6, 0x3, 0x7f, 0x4}, {0x7, 0x5, 0x10001, 0x80000001, 0x9, 0x3}, {0x0, 0xffffffff, 0xfffffffa, 0x4, 0x401, 0x7}, {0x3ff, 0x101, 0xfffffe10, 0x7f, 0x7, 0x5}, {0x3, 0x6, 0x60, 0x7f, 0x81, 0x1db}, {0x3, 0x1, 0x0, 0x1, 0x1, 0x2}, {0x7ac, 0x268, 0x1, 0x6, 0x0, 0x82}, {0x7, 0x6, 0x86b, 0x5, 0x7, 0x3ff}, {0xfd73, 0x1, 0x4, 0x3, 0xff, 0x9}, {0xe6, 0x0, 0x7, 0xff, 0x4, 0xc0000000}, {0x8, 0x28000, 0x5, 0x7, 0x57, 0x9}, {0x8, 0x4, 0x9, 0x4, 0x0, 0x9}, {0x7e5, 0x8, 0x9, 0x5, 0x81, 0x1c00000}, {0x0, 0x8001, 0x40000000, 0xde7, 0x5, 0x80000001}, {0x101, 0x70, 0x24, 0x1, 0x1, 0xb}, {0x4, 0xffffffff, 0x1, 0x3, 0x4, 0x1d94}, {0x175, 0x2, 0x8937, 0x7fffffff, 0x1, 0x8c5}, {0x3, 0x67e29992, 0x1000, 0x0, 0x4, 0x81}, {0x1, 0x100, 0x2, 0x4, 0xd2, 0x7}, {0xe0ca, 0x8, 0x0, 0x3, 0x1, 0x1}, {0x560, 0x4480000, 0x4cb63eb8, 0x0, 0x8, 0xfff}, {0x30d2461c, 0x5, 0x56, 0x2, 0x9, 0x1ff}, {0x4, 0x0, 0x50, 0x8, 0xffffffff, 0x9}, {0xfd4, 0x80000001, 0xffffffff, 0x1, 0x5e5, 0xd}, {0xffffffff, 0x9, 0xac, 0x2455, 0xa, 0xffffffff}, {0xab8, 0x9, 0x2bbf, 0x49d, 0x2, 0xf4}, {0xf04, 0xb75, 0x4, 0x2, 0x9, 0x80000000}, {0x3, 0xc, 0x2, 0x9, 0xf90d, 0x31}, {0x3, 0xc, 0xfffffff1, 0x6e8, 0x3}, {0x6, 0x1, 0x7f34, 0x2, 0xac56, 0x77}, {0x64a, 0x3ff, 0x8, 0x1, 0x261, 0x1}, {0xcfc, 0x9, 0xc, 0x5, 0x3b8, 0x1}, {0x0, 0x5, 0x7, 0x7b41, 0x4, 0x92f}, {0x30, 0x5, 0x6, 0x6, 0xf72cd2a, 0x9}, {0x9000, 0x2, 0xc, 0x0, 0x8000, 0x9}, {0x4, 0x1, 0x547, 0x4, 0x7, 0x2}, {0xffff, 0x9, 0x0, 0x1, 0x7, 0x10000}, {0x48000, 0x6, 0xfff, 0x5, 0x5, 0x7}, {0x2, 0x437c, 0x652, 0xd, 0x5, 0x1}, {0x3ff, 0xa, 0x800, 0xbbb1, 0x100, 0x7fff}, {0x7, 0x2, 0x7f, 0xffffffff, 0x8, 0x361}, {0x9df, 0x1000, 0x800, 0x4, 0x100, 0x2}, {0x3, 0xa, 0xc, 0x3, 0x9, 0x9}, {0xa7c0, 0x7, 0x1a2, 0x101, 0xfff, 0x1}, {0x4, 0xa, 0x6, 0xfffffe00, 0x1}, {0x8, 0x3, 0x3d, 0x6ef, 0x3, 0x1bf}, {0xf0, 0x2, 0x4, 0x2, 0x10000, 0x400}, {0x9, 0x8, 0xd8, 0x80000000, 0x4, 0x3}, {0x10000, 0x4, 0x7fff, 0x1, 0x0, 0xb}, {0x7, 0x6, 0x1, 0x5, 0x81d, 0x5}, {0xf, 0x2, 0x293f, 0xfffffffd, 0xe69e, 0x4}, {0xfffffff7, 0x80, 0x0, 0x0, 0xffffffff, 0x101}, {0x3fca, 0x10, 0xc, 0x4, 0x40, 0x1}, {0x7, 0x400000, 0x4, 0x8000, 0x6, 0x7e2}, {0x8, 0x1, 0x2b6e, 0x810, 0x4, 0x3}, {0x55e7, 0x121, 0x3, 0x8, 0xb83, 0x7}, {0x7, 0x7, 0x0, 0x8, 0xfffffff8, 0x7}, {0xffffffff, 0xb, 0x101, 0x81a0, 0x54, 0x7fffffff}, {0x18000, 0x2, 0xff, 0x7, 0x1ff, 0x3}, {0xfb00, 0x400, 0x50, 0x8001, 0x0, 0x9765}, {0x0, 0x0, 0x9, 0x2, 0xff, 0x3}, {0x5, 0x191, 0xf2, 0x3, 0x6, 0x4}, {0x2, 0x13c, 0x11, 0x1, 0x4, 0x2}, {0xc09, 0x9, 0x2, 0x2, 0x985, 0x1}, {0x3, 0x8, 0xffff5f26, 0x2, 0x1, 0x3}, {0xfff, 0x80000001, 0xff, 0xc18, 0x6, 0x1}], [{0x5}, {0x4}, {0x2}, {0x4, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {}, {0x3}, {0x4, 0x1}, {0x5}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x4}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x4}, {0x5}, {}, {0x3, 0x1}, {0x5}, {0x1}, {0x4}, {0x3}, {0x6, 0x1}, {0x0, 0x1}, {0x1}, {0x4}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x3}, {}, {0x5}, {0x5}, {0x3}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x32241067686e8ed3}, {0x5}, {0x4, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x4}, {0x2}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x2}, {0x3}, {0x0, 0x1}, {}, {0x3}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x4}, {}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x2}, {}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x6c, 0x5, 0x0, 0x1, [{0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0xf6, 0x6, "8246a015418938301643ed62890e02aa76e9daa9e774de249f435d037d673f8ed1c0968ac183aceb85d1b5fbaf1bd9d9b4523431024072939294158398ccda35024baedd7118c2e70133af8af9647286420d50a30d8fa798cbc307d7fb2beee8c8396ae07c0fff35192b0bdff95d9b6f63259111a18bf378bed4a4920997c375b34075b7b1ff43fc7bcef3514a74908afcf2e10b6d10e51076a74dc4cf9ae3da0d97d49cdf5bd5c67c9b660533a00e1c11410c21d10cbbf4dde48b2031b6eb6bd6e97d6304b190bcb7d080469c6f343c75632f7933c38d22583391c052da9f4aaa9cf3de9d7829d511b702723676eb499021"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x54b8}, 0x1, 0x0, 0x0, 0x40088c1}, 0x800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r8, &(0x7f00000002c0)="0503e5fdd3fc14f9fd004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x8100, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r10 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r11, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r12, &(0x7f0000000000), 0x400000000000041, 0x0) 8.814262804s ago: executing program 5 (id=5016): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@const={0x0, 0x0, 0x0, 0x9, 0x4}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8, 0x0, 0x0, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @restrict={0x0, 0x0, 0x0, 0xb, 0x3}]}}, 0x0, 0x5a, 0x0, 0x3}, 0x28) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x66, 0x47, 0x107, 0x1, 0xffffffff, {0x1, 0x7c}, [@nested={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0xf2}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2404c054}, 0xc000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x900, 0x4, 0x28}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000003000000000000000300000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000fb000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5516, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000580)="c794", 0x2}, 0x50) fanotify_init(0x4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$panthor(0xffffff9c, 0x0, 0x2, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x40, 0x10, 0x403, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x52001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x3}]}, 0x40}}, 0x440088c4) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000040)) 5.064165263s ago: executing program 5 (id=5022): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x1a, &(0x7f0000000480)=ANY=[@ANYBLOB="18080000040000000000000000000003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000d283083ae8ffffff950000000000000018110000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x18) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001e40)=ANY=[@ANYBLOB="50000000120001030000000000662b6b0ce600000000fe000000002000000000000000000001000000000000120800000022afb9b547d10f", @ANYRES32=0x0, @ANYBLOB="0000000000000000000400000000000004000100"], 0x50}}, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x9a, &(0x7f00000000c0)=ANY=[], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x4161, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x8012, r4, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x3, 0x0, 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000001c0)=ANY=[@ANYBLOB="0600000000000000616161616161616161616161616161616161616161616161616161616161616131313131313131313131313131313131313131313131313131313131313131318c3b3e314acdc28fb184087d8db795be045c8a18827fd00cb00e7f33ab2c78775c84686d196b9f1d924fe10d873326645ef5eefd18f455c656a90c377884e03ac16ca58d7d3fc5c23642a301626f44ce6956c299d564457170f521fd53664ebff82aa29abd796fa3a2"], 0x48, 0xfffffffffffffffb) 5.063972756s ago: executing program 2 (id=5023): memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) syz_open_dev$dri(0x0, 0x1000000000000000, 0x410000) r0 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8000, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0x1}], 0x10, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000002940), 0x0, 0x10002, 0x0) 5.03874043s ago: executing program 3 (id=5024): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000002060b0100000000000000000000000005000100070000000900020073797a30000000000c00078008000640000000000500050002000000050004000000000016000300686173683a6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_MOVE(r2, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000181000/0x3000)=nil, &(0x7f0000406000/0x1000)=nil, 0x3000, 0x4}) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080008000000000000000000000500010006"], 0x1c}}, 0x8050) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002ba3229bbdcdfc27e0000000a0000000500010006000000050004000000000011000300686173683a69702c706f727400000000050005000a0000000900020073797a3100000000"], 0x4c}}, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x30, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) recvmsg(r1, 0x0, 0x10000) read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) r6 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_AUDIO(r6, 0x40345622, &(0x7f00000001c0)={0x0, "3c4d83e651b1791481d5da49a0e1f5dd23f3fc71e6a58aae6fd755a19f96a736", 0x3}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) sigaltstack(&(0x7f0000000080)={0x0, 0x80000002}, 0x0) r7 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) ioctl$MEMISLOCKED(r7, 0x80084d17, 0x0) r8 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r8}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r9, 0x1, &(0x7f0000000040), 0x0) close_range(r5, 0xffffffffffffffff, 0x600000000000000) 4.678799103s ago: executing program 2 (id=5025): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {}, 0xfe}, 0x18) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x44080}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x4) write(r8, &(0x7f0000000000)='3', 0x4e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x8000) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 4.027240423s ago: executing program 5 (id=5026): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x1a, &(0x7f0000000480)=ANY=[@ANYBLOB="18080000040000000000000000000003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000d283083ae8ffffff950000000000000018110000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x18) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001e40)=ANY=[@ANYBLOB="50000000120001030000000000662b6b0ce600000000fe000000002000000000000000000001000000000000120800000022afb9b547d10f", @ANYRES32=0x0, @ANYBLOB="0000000000000000000400000000000004000100"], 0x50}}, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x9a, &(0x7f00000000c0)=ANY=[], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x4161, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x8012, r4, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x3, 0x0, 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000001c0)=ANY=[@ANYBLOB="0600000000000000616161616161616161616161616161616161616161616161616161616161616131313131313131313131313131313131313131313131313131313131313131318c3b3e314acdc28fb184087d8db795be045c8a18827fd00cb00e7f33ab2c78775c84686d196b9f1d924fe10d873326645ef5eefd18f455c656a90c377884e03ac16ca58d7d3fc5c23642a301626f44ce6956c299d564457170f521fd53664ebff82aa29abd796fa3a2"], 0x48, 0xfffffffffffffffb) 3.723002338s ago: executing program 3 (id=5029): prctl$PR_SET_SECUREBITS(0x1c, 0x8) setrlimit(0x5, &(0x7f0000000140)={0x2, 0xfffff003}) r0 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r0, 0xb) prctl$PR_SET_SECUREBITS(0x1c, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000006680)={0x0, 0x0, 0x0}, 0x0) r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r2, 0x2) r3 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r3, 0x1) flock(r3, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) gettid() mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000080), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) clock_getres(0xffffffffffffffed, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) flock(r2, 0x5) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x1f4a, 0x0, 0x1}, 0x30, 0x0) landlock_restrict_self(r5, 0x5) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x35c, 0x0) 3.52858662s ago: executing program 4 (id=5030): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x0) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0xc8856, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1fe) mount(&(0x7f00000002c0)=@filename='./sys/bus/pci/devices/0000:00:1f.3/remove\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vxcan0\x00'}) ioctl$OCFS2_IOC_GROUP_EXTEND(r1, 0x40046f01, &(0x7f0000000040)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:1f.3/remove\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='1\n\x00', 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0285628, &(0x7f0000000080)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) chdir(&(0x7f0000000380)='./dev\x00') setxattr$trusted_overlay_redirect(&(0x7f00000001c0)='./dev\x00', &(0x7f0000000200), &(0x7f0000000240)='./mnt\x00', 0x6, 0x2) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x1) 3.448544947s ago: executing program 4 (id=5031): memfd_create(0x0, 0x2) syz_open_dev$dri(0x0, 0x1000000000000000, 0x410000) r0 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8000, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0x1}], 0x10, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000002940)=[{{0x0, 0xffffffffffffff0a, 0x0}, 0x2}], 0xf000, 0x10002, 0x0) 3.448279043s ago: executing program 3 (id=5032): add_key$keyring(&(0x7f0000000000), &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff) clock_adjtime(0xffffffd3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x40e00, 0x34, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) openat(0xffffffffffffffff, 0x0, 0x131443, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89b1, &(0x7f0000000440)={'sit0\x00', 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='pids.current\x00', 0x275a, 0x0) r3 = getpid() fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x1, r3}) unshare(0x60000600) fcntl$getown(r2, 0x9) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r4, 0x10, 0x0, 0x0, 0x0, 0xfffffffffffffeb2, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) readv(r5, &(0x7f0000000780)=[{&(0x7f0000000380)=""/205, 0xcd}], 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000280)) 3.110442104s ago: executing program 4 (id=5033): socket$tipc(0x1e, 0x2, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@keyring) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000500)=""/139, &(0x7f00000005c0)=0x8b) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@ipv6_newrule={0x24, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048084}, 0x44050) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000003c0)={@val={0xa, 0x806}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0x10, 0x11, 0xff, @rand_addr=' \x01\x00', @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x8, 0x100, @val=0xd7a919ca9eb57b16}}}}}}}}}, 0x4a) 3.060002988s ago: executing program 2 (id=5034): memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) syz_open_dev$dri(0x0, 0x1000000000000000, 0x410000) r0 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8000, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0x1}], 0x10, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000002940), 0x0, 0x10002, 0x0) 3.042255837s ago: executing program 3 (id=5035): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = syz_clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0xb7) r1 = getpgid(r0) kcmp(r1, r0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) openat$cgroup_ro(r2, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = getpid() r4 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e25, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r7, 0xc004562f, &(0x7f0000000080)=0x1) ioctl$XFS_IOC_FSGROWFSRT(r7, 0x400c5870, 0x0) sendfile(r6, r5, 0x0, 0x7ffff000) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) r9 = syz_pidfd_open(r3, 0x0) setns(r9, 0x24020000) umount2(0x0, 0x2) openat$tun(0xffffff9c, 0x0, 0x10000, 0x0) 2.883154298s ago: executing program 3 (id=5036): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0xb, 0x2) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000000)={0x0, 0x1, 'hub\x00'}) close(r0) syz_emit_ethernet(0x82, &(0x7f0000000640)=ANY=[], 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1801) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000003c0)='sockfs\x00', 0x200020, &(0x7f0000000400)='/dev/sequencer2\x00') socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$inet(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000040)={0x0, 0xc2, 0x400, 0xfffffffd, 0x230}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x4, 0xffffffff, 0x91, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x1000, 0x1, 0x3ad, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x30}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x40, 0x1, 0x26d, 0x0, r3}}], 0x1, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) bind(r1, &(0x7f0000000200)=@nfc={0x27, r7, 0x1, 0x4}, 0x80) socket$inet6(0xa, 0x2, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2.881910288s ago: executing program 2 (id=5044): pipe(&(0x7f0000000300)) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000140)=[{0x6, 0x1, 0x0, 0x7fff0000}, {0x401, 0x7f, 0x5, 0x2}, {0x8, 0x0, 0x6, 0x676}]}) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x1033, r0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setns(0xffffffffffffffff, 0x2000000) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(0xffffffffffffffff, 0x3b87, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) sendto$inet6(r2, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x880) socket$netlink(0x10, 0x3, 0x15) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="39000000130003470fbb65e1c3e4ffff06a660001600000056000000250000001900b3c0b6d20300070a0000000084db26b9e4e20000000000", 0x39}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socket$unix(0x1, 0x1, 0x0) 2.724938485s ago: executing program 4 (id=5037): socket$tipc(0x1e, 0x2, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@keyring) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000500)=""/139, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@ipv6_newrule={0x24, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048084}, 0x44050) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000003c0)={@val={0xa, 0x806}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0x10, 0x11, 0xff, @rand_addr=' \x01\x00', @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x8, 0x100, @val=0xd7a919ca9eb57b16}}}}}}}}}, 0x4a) 2.724300438s ago: executing program 5 (id=5038): syz_open_dev$dri(0x0, 0x1000000000000000, 0x410000) r0 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8000, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0x1}], 0x10, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000002940)=[{{0x0, 0xffffffffffffff0a, 0x0}, 0x2}], 0xf000, 0x10002, 0x0) 1.047252321s ago: executing program 4 (id=5039): prctl$PR_SET_SECUREBITS(0x1c, 0x8) setrlimit(0x5, &(0x7f0000000140)={0x2, 0xfffff003}) r0 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r0, 0xb) prctl$PR_SET_SECUREBITS(0x1c, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000006680)={0x0, 0x0, 0x0}, 0x0) r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r2, 0x2) r3 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r3, 0x1) flock(r3, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) gettid() mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000080), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) clock_getres(0xffffffffffffffed, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) flock(r2, 0x5) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x1f4a, 0x0, 0x1}, 0x30, 0x0) landlock_restrict_self(r5, 0x5) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x35c, 0x0) 1.032336413s ago: executing program 2 (id=5048): add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x2730, 0x800, 0x1, 0x82}, &(0x7f0000000180)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000240)=0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x30, 0x0}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r1}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)=ANY=[@ANYBLOB="200000002f0007010abd7000fbdb00020001000000000000335f000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0x7, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_80211_inject_frame(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x305) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r7, {0x7, 0x1f, 0x1000001, 0x5069f481, 0xfffe, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d9813bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef10542a2201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42731b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c32768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65bf667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176f6a1703c04387cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339ac2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebce31d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e179100a0000000000000021e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90a14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9edb6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc83cccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c4d42b032000a10d7a763054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) 1.003166968s ago: executing program 3 (id=5040): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) r1 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f00000000c0)) sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000005c0)={0xe0, 0x10, 0x509, 0x0, 0x25dfdbfc, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xa9, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce5f715f2d2d285f2c2dde2cb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"}, @nested={0x14, 0x0, 0x0, 0x1, [@typed={0xd, 0x0, 0x0, 0x0, @binary="c606f93f6b8199f926"}]}]}, 0xe0}], 0x1}, 0x40040) 799.390118ms ago: executing program 5 (id=5041): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/psmouse/parameters/synaptics_intertouch\x00', 0x1, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe2$watch_queue(&(0x7f0000002000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$VIDIOC_TRY_DECODER_CMD(r2, 0xc0485661, &(0x7f0000002200)={0x3, 0x1, @start={0xf, 0x1}}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xa, 0x11, r3, 0xe309b000) write(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000040)=0x3, 0xac5) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0xf8) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="041817aaaaaaaaaa10e8fad507b2c422b6ffa902c58609a05210"], 0x1a) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x2, 0x200, &(0x7f0000003c40)="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"}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r4, 0xffffffffffffffff, 0x80000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000280)=[@decrefs], 0x0, 0x0, 0x0}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000020c0)=ANY=[@ANYBLOB="280000001a00010000000008000000001c000000fd000000000000000c00090008001c08", @ANYRES32=0x0, @ANYBLOB="3ffe225de9611dfc94f4fdce999c9eaf94ac594327558d8c9aa32c3b11c936c2a0340e1e31a73f1cba15f0a1628532a01909faf83cad3bdb12b09ec16bf2ff6829f69e7be0802f7a5472ee3540c4e84fd62b91941b5e82d4e1eb8ece9d018b005041fee64da4a06f703c3aadffd388801db19ca16f1a5da30d59b20c30cad5b025b3d79b452c3c0747a3580e05b9bbdfda8a8b6a48823a8ef6b24a36e6ead76009ebc6bb5c815537c341bd047f1e6edf2596930cbd6d06357116fa58db489b201e80a6b9984141a65eed516ee3d9db076b5314d45ed3ba9c18f87c372f185bd94adadee79abca347b938ca7de26fc08f43b9f172e6ee073e"], 0x28}}, 0x0) socket$inet6(0xa, 0x2, 0x0) 769.482746ms ago: executing program 4 (id=5042): memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) syz_open_dev$dri(0x0, 0x1000000000000000, 0x410000) r0 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8000, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0x1}], 0x10, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000002940)=[{{0x0, 0xffffffffffffff0a, 0x0}, 0x2}], 0xf000, 0x10002, 0x0) 0s ago: executing program 5 (id=5043): memfd_create(0x0, 0x2) syz_open_dev$dri(0x0, 0x1000000000000000, 0x410000) r0 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8000, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0x1}], 0x10, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000002940)=[{{0x0, 0xffffffffffffff0a, 0x0}, 0x2}], 0xf000, 0x10002, 0x0) kernel console output (not intermixed with test programs): ame+0xe7/0xaf0 [ 1224.969493][T22540] ? __pfx_ia32_setup_rt_frame+0x10/0x10 [ 1224.969508][T22540] ? __pfx___sys_sendto+0x10/0x10 [ 1224.969550][T22540] arch_do_signal_or_restart+0x459/0x7a0 [ 1224.969572][T22540] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1224.969605][T22540] exit_to_user_mode_loop+0x139/0x700 [ 1224.969621][T22540] ? rcu_is_watching+0x13/0xc0 [ 1224.969639][T22540] __do_fast_syscall_32+0x59f/0x8b0 [ 1224.969660][T22540] ? lockdep_hardirqs_on+0x7d/0x110 [ 1224.969682][T22540] do_fast_syscall_32+0x32/0x70 [ 1224.969702][T22540] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1224.969722][T22540] RIP: 0023:0xf73aefea [ 1224.969734][T22540] Code: 19 85 d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 80 5d 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1224.969750][T22540] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 1224.969765][T22540] RAX: 0000000000000171 RBX: 0000000000000004 RCX: 0000000000000000 [ 1224.969774][T22540] RDX: 0000000000000000 RSI: 0000000000044000 RDI: 0000000080002500 [ 1224.969783][T22540] RBP: 0000000000000080 R08: 0000000000000000 R09: 0000000000000000 [ 1224.969792][T22540] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1224.969802][T22540] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1224.969821][T22540] [ 1225.191900][T11815] Bluetooth: hci2: unexpected event for opcode 0x200a [ 1225.199830][T19295] Bluetooth: hci2: unexpected event for opcode 0x0c13 [ 1225.230995][ T57] cdc_acm 10-1:1.0: ttyACM0: USB ACM device [ 1225.237446][ T57] usb 10-1: USB disconnect, device number 11 [ 1226.401612][T22564] netlink: 1 bytes leftover after parsing attributes in process `syz.5.4483'. [ 1226.590092][T22555] nvme nvme0: rdma connection establishment failed (-512) [ 1227.255617][T11815] Bluetooth: hci0: Opcode 0x0c13 failed: -110 [ 1227.256662][T11815] Bluetooth: hci0: command 0x0406 tx timeout [ 1228.118820][T22591] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4489'. [ 1228.150336][T22586] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:20001 [ 1228.212825][T22591] syzkaller1: entered promiscuous mode [ 1228.212848][T22591] syzkaller1: entered allmulticast mode [ 1230.081209][T22610] tls_set_device_offload_rx: netdev not found [ 1230.235789][T22613] kAFS: bad VL server IP address [ 1230.476835][T22619] FAULT_INJECTION: forcing a failure. [ 1230.476835][T22619] name failslab, interval 1, probability 0, space 0, times 0 [ 1230.476873][T22619] CPU: 3 UID: 0 PID: 22619 Comm: syz.4.4496 Tainted: G L syzkaller #0 PREEMPT(full) [ 1230.476900][T22619] Tainted: [L]=SOFTLOCKUP [ 1230.476908][T22619] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1230.476920][T22619] Call Trace: [ 1230.476934][T22619] [ 1230.476942][T22619] dump_stack_lvl+0x100/0x190 [ 1230.476976][T22619] should_fail_ex.cold+0x5/0xa [ 1230.477004][T22619] should_failslab+0xc2/0x120 [ 1230.477036][T22619] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 1230.477062][T22619] ? __alloc_skb+0x5b7/0x710 [ 1230.477081][T22619] ? __alloc_skb+0x140/0x710 [ 1230.477104][T22619] __alloc_skb+0x140/0x710 [ 1230.477121][T22619] ? __alloc_skb+0x5b7/0x710 [ 1230.477139][T22619] ? __pfx___alloc_skb+0x10/0x10 [ 1230.477162][T22619] ? lock_acquire+0x1d1/0x380 [ 1230.477195][T22619] xfrm_alloc_compat+0x780/0x1200 [ 1230.477220][T22619] ? xfrm_get_translator+0xeb/0x290 [ 1230.477243][T22619] ? __pfx_xfrm_alloc_compat+0x10/0x10 [ 1230.477269][T22619] xfrm_send_acquire+0x855/0xd00 [ 1230.477296][T22619] ? __pfx_xfrm_send_acquire+0x10/0x10 [ 1230.477317][T22619] ? km_query+0x38/0x260 [ 1230.477350][T22619] ? lockdep_init_map_type+0x5c/0x250 [ 1230.477384][T22619] km_query+0xb4/0x260 [ 1230.477416][T22619] xfrm_state_find+0x3f87/0x92e0 [ 1230.477453][T22619] ? __pfx_xfrm_state_find+0x10/0x10 [ 1230.477480][T22619] ? lock_acquire+0x1d1/0x380 [ 1230.477507][T22619] ? is_bpf_text_address+0x25/0x1a0 [ 1230.477539][T22619] ? find_held_lock+0x2b/0x80 [ 1230.477562][T22619] ? is_bpf_text_address+0x8a/0x1a0 [ 1230.477595][T22619] ? __lock_acquire+0x5c0/0x1f40 [ 1230.477630][T22619] xfrm_resolve_and_create_bundle+0x49e/0x3880 [ 1230.477675][T22619] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 1230.477699][T22619] ? xfrm_selector_match+0xaa/0x1040 [ 1230.477724][T22619] ? find_held_lock+0x2b/0x80 [ 1230.477745][T22619] ? xfrm_policy_lookup_bytype+0x568/0x12b0 [ 1230.477769][T22619] ? xfrm_policy_lookup_bytype+0x568/0x12b0 [ 1230.477800][T22619] ? xfrm_policy_lookup_bytype+0x577/0x12b0 [ 1230.477838][T22619] ? __pfx_xfrm_policy_lookup_bytype+0x10/0x10 [ 1230.477867][T22619] ? lockdep_hardirqs_on+0x7d/0x110 [ 1230.477896][T22619] ? dst_alloc+0xc0/0x1a0 [ 1230.477931][T22619] ? xfrm_expand_policies.constprop.0+0x250/0x660 [ 1230.477962][T22619] xfrm_lookup_with_ifid+0x4f6/0x1fe0 [ 1230.477993][T22619] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 1230.478035][T22619] xfrm_lookup_route+0x3b/0x200 [ 1230.478064][T22619] ip_route_output_flow+0x11e/0x150 [ 1230.478093][T22619] udp_sendmsg+0x19c5/0x2710 [ 1230.478122][T22619] ? __pfx_udp_sendmsg+0x10/0x10 [ 1230.478160][T22619] ? __pfx_current_check_autobind_udp_socket+0x10/0x10 [ 1230.478189][T22619] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1230.478222][T22619] ? tomoyo_socket_sendmsg_permission+0x14e/0x3c0 [ 1230.478255][T22619] ? aa_sock_msg_perm+0x11e/0x200 [ 1230.478287][T22619] ? __pfx_udp_sendmsg+0x10/0x10 [ 1230.478309][T22619] inet_sendmsg+0x105/0x140 [ 1230.478335][T22619] ____sys_sendmsg+0x9c9/0xbe0 [ 1230.478360][T22619] ? __pfx_inet_sendmsg+0x10/0x10 [ 1230.478388][T22619] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1230.478416][T22619] ? _kstrtoull+0x144/0x200 [ 1230.478437][T22619] ? __pfx__kstrtoull+0x10/0x10 [ 1230.478461][T22619] ___sys_sendmsg+0x190/0x1e0 [ 1230.478490][T22619] ? __pfx____sys_sendmsg+0x10/0x10 [ 1230.478516][T22619] ? __lock_acquire+0x5c0/0x1f40 [ 1230.478553][T22619] ? __fget_files+0x34/0x3d0 [ 1230.478622][T22619] __sys_sendmmsg+0x309/0x440 [ 1230.478649][T22619] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1230.478669][T22619] ? find_held_lock+0x2b/0x80 [ 1230.478701][T22619] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1230.478744][T22619] ? fput+0x7c/0x100 [ 1230.478775][T22619] ? ksys_write+0x1ac/0x250 [ 1230.478800][T22619] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 1230.478823][T22619] ? lockdep_hardirqs_on+0x7d/0x110 [ 1230.478845][T22619] __do_fast_syscall_32+0x13a/0x8b0 [ 1230.478868][T22619] ? lockdep_hardirqs_on+0x7d/0x110 [ 1230.478910][T22619] do_fast_syscall_32+0x32/0x70 [ 1230.478941][T22619] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1230.478966][T22619] RIP: 0023:0xf73aefec [ 1230.478987][T22619] Code: Unable to access opcode bytes at 0xf73aefc2. [ 1230.478996][T22619] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 1230.479016][T22619] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080004d00 [ 1230.479031][T22619] RDX: 0000000000000300 RSI: 0000000000000f1c RDI: 0000000000000000 [ 1230.479043][T22619] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1230.479054][T22619] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1230.479068][T22619] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1230.479094][T22619] [ 1231.124308][T22628] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4500'. [ 1231.224795][T22547] Bluetooth: hci3: unexpected event for opcode 0x2024 [ 1231.395102][T22636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4502'. [ 1231.428321][T22636] Scaler: ================= START STATUS ================= [ 1231.428338][T22636] Scaler: ================== END STATUS ================== [ 1233.035067][T22663] ptrace attach of "/syz-executor exec"[14199] was attempted by ""[22663] [ 1233.311788][ T30] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1233.542128][ T30] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 1233.543248][ T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.780673][T22547] Bluetooth: hci0: unexpected event for opcode 0x200a [ 1233.952149][ T30] cdc_acm 7-1:1.0: ttyACM0: USB ACM device [ 1233.956859][ T30] usb 7-1: USB disconnect, device number 31 [ 1234.515135][T22683] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4517'. [ 1234.586977][T22687] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1234.586996][T22687] IPv6: NLM_F_CREATE should be set when creating new route [ 1235.259783][T22547] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1235.259853][T22547] Bluetooth: hci3: Injecting HCI hardware error event [ 1235.262881][T22547] Bluetooth: hci3: hardware error 0x00 [ 1236.933777][T22721] jffs2: notice: (22721) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1238.014632][T22547] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1238.094322][T22735] jffs2: notice: (22735) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1238.229916][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.248245][T22742] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1238.268610][T22743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4532'. [ 1238.887843][T22758] FAULT_INJECTION: forcing a failure. [ 1238.887843][T22758] name failslab, interval 1, probability 0, space 0, times 0 [ 1238.887877][T22758] CPU: 3 UID: 0 PID: 22758 Comm: syz.5.4537 Tainted: G L syzkaller #0 PREEMPT(full) [ 1238.888058][T22758] Tainted: [L]=SOFTLOCKUP [ 1238.888072][T22758] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1238.888082][T22758] Call Trace: [ 1238.888089][T22758] [ 1238.888097][T22758] dump_stack_lvl+0x100/0x190 [ 1238.888127][T22758] should_fail_ex.cold+0x5/0xa [ 1238.888152][T22758] should_failslab+0xc2/0x120 [ 1238.888178][T22758] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 1238.888201][T22758] ? __alloc_skb+0x5b7/0x710 [ 1238.888232][T22758] ? __alloc_skb+0x140/0x710 [ 1238.888255][T22758] __alloc_skb+0x140/0x710 [ 1238.888271][T22758] ? __alloc_skb+0x5b7/0x710 [ 1238.888286][T22758] ? __pfx___alloc_skb+0x10/0x10 [ 1238.888310][T22758] netlink_alloc_large_skb+0x69/0x150 [ 1238.888339][T22758] netlink_sendmsg+0x680/0xda0 [ 1238.888370][T22758] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1238.888397][T22758] ? apparmor_socket_sendmsg+0x165/0x280 [ 1238.888428][T22758] ____sys_sendmsg+0xa4d/0xbe0 [ 1238.888449][T22758] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1238.888475][T22758] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1238.888510][T22758] ___sys_sendmsg+0x190/0x1e0 [ 1238.888535][T22758] ? __pfx____sys_sendmsg+0x10/0x10 [ 1238.888586][T22758] ? find_held_lock+0x2b/0x80 [ 1238.889433][T22758] __sys_sendmsg+0x160/0x210 [ 1238.889461][T22758] ? __pfx___sys_sendmsg+0x10/0x10 [ 1238.889486][T22758] ? __pfx_ksys_write+0x10/0x10 [ 1238.889513][T22758] __do_fast_syscall_32+0x13a/0x8b0 [ 1238.889536][T22758] ? lockdep_hardirqs_on+0x7d/0x110 [ 1238.889689][T22758] do_fast_syscall_32+0x32/0x70 [ 1238.889713][T22758] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1238.889735][T22758] RIP: 0023:0xf73eefec [ 1238.889886][T22758] Code: Unable to access opcode bytes at 0xf73eefc2. [ 1238.889895][T22758] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1238.889913][T22758] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 1238.889925][T22758] RDX: 0000000004000084 RSI: 0000000000000000 RDI: 0000000000000000 [ 1238.890509][T22758] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1238.890521][T22758] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1238.890532][T22758] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1238.890557][T22758] [ 1239.483789][T22547] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 1239.864163][T22774] netlink: 'syz.3.4542': attribute type 1 has an invalid length. [ 1239.868627][T22776] netlink: 'syz.3.4542': attribute type 10 has an invalid length. [ 1239.868648][T22776] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4542'. [ 1240.357682][T22774] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1240.358359][T22776] dummy0: entered promiscuous mode [ 1240.476274][T22795] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4543'. [ 1240.536210][T22795] FAULT_INJECTION: forcing a failure. [ 1240.536210][T22795] name failslab, interval 1, probability 0, space 0, times 0 [ 1240.536251][T22795] CPU: 1 UID: 0 PID: 22795 Comm: syz.4.4543 Tainted: G L syzkaller #0 PREEMPT(full) [ 1240.536282][T22795] Tainted: [L]=SOFTLOCKUP [ 1240.536290][T22795] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1240.536302][T22795] Call Trace: [ 1240.536339][T22795] [ 1240.536349][T22795] dump_stack_lvl+0x100/0x190 [ 1240.536383][T22795] should_fail_ex.cold+0x5/0xa [ 1240.536409][T22795] should_failslab+0xc2/0x120 [ 1240.536439][T22795] __kmalloc_cache_noprof+0x91/0x6d0 [ 1240.536460][T22795] ? nsim_fib_event_nb+0x1b4/0xe50 [ 1240.536493][T22795] nsim_fib_event_nb+0x1b4/0xe50 [ 1240.536534][T22795] ? lock_acquire+0x1d1/0x380 [ 1240.536561][T22795] ? atomic_notifier_call_chain+0x2f/0x1c0 [ 1240.536588][T22795] notifier_call_chain+0x99/0x3f0 [ 1240.536613][T22795] atomic_notifier_call_chain+0x71/0x1c0 [ 1240.536636][T22795] call_fib_notifiers+0x33/0x70 [ 1240.536660][T22795] fib6_del+0xec3/0x1790 [ 1240.536697][T22795] ? __pfx_fib6_del+0x10/0x10 [ 1240.536727][T22795] ? fib6_ifdown+0xcd/0x7e0 [ 1240.536755][T22795] fib6_clean_node+0x426/0x5d0 [ 1240.536786][T22795] ? __pfx_fib6_clean_node+0x10/0x10 [ 1240.536819][T22795] ? lock_acquire+0x1d1/0x380 [ 1240.536849][T22795] fib6_walk_continue+0x451/0x8d0 [ 1240.536877][T22795] fib6_walk+0x182/0x350 [ 1240.536901][T22795] fib6_clean_tree+0xdc/0x120 [ 1240.536925][T22795] ? __pfx_fib6_ifdown+0x10/0x10 [ 1240.536946][T22795] ? __pfx_fib6_clean_tree+0x10/0x10 [ 1240.536975][T22795] ? __pfx_fib6_clean_node+0x10/0x10 [ 1240.537002][T22795] ? __pfx_fib6_ifdown+0x10/0x10 [ 1240.537030][T22795] ? __pfx_fib6_ifdown+0x10/0x10 [ 1240.537050][T22795] __fib6_clean_all+0x107/0x2d0 [ 1240.537080][T22795] rt6_disable_ip+0x2a6/0x980 [ 1240.537102][T22795] ? find_held_lock+0x2b/0x80 [ 1240.537124][T22795] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 1240.537160][T22795] ? __pfx_rt6_disable_ip+0x10/0x10 [ 1240.537180][T22795] ? lock_acquire+0x1d1/0x380 [ 1240.537214][T22795] addrconf_ifdown.isra.0+0x11d/0x1b70 [ 1240.537241][T22795] ? trace_contention_end+0x126/0x160 [ 1240.537271][T22795] ? __mutex_lock+0x26c/0x1bd0 [ 1240.537296][T22795] ? tee_netdev_event+0x8a/0x3d0 [ 1240.537355][T22795] ? find_held_lock+0x2b/0x80 [ 1240.537382][T22795] ? tee_netdev_event+0x300/0x3d0 [ 1240.537413][T22795] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 1240.537457][T22795] addrconf_notify+0x4a3/0x1ba0 [ 1240.537483][T22795] ? __pfx_tls_dev_event+0x10/0x10 [ 1240.537522][T22795] ? __pfx_addrconf_notify+0x10/0x10 [ 1240.537548][T22795] ? ip6mr_device_event+0x1c4/0x230 [ 1240.537576][T22795] notifier_call_chain+0x99/0x3f0 [ 1240.537603][T22795] call_netdevice_notifiers_info+0xbe/0x110 [ 1240.537632][T22795] __dev_notify_flags+0x2fc/0x4b0 [ 1240.537653][T22795] ? __pfx___dev_notify_flags+0x10/0x10 [ 1240.537676][T22795] ? __pfx___dev_change_flags+0x10/0x10 [ 1240.537704][T22795] netif_change_flags+0x108/0x160 [ 1240.537726][T22795] do_setlink.isra.0+0x1ac4/0x3e60 [ 1240.537752][T22795] ? stack_trace_save+0x8e/0xc0 [ 1240.537776][T22795] ? is_bpf_text_address+0x25/0x1a0 [ 1240.537801][T22795] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 1240.537826][T22795] ? __lock_acquire+0x5c0/0x1f40 [ 1240.537856][T22795] ? kasan_save_track+0x14/0x30 [ 1240.537881][T22795] ? __kasan_kmalloc+0xaa/0xb0 [ 1240.537903][T22795] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 1240.537923][T22795] ? rtnl_newlink+0x139/0x2620 [ 1240.537943][T22795] ? rtnetlink_rcv_msg+0x95e/0xe90 [ 1240.537966][T22795] ? netlink_rcv_skb+0x159/0x420 [ 1240.537997][T22795] ? netlink_unicast+0x585/0x850 [ 1240.538026][T22795] ? netlink_sendmsg+0x8b0/0xda0 [ 1240.538052][T22795] ? ____sys_sendmsg+0xa4d/0xbe0 [ 1240.538074][T22795] ? ___sys_sendmsg+0x190/0x1e0 [ 1240.538100][T22795] ? lock_acquire+0x1d1/0x380 [ 1240.538128][T22795] ? rtnl_newlink+0xac3/0x2620 [ 1240.538158][T22795] ? rcu_is_watching+0x13/0xc0 [ 1240.538184][T22795] ? trace_contention_end+0x126/0x160 [ 1240.538216][T22795] ? __mutex_lock+0x26c/0x1bd0 [ 1240.538240][T22795] ? rtnl_newlink+0xac3/0x2620 [ 1240.538260][T22795] ? __nla_validate_parse+0x1e7/0x28b0 [ 1240.538289][T22795] ? __pfx___mutex_lock+0x10/0x10 [ 1240.538312][T22795] ? rcu_is_watching+0x13/0xc0 [ 1240.538333][T22795] ? apparmor_capable+0x1d7/0x4d0 [ 1240.538367][T22795] rtnl_newlink+0x13c1/0x2620 [ 1240.538398][T22795] ? __pfx_rtnl_newlink+0x10/0x10 [ 1240.538421][T22795] ? rcu_is_watching+0x13/0xc0 [ 1240.538442][T22795] ? kasan_quarantine_put+0x104/0x240 [ 1240.538467][T22795] ? lockdep_hardirqs_on+0x7d/0x110 [ 1240.538511][T22795] ? __lock_acquire+0x5c0/0x1f40 [ 1240.538544][T22795] ? find_held_lock+0x2b/0x80 [ 1240.538576][T22795] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1240.538596][T22795] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1240.538619][T22795] ? __pfx_rtnl_newlink+0x10/0x10 [ 1240.538640][T22795] rtnetlink_rcv_msg+0x95e/0xe90 [ 1240.538665][T22795] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1240.538694][T22795] ? ref_tracker_free+0x37e/0x6c0 [ 1240.538718][T22795] netlink_rcv_skb+0x159/0x420 [ 1240.538748][T22795] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1240.538772][T22795] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1240.538809][T22795] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1240.538858][T22795] netlink_unicast+0x585/0x850 [ 1240.538893][T22795] ? __pfx_netlink_unicast+0x10/0x10 [ 1240.538930][T22795] netlink_sendmsg+0x8b0/0xda0 [ 1240.538964][T22795] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1240.538993][T22795] ? apparmor_socket_sendmsg+0x165/0x280 [ 1240.539025][T22795] ____sys_sendmsg+0xa4d/0xbe0 [ 1240.539048][T22795] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1240.539078][T22795] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1240.539114][T22795] ___sys_sendmsg+0x190/0x1e0 [ 1240.539141][T22795] ? __pfx____sys_sendmsg+0x10/0x10 [ 1240.539166][T22795] ? futex_wait+0x11e/0x370 [ 1240.539201][T22795] ? find_held_lock+0x2b/0x80 [ 1240.539238][T22795] __sys_sendmsg+0x160/0x210 [ 1240.539255][T22795] ? __pfx___sys_sendmsg+0x10/0x10 [ 1240.539285][T22795] __do_fast_syscall_32+0x13a/0x8b0 [ 1240.539310][T22795] do_fast_syscall_32+0x32/0x70 [ 1240.539372][T22795] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1240.539395][T22795] RIP: 0023:0xf73aefec [ 1240.539417][T22795] Code: Unable to access opcode bytes at 0xf73aefc2. [ 1240.539426][T22795] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1240.539450][T22795] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000280 [ 1240.539461][T22795] RDX: 0000000000008000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1240.539471][T22795] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1240.539481][T22795] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1240.539490][T22795] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1240.539521][T22795] [ 1240.607068][T22795] bridge1: port 1(dummy0) entered blocking state [ 1240.666630][T22798] netlink: 'syz.4.4543': attribute type 10 has an invalid length. [ 1240.666650][T22798] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4543'. [ 1240.691692][T22795] bridge1: port 1(dummy0) entered disabled state [ 1240.691842][T22795] dummy0: entered allmulticast mode [ 1240.694053][T22795] dummy0: entered promiscuous mode [ 1240.825792][T22798] bridge1: port 1(dummy0) entered blocking state [ 1240.825958][T22798] bridge1: port 1(dummy0) entered forwarding state [ 1240.876354][T22798] dummy0: left allmulticast mode [ 1240.876806][T22798] bridge1: port 1(dummy0) entered disabled state [ 1241.235148][T18222] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1241.368072][T18222] usb 7-1: device descriptor read/64, error -71 [ 1241.661351][T18222] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1241.843682][T18222] usb 7-1: device descriptor read/64, error -71 [ 1241.980085][T18222] usb usb7-port1: attempt power cycle [ 1242.324385][T18222] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1242.341145][T18222] usb 7-1: device descriptor read/8, error -71 [ 1242.612668][T18222] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1242.642924][T18222] usb 7-1: device descriptor read/8, error -71 [ 1242.760520][T18222] usb usb7-port1: unable to enumerate USB device [ 1242.849923][T22547] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 1244.615823][T22836] netlink: 'syz.4.4561': attribute type 12 has an invalid length. [ 1245.484793][T22853] FAULT_INJECTION: forcing a failure. [ 1245.484793][T22853] name failslab, interval 1, probability 0, space 0, times 0 [ 1245.484825][T22853] CPU: 1 UID: 0 PID: 22853 Comm: syz.2.4556 Tainted: G L syzkaller #0 PREEMPT(full) [ 1245.484852][T22853] Tainted: [L]=SOFTLOCKUP [ 1245.484859][T22853] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1245.484870][T22853] Call Trace: [ 1245.484877][T22853] [ 1245.484885][T22853] dump_stack_lvl+0x100/0x190 [ 1245.484916][T22853] should_fail_ex.cold+0x5/0xa [ 1245.484942][T22853] should_failslab+0xc2/0x120 [ 1245.484970][T22853] __kmalloc_cache_noprof+0x91/0x6d0 [ 1245.484991][T22853] ? lock_acquire+0x1d1/0x380 [ 1245.485017][T22853] ? j1939_session_new+0x7b/0x650 [ 1245.485048][T22853] j1939_session_new+0x7b/0x650 [ 1245.485070][T22853] ? __local_bh_enable_ip+0xa5/0x120 [ 1245.485102][T22853] j1939_tp_send+0x211/0x880 [ 1245.485129][T22853] j1939_sk_sendmsg+0xb35/0x1440 [ 1245.485163][T22853] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 1245.485183][T22853] ? apparmor_socket_sendmsg+0x165/0x280 [ 1245.485218][T22853] ____sys_sendmsg+0xa4d/0xbe0 [ 1245.485242][T22853] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 1245.485265][T22853] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1245.485294][T22853] ? _kstrtoull+0x144/0x200 [ 1245.485314][T22853] ? __pfx__kstrtoull+0x10/0x10 [ 1245.485337][T22853] ___sys_sendmsg+0x190/0x1e0 [ 1245.485364][T22853] ? __pfx____sys_sendmsg+0x10/0x10 [ 1245.485390][T22853] ? __lock_acquire+0x5c0/0x1f40 [ 1245.485426][T22853] ? __fget_files+0x34/0x3d0 [ 1245.485468][T22853] __sys_sendmmsg+0x309/0x440 [ 1245.485492][T22853] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1245.485518][T22853] ? find_held_lock+0x2b/0x80 [ 1245.485546][T22853] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1245.485584][T22853] ? fput+0x7c/0x100 [ 1245.485611][T22853] ? ksys_write+0x1ac/0x250 [ 1245.485636][T22853] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 1245.485662][T22853] ? lockdep_hardirqs_on+0x7d/0x110 [ 1245.485685][T22853] __do_fast_syscall_32+0x13a/0x8b0 [ 1245.485709][T22853] ? lockdep_hardirqs_on+0x7d/0x110 [ 1245.485735][T22853] do_fast_syscall_32+0x32/0x70 [ 1245.485760][T22853] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1245.485784][T22853] RIP: 0023:0xf747efec [ 1245.485804][T22853] Code: Unable to access opcode bytes at 0xf747efc2. [ 1245.485812][T22853] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 1245.485832][T22853] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080003e40 [ 1245.485845][T22853] RDX: 00000000fffffe3d RSI: 00000000000000f5 RDI: 0000000000000000 [ 1245.485857][T22853] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1245.485868][T22853] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1245.485879][T22853] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1245.485905][T22853] [ 1245.705894][T22857] FAULT_INJECTION: forcing a failure. [ 1245.705894][T22857] name failslab, interval 1, probability 0, space 0, times 0 [ 1245.705930][T22857] CPU: 2 UID: 0 PID: 22857 Comm: syz.5.4557 Tainted: G L syzkaller #0 PREEMPT(full) [ 1245.706158][T22857] Tainted: [L]=SOFTLOCKUP [ 1245.706165][T22857] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1245.706176][T22857] Call Trace: [ 1245.706183][T22857] [ 1245.706283][T22857] dump_stack_lvl+0x100/0x190 [ 1245.706316][T22857] should_fail_ex.cold+0x5/0xa [ 1245.706522][T22857] should_failslab+0xc2/0x120 [ 1245.706751][T22857] __kmalloc_noprof+0xfc/0x840 [ 1245.706777][T22857] ? rcu_is_watching+0x13/0xc0 [ 1245.706999][T22857] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1245.707034][T22857] tomoyo_realpath_from_path+0xb6/0x690 [ 1245.707181][T22857] tomoyo_path_number_perm+0x23c/0x580 [ 1245.707201][T22857] ? tomoyo_path_number_perm+0x22e/0x580 [ 1245.707409][T22857] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1245.707620][T22857] ? __lock_acquire+0x5c0/0x1f40 [ 1245.707667][T22857] ? current_check_access_path+0x262/0x420 [ 1245.707992][T22857] ? __pfx_current_check_access_path+0x10/0x10 [ 1245.708096][T22857] ? d_alloc_parallel+0x9f6/0x14c0 [ 1245.708123][T22857] tomoyo_path_mknod+0x164/0x190 [ 1245.708354][T22857] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 1245.708382][T22857] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1245.708608][T22857] security_path_mknod+0x161/0x300 [ 1245.708651][T22857] may_o_create+0x30/0x3a0 [ 1245.708675][T22857] lookup_open+0xe35/0x1990 [ 1245.708705][T22857] path_openat+0xa2c/0x2440 [ 1245.708734][T22857] ? __pfx_path_openat+0x10/0x10 [ 1245.708766][T22857] do_file_open+0x20e/0x430 [ 1245.708793][T22857] ? __pfx_do_file_open+0x10/0x10 [ 1245.708837][T22857] ? _raw_spin_unlock+0x28/0x50 [ 1245.708858][T22857] ? alloc_fd+0x471/0x7a0 [ 1245.708889][T22857] do_sys_openat2+0x10f/0x1e0 [ 1245.708908][T22857] ? __pfx_do_sys_openat2+0x10/0x10 [ 1245.708929][T22857] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1245.708959][T22857] __ia32_compat_sys_openat+0x12d/0x210 [ 1245.708981][T22857] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 1245.708999][T22857] ? fput+0x7c/0x100 [ 1245.709024][T22857] ? ksys_write+0x1ac/0x250 [ 1245.709046][T22857] ? __pfx_ksys_write+0x10/0x10 [ 1245.709072][T22857] __do_fast_syscall_32+0x13a/0x8b0 [ 1245.709098][T22857] ? lockdep_hardirqs_on+0x7d/0x110 [ 1245.709123][T22857] do_fast_syscall_32+0x32/0x70 [ 1245.709149][T22857] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1245.709173][T22857] RIP: 0023:0xf73eefec [ 1245.709196][T22857] Code: Unable to access opcode bytes at 0xf73eefc2. [ 1245.709205][T22857] RSP: 002b:00000000f53c450c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 1245.709224][T22857] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800013c0 [ 1245.709237][T22857] RDX: 0000000000040042 RSI: 0000000000000144 RDI: 0000000000000000 [ 1245.709248][T22857] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1245.709260][T22857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1245.709271][T22857] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1245.709298][T22857] [ 1245.709333][T22857] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1246.227613][T22866] syzkaller0: entered promiscuous mode [ 1246.227637][T22866] syzkaller0: entered allmulticast mode [ 1247.468830][T22877] FAULT_INJECTION: forcing a failure. [ 1247.468830][T22877] name failslab, interval 1, probability 0, space 0, times 0 [ 1247.468863][T22877] CPU: 0 UID: 0 PID: 22877 Comm: syz.3.4563 Tainted: G L syzkaller #0 PREEMPT(full) [ 1247.468886][T22877] Tainted: [L]=SOFTLOCKUP [ 1247.468893][T22877] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1247.468903][T22877] Call Trace: [ 1247.468910][T22877] [ 1247.468918][T22877] dump_stack_lvl+0x100/0x190 [ 1247.468946][T22877] should_fail_ex.cold+0x5/0xa [ 1247.468970][T22877] should_failslab+0xc2/0x120 [ 1247.468996][T22877] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 1247.469019][T22877] ? __alloc_skb+0x5b7/0x710 [ 1247.469035][T22877] ? __alloc_skb+0x140/0x710 [ 1247.469055][T22877] __alloc_skb+0x140/0x710 [ 1247.469070][T22877] ? __alloc_skb+0x5b7/0x710 [ 1247.469086][T22877] ? __pfx___alloc_skb+0x10/0x10 [ 1247.469111][T22877] netlink_alloc_large_skb+0x69/0x150 [ 1247.469140][T22877] netlink_sendmsg+0x680/0xda0 [ 1247.469169][T22877] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1247.469197][T22877] ? apparmor_socket_sendmsg+0x165/0x280 [ 1247.469230][T22877] ____sys_sendmsg+0xa4d/0xbe0 [ 1247.469251][T22877] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1247.469279][T22877] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1247.469312][T22877] ___sys_sendmsg+0x190/0x1e0 [ 1247.469337][T22877] ? __pfx____sys_sendmsg+0x10/0x10 [ 1247.469371][T22877] ? find_held_lock+0x2b/0x80 [ 1247.469409][T22877] __sys_sendmsg+0x160/0x210 [ 1247.469429][T22877] ? __pfx___sys_sendmsg+0x10/0x10 [ 1247.469453][T22877] ? __pfx_ksys_write+0x10/0x10 [ 1247.469480][T22877] __do_fast_syscall_32+0x13a/0x8b0 [ 1247.469504][T22877] ? lockdep_hardirqs_on+0x7d/0x110 [ 1247.469528][T22877] do_fast_syscall_32+0x32/0x70 [ 1247.469550][T22877] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1247.469573][T22877] RIP: 0023:0xf7f44fec [ 1247.469593][T22877] Code: Unable to access opcode bytes at 0xf7f44fc2. [ 1247.469601][T22877] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1247.469619][T22877] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000280 [ 1247.469631][T22877] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 1247.469641][T22877] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1247.469652][T22877] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1247.469663][T22877] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1247.469686][T22877] [ 1247.870940][T22881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4564'. [ 1248.047795][T22547] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 1248.248032][T22881] hsr_slave_1 (unregistering): left promiscuous mode [ 1249.627140][T22801] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1249.809810][T22801] usb 10-1: Using ep0 maxpacket: 8 [ 1249.810751][T22801] usb 10-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 1249.813381][T22801] usb 10-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1249.813409][T22801] usb 10-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1249.813427][T22801] usb 10-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1249.813449][T22801] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1249.813484][T22801] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1249.815908][T22801] usb 10-1: config 0 descriptor?? [ 1250.181341][T22905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1250.181745][T22905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1250.185286][T22905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1250.188403][T22905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1250.268683][T22905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1250.269061][T22905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1250.534146][T22801] input: HID 04e7:0030 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/0003:04E7:0030.000A/input/input47 [ 1250.666698][T22801] elo 0003:04E7:0030.000A: input,hiddev0,hidraw0: USB HID v0.01 Device [HID 04e7:0030] on usb-dummy_hcd.5-1/input0 [ 1251.424334][T18222] usb 10-1: USB disconnect, device number 12 [ 1255.337840][T22547] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 1258.092639][T23036] random: crng reseeded on system resumption [ 1263.607322][T23110] pimreg: entered allmulticast mode [ 1263.821548][T22547] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 1268.729558][T23180] bridge2: entered promiscuous mode [ 1268.729610][T23180] bridge2: entered allmulticast mode [ 1269.365958][T23188] FAULT_INJECTION: forcing a failure. [ 1269.365958][T23188] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1269.365990][T23188] CPU: 1 UID: 0 PID: 23188 Comm: syz.2.4640 Tainted: G L syzkaller #0 PREEMPT(full) [ 1269.366013][T23188] Tainted: [L]=SOFTLOCKUP [ 1269.366020][T23188] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1269.366030][T23188] Call Trace: [ 1269.366036][T23188] [ 1269.366043][T23188] dump_stack_lvl+0x100/0x190 [ 1269.366071][T23188] should_fail_ex.cold+0x5/0xa [ 1269.366093][T23188] _copy_to_user+0x32/0xd0 [ 1269.366120][T23188] simple_read_from_buffer+0xcb/0x170 [ 1269.366143][T23188] proc_fail_nth_read+0x1af/0x230 [ 1269.366165][T23188] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1269.366186][T23188] ? rw_verify_area+0xce/0x6d0 [ 1269.366204][T23188] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1269.366224][T23188] vfs_read+0x1e4/0xb40 [ 1269.366244][T23188] ? lock_acquire+0x1d1/0x380 [ 1269.366268][T23188] ? __fget_files+0x34/0x3d0 [ 1269.366288][T23188] ? __pfx_vfs_read+0x10/0x10 [ 1269.366306][T23188] ? find_held_lock+0x2b/0x80 [ 1269.366325][T23188] ? __fget_files+0x215/0x3d0 [ 1269.366350][T23188] ? __fget_files+0x21f/0x3d0 [ 1269.366377][T23188] ksys_read+0x12a/0x250 [ 1269.366396][T23188] ? __pfx_ksys_read+0x10/0x10 [ 1269.366423][T23188] do_int80_emulation+0x166/0x650 [ 1269.366448][T23188] asm_int80_emulation+0x1a/0x20 [ 1269.366465][T23188] RIP: 0023:0xf71d75eb [ 1269.366478][T23188] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1269.366494][T23188] RSP: 002b:00000000f54754bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1269.366511][T23188] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54755d0 [ 1269.366521][T23188] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1269.366531][T23188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1269.366540][T23188] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1269.366550][T23188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1269.366572][T23188] [ 1270.469780][T23206] netlink: 'syz.2.4645': attribute type 2 has an invalid length. [ 1270.653490][T23214] 9p: Bad value for 'rfdno' [ 1272.637217][T23244] can0: slcan on ptm0. [ 1272.822176][T23244] program syz.5.4656 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1272.904926][T23247] FAULT_INJECTION: forcing a failure. [ 1272.904926][T23247] name failslab, interval 1, probability 0, space 0, times 0 [ 1272.904962][T23247] CPU: 3 UID: 60928 PID: 23247 Comm: syz.3.4657 Tainted: G L syzkaller #0 PREEMPT(full) [ 1272.904995][T23247] Tainted: [L]=SOFTLOCKUP [ 1272.905005][T23247] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1272.905019][T23247] Call Trace: [ 1272.905027][T23247] [ 1272.905037][T23247] dump_stack_lvl+0x100/0x190 [ 1272.905072][T23247] should_fail_ex.cold+0x5/0xa [ 1272.905105][T23247] should_failslab+0xc2/0x120 [ 1272.905141][T23247] __kmalloc_cache_noprof+0x91/0x6d0 [ 1272.905166][T23247] ? __kasan_kmalloc+0xaa/0xb0 [ 1272.905196][T23247] ? mqueue_init_fs_context+0x4b/0x690 [ 1272.905249][T23247] mqueue_init_fs_context+0x4b/0x690 [ 1272.905289][T23247] alloc_fs_context+0x60c/0xf40 [ 1272.905331][T23247] mq_init_ns+0x16e/0x820 [ 1272.905355][T23247] copy_ipcs+0x3dd/0x7e0 [ 1272.905379][T23247] create_new_namespaces+0x20a/0xac0 [ 1272.905414][T23247] ? security_capable+0x80/0x260 [ 1272.905448][T23247] unshare_nsproxy_namespaces+0xf2/0x220 [ 1272.905486][T23247] ksys_unshare+0x4a2/0xa70 [ 1272.905511][T23247] ? __pfx_ksys_unshare+0x10/0x10 [ 1272.905544][T23247] __ia32_sys_unshare+0x30/0x40 [ 1272.905570][T23247] __do_fast_syscall_32+0x13a/0x8b0 [ 1272.905606][T23247] do_fast_syscall_32+0x32/0x70 [ 1272.905637][T23247] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1272.905669][T23247] RIP: 0023:0xf7f44fec [ 1272.905694][T23247] Code: Unable to access opcode bytes at 0xf7f44fc2. [ 1272.905705][T23247] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 1272.905726][T23247] RAX: ffffffffffffffda RBX: 000000006a040000 RCX: 0000000000000000 [ 1272.905742][T23247] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1272.905755][T23247] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1272.905769][T23247] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1272.905783][T23247] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1272.905814][T23247] [ 1273.334399][T23259] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4660'. [ 1273.446544][T23265] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4661'. [ 1273.708115][T23272] loop5: detected capacity change from 0 to 7 [ 1273.823599][T23272] Dev loop5: unable to read RDB block 7 [ 1273.823635][T23272] loop5: unable to read partition table [ 1273.823790][T23272] loop5: partition table beyond EOD, truncated [ 1273.823806][T23272] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1274.199827][T23272] C: renamed from lo (while UP) [ 1274.278844][T23242] can0 (unregistered): slcan off ptm0. [ 1274.295349][T23272] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1274.776323][T23292] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4667'. [ 1275.230091][T23308] netlink: 'syz.4.4670': attribute type 1 has an invalid length. [ 1275.313873][T23308] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1275.360638][T23308] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4670'. [ 1275.411634][T23309] netlink: 'syz.4.4670': attribute type 10 has an invalid length. [ 1275.411657][T23309] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4670'. [ 1275.703963][T23322] FAULT_INJECTION: forcing a failure. [ 1275.703963][T23322] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1275.703998][T23322] CPU: 3 UID: 0 PID: 23322 Comm: syz.4.4673 Tainted: G L syzkaller #0 PREEMPT(full) [ 1275.704026][T23322] Tainted: [L]=SOFTLOCKUP [ 1275.704033][T23322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1275.704044][T23322] Call Trace: [ 1275.704053][T23322] [ 1275.704061][T23322] dump_stack_lvl+0x100/0x190 [ 1275.704091][T23322] should_fail_ex.cold+0x5/0xa [ 1275.704115][T23322] _copy_from_user+0x2e/0xd0 [ 1275.704142][T23322] __ia32_compat_sys_socketcall+0x187/0x770 [ 1275.704168][T23322] ? __fget_files+0x21f/0x3d0 [ 1275.704190][T23322] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 1275.704218][T23322] ? xfd_validate_state+0x129/0x190 [ 1275.704255][T23322] do_int80_emulation+0x166/0x650 [ 1275.704283][T23322] asm_int80_emulation+0x1a/0x20 [ 1275.704302][T23322] RIP: 0023:0xf71075eb [ 1275.704316][T23322] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1275.704333][T23322] RSP: 002b:00000000f53a435c EFLAGS: 00000246 ORIG_RAX: 0000000000000066 [ 1275.704351][T23322] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000f53a440c [ 1275.704363][T23322] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1275.704374][T23322] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1275.704384][T23322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1275.704401][T23322] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1275.704424][T23322] [ 1275.760402][T23325] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1275.771644][T23325] vivid-000: disconnect [ 1276.005445][T11815] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 1276.396141][T11815] Bluetooth: hci0: command 0x0c1a tx timeout [ 1276.396218][T22547] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1276.457877][T23323] vivid-000: reconnect [ 1276.906134][T22547] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 1277.363775][T23362] /dev/sg0: Can't lookup blockdev [ 1277.407469][T23362] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4685'. [ 1280.437621][T23404] FAULT_INJECTION: forcing a failure. [ 1280.437621][T23404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1280.437657][T23404] CPU: 2 UID: 0 PID: 23404 Comm: syz.5.4696 Tainted: G L syzkaller #0 PREEMPT(full) [ 1280.437686][T23404] Tainted: [L]=SOFTLOCKUP [ 1280.437694][T23404] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1280.437706][T23404] Call Trace: [ 1280.437713][T23404] [ 1280.437722][T23404] dump_stack_lvl+0x100/0x190 [ 1280.437756][T23404] should_fail_ex.cold+0x5/0xa [ 1280.437783][T23404] _copy_from_iter+0x1f4/0x1690 [ 1280.437815][T23404] ? __asan_memset+0x23/0x50 [ 1280.437842][T23404] ? __pfx__copy_from_iter+0x10/0x10 [ 1280.437870][T23404] ? __pfx___alloc_skb+0x10/0x10 [ 1280.437893][T23404] ? aa_sk_perm+0x389/0xab0 [ 1280.437923][T23404] netlink_sendmsg+0x808/0xda0 [ 1280.437972][T23404] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1280.438002][T23404] ? apparmor_socket_sendmsg+0x165/0x280 [ 1280.438034][T23404] ____sys_sendmsg+0xa4d/0xbe0 [ 1280.438056][T23404] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1280.438088][T23404] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1280.438121][T23404] ___sys_sendmsg+0x190/0x1e0 [ 1280.438148][T23404] ? __pfx____sys_sendmsg+0x10/0x10 [ 1280.438186][T23404] ? find_held_lock+0x2b/0x80 [ 1280.438223][T23404] __sys_sendmsg+0x160/0x210 [ 1280.438245][T23404] ? __pfx___sys_sendmsg+0x10/0x10 [ 1280.438274][T23404] ? __pfx_ksys_write+0x10/0x10 [ 1280.438311][T23404] __do_fast_syscall_32+0x13a/0x8b0 [ 1280.438338][T23404] ? lockdep_hardirqs_on+0x7d/0x110 [ 1280.438365][T23404] do_fast_syscall_32+0x32/0x70 [ 1280.438392][T23404] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1280.438418][T23404] RIP: 0023:0xf73eefec [ 1280.438442][T23404] Code: Unable to access opcode bytes at 0xf73eefc2. [ 1280.438451][T23404] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1280.438472][T23404] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300 [ 1280.438486][T23404] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1280.438498][T23404] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1280.438510][T23404] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1280.438522][T23404] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1280.447075][T23404] [ 1280.692184][T22547] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 1281.472115][T23416] FAULT_INJECTION: forcing a failure. [ 1281.472115][T23416] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1281.472144][T23416] CPU: 3 UID: 0 PID: 23416 Comm: syz.4.4701 Tainted: G L syzkaller #0 PREEMPT(full) [ 1281.472165][T23416] Tainted: [L]=SOFTLOCKUP [ 1281.472171][T23416] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1281.472180][T23416] Call Trace: [ 1281.472185][T23416] [ 1281.472192][T23416] dump_stack_lvl+0x100/0x190 [ 1281.472218][T23416] should_fail_ex.cold+0x5/0xa [ 1281.472238][T23416] _copy_to_user+0x32/0xd0 [ 1281.472263][T23416] simple_read_from_buffer+0xcb/0x170 [ 1281.472284][T23416] proc_fail_nth_read+0x1af/0x230 [ 1281.472304][T23416] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1281.472330][T23416] ? rw_verify_area+0xce/0x6d0 [ 1281.472347][T23416] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1281.472365][T23416] vfs_read+0x1e4/0xb40 [ 1281.472383][T23416] ? lock_acquire+0x1d1/0x380 [ 1281.472404][T23416] ? __fget_files+0x34/0x3d0 [ 1281.472423][T23416] ? __pfx_vfs_read+0x10/0x10 [ 1281.472439][T23416] ? find_held_lock+0x2b/0x80 [ 1281.472457][T23416] ? __fget_files+0x215/0x3d0 [ 1281.472479][T23416] ? __fget_files+0x21f/0x3d0 [ 1281.472503][T23416] ksys_read+0x12a/0x250 [ 1281.472521][T23416] ? __pfx_ksys_read+0x10/0x10 [ 1281.472544][T23416] do_int80_emulation+0x166/0x650 [ 1281.472567][T23416] asm_int80_emulation+0x1a/0x20 [ 1281.472582][T23416] RIP: 0023:0xf71075eb [ 1281.472594][T23416] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1281.472608][T23416] RSP: 002b:00000000f53c64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1281.472623][T23416] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f53c65d0 [ 1281.472633][T23416] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1281.472642][T23416] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1281.472651][T23416] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1281.472659][T23416] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1281.472679][T23416] [ 1281.889371][T23418] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4702'. [ 1281.889396][T23418] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4702'. [ 1281.889408][T23418] netlink: 'syz.5.4702': attribute type 6 has an invalid length. [ 1282.078039][ T62] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1282.289789][ T62] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1282.293436][ T62] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1282.293461][ T62] usb 10-1: Product: syz [ 1282.293475][ T62] usb 10-1: Manufacturer: syz [ 1282.293488][ T62] usb 10-1: SerialNumber: syz [ 1282.408761][T22801] usb 7-1: new full-speed USB device number 36 using dummy_hcd [ 1282.564557][T22801] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1282.567230][T22801] usb 7-1: config index 0 descriptor too short (expected 55058, got 18) [ 1282.567257][T22801] usb 7-1: config 0 has an invalid descriptor of length 46, skipping remainder of the config [ 1282.567273][T22801] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1282.567304][T22801] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1282.610950][T22801] usb 7-1: config 0 descriptor?? [ 1282.662067][T18222] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1282.870938][ T5844] usb 7-1: USB disconnect, device number 36 [ 1283.043357][T23430] FAULT_INJECTION: forcing a failure. [ 1283.043357][T23430] name failslab, interval 1, probability 0, space 0, times 0 [ 1283.043386][T23430] CPU: 0 UID: 0 PID: 23430 Comm: syz.4.4705 Tainted: G L syzkaller #0 PREEMPT(full) [ 1283.043407][T23430] Tainted: [L]=SOFTLOCKUP [ 1283.043413][T23430] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1283.043422][T23430] Call Trace: [ 1283.043428][T23430] [ 1283.043435][T23430] dump_stack_lvl+0x100/0x190 [ 1283.043462][T23430] should_fail_ex.cold+0x5/0xa [ 1283.043483][T23430] should_failslab+0xc2/0x120 [ 1283.043506][T23430] __kmalloc_cache_noprof+0x91/0x6d0 [ 1283.043524][T23430] ? tipc_group_create+0xbc/0x660 [ 1283.043547][T23430] tipc_group_create+0xbc/0x660 [ 1283.043569][T23430] tipc_setsockopt+0x611/0xe30 [ 1283.043594][T23430] ? __pfx_tipc_setsockopt+0x10/0x10 [ 1283.043625][T23430] ? __pfx_tipc_setsockopt+0x10/0x10 [ 1283.043649][T23430] do_sock_setsockopt+0xf3/0x1d0 [ 1283.043670][T23430] __sys_setsockopt+0x119/0x190 [ 1283.043690][T23430] __ia32_sys_setsockopt+0xbc/0x160 [ 1283.043704][T23430] ? __do_fast_syscall_32+0xb3/0x8b0 [ 1283.043725][T23430] ? lockdep_hardirqs_on+0x7d/0x110 [ 1283.043743][T23430] __do_fast_syscall_32+0x13a/0x8b0 [ 1283.043767][T23430] ? lockdep_hardirqs_on+0x7d/0x110 [ 1283.043787][T23430] do_fast_syscall_32+0x32/0x70 [ 1283.043807][T23430] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1283.043826][T23430] RIP: 0023:0xf73aefec [ 1283.043843][T23430] Code: Unable to access opcode bytes at 0xf73aefc2. [ 1283.043850][T23430] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 1283.043867][T23430] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000010f [ 1283.043877][T23430] RDX: 0000000000000087 RSI: 0000000080000180 RDI: 0000000000000127 [ 1283.043886][T23430] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1283.043895][T23430] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1283.043904][T23430] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1283.043924][T23430] [ 1283.107533][T22547] Bluetooth: hci2: unexpected event for opcode 0x0c7b [ 1283.113316][T23418] 9p: Bad value for 'rfdno' [ 1283.437222][ T74] IPVS: starting estimator thread 0... [ 1283.485368][T23434] syzkaller1: entered allmulticast mode [ 1283.559377][T23435] IPVS: using max 25 ests per chain, 60000 per kthread [ 1283.712134][T22803] usb 10-1: USB disconnect, device number 13 [ 1283.991618][T18222] usb 10-1: Service connection timeout for: 256 [ 1283.991645][T18222] ath9k_htc 10-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1284.108403][T18222] ath9k_htc: Failed to initialize the device [ 1284.117877][T22803] usb 10-1: ath9k_htc: USB layer deinitialized [ 1285.210330][T23458] FAULT_INJECTION: forcing a failure. [ 1285.210330][T23458] name failslab, interval 1, probability 0, space 0, times 0 [ 1285.210362][T23458] CPU: 1 UID: 0 PID: 23458 Comm: syz.3.4716 Tainted: G L syzkaller #0 PREEMPT(full) [ 1285.210386][T23458] Tainted: [L]=SOFTLOCKUP [ 1285.210392][T23458] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1285.210403][T23458] Call Trace: [ 1285.210409][T23458] [ 1285.210416][T23458] dump_stack_lvl+0x100/0x190 [ 1285.210444][T23458] should_fail_ex.cold+0x5/0xa [ 1285.210467][T23458] should_failslab+0xc2/0x120 [ 1285.210493][T23458] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1285.210516][T23458] ? alloc_empty_file+0x5b/0x1c0 [ 1285.210548][T23458] alloc_empty_file+0x5b/0x1c0 [ 1285.210575][T23458] path_openat+0xdb/0x2440 [ 1285.210602][T23458] ? __pfx_path_openat+0x10/0x10 [ 1285.210631][T23458] do_file_open+0x20e/0x430 [ 1285.210656][T23458] ? __pfx_do_file_open+0x10/0x10 [ 1285.210694][T23458] ? alloc_fd+0x471/0x7a0 [ 1285.210718][T23458] ? do_getname+0x191/0x390 [ 1285.210736][T23458] do_sys_openat2+0x10f/0x1e0 [ 1285.210752][T23458] ? __pfx_do_sys_openat2+0x10/0x10 [ 1285.210770][T23458] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1285.210794][T23458] ? __fget_files+0x21f/0x3d0 [ 1285.210817][T23458] __ia32_compat_sys_open+0xfe/0x1c0 [ 1285.210834][T23458] ? __pfx___ia32_compat_sys_open+0x10/0x10 [ 1285.210851][T23458] ? fput+0x7c/0x100 [ 1285.210874][T23458] ? ksys_write+0x1ac/0x250 [ 1285.210893][T23458] ? __pfx_ksys_write+0x10/0x10 [ 1285.210917][T23458] __do_fast_syscall_32+0x13a/0x8b0 [ 1285.210940][T23458] ? lockdep_hardirqs_on+0x7d/0x110 [ 1285.210963][T23458] do_fast_syscall_32+0x32/0x70 [ 1285.210988][T23458] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1285.211010][T23458] RIP: 0023:0xf7f44fec [ 1285.211031][T23458] Code: Unable to access opcode bytes at 0xf7f44fc2. [ 1285.211040][T23458] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000005 [ 1285.211058][T23458] RAX: ffffffffffffffda RBX: 0000000080000240 RCX: 0000000000000001 [ 1285.211069][T23458] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1285.211079][T23458] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1285.211089][T23458] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1285.211099][T23458] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1285.211157][T23458] [ 1286.900407][T23485] syzkaller0: entered promiscuous mode [ 1286.900427][T23485] syzkaller0: entered allmulticast mode [ 1286.909237][T23485] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4723'. [ 1287.074519][T23489] FAULT_INJECTION: forcing a failure. [ 1287.074519][T23489] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1287.074551][T23489] CPU: 1 UID: 0 PID: 23489 Comm: syz.2.4725 Tainted: G L syzkaller #0 PREEMPT(full) [ 1287.074573][T23489] Tainted: [L]=SOFTLOCKUP [ 1287.074579][T23489] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1287.074588][T23489] Call Trace: [ 1287.074594][T23489] [ 1287.074600][T23489] dump_stack_lvl+0x100/0x190 [ 1287.074627][T23489] should_fail_ex.cold+0x5/0xa [ 1287.074648][T23489] _copy_from_user+0x2e/0xd0 [ 1287.074671][T23489] copy_from_sockptr_offset.constprop.0+0x12c/0x150 [ 1287.074690][T23489] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 1287.074708][T23489] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1287.074734][T23489] smc_setsockopt+0x299/0xa40 [ 1287.074748][T23489] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1287.074771][T23489] ? __pfx_smc_setsockopt+0x10/0x10 [ 1287.074788][T23489] ? aa_sock_opt_perm+0x114/0x1e0 [ 1287.074817][T23489] ? __pfx_smc_setsockopt+0x10/0x10 [ 1287.074834][T23489] do_sock_setsockopt+0xf3/0x1d0 [ 1287.074855][T23489] __sys_setsockopt+0x119/0x190 [ 1287.074874][T23489] __ia32_sys_setsockopt+0xbc/0x160 [ 1287.074887][T23489] ? __do_fast_syscall_32+0xb3/0x8b0 [ 1287.074908][T23489] ? lockdep_hardirqs_on+0x7d/0x110 [ 1287.074927][T23489] __do_fast_syscall_32+0x13a/0x8b0 [ 1287.074946][T23489] ? lockdep_hardirqs_on+0x7d/0x110 [ 1287.074966][T23489] do_fast_syscall_32+0x32/0x70 [ 1287.074986][T23489] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1287.075005][T23489] RIP: 0023:0xf747efec [ 1287.075022][T23489] Code: Unable to access opcode bytes at 0xf747efc2. [ 1287.075030][T23489] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 1287.075045][T23489] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 1287.075055][T23489] RDX: 0000000000000003 RSI: 0000000080000080 RDI: 0000000000000004 [ 1287.075064][T23489] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1287.075072][T23489] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1287.075081][T23489] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1287.075126][T23489] [ 1287.325771][T23493] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1287.598190][T11815] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1287.610043][T11815] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1287.647844][T11815] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1287.651688][T11815] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1287.652397][T11815] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1287.752148][T23499] overlayfs: workdir and upperdir must reside under the same mount [ 1288.928399][T23529] FAULT_INJECTION: forcing a failure. [ 1288.928399][T23529] name failslab, interval 1, probability 0, space 0, times 0 [ 1288.928432][T23529] CPU: 0 UID: 0 PID: 23529 Comm: syz.5.4733 Tainted: G L syzkaller #0 PREEMPT(full) [ 1288.928456][T23529] Tainted: [L]=SOFTLOCKUP [ 1288.928463][T23529] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1288.928474][T23529] Call Trace: [ 1288.928480][T23529] [ 1288.928487][T23529] dump_stack_lvl+0x100/0x190 [ 1288.928516][T23529] should_fail_ex.cold+0x5/0xa [ 1288.928540][T23529] should_failslab+0xc2/0x120 [ 1288.928566][T23529] __kmalloc_cache_noprof+0x91/0x6d0 [ 1288.928587][T23529] ? copy_mount_options+0x55/0x190 [ 1288.928609][T23529] copy_mount_options+0x55/0x190 [ 1288.928635][T23529] __ia32_sys_mount+0x1ab/0x310 [ 1288.928663][T23529] ? __pfx___ia32_sys_mount+0x10/0x10 [ 1288.928687][T23529] ? ksys_write+0x1ac/0x250 [ 1288.928708][T23529] ? __pfx_ksys_write+0x10/0x10 [ 1288.928734][T23529] __do_fast_syscall_32+0x13a/0x8b0 [ 1288.928757][T23529] ? lockdep_hardirqs_on+0x7d/0x110 [ 1288.928780][T23529] do_fast_syscall_32+0x32/0x70 [ 1288.928802][T23529] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1288.928824][T23529] RIP: 0023:0xf73eefec [ 1288.928844][T23529] Code: Unable to access opcode bytes at 0xf73eefc2. [ 1288.928852][T23529] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 1288.928870][T23529] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000000 [ 1288.928881][T23529] RDX: 0000000080000b80 RSI: 0000000000000000 RDI: 0000000080000a80 [ 1288.928892][T23529] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1288.928903][T23529] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1288.928914][T23529] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1288.928937][T23529] [ 1289.098153][T20737] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.581482][T22547] Bluetooth: hci1: unexpected event for opcode 0x2023 [ 1289.625413][T20737] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.770502][T23550] Cannot find set identified by id 2 to match [ 1289.823506][T23554] input: syz0 as /devices/virtual/input/input48 [ 1289.852989][T22547] Bluetooth: hci4: command tx timeout [ 1289.904435][T23543] overlayfs: workdir and upperdir must reside under the same mount [ 1289.983418][T23552] netlink: 136 bytes leftover after parsing attributes in process `syz.5.4738'. [ 1290.031582][ T5827] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1290.239408][ T5827] usb 10-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1290.240378][ T5827] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1290.240417][ T5827] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 1290.240439][ T5827] usb 10-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1290.240472][ T5827] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.306586][T20737] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1290.493866][T23559] FAULT_INJECTION: forcing a failure. [ 1290.493866][T23559] name failslab, interval 1, probability 0, space 0, times 0 [ 1290.493901][T23559] CPU: 3 UID: 0 PID: 23559 Comm: syz.3.4739 Tainted: G L syzkaller #0 PREEMPT(full) [ 1290.493926][T23559] Tainted: [L]=SOFTLOCKUP [ 1290.493934][T23559] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1290.493945][T23559] Call Trace: [ 1290.493952][T23559] [ 1290.493960][T23559] dump_stack_lvl+0x100/0x190 [ 1290.494010][T23559] should_fail_ex.cold+0x5/0xa [ 1290.494036][T23559] should_failslab+0xc2/0x120 [ 1290.494063][T23559] __kmalloc_noprof+0xfc/0x840 [ 1290.494087][T23559] ? tomoyo_encode2+0xfb/0x3c0 [ 1290.494114][T23559] tomoyo_encode2+0xfb/0x3c0 [ 1290.494140][T23559] tomoyo_encode+0x29/0x50 [ 1290.494160][T23559] tomoyo_realpath_from_path+0x18c/0x690 [ 1290.494187][T23559] tomoyo_path_number_perm+0x23c/0x580 [ 1290.494205][T23559] ? tomoyo_path_number_perm+0x22e/0x580 [ 1290.494225][T23559] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1290.494245][T23559] ? get_pid_task+0x106/0x250 [ 1290.494272][T23559] ? __lock_acquire+0x5c0/0x1f40 [ 1290.494310][T23559] ? __fget_files+0x34/0x3d0 [ 1290.494332][T23559] ? find_held_lock+0x2b/0x80 [ 1290.494352][T23559] ? __fget_files+0x215/0x3d0 [ 1290.494373][T23559] ? hook_file_ioctl_common+0x140/0x440 [ 1290.494393][T23559] ? __fget_files+0x215/0x3d0 [ 1290.494420][T23559] ? __fget_files+0x21f/0x3d0 [ 1290.494446][T23559] security_file_ioctl_compat+0xd3/0x230 [ 1290.494468][T23559] __ia32_compat_sys_ioctl+0xc2/0x360 [ 1290.494492][T23559] __do_fast_syscall_32+0x13a/0x8b0 [ 1290.494517][T23559] ? lockdep_hardirqs_on+0x7d/0x110 [ 1290.494542][T23559] do_fast_syscall_32+0x32/0x70 [ 1290.494566][T23559] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1290.494589][T23559] RIP: 0023:0xf7f44fec [ 1290.494612][T23559] Code: Unable to access opcode bytes at 0xf7f44fc2. [ 1290.494620][T23559] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1290.494639][T23559] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000324 [ 1290.494651][T23559] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1290.494661][T23559] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1290.494672][T23559] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1290.494682][T23559] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1290.494706][T23559] [ 1290.494767][T23559] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1290.669521][ T5827] cxacru 10-1:1.0: send of cm 0x90 failed (-71) [ 1290.718742][T23561] cxacru 10-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 1290.718769][T23561] cxacru 10-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 1290.820754][ T5827] usb 10-1: USB disconnect, device number 14 [ 1291.159461][T20737] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1291.474903][T23572] FAULT_INJECTION: forcing a failure. [ 1291.474903][T23572] name failslab, interval 1, probability 0, space 0, times 0 [ 1291.474938][T23572] CPU: 0 UID: 0 PID: 23572 Comm: syz.3.4743 Tainted: G L syzkaller #0 PREEMPT(full) [ 1291.474965][T23572] Tainted: [L]=SOFTLOCKUP [ 1291.474973][T23572] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1291.474985][T23572] Call Trace: [ 1291.474992][T23572] [ 1291.475001][T23572] dump_stack_lvl+0x100/0x190 [ 1291.475032][T23572] should_fail_ex.cold+0x5/0xa [ 1291.475057][T23572] should_failslab+0xc2/0x120 [ 1291.480719][T23572] __kmalloc_cache_noprof+0x91/0x6d0 [ 1291.480745][T23572] ? cma_alloc_port+0x9b/0x5f0 [ 1291.480770][T23572] cma_alloc_port+0x9b/0x5f0 [ 1291.480793][T23572] rdma_bind_addr_dst+0x1b44/0x2c70 [ 1291.480822][T23572] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1291.480847][T23572] rdma_listen+0x10c/0xd90 [ 1291.480871][T23572] ? __pfx_rdma_listen+0x10/0x10 [ 1291.480892][T23572] ? __pfx_ucma_get_ctx+0x10/0x10 [ 1291.480916][T23572] ucma_listen+0x173/0x220 [ 1291.480933][T23572] ? __pfx_ucma_listen+0x10/0x10 [ 1291.480954][T23572] ? __pfx_ucma_listen+0x10/0x10 [ 1291.480970][T23572] ucma_write+0x1fb/0x330 [ 1291.480997][T23572] ? __pfx_ucma_write+0x10/0x10 [ 1291.481024][T23572] ? bpf_lsm_file_permission+0x9/0x10 [ 1291.481049][T23572] ? security_file_permission+0x76/0x210 [ 1291.481071][T23572] ? rw_verify_area+0xce/0x6d0 [ 1291.481092][T23572] vfs_write+0x2aa/0x1050 [ 1291.481114][T23572] ? __pfx_ucma_write+0x10/0x10 [ 1291.481145][T23572] ? lock_acquire+0x1d1/0x380 [ 1291.481171][T23572] ? __fget_files+0x34/0x3d0 [ 1291.481193][T23572] ? __pfx_vfs_write+0x10/0x10 [ 1291.481212][T23572] ? find_held_lock+0x2b/0x80 [ 1291.481231][T23572] ? __fget_files+0x215/0x3d0 [ 1291.481252][T23572] ? __fget_files+0x215/0x3d0 [ 1291.481294][T23572] ? __fget_files+0x21f/0x3d0 [ 1291.481325][T23572] ksys_write+0x1f8/0x250 [ 1291.481347][T23572] ? __pfx_ksys_write+0x10/0x10 [ 1291.481367][T23572] ? ksys_write+0x1ac/0x250 [ 1291.481387][T23572] ? __pfx_ksys_write+0x10/0x10 [ 1291.481413][T23572] __do_fast_syscall_32+0x13a/0x8b0 [ 1291.481436][T23572] ? lockdep_hardirqs_on+0x7d/0x110 [ 1291.481463][T23572] do_fast_syscall_32+0x32/0x70 [ 1291.481486][T23572] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1291.481508][T23572] RIP: 0023:0xf7f44fec [ 1291.481529][T23572] Code: Unable to access opcode bytes at 0xf7f44fc2. [ 1291.481536][T23572] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 1291.481554][T23572] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000240 [ 1291.481565][T23572] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 1291.481575][T23572] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1291.481585][T23572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1291.481596][T23572] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1291.481619][T23572] [ 1291.493679][T23494] bridge0: port 1(bridge_slave_0) entered blocking state [ 1291.493813][T23494] bridge0: port 1(bridge_slave_0) entered disabled state [ 1291.493952][T23494] bridge_slave_0: entered allmulticast mode [ 1291.551735][T23494] bridge_slave_0: entered promiscuous mode [ 1291.556152][T23494] bridge0: port 2(bridge_slave_1) entered blocking state [ 1291.556246][T23494] bridge0: port 2(bridge_slave_1) entered disabled state [ 1291.556374][T23494] bridge_slave_1: entered allmulticast mode [ 1291.558004][T23494] bridge_slave_1: entered promiscuous mode [ 1291.657062][T23494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1291.660121][T23494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1291.733457][T23494] team0: Port device team_slave_0 added [ 1291.736221][T23494] team0: Port device team_slave_1 added [ 1291.801931][T23494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1291.801946][T23494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1291.801966][T23494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1291.803533][T23494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1291.803548][T23494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1291.803567][T23494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1291.880109][T23494] hsr_slave_0: entered promiscuous mode [ 1291.880953][T23494] hsr_slave_1: entered promiscuous mode [ 1291.881478][T23494] debugfs: 'hsr0' already exists in 'hsr' [ 1291.881498][T23494] Cannot create hsr debugfs directory [ 1291.911112][T22547] Bluetooth: hci4: command tx timeout [ 1293.585318][T22547] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1293.585387][T22547] Bluetooth: hci1: Injecting HCI hardware error event [ 1293.611612][T22547] Bluetooth: hci1: hardware error 0x00 [ 1293.970090][T11815] Bluetooth: hci4: command tx timeout [ 1295.113579][ T5449] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1295.271769][T20737] bridge_slave_1: left allmulticast mode [ 1295.271798][T20737] bridge_slave_1: left promiscuous mode [ 1295.272021][T20737] bridge0: port 2(bridge_slave_1) entered disabled state [ 1295.275134][T20737] bridge_slave_0: left allmulticast mode [ 1295.275155][T20737] bridge_slave_0: left promiscuous mode [ 1295.275307][T20737] bridge0: port 1(bridge_slave_0) entered disabled state [ 1295.294407][T20737] pimreg: left allmulticast mode [ 1296.015677][T20737] bond2 (unregistering): (slave gretap1): Releasing active interface [ 1296.070710][T11815] Bluetooth: hci4: command tx timeout [ 1296.248616][T20737] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1296.299919][ T1158] smbdirect: ib_dev[syz1] removed [ 1296.316652][T20737] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1296.403883][T20737] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1296.452599][T20737] bond0 (unregistering): Released all slaves [ 1296.467679][T20737] bond1 (unregistering): Released all slaves [ 1296.491606][T20737] bond2 (unregistering): Released all slaves [ 1296.753173][T20737] tipc: Left network mode [ 1297.284334][T22547] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1297.414943][ T5449] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1297.838346][T22547] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 1299.650280][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.862862][T20737] hsr_slave_0: left promiscuous mode [ 1299.863784][T20737] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1299.863806][T20737] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1299.913039][T20737] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1299.913061][T20737] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1300.057157][T20737] veth1_macvtap: left promiscuous mode [ 1300.057196][T20737] veth0_macvtap: left promiscuous mode [ 1300.057282][T20737] veth1_vlan: left promiscuous mode [ 1300.057332][T20737] veth0_vlan: left promiscuous mode [ 1301.472190][T20737] team0 (unregistering): Port device team_slave_1 removed [ 1301.524386][T20737] team0 (unregistering): Port device team_slave_0 removed [ 1304.066218][T23494] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1304.074014][T23494] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1304.074779][T23494] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1304.098154][T23494] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1304.099085][T23494] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1304.132936][T23494] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1304.145068][T20737] IPVS: stop unused estimator thread 0... [ 1304.155519][T23494] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1304.347519][T23494] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1305.039555][T23494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1305.064967][T23494] 8021q: adding VLAN 0 to HW filter on device team0 [ 1305.070701][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 1305.070834][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1305.083679][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 1305.083788][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1305.940607][T23494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1306.040241][T23494] veth0_vlan: entered promiscuous mode [ 1306.068006][T23494] veth1_vlan: entered promiscuous mode [ 1306.107318][T23494] veth0_macvtap: entered promiscuous mode [ 1306.111764][T23494] veth1_macvtap: entered promiscuous mode [ 1306.144189][T23494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1306.163322][T23494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1306.196967][T23604] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.197364][T23604] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.197400][T23604] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.197431][T23604] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.308055][T19382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1306.308075][T19382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1306.519459][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1306.519485][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1306.744582][T23755] tps6598x 1-0003: failed to read vendor ID: -5, vid: 0x0 [ 1306.768406][T23755] i2c i2c-1: new_device: Instantiated device tps6598x at 0x03 [ 1307.666079][T11815] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1307.696815][T11815] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1307.698556][T11815] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1307.699656][T11815] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1307.700307][T11815] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1308.243033][T23802] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1308.314016][T23811] fuse: Bad value for 'fd' [ 1308.433281][T23786] bridge0: port 1(bridge_slave_0) entered blocking state [ 1308.433421][T23786] bridge0: port 1(bridge_slave_0) entered disabled state [ 1308.433529][T23786] bridge_slave_0: entered allmulticast mode [ 1308.434909][T23786] bridge_slave_0: entered promiscuous mode [ 1308.437500][T23786] bridge0: port 2(bridge_slave_1) entered blocking state [ 1308.437624][T23786] bridge0: port 2(bridge_slave_1) entered disabled state [ 1308.437728][T23786] bridge_slave_1: entered allmulticast mode [ 1308.439054][T23786] bridge_slave_1: entered promiscuous mode [ 1308.462494][T23786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1308.465222][T23786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1308.489253][T23786] team0: Port device team_slave_0 added [ 1308.491169][T23786] team0: Port device team_slave_1 added [ 1308.508097][T23786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1308.508110][T23786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1308.508126][T23786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1308.509766][T23786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1308.509778][T23786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1308.509793][T23786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1308.548192][T23786] hsr_slave_0: entered promiscuous mode [ 1308.548824][T23786] hsr_slave_1: entered promiscuous mode [ 1308.631638][T23822] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1308.754170][T23786] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1308.873109][T23786] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1308.975232][T23786] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1309.095244][T23786] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1309.172305][T23836] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4794'. [ 1309.172327][T23836] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4794'. [ 1309.249101][T23786] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1309.252568][T23786] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1309.253275][T23786] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1309.256262][T23786] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1309.257178][T23786] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1309.261574][T23786] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1309.262426][T23786] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1309.267675][T23786] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1309.284852][T23786] bridge0: port 2(bridge_slave_1) entered blocking state [ 1309.284925][T23786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1309.285082][T23786] bridge0: port 1(bridge_slave_0) entered blocking state [ 1309.285150][T23786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1309.317995][T23786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1309.323451][ T1158] bridge0: port 1(bridge_slave_0) entered disabled state [ 1309.323987][ T1158] bridge0: port 2(bridge_slave_1) entered disabled state [ 1309.331667][T23786] 8021q: adding VLAN 0 to HW filter on device team0 [ 1309.338341][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 1309.338421][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1309.379170][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 1309.379221][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1309.399728][T23846] fuse: Bad value for 'fd' [ 1309.624098][T23786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1309.644943][T23786] veth0_vlan: entered promiscuous mode [ 1309.648427][T23786] veth1_vlan: entered promiscuous mode [ 1309.663222][T23786] veth0_macvtap: entered promiscuous mode [ 1309.665330][T23786] veth1_macvtap: entered promiscuous mode [ 1309.672028][T23786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1309.675554][T23786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1309.747180][ T5787] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.747249][ T5787] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.747282][ T5787] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.747313][ T5787] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.765651][T19382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1309.765664][T19382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1309.810637][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1309.810666][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1309.816451][T22547] Bluetooth: hci0: command tx timeout [ 1309.956746][T23877] tap0: tun_chr_ioctl cmd 1074025675 [ 1309.956761][T23877] tap0: persist enabled [ 1309.959228][T23877] tap0: tun_chr_ioctl cmd 1074025675 [ 1309.959241][T23877] tap0: persist disabled [ 1310.067697][T23883] fuse: Bad value for 'fd' [ 1310.097906][T23885] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4806'. [ 1310.122746][T23885] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4806'. [ 1310.262706][T23890] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1310.660077][T23901] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1311.676523][T23940] syzkaller0: entered promiscuous mode [ 1311.676545][T23940] syzkaller0: entered allmulticast mode [ 1311.685137][T23940] FAULT_INJECTION: forcing a failure. [ 1311.685137][T23940] name failslab, interval 1, probability 0, space 0, times 0 [ 1311.685175][T23940] CPU: 3 UID: 0 PID: 23940 Comm: syz.5.4823 Tainted: G L syzkaller #0 PREEMPT(full) [ 1311.685201][T23940] Tainted: [L]=SOFTLOCKUP [ 1311.685209][T23940] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1311.685221][T23940] Call Trace: [ 1311.685228][T23940] [ 1311.685235][T23940] dump_stack_lvl+0x100/0x190 [ 1311.685265][T23940] should_fail_ex.cold+0x5/0xa [ 1311.685289][T23940] should_failslab+0xc2/0x120 [ 1311.685317][T23940] __kmalloc_noprof+0xfc/0x840 [ 1311.685341][T23940] ? rcu_is_watching+0x13/0xc0 [ 1311.685363][T23940] ? tomoyo_encode2+0xfb/0x3c0 [ 1311.685391][T23940] tomoyo_encode2+0xfb/0x3c0 [ 1311.685417][T23940] tomoyo_encode+0x29/0x50 [ 1311.685439][T23940] tomoyo_realpath_from_path+0x18c/0x690 [ 1311.685468][T23940] tomoyo_path_number_perm+0x23c/0x580 [ 1311.685488][T23940] ? tomoyo_path_number_perm+0x22e/0x580 [ 1311.685506][T23940] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1311.685521][T23940] ? futex_wait+0x11e/0x370 [ 1311.685547][T23940] ? __lock_acquire+0x5c0/0x1f40 [ 1311.685579][T23940] ? __fget_files+0x34/0x3d0 [ 1311.685598][T23940] ? find_held_lock+0x2b/0x80 [ 1311.685616][T23940] ? __fget_files+0x215/0x3d0 [ 1311.685634][T23940] ? hook_file_ioctl_common+0x140/0x440 [ 1311.685652][T23940] ? __fget_files+0x215/0x3d0 [ 1311.685675][T23940] ? __fget_files+0x21f/0x3d0 [ 1311.685700][T23940] security_file_ioctl_compat+0xd3/0x230 [ 1311.685720][T23940] __ia32_compat_sys_ioctl+0xc2/0x360 [ 1311.685744][T23940] __do_fast_syscall_32+0x13a/0x8b0 [ 1311.685773][T23940] do_fast_syscall_32+0x32/0x70 [ 1311.685798][T23940] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1311.685847][T23940] RIP: 0023:0xf73eefec [ 1311.685867][T23940] Code: Unable to access opcode bytes at 0xf73eefc2. [ 1311.685875][T23940] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1311.685894][T23940] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000c0845657 [ 1311.685907][T23940] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 1311.685917][T23940] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1311.685926][T23940] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1311.685935][T23940] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1311.685955][T23940] [ 1311.686000][T23940] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1311.886366][T22547] Bluetooth: hci0: command tx timeout [ 1313.822763][T23990] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1313.976232][T22547] Bluetooth: hci0: command tx timeout [ 1314.106267][T22803] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1314.315370][T22803] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 1314.323096][T22803] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1314.323123][T22803] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1314.338968][T22803] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1314.339005][T22803] usb 7-1: Product: syz [ 1314.339013][T22803] usb 7-1: Manufacturer: syz [ 1314.339020][T22803] usb 7-1: SerialNumber: syz [ 1314.341233][T24001] 9p: Bad value for 'rfdno' [ 1315.038105][T22803] usb 7-1: USB disconnect, device number 37 [ 1315.186757][T24015] FAULT_INJECTION: forcing a failure. [ 1315.186757][T24015] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1315.186779][T24015] CPU: 2 UID: 0 PID: 24015 Comm: syz.4.4849 Tainted: G L syzkaller #0 PREEMPT(full) [ 1315.186795][T24015] Tainted: [L]=SOFTLOCKUP [ 1315.186799][T24015] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1315.186806][T24015] Call Trace: [ 1315.186810][T24015] [ 1315.186815][T24015] dump_stack_lvl+0x100/0x190 [ 1315.186834][T24015] should_fail_ex.cold+0x5/0xa [ 1315.186850][T24015] _copy_to_user+0x32/0xd0 [ 1315.186868][T24015] simple_read_from_buffer+0xcb/0x170 [ 1315.186885][T24015] proc_fail_nth_read+0x1af/0x230 [ 1315.186900][T24015] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1315.186915][T24015] ? rw_verify_area+0xce/0x6d0 [ 1315.186927][T24015] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1315.186941][T24015] vfs_read+0x1e4/0xb40 [ 1315.186955][T24015] ? lock_acquire+0x1d1/0x380 [ 1315.186991][T24015] ? __fget_files+0x34/0x3d0 [ 1315.187006][T24015] ? __pfx_vfs_read+0x10/0x10 [ 1315.187019][T24015] ? find_held_lock+0x2b/0x80 [ 1315.187033][T24015] ? __fget_files+0x215/0x3d0 [ 1315.187050][T24015] ? __fget_files+0x21f/0x3d0 [ 1315.187068][T24015] ksys_read+0x12a/0x250 [ 1315.187081][T24015] ? __pfx_ksys_read+0x10/0x10 [ 1315.187099][T24015] do_int80_emulation+0x166/0x650 [ 1315.187117][T24015] asm_int80_emulation+0x1a/0x20 [ 1315.187128][T24015] RIP: 0023:0xf71075eb [ 1315.187137][T24015] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1315.187148][T24015] RSP: 002b:00000000f53c64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1315.187160][T24015] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53c65d0 [ 1315.187167][T24015] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1315.187174][T24015] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1315.187180][T24015] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1315.187187][T24015] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1315.187201][T24015] [ 1315.283500][T24019] FAULT_INJECTION: forcing a failure. [ 1315.283500][T24019] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1315.283521][T24019] CPU: 2 UID: 0 PID: 24019 Comm: syz.2.4851 Tainted: G L syzkaller #0 PREEMPT(full) [ 1315.283537][T24019] Tainted: [L]=SOFTLOCKUP [ 1315.283541][T24019] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1315.283548][T24019] Call Trace: [ 1315.283552][T24019] [ 1315.283557][T24019] dump_stack_lvl+0x100/0x190 [ 1315.283576][T24019] should_fail_ex.cold+0x5/0xa [ 1315.283597][T24019] _copy_from_user+0x2e/0xd0 [ 1315.283614][T24019] get_compat_msghdr+0xb3/0x480 [ 1315.283630][T24019] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1315.283645][T24019] ? rcu_is_watching+0x13/0xc0 [ 1315.283658][T24019] ? ___sys_recvmsg+0x177/0x1a0 [ 1315.283672][T24019] ? kfree+0x1e5/0x6d0 [ 1315.283686][T24019] ___sys_recvmsg+0x193/0x1a0 [ 1315.283701][T24019] ? __pfx____sys_recvmsg+0x10/0x10 [ 1315.283717][T24019] ? lock_acquire+0x1d1/0x380 [ 1315.283740][T24019] ? __pfx___might_resched+0x10/0x10 [ 1315.283758][T24019] do_recvmmsg+0x54d/0x740 [ 1315.283775][T24019] ? __pfx_do_recvmmsg+0x10/0x10 [ 1315.283792][T24019] ? find_held_lock+0x2b/0x80 [ 1315.283804][T24019] ? ksys_write+0x190/0x250 [ 1315.283817][T24019] ? ksys_write+0x190/0x250 [ 1315.283836][T24019] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1315.283853][T24019] __sys_recvmmsg+0x21f/0x270 [ 1315.283866][T24019] ? __pfx___sys_recvmmsg+0x10/0x10 [ 1315.283879][T24019] ? ksys_write+0x1ac/0x250 [ 1315.283894][T24019] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 1315.283910][T24019] ? __do_fast_syscall_32+0xb3/0x8b0 [ 1315.283925][T24019] ? lockdep_hardirqs_on+0x7d/0x110 [ 1315.283939][T24019] __do_fast_syscall_32+0x13a/0x8b0 [ 1315.283954][T24019] ? lockdep_hardirqs_on+0x7d/0x110 [ 1315.283969][T24019] do_fast_syscall_32+0x32/0x70 [ 1315.283984][T24019] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1315.283998][T24019] RIP: 0023:0xf741efec [ 1315.284011][T24019] Code: Unable to access opcode bytes at 0xf741efc2. [ 1315.284017][T24019] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000151 [ 1315.284029][T24019] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080003700 [ 1315.284036][T24019] RDX: 000000000000031b RSI: 0000000040000043 RDI: 0000000000000000 [ 1315.284043][T24019] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1315.284050][T24019] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1315.284056][T24019] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1315.284071][T24019] [ 1315.618323][T24034] Bluetooth: MGMT ver 1.23 [ 1316.056846][T11815] Bluetooth: hci0: command tx timeout [ 1317.365036][T24076] fuse: Bad value for 'fd' [ 1317.420968][T24061] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1317.424623][T24061] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1317.454143][T24061] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1317.454249][T24061] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1317.531456][T24061] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1317.568336][T24081] vivid-004: disconnect [ 1317.575244][T22547] Bluetooth: hci0: Opcode 0x0c13 failed: -112 [ 1317.584980][T24061] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1317.590415][T24061] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1317.640164][T24081] vivid-004: reconnect [ 1317.652433][T24061] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1317.679219][T24061] hwrng_fill thread creation failed [ 1317.956539][T24096] fuse: Bad value for 'fd' [ 1318.686021][T22547] Bluetooth: hci2: command 0x0406 tx timeout [ 1318.766764][T24115] CacheFiles: No cache directory specified [ 1319.373730][T24123] jffs2: notice: (24123) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1319.468708][T24131] fuse: Bad value for 'fd' [ 1319.486661][T22547] Bluetooth: hci4: command 0x0c1a tx timeout [ 1319.564426][T22547] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 1319.621428][T24139] bond1: option arp_interval: invalid value (18446744073709551615) [ 1319.621453][T24139] bond1: option arp_interval: allowed values 0 - 2147483647 [ 1319.645993][T22547] Bluetooth: hci0: command 0x0c13 tx timeout [ 1319.647004][T24139] bond1 (unregistering): Released all slaves [ 1319.715888][T22801] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1319.854896][T22547] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 1319.886260][T22801] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1319.887098][T22801] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1319.887118][T22801] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1319.887130][T22801] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1319.887151][T22801] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1319.888332][T22801] usb 7-1: config 0 descriptor?? [ 1320.766031][T22547] Bluetooth: hci2: command 0x0406 tx timeout [ 1321.019520][T22801] usbhid 7-1:0.0: can't add hid device: -71 [ 1321.019573][T22801] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1321.022815][T22801] usb 7-1: USB disconnect, device number 38 [ 1321.565787][T22547] Bluetooth: hci4: command 0x0c1a tx timeout [ 1321.664204][T24177] FAULT_INJECTION: forcing a failure. [ 1321.664204][T24177] name failslab, interval 1, probability 0, space 0, times 0 [ 1321.664227][T24177] CPU: 0 UID: 0 PID: 24177 Comm: syz.5.4901 Tainted: G L syzkaller #0 PREEMPT(full) [ 1321.664243][T24177] Tainted: [L]=SOFTLOCKUP [ 1321.664248][T24177] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1321.664254][T24177] Call Trace: [ 1321.664258][T24177] [ 1321.664263][T24177] dump_stack_lvl+0x100/0x190 [ 1321.664282][T24177] should_fail_ex.cold+0x5/0xa [ 1321.664298][T24177] should_failslab+0xc2/0x120 [ 1321.664315][T24177] __kmalloc_cache_noprof+0x91/0x6d0 [ 1321.664328][T24177] ? _raw_spin_lock_irqsave+0x52/0x60 [ 1321.664356][T24177] ? __vb2_init_fileio+0x18f/0x1000 [ 1321.664377][T24177] __vb2_init_fileio+0x18f/0x1000 [ 1321.664394][T24177] ? lockdep_hardirqs_on+0x7d/0x110 [ 1321.664409][T24177] ? __pollwait+0x276/0x490 [ 1321.664425][T24177] vb2_core_poll+0x611/0x740 [ 1321.664444][T24177] vb2_poll+0x4b/0xe0 [ 1321.664459][T24177] vb2_fop_poll+0x10e/0x350 [ 1321.664475][T24177] ? __pfx_vb2_fop_poll+0x10/0x10 [ 1321.664491][T24177] v4l2_poll+0x15f/0x220 [ 1321.664505][T24177] ? __pfx_v4l2_poll+0x10/0x10 [ 1321.664519][T24177] do_sys_poll+0x6e5/0xe90 [ 1321.664532][T24177] ? find_held_lock+0x2b/0x80 [ 1321.664551][T24177] ? __pfx_do_sys_poll+0x10/0x10 [ 1321.664565][T24177] ? __kernel_text_address+0xd/0x30 [ 1321.664593][T24177] ? lock_acquire+0x1d1/0x380 [ 1321.664609][T24177] ? __pfx___pollwait+0x10/0x10 [ 1321.664625][T24177] ? __pfx_pollwake+0x10/0x10 [ 1321.664640][T24177] ? __pfx_pollwake+0x10/0x10 [ 1321.664655][T24177] ? __pfx_pollwake+0x10/0x10 [ 1321.664669][T24177] ? __pfx_pollwake+0x10/0x10 [ 1321.664684][T24177] ? __pfx_pollwake+0x10/0x10 [ 1321.664698][T24177] ? __pfx_pollwake+0x10/0x10 [ 1321.664719][T24177] ? __pfx_pollwake+0x10/0x10 [ 1321.664733][T24177] ? __pfx_pollwake+0x10/0x10 [ 1321.664748][T24177] ? __pfx_pollwake+0x10/0x10 [ 1321.664761][T24177] ? ksys_write+0x190/0x250 [ 1321.664775][T24177] ? lock_acquire+0x1d1/0x380 [ 1321.664792][T24177] ? set_compat_user_sigmask+0x1d9/0x260 [ 1321.664809][T24177] ? __pfx_set_compat_user_sigmask+0x10/0x10 [ 1321.664827][T24177] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1321.664844][T24177] __ia32_compat_sys_ppoll_time32+0x2b6/0x350 [ 1321.664862][T24177] ? __pfx___ia32_compat_sys_ppoll_time32+0x10/0x10 [ 1321.664878][T24177] ? fput+0x7c/0x100 [ 1321.664894][T24177] ? ksys_write+0x1ac/0x250 [ 1321.664907][T24177] ? __pfx_ksys_write+0x10/0x10 [ 1321.664923][T24177] __do_fast_syscall_32+0x13a/0x8b0 [ 1321.664938][T24177] ? lockdep_hardirqs_on+0x7d/0x110 [ 1321.664953][T24177] do_fast_syscall_32+0x32/0x70 [ 1321.664969][T24177] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1321.664983][T24177] RIP: 0023:0xf73eefec [ 1321.664997][T24177] Code: Unable to access opcode bytes at 0xf73eefc2. [ 1321.665002][T24177] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000135 [ 1321.665014][T24177] RAX: ffffffffffffffda RBX: 00000000800000c0 RCX: 00000000000000dc [ 1321.665021][T24177] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1321.665028][T24177] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1321.665035][T24177] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1321.665042][T24177] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1321.665057][T24177] [ 1321.735856][T22547] Bluetooth: hci0: command 0x0c13 tx timeout [ 1322.202276][T24199] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4908'. [ 1322.633651][T24208] veth0: entered promiscuous mode [ 1322.634521][T24208] veth0: left promiscuous mode [ 1322.660088][T24208] capability: warning: `syz.5.4910' uses 32-bit capabilities (legacy support in use) [ 1322.905024][T24212] kvm: user requested TSC rate below hardware speed [ 1322.910097][T24212] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 1322.910309][T24212] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 1323.052559][T24217] FAULT_INJECTION: forcing a failure. [ 1323.052559][T24217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1323.052589][T24217] CPU: 0 UID: 0 PID: 24217 Comm: syz.4.4912 Tainted: G L syzkaller #0 PREEMPT(full) [ 1323.052611][T24217] Tainted: [L]=SOFTLOCKUP [ 1323.052617][T24217] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1323.052633][T24217] Call Trace: [ 1323.052639][T24217] [ 1323.052646][T24217] dump_stack_lvl+0x100/0x190 [ 1323.052673][T24217] should_fail_ex.cold+0x5/0xa [ 1323.052695][T24217] strncpy_from_user+0x3b/0x2d0 [ 1323.052743][T24217] do_getname+0x78/0x390 [ 1323.052763][T24217] user_path_at+0x26/0x60 [ 1323.052785][T24217] __ia32_sys_mount+0x1fb/0x310 [ 1323.052814][T24217] ? __pfx___ia32_sys_mount+0x10/0x10 [ 1323.052849][T24217] __do_fast_syscall_32+0x13a/0x8b0 [ 1323.052875][T24217] do_fast_syscall_32+0x32/0x70 [ 1323.052895][T24217] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1323.052915][T24217] RIP: 0023:0xf73aefec [ 1323.052932][T24217] Code: Unable to access opcode bytes at 0xf73aefc2. [ 1323.052939][T24217] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 1323.052955][T24217] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000000 [ 1323.052966][T24217] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1323.052975][T24217] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1323.052984][T24217] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1323.052994][T24217] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1323.053016][T24217] [ 1323.645741][T22547] Bluetooth: hci4: command 0x0c1a tx timeout [ 1323.815627][T22547] Bluetooth: hci0: command 0x0c13 tx timeout [ 1325.082189][T24249] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1325.427408][T24260] 9p: Bad value for 'rfdno' [ 1325.865591][ T57] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1326.036353][ T57] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1326.037572][ T57] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1326.037612][ T57] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.051214][ T57] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 1326.051379][ T57] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 81 [ 1326.051429][ T57] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 1 [ 1326.053006][ T57] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 1326.053067][ T57] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 1326.054284][ T57] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1326.059101][ T57] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 1326.059163][ T57] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 1326.061504][ T57] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1326.390296][T24276] FAULT_INJECTION: forcing a failure. [ 1326.390296][T24276] name failslab, interval 1, probability 0, space 0, times 0 [ 1326.390329][T24276] CPU: 3 UID: 0 PID: 24276 Comm: syz.4.4930 Tainted: G L syzkaller #0 PREEMPT(full) [ 1326.390355][T24276] Tainted: [L]=SOFTLOCKUP [ 1326.390363][T24276] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1326.390374][T24276] Call Trace: [ 1326.390381][T24276] [ 1326.390390][T24276] dump_stack_lvl+0x100/0x190 [ 1326.390421][T24276] should_fail_ex.cold+0x5/0xa [ 1326.390447][T24276] should_failslab+0xc2/0x120 [ 1326.390476][T24276] __kmalloc_cache_noprof+0x91/0x6d0 [ 1326.390498][T24276] ? find_held_lock+0x2b/0x80 [ 1326.390520][T24276] ? autofs_new_ino+0x45/0x240 [ 1326.390550][T24276] autofs_new_ino+0x45/0x240 [ 1326.390575][T24276] autofs_lookup+0x5c3/0xc40 [ 1326.390601][T24276] ? down_read+0x13b/0x4c0 [ 1326.390633][T24276] __lookup_slow+0x155/0x320 [ 1326.390656][T24276] lookup_slow+0x50/0x70 [ 1326.390675][T24276] path_lookupat+0x5e8/0xc40 [ 1326.390704][T24276] filename_lookup+0x202/0x590 [ 1326.390731][T24276] ? __pfx_filename_lookup+0x10/0x10 [ 1326.390775][T24276] ? strncpy_from_user+0x19d/0x2d0 [ 1326.390825][T24276] ? do_getname+0x191/0x390 [ 1326.390846][T24276] do_readlinkat+0xd3/0x370 [ 1326.390874][T24276] ? __pfx_do_readlinkat+0x10/0x10 [ 1326.390903][T24276] ? ksys_write+0x1ac/0x250 [ 1326.390955][T24276] __ia32_sys_readlinkat+0x94/0x100 [ 1326.390976][T24276] ? lockdep_hardirqs_on+0x7d/0x110 [ 1326.391000][T24276] __do_fast_syscall_32+0x13a/0x8b0 [ 1326.391025][T24276] ? lockdep_hardirqs_on+0x7d/0x110 [ 1326.391050][T24276] do_fast_syscall_32+0x32/0x70 [ 1326.391076][T24276] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1326.391100][T24276] RIP: 0023:0xf73aefec [ 1326.391125][T24276] Code: Unable to access opcode bytes at 0xf73aefc2. [ 1326.391134][T24276] RSP: 002b:00000000f53a550c EFLAGS: 00000292 ORIG_RAX: 0000000000000131 [ 1326.391153][T24276] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000100 [ 1326.391166][T24276] RDX: 00000000ffffffff RSI: 00000000000000b4 RDI: 0000000000000000 [ 1326.391177][T24276] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1326.391188][T24276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1326.391200][T24276] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1326.391225][T24276] [ 1326.575693][ T1159] IPVS: starting estimator thread 0... [ 1326.612399][T24280] IPv6: addrconf: prefix option has invalid lifetime [ 1326.675573][T24281] IPVS: using max 26 ests per chain, 62400 per kthread [ 1326.888765][T24285] netlink: 'syz.4.4931': attribute type 1 has an invalid length. [ 1326.926670][T24285] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1327.004092][T24288] input: syz0 as /devices/virtual/input/input50 [ 1327.012075][T24288] FAULT_INJECTION: forcing a failure. [ 1327.012075][T24288] name failslab, interval 1, probability 0, space 0, times 0 [ 1327.012108][T24288] CPU: 1 UID: 0 PID: 24288 Comm: syz.5.4932 Tainted: G L syzkaller #0 PREEMPT(full) [ 1327.012134][T24288] Tainted: [L]=SOFTLOCKUP [ 1327.012141][T24288] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1327.012153][T24288] Call Trace: [ 1327.012160][T24288] [ 1327.012168][T24288] dump_stack_lvl+0x100/0x190 [ 1327.012199][T24288] should_fail_ex.cold+0x5/0xa [ 1327.012226][T24288] should_failslab+0xc2/0x120 [ 1327.012255][T24288] __kmalloc_noprof+0xfc/0x840 [ 1327.012280][T24288] ? tomoyo_encode2+0xfb/0x3c0 [ 1327.012309][T24288] tomoyo_encode2+0xfb/0x3c0 [ 1327.012337][T24288] tomoyo_encode+0x29/0x50 [ 1327.012359][T24288] tomoyo_realpath_from_path+0x18c/0x690 [ 1327.012391][T24288] tomoyo_path_number_perm+0x23c/0x580 [ 1327.012411][T24288] ? tomoyo_path_number_perm+0x22e/0x580 [ 1327.012456][T24288] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1327.012478][T24288] ? get_pid_task+0x106/0x250 [ 1327.012508][T24288] ? __lock_acquire+0x5c0/0x1f40 [ 1327.012549][T24288] ? __fget_files+0x34/0x3d0 [ 1327.012574][T24288] ? find_held_lock+0x2b/0x80 [ 1327.012596][T24288] ? __fget_files+0x215/0x3d0 [ 1327.012618][T24288] ? hook_file_ioctl_common+0x140/0x440 [ 1327.012638][T24288] ? __fget_files+0x215/0x3d0 [ 1327.012666][T24288] ? __fget_files+0x21f/0x3d0 [ 1327.012696][T24288] security_file_ioctl_compat+0xd3/0x230 [ 1327.012719][T24288] __ia32_compat_sys_ioctl+0xc2/0x360 [ 1327.012745][T24288] __do_fast_syscall_32+0x13a/0x8b0 [ 1327.012770][T24288] ? lockdep_hardirqs_on+0x7d/0x110 [ 1327.012796][T24288] do_fast_syscall_32+0x32/0x70 [ 1327.012820][T24288] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1327.012845][T24288] RIP: 0023:0xf73eefec [ 1327.012867][T24288] Code: Unable to access opcode bytes at 0xf73eefc2. [ 1327.012877][T24288] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1327.012896][T24288] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000401c5504 [ 1327.012909][T24288] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1327.012921][T24288] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1327.012933][T24288] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1327.012944][T24288] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1327.012971][T24288] [ 1327.016345][T24288] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1327.390689][T22547] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 1328.234589][T24327] syzkaller0: entered promiscuous mode [ 1328.234609][T24327] syzkaller0: entered allmulticast mode [ 1328.525921][T24336] FAULT_INJECTION: forcing a failure. [ 1328.525921][T24336] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1328.525944][T24336] CPU: 3 UID: 0 PID: 24336 Comm: syz.5.4947 Tainted: G L syzkaller #0 PREEMPT(full) [ 1328.525960][T24336] Tainted: [L]=SOFTLOCKUP [ 1328.525965][T24336] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1328.525971][T24336] Call Trace: [ 1328.525976][T24336] [ 1328.525981][T24336] dump_stack_lvl+0x100/0x190 [ 1328.526000][T24336] should_fail_ex.cold+0x5/0xa [ 1328.526015][T24336] _copy_from_user+0x2e/0xd0 [ 1328.526033][T24336] get_compat_msghdr+0xb3/0x480 [ 1328.526049][T24336] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1328.526066][T24336] ? rcu_is_watching+0x13/0xc0 [ 1328.526080][T24336] ? ___sys_recvmsg+0x177/0x1a0 [ 1328.526094][T24336] ? kfree+0x1e5/0x6d0 [ 1328.526108][T24336] ___sys_recvmsg+0x193/0x1a0 [ 1328.526124][T24336] ? __pfx____sys_recvmsg+0x10/0x10 [ 1328.526139][T24336] ? lock_acquire+0x1d1/0x380 [ 1328.526163][T24336] ? __pfx___might_resched+0x10/0x10 [ 1328.526182][T24336] do_recvmmsg+0x54d/0x740 [ 1328.526199][T24336] ? __pfx_do_recvmmsg+0x10/0x10 [ 1328.526215][T24336] ? find_held_lock+0x2b/0x80 [ 1328.526228][T24336] ? ksys_write+0x190/0x250 [ 1328.526242][T24336] ? ksys_write+0x190/0x250 [ 1328.526260][T24336] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1328.526277][T24336] __sys_recvmmsg+0x21f/0x270 [ 1328.526294][T24336] ? __pfx___sys_recvmmsg+0x10/0x10 [ 1328.526307][T24336] ? ksys_write+0x1ac/0x250 [ 1328.526322][T24336] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 1328.526343][T24336] ? __do_fast_syscall_32+0xb3/0x8b0 [ 1328.526363][T24336] ? lockdep_hardirqs_on+0x7d/0x110 [ 1328.526383][T24336] __do_fast_syscall_32+0x13a/0x8b0 [ 1328.526402][T24336] ? lockdep_hardirqs_on+0x7d/0x110 [ 1328.526417][T24336] do_fast_syscall_32+0x32/0x70 [ 1328.526432][T24336] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1328.526447][T24336] RIP: 0023:0xf73eefec [ 1328.526460][T24336] Code: Unable to access opcode bytes at 0xf73eefc2. [ 1328.526465][T24336] RSP: 002b:00000000f53e550c EFLAGS: 00000292 ORIG_RAX: 0000000000000151 [ 1328.526477][T24336] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 1328.526484][T24336] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1328.526491][T24336] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1328.526497][T24336] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1328.526504][T24336] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1328.526518][T24336] [ 1328.602540][T22801] usb 7-1: USB disconnect, device number 39 [ 1328.618936][T22801] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1328.632763][T22801] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1328.633246][T22801] keyspan 7-1:1.0: device disconnected [ 1328.874524][T24348] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 1329.633863][T24362] binder: 24361:24362 ioctl c0306201 80000080 returned -14 [ 1329.638336][T24362] binder_alloc: 24361: binder_alloc_buf, no vma [ 1329.970463][T24372] jffs2: notice: (24372) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1330.070115][T24378] gadgetfs: bound to dummy_udc driver [ 1330.305275][T22803] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 1330.305522][ C2] gadgetfs: connected [ 1330.308131][T22803] gadgetfs: disconnected [ 1330.886875][T24394] FAULT_INJECTION: forcing a failure. [ 1330.886875][T24394] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1330.886930][T24394] CPU: 0 UID: 0 PID: 24394 Comm: syz.3.4962 Tainted: G L syzkaller #0 PREEMPT(full) [ 1330.886956][T24394] Tainted: [L]=SOFTLOCKUP [ 1330.886962][T24394] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1330.886973][T24394] Call Trace: [ 1330.886979][T24394] [ 1330.886987][T24394] dump_stack_lvl+0x100/0x190 [ 1330.887017][T24394] should_fail_ex.cold+0x5/0xa [ 1330.887041][T24394] _copy_from_user+0x2e/0xd0 [ 1330.887069][T24394] ctl_ioctl+0xf3/0xcc0 [ 1330.887097][T24394] ? __pfx_ctl_ioctl+0x10/0x10 [ 1330.887143][T24394] ? __fget_files+0x21f/0x3d0 [ 1330.887172][T24394] dm_compat_ctl_ioctl+0x23/0x30 [ 1330.887195][T24394] ? __pfx_dm_compat_ctl_ioctl+0x10/0x10 [ 1330.887217][T24394] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1330.887242][T24394] __do_fast_syscall_32+0x13a/0x8b0 [ 1330.887265][T24394] ? lockdep_hardirqs_on+0x7d/0x110 [ 1330.887289][T24394] do_fast_syscall_32+0x32/0x70 [ 1330.887314][T24394] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1330.887336][T24394] RIP: 0023:0xf7fc6fec [ 1330.887356][T24394] Code: Unable to access opcode bytes at 0xf7fc6fc2. [ 1330.887365][T24394] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1330.887383][T24394] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c138fd09 [ 1330.887395][T24394] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1330.887405][T24394] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1330.887416][T24394] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1330.887427][T24394] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1330.887451][T24394] [ 1331.035641][T24403] jffs2: notice: (24403) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1331.351997][T24416] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4968'. [ 1331.352196][T24416] netdevsim netdevsim5 netdevsim0: IPsec offload requires 128 bit authentication [ 1331.363237][T24418] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4966'. [ 1333.347049][T24487] netlink: 'syz.2.4982': attribute type 14 has an invalid length. [ 1333.347075][T24487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4982'. [ 1333.363382][T24487] netlink: 'syz.2.4982': attribute type 14 has an invalid length. [ 1333.363405][T24487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4982'. [ 1333.375171][T20737] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1333.375211][T20737] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1333.375241][T20737] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1333.375270][T20737] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1333.911873][T24499] jffs2: notice: (24499) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1333.914199][T24499] FAULT_INJECTION: forcing a failure. [ 1333.914199][T24499] name failslab, interval 1, probability 0, space 0, times 0 [ 1333.914221][T24499] CPU: 0 UID: 0 PID: 24499 Comm: syz.3.4986 Tainted: G L syzkaller #0 PREEMPT(full) [ 1333.914237][T24499] Tainted: [L]=SOFTLOCKUP [ 1333.914241][T24499] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1333.914248][T24499] Call Trace: [ 1333.914252][T24499] [ 1333.914257][T24499] dump_stack_lvl+0x100/0x190 [ 1333.914277][T24499] should_fail_ex.cold+0x5/0xa [ 1333.914292][T24499] should_failslab+0xc2/0x120 [ 1333.914310][T24499] __kmalloc_noprof+0xfc/0x840 [ 1333.914326][T24499] ? jffs2_do_read_inode_internal+0x13d/0x4ac0 [ 1333.914347][T24499] jffs2_do_read_inode_internal+0x13d/0x4ac0 [ 1333.914367][T24499] ? check_prev_add+0xfe/0xe60 [ 1333.914384][T24499] ? check_prev_add+0xfe/0xe60 [ 1333.914402][T24499] ? __lock_acquire+0xe8b/0x1f40 [ 1333.914420][T24499] ? __pfx_jffs2_do_read_inode_internal+0x10/0x10 [ 1333.914442][T24499] ? lock_acquire+0x1d1/0x380 [ 1333.914463][T24499] ? jffs2_do_read_inode+0x173/0x520 [ 1333.914484][T24499] jffs2_do_read_inode+0x1b3/0x520 [ 1333.914504][T24499] ? __pfx_jffs2_do_read_inode+0x10/0x10 [ 1333.914524][T24499] ? __pfx_iget_locked+0x10/0x10 [ 1333.914540][T24499] jffs2_iget+0x32b/0xe30 [ 1333.914554][T24499] ? __pfx_jffs2_iget+0x10/0x10 [ 1333.914573][T24499] ? kasan_save_track+0x14/0x30 [ 1333.914588][T24499] ? __kasan_kmalloc+0xaa/0xb0 [ 1333.914602][T24499] ? __kmalloc_noprof+0x32f/0x840 [ 1333.914615][T24499] ? do_handle_open+0x62b/0xf20 [ 1333.914627][T24499] ? __do_fast_syscall_32+0x13a/0x8b0 [ 1333.914642][T24499] ? do_fast_syscall_32+0x32/0x70 [ 1333.914656][T24499] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1333.914672][T24499] ? __pfx_jffs2_nfs_get_inode+0x10/0x10 [ 1333.914685][T24499] generic_fh_to_dentry+0xdd/0x100 [ 1333.914701][T24499] exportfs_decode_fh_raw+0x167/0x760 [ 1333.914717][T24499] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 1333.914731][T24499] ? __pfx_jffs2_fh_to_dentry+0x10/0x10 [ 1333.914744][T24499] ? __pfx_exportfs_decode_fh_raw+0x10/0x10 [ 1333.914761][T24499] ? __lock_acquire+0x5c0/0x1f40 [ 1333.914793][T24499] do_handle_open+0x7e9/0xf20 [ 1333.914807][T24499] ? __pfx_do_handle_open+0x10/0x10 [ 1333.914822][T24499] ? fput+0x7c/0x100 [ 1333.914838][T24499] ? ksys_write+0x1ac/0x250 [ 1333.914851][T24499] ? __pfx_ksys_write+0x10/0x10 [ 1333.914868][T24499] ? __do_fast_syscall_32+0x13a/0x8b0 [ 1333.914909][T24499] __do_fast_syscall_32+0x13a/0x8b0 [ 1333.914925][T24499] ? lockdep_hardirqs_on+0x7d/0x110 [ 1333.914954][T24499] do_fast_syscall_32+0x32/0x70 [ 1333.914974][T24499] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1333.914989][T24499] RIP: 0023:0xf7fc6fec [ 1333.915002][T24499] Code: Unable to access opcode bytes at 0xf7fc6fc2. [ 1333.915007][T24499] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000156 [ 1333.915019][T24499] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800005c0 [ 1333.915026][T24499] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 1333.915033][T24499] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1333.915039][T24499] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1333.915046][T24499] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1333.915061][T24499] [ 1334.015046][T24499] jffs2: error: (24499) jffs2_do_read_inode_internal: cannot read nodes for ino 2, returned error is -12 [ 1334.267935][T24511] device-mapper: table: 248:2: thin-pool: metadata device already in use by a pool (-EBUSY) [ 1334.267960][T24511] device-mapper: ioctl: error adding target to table [ 1335.691757][T24530] FAULT_INJECTION: forcing a failure. [ 1335.691757][T24530] name failslab, interval 1, probability 0, space 0, times 0 [ 1335.691790][T24530] CPU: 3 UID: 0 PID: 24530 Comm: syz.5.4992 Tainted: G L syzkaller #0 PREEMPT(full) [ 1335.691809][T24530] Tainted: [L]=SOFTLOCKUP [ 1335.691814][T24530] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1335.691821][T24530] Call Trace: [ 1335.691825][T24530] [ 1335.691829][T24530] dump_stack_lvl+0x100/0x190 [ 1335.691849][T24530] should_fail_ex.cold+0x5/0xa [ 1335.691864][T24530] should_failslab+0xc2/0x120 [ 1335.691882][T24530] __kmalloc_noprof+0xfc/0x840 [ 1335.691898][T24530] ? tomoyo_encode2+0xfb/0x3c0 [ 1335.691915][T24530] tomoyo_encode2+0xfb/0x3c0 [ 1335.691936][T24530] tomoyo_encode+0x29/0x50 [ 1335.691956][T24530] tomoyo_realpath_from_path+0x18c/0x690 [ 1335.691985][T24530] tomoyo_path_number_perm+0x23c/0x580 [ 1335.692004][T24530] ? tomoyo_path_number_perm+0x22e/0x580 [ 1335.692023][T24530] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1335.692044][T24530] ? get_pid_task+0x106/0x250 [ 1335.692073][T24530] ? __lock_acquire+0x5c0/0x1f40 [ 1335.692113][T24530] ? __fget_files+0x34/0x3d0 [ 1335.692135][T24530] ? find_held_lock+0x2b/0x80 [ 1335.692155][T24530] ? __fget_files+0x215/0x3d0 [ 1335.692176][T24530] ? hook_file_ioctl_common+0x140/0x440 [ 1335.692196][T24530] ? __fget_files+0x215/0x3d0 [ 1335.692239][T24530] ? __fget_files+0x21f/0x3d0 [ 1335.692266][T24530] security_file_ioctl_compat+0xd3/0x230 [ 1335.692288][T24530] __ia32_compat_sys_ioctl+0xc2/0x360 [ 1335.692314][T24530] __do_fast_syscall_32+0x13a/0x8b0 [ 1335.692340][T24530] ? lockdep_hardirqs_on+0x7d/0x110 [ 1335.692366][T24530] do_fast_syscall_32+0x32/0x70 [ 1335.692392][T24530] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1335.692415][T24530] RIP: 0023:0xf73eefec [ 1335.692435][T24530] Code: Unable to access opcode bytes at 0xf73eefc2. [ 1335.692443][T24530] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1335.692461][T24530] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000008040640a [ 1335.692473][T24530] RDX: 0000000080000240 RSI: 0000000000000000 RDI: 0000000000000000 [ 1335.692480][T24530] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1335.692486][T24530] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1335.692493][T24530] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1335.692508][T24530] [ 1335.692594][T24530] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1336.202911][T24538] FAULT_INJECTION: forcing a failure. [ 1336.202911][T24538] name failslab, interval 1, probability 0, space 0, times 0 [ 1336.202935][T24538] CPU: 0 UID: 0 PID: 24538 Comm: syz.3.4995 Tainted: G L syzkaller #0 PREEMPT(full) [ 1336.202951][T24538] Tainted: [L]=SOFTLOCKUP [ 1336.202955][T24538] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1336.202962][T24538] Call Trace: [ 1336.202966][T24538] [ 1336.202971][T24538] dump_stack_lvl+0x100/0x190 [ 1336.202990][T24538] should_fail_ex.cold+0x5/0xa [ 1336.203019][T24538] should_failslab+0xc2/0x120 [ 1336.203037][T24538] __kvmalloc_node_noprof+0x113/0x9b0 [ 1336.203053][T24538] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1336.203068][T24538] ? netfs_extract_user_iter+0x161/0x690 [ 1336.203085][T24538] netfs_extract_user_iter+0x161/0x690 [ 1336.203101][T24538] ? find_held_lock+0x2b/0x80 [ 1336.203119][T24538] ? netfs_alloc_request+0x9de/0xe90 [ 1336.203135][T24538] ? __pfx_netfs_extract_user_iter+0x10/0x10 [ 1336.203151][T24538] ? netfs_alloc_request+0x9e3/0xe90 [ 1336.203169][T24538] netfs_unbuffered_read_iter_locked+0xd06/0x11e0 [ 1336.203187][T24538] ? netfs_start_io_direct+0x8b/0x260 [ 1336.203202][T24538] netfs_unbuffered_read_iter+0xc5/0x100 [ 1336.203217][T24538] netfs_file_read_iter+0x135/0x190 [ 1336.203230][T24538] v9fs_file_read_iter+0x9b/0x100 [ 1336.203245][T24538] ? __pfx_v9fs_file_read_iter+0x10/0x10 [ 1336.203259][T24538] vfs_read+0x82e/0xb40 [ 1336.203275][T24538] ? __pfx_vfs_read+0x10/0x10 [ 1336.203287][T24538] ? find_held_lock+0x2b/0x80 [ 1336.203310][T24538] ksys_read+0x12a/0x250 [ 1336.203323][T24538] ? __pfx_ksys_read+0x10/0x10 [ 1336.203336][T24538] ? ksys_write+0x1ac/0x250 [ 1336.203349][T24538] ? __pfx_ksys_write+0x10/0x10 [ 1336.203366][T24538] __do_fast_syscall_32+0x13a/0x8b0 [ 1336.203381][T24538] ? lockdep_hardirqs_on+0x7d/0x110 [ 1336.203396][T24538] do_fast_syscall_32+0x32/0x70 [ 1336.203412][T24538] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1336.203426][T24538] RIP: 0023:0xf7fc6fec [ 1336.203439][T24538] Code: Unable to access opcode bytes at 0xf7fc6fc2. [ 1336.203444][T24538] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 1336.203456][T24538] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 1336.203463][T24538] RDX: 0000000000000037 RSI: 0000000000000000 RDI: 0000000000000000 [ 1336.203470][T24538] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1336.203476][T24538] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1336.203483][T24538] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1336.203498][T24538] [ 1336.819165][T24547] Invalid ELF header magic: != ELF [ 1336.836485][T24547] overlay: Unknown parameter '/' [ 1337.111167][T24503] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1338.357054][T24568] kvm: user requested TSC rate below hardware speed [ 1338.433789][T22547] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 1338.657993][T24584] syzkaller0: entered promiscuous mode [ 1338.658011][T24584] syzkaller0: entered allmulticast mode [ 1338.984784][ T5844] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1339.157491][ T5844] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1339.158498][ T5844] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1339.158524][ T5844] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1339.158541][ T5844] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1339.158574][ T5844] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1339.160139][ T5844] usb 9-1: config 0 descriptor?? [ 1340.430954][ T5844] usbhid 9-1:0.0: can't add hid device: -71 [ 1340.431087][ T5844] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1340.493279][ T5844] usb 9-1: USB disconnect, device number 12 [ 1341.322288][T24614] jffs2: notice: (24614) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1342.963140][T24601] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 1343.610085][T24644] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5025'. [ 1343.793796][T24643] FAULT_INJECTION: forcing a failure. [ 1343.793796][T24643] name failslab, interval 1, probability 0, space 0, times 0 [ 1343.793821][T24643] CPU: 3 UID: 0 PID: 24643 Comm: syz.2.5025 Tainted: G L syzkaller #0 PREEMPT(full) [ 1343.793838][T24643] Tainted: [L]=SOFTLOCKUP [ 1343.793843][T24643] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1343.793850][T24643] Call Trace: [ 1343.793855][T24643] [ 1343.793860][T24643] dump_stack_lvl+0x100/0x190 [ 1343.793882][T24643] should_fail_ex.cold+0x5/0xa [ 1343.793903][T24643] should_failslab+0xc2/0x120 [ 1343.793921][T24643] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 1343.793939][T24643] ? __alloc_skb+0x140/0x710 [ 1343.793953][T24643] __alloc_skb+0x140/0x710 [ 1343.793965][T24643] ? __alloc_skb+0x5b7/0x710 [ 1343.793976][T24643] ? __pfx___alloc_skb+0x10/0x10 [ 1343.793988][T24643] ? find_held_lock+0x2b/0x80 [ 1343.794002][T24643] ? atomic_notifier_call_chain+0x9e/0x1c0 [ 1343.794018][T24643] __inet6_rt_notify+0x1d8/0x4c0 [ 1343.794034][T24643] fib6_del+0xf7b/0x1790 [ 1343.794056][T24643] ? __pfx_fib6_del+0x10/0x10 [ 1343.794074][T24643] ? fib6_ifdown+0xcd/0x7e0 [ 1343.794088][T24643] ? lockdep_hardirqs_on+0x7d/0x110 [ 1343.794104][T24643] fib6_clean_node+0x426/0x5d0 [ 1343.794122][T24643] ? __pfx_fib6_clean_node+0x10/0x10 [ 1343.794143][T24643] ? fib6_walk_continue+0x327/0x8d0 [ 1343.794160][T24643] fib6_walk_continue+0x451/0x8d0 [ 1343.794179][T24643] fib6_walk+0x182/0x350 [ 1343.794196][T24643] fib6_clean_tree+0xdc/0x120 [ 1343.794211][T24643] ? __pfx_fib6_ifdown+0x10/0x10 [ 1343.794225][T24643] ? __pfx_fib6_clean_tree+0x10/0x10 [ 1343.794243][T24643] ? __pfx_fib6_clean_node+0x10/0x10 [ 1343.794260][T24643] ? __pfx_fib6_ifdown+0x10/0x10 [ 1343.794275][T24643] ? preempt_schedule_thunk+0x16/0x40 [ 1343.794291][T24643] ? __pfx_fib6_ifdown+0x10/0x10 [ 1343.794305][T24643] __fib6_clean_all+0x107/0x2d0 [ 1343.794323][T24643] rt6_disable_ip+0x2a6/0x980 [ 1343.794337][T24643] ? find_held_lock+0x2b/0x80 [ 1343.794350][T24643] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 1343.794370][T24643] ? __pfx_rt6_disable_ip+0x10/0x10 [ 1343.794402][T24643] ? lock_acquire+0x1d1/0x380 [ 1343.794425][T24643] addrconf_ifdown.isra.0+0x11d/0x1b70 [ 1343.794445][T24643] ? trace_contention_end+0x126/0x160 [ 1343.794465][T24643] ? __mutex_lock+0x26c/0x1bd0 [ 1343.794482][T24643] ? tee_netdev_event+0x8a/0x3d0 [ 1343.794498][T24643] ? find_held_lock+0x2b/0x80 [ 1343.794511][T24643] ? tee_netdev_event+0x300/0x3d0 [ 1343.794528][T24643] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 1343.794551][T24643] addrconf_notify+0x4a3/0x1ba0 [ 1343.794565][T24643] ? __pfx_tls_dev_event+0x10/0x10 [ 1343.794582][T24643] ? __pfx_addrconf_notify+0x10/0x10 [ 1343.794595][T24643] ? ip6mr_device_event+0x1c4/0x230 [ 1343.794610][T24643] notifier_call_chain+0x99/0x3f0 [ 1343.794626][T24643] call_netdevice_notifiers_info+0xbe/0x110 [ 1343.794643][T24643] __dev_notify_flags+0x2fc/0x4b0 [ 1343.794656][T24643] ? __pfx___dev_notify_flags+0x10/0x10 [ 1343.794669][T24643] ? __pfx___dev_change_flags+0x10/0x10 [ 1343.794685][T24643] netif_change_flags+0x108/0x160 [ 1343.794698][T24643] do_setlink.isra.0+0x1ac4/0x3e60 [ 1343.794715][T24643] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 1343.794729][T24643] ? __lock_acquire+0x5c0/0x1f40 [ 1343.794750][T24643] ? do_raw_spin_lock+0x128/0x260 [ 1343.794763][T24643] ? find_held_lock+0x2b/0x80 [ 1343.794775][T24643] ? debug_mutex_remove_waiter+0xa0/0x320 [ 1343.794789][T24643] ? debug_mutex_remove_waiter+0xa0/0x320 [ 1343.794820][T24643] ? mark_held_locks+0x40/0x70 [ 1343.794856][T24643] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1343.794871][T24643] ? __mutex_lock+0x829/0x1bd0 [ 1343.794885][T24643] ? lockdep_hardirqs_on+0x7d/0x110 [ 1343.794905][T24643] ? __mutex_lock+0x829/0x1bd0 [ 1343.794919][T24643] ? __mutex_lock+0x26c/0x1bd0 [ 1343.794934][T24643] ? rtnl_newlink+0xac3/0x2620 [ 1343.794950][T24643] ? __pfx___mutex_lock+0x10/0x10 [ 1343.794966][T24643] ? rcu_is_watching+0x13/0xc0 [ 1343.794981][T24643] ? apparmor_capable+0x1d7/0x4d0 [ 1343.795003][T24643] rtnl_newlink+0x13c1/0x2620 [ 1343.795021][T24643] ? __pfx_rtnl_newlink+0x10/0x10 [ 1343.795035][T24643] ? rcu_is_watching+0x13/0xc0 [ 1343.795048][T24643] ? kasan_quarantine_put+0x104/0x240 [ 1343.795064][T24643] ? lockdep_hardirqs_on+0x7d/0x110 [ 1343.795084][T24643] ? __lock_acquire+0x5c0/0x1f40 [ 1343.795103][T24643] ? find_held_lock+0x2b/0x80 [ 1343.795122][T24643] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1343.795135][T24643] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1343.795150][T24643] ? __pfx_rtnl_newlink+0x10/0x10 [ 1343.795164][T24643] rtnetlink_rcv_msg+0x95e/0xe90 [ 1343.795179][T24643] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1343.795197][T24643] ? ref_tracker_free+0x37e/0x6c0 [ 1343.795212][T24643] netlink_rcv_skb+0x159/0x420 [ 1343.795230][T24643] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1343.795245][T24643] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1343.795268][T24643] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1343.795287][T24643] netlink_unicast+0x585/0x850 [ 1343.795307][T24643] ? __pfx_netlink_unicast+0x10/0x10 [ 1343.795329][T24643] netlink_sendmsg+0x8b0/0xda0 [ 1343.795349][T24643] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1343.795368][T24643] ? apparmor_socket_sendmsg+0x165/0x280 [ 1343.795388][T24643] ____sys_sendmsg+0xa4d/0xbe0 [ 1343.795405][T24643] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1343.795423][T24643] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1343.795445][T24643] ___sys_sendmsg+0x190/0x1e0 [ 1343.795462][T24643] ? __pfx____sys_sendmsg+0x10/0x10 [ 1343.795477][T24643] ? futex_wait+0x11e/0x370 [ 1343.795498][T24643] ? find_held_lock+0x2b/0x80 [ 1343.795521][T24643] __sys_sendmsg+0x160/0x210 [ 1343.795533][T24643] ? __pfx___sys_sendmsg+0x10/0x10 [ 1343.795553][T24643] __do_fast_syscall_32+0x13a/0x8b0 [ 1343.795571][T24643] do_fast_syscall_32+0x32/0x70 [ 1343.795588][T24643] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1343.795603][T24643] RIP: 0023:0xf741efec [ 1343.795618][T24643] Code: Unable to access opcode bytes at 0xf741efc2. [ 1343.795623][T24643] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1343.795637][T24643] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000280 [ 1343.795646][T24643] RDX: 0000000000008000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1343.795653][T24643] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1343.795659][T24643] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1343.795666][T24643] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1343.795681][T24643] [ 1344.052452][T24644] netlink: 'syz.2.5025': attribute type 10 has an invalid length. [ 1344.052476][T24644] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5025'. [ 1344.062199][T24643] bridge1: port 1(dummy0) entered blocking state [ 1344.062273][T24643] bridge1: port 1(dummy0) entered disabled state [ 1344.062354][T24643] dummy0: entered allmulticast mode [ 1344.067057][T24643] dummy0: entered promiscuous mode [ 1344.076122][T24644] bridge1: port 1(dummy0) entered blocking state [ 1344.076222][T24644] bridge1: port 1(dummy0) entered forwarding state [ 1344.098085][T24644] dummy0: left allmulticast mode [ 1344.101209][T24644] bridge1: port 1(dummy0) entered disabled state [ 1347.575066][T22547] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 1348.909848][T24693] ------------[ cut here ]------------ [ 1348.909863][T24693] current->flags & PF_MEMALLOC [ 1348.909872][T24693] WARNING: mm/page_alloc.c:4816 at __alloc_frozen_pages_noprof+0x1eac/0x3300, CPU#3: syz.3.5036/24693 [ 1348.922132][T24693] Modules linked in: [ 1348.923772][T24693] CPU: 3 UID: 0 PID: 24693 Comm: syz.3.5036 Tainted: G L syzkaller #0 PREEMPT(full) [ 1348.928320][T24693] Tainted: [L]=SOFTLOCKUP [ 1348.930036][T24693] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1348.933988][T24693] RIP: 0010:__alloc_frozen_pages_noprof+0x1eac/0x3300 [ 1348.937171][T24693] Code: 38 d0 7c 08 84 d2 0f 85 de 12 00 00 65 48 8b 05 62 af 1c 12 c7 84 24 94 00 00 00 00 80 00 00 f6 40 2d 08 0f 84 ba e7 ff ff 90 <0f> 0b 90 e9 b1 e7 ff ff 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 [ 1348.947460][T24693] RSP: 0000:ffffc9000523d5f8 EFLAGS: 00010202 [ 1348.950079][T24693] RAX: ffff88806cd6cb00 RBX: 0000000000000000 RCX: 1ffff1100fffad29 [ 1348.952854][T24693] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff88803fffd938 [ 1348.955883][T24693] RBP: ffff88806cd6cb2c R08: 0000000000008000 R09: 0000000000000001 [ 1348.958561][T24693] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000148c48 [ 1348.961577][T24693] R13: ffff88803fffb900 R14: 0000000000000000 R15: 1ffff92000a47ad9 [ 1348.965342][T24693] FS: 0000000000000000(0000) GS:ffff888096c52000(0063) knlGS:00000000f5402b40 [ 1348.968430][T24693] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1348.970779][T24693] CR2: 00000000f7048caf CR3: 0000000073097000 CR4: 0000000000352ef0 [ 1348.973514][T24693] Call Trace: [ 1348.974936][T24693] [ 1348.975880][T24693] ? __pfx___css_rstat_updated+0x10/0x10 [ 1348.977646][T24693] ? __lock_acquire+0x5c0/0x1f40 [ 1348.979230][T24693] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 1348.981018][T24693] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1348.983017][T24693] ? lock_acquire+0x1d1/0x380 [ 1348.984706][T24693] ? rcu_lock_acquire.constprop.0+0x7/0x30 [ 1348.986856][T24693] ? find_held_lock+0x2b/0x80 [ 1348.988342][T24693] ? rcu_read_unlock+0x17/0x60 [ 1348.990376][T24693] ? __lock_acquire+0x5c0/0x1f40 [ 1348.992501][T24693] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1348.994873][T24693] ? policy_nodemask+0xed/0x4f0 [ 1348.996418][T24693] alloc_pages_mpol+0x201/0x550 [ 1348.997948][T24693] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1348.999635][T24693] ? filemap_get_entry+0x22d/0x450 [ 1349.001249][T24693] ? filemap_get_entry+0x22d/0x450 [ 1349.003182][T24693] folio_alloc_noprof+0x22/0x250 [ 1349.005105][T24693] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 1349.007585][T24693] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 1349.009683][T24693] ? __filemap_get_folio_mpol+0x369/0x1280 [ 1349.011519][T24693] __filemap_get_folio_mpol+0x653/0x1280 [ 1349.013314][T24693] bdev_getblk+0x246/0x6a0 [ 1349.014800][T24693] ? ext4_get_group_desc+0x2b9/0x570 [ 1349.016455][T24693] ext4_read_block_bitmap_nowait+0x2dd/0x1780 [ 1349.018324][T24693] ? ext4_get_group_info+0x271/0x480 [ 1349.020004][T24693] ext4_mb_init_cache+0x413/0x1920 [ 1349.021643][T24693] ? __pfx_ext4_mb_init_cache+0x10/0x10 [ 1349.023421][T24693] ext4_mb_load_buddy_gfp+0x11cb/0x1b20 [ 1349.025289][T24693] ext4_discard_preallocations+0x584/0x10c0 [ 1349.027653][T24693] ? __pfx_ext4_discard_preallocations+0x10/0x10 [ 1349.029622][T24693] ? __pfx_xa_destroy+0x10/0x10 [ 1349.031708][T24693] ? inode_wait_for_writeback+0x171/0x390 [ 1349.033489][T24693] ? inode_lru_isolate+0x37/0xf00 [ 1349.035215][T24693] ext4_clear_inode+0x6e/0x280 [ 1349.036711][T24693] ext4_evict_inode+0x1de/0x17d0 [ 1349.038227][T24693] ? evict+0x37e/0xad0 [ 1349.039540][T24693] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1349.041217][T24693] evict+0x3c2/0xad0 [ 1349.042469][T24693] ? _raw_spin_unlock+0x28/0x50 [ 1349.044014][T24693] ? __list_lru_walk_one+0x26d/0x550 [ 1349.046076][T24693] ? __pfx_evict+0x10/0x10 [ 1349.047677][T24693] ? xa_load+0x149/0x2c0 [ 1349.049035][T24693] ? xa_load+0x149/0x2c0 [ 1349.050386][T24693] dispose_list+0x117/0x1e0 [ 1349.051844][T24693] prune_icache_sb+0xea/0x150 [ 1349.053320][T24693] ? list_lru_count_one+0x147/0x320 [ 1349.055002][T24693] ? __pfx_prune_icache_sb+0x10/0x10 [ 1349.056617][T24693] super_cache_scan+0x376/0x550 [ 1349.058126][T24693] do_shrink_slab+0x416/0x1200 [ 1349.059664][T24693] shrink_slab+0xa82/0x12e0 [ 1349.061116][T24693] ? shrink_slab+0x677/0x12e0 [ 1349.062640][T24693] ? __pfx_shrink_slab+0x10/0x10 [ 1349.064279][T24693] ? __pfx_get_random_u8+0x10/0x10 [ 1349.065905][T24693] ? lock_acquire+0x1d1/0x380 [ 1349.067412][T24693] shrink_one+0x398/0x850 [ 1349.068791][T24693] ? shrink_node+0x2b00/0x4320 [ 1349.070314][T24693] shrink_node+0x2b20/0x4320 [ 1349.071802][T24693] ? __queue_work+0x4d6/0x1370 [ 1349.073309][T24693] ? shrink_node+0x286e/0x4320 [ 1349.074884][T24693] ? __pfx_shrink_node+0x10/0x10 [ 1349.076449][T24693] ? queue_work_on+0x141/0x1e0 [ 1349.077965][T24693] ? do_try_to_free_pages+0x33e/0x16d0 [ 1349.079683][T24693] do_try_to_free_pages+0x33e/0x16d0 [ 1349.081348][T24693] ? __pfx_do_try_to_free_pages+0x10/0x10 [ 1349.083151][T24693] ? __lock_acquire+0x5c0/0x1f40 [ 1349.084764][T24693] try_to_free_pages+0x2a0/0x740 [ 1349.086328][T24693] ? __pfx_try_to_free_pages+0x10/0x10 [ 1349.088062][T24693] ? find_held_lock+0x2b/0x80 [ 1349.089545][T24693] ? fs_reclaim_acquire+0x70/0x100 [ 1349.091160][T24693] ? fs_reclaim_acquire+0x70/0x100 [ 1349.092790][T24693] __alloc_frozen_pages_noprof+0xf8a/0x3300 [ 1349.094720][T24693] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1349.096719][T24693] ? lock_acquire+0x1d1/0x380 [ 1349.098200][T24693] ? page_table_check_set+0x11d/0x580 [ 1349.099844][T24693] ? find_held_lock+0x2b/0x80 [ 1349.101278][T24693] ? page_table_check_set+0x30f/0x580 [ 1349.102960][T24693] ? page_table_check_set+0x30f/0x580 [ 1349.104722][T24693] ? page_table_check_set+0x31e/0x580 [ 1349.106750][T24693] ? __page_table_check_ptes_set+0x1d5/0x530 [ 1349.108654][T24693] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 1349.110574][T24693] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1349.112858][T24693] ? policy_nodemask+0xed/0x4f0 [ 1349.114454][T24693] alloc_pages_mpol+0x201/0x550 [ 1349.116019][T24693] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1349.117624][T24693] ? find_held_lock+0x2b/0x80 [ 1349.119129][T24693] ? rcu_read_unlock+0x2d/0xb0 [ 1349.120640][T24693] folio_alloc_mpol_noprof+0x36/0x260 [ 1349.122807][T24693] shmem_alloc_folio+0x135/0x160 [ 1349.124524][T24693] shmem_alloc_and_add_folio+0x371/0xd40 [ 1349.126269][T24693] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1349.128497][T24693] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 1349.130369][T24693] shmem_get_folio_gfp+0x75b/0x1980 [ 1349.132334][T24693] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1349.134280][T24693] ? vm_normal_page+0x1d1/0x380 [ 1349.135829][T24693] ? __pfx_vm_normal_page+0x10/0x10 [ 1349.137375][T24693] shmem_write_begin+0x1a4/0x420 [ 1349.139215][T24693] ? __pfx_shmem_write_begin+0x10/0x10 [ 1349.141471][T24693] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 1349.143604][T24693] generic_perform_write+0x292/0xa40 [ 1349.145691][T24693] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1349.147559][T24693] ? __pfx_generic_perform_write+0x10/0x10 [ 1349.149394][T24693] ? file_update_time_flags+0x38c/0x520 [ 1349.151147][T24693] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1349.152994][T24693] shmem_file_write_iter+0x10e/0x140 [ 1349.154718][T24693] __kernel_write_iter+0x2ac/0x930 [ 1349.156347][T24693] ? __pfx___kernel_write_iter+0x10/0x10 [ 1349.158099][T24693] ? __up_read+0x333/0x980 [ 1349.159520][T24693] ? dump_user_range+0x65e/0xad0 [ 1349.161071][T24693] dump_user_range+0x3f9/0xad0 [ 1349.162608][T24693] ? __pfx_dump_user_range+0x10/0x10 [ 1349.164585][T24693] ? __pfx_writenote+0x10/0x10 [ 1349.166606][T24693] ? elf_core_dump+0x2276/0x42f0 [ 1349.168131][T24693] elf_core_dump+0x31f8/0x42f0 [ 1349.169649][T24693] ? __pfx_elf_core_dump+0x10/0x10 [ 1349.171258][T24693] ? __kasan_kmalloc+0xaa/0xb0 [ 1349.176350][T24693] ? __kvmalloc_node_noprof+0x35b/0x9b0 [ 1349.178080][T24693] ? vfs_coredump+0x21f6/0x54a0 [ 1349.179637][T24693] ? get_signal+0x1f2a/0x21e0 [ 1349.181127][T24693] ? arch_do_signal_or_restart+0x91/0x7a0 [ 1349.183023][T24693] ? asm_exc_page_fault+0x26/0x30 [ 1349.184831][T24693] ? lock_acquire+0x1d1/0x380 [ 1349.186298][T24693] ? get_signal+0x1f2a/0x21e0 [ 1349.187749][T24693] ? vfs_coredump+0x281a/0x54a0 [ 1349.189236][T24693] vfs_coredump+0x281a/0x54a0 [ 1349.190678][T24693] ? __pfx_vfs_coredump+0x10/0x10 [ 1349.192286][T24693] ? __lock_acquire+0x5c0/0x1f40 [ 1349.193851][T24693] ? __lock_acquire+0x5c0/0x1f40 [ 1349.195598][T24693] ? lock_acquire+0x1d1/0x380 [ 1349.197084][T24693] ? unwind_next_frame+0xbd/0x2090 [ 1349.198701][T24693] ? lock_acquire+0x1d1/0x380 [ 1349.200601][T24693] ? bpf_ksym_find+0x124/0x1c0 [ 1349.202154][T24693] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1349.204494][T24693] ? arch_stack_walk+0xa6/0xf0 [ 1349.206049][T24693] ? __sigqueue_free+0xbe/0x2a0 [ 1349.207564][T24693] ? stack_trace_save+0x8e/0xc0 [ 1349.209081][T24693] ? __pfx_stack_trace_save+0x10/0x10 [ 1349.210753][T24693] ? stack_depot_save_flags+0x27/0x9f0 [ 1349.212475][T24693] ? __lock_acquire+0x5c0/0x1f40 [ 1349.214069][T24693] ? proc_coredump_connector+0x2d3/0x4f0 [ 1349.215959][T24693] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1349.217799][T24693] ? rcu_is_watching+0x13/0xc0 [ 1349.219316][T24693] get_signal+0x1f2a/0x21e0 [ 1349.220766][T24693] ? __pfx_get_signal+0x10/0x10 [ 1349.222326][T24693] ? __pfx_force_sig_fault+0x10/0x10 [ 1349.224021][T24693] arch_do_signal_or_restart+0x91/0x7a0 [ 1349.225803][T24693] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1349.227751][T24693] irqentry_exit+0x402/0xa10 [ 1349.229609][T24693] asm_exc_page_fault+0x26/0x30 [ 1349.231156][T24693] RIP: 0023:0xf7fc6fec [ 1349.232461][T24693] Code: Unable to access opcode bytes at 0xf7fc6fc2. [ 1349.234590][T24693] RSP: 002b:00000000fffffe70 EFLAGS: 00010282 [ 1349.236512][T24693] RAX: 0000000000000000 RBX: 0000000000008000 RCX: 00000000fffffe70 [ 1349.238992][T24693] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1349.241937][T24693] RBP: 00000000f54025ec R08: 0000000000000000 R09: 0000000000000000 [ 1349.244945][T24693] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1349.247432][T24693] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1349.249902][T24693] [ 1349.250902][T24693] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1349.253199][T24693] CPU: 3 UID: 0 PID: 24693 Comm: syz.3.5036 Tainted: G L syzkaller #0 PREEMPT(full) [ 1349.256643][T24693] Tainted: [L]=SOFTLOCKUP [ 1349.257969][T24693] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1349.261107][T24693] Call Trace: [ 1349.262176][T24693] [ 1349.263134][T24693] dump_stack_lvl+0x100/0x190 [ 1349.264630][T24693] vpanic+0x553/0x970 [ 1349.265891][T24693] ? __pfx_vpanic+0x10/0x10 [ 1349.267332][T24693] panic+0xd1/0xe0 [ 1349.268524][T24693] ? __pfx_panic+0x10/0x10 [ 1349.270054][T24693] check_panic_on_warn.cold+0x19/0x34 [ 1349.271767][T24693] ? __alloc_frozen_pages_noprof+0x1eac/0x3300 [ 1349.273695][T24693] __warn.cold+0x191/0x318 [ 1349.275115][T24693] __report_bug+0x30f/0x440 [ 1349.276718][T24693] ? __alloc_frozen_pages_noprof+0x1eac/0x3300 [ 1349.278794][T24693] ? __pfx___report_bug+0x10/0x10 [ 1349.280360][T24693] ? check_prev_add+0xfe/0xe60 [ 1349.281882][T24693] ? get_page_from_freelist+0x344/0x35d0 [ 1349.283651][T24693] ? __alloc_frozen_pages_noprof+0x1eac/0x3300 [ 1349.285576][T24693] report_bug+0xb3/0x220 [ 1349.286930][T24693] ? __alloc_frozen_pages_noprof+0x1eac/0x3300 [ 1349.288940][T24693] handle_bug+0x16a/0x2a0 [ 1349.290204][T24693] exc_invalid_op+0x17/0x50 [ 1349.291657][T24693] asm_exc_invalid_op+0x1a/0x20 [ 1349.293198][T24693] RIP: 0010:__alloc_frozen_pages_noprof+0x1eac/0x3300 [ 1349.295309][T24693] Code: 38 d0 7c 08 84 d2 0f 85 de 12 00 00 65 48 8b 05 62 af 1c 12 c7 84 24 94 00 00 00 00 80 00 00 f6 40 2d 08 0f 84 ba e7 ff ff 90 <0f> 0b 90 e9 b1 e7 ff ff 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 [ 1349.301266][T24693] RSP: 0000:ffffc9000523d5f8 EFLAGS: 00010202 [ 1349.303160][T24693] RAX: ffff88806cd6cb00 RBX: 0000000000000000 RCX: 1ffff1100fffad29 [ 1349.305609][T24693] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff88803fffd938 [ 1349.308010][T24693] RBP: ffff88806cd6cb2c R08: 0000000000008000 R09: 0000000000000001 [ 1349.310428][T24693] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000148c48 [ 1349.312907][T24693] R13: ffff88803fffb900 R14: 0000000000000000 R15: 1ffff92000a47ad9 [ 1349.315387][T24693] ? __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 1349.317262][T24693] ? __pfx___css_rstat_updated+0x10/0x10 [ 1349.319047][T24693] ? __lock_acquire+0x5c0/0x1f40 [ 1349.320620][T24693] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 1349.322427][T24693] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1349.324411][T24693] ? lock_acquire+0x1d1/0x380 [ 1349.325895][T24693] ? rcu_lock_acquire.constprop.0+0x7/0x30 [ 1349.327729][T24693] ? find_held_lock+0x2b/0x80 [ 1349.329212][T24693] ? rcu_read_unlock+0x17/0x60 [ 1349.330726][T24693] ? __lock_acquire+0x5c0/0x1f40 [ 1349.332309][T24693] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1349.334174][T24693] ? policy_nodemask+0xed/0x4f0 [ 1349.335721][T24693] alloc_pages_mpol+0x201/0x550 [ 1349.337245][T24693] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1349.338940][T24693] ? filemap_get_entry+0x22d/0x450 [ 1349.340543][T24693] ? filemap_get_entry+0x22d/0x450 [ 1349.342151][T24693] folio_alloc_noprof+0x22/0x250 [ 1349.343708][T24693] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 1349.345673][T24693] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 1349.347792][T24693] ? __filemap_get_folio_mpol+0x369/0x1280 [ 1349.349628][T24693] __filemap_get_folio_mpol+0x653/0x1280 [ 1349.351401][T24693] bdev_getblk+0x246/0x6a0 [ 1349.352833][T24693] ? ext4_get_group_desc+0x2b9/0x570 [ 1349.354493][T24693] ext4_read_block_bitmap_nowait+0x2dd/0x1780 [ 1349.356391][T24693] ? ext4_get_group_info+0x271/0x480 [ 1349.357984][T24693] ext4_mb_init_cache+0x413/0x1920 [ 1349.359621][T24693] ? __pfx_ext4_mb_init_cache+0x10/0x10 [ 1349.361363][T24693] ext4_mb_load_buddy_gfp+0x11cb/0x1b20 [ 1349.363175][T24693] ext4_discard_preallocations+0x584/0x10c0 [ 1349.365114][T24693] ? __pfx_ext4_discard_preallocations+0x10/0x10 [ 1349.367165][T24693] ? __pfx_xa_destroy+0x10/0x10 [ 1349.368712][T24693] ? inode_wait_for_writeback+0x171/0x390 [ 1349.370474][T24693] ? inode_lru_isolate+0x37/0xf00 [ 1349.372198][T24693] ext4_clear_inode+0x6e/0x280 [ 1349.373644][T24693] ext4_evict_inode+0x1de/0x17d0 [ 1349.375289][T24693] ? evict+0x37e/0xad0 [ 1349.376909][T24693] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1349.379019][T24693] evict+0x3c2/0xad0 [ 1349.380564][T24693] ? _raw_spin_unlock+0x28/0x50 [ 1349.382505][T24693] ? __list_lru_walk_one+0x26d/0x550 [ 1349.384627][T24693] ? __pfx_evict+0x10/0x10 [ 1349.386431][T24693] ? xa_load+0x149/0x2c0 [ 1349.388130][T24693] ? xa_load+0x149/0x2c0 [ 1349.389843][T24693] dispose_list+0x117/0x1e0 [ 1349.391695][T24693] prune_icache_sb+0xea/0x150 [ 1349.393607][T24693] ? list_lru_count_one+0x147/0x320 [ 1349.395707][T24693] ? __pfx_prune_icache_sb+0x10/0x10 [ 1349.397768][T24693] super_cache_scan+0x376/0x550 [ 1349.399758][T24693] do_shrink_slab+0x416/0x1200 [ 1349.401669][T24693] shrink_slab+0xa82/0x12e0 [ 1349.403519][T24693] ? shrink_slab+0x677/0x12e0 [ 1349.405403][T24693] ? __pfx_shrink_slab+0x10/0x10 [ 1349.407392][T24693] ? __pfx_get_random_u8+0x10/0x10 [ 1349.409419][T24693] ? lock_acquire+0x1d1/0x380 [ 1349.411301][T24693] shrink_one+0x398/0x850 [ 1349.413053][T24693] ? shrink_node+0x2b00/0x4320 [ 1349.414984][T24693] shrink_node+0x2b20/0x4320 [ 1349.416835][T24693] ? __queue_work+0x4d6/0x1370 [ 1349.418757][T24693] ? shrink_node+0x286e/0x4320 [ 1349.420672][T24693] ? __pfx_shrink_node+0x10/0x10 [ 1349.422673][T24693] ? queue_work_on+0x141/0x1e0 [ 1349.424602][T24693] ? do_try_to_free_pages+0x33e/0x16d0 [ 1349.426777][T24693] do_try_to_free_pages+0x33e/0x16d0 [ 1349.428908][T24693] ? __pfx_do_try_to_free_pages+0x10/0x10 [ 1349.431178][T24693] ? __lock_acquire+0x5c0/0x1f40 [ 1349.433169][T24693] try_to_free_pages+0x2a0/0x740 [ 1349.435153][T24693] ? __pfx_try_to_free_pages+0x10/0x10 [ 1349.437329][T24693] ? find_held_lock+0x2b/0x80 [ 1349.439227][T24693] ? fs_reclaim_acquire+0x70/0x100 [ 1349.441267][T24693] ? fs_reclaim_acquire+0x70/0x100 [ 1349.443334][T24693] __alloc_frozen_pages_noprof+0xf8a/0x3300 [ 1349.445689][T24693] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1349.448150][T24693] ? lock_acquire+0x1d1/0x380 [ 1349.450033][T24693] ? page_table_check_set+0x11d/0x580 [ 1349.452196][T24693] ? find_held_lock+0x2b/0x80 [ 1349.454081][T24693] ? page_table_check_set+0x30f/0x580 [ 1349.456221][T24693] ? page_table_check_set+0x30f/0x580 [ 1349.458329][T24693] ? page_table_check_set+0x31e/0x580 [ 1349.460506][T24693] ? __page_table_check_ptes_set+0x1d5/0x530 [ 1349.462912][T24693] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 1349.465434][T24693] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1349.467773][T24693] ? policy_nodemask+0xed/0x4f0 [ 1349.469740][T24693] alloc_pages_mpol+0x201/0x550 [ 1349.471722][T24693] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1349.473859][T24693] ? find_held_lock+0x2b/0x80 [ 1349.475762][T24693] ? rcu_read_unlock+0x2d/0xb0 [ 1349.477695][T24693] folio_alloc_mpol_noprof+0x36/0x260 [ 1349.479857][T24693] shmem_alloc_folio+0x135/0x160 [ 1349.481843][T24693] shmem_alloc_and_add_folio+0x371/0xd40 [ 1349.484099][T24693] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1349.486554][T24693] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 1349.488909][T24693] shmem_get_folio_gfp+0x75b/0x1980 [ 1349.490994][T24693] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1349.493223][T24693] ? vm_normal_page+0x1d1/0x380 [ 1349.495181][T24693] ? __pfx_vm_normal_page+0x10/0x10 [ 1349.497265][T24693] shmem_write_begin+0x1a4/0x420 [ 1349.499230][T24693] ? __pfx_shmem_write_begin+0x10/0x10 [ 1349.501403][T24693] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 1349.504122][T24693] generic_perform_write+0x292/0xa40 [ 1349.506218][T24693] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1349.508565][T24693] ? __pfx_generic_perform_write+0x10/0x10 [ 1349.510880][T24693] ? file_update_time_flags+0x38c/0x520 [ 1349.513103][T24693] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1349.515435][T24693] shmem_file_write_iter+0x10e/0x140 [ 1349.517546][T24693] __kernel_write_iter+0x2ac/0x930 [ 1349.519610][T24693] ? __pfx___kernel_write_iter+0x10/0x10 [ 1349.521866][T24693] ? __up_read+0x333/0x980 [ 1349.523662][T24693] ? dump_user_range+0x65e/0xad0 [ 1349.525642][T24693] dump_user_range+0x3f9/0xad0 [ 1349.527552][T24693] ? __pfx_dump_user_range+0x10/0x10 [ 1349.529618][T24693] ? __pfx_writenote+0x10/0x10 [ 1349.531562][T24693] ? elf_core_dump+0x2276/0x42f0 [ 1349.533537][T24693] elf_core_dump+0x31f8/0x42f0 [ 1349.535456][T24693] ? __pfx_elf_core_dump+0x10/0x10 [ 1349.537497][T24693] ? __kasan_kmalloc+0xaa/0xb0 [ 1349.539533][T24693] ? __kvmalloc_node_noprof+0x35b/0x9b0 [ 1349.541760][T24693] ? vfs_coredump+0x21f6/0x54a0 [ 1349.543733][T24693] ? get_signal+0x1f2a/0x21e0 [ 1349.545643][T24693] ? arch_do_signal_or_restart+0x91/0x7a0 [ 1349.547912][T24693] ? asm_exc_page_fault+0x26/0x30 [ 1349.549975][T24693] ? lock_acquire+0x1d1/0x380 [ 1349.551898][T24693] ? get_signal+0x1f2a/0x21e0 [ 1349.553796][T24693] ? vfs_coredump+0x281a/0x54a0 [ 1349.555750][T24693] vfs_coredump+0x281a/0x54a0 [ 1349.557568][T24693] ? __pfx_vfs_coredump+0x10/0x10 [ 1349.559587][T24693] ? __lock_acquire+0x5c0/0x1f40 [ 1349.561599][T24693] ? __lock_acquire+0x5c0/0x1f40 [ 1349.563609][T24693] ? lock_acquire+0x1d1/0x380 [ 1349.565494][T24693] ? unwind_next_frame+0xbd/0x2090 [ 1349.567455][T24693] ? lock_acquire+0x1d1/0x380 [ 1349.569030][T24693] ? bpf_ksym_find+0x124/0x1c0 [ 1349.570591][T24693] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1349.572564][T24693] ? arch_stack_walk+0xa6/0xf0 [ 1349.574071][T24693] ? __sigqueue_free+0xbe/0x2a0 [ 1349.575609][T24693] ? stack_trace_save+0x8e/0xc0 [ 1349.577138][T24693] ? __pfx_stack_trace_save+0x10/0x10 [ 1349.579115][T24693] ? stack_depot_save_flags+0x27/0x9f0 [ 1349.580853][T24693] ? __lock_acquire+0x5c0/0x1f40 [ 1349.582479][T24693] ? proc_coredump_connector+0x2d3/0x4f0 [ 1349.584293][T24693] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1349.586226][T24693] ? rcu_is_watching+0x13/0xc0 [ 1349.587914][T24693] get_signal+0x1f2a/0x21e0 [ 1349.589388][T24693] ? __pfx_get_signal+0x10/0x10 [ 1349.591053][T24693] ? __pfx_force_sig_fault+0x10/0x10 [ 1349.592714][T24693] arch_do_signal_or_restart+0x91/0x7a0 [ 1349.594927][T24693] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1349.597353][T24693] irqentry_exit+0x402/0xa10 [ 1349.598824][T24693] asm_exc_page_fault+0x26/0x30 [ 1349.600360][T24693] RIP: 0023:0xf7fc6fec [ 1349.601660][T24693] Code: Unable to access opcode bytes at 0xf7fc6fc2. [ 1349.603774][T24693] RSP: 002b:00000000fffffe70 EFLAGS: 00010282 [ 1349.605741][T24693] RAX: 0000000000000000 RBX: 0000000000008000 RCX: 00000000fffffe70 [ 1349.608216][T24693] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1349.610681][T24693] RBP: 00000000f54025ec R08: 0000000000000000 R09: 0000000000000000 [ 1349.613174][T24693] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1349.615626][T24693] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1349.618078][T24693] [ 1349.619684][T24693] Kernel Offset: disabled [ 1349.621039][T24693] Rebooting in 86400 seconds..