last executing test programs: 7m39.871231747s ago: executing program 1 (id=2744): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x3, 0x3}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r3, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000120005f700000000004a000000000000", @ANYRES32=0x0, @ANYBLOB="1100000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) 7m38.902565348s ago: executing program 1 (id=2747): syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0xbb8) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) dup(r1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 7m37.505465032s ago: executing program 1 (id=2753): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prlimit64(0x0, 0xe, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c0000001a0a010100000000000000000200000609000200a5317a320000000008000440000000006bcc578e0900010073797a300000000008000340000000081400000011000100000000000000"], 0x64}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newtaction={0x70, 0x30, 0x871a15abc695f30d, 0x5, 0x25dfdbfc, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0xff}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0xd, 0x6, 0x7f, 0x4}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x800}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r4, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r5, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x380000}, 0x8) shutdown(r5, 0x1) r6 = syz_open_dev$evdev(&(0x7f0000000180), 0x1, 0xa2242) sendmsg$IPSET_CMD_PROTOCOL(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x4c, 0x1, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000000080)=0xfffffffb) close_range(r1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 7m34.044518737s ago: executing program 1 (id=2766): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 7m33.962097205s ago: executing program 1 (id=2768): socket$kcm(0x10, 0x2, 0x0) ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000080)={0xc, {0x8, 0x5, 0xbb, 0x8}}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x101000) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(0xffffffffffffffff, 0x7aa, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102400, 0x19000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0xff}}, './file0\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) getpid() 7m31.54523704s ago: executing program 1 (id=2777): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prlimit64(0x0, 0xe, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c0000001a0a010100000000000000000200000609000200a5317a320000000008000440000000006bcc578e0900010073797a300000000008000340000000081400000011000100000000000000"], 0x64}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newtaction={0x70, 0x30, 0x871a15abc695f30d, 0x5, 0x25dfdbfc, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0xff}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0xd, 0x6, 0x7f, 0x4}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x800}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r4, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r5, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x380000}, 0x8) shutdown(r5, 0x1) r6 = syz_open_dev$evdev(&(0x7f0000000180), 0x1, 0xa2242) sendmsg$IPSET_CMD_PROTOCOL(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x4c, 0x1, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000000080)=0xfffffffb) close_range(r1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 7m31.159312367s ago: executing program 32 (id=2777): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prlimit64(0x0, 0xe, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c0000001a0a010100000000000000000200000609000200a5317a320000000008000440000000006bcc578e0900010073797a300000000008000340000000081400000011000100000000000000"], 0x64}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newtaction={0x70, 0x30, 0x871a15abc695f30d, 0x5, 0x25dfdbfc, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0xff}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0xd, 0x6, 0x7f, 0x4}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x800}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r4, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r5, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x380000}, 0x8) shutdown(r5, 0x1) r6 = syz_open_dev$evdev(&(0x7f0000000180), 0x1, 0xa2242) sendmsg$IPSET_CMD_PROTOCOL(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x4c, 0x1, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000000080)=0xfffffffb) close_range(r1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 7m4.945916989s ago: executing program 4 (id=2857): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000001c0)}}], 0x1, 0x4c015) accept(r1, 0x0, 0x0) 7m4.61338404s ago: executing program 4 (id=2860): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xfffffffffffffffe) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x5}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2000}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 7m3.610894078s ago: executing program 4 (id=2861): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(r0, &(0x7f0000000000), 0x10) r1 = socket$packet(0x11, 0x2, 0x300) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') memfd_create(0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d", 0x63}], 0x1}, 0x2000000}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x48, 0x83, 0x0, 0x80000001}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000001900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26, 0x0, 0x1, 0xfffffa16}, 0x28) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[], 0xff2e) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x40) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 7m3.610791083s ago: executing program 5 (id=2779): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) 7m3.610424482s ago: executing program 5 (id=2862): r0 = syz_open_procfs(0x0, &(0x7f0000000700)='net/nf_conntrack_expect\x00') fchdir(r0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000380), 0x109000, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x8001, 0x0, 0x0, {0x0, 0x8}, {0x80000000}, {}, {}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8}) ioctl$FBIO_WAITFORVSYNC(r2, 0x40044620, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYRES16=r1, @ANYRES32=r4, @ANYBLOB="1d0206"], 0x4c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', r4}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181003100000002010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@deltaction={0x30, 0x31, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x100800}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000c4}, 0x4000811) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x2916d5fc8d7904b9) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="4c00000044000701fcffffff0000000001790000380004803192a64c0c3bc1a3b2d75fc9cc39d5f53c8652f64d83c3f672794c735fb546", @ANYRESDEC, @ANYRES64], 0x4c}, 0x1, 0x0, 0x0, 0x2404c0c0}, 0xc000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000005c0)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f000840031b000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4", 0xc4}, {&(0x7f0000000480)="df43368e65f36444ec57fe4a8342f4a5cc9eb74cb538c75a6863ca2cb82b32a34805618becd1857903e397fdbccb3d3b06c25f7be54226020aa7695e9a341b6c2ddac77219e02603132c2ab23ea1e3c2cbd20bbec520c0cc28e80046b922ede64babb769441aae391038aa3841b6", 0x6e}], 0x2, 0x0, 0x0, 0x7400}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYRES8=r6, @ANYRES32=0x0, @ANYRESHEX=0x0], 0x9c}, 0x1, 0xba01, 0x0, 0x8884}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000008, 0x1010, r8, 0x0) r10 = socket(0x1e, 0x1, 0x0) sendmsg$kcm(r10, &(0x7f0000000340)={&(0x7f00000001c0)=@sco, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000740)="63b871b1ee53867c84430b8a3f40fc280b6d9083ebe9c6963144b89182721d791165eadfe21294dd4ca0986c0c215cc67638f58c6c3e579e0c36db7657e70f3c43e98f51e1725952748092525b00a122f2329c1c09f83d58f5a734e1e6002bbfcbe811fb350a2ed1e6a670672160d36077e5ec54c9275b9489ff9e4c9689d62feeaae182694e55e9c6899238120101b8792898c5f041744e60c2be86eecc2004afa9a9e0ae9656f86e1fd2f408daeb414b5c4cdf3cc88dcfe28592e49287f656d574135f359cbb513f459436b92759acefe3474e8f983ee4e99b45d3e21dab3b26f1113835119fddd61b56cf0d36375b29ed142229a4e0177ebcb15afb90ece148efd30904e854d57e71ba7967d81e58d233b8c588d2b4464a9d90d62bbb03e306eb3bdcb0df8ea8db98d8", 0x12b}], 0x1}, 0x4008804) getsockopt$bt_l2cap_L2CAP_LM(r10, 0x6, 0x3, 0x0, 0x0) unshare(0x20000400) unshare(0x68020080) r11 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r11, 0x4188aec6, 0x0) 7m1.895166869s ago: executing program 5 (id=2867): syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0xbb8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 7m1.452889772s ago: executing program 33 (id=2867): syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0xbb8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 7m1.428112631s ago: executing program 4 (id=2872): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) 7m1.279561572s ago: executing program 4 (id=2875): openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000001340)=@assoc_value={r1, 0x9}, 0x8) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r2, @ANYBLOB="05", @ANYRES16=r2, @ANYRES16, @ANYRES16], 0x0) 6m58.627166214s ago: executing program 4 (id=2881): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000240)='./file1/file4\x00', &(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2c, 0xfffffffd, {0x60, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xfff1, 0xffff}, {0x0, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="58010000100013042cbd7000f9dbdf25ac1414bb000000000000000000000000e000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc000000000000000000000000000001000000003200000020010000000000000000000000000001000000000000000000000000000000000000000000000000fffffffffffffffffcffffffffffffff0000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000200a2000000000000004c00120072660f343130362867636d2861657329290000000000000000000000000000000000000000000000000000eeff0000000000000000000000000000000000000000000000600000001c0017"], 0x158}}, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 6m58.279856508s ago: executing program 34 (id=2881): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000240)='./file1/file4\x00', &(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2c, 0xfffffffd, {0x60, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xfff1, 0xffff}, {0x0, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="58010000100013042cbd7000f9dbdf25ac1414bb000000000000000000000000e000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc000000000000000000000000000001000000003200000020010000000000000000000000000001000000000000000000000000000000000000000000000000fffffffffffffffffcffffffffffffff0000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000200a2000000000000004c00120072660f343130362867636d2861657329290000000000000000000000000000000000000000000000000000eeff0000000000000000000000000000000000000000000000600000001c0017"], 0x158}}, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 6m12.757623376s ago: executing program 6 (id=3024): r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x4500000000000000, 0x0, 0x4040010}, 0x0) 6m8.955089808s ago: executing program 6 (id=3034): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() socket$xdp(0x2c, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB="9797625adebac9d89530eabbfd283142a3e5d870622d1f88182c56ab98d192068e5b0357b65080da722a3c97a529d859e1afee640971fcd637ee4a54311ce73a6371a327d0d7f97d"], 0x1c}}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x67682, 0x0) fallocate(0xffffffffffffffff, 0x1, 0x0, 0x2000000001062200) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0x6}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xffffffb5}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44004}, 0x0) r8 = syz_open_dev$video4linux(&(0x7f0000000040), 0xd4, 0x10442) ioctl$VIDIOC_SUBDEV_S_CROP(r8, 0xc038563c, &(0x7f0000000000)={0x1, 0x1000000, {0x80000001, 0x0, 0x7f, 0x14efdde2}}) 6m2.364641033s ago: executing program 6 (id=3049): socket$kcm(0x2, 0x5, 0x84) socket$rxrpc(0x21, 0x2, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x14, 0x30, 0x53b, 0x0, 0x0, {0x9}}, 0x14}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000043c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmsg$kcm(r0, 0x0, 0x0) epoll_create(0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x101180) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffe}, 0x0, &(0x7f00000002c0)={0x3fe, 0x5, 0x3, 0x9, 0x8, 0x45ff, 0x7ffffffc, 0x40000000000}, 0x0, 0x0) 6m1.402660585s ago: executing program 6 (id=3053): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000180)="74fa40b249c0d585699ce70fac7b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x100000}, 0x50) 6m0.720028176s ago: executing program 6 (id=3055): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000240)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0xd0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040090}, 0x2400c8c1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40086602, &(0x7f0000000000)) r2 = socket$unix(0x1, 0xffffffffffffffff, 0x0) bind$unix(r2, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e23}, 0x6e) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) readv(r4, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/214, 0xd6}], 0x1) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001e0001eb25bd70000000000001"], 0x114}], 0x1}, 0x0) socket$packet(0x11, 0x7a6f938d2aadffed, 0x300) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x800001, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173", 0x5b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="120101833a466baa02000000bed9206a054400400001020300cb205e78ec4c4bfa739e16fa2fd56009023d000102000000000000007c8856372d752135008001224c0a09058109050203080009e005"], &(0x7f0000000500)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x200, 0x40, 0x7, 0x3, 0x40, 0x4}, 0x17f, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x3, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x1c26}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x812}}]}) r7 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x22402, 0x0) ioctl$IMADDTIMER(r7, 0x80044940, &(0x7f0000000080)=0x14) syz_clone(0x42280280, 0x0, 0x0, 0x0, 0x0, 0x0) read(r7, &(0x7f00000000c0)=""/199, 0xc7) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000000c0)={'ni_at_a2150\x00', [0x4f27, 0x5, 0x10000, 0x2f, 0x66, 0xcc7, 0x8, 0x80007, 0xa, 0x100, 0x9, 0x100, 0x1db, 0x2, 0x0, 0x80000101, 0x5, 0x1a449, 0x3, 0x40020003, 0x208d, 0x2, 0xd27, 0xae, 0x7fff, 0x8, 0x3c, 0x1, 0x6, 0x0, 0x1000000]}) 5m57.532482286s ago: executing program 6 (id=3072): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x43, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) memfd_create(&(0x7f0000000680)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\xccEi\xfb\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee<\x8bw\xdd^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) memfd_create(&(0x7f0000000680)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\xccEi\xfb\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee<\x8bw\xdd^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) fanotify_mark(0xffffffffffffffff, 0x2, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="e1ffffffffffffff00"/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="b0ff04c66b0d698cb89e2fe086dd1f74ffff06000000fe80000000000000ac14140746647b7954c4c06b580febc28eb143d0f6c0bad62c67a04402ba4125c7024f63fdb0b6c8ee826b4dfe6042a2f057c66cad677d850ea9928bcfcb47e585e427746ed3b27c40060cbd030a6d675c9926af53cd3085b24f9b7a486775c4f284f8c5a572ca115bce90c0ee9d4e7a07f5f1518092cb1f156694036f6618a59196631e6303fd5307d1112601d3641c9492f7dc3503416836b14590c53b1fc1ac149b70cc1142d6bc57fc3a76839fa2f96878b520fedfb9f64d81584a2e85ab4f6ec718b02d78f2ebf04e6b3b94610a21616181629a03c3dc0bf05e0a71f887833b81db7a10bc53259cb80716f6804934a411d424c1db98d454be1adb2776fdbb92b299d3b80af6987a871b4549fdb4c8297ee31ad925c8b0fb1a9d2589b08ed52602cbc26b56df71201bc4ea8621c56f33d251c1d4589af2dcd78fbb4e34bde02cb3920a30cee9489ee72c3e19304c16c2110e1839712d484b80abe77786a7e2ba834874a4e16b93dd07297554a06c2ad2c906f8ebb1db8730df096709184728d48f0a806696bd0d4b12d0064b933d9675353dae77fe8419451f85da63be78b70ca2a84a77f572d9f289d4313e6f6039fe756ac13a5d08838315dff44cda433cc7bc6b77449f8c", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) socket(0x200000100000011, 0x3, 0x3) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000002480)={0x2020}, 0x2020) syz_open_dev$evdev(0x0, 0x0, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x74, 0x2}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) r7 = syz_io_uring_setup(0xd1d, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)=""/227, 0xe3}], 0x1}) io_uring_enter(r7, 0x47ba, 0x0, 0x0, 0x0, 0x0) 8.763078927s ago: executing program 7 (id=4282): socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB, @ANYRESDEC=r0, @ANYBLOB="f9d3f7d8311808426ea18c01505b5e9cad7203b954f4bb75ffe47a8bf60fd5", @ANYRES8, @ANYRESDEC=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$rxrpc(0x21, 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x1d, 0x804, 0x0, &(0x7f0000001080)) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = socket(0x2, 0x80805, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) getsockopt$bt_hci(r3, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0xc95e}) r6 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r6, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 6.273237525s ago: executing program 7 (id=4291): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84", 0x15}], 0x2}}], 0x1, 0xc2) r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffddf, &(0x7f0000000000)=ANY=[]) socket$inet6(0xa, 0x1, 0x3) syz_usb_control_io(r0, 0x0, 0x0) 5.573471423s ago: executing program 2 (id=4292): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) getsockname(r1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'bridge0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x4}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14, 0x1, 0x7, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 5.457634171s ago: executing program 2 (id=4293): futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) mknod$loop(0x0, 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e20, @empty}, 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYRES64=r3, @ANYRESDEC, @ANYBLOB="0198000000000000200012800800010067726500140002800800010089"], 0x40}, 0x1, 0x0, 0x0, 0x4814}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1d, 0x2, 0x6) socket(0x1d, 0x2, 0x6) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000000129bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000030620000280012800a000100767863616e00000018000280614bf3cde03d540b", @ANYRES32=0x0, @ANYBLOB="00140200000000000a0003003a712f0756b80000"], 0x54}}, 0x0) r8 = socket(0x10, 0x3, 0x0) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@getqdisc={0x3c, 0x26, 0x800, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x8, 0xfff3}, {0xb, 0xf}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004041}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001180)=@delchain={0x3954, 0x65, 0x204, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x7, 0xf}, {0xffff, 0xe}, {0x7, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x9}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0x4, 0x2}}, @filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x3, 0xb}}, @TCA_ROUTE4_TO={0x8, 0x2, 0x51}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x2c40, 0x2, [@TCA_BPF_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}]}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_CLASSID={0x8, 0x3, {0x4, 0xfff6}}, @TCA_BPF_OPS={{0x6, 0x4, 0x4}, {0x24, 0x5, [{0x8, 0x2, 0x3}, {0x0, 0x2c, 0x7, 0x8c3}, {0x1, 0x5, 0x5}, {0x40, 0x0, 0x8, 0x401}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}, @TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x2244, 0x1, [@m_ctinfo={0x138, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x1}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xa66}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x401}]}, {0xf3, 0x6, "7737d68d688989bdc3a5a1fb67b8f230432546e6dd4af817277f3752a74fe3fd9f551a94b6fc77f79a17fe7eba59c37521f9567f6216e7a66f1a5f1c291c887fba6f8cb46ef34ee070aae4176256d1ced7365ee3f21556ffd367275bfca0e112cf6adb3210359871ec17708d04f411cf332204eaddce91900df5f92043bb869b72c8664e91c2352c04e3a215a2bcbf64b636a3e35b168d7f686a86c5004e092e094d017a4eabf3ef363980f1230936317bf0e2b0ea016db664044dd13946d8516f90d215fd88353d8eabc7eddd79f56f8105eb2875c12dbc8abbdca24ebd4df81bd28314df8ab25311a468dd875bd0"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbedit={0x84, 0x11, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0x8, 0x1, 0xd131}}]}, {0x38, 0x6, "f67ef9c56f5c8418888c5ac2cc7a751fb4fdb068080a50b2db8cfd4cc1ae0ab0c0f5a6cfa8d852f7f0afdabf1b75a3846dfce91c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_police={0xd68, 0x15, 0x0, 0x0, {{0xb}, {0xc4c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffffa}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x7, 0x101, 0xe000, 0xfffffffa, 0x1, 0x6, 0x4, 0xa, 0x2, 0xba3, 0x0, 0x7, 0xe9c, 0x1ff, 0x3, 0x6, 0xfffffffe, 0x8, 0xd08, 0x6, 0x3, 0xffffffff, 0x9, 0xfffffff7, 0x7f, 0x2, 0x2, 0x7ea8, 0x4, 0x100, 0x6, 0x1, 0x4, 0x12000, 0x100, 0x5b3d, 0x4, 0x6, 0x4, 0x4, 0xcb0, 0xfffffffa, 0x8, 0x280, 0x4, 0xbd, 0x2, 0x241, 0x1, 0x2, 0x4, 0xfffffff9, 0x0, 0x0, 0xb, 0xffffffff, 0x9, 0x3bf7, 0x5, 0x6, 0x8, 0x44, 0x3, 0x7fffffff, 0x5, 0xffffffc0, 0x101, 0x9, 0x3, 0x9, 0xffffed53, 0x5, 0x7fff, 0x2, 0x7ba, 0x5, 0x2, 0x10001, 0xb7c3, 0x7, 0xa79, 0x2, 0x10001, 0x4, 0xd, 0xfff, 0x0, 0x969, 0x7e4, 0x3, 0x5, 0x45, 0x9, 0xadb, 0x101, 0x7, 0x800, 0x400, 0xd7e, 0x5, 0x7, 0xc301, 0x7, 0x0, 0x6, 0x6, 0x1, 0x8000, 0x7fffffff, 0x9, 0x2, 0x0, 0x4, 0x8, 0x7c, 0xfffffffe, 0xb619, 0xb260, 0x81, 0x5b, 0x5, 0x4, 0x0, 0x2bb4, 0x7ff, 0x9574, 0x7fff, 0xfffffc00, 0x10, 0x0, 0xbb57, 0x8001, 0x1, 0x4, 0x5e, 0x1, 0x6, 0x3ff, 0x726a, 0x8, 0x2, 0x5, 0x4, 0x6, 0x0, 0x443791d8, 0x81, 0x5, 0x40, 0xee8, 0x80000001, 0x7, 0x9f3, 0xdcb5, 0x800, 0x0, 0x24000, 0x6, 0x40, 0x0, 0x94, 0x1, 0x100, 0xcfe2, 0x1, 0x1a0, 0x2, 0x5, 0x3ff, 0x46d, 0x8000, 0x83, 0xde1, 0x7, 0x4, 0x400, 0x5, 0x2, 0x5, 0x1000, 0x857, 0xe1b, 0xfffffff9, 0x3, 0x4, 0x3, 0x5a, 0x5, 0x6, 0x7ff, 0x80000001, 0x7, 0xffffffff, 0x8, 0x1, 0x26, 0x8, 0x5, 0xf, 0x1, 0x0, 0xcc, 0x6, 0x4, 0x7, 0xfffffffd, 0x80, 0x2, 0x8, 0x5, 0xbabb, 0x0, 0xf, 0x5, 0x7, 0xf6, 0x2743, 0xf35f, 0xc11a, 0xfffffffb, 0x4, 0x5, 0x0, 0x6, 0x0, 0x55, 0x9, 0x6, 0xe, 0x5, 0x7fffffff, 0x7, 0x1, 0xa44, 0xc, 0x4, 0x7, 0x9, 0x4, 0x7, 0x7, 0x401, 0x8, 0x1ff, 0x6, 0x4, 0x101, 0x2, 0x5, 0x3, 0x5, 0x4, 0x2, 0x7, 0x80000001]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x8, 0x47, 0xffffffff, 0x3, 0xfffff000, 0xe9e, 0x7a62e331, 0x9, 0x5, 0x4, 0x3, 0x1000, 0x4, 0x0, 0x400, 0x8, 0xfffffe01, 0xae2, 0x80000000, 0x4, 0x3, 0x9, 0x1ff, 0xa, 0xffff, 0xf1c, 0x0, 0x4, 0xffffff70, 0x8, 0x401, 0x1, 0xfa, 0x10001, 0x7, 0x1000, 0x80000001, 0xb208, 0x8, 0x1, 0x8, 0x3, 0x6, 0xe9, 0x6, 0xf, 0x6, 0x0, 0x53, 0x5, 0x7, 0x8, 0x6, 0x8, 0xffffff7f, 0x4, 0x9644, 0x4, 0xd, 0x8, 0x4, 0x3, 0x81, 0x80000000, 0x10, 0x8, 0xe, 0x1, 0x0, 0x2800000, 0xab, 0x8, 0x6, 0xc, 0x8, 0x1, 0x81, 0x7ff, 0x8, 0x7, 0xb36, 0x7, 0x400, 0xffffffff, 0x3, 0x9, 0x3, 0x311d, 0x3, 0x5, 0x8001, 0x3, 0x5, 0x7f, 0x4, 0x8, 0x1, 0x7fffffff, 0x0, 0x7b, 0x3cc2ce71, 0x9, 0x7, 0x524b14d4, 0x8, 0x2, 0x0, 0x7, 0x5, 0x3ff, 0x7, 0x0, 0x3, 0xf, 0x2, 0x1, 0xdf, 0x8, 0xffffffea, 0x1441a8d1, 0x7ff, 0x9, 0x75a04469, 0x3e11, 0x14, 0x3, 0xffffff5c, 0x1, 0x3, 0x8, 0xff, 0xfffeffff, 0x4, 0x4, 0x9, 0xffff0000, 0xffff, 0x9, 0x8, 0x80000000, 0x85, 0x3, 0x0, 0x2, 0x101, 0x10000, 0x0, 0x1, 0xfffffff2, 0x3, 0x6, 0x3, 0x0, 0x4, 0x0, 0x10001, 0x1, 0x61bc, 0x80000001, 0x2, 0x1, 0x5, 0x9, 0x7, 0x3, 0x9, 0x52b, 0x9, 0x9, 0x1000, 0x9, 0x2, 0x6000000, 0xcc, 0x80000000, 0x1, 0x7ce, 0x3, 0x2, 0x1, 0x1e33, 0x0, 0x57e, 0x1, 0x1000, 0x2, 0x4, 0x1, 0x2, 0x101, 0xea, 0xc2, 0x6, 0x8, 0x8c, 0x6, 0x8000, 0x9, 0x72, 0x7ff, 0x6, 0x3, 0x4bd, 0x6, 0x3, 0xb265, 0x1, 0x5, 0x4, 0xfffffffa, 0x0, 0x3, 0x41a5, 0x1000, 0x9, 0x200, 0xffffffad, 0xe, 0xc5, 0x1, 0x7, 0x9bc, 0x9, 0x6, 0xffffffb3, 0x1, 0x4, 0x9, 0xa4d, 0x4, 0xa8d6, 0x8000, 0x9, 0x8, 0x1ff, 0x3, 0xffff8000, 0x97, 0x6, 0x40, 0xfffffffd, 0x3, 0x9, 0x1, 0x7, 0x5, 0x3ff, 0x4, 0x4, 0x0, 0x7, 0x1, 0x1151, 0xc, 0x61]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8ad}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xd1, 0x0, 0x4f8, 0x3, 0x80000001, 0x6, 0xfffffffe, 0x5, 0x0, 0x5, 0x9, 0x5, 0x7ff, 0x7f, 0x1, 0x8, 0x8, 0xfffffff8, 0x7, 0x8, 0x1, 0x8, 0xe, 0xfff, 0x2, 0xec, 0x1ff, 0x7, 0x666, 0x10, 0x7, 0xfffffffa, 0x4, 0x4, 0x4, 0x5, 0xfff, 0x8001, 0x5, 0x9, 0x2, 0xe, 0x1, 0x8, 0xe, 0xb, 0x7, 0xb1f3, 0x6, 0xe70f, 0xffff, 0x6, 0xf83, 0x4, 0x6, 0xe5, 0x9, 0x0, 0x40, 0x8, 0x9, 0x8, 0x7ff, 0x2, 0x0, 0x1, 0x4, 0x400, 0x5, 0x7ff, 0x6, 0x9, 0xcb, 0x0, 0x2, 0x80, 0x0, 0x7, 0xcd, 0x640cfbb, 0xfffffff8, 0xe25, 0x8, 0x2, 0xffffffff, 0x0, 0xa, 0x80000000, 0x6, 0x71f, 0xffffffff, 0x5, 0x401, 0x4, 0x0, 0x6, 0x6, 0x5, 0x4, 0x0, 0x7c, 0x3, 0x0, 0x6, 0x37395a5c, 0x8, 0x1, 0x3, 0x7, 0x400, 0x10, 0x0, 0x9, 0xfffffe00, 0x7, 0xb, 0xbc, 0xe, 0x71ab, 0x1ff, 0x4, 0x400, 0x3370, 0x56, 0xfffffffa, 0x5, 0x8, 0x1, 0x19, 0x40, 0x0, 0x800, 0x4, 0x5, 0x7, 0x8000, 0xfffffffb, 0x4d1dd23e, 0x9, 0xda0, 0xffff187d, 0x2, 0x2703, 0xfff, 0x7, 0xe, 0x6, 0x5, 0x8, 0x8, 0x10, 0x7, 0x4, 0x9, 0x7, 0x4, 0x8, 0x1, 0x0, 0x6, 0x5a20, 0x8db, 0x2, 0x2, 0x1, 0x8001, 0xa, 0x3, 0x5, 0x3, 0x4, 0x8000, 0x401, 0xd2, 0xffffffff, 0x2, 0xcca, 0xb, 0x1, 0x2, 0x2, 0x7, 0x8, 0x3, 0x4, 0x546c, 0x7, 0x30000000, 0x823, 0x6, 0x8, 0x2, 0x2, 0xffffffff, 0xceb, 0x5, 0x6, 0x3, 0x4, 0x4, 0x401, 0x6, 0x2, 0x3, 0x2a, 0x1, 0x9, 0x8, 0xfffffffa, 0x2, 0x4, 0x9, 0x0, 0x7b99, 0x9, 0x1, 0xb, 0x0, 0x101, 0x90, 0x1, 0x9, 0x289cd27a, 0x3, 0x6d, 0x8c9a, 0x9, 0x7, 0xc1, 0xffffffff, 0x80, 0x0, 0x0, 0x5, 0x0, 0x6, 0x5, 0x7, 0x2, 0x5, 0xfffffffa, 0xe711, 0xc6e, 0x8, 0xc6a9036, 0x7c5a, 0x6, 0x8, 0x2b1, 0x5, 0x1c, 0x1, 0xfff, 0x0, 0x8]}]]}, {0xf2, 0x6, "5e3d0e8df15f5d953e919f901ad197dfb7f9d72906529208520876dce679dc51419c4583c3900753c7de78bb61a5b2ee051ac1ebd26e7fe3e914cbdb54596a6fa2461c211d21de8e1e6bed5ae9984b2294b226d3be3b6e86f77f33d72e918fe8aaac314ebcb44277c9c0e0130bd5d64f7ae570881798336f6b3f21199c49d9e3cdc169b419bb31d738935b93aa993a2194b02910f296df50149cc1f705b8d01dc27ea5990daa907929c65223aa6e885cfebea5d6da0b1a52d13c423be5ea56659703de34e7979da4a770612ca2027a414fd0a365dd0ef4dce185c609f3517acb7e6cf7701e69172d2c1d5b1c5dc5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbedit={0x1070, 0x15, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0xfffffff8, 0x2, 0x6, 0xffff, 0x5}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7ff, 0x1, 0x3, 0x6, 0x4bec}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xe66f}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xa, 0xfff3}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_csum={0x15c, 0x15, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x8, 0x1, 0xb, 0x13}, 0x53}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x658c, 0x3, 0x1, 0x101, 0x92}, 0x5}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d, 0x10000, 0x5, 0x8, 0x4}, 0x11}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x19d9, 0x487, 0x0, 0x1497, 0x2}, 0x20}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x0, 0x2, 0x9, 0x7}, 0x59}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xdd, 0x9, 0x8, 0xc7b, 0x8}, 0xc}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9f, 0x9a2, 0x20000000, 0x160}, 0x25}}]}, {0x6c, 0x6, "c04f1f6109ba9becb3180356e8b7738c8db159a4e5760de992cb507fd76bf0d2035cab907ba09412ac4fc62fbd1f41528e59c831d95306441527c54869c6b0fb35fafe065dfb0667dd1610e0fa6b3c0065ce729dc8dad2e6524442971e9df42f608f422a160d55dd"}, {0xc}, {0xc, 0x8, {0x1, 0x702f587849d35c41}}}}, @m_vlan={0x150, 0xe, 0x0, 0x0, {{0x9}, {0x2c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xeef}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x66}]}, {0xfb, 0x6, "4506377d56358a6ff9b24ce5b1cf7509016e7537360ea53d9937eaf0258bdebeeb3b4d4f122466776620830b11e5378aeeab09088955a78273d3a3b795ed2bd7cec607b4f6b0097933ffccff970bda1067ccd65dabd8e7ebb159940fafd788e2288055a7f6f8dff0fa6c9950aea0a7cf810f9966e5bebe2054edf20bdc10abec540124e7593746f4e96dfe08f889178872db45b22117ad5b331e94f347a8e87c816fc70167cbd5842a98f8cd4b4738216d50e923ecdd40e4c9a445b6b067f12a3e0a2025d61f0e6283fb05e1aaeb3fedb2cd2214eafed44073356624ec8f7e3c4afaa951851fcccbd1bba8b8bdd78f052b27e8c4ca4004"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_BPF_POLICE={0x408, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0xa537, 0x7, 0x5c5, 0xdd, 0x5, 0x3, 0x9, 0x0, 0x8001, 0x6fc2, 0x2, 0x7f, 0xdcf, 0x0, 0x9, 0x5a, 0x0, 0x0, 0x2, 0x4, 0x4, 0xf, 0x7, 0x10, 0x7f, 0xc, 0x9, 0x5, 0x8, 0x6, 0xcb7, 0xffffffff, 0x74e7bd62, 0x5, 0x5, 0x5, 0x401, 0x5, 0x81, 0x81, 0x0, 0x200, 0xfd1, 0xfffffffe, 0xf, 0x80, 0x0, 0x3, 0x100000, 0x10001, 0x31c1, 0x3, 0x3, 0x3, 0x3e4a, 0x7ff, 0x1, 0x4, 0x4, 0x7ff, 0x9, 0xfffffff9, 0xfffffff6, 0x10, 0x8, 0x100, 0x7fff, 0xfffffffe, 0x8, 0x874, 0xc746, 0xff, 0x8000, 0x6, 0x9, 0xfffffff8, 0x0, 0x7f15, 0x100, 0x6, 0x9, 0x6, 0x5, 0x5, 0x503, 0xf938, 0x1, 0x4d0, 0x4, 0x8, 0x4, 0x401, 0x9, 0x88, 0x1, 0x69996d75, 0x2, 0xf, 0x3, 0x5, 0x1000, 0x1, 0x0, 0x5, 0xfffffbff, 0x1, 0x3, 0xd5, 0x6, 0x6, 0xa70d, 0x1, 0x9, 0xe, 0xeb, 0x8, 0xa925, 0xfff, 0xf, 0x8, 0x7, 0xbb, 0x8, 0x7, 0x4, 0x3, 0xfffffffd, 0x7, 0x9b, 0xa00000, 0x3, 0x7fffffff, 0x75, 0x3, 0x5, 0x9, 0x6, 0x7, 0x7f, 0x40, 0x0, 0x8, 0xf34, 0x3, 0x41a7, 0xe3, 0x5, 0xfffff801, 0x0, 0x2e89, 0x40, 0xfff, 0x1ff, 0x7, 0x7ff, 0xb, 0x9, 0xfb, 0x10000, 0xfffffffb, 0x8, 0x3, 0x8, 0x71b6, 0x3, 0x4, 0x3, 0xe3c1, 0x71afa339, 0x0, 0xffffffff, 0x8, 0x400, 0x3, 0xfffffffb, 0x401, 0x596, 0xf5, 0xa06, 0x7, 0x7, 0x1000, 0xbe5a, 0x0, 0x9c9, 0x3, 0x6, 0x8, 0x6, 0x8000, 0x8, 0xc, 0x0, 0xfffffffb, 0x6, 0xd, 0x9, 0x9, 0x6, 0x7, 0x9, 0xa000000, 0x9, 0xffffff81, 0x3, 0x9, 0xe14b, 0x3, 0xd, 0x0, 0x3, 0x7, 0x9, 0x0, 0x8000, 0xdda, 0x1, 0x9f, 0x5, 0x5, 0xe, 0x40, 0x582a, 0x6c5e, 0x0, 0x0, 0x80000001, 0x7, 0x8, 0xfffffffa, 0x10, 0x9, 0x8001, 0xfffffffd, 0x7, 0x9, 0x4, 0xd, 0x7, 0x2, 0x9, 0x10000, 0x7fffffff, 0x2, 0x6, 0x5, 0x5, 0x8, 0x10, 0x7, 0x6, 0x7, 0x5, 0xf, 0x9, 0x2]}]}, @TCA_BPF_ACT={0x58c, 0x1, [@m_gact={0x158, 0x8, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0xc1e, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0xffffffff, 0x9, 0xffffffffffffffff, 0x5, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1ed6, 0x10000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1a46, 0x20000000}}]}, {0xee, 0x6, "54a7d0241762f986fcedbc5fd98a890838c78f72a8f4b9a02db3b107ef382d1aa42d1f60f2d86d22a8fe0b527a6dd7eed6decd03dc2d58836043051f79616372a16ca7b477779342d06e0bc6d9cf181f31a5301f4557a61b66567981a9245a927f011f5350e857dca851c77898505cd1f74fbcaa121822fecf2dc56b1ad4620f351f20378b0331336f675c119de503e11801bab93eebbf7e9aac4a8aeac6c11db68f39078514ee96bef3883ba600d4e6d00064ba8618bebd2045caab5b3272810b869d279e0415193ff49ea92fa267ca9c180e92d18977798d1301e789e23de504782e86c373466c190b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mpls={0xb0, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x5}]}, {0x7b, 0x6, "958cac3cc39cb9a139f0489b9dc44d9aab2d55c3c557507ba3362d51abfa4817c836bd04d0057803bffdb008d440380d7e8a082ad2a8c5086cf25447925005277816045e8d692166eea0658e8014f003a96ca247588f5671a92f463bc06a16baf65e2673e28faaf6d0fc0167f3a8ffea2793774745bcc3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_pedit={0x2a0, 0xc, 0x0, 0x0, {{0xa}, {0x1f8, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x12c, 0x5, 0x0, 0x1, [{0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}]}, @TCA_PEDIT_KEYS_EX={0x78, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_KEYS_EX={0x50, 0x5, 0x0, 0x1, [{0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x7e, 0x6, "d8abc90bfddff5c7bcc83ba37fd27569d0c90a6dcb50a2ad5fe7e1c27fab1b835ee14154deb8c4736a1fd4af817cb6799e90c32f7605a4c753cf9af5e1281fb24feb1b1bd9d7424597417be9f520ce310633ff102f89b40961e7afe2e116b1a24e88141fe9fb915f7550c469ce9ac1a77a846c7f18c735cf4353"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_sample={0xe0, 0x10, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x773}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xffffff97, 0x4, 0xffffffffffffffff, 0xfffffffe, 0x5}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x2b}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7fffffff}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x8}]}, {0x7a, 0x6, "a6b75cfbee94f7d866cbc070628473b82e386e0b9bf5badd06bc8c2ec3295e5c4eae4d700ca83a66611af821eff0532598d1c442bb4dd154076a6ec9df946cb4d610fdbdbcae7385db479b8c16bf327f5242d8391842b6be97de3485514a695ae5b811f2e3a9b9f5d7b7fb42df858b4a297dc5866cc2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}, @filter_kind_options=@f_u32={{0x8}, {0xca0, 0x2, [@TCA_U32_ACT={0x14c, 0x7, [@m_connmark={0x148, 0x11, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6a7a, 0x4, 0x1, 0x1000, 0xffffadb5}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x8, 0x3, 0x3}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xcf8, 0xcf, 0x1, 0x2, 0x3}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7fff, 0x10000, 0x7, 0x7, 0x3}, 0x36}}]}, {0xa7, 0x6, "f9f60ba826dbe41e647bf34067f08303f0d40678a129ed60d3d93d74426fb062c44edc648112e6460129eb94041e5ccabe03366cd192c7574efd586e3e2d7536f7d54efd438f01a6c79382bc836afe55c8c0c323b88d012f5ec61378e9feead0a407d3ef958ce079193958a87a8132e1f00068fa1b19985c004a000ab183609ad487f567d45bd4885eb18e99e1704bf255eb3c2c33a663b53cac7409d20498e31ee806"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}, @TCA_U32_SEL={0x414, 0x5, {0x0, 0x8e, 0x3, 0x8, 0x8, 0x800, 0x2, 0x274d, [{0x5, 0x7, 0x0, 0x9}, {0xffffffff, 0x7, 0x2, 0x3}, {0x9, 0x5, 0x7, 0x7}, {0x80000001, 0x5, 0x7ff, 0x1}, {0x7ff, 0xd, 0x9, 0x4}, {0x1b, 0x42, 0x7, 0x4}, {0x80000001, 0xffff0000, 0x27, 0x9}, {0x9, 0x5, 0x1, 0x6a33}, {0x7ff, 0x1, 0x0, 0x900000}, {0x28, 0x6, 0xeec6, 0x1}, {0x1, 0x40, 0x8, 0x1917a4f0}, {0x41, 0xac6, 0x9, 0x6}, {0x800, 0x6, 0x2, 0x4}, {0x5, 0x5, 0x3, 0x8}, {0x71830cda, 0x8000000, 0x8, 0x6}, {0xf2, 0x40, 0x7, 0x200}, {0x1, 0x3, 0x109c, 0x3f}, {0x2, 0x633b, 0x80, 0x8}, {0x4, 0x1, 0x3, 0x80000000}, {0x6, 0x64bd, 0x9, 0x5}, {0x5, 0x6767, 0x0, 0xd}, {0x1, 0x8000, 0x7fff, 0x1}, {0x13b, 0x8, 0xf3}, {0x9, 0x4, 0x1, 0x6dfe}, {0x10000, 0xd, 0x79a, 0x8}, {0x3, 0x100, 0x3, 0x80}, {0x91, 0x4, 0xc, 0x7}, {0xc54, 0x1, 0x8a1b, 0xc7}, {0x10001, 0x2, 0x1, 0x3}, {0x6, 0x0, 0x3, 0x5}, {0x2, 0x1ff, 0x1, 0xe}, {0x1, 0x30, 0x80000001, 0x6}, {0x4, 0x80, 0x5, 0x1}, {0x9, 0x37f, 0x100, 0x80000001}, {0x0, 0x2, 0x9, 0x4}, {0x4, 0x2, 0x0, 0x3}, {0x5, 0xaf, 0x7643, 0x7f}, {0x3, 0x7, 0x1, 0x9}, {0x1, 0x10001, 0xff}, {0x3, 0x7763447a, 0x1, 0x6}, {0x101, 0x13f, 0x8, 0x1}, {0x80000001, 0x100, 0x81, 0x6}, {0x7, 0xffff}, {0x0, 0x3, 0x7b4b, 0xa}, {0x80000001, 0xc3, 0x51b8, 0x1}, {0xa, 0x5, 0x4, 0x7}, {0x3, 0xd, 0x0, 0x81}, {0x7, 0x6, 0x80000000}, {0x0, 0x9, 0x5}, {0xffff, 0x9, 0xffff9d67, 0x9}, {0x62cfa385, 0x9, 0xc6, 0xc82}, {0x4, 0xccb, 0x0, 0x7}, {0x5, 0x3, 0xcaeb, 0x70e}, {0x9, 0x81, 0x7f, 0x8}, {0x4, 0x8, 0x7fff, 0x4}, {0x0, 0xbd63, 0x10001, 0xec}, {0x9, 0x101, 0x6, 0x816}, {0x2, 0x2, 0x68000000}, {0x800, 0x8000, 0x5}, {0x58, 0x7, 0x9, 0x7ff}, {0x3, 0x5, 0x3, 0x8}, {0x7, 0xffff, 0x0, 0x1ff}, {0x4, 0x3, 0x81, 0x3}, {0x5, 0xffffffff, 0x4}]}}, @TCA_U32_FLAGS={0x8, 0xb, 0x4}, @TCA_U32_SEL={0x734, 0x5, {0x8, 0xf1, 0xb7, 0x5, 0x3, 0x2, 0x0, 0x48, [{0xca8, 0x200, 0xe3a, 0x8}, {0x7ff, 0x2, 0xff, 0x8}, {0x10001, 0x4, 0xa34, 0x101}, {0x6, 0x80000001, 0x0, 0x2}, {0x7, 0x8, 0x7ddb, 0x2}, {0x1000, 0x3, 0x80, 0x8001}, {0x8, 0x4, 0x200, 0xfff}, {0x4, 0x4, 0xffff, 0x5}, {0xb51, 0x200, 0x7, 0x7ff}, {0xfffffffe, 0x40, 0x8001}, {0x5, 0x5, 0x4, 0x2}, {0x5, 0x5, 0x8, 0xfffeffff}, {0x5, 0x0, 0xffff, 0x8}, {0xd84, 0x10, 0x80, 0x5}, {0x9, 0x1, 0x1}, {0x400, 0x800, 0x5, 0xc}, {0x2, 0x6, 0x3, 0xfffffff8}, {0x3, 0x9, 0x4b7f}, {0x4, 0x7, 0x4, 0x6}, {0x1, 0x7, 0x4, 0xcf}, {0x1, 0x2, 0x5}, {0x8, 0x6, 0x6, 0xff}, {0x40, 0xbd3, 0x92, 0x1000}, {0xffff, 0x9, 0x3, 0x9}, {0x5, 0x4, 0x5}, {0x1, 0xfffffffb, 0x7ae273cd, 0x7fffffff}, {0x3, 0xf, 0xc0000, 0x6}, {0x2b00, 0x9, 0x7, 0x79}, {0x200, 0x0, 0x6}, {0x101, 0x8, 0xa, 0x1}, {0xfffff005, 0xffff, 0x7, 0x18e357c5}, {0x8001, 0xfffffffc, 0x8000, 0xfffeffff}, {0x80000000, 0x5, 0x54c3aec0, 0x7}, {0x8, 0x8, 0x80000000, 0x4}, {0x2, 0x5, 0x1, 0x1}, {0x80000001, 0x5, 0x6, 0x5}, {0x8, 0x1, 0x3, 0x5}, {0x3, 0x8, 0x8000, 0x5}, {0x4, 0x200, 0x7000, 0x1}, {0xe, 0xa, 0x401, 0x3}, {0x6, 0x607a, 0x4, 0xe}, {0x5, 0x6, 0x7f, 0x7}, {0x9, 0xaa, 0x2, 0xe7}, {0x2, 0xd, 0x10001, 0x100}, {0x99c9, 0x40, 0x4, 0x2}, {0xabf8, 0x9, 0xd4, 0x2}, {0x3, 0x80000000, 0x8, 0x3}, {0x24000, 0x6, 0x10001, 0x48}, {0x5, 0x8, 0x200}, {0x3, 0x9038, 0x8, 0x6}, {0x1, 0x5, 0x80000000, 0x3}, {0x4, 0x67f, 0x0, 0x400}, {0x9, 0x4, 0xfffffffe, 0x5}, {0x6, 0x9, 0x5, 0x80}, {0x5, 0x7120b0f6, 0x9, 0xa}, {0x3, 0xfffe0000, 0x1, 0xba}, {0x7, 0x5, 0xfffff47a, 0x9}, {0x6d7, 0x4, 0x1000, 0x8d}, {0x2e6f, 0x9, 0x1, 0x1}, {0x5, 0x5, 0x8001, 0x4be7}, {0x8, 0x2, 0x10, 0x1}, {0x7, 0x8001, 0x5, 0x1000}, {0x3, 0x1, 0x1, 0x3}, {0xfffff801, 0x3ff, 0x1, 0x4}, {0x8, 0x5, 0xac, 0x9}, {0x7fff, 0x3ca7400, 0x4, 0x144}, {0x7, 0x4394, 0x4, 0x3}, {0x0, 0x2, 0x1000, 0x800}, {0x6, 0x6, 0x2, 0x1}, {0x0, 0x200, 0x7, 0x101}, {0x80000000, 0x6, 0x3, 0x80000000}, {0x6, 0xa, 0x2bc7d85, 0x7fff}, {0x9, 0x5, 0xfffffffd, 0x7ff}, {0xce3, 0x3, 0x8, 0x6}, {0x9, 0xd3f, 0xffffeab7, 0x2}, {0x6, 0x7, 0xa70, 0xffffff01}, {0x6, 0x5, 0x1, 0x8}, {0x0, 0x8, 0xfffffe01, 0x9}, {0x7, 0x2, 0x800, 0x8}, {0x1, 0xfffffff7, 0x4, 0x8}, {0xb, 0xfffffff3, 0xd7, 0x4}, {0x3, 0x8000, 0x2, 0x3}, {0xc4e, 0xe, 0x5}, {0xaad1, 0x12, 0x8, 0x10001}, {0x40, 0xa, 0x10000000, 0x6}, {0x5, 0xfffffffe, 0xd, 0x1}, {0x6, 0x81, 0x2, 0x5}, {0x3, 0x7, 0xff, 0x4}, {0x8, 0x400, 0x2, 0x3}, {0xe, 0x5, 0x401, 0x7fffffff}, {0xbf, 0x9, 0x5, 0x9}, {0x0, 0x7, 0x2, 0x10001}, {0x100, 0x9, 0x1ff, 0x1}, {0x2, 0x7ff, 0x0, 0x200}, {0x43, 0xfffeffff, 0xffffffde, 0x40}, {0x810, 0x7fffffff, 0x3, 0x5}, {0x8421, 0x80000000, 0x0, 0x3ff}, {0xf3, 0xffff, 0x6, 0x800}, {0x8, 0xe5, 0x1, 0x6}, {0x6, 0x80000001, 0x9, 0x3}, {0x7, 0x0, 0x80000001, 0x5}, {0x1000, 0x1, 0x6, 0x7fff}, {0xfffffc00, 0x4, 0x1, 0xffff}, {0xb4, 0x80000001, 0x2, 0x3}, {0x4cf, 0x0, 0x3, 0x2}, {0x163d, 0x7ff, 0x9, 0x20000}, {0x5, 0x0, 0x2d}, {0x4, 0x1ef, 0xffffe04c}, {0xf091, 0xfffffff7, 0x7, 0xfffffff7}, {0x3, 0x0, 0x9, 0x8}, {0xfffffff9, 0xc, 0x10}, {0x3, 0xfe6, 0x6, 0x7}, {0x3, 0x7fff, 0xfffffff8, 0x3ff}, {0x9, 0x4, 0xff, 0x9}]}}]}}]}, 0x3954}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) sendto$inet(r7, 0x0, 0x0, 0x400c090, &(0x7f0000e68000)={0x2, 0x4e1f, @multicast2}, 0x10) fstatfs(0xffffffffffffffff, &(0x7f0000000000)=""/47) 5.361642651s ago: executing program 0 (id=4295): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x5c00000000000000) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 5.02169778s ago: executing program 3 (id=4296): setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000240)=0x8000, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900"], 0x7c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan1\x00'}) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000100)=0x6) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14c}}, 0x40880) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x24}, 0x94) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @private0}, 0x1c) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r6, &(0x7f0000000080), 0x12) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="070000000000000000000800000008000300", @ANYRES32=r7], 0x1c}}, 0x0) 4.579110365s ago: executing program 3 (id=4298): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, 0x0, 0x190) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r2) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000220000000a0001007770616e3070000005002000000004000500200000000000050020000000000009001f"], 0x44}}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xef, &(0x7f0000000100)=[{}], 0x8, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x1d, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="44000000094021265cce9466de7290d2b9c81f1abd402af7905fc11427f0f4b19752c79b848aa7aa43ab88b860134f93656ea71190a5d2ff3bd95093b0bc675698a46906e901eedcf3a778fee9dd50d9554f81267f14537acc33704df8c944d44d6788b895facc2ee5a370a78d971ee304107024ce77c76a356fb7340d91ea23f6274afd0b6dfcdd82376dce757366bfdd77c7c9d2d7bff58825b5083a476ccc509978d9c33d732428fb829bd5dd3babf57428ee893d105d67f0ab4ab1e8c73acd5ea7dda3a1e0005648f1077e7be5eccacaa1e0e103eb37eb0d33d753cb", @ANYRES16=r4, @ANYBLOB="01002cbd7000000000001400000020000180140002006e657464657673696d3000000000000008000100", @ANYRES32=r5, @ANYBLOB="05001900010000000500180001000000"], 0x44}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r1) 4.5638676s ago: executing program 3 (id=4299): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, 0x0, 0x0) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x3e1f}, 0x3c) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c5602117436c37900000000214e000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000000224e0000", 0x58}], 0x1) 4.526672501s ago: executing program 0 (id=4300): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) readv(r0, &(0x7f0000000040), 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x28) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r7, 0x701, 0x70bd25, 0x0, {0x5}}, 0x14}, 0x1, 0xf0ffffffffffff, 0x0, 0x20004074}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7611c0014000020b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500020000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x401}, 0x10}, 0x94) 4.422923914s ago: executing program 3 (id=4301): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) pipe2$9p(0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001280)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x1, 0x0, 0xfffc, 0x0, 0x6, 0x6}, 0x0, 0x1e00}}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x664e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x737, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xe, 0x3, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0) 3.555479608s ago: executing program 0 (id=4303): r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1, 0xb}) 3.511039591s ago: executing program 8 (id=4304): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'veth1_virt_wifi\x00', 0x0}) sendto$packet(r1, &(0x7f00000000c0)="c80522dc46", 0x5, 0x8000, &(0x7f0000000200)={0x11, 0x88a8, r3, 0x1, 0x7, 0x6, @broadcast}, 0x14) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c) (async) socket$packet(0x11, 0x2, 0x300) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'veth1_virt_wifi\x00'}) (async) sendto$packet(r1, &(0x7f00000000c0)="c80522dc46", 0x5, 0x8000, &(0x7f0000000200)={0x11, 0x88a8, r3, 0x1, 0x7, 0x6, @broadcast}, 0x14) (async) 3.418505193s ago: executing program 0 (id=4305): socket$kcm(0x10, 0x2, 0x0) ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000080)={0xc, {0x8, 0x5, 0xbb, 0x8}}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x101000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x9000000) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x2ea3c1, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r3, 0x40384708, &(0x7f0000000040)={0x1, 0x1, 0x80d8, 0x3f, 0x15, "3eccee2b69e20900"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, 0x0, &(0x7f00000002c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x5a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) prlimit64(0xffffffffffffffff, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) socket$netlink(0x10, 0x3, 0xc) 3.251731353s ago: executing program 8 (id=4306): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0x1, 0xfff8, 0x335e, 0x4}, 'syz1\x00', 0x31}) (fail_nth: 1) 2.921044305s ago: executing program 2 (id=4307): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1d}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa, 0x11, @local}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40c0}, 0x20004055) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r6 = socket$tipc(0x1e, 0x5, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) bind$tipc(r6, &(0x7f0000000340)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x100000}}, 0x10) r7 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9, 0x0, 0xfffffffe}, &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r7, 0xdb4, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5a6e41dea43e63a3f70cff11c72b", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.920670387s ago: executing program 7 (id=4308): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = accept(r1, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 2.663692172s ago: executing program 8 (id=4309): r0 = syz_open_dev$dri(0x0, 0x40100001, 0x189002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c80)={&(0x7f0000000bc0)=ANY=[@ANYRES16=r0], &(0x7f0000000c40)=""/3, 0x26, 0x3, 0x1, 0x1}, 0x28) syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r6 = fanotify_init(0xf00, 0x1000) fanotify_mark(r6, 0x105, 0x5000003a, r5, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) epoll_create(0x6) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2020) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002080)=ANY=[@ANYBLOB="180000000114010b0025bd7000fedbdf2508080100020000"], 0x18}, 0x1, 0x0, 0x0, 0x44}, 0x4044080) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002440)={&(0x7f0000002140)={0x1b8, 0x0, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_NAT_DST={0x84, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @remote}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}, @CTA_TUPLE_REPLY={0x80, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_TUPLE_MASTER={0x40, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_ID={0x8}, @CTA_STATUS_MASK={0x8}, @CTA_FILTER={0x44, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xb0}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x442}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xa00}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x801}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x64c}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x800}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_MASTER={0x4}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x60010}, 0x8080) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x181740, 0x0) 2.662365525s ago: executing program 7 (id=4310): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) setsockopt$MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000040)={{0xa, 0x4e23, 0x5, @mcast1, 0x1000}, {0xa, 0x4e23, 0xfffffffa, @local, 0x6}, 0x0, {[0x7fff, 0x3, 0x5, 0x6, 0x10000, 0xe505, 0x2, 0xb]}}, 0x5c) fcntl$setstatus(r0, 0x4, 0x800) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x62d281f9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, {{@in6=@private0, 0x4d5, 0x32}, 0x0, @in6=@loopback, 0x3501, 0x3, 0x0, 0xb7, 0x1fb, 0xffffffff}}, 0xe8) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x1c, 0x8, 0x40, 0x42, 0x1}, 0x50) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfe, 0x40}, 0xc) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r1) sendmmsg(r6, &(0x7f0000000180), 0x400000000000077, 0x7600) sendmmsg$inet6(r2, &(0x7f0000000f40)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x1d}, 0xa}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000022c0)='t', 0x1}], 0x1}}], 0x1, 0x40c4) setsockopt$inet6_int(r2, 0x29, 0x43, &(0x7f00000000c0)=0x7f, 0x4) io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x8, 0x0, 0x0) dup3(r2, 0xffffffffffffffff, 0x80000) ioctl$TCXONC(r0, 0x540a, 0x1) 1.773154396s ago: executing program 2 (id=4311): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x6}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x0, 0x0, 0x4}, @exit={0x95, 0x0, 0x7b00}]}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0x6, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x3, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) r4 = io_uring_setup(0x7de1, &(0x7f0000000300)={0x0, 0x459d, 0x400, 0x1, 0x2000350}) io_uring_register$IORING_REGISTER_BUFFERS2(r4, 0x14, 0x0, 0x0) 1.511926384s ago: executing program 8 (id=4312): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x3, 0x3}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r3, &(0x7f0000001540)=[{&(0x7f0000001380)=""/129, 0x81}], 0x1, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000120005f70000", @ANYRES32=0x0, @ANYBLOB="1100000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) 1.003014274s ago: executing program 2 (id=4313): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x80002, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e27, 0x6, @mcast2, 0x7}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000040)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) sendmmsg$inet6(r1, 0x0, 0x0, 0x4001c00) 336.925111ms ago: executing program 8 (id=4314): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4041}, 0xd0) (async) r0 = socket$alg(0x26, 0x5, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r2, 0x0) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (rerun: 64) lseek(r2, 0x0, 0x4) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, r1, 0x0) (rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x60, 0x2, 0x6, 0x202, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) (async) r9 = accept4(r0, 0x0, 0x0, 0x0) accept4(r9, 0x0, 0x0, 0x0) 260.108577ms ago: executing program 3 (id=4315): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000038e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x800) 143.099078ms ago: executing program 0 (id=4316): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="14", 0x1}, {&(0x7f0000000280)="3b942cdf3dbb4d708446209c8a7a9893c711167b6aee1ac4a8cc59d92a394f460b20f21b9add9e84d2dba9e6df8034c449e64138a4aea2a8df6d35031bd3263f", 0x7fffefff}], 0x2, 0x0, 0x8dff}], 0x1, 0x0) 142.551752ms ago: executing program 2 (id=4317): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000400)=0x4000000) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="7800000010000104000000000000000000070000", @ANYRES32=r8, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r11, 0x0, 0x7, 0x9) write$P9_RWRITE(r11, &(0x7f0000000040)={0xb}, 0x11000) read(r10, &(0x7f0000032440)=""/102364, 0x18fdc) ioctl$SIOCAX25GETUID(r4, 0x89ed, 0xfffffffffffffffe) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$MSR(0x0, 0xfffffffffffffd62, 0x0) 141.917346ms ago: executing program 8 (id=4318): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setresgid(0xee00, 0xee01, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f00000025c0)=ANY=[@ANYBLOB="0000000000003df5649bec90c2b0d06e686efb9fd7778a89acc8884b7344b4ad3fc1444d3c8e54037d2c805008ba1e9ff3c33e71028a1c30dbeaabb8760309b38a1c22bec6b9e7a560eb7309034f13eb17da0c5f678305a815b6d5f8e143bcb48c43beaf0f93a255874a4aa721582b2566e79a77cf9044b1950df3d63c0000005f00000000000c3e80f3d02e27f7f5aa5f50c81102fcfeffba0c173c5f241158400e7237586587ddbfe971b85bc7eb90f6e394c6a2589c4275b541b080bffd665cc69908d94f36fd0e48806af1", @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) read$FUSE(r2, &(0x7f0000000340)={0x2020}, 0xcb0a) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000340)={0x50, 0x12, 0x905, 0x70bd2a, 0x25dfdbfd, {0xa, 0x9, 0x4, 0xfe, {0x4e22, 0x4e24, [0xfffffffb, 0x9, 0x3, 0x6], [0xfffffffd, 0x5, 0x1, 0x2], 0x0, [0x10000, 0x1000]}, 0x6, 0xffffffff}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000051}, 0x800) (async) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000340)={0x50, 0x12, 0x905, 0x70bd2a, 0x25dfdbfd, {0xa, 0x9, 0x4, 0xfe, {0x4e22, 0x4e24, [0xfffffffb, 0x9, 0x3, 0x6], [0xfffffffd, 0x5, 0x1, 0x2], 0x0, [0x10000, 0x1000]}, 0x6, 0xffffffff}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000051}, 0x800) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x28, 0x3, 0x8, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xa02}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x28}}, 0x4000) prlimit64(0x0, 0xe, 0x0, 0x0) gettid() (async) r4 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x502, 0x0) read$rfkill(r5, &(0x7f0000000080), 0xffffff1c) (async) read$rfkill(r5, &(0x7f0000000080), 0xffffff1c) clock_gettime(0x0, &(0x7f0000000180)) (async) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() (async) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r10 = io_uring_setup(0x28fe, &(0x7f0000000080)={0x0, 0x3, 0x2}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r10, 0x11, &(0x7f00000002c0), 0x2) timerfd_settime(r5, 0x1, &(0x7f00000001c0)={{r6, r7+10000000}, {0x0, 0x989680}}, &(0x7f00000002c0)) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0x2000, 0x80, 0x3231564e, 0x3, [0x2], [0x2003], [], [0x32d, 0x2]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002380)={0xd, 0x8, &(0x7f0000002440)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0xa}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffff8}, @generic={0x1f, 0x6, 0x1, 0x8, 0x800}, @alu={0x4, 0x1, 0x8, 0x0, 0x1, 0xfffffffffffffff8, 0xfffffffffffffffc}, @alu={0x7, 0x0, 0x8, 0x1, 0x7, 0xfffffffffffffff8, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002380)={0xd, 0x8, &(0x7f0000002440)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0xa}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffff8}, @generic={0x1f, 0x6, 0x1, 0x8, 0x800}, @alu={0x4, 0x1, 0x8, 0x0, 0x1, 0xfffffffffffffff8, 0xfffffffffffffffc}, @alu={0x7, 0x0, 0x8, 0x1, 0x7, 0xfffffffffffffff8, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) 80.103974ms ago: executing program 0 (id=4319): socket$kcm(0x10, 0x2, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x204000, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0xf0) setpriority(0x0, 0x0, 0x2a14b58) r0 = add_key$user(&(0x7f0000000440), &(0x7f0000002180)={'syz', 0x1}, &(0x7f0000000240)="8b", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r1, r0}, &(0x7f0000000480)=""/199, 0xc7, &(0x7f0000000580)={&(0x7f0000000340)={'blake2b-256\x00'}}) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008080}, 0x4810) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) socket$kcm(0x10, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @remote}, 0x1c) r4 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='vuto_da_alloc', 0x0) sendto$inet6(r3, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_udp_int(r3, 0x88, 0x1, &(0x7f0000000080), 0x4) 0s ago: executing program 3 (id=4320): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000001a40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) (async) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, 0x0, 0x0) (async) removexattr(0x0, 0x0) (async, rerun: 32) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) connect$bt_l2cap(r2, &(0x7f0000000240)={0x1f, 0x0, @none, 0x7, 0x2}, 0xe) (async) clock_nanosleep(0xb, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) (async, rerun: 32) clock_adjtime(0x0, &(0x7f0000000040)={0xd4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0x4b4a25a5, 0x0, 0x0, 0x0, 0x24, 0x0, 0x3, 0x0, 0x9}) (rerun: 32) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000000)="1400000024000b47568013db354d1fae20cf0000", 0x14}], 0x1}, 0x44) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r3, &(0x7f0000001ac0)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): erialNumber=3 [ 996.086344][T17438] usb 3-1: Product: syz [ 996.094307][T17438] usb 3-1: Manufacturer: syz [ 996.099472][T17438] usb 3-1: SerialNumber: syz [ 996.543472][T17438] dvb-usb: found a 'DiBcom STK7070P reference design' in cold state, will try to load a firmware [ 996.581184][T19750] wireguard0: entered promiscuous mode [ 996.586689][T19750] wireguard0: entered allmulticast mode [ 996.808789][T17438] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 996.824071][T17438] dib0700: firmware download failed at 7 with -22 [ 996.850283][T17438] usb 3-1: USB disconnect, device number 81 [ 997.521255][T17438] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 997.643247][T19797] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=520 sclass=netlink_route_socket pid=19797 comm=syz.0.3429 [ 997.716419][T17438] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 997.755181][T17438] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 997.777761][T17438] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 997.800291][T17438] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.825008][T19775] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 997.835713][T17438] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 998.048831][T19775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 998.078088][T19775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 998.100420][T19775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 998.113989][T19775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 998.184876][ T5906] usb 3-1: USB disconnect, device number 82 [ 999.357705][ T30] audit: type=1400 audit(1754022482.804:2002): avc: denied { append } for pid=19841 comm="syz.2.3435" name="loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 999.684292][T19847] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4112 sclass=netlink_route_socket pid=19847 comm=syz.2.3435 [ 1000.465481][T19860] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1000.480439][T19860] Error validating options; rc = [-22] [ 1000.592428][T19867] input: syz0 as /devices/virtual/input/input64 [ 1001.731619][T19890] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1001.740951][T19890] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 1001.748541][T19890] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1001.756736][T19890] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 1001.765014][T19890] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1001.772272][T19890] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1001.779992][T19890] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1001.797086][T19890] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1001.804723][T19890] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1001.811412][T19890] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1001.818630][T19890] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1001.828610][T19890] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1001.836274][T19890] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 1001.847098][T19890] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 1004.344877][ T30] audit: type=1400 audit(1754022487.794:2003): avc: denied { getopt } for pid=19937 comm="syz.8.3454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1005.032589][T19944] veth0: entered promiscuous mode [ 1005.113922][ T51] Bluetooth: hci2: command 0x0401 tx timeout [ 1005.171797][T19940] veth0: left promiscuous mode [ 1006.601490][T19989] can: request_module (can-proto-0) failed. [ 1007.188030][T20000] xt_socket: unknown flags 0xe4 [ 1007.557699][T20016] veth0: entered promiscuous mode [ 1007.563594][T20015] veth0: left promiscuous mode [ 1009.278302][T20037] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1009.284893][T20037] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 1009.291373][T20037] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1009.297808][T20037] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 1009.304867][T20037] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1009.311325][T20037] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1009.318120][T20037] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1009.324543][T20037] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1009.331005][T20037] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1009.337714][T20037] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1009.344185][T20037] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1009.350623][T20037] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1009.357096][T20037] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 1009.364853][T20037] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 1010.233017][T20055] netlink: 'syz.7.3479': attribute type 1 has an invalid length. [ 1010.240111][T20059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3480'. [ 1011.072845][T20055] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1011.080900][T20055] IPv6: NLM_F_CREATE should be set when creating new route [ 1011.503144][T20053] can: request_module (can-proto-0) failed. [ 1012.790274][T20077] can: request_module (can-proto-0) failed. [ 1013.712694][T20100] netlink: 'syz.2.3486': attribute type 2 has an invalid length. [ 1015.221033][T20093] Bluetooth: hci3: command 0x0406 tx timeout [ 1016.002630][T20137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3492'. [ 1016.090186][T20140] ceph: No mds server is up or the cluster is laggy [ 1016.615554][T20150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3495'. [ 1016.624470][T20150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1016.653951][T20150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1016.671676][T20150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1016.679061][T20150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1016.703932][T20160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3494'. [ 1017.356917][T20164] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.3498'. [ 1017.367956][T20150] bond0: (slave batadv0): Releasing backup interface [ 1018.791302][T20182] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1019.119450][T20192] block device autoloading is deprecated and will be removed. [ 1019.128605][T20192] syz.8.3502: attempt to access beyond end of device [ 1019.128605][T20192] ram201: rw=2048, sector=521328, nr_sectors = 8 limit=8192 [ 1020.775841][ T30] audit: type=1400 audit(1754022504.214:2004): avc: denied { read } for pid=20220 comm="syz.3.3509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1022.161090][T20241] wireguard0: entered promiscuous mode [ 1022.166600][T20241] wireguard0: entered allmulticast mode [ 1022.277742][T20244] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3510'. [ 1022.893286][T20247] batadv_slave_0: entered promiscuous mode [ 1023.156912][ T30] audit: type=1326 audit(1754022506.604:2005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20250 comm="syz.0.3514" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f57c958eb69 code=0x0 [ 1023.266578][T20259] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2304 sclass=netlink_route_socket pid=20259 comm=syz.2.3517 [ 1023.297115][T20257] bridge0: entered promiscuous mode [ 1023.305864][T20257] macvlan2: entered promiscuous mode [ 1023.693186][T20259] netlink: 'syz.2.3517': attribute type 11 has an invalid length. [ 1024.071240][ T5906] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1024.251016][T17340] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 1024.273645][ T5906] usb 3-1: config 0 has no interfaces? [ 1024.279365][ T5906] usb 3-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1024.391050][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.412900][T17340] usb 1-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1024.426376][ T5906] usb 3-1: config 0 descriptor?? [ 1024.464993][T17340] usb 1-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1024.517108][T17340] usb 1-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1024.542871][T17340] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1024.552689][T17340] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1024.566231][T17340] usb 1-1: SerialNumber: syz [ 1024.758388][ T5906] usb 3-1: USB disconnect, device number 83 [ 1024.762358][T20307] bridge1: entered promiscuous mode [ 1025.105896][T17340] rndis_host 1-1:253.0: RNDIS init failed, -71 [ 1025.140468][T20317] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1025.146982][T20317] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1025.159403][T20317] vhci_hcd vhci_hcd.0: Device attached [ 1025.451034][T18530] usb 39-1: new high-speed USB device number 3 using vhci_hcd [ 1025.870301][T17340] rndis_host 1-1:253.0: probe with driver rndis_host failed with error -71 [ 1026.469660][T17340] usb 1-1: USB disconnect, device number 57 [ 1026.489751][T20318] vhci_hcd: connection reset by peer [ 1026.520372][T15620] vhci_hcd: stop threads [ 1026.526507][T15620] vhci_hcd: release socket [ 1026.532120][T15620] vhci_hcd: disconnect device [ 1026.803359][T20335] kvm: user requested TSC rate below hardware speed [ 1026.825471][T17340] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 1027.072605][T17340] usb 1-1: device descriptor read/all, error -71 [ 1027.271991][T20343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3531'. [ 1027.980809][T20353] veth0: entered promiscuous mode [ 1027.991012][T20352] veth0: left promiscuous mode [ 1027.994215][T20350] overlayfs: statfs failed on './file0' [ 1028.391039][T17340] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1029.895306][T15204] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1029.912454][T17340] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 1029.964094][T20374] syz.0.3536: attempt to access beyond end of device [ 1029.964094][T20374] mtdblock0: rw=2048, sector=521328, nr_sectors = 8 limit=256 [ 1030.280631][T17340] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.318509][T17340] usb 4-1: config 0 descriptor?? [ 1030.721200][T18530] vhci_hcd: vhci_device speed not set [ 1031.349201][ T30] audit: type=1400 audit(1754022514.324:2006): avc: denied { map } for pid=20382 comm="syz.2.3541" path="socket:[68941]" dev="sockfs" ino=68941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1031.372654][ C0] vkms_vblank_simulate: vblank timer overrun [ 1031.392481][T17340] hackrf 4-1:0.0: Board ID: 00 [ 1031.397274][T17340] hackrf 4-1:0.0: Firmware version: [ 1031.400032][ T30] audit: type=1400 audit(1754022514.324:2007): avc: denied { read } for pid=20382 comm="syz.2.3541" path="socket:[68941]" dev="sockfs" ino=68941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1031.510772][T17340] hackrf 4-1:0.0: Registered as swradio24 [ 1031.516605][T17340] videodev: could not get a free minor [ 1031.542738][T17340] hackrf 4-1:0.0: Failed to register as video device (-23) [ 1031.586110][T17340] hackrf 4-1:0.0: probe with driver hackrf failed with error -23 [ 1031.981267][T17340] usb 4-1: USB disconnect, device number 66 [ 1032.155541][T20405] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3544'. [ 1032.165244][T20405] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1032.173084][T20405] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1032.346500][T20405] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1032.354263][T20405] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1032.528447][T20405] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 1032.541526][T20405] batman_adv: batadv0: Removing interface: ipvlan2 [ 1033.165671][T20411] veth0: entered promiscuous mode [ 1033.172272][T20410] veth0: left promiscuous mode [ 1033.321147][ T5891] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1033.499534][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1033.534766][ T5891] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1033.540824][T20426] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1033.555752][T20426] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 1033.568146][T20426] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1033.589082][T20426] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 1033.603270][T20426] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1033.663814][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.850931][ T30] audit: type=1400 audit(1754022517.114:2008): avc: denied { view } for pid=20425 comm="syz.8.3549" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1033.891389][T20426] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1033.924469][ T5891] usb 4-1: config 0 descriptor?? [ 1033.930062][T20426] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1033.937106][T20426] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1033.943806][T20426] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1033.950780][T20426] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1033.958948][T20426] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1033.968747][T20426] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1033.975835][T20426] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 1033.983945][T20426] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 1034.098805][T20434] netlink: 'syz.7.3550': attribute type 3 has an invalid length. [ 1034.142364][T20434] netlink: 'syz.7.3550': attribute type 3 has an invalid length. [ 1034.371752][T20441] netlink: 'syz.2.3551': attribute type 10 has an invalid length. [ 1034.734330][ T5891] usbhid 4-1:0.0: can't add hid device: -71 [ 1035.846777][ T5891] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1035.864011][ T5891] usb 4-1: USB disconnect, device number 67 [ 1035.958876][T20447] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1035.965598][T20447] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 1035.972454][T20447] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1035.979460][T20447] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 1035.986986][T20447] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1035.996351][T20447] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1036.004936][T20447] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1036.011626][T20447] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1036.018365][T20447] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1036.026824][T20447] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1036.033639][T20447] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1036.040322][T20447] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1036.049537][T20447] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 1036.057668][T20447] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 1036.852784][T20466] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 1036.859325][T20466] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1037.130708][T20466] vhci_hcd vhci_hcd.0: Device attached [ 1037.302652][T18530] vhci_hcd: vhci_device speed not set [ 1037.495007][T20485] fuse: Bad value for 'fd' [ 1037.505053][T18530] usb 47-1: new full-speed USB device number 2 using vhci_hcd [ 1037.610548][T20482] overlayfs: missing 'lowerdir' [ 1038.025147][T20470] vhci_hcd: connection reset by peer [ 1038.033188][ T12] vhci_hcd: stop threads [ 1038.042025][ T12] vhci_hcd: release socket [ 1038.048826][ T12] vhci_hcd: disconnect device [ 1038.059624][T20497] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3562'. [ 1039.944031][T20525] tipc: Failed to remove unknown binding: 66,1,1/0:1774156077/1774156078 [ 1041.058388][T20529] binder: 20505:20529 ioctl 4018620d 0 returned -22 [ 1041.183936][ T30] audit: type=1400 audit(1754022524.634:2009): avc: denied { setopt } for pid=20540 comm="syz.7.3569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1041.537358][T20555] netlink: 11 bytes leftover after parsing attributes in process `syz.8.3571'. [ 1042.660925][T18530] vhci_hcd: vhci_device speed not set [ 1043.486511][T20569] can: request_module (can-proto-0) failed. [ 1044.795881][T20597] netlink: 'syz.3.3580': attribute type 4 has an invalid length. [ 1046.887803][T20588] can: request_module (can-proto-0) failed. [ 1047.403288][T20624] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3583'. [ 1047.784909][T20634] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1047.791445][T20634] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1047.811238][T20634] vhci_hcd vhci_hcd.0: Device attached [ 1047.948776][T20643] batadv_slave_0: entered promiscuous mode [ 1047.998111][ T5906] vhci_hcd: vhci_device speed not set [ 1048.140532][T20634] fuse: Bad value for 'fd' [ 1048.194516][ T5906] usb 39-1: new full-speed USB device number 4 using vhci_hcd [ 1048.909189][T20636] vhci_hcd: connection reset by peer [ 1048.927343][ T3000] vhci_hcd: stop threads [ 1048.937939][ T3000] vhci_hcd: release socket [ 1048.961311][ T3000] vhci_hcd: disconnect device [ 1049.770918][ T10] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1049.778972][T20687] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 1049.785497][T20687] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1049.801446][T20687] vhci_hcd vhci_hcd.0: Device attached [ 1050.051128][T18530] usb 33-1: new high-speed USB device number 6 using vhci_hcd [ 1050.502848][T20688] vhci_hcd: connection reset by peer [ 1050.527976][ T12] vhci_hcd: stop threads [ 1050.556026][ T12] vhci_hcd: release socket [ 1050.589334][ T12] vhci_hcd: disconnect device [ 1050.926147][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1051.017425][ T10] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1051.026636][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.037775][ T10] usb 4-1: config 0 descriptor?? [ 1051.336796][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 1051.349168][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1051.461740][ T10] usb 4-1: USB disconnect, device number 68 [ 1051.499314][T20709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3598'. [ 1051.740286][T20718] netdevsim netdevsim7: Direct firmware load for „ failed with error -2 [ 1051.750762][T20718] netdevsim netdevsim7: Falling back to sysfs fallback for: „ [ 1051.860946][ T10] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1052.024167][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 1052.033181][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1052.056169][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1052.092957][ T10] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1052.127633][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.147222][ T10] usb 4-1: config 0 descriptor?? [ 1052.361155][ T30] audit: type=1400 audit(1754022535.814:2010): avc: denied { read } for pid=20738 comm="syz.0.3603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1052.768747][T20757] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 1053.275370][T20765] input: syz0 as /devices/virtual/input/input65 [ 1053.291092][ T5906] vhci_hcd: vhci_device speed not set [ 1053.958909][T17340] usb 4-1: USB disconnect, device number 69 [ 1053.984662][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.996408][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.113322][T20784] veth0: entered promiscuous mode [ 1054.119559][T20783] veth0: left promiscuous mode [ 1054.273693][T20792] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3613'. [ 1055.126995][ T30] audit: type=1400 audit(1754022538.544:2011): avc: denied { name_connect } for pid=20799 comm="syz.0.3617" dest=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1055.501567][T18530] vhci_hcd: vhci_device speed not set [ 1056.309311][T20823] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3621'. [ 1057.363897][T20827] openvswitch: netlink: Key 3 has unexpected len 2 expected 4 [ 1057.480902][ T30] audit: type=1326 audit(1754022540.924:2012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20830 comm="syz.3.3624" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6910d8eb69 code=0x0 [ 1057.991742][T20848] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3628'. [ 1058.001455][T20848] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3628'. [ 1058.220925][ T10] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1058.371461][ T10] usb 4-1: device descriptor read/64, error -71 [ 1058.721018][ T10] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1058.728656][T17438] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 1058.862362][ T10] usb 4-1: device descriptor read/64, error -71 [ 1058.882498][T17438] usb 3-1: config 2 has an invalid interface number: 186 but max is 0 [ 1058.894056][T17438] usb 3-1: config 2 has no interface number 0 [ 1058.914417][T17438] usb 3-1: config 2 interface 186 has no altsetting 0 [ 1058.939166][T17438] usb 3-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=8c.8f [ 1058.949743][T17438] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.961112][T17438] usb 3-1: Product: syz [ 1058.965909][T17438] usb 3-1: Manufacturer: syz [ 1058.974090][T17438] usb 3-1: SerialNumber: syz [ 1058.991267][ T10] usb usb4-port1: attempt power cycle [ 1059.371055][ T10] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1059.410301][T17438] catc 3-1:2.186: Can't set altsetting 1. [ 1059.419306][T17438] catc 3-1:2.186: probe with driver catc failed with error -5 [ 1059.430650][ T10] usb 4-1: device descriptor read/8, error -71 [ 1059.463132][T17438] usb 3-1: USB disconnect, device number 84 [ 1059.682085][ T10] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1059.713801][ T10] usb 4-1: device descriptor read/8, error -71 [ 1059.852652][ T10] usb usb4-port1: unable to enumerate USB device [ 1060.015346][T20902] veth0: entered promiscuous mode [ 1060.021983][T20901] veth0: left promiscuous mode [ 1060.855400][T20918] netlink: 'syz.3.3642': attribute type 3 has an invalid length. [ 1060.883260][T20918] netlink: 'syz.3.3642': attribute type 3 has an invalid length. [ 1061.090676][T20927] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3643'. [ 1062.183621][T20937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3646'. [ 1062.411135][ T5906] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1062.846083][T20951] ceph: No mds server is up or the cluster is laggy [ 1062.857937][T17438] libceph: connect (1)[c::]:6789 error -101 [ 1062.858109][ T5906] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1062.864157][T17438] libceph: mon0 (1)[c::]:6789 connect error [ 1063.053558][ T5906] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1063.169366][ T5906] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1063.199665][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.221874][ T5906] usb 3-1: Product: syz [ 1063.228242][ T5906] usb 3-1: Manufacturer: syz [ 1063.240596][ T5906] usb 3-1: SerialNumber: syz [ 1063.268799][ T5906] cdc_mbim 3-1:1.0: skipping garbage [ 1063.483518][T20932] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1063.522493][T20971] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1063.537961][T20971] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 1063.547280][T20971] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1063.554648][T20971] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 1063.563007][T20971] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1063.570367][T20971] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1063.581174][T20971] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1063.613802][T20977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1063.625235][T20971] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1063.632162][T20971] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1063.639295][T20971] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1063.650908][T20971] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1063.672554][T20971] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1063.673572][T20975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1063.961070][T20971] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 1063.980401][T20971] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 1065.487912][T20991] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=48 sclass=netlink_xfrm_socket pid=20991 comm=syz.3.3652 [ 1066.178531][ T5906] cdc_mbim 3-1:1.0: bind() failure [ 1066.210219][ T5906] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1066.366660][ T5906] cdc_ncm 3-1:1.1: bind() failure [ 1066.416157][ T5906] usb 3-1: USB disconnect, device number 85 [ 1066.606141][T21009] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3659'. [ 1066.615327][T21009] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3659'. [ 1066.624452][T21009] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3659'. [ 1067.513480][T21019] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.3658'. [ 1068.539827][ T30] audit: type=1400 audit(1754022551.894:2013): avc: denied { mount } for pid=21026 comm="syz.0.3661" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1069.005774][T21045] af_packet: tpacket_rcv: packet too big, clamped from 62 to 4294967286. macoff=82 [ 1069.143799][T21054] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3664'. [ 1070.047591][T21053] delete_channel: no stack [ 1070.294978][T21071] comedi comedi3: comedi_config --init_data is deprecated [ 1070.779861][T21089] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3674'. [ 1070.911075][ T5937] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1071.061092][ T5937] usb 3-1: device descriptor read/64, error -71 [ 1072.245883][T21104] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=48 sclass=netlink_xfrm_socket pid=21104 comm=syz.8.3676 [ 1072.528646][ T5937] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1073.058380][ T5937] usb 3-1: device descriptor read/64, error -71 [ 1073.203611][ T5937] usb usb3-port1: attempt power cycle [ 1073.234439][T21113] fuse: Bad value for 'fd' [ 1073.768057][ T5937] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1073.852436][ T5937] usb 3-1: device descriptor read/8, error -71 [ 1073.999719][T21120] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 1074.006257][T21120] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1074.027592][T21120] vhci_hcd vhci_hcd.0: Device attached [ 1074.216495][T17438] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1074.697276][ T5827] vhci_hcd: vhci_device speed not set [ 1074.771161][ T5827] usb 39-1: new full-speed USB device number 5 using vhci_hcd [ 1074.841910][T17438] usb 4-1: Using ep0 maxpacket: 16 [ 1074.867145][T21146] Bluetooth: hci0: Frame reassembly failed (-84) [ 1074.933713][T21147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3686'. [ 1074.947511][T10720] Bluetooth: hci0: Frame reassembly failed (-84) [ 1074.948105][T17438] usb 4-1: config 0 has no interfaces? [ 1075.024195][T17438] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1075.050124][T17438] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.075345][T17438] usb 4-1: config 0 descriptor?? [ 1075.299043][T21124] vhci_hcd: connection reset by peer [ 1075.316240][T18530] usb 4-1: USB disconnect, device number 74 [ 1075.325629][ T36] vhci_hcd: stop threads [ 1075.330221][ T36] vhci_hcd: release socket [ 1075.360665][ T36] vhci_hcd: disconnect device [ 1075.777249][T21169] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3687'. [ 1077.042445][T15204] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1077.046429][T20093] Bluetooth: hci0: command 0x1003 tx timeout [ 1077.056376][T21174] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1077.062900][T21174] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1077.087458][T21175] vhci_hcd: connection closed [ 1077.101152][T21174] vhci_hcd vhci_hcd.0: Device attached [ 1077.153332][ T12] vhci_hcd: stop threads [ 1077.157671][ T12] vhci_hcd: release socket [ 1077.175755][ T12] vhci_hcd: disconnect device [ 1078.612163][T21205] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 1078.786431][T21214] binder: 21207:21214 unknown command 0 [ 1078.821548][T21214] binder: 21207:21214 ioctl c0306201 200000000180 returned -22 [ 1078.940177][T21222] netlink: 'syz.7.3701': attribute type 7 has an invalid length. [ 1078.942105][T21214] input: syz0 as /devices/virtual/input/input66 [ 1078.964224][T21222] netlink: 232 bytes leftover after parsing attributes in process `syz.7.3701'. [ 1080.076130][ T5827] vhci_hcd: vhci_device speed not set [ 1080.944802][T21252] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1080.958388][T21252] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 1080.966651][T21252] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1080.975218][T21252] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 1080.983121][T21252] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1080.983167][T17438] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1080.999317][T21252] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1081.006929][T21252] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1081.014424][T21252] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1081.021202][T21252] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1081.028032][T21252] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1081.034933][T21252] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1081.041682][T21252] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1081.048380][T21252] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 1081.056885][T21252] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 1081.312976][T17438] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1081.326071][T17438] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1081.337640][T17438] usb 1-1: config 1 has no interface number 1 [ 1081.355036][T17438] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1081.370961][T17438] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 1081.396514][T21266] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3708'. [ 1081.467121][T17340] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1081.490184][T17438] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1081.502093][T17438] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.511823][T17438] usb 1-1: Product: syz [ 1081.517531][T17438] usb 1-1: Manufacturer: syz [ 1081.531067][T17438] usb 1-1: SerialNumber: syz [ 1081.669036][T17340] usb 4-1: Using ep0 maxpacket: 16 [ 1081.717758][T21248] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1081.733138][T17340] usb 4-1: config 250 has an invalid interface number: 250 but max is 0 [ 1081.746534][T17340] usb 4-1: config 250 has no interface number 0 [ 1081.761170][T17340] usb 4-1: config 250 interface 250 has no altsetting 0 [ 1081.799711][T17340] usb 4-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=1d.4a [ 1081.819243][T17340] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.827705][T17340] usb 4-1: Product: syz [ 1081.832355][T17340] usb 4-1: Manufacturer: syz [ 1081.837292][T17340] usb 4-1: SerialNumber: syz [ 1081.855376][ T30] audit: type=1400 audit(1754022565.304:2014): avc: denied { lock } for pid=21272 comm="syz.2.3709" path="socket:[71091]" dev="sockfs" ino=71091 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 1082.719024][T21287] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3706'. [ 1082.977286][T21292] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 1083.045644][T17340] mvusb_mdio 4-1:250.250: probe with driver mvusb_mdio failed with error -5 [ 1083.076548][T17340] usb 4-1: USB disconnect, device number 75 [ 1083.337237][T21304] qrtr: Invalid version 14 [ 1083.603965][ T5891] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1083.766758][ T5891] usb 3-1: config 0 has an invalid interface number: 156 but max is 1 [ 1083.795536][ T5891] usb 3-1: config 0 has no interface number 1 [ 1083.815898][ T5891] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1083.835634][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.852776][ T5891] usb 3-1: config 0 descriptor?? [ 1083.876934][ T5891] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1083.892824][ T5891] usb 3-1: MIDIStreaming interface descriptor not found [ 1084.038228][ T5891] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1084.042159][T17438] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 1084.111080][T17438] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 1084.124987][ T5891] spca561 3-1:0.0: probe with driver spca561 failed with error -22 [ 1084.181614][ T5891] usb 3-1: USB disconnect, device number 90 [ 1084.267450][T17340] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1084.893183][T17340] usb 4-1: Using ep0 maxpacket: 8 [ 1084.933788][T17340] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1084.982421][T17340] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1084.992588][T17438] usb 1-1: USB disconnect, device number 60 [ 1085.013711][T17340] usb 4-1: New USB device found, idVendor=046d, idProduct=c343, bcdDevice= 0.00 [ 1085.120861][T17340] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.200509][T17340] usb 4-1: config 0 descriptor?? [ 1085.994743][T17340] logitech-hidpp-device 0003:046D:C343.001B: item fetching failed at offset 5/7 [ 1086.045726][T17340] logitech-hidpp-device 0003:046D:C343.001B: hidpp_probe:parse failed [ 1086.064884][T17340] logitech-hidpp-device 0003:046D:C343.001B: probe with driver logitech-hidpp-device failed with error -22 [ 1086.162165][T21366] tipc: Enabling of bearer rejected, failed to enable media [ 1086.231432][ T5891] usb 4-1: USB disconnect, device number 76 [ 1087.201172][T21391] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.3719'. [ 1087.641851][T21399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3729'. [ 1087.650753][T21399] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3729'. [ 1088.696901][T21412] netlink: 212376 bytes leftover after parsing attributes in process `syz.8.3732'. [ 1090.025489][T21438] syzkaller1: entered promiscuous mode [ 1090.031071][T21438] syzkaller1: entered allmulticast mode [ 1090.080057][T21442] veth0: entered promiscuous mode [ 1090.318079][T21441] veth0: left promiscuous mode [ 1091.519263][T21474] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3747'. [ 1092.867426][T21495] netlink: 'syz.7.3752': attribute type 3 has an invalid length. [ 1093.364924][T21513] netlink: 'syz.7.3755': attribute type 4 has an invalid length. [ 1094.546262][T21527] bridge2: entered promiscuous mode [ 1094.979310][T21532] loop2: detected capacity change from 0 to 3 [ 1095.014101][T21532] Dev loop2: unable to read RDB block 3 [ 1095.023974][T21532] loop2: unable to read partition table [ 1095.030270][T21532] loop2: partition table beyond EOD, truncated [ 1095.040543][T21532] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1095.146659][T21536] netlink: 212376 bytes leftover after parsing attributes in process `syz.8.3761'. [ 1097.286116][ T30] audit: type=1400 audit(1754022580.344:2015): avc: denied { listen } for pid=21548 comm="syz.3.3765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1097.499348][T21573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1097.520082][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1097.588614][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1100.763528][T21622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3783'. [ 1102.306484][T21645] input: syz0 as /devices/virtual/input/input67 [ 1102.624419][T21654] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1102.631406][T21654] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 1102.638634][T21654] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1102.647144][T21654] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 1102.654507][T21654] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1102.661510][T21654] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1102.668824][T21654] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1102.675616][T21654] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1102.682638][T21654] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1102.689407][T21654] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1102.696560][T21654] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1102.703513][T21654] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1102.712769][T21654] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 1102.720773][T21654] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 1104.172509][T21689] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1104.533097][T21680] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3798'. [ 1105.829636][T21711] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1105.858817][ T30] audit: type=1400 audit(1754022589.294:2016): avc: denied { nlmsg_write } for pid=21705 comm="syz.2.3802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1105.892678][ T30] audit: type=1400 audit(1754022589.304:2017): avc: denied { audit_write } for pid=21705 comm="syz.2.3802" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1105.913902][ C1] vkms_vblank_simulate: vblank timer overrun [ 1105.924563][ T30] audit: type=1107 audit(1754022589.304:2018): pid=21705 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1106.411733][T21726] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3805'. [ 1107.356606][T21747] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=48 sclass=netlink_xfrm_socket pid=21747 comm=syz.3.3810 [ 1108.383257][T21762] loop2: detected capacity change from 0 to 7 [ 1108.411540][T21762] Dev loop2: unable to read RDB block 7 [ 1108.430028][T21762] loop2: unable to read partition table [ 1108.450408][T21762] loop2: partition table beyond EOD, truncated [ 1108.474286][T21762] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1109.362044][ T30] audit: type=1400 audit(1754022592.704:2019): avc: denied { read } for pid=21771 comm="syz.0.3817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1110.561895][T21791] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3819'. [ 1111.720932][ T5937] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1112.310941][ T5937] usb 4-1: Using ep0 maxpacket: 8 [ 1112.696144][ T5937] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1112.763956][ T5937] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 1112.782891][ T5937] usb 4-1: config 0 has no interface number 0 [ 1112.798921][ T5937] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 102, changing to 10 [ 1112.920469][ T5937] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 24624, setting to 1024 [ 1112.948369][T21836] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21836 comm=syz.0.3829 [ 1112.984014][ T5937] usb 4-1: config 0 interface 88 has no altsetting 0 [ 1113.092667][ T5937] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1113.113538][ T5937] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1113.149943][ T5937] usb 4-1: Product: syz [ 1113.168123][ T5937] usb 4-1: Manufacturer: syz [ 1113.180293][ T5937] usb 4-1: SerialNumber: syz [ 1113.221751][ T5937] usb 4-1: config 0 descriptor?? [ 1113.375309][ T30] audit: type=1326 audit(1754022596.824:2020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21842 comm="syz.2.3831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eeaf8eb69 code=0x7ffc0000 [ 1113.421384][ T30] audit: type=1326 audit(1754022596.824:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21842 comm="syz.2.3831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eeaf8eb69 code=0x7ffc0000 [ 1113.445022][ T30] audit: type=1326 audit(1754022596.824:2022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21842 comm="syz.2.3831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f4eeaf8eb69 code=0x7ffc0000 [ 1113.469631][ T30] audit: type=1326 audit(1754022596.824:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21842 comm="syz.2.3831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eeaf8eb69 code=0x7ffc0000 [ 1113.495849][ T30] audit: type=1326 audit(1754022596.824:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21842 comm="syz.2.3831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eeaf8eb69 code=0x7ffc0000 [ 1113.696022][ T30] audit: type=1326 audit(1754022596.824:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21842 comm="syz.2.3831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f4eeaf8eb69 code=0x7ffc0000 [ 1113.728323][ T5891] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1113.740132][ T5937] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input69 [ 1113.760750][ C1] usb_acecad 4-1:0.88: can't resubmit intr, dummy_hcd.3-1/input0, status -19 [ 1113.800463][ T30] audit: type=1326 audit(1754022596.824:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21842 comm="syz.2.3831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eeaf8eb69 code=0x7ffc0000 [ 1113.910385][T21852] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3832'. [ 1113.929992][ T5937] usb 4-1: USB disconnect, device number 77 [ 1114.145837][ T30] audit: type=1326 audit(1754022596.824:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21842 comm="syz.2.3831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eeaf8eb69 code=0x7ffc0000 [ 1114.261116][ T30] audit: type=1326 audit(1754022596.824:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21842 comm="syz.2.3831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f4eeaf8eb69 code=0x7ffc0000 [ 1114.285315][ T30] audit: type=1326 audit(1754022596.824:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21842 comm="syz.2.3831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eeaf8eb69 code=0x7ffc0000 [ 1114.575329][T14858] udevd[14858]: Error opening device "/dev/input/event4": No such device [ 1114.669384][T14858] udevd[14858]: Unable to EVIOCGABS device "/dev/input/event4" [ 1114.677537][T14858] udevd[14858]: Unable to EVIOCGABS device "/dev/input/event4" [ 1115.385904][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.395661][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.615469][T21868] netlink: 'syz.7.3835': attribute type 3 has an invalid length. [ 1116.283099][T21883] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.3841'. [ 1116.479890][T21890] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3840'. [ 1117.133694][T21900] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1117.149899][T21900] VFS: Can't find a romfs filesystem on dev nullb0. [ 1117.149899][T21900] [ 1117.574618][T21907] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3844'. [ 1119.466838][ T30] kauditd_printk_skb: 2298 callbacks suppressed [ 1119.466856][ T30] audit: type=1326 audit(1754022602.914:4328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21926 comm="syz.3.3850" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6910d8eb69 code=0x0 [ 1119.658873][T21933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3851'. [ 1119.668002][T21933] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1119.677184][T21933] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1119.883173][T21933] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1119.906719][T21933] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1120.883566][T21957] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 1120.894048][T21957] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 1121.398402][ T30] audit: type=1400 audit(1754022604.834:4329): avc: denied { remount } for pid=21967 comm="syz.0.3862" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1121.448015][T21976] pim6reg: entered allmulticast mode [ 1121.867786][T21990] input: syz0 as /devices/virtual/input/input71 [ 1122.143262][T21996] can: request_module (can-proto-0) failed. [ 1122.169914][ T30] audit: type=1400 audit(1754023118.616:4330): avc: denied { setopt } for pid=21994 comm="syz.8.3868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1123.924670][T22005] can: request_module (can-proto-0) failed. [ 1124.277108][T22026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3872'. [ 1124.544219][T22039] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3876'. [ 1125.051731][T22054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3874'. [ 1125.180877][T17438] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1125.447875][T17438] usb 3-1: Using ep0 maxpacket: 8 [ 1125.531014][T17438] usb 3-1: config 6 has an invalid interface number: 171 but max is 0 [ 1125.539397][T17438] usb 3-1: config 6 has no interface number 0 [ 1125.548166][T17438] usb 3-1: config 6 interface 171 altsetting 8 endpoint 0x6 has invalid maxpacket 576, setting to 64 [ 1125.630942][T22061] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1125.637653][T22061] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 1125.646632][T22061] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1125.653851][T22061] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 1125.661122][T22061] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1125.667838][T22061] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1125.675594][T22061] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1125.683023][T22061] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1125.689668][T22061] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1125.696622][T22061] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1125.703974][T22061] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1125.710729][T22061] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1125.717956][T22061] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 1125.726524][T22061] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 1125.961091][T17438] usb 3-1: config 6 interface 171 altsetting 8 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 1125.995236][T17438] usb 3-1: config 6 interface 171 altsetting 8 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1126.047388][T17438] usb 3-1: config 6 interface 171 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 1126.424968][T22067] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 1126.643086][T17438] usb 3-1: config 6 interface 171 has no altsetting 0 [ 1126.669995][T17438] usb 3-1: Dual-Role OTG device on HNP port [ 1126.694714][T17438] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=d1.1e [ 1126.729993][T17438] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.756555][T17438] usb 3-1: Product: syz [ 1126.761183][T17438] usb 3-1: Manufacturer: syz [ 1126.765875][T17438] usb 3-1: SerialNumber: syz [ 1127.130555][T22081] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1127.137255][T22081] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 1127.151448][T22081] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1127.158683][T22081] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 1127.166411][T22081] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1127.173633][T22081] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1127.198564][T22081] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1127.205537][T22081] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1127.212269][T22081] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1127.219873][T22081] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1127.226951][T22081] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1127.234620][T22081] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1127.241846][T22081] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 1127.250855][T22081] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 1127.419327][T17438] usb_ehset_test 3-1:6.171: probe with driver usb_ehset_test failed with error -32 [ 1127.481043][ T30] audit: type=1400 audit(1754023123.916:4331): avc: denied { bind } for pid=22045 comm="syz.2.3877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1128.378147][ T30] audit: type=1400 audit(1754023124.806:4332): avc: denied { getattr } for pid=22090 comm="syz.3.3885" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=73429 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1129.107506][ T5928] usb 3-1: USB disconnect, device number 92 [ 1129.233070][T22112] FAULT_INJECTION: forcing a failure. [ 1129.233070][T22112] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1129.259054][T22112] CPU: 1 UID: 0 PID: 22112 Comm: syz.2.3890 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 1129.259083][T22112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1129.259094][T22112] Call Trace: [ 1129.259100][T22112] [ 1129.259108][T22112] dump_stack_lvl+0x16c/0x1f0 [ 1129.259141][T22112] should_fail_ex+0x512/0x640 [ 1129.259169][T22112] _copy_from_iter+0x29f/0x16f0 [ 1129.259199][T22112] ? __alloc_skb+0x200/0x380 [ 1129.259226][T22112] ? __pfx__copy_from_iter+0x10/0x10 [ 1129.259254][T22112] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1129.259291][T22112] netlink_sendmsg+0x829/0xdd0 [ 1129.259314][T22112] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1129.259342][T22112] ____sys_sendmsg+0xa98/0xc70 [ 1129.259364][T22112] ? copy_msghdr_from_user+0x10a/0x160 [ 1129.259391][T22112] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1129.259425][T22112] ___sys_sendmsg+0x134/0x1d0 [ 1129.259452][T22112] ? __pfx____sys_sendmsg+0x10/0x10 [ 1129.259477][T22112] ? __lock_acquire+0x622/0x1c90 [ 1129.259527][T22112] ? __mutex_unlock_slowpath+0xa0/0x800 [ 1129.259553][T22112] __sys_sendmsg+0x16d/0x220 [ 1129.259581][T22112] ? __pfx___sys_sendmsg+0x10/0x10 [ 1129.259629][T22112] do_syscall_64+0xcd/0x4c0 [ 1129.259649][T22112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.259667][T22112] RIP: 0033:0x7f4eeaf8eb69 [ 1129.259682][T22112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1129.259698][T22112] RSP: 002b:00007f4eebd9d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1129.259716][T22112] RAX: ffffffffffffffda RBX: 00007f4eeb1b5fa0 RCX: 00007f4eeaf8eb69 [ 1129.259728][T22112] RDX: 0000000000000004 RSI: 0000200000000280 RDI: 0000000000000003 [ 1129.259739][T22112] RBP: 00007f4eebd9d090 R08: 0000000000000000 R09: 0000000000000000 [ 1129.259751][T22112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1129.259762][T22112] R13: 0000000000000000 R14: 00007f4eeb1b5fa0 R15: 00007ffe6d9f5928 [ 1129.259785][T22112] [ 1129.646494][T22116] tipc: Enabling of bearer rejected, failed to enable media [ 1129.806645][T22122] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1129.900094][ T30] audit: type=1400 audit(1754023126.346:4333): avc: denied { getopt } for pid=22117 comm="syz.3.3893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1130.153798][T22136] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3899'. [ 1131.314630][ T30] audit: type=1400 audit(1754023127.766:4334): avc: denied { read write } for pid=22152 comm="syz.0.3903" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1131.426030][ T30] audit: type=1400 audit(1754023127.786:4335): avc: denied { open } for pid=22152 comm="syz.0.3903" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1132.224793][T15204] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 1132.683786][T22151] can: request_module (can-proto-0) failed. [ 1132.768700][T22170] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1132.869372][T22173] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1133.897781][T22182] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1133.905102][T22182] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 1133.911784][T22182] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1133.918296][T22182] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 1133.925494][T22182] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1133.931970][T22182] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1133.938780][T22182] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1133.945335][T22182] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1133.951829][T22182] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1133.958340][T22182] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1133.964793][T22182] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1133.971293][T22182] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1133.977737][T22182] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 1133.985516][T22182] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 1134.779777][T22205] netlink: 'syz.0.3913': attribute type 10 has an invalid length. [ 1134.808316][T22205] 8021q: adding VLAN 0 to HW filter on device team0 [ 1134.825069][T22205] bond0: (slave team0): Enslaving as an active interface with an up link [ 1135.561663][T22211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3915'. [ 1135.571269][T22211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3915'. [ 1135.701038][T22215] bridge4: entered promiscuous mode [ 1136.230841][ T5928] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1136.637539][ T5928] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1136.714126][ T5928] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1136.747429][ T5928] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1136.816638][ T5928] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1136.888836][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1137.000204][ T5928] usb 3-1: Product: syz [ 1137.015929][ T5928] usb 3-1: Manufacturer: syz [ 1137.119941][ T5928] usb 3-1: SerialNumber: syz [ 1137.187646][ T5928] usb 3-1: config 0 descriptor?? [ 1137.219104][ T5928] dm9601 3-1:0.0: probe with driver dm9601 failed with error -22 [ 1137.872717][T22248] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1137.879884][T22248] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 1137.890560][T22248] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1137.899160][T22248] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 1137.907024][T22248] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1137.914385][T22248] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1137.922894][T22248] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1137.931122][T22248] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1137.938722][T22248] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1137.946865][T22248] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1137.955062][T22248] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1137.962419][T22248] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1137.969311][T22248] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 1137.978100][T22248] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 1138.251724][T22254] smc: net device bond0 applied user defined pnetid SYZ2 [ 1138.964514][T22269] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=48 sclass=netlink_xfrm_socket pid=22269 comm=syz.0.3931 [ 1139.357643][T22267] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3932'. [ 1139.367276][T22267] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3932'. [ 1139.428255][T17340] usb 3-1: USB disconnect, device number 93 [ 1139.876438][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1139.906375][T22282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1139.908423][T22277] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1139.928443][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1140.354327][T22286] wireguard0: entered promiscuous mode [ 1140.359977][T22286] wireguard0: entered allmulticast mode [ 1141.880954][ T10] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 1142.021410][ T10] usb 1-1: device descriptor read/64, error -71 [ 1142.028314][T17340] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1142.182319][T17340] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1142.192646][T17340] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1142.203594][T17340] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1142.218590][T17340] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1142.227837][T17340] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.236420][T17340] usb 4-1: Product: syz [ 1142.240685][T17340] usb 4-1: Manufacturer: syz [ 1142.245335][T17340] usb 4-1: SerialNumber: syz [ 1142.252995][T17340] usb 4-1: config 0 descriptor?? [ 1142.261399][T17340] dm9601 4-1:0.0: probe with driver dm9601 failed with error -22 [ 1142.271296][ T10] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 1142.400892][ T10] usb 1-1: device descriptor read/64, error -71 [ 1142.556818][ T10] usb usb1-port1: attempt power cycle [ 1143.117821][T22320] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3949'. [ 1143.127328][T22320] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3949'. [ 1143.337012][ T10] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 1143.372784][T22327] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3950'. [ 1143.422765][ T10] usb 1-1: device descriptor read/8, error -71 [ 1143.925809][ T10] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 1143.959456][T22337] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3951'. [ 1144.064734][ T10] usb 1-1: device descriptor read/8, error -71 [ 1144.182667][ T10] usb usb1-port1: unable to enumerate USB device [ 1144.922321][T18530] usb 4-1: USB disconnect, device number 78 [ 1144.936812][T22347] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1145.034704][T22349] xt_socket: unknown flags 0xe4 [ 1146.149384][T22364] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3959'. [ 1146.173743][T22364] mkiss: ax0: crc mode is auto. [ 1146.408701][T22368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3961'. [ 1146.417736][T22368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3961'. [ 1147.383436][T22379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3964'. [ 1147.411317][T22379] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22379 comm=syz.0.3964 [ 1148.320834][T18530] usb 3-1: new full-speed USB device number 94 using dummy_hcd [ 1148.329716][ T5891] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1148.480889][ T5891] usb 1-1: Using ep0 maxpacket: 32 [ 1148.666576][ T5891] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1148.741758][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1148.757599][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1148.775057][ T5891] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1148.788953][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.805087][ T5891] usb 1-1: config 0 descriptor?? [ 1148.810592][T22391] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1148.834120][T18530] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1148.851116][ T5891] hub 1-1:0.0: USB hub found [ 1148.856373][T18530] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1148.866709][T18530] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.889734][T18530] usb 3-1: config 0 descriptor?? [ 1148.895829][T22388] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1149.039767][ T5891] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 1149.409633][ T5891] hid-generic 0003:046D:C314.001D: unknown main item tag 0x0 [ 1149.417924][T22410] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3972'. [ 1149.427070][T22410] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3972'. [ 1149.436730][T18530] elan 0003:04F3:0755.001C: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 1149.645102][ T5891] hid-generic 0003:046D:C314.001D: hidraw1: USB HID v8.00 Device [HID 046d:c314] on usb-dummy_hcd.0-1/input0 [ 1149.748799][T22422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3973'. [ 1149.892921][ T5891] usb 1-1: USB disconnect, device number 65 [ 1150.247168][T22423] fido_id[22423]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1150.414595][T22431] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=48 sclass=netlink_xfrm_socket pid=22431 comm=syz.8.3974 [ 1150.851134][ T5827] usb 3-1: reset full-speed USB device number 94 using dummy_hcd [ 1150.876440][T22433] can: request_module (can-proto-0) failed. [ 1152.208853][T22447] binder: BINDER_SET_CONTEXT_MGR already set [ 1152.214962][T22447] binder: 22441:22447 ioctl 4018620d 200000000040 returned -16 [ 1152.461260][T22451] netlink: 212376 bytes leftover after parsing attributes in process `syz.8.3980'. [ 1153.401579][T22465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3984'. [ 1153.410433][T22465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3984'. [ 1153.657330][ T5891] usb 3-1: USB disconnect, device number 94 [ 1153.717599][ T30] audit: type=1400 audit(1754023150.166:4336): avc: denied { search } for pid=22467 comm="syz.0.3985" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 1153.959438][T22479] kvm: user requested TSC rate below hardware speed [ 1155.320629][T22490] binder: 22487:22490 ioctl c0306201 200000000040 returned -14 [ 1155.328283][ T30] audit: type=1400 audit(1754023151.766:4337): avc: denied { connect } for pid=22487 comm="syz.8.3990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1155.456174][T22490] binder: 22487:22490 ioctl c0306201 200000000640 returned -14 [ 1155.652238][T18530] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1155.711905][T22505] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=514 sclass=netlink_route_socket pid=22505 comm=syz.2.3995 [ 1155.991768][ T5891] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1157.352689][T22526] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3997'. [ 1157.376201][T22527] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3999'. [ 1157.874449][T22540] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4002'. [ 1158.311978][ T30] audit: type=1400 audit(1754023154.766:4338): avc: denied { ioctl } for pid=22546 comm="syz.8.4004" path="socket:[75473]" dev="sockfs" ino=75473 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1158.352022][ T30] audit: type=1400 audit(1754023154.806:4339): avc: denied { map } for pid=22546 comm="syz.8.4004" path="/dev/random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1158.375637][ T5928] usb 3-1: new full-speed USB device number 95 using dummy_hcd [ 1158.725969][ T5928] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 1158.737045][ T5928] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1159.776334][T22569] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(8) [ 1159.782876][T22569] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1159.818570][T22569] vhci_hcd vhci_hcd.0: Device attached [ 1159.825519][T22570] vhci_hcd: connection closed [ 1159.827933][ T5928] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1159.834762][ T1308] vhci_hcd: stop threads [ 1159.846207][ T1308] vhci_hcd: release socket [ 1159.850673][ T1308] vhci_hcd: disconnect device [ 1160.050068][ T5928] usb 3-1: New USB device found, idVendor=0675, idProduct=1688, bcdDevice=79.1f [ 1160.060792][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.078604][ T5928] usb 3-1: Product: syz [ 1160.122312][ T5928] usb 3-1: Manufacturer: syz [ 1160.498947][ T5928] usb 3-1: SerialNumber: syz [ 1160.523679][ T5928] usb 3-1: config 0 descriptor?? [ 1160.540641][ T5928] HFC-S_USB 3-1:0.0: probe with driver HFC-S_USB failed with error -5 [ 1161.149043][ T5891] usb 3-1: USB disconnect, device number 95 [ 1161.440244][T22595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4014'. [ 1161.610863][ T5891] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1161.720868][ T5928] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1161.775966][ T5891] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 221, using maximum allowed: 30 [ 1161.787312][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1161.798660][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1161.808578][ T5891] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 221 [ 1161.821895][ T5891] usb 3-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 1161.831035][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.840574][ T5891] usb 3-1: config 0 descriptor?? [ 1161.883881][ T5928] usb 4-1: Using ep0 maxpacket: 32 [ 1161.890329][ T5928] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 1161.899909][ T5928] usb 4-1: config 0 has no interface number 0 [ 1161.906333][ T5928] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1161.917538][ T5928] usb 4-1: config 0 interface 85 has no altsetting 0 [ 1161.925978][ T5928] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1161.935080][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1161.943365][ T5928] usb 4-1: Product: syz [ 1161.947558][ T5928] usb 4-1: Manufacturer: syz [ 1161.952208][ T5928] usb 4-1: SerialNumber: syz [ 1161.963031][ T5928] usb 4-1: config 0 descriptor?? [ 1161.986445][T22601] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4016'. [ 1162.516362][ T5928] appletouch 4-1:0.85: Failed to request geyser raw mode [ 1162.542420][ T5928] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 1162.554888][ T5928] usb 4-1: USB disconnect, device number 79 [ 1162.662933][T22619] can: request_module (can-proto-0) failed. [ 1164.248621][ T5928] usb 3-1: USB disconnect, device number 96 [ 1164.523145][T22645] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1165.870828][ T5907] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1166.010843][T22665] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.4035'. [ 1166.120813][ T5907] usb 3-1: Using ep0 maxpacket: 16 [ 1166.135826][T22663] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.4035'. [ 1166.214563][ T5907] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 1166.329961][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1166.446056][ T30] audit: type=1400 audit(1754023162.896:4340): avc: denied { create } for pid=22656 comm="syz.7.4035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1166.477802][T22663] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4035'. [ 1166.741832][ T5907] usb 3-1: config 0 descriptor?? [ 1166.759656][ T30] audit: type=1400 audit(1754023163.206:4341): avc: denied { listen } for pid=22676 comm="syz.0.4039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1166.780690][ C0] vkms_vblank_simulate: vblank timer overrun [ 1166.815284][ T30] audit: type=1400 audit(1754023163.236:4342): avc: denied { map } for pid=22680 comm="syz.3.4041" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1166.965244][T22688] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4042'. [ 1167.167667][T22690] comedi comedi3: comedi_config --init_data is deprecated [ 1167.353061][T22700] netlink: 212376 bytes leftover after parsing attributes in process `syz.8.4047'. [ 1167.380332][T22655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1167.391770][T22655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1167.541615][T18530] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1167.585122][ T5907] koneplus 0003:1E7D:2E22.001E: hidraw0: USB HID v20.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.2-1/input0 [ 1167.932805][ T5907] usb 3-1: USB disconnect, device number 97 [ 1168.221233][T18530] usb 1-1: Using ep0 maxpacket: 16 [ 1168.331748][T18530] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1168.352684][T18530] usb 1-1: config 1 has an invalid interface number: 85 but max is 0 [ 1168.360922][T18530] usb 1-1: config 1 has no interface number 0 [ 1168.367340][T18530] usb 1-1: config 1 interface 85 altsetting 6 bulk endpoint 0xE has invalid maxpacket 1023 [ 1168.377511][T18530] usb 1-1: config 1 interface 85 has no altsetting 0 [ 1168.472648][T18530] usb 1-1: New USB device found, idVendor=0572, idProduct=cb06, bcdDevice=22.5e [ 1168.576136][T18530] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.615148][T18530] usb 1-1: Product: syz [ 1168.638312][T18530] usb 1-1: Manufacturer: syz [ 1168.665542][T18530] usb 1-1: SerialNumber: syz [ 1168.691825][T22709] fido_id[22709]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1168.724294][T22694] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1168.823293][T22717] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1168.834615][T22717] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 1168.847120][T22717] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1168.872759][T22717] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 1168.881640][T22717] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1168.888704][T22717] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1168.896795][T22717] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1168.903871][T22717] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1168.910784][T22717] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1168.918303][T22717] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1168.925598][T22717] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1168.933764][T22717] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1168.941121][T22717] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 1168.949433][T22717] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 1169.231216][T22694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1169.239922][T22694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1169.285816][ T30] audit: type=1400 audit(1754023165.736:4343): avc: denied { remount } for pid=22691 comm="syz.0.4045" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1169.391727][T18530] cxacru 1-1:1.85: cxacru_bind: interface has incorrect endpoints [ 1169.399524][T22719] ceph: No mds server is up or the cluster is laggy [ 1169.406397][T18530] cxacru 1-1:1.85: usbatm_usb_probe: bind failed: -19! [ 1169.406657][T17340] libceph: connect (1)[c::]:6789 error -101 [ 1169.417135][T18530] usb 1-1: USB disconnect, device number 66 [ 1169.436410][T17340] libceph: mon0 (1)[c::]:6789 connect error [ 1171.000855][ T5891] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1171.170924][ T5891] usb 1-1: Using ep0 maxpacket: 16 [ 1171.180619][ T5891] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1171.191236][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.210924][ T5891] usb 1-1: Product: syz [ 1171.233506][ T5891] usb 1-1: Manufacturer: syz [ 1171.280242][ T5891] usb 1-1: SerialNumber: syz [ 1171.558105][ T5891] usb 1-1: config 0 descriptor?? [ 1171.571673][T22749] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.4060'. [ 1171.601304][ T5891] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1171.978595][ T5891] ssu100 1-1:0.0: probe with driver ssu100 failed with error -110 [ 1172.081658][ T5891] usb 1-1: USB disconnect, device number 67 [ 1173.051356][T22768] netlink: 'syz.0.4062': attribute type 4 has an invalid length. [ 1173.339358][T22771] binder: 22760:22771 ioctl c0306201 200000000440 returned -14 [ 1173.593326][T22771] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1173.666471][T22761] QAT: Device 7 not found [ 1174.991046][T22791] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1174.998469][T22791] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 1175.007803][T22791] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1175.015326][T22791] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 1175.023012][T22791] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1175.029711][T22791] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1175.036849][T22791] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1175.043715][T22791] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1175.050513][T22791] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1175.060963][T22791] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1175.068290][T22791] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1175.076239][T22791] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1175.083019][T22791] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 1175.090902][T22791] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 1175.411567][T22794] loop2: detected capacity change from 0 to 7 [ 1175.433552][T22794] Dev loop2: unable to read RDB block 7 [ 1175.446922][T22794] loop2: AHDI p2 [ 1175.450593][T22794] loop2: partition table partially beyond EOD, truncated [ 1175.601139][ T5891] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1176.293726][ T5891] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1176.304084][ T5891] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1176.351868][ T5891] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1176.369332][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.404459][ T5891] usb 4-1: Product: syz [ 1176.423332][ T5891] usb 4-1: Manufacturer: syz [ 1176.430959][ T5891] usb 4-1: SerialNumber: syz [ 1176.471456][ T5891] usb 4-1: config 0 descriptor?? [ 1176.480631][T22795] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1176.518570][ T5891] dm9601 4-1:0.0: probe with driver dm9601 failed with error -22 [ 1176.538717][T22813] netlink: 212376 bytes leftover after parsing attributes in process `syz.8.4077'. [ 1176.825525][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.836433][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.600012][T17340] usb 4-1: USB disconnect, device number 80 [ 1179.533623][T17340] usb 4-1: new full-speed USB device number 81 using dummy_hcd [ 1179.781005][T17340] usb 4-1: device descriptor read/64, error -71 [ 1180.400133][T22854] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1180.406814][T22854] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 1180.417422][T22854] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1180.431029][T22854] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 1180.441206][T22854] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1180.460918][T22854] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1180.500870][T22854] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1180.511017][T22854] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1180.528325][T22854] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1180.541050][T22854] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1180.580881][T22854] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1180.620840][T22854] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1180.631002][T22854] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 1180.650899][T22854] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 1180.770775][T17340] usb 4-1: new full-speed USB device number 82 using dummy_hcd [ 1180.861962][T22859] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.4091'. [ 1180.930830][T17340] usb 4-1: device descriptor read/64, error -71 [ 1181.090591][T22864] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(8) [ 1181.097125][T22864] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1181.106330][T22864] vhci_hcd vhci_hcd.0: Device attached [ 1181.500946][T17340] usb usb4-port1: attempt power cycle [ 1181.702569][T22865] vhci_hcd: connection closed [ 1181.759459][T10720] vhci_hcd: stop threads [ 1181.989921][T22870] netlink: 'syz.2.4092': attribute type 10 has an invalid length. [ 1182.007481][ T5827] usb 49-1: new high-speed USB device number 2 using vhci_hcd [ 1182.027288][T10720] vhci_hcd: release socket [ 1182.143340][T10720] vhci_hcd: disconnect device [ 1182.188538][T22870] bridge0: port 2(bridge_slave_1) entered disabled state [ 1182.195919][T22870] bridge0: port 1(bridge_slave_0) entered disabled state [ 1182.246376][T22874] loop2: detected capacity change from 0 to 7 [ 1182.296781][T22874] Dev loop2: unable to read RDB block 7 [ 1182.323206][T22874] loop2: unable to read partition table [ 1182.329025][T22874] loop2: partition table beyond EOD, truncated [ 1182.366987][T22874] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1182.392776][T22870] bridge0: port 2(bridge_slave_1) entered blocking state [ 1182.399997][T22870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1182.407504][T22870] bridge0: port 1(bridge_slave_0) entered blocking state [ 1182.414674][T22870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1182.474525][T22870] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1183.852604][T22889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4097'. [ 1184.728293][T22903] netlink: 'syz.2.4100': attribute type 2 has an invalid length. [ 1185.124142][T22906] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1185.130821][T22906] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 1185.137994][T22906] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1185.145544][T22906] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 1185.155767][T22906] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1185.163587][T22906] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1185.178010][T22906] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1185.200772][T22906] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1185.230386][T22906] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1185.238949][T22906] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1185.270911][T22906] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1185.279081][T22906] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1185.300792][T22906] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 1185.318183][T22906] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 1185.690063][T22912] netlink: 392 bytes leftover after parsing attributes in process `syz.7.4105'. [ 1185.976466][T22921] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4106'. [ 1186.063110][T22927] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.4107'. [ 1186.072746][ T30] audit: type=1400 audit(1754023182.486:4344): avc: denied { watch_sb watch_reads } for pid=22919 comm="syz.2.4106" path="/208/file0" dev="tmpfs" ino=1095 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1186.549185][T22929] tipc: Started in network mode [ 1186.590293][T22929] tipc: Node identity 3245964e691d, cluster identity 4711 [ 1186.666676][T22929] tipc: Enabled bearer , priority 0 [ 1186.722951][T22937] syzkaller0: entered promiscuous mode [ 1186.728434][T22937] syzkaller0: entered allmulticast mode [ 1186.811144][ T5906] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1186.835693][T22929] tipc: Resetting bearer [ 1186.961730][ T5906] usb 4-1: Using ep0 maxpacket: 32 [ 1187.015045][T22928] tipc: Resetting bearer [ 1187.016746][ T5906] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1187.050342][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1187.063833][T22928] tipc: Disabling bearer [ 1187.076842][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1187.151799][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1187.163848][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1187.186172][ T5906] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1187.221397][ T5827] vhci_hcd: vhci_device speed not set [ 1187.227026][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1187.245194][ T5906] usb 4-1: Product: syz [ 1187.249384][ T5906] usb 4-1: Manufacturer: syz [ 1187.257638][ T5906] usb 4-1: SerialNumber: syz [ 1187.272101][ T5906] usb 4-1: config 0 descriptor?? [ 1187.577725][T22953] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1187.591482][T22953] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 1187.613755][T22953] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1187.622092][T22953] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 1187.646818][T22953] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1187.756834][T22953] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1187.772144][T22953] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1187.782445][T22953] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1187.790808][T22953] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1187.798929][T22953] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1187.812407][T22953] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1187.819757][T22953] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1187.832849][T18530] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1187.835542][T22953] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 1187.850941][T22953] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 1188.097294][T22958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1188.106985][T22958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1188.509732][T18530] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1188.580861][T18530] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1188.592551][ T5906] iforce 4-1:0.0: usb_submit_urb failed: -110 [ 1188.598654][ T5906] input input74: Device does not respond to id packet M [ 1188.611359][T18530] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1188.622451][ T5906] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1188.631766][T18530] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1188.640135][ T5906] input input74: Device does not respond to id packet P [ 1188.647884][T18530] usb 3-1: Product: syz [ 1188.653733][ T5906] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1188.660349][T18530] usb 3-1: Manufacturer: syz [ 1188.669886][ T5906] input input74: Device does not respond to id packet B [ 1188.680565][T18530] usb 3-1: SerialNumber: syz [ 1188.685788][ T5906] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1188.693154][ T5906] input input74: Device does not respond to id packet N [ 1188.701136][T18530] usb 3-1: config 0 descriptor?? [ 1188.714495][T22954] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1188.723698][T18530] dm9601 3-1:0.0: probe with driver dm9601 failed with error -22 [ 1188.732088][ T5906] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1188.738563][ T5906] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1188.754812][ T5906] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1188.771992][ T5906] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1188.780231][ T5906] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input74 [ 1189.618844][ T5907] usb 4-1: USB disconnect, device number 84 [ 1189.889708][T22978] can: request_module (can-proto-0) failed. [ 1190.364723][T22977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4122'. [ 1190.760094][ T5907] usb 3-1: USB disconnect, device number 98 [ 1191.119991][T22999] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 1191.343013][T23003] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4127'. [ 1191.384209][T22999] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4127'. [ 1191.777585][T22997] netlink: 'syz.2.4127': attribute type 10 has an invalid length. [ 1191.826786][T22997] veth1_macvtap: left promiscuous mode [ 1191.855213][T23010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4130'. [ 1192.074617][T23018] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1192.111228][ T30] audit: type=1400 audit(1754023188.556:4345): avc: denied { override_creds } for pid=23021 comm="syz.7.4132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1192.146882][T23018] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1192.947307][T23036] bridge4: entered promiscuous mode [ 1193.210932][T23043] binder: 23041:23043 ioctl c0306201 200000000440 returned -14 [ 1193.285702][T23044] QAT: Device 7 not found [ 1193.497101][T23043] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1193.577724][ T30] audit: type=1326 audit(1754023190.026:4346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23054 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e5f8eb69 code=0x7ffc0000 [ 1193.772326][ T30] audit: type=1326 audit(1754023190.026:4347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23054 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e5f8eb69 code=0x7ffc0000 [ 1193.806052][T23051] netlink: 'syz.8.4140': attribute type 3 has an invalid length. [ 1193.923475][ T30] audit: type=1326 audit(1754023190.026:4348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23054 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f94e5f8eb69 code=0x7ffc0000 [ 1194.272524][ T30] audit: type=1326 audit(1754023190.026:4349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23054 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e5f8eb69 code=0x7ffc0000 [ 1194.335978][ T30] audit: type=1326 audit(1754023190.026:4350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23054 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e5f8eb69 code=0x7ffc0000 [ 1194.398991][ T30] audit: type=1326 audit(1754023190.026:4351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23054 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f94e5f8eb69 code=0x7ffc0000 [ 1194.517040][ T30] audit: type=1326 audit(1754023190.026:4352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23054 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e5f8eb69 code=0x7ffc0000 [ 1194.543307][ T30] audit: type=1326 audit(1754023190.026:4353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23054 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e5f8eb69 code=0x7ffc0000 [ 1194.889529][ T30] audit: type=1326 audit(1754023190.056:4354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23054 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f94e5f8eb69 code=0x7ffc0000 [ 1195.141907][T23086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4152'. [ 1195.172758][T23086] gtp0: entered promiscuous mode [ 1195.177757][T23086] gtp0: entered allmulticast mode [ 1195.662381][T23092] loop2: detected capacity change from 0 to 7 [ 1195.758986][T23092] Dev loop2: unable to read RDB block 7 [ 1195.870888][T23092] loop2: AHDI p2 [ 1195.875238][T23092] loop2: partition table partially beyond EOD, truncated [ 1195.905429][ T5199] Dev loop2: unable to read RDB block 7 [ 1195.921061][ T5199] loop2: AHDI p2 [ 1196.013291][ T5199] loop2: partition table partially beyond EOD, truncated [ 1197.839798][T23140] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=48 sclass=netlink_xfrm_socket pid=23140 comm=syz.8.4164 [ 1200.311661][T23177] fuse: Bad value for 'rootmode' [ 1200.324193][T23175] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1200.686949][T23183] RGB/YUV Input: ================= START STATUS ================= [ 1200.687568][T23184] RGB/YUV Input: ================= START STATUS ================= [ 1200.791479][T23184] RGB/YUV Input: Test Pattern: 75% Colorbar [ 1200.925361][T23184] RGB/YUV Input: Show Information: All [ 1200.931491][T23184] RGB/YUV Input: Vertical Flip: false [ 1200.937053][T23184] RGB/YUV Input: Horizontal Flip: false [ 1200.943032][T23184] RGB/YUV Input: Brightness: 128 [ 1200.958959][T23184] RGB/YUV Input: Contrast: 128 [ 1201.525724][T23184] RGB/YUV Input: Hue: 0 [ 1201.529990][T23184] RGB/YUV Input: Saturation: 128 [ 1201.609301][T23184] RGB/YUV Input: ================== END STATUS ================== [ 1201.742331][T23198] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=48 sclass=netlink_xfrm_socket pid=23198 comm=syz.3.4182 [ 1201.784211][T23183] RGB/YUV Input: Test Pattern: 75% Colorbar [ 1201.802216][T23183] RGB/YUV Input: Show Information: All [ 1201.807711][T23183] RGB/YUV Input: Vertical Flip: false [ 1201.825507][T23183] RGB/YUV Input: Horizontal Flip: false [ 1201.831589][T23183] RGB/YUV Input: Brightness: 128 [ 1201.836628][T23183] RGB/YUV Input: Contrast: 128 [ 1201.841719][T23183] RGB/YUV Input: Hue: 0 [ 1201.845928][T23183] RGB/YUV Input: Saturation: 128 [ 1201.851560][T23183] RGB/YUV Input: ================== END STATUS ================== [ 1202.101026][ T10] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1202.240827][ T10] usb 3-1: device descriptor read/64, error -71 [ 1202.828242][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1202.838013][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1202.853783][T23213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1202.870831][ T10] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1203.080823][ T10] usb 3-1: device descriptor read/64, error -71 [ 1203.690819][ T10] usb usb3-port1: attempt power cycle [ 1203.820594][T23229] loop2: detected capacity change from 0 to 7 [ 1203.829981][T23229] Dev loop2: unable to read RDB block 7 [ 1203.838001][T23229] loop2: unable to read partition table [ 1203.845311][T23229] loop2: partition table beyond EOD, truncated [ 1203.853452][T23229] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1204.120078][T23240] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4197'. [ 1204.390296][T23247] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1204.428850][T23250] FAULT_INJECTION: forcing a failure. [ 1204.428850][T23250] name failslab, interval 1, probability 0, space 0, times 0 [ 1204.441677][T23250] CPU: 0 UID: 0 PID: 23250 Comm: syz.7.4200 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 1204.441704][T23250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1204.441715][T23250] Call Trace: [ 1204.441724][T23250] [ 1204.441733][T23250] dump_stack_lvl+0x16c/0x1f0 [ 1204.441767][T23250] should_fail_ex+0x512/0x640 [ 1204.441792][T23250] ? fs_reclaim_acquire+0xae/0x150 [ 1204.441819][T23250] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1204.441840][T23250] should_failslab+0xc2/0x120 [ 1204.441862][T23250] __kmalloc_noprof+0xd2/0x510 [ 1204.441888][T23250] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1204.441912][T23250] ? tomoyo_profile+0x47/0x60 [ 1204.441938][T23250] tomoyo_path_number_perm+0x245/0x580 [ 1204.441964][T23250] ? tomoyo_path_number_perm+0x237/0x580 [ 1204.441994][T23250] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1204.442023][T23250] ? find_held_lock+0x2b/0x80 [ 1204.442070][T23250] ? find_held_lock+0x2b/0x80 [ 1204.442091][T23250] ? hook_file_ioctl_common+0x145/0x410 [ 1204.442120][T23250] ? __fget_files+0x20e/0x3c0 [ 1204.442143][T23250] security_file_ioctl+0x9b/0x240 [ 1204.442165][T23250] __x64_sys_ioctl+0xb7/0x210 [ 1204.442193][T23250] do_syscall_64+0xcd/0x4c0 [ 1204.442213][T23250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1204.442232][T23250] RIP: 0033:0x7f94e5f8eb69 [ 1204.442247][T23250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1204.442265][T23250] RSP: 002b:00007f94e6ed5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1204.442284][T23250] RAX: ffffffffffffffda RBX: 00007f94e61b5fa0 RCX: 00007f94e5f8eb69 [ 1204.442296][T23250] RDX: 0000200000000040 RSI: 00000000c04064a0 RDI: 0000000000000003 [ 1204.442308][T23250] RBP: 00007f94e6ed5090 R08: 0000000000000000 R09: 0000000000000000 [ 1204.442318][T23250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1204.442329][T23250] R13: 0000000000000000 R14: 00007f94e61b5fa0 R15: 00007ffec30cb288 [ 1204.442354][T23250] [ 1204.442364][T23250] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1205.694214][T23262] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1205.701452][T23262] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 1205.708829][T23262] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1205.718903][T23262] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 1205.731386][T23262] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1205.738306][T23262] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1205.747541][T23262] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1205.754924][T23262] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1205.762172][T23262] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1205.769847][T23262] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1205.777234][T23262] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1205.784834][T23262] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1205.793911][T23262] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 1205.802966][T23262] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 1207.462758][T23282] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1207.470031][T23282] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 1207.476996][T23282] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1207.484599][T23282] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 1207.491899][T23282] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1207.498498][T23282] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1207.513001][T23282] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1207.520217][T23282] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1207.531703][T23282] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1207.541341][T23282] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1207.552462][T23282] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1207.562017][T23282] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1207.570841][T23282] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 1207.578756][T23282] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 1207.773825][T23274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4208'. [ 1208.451503][T23296] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1208.715797][T23311] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1208.724458][T23311] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 1208.738946][T23311] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1208.751383][T23311] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 1208.760787][T23311] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1208.992557][T23311] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1209.008307][T23311] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1209.015115][T23311] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1209.031441][T23311] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1209.052496][T23311] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1209.349168][T23311] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1209.357573][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 1209.357587][ T30] audit: type=1400 audit(1754023205.696:4396): avc: denied { name_bind } for pid=23315 comm="syz.2.4220" src=212 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1209.385607][ C1] vkms_vblank_simulate: vblank timer overrun [ 1209.391016][T23311] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1209.401385][T23311] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 1209.428092][T23311] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 1210.810384][T23345] can: request_module (can-proto-0) failed. [ 1210.827406][T23329] syz.8.4223 (23329): drop_caches: 2 [ 1211.081403][T23347] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4227'. [ 1211.149741][T23352] FAULT_INJECTION: forcing a failure. [ 1211.149741][T23352] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1211.168089][T23347] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4227'. [ 1211.215362][T23352] CPU: 0 UID: 0 PID: 23352 Comm: syz.3.4229 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 1211.215391][T23352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1211.215401][T23352] Call Trace: [ 1211.215408][T23352] [ 1211.215414][T23352] dump_stack_lvl+0x16c/0x1f0 [ 1211.215445][T23352] should_fail_ex+0x512/0x640 [ 1211.215471][T23352] _copy_from_user+0x2e/0xd0 [ 1211.215497][T23352] memdup_user+0x6b/0xe0 [ 1211.215523][T23352] __x64_sys_kexec_load+0x18e/0x230 [ 1211.215547][T23352] do_syscall_64+0xcd/0x4c0 [ 1211.215561][T23352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1211.215573][T23352] RIP: 0033:0x7f6910d8eb69 [ 1211.215583][T23352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1211.215594][T23352] RSP: 002b:00007f6911c41038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 1211.215605][T23352] RAX: ffffffffffffffda RBX: 00007f6910fb5fa0 RCX: 00007f6910d8eb69 [ 1211.215612][T23352] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000003ff [ 1211.215619][T23352] RBP: 00007f6911c41090 R08: 0000000000000000 R09: 0000000000000000 [ 1211.215625][T23352] R10: 00000000003e0000 R11: 0000000000000246 R12: 0000000000000001 [ 1211.215631][T23352] R13: 0000000000000001 R14: 00007f6910fb5fa0 R15: 00007ffdb086ad58 [ 1211.215645][T23352] [ 1212.034798][T15204] Bluetooth: hci3: ACL packet for unknown connection handle 1346 [ 1212.149015][T23370] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1212.173966][T23370] cramfs: wrong magic [ 1212.423464][T23372] netlink: 'syz.3.4236': attribute type 29 has an invalid length. [ 1212.582613][T23382] netlink: 'syz.8.4239': attribute type 2 has an invalid length. [ 1213.030902][T23394] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1213.039106][T23394] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1213.599264][T23393] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 1213.670875][T23393] bond2: entered promiscuous mode [ 1213.675938][T23393] bond2: entered allmulticast mode [ 1213.681381][T23393] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1213.698885][T23391] binder: 23389:23391 ioctl c018620c 200000000100 returned -1 [ 1213.826147][T23400] ubi31: attaching mtd0 [ 1213.833625][T23400] ubi31: scanning is finished [ 1213.839500][T23400] ubi31: empty MTD device detected [ 1213.931078][ T5907] usb 3-1: new full-speed USB device number 102 using dummy_hcd [ 1213.944029][T23400] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1213.960795][T23400] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1213.968223][T23400] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1213.976920][T23400] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 1213.984898][T23400] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1213.992124][T23400] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1214.001730][T23400] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1754407930 [ 1214.012239][T23400] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1214.024961][T23402] ubi31: background thread "ubi_bgt31d" started, PID 23402 [ 1215.830384][T23427] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.4252'. [ 1216.223184][ T10] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1216.453500][T23437] tipc: Cannot configure node identity twice [ 1216.498077][ T5928] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1216.511244][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 1216.519255][T23437] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=23437 comm=syz.8.4255 [ 1216.551702][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1216.566188][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1216.686679][T15204] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1216.687758][T23438] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4255'. [ 1216.697248][T15204] CPU: 1 UID: 0 PID: 15204 Comm: kworker/u9:1 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 1216.697277][T15204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1216.697289][T15204] Workqueue: hci3 hci_rx_work [ 1216.697320][T15204] Call Trace: [ 1216.697326][T15204] [ 1216.697333][T15204] dump_stack_lvl+0x16c/0x1f0 [ 1216.697367][T15204] sysfs_warn_dup+0x7f/0xa0 [ 1216.697389][T15204] sysfs_create_dir_ns+0x24b/0x2b0 [ 1216.697409][T15204] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1216.697428][T15204] ? find_held_lock+0x2b/0x80 [ 1216.697454][T15204] ? do_raw_spin_unlock+0x172/0x230 [ 1216.697474][T15204] kobject_add_internal+0x2c4/0x9b0 [ 1216.697497][T15204] kobject_add+0x16e/0x240 [ 1216.697516][T15204] ? __pfx_kobject_add+0x10/0x10 [ 1216.697538][T15204] ? kobject_put+0xab/0x5a0 [ 1216.697561][T15204] device_add+0x288/0x1a70 [ 1216.697584][T15204] ? __pfx_dev_set_name+0x10/0x10 [ 1216.697607][T15204] ? __pfx_device_add+0x10/0x10 [ 1216.697628][T15204] ? mgmt_send_event_skb+0x2fb/0x460 [ 1216.697656][T15204] hci_conn_add_sysfs+0x17e/0x230 [ 1216.697680][T15204] le_conn_complete_evt+0x1075/0x1d70 [ 1216.697707][T15204] ? irqentry_exit+0x3b/0x90 [ 1216.697731][T15204] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1216.697760][T15204] hci_le_conn_complete_evt+0x23c/0x370 [ 1216.697787][T15204] hci_le_meta_evt+0x357/0x5e0 [ 1216.697809][T15204] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1216.697833][T15204] hci_event_packet+0x685/0x11c0 [ 1216.697854][T15204] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1216.697877][T15204] ? __pfx_hci_event_packet+0x10/0x10 [ 1216.697902][T15204] ? kcov_remote_start+0x3d9/0x6d0 [ 1216.697926][T15204] hci_rx_work+0x2c5/0x16b0 [ 1216.697954][T15204] process_one_work+0x9cf/0x1b70 [ 1216.697980][T15204] ? __pfx_process_one_work+0x10/0x10 [ 1216.698004][T15204] ? assign_work+0x1a0/0x250 [ 1216.698022][T15204] worker_thread+0x6c8/0xf10 [ 1216.698045][T15204] ? __kthread_parkme+0x19e/0x250 [ 1216.698068][T15204] ? __pfx_worker_thread+0x10/0x10 [ 1216.698084][T15204] kthread+0x3c5/0x780 [ 1216.698104][T15204] ? __pfx_kthread+0x10/0x10 [ 1216.698121][T15204] ? rcu_is_watching+0x12/0xc0 [ 1216.698140][T15204] ? __pfx_kthread+0x10/0x10 [ 1216.698157][T15204] ret_from_fork+0x5d4/0x6f0 [ 1216.698171][T15204] ? __pfx_kthread+0x10/0x10 [ 1216.698187][T15204] ret_from_fork_asm+0x1a/0x30 [ 1216.698221][T15204] [ 1216.698267][T15204] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1216.722368][ T10] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1216.728890][T15204] Bluetooth: hci3: failed to register connection device [ 1216.742486][ T30] audit: type=1400 audit(1754023213.136:4397): avc: denied { accept } for pid=23435 comm="syz.8.4255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1217.009102][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1217.243340][ T10] usb 1-1: config 0 descriptor?? [ 1217.312485][ T5928] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1217.346259][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1217.356815][ T5928] usb 4-1: config 0 descriptor?? [ 1217.393791][T23444] netlink: 'syz.7.4257': attribute type 3 has an invalid length. [ 1217.592655][T23457] loop2: detected capacity change from 0 to 7 [ 1217.608733][T14987] Dev loop2: unable to read RDB block 7 [ 1217.615482][T14987] loop2: AHDI p2 [ 1217.619244][T14987] loop2: partition table partially beyond EOD, truncated [ 1217.630287][T23457] Dev loop2: unable to read RDB block 7 [ 1217.638705][T23457] loop2: AHDI p2 [ 1217.644171][T23457] loop2: partition table partially beyond EOD, truncated [ 1217.709609][ T10] savu 0003:1E7D:2D5A.001F: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 1218.146030][T23434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1218.161163][T23434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1218.183761][ T10] usb 1-1: USB disconnect, device number 68 [ 1218.356383][T23468] tipc: Started in network mode [ 1218.362291][T23468] tipc: Node identity 5, cluster identity 4711 [ 1218.368613][T23468] tipc: Node number set to 5 [ 1218.378418][T23468] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=23468 comm=syz.7.4264 [ 1218.392787][T23434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1218.406933][T23434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1218.553749][T21178] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1218.561505][T23471] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4264'. [ 1218.579216][T21178] CPU: 0 UID: 0 PID: 21178 Comm: kworker/u9:3 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 1218.579248][T21178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1218.579261][T21178] Workqueue: hci1 hci_rx_work [ 1218.579293][T21178] Call Trace: [ 1218.579300][T21178] [ 1218.579312][T21178] dump_stack_lvl+0x16c/0x1f0 [ 1218.579344][T21178] sysfs_warn_dup+0x7f/0xa0 [ 1218.579368][T21178] sysfs_create_dir_ns+0x24b/0x2b0 [ 1218.579391][T21178] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1218.579412][T21178] ? find_held_lock+0x2b/0x80 [ 1218.579439][T21178] ? do_raw_spin_unlock+0x172/0x230 [ 1218.579463][T21178] kobject_add_internal+0x2c4/0x9b0 [ 1218.579488][T21178] kobject_add+0x16e/0x240 [ 1218.579508][T21178] ? __pfx_kobject_add+0x10/0x10 [ 1218.579530][T21178] ? do_raw_spin_unlock+0x172/0x230 [ 1218.579547][T21178] ? kobject_put+0xab/0x5a0 [ 1218.579581][T21178] device_add+0x288/0x1a70 [ 1218.579607][T21178] ? __pfx_dev_set_name+0x10/0x10 [ 1218.579635][T21178] ? __pfx_device_add+0x10/0x10 [ 1218.579658][T21178] ? mgmt_send_event_skb+0x2fb/0x460 [ 1218.579686][T21178] hci_conn_add_sysfs+0x17e/0x230 [ 1218.579713][T21178] le_conn_complete_evt+0x1075/0x1d70 [ 1218.579743][T21178] ? find_held_lock+0x2b/0x80 [ 1218.579764][T21178] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1218.579787][T21178] ? hci_event_packet+0x459/0x11c0 [ 1218.579812][T21178] ? __mutex_unlock_slowpath+0x163/0x800 [ 1218.579834][T21178] hci_le_conn_complete_evt+0x23c/0x370 [ 1218.579863][T21178] hci_le_meta_evt+0x357/0x5e0 [ 1218.579885][T21178] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1218.579911][T21178] hci_event_packet+0x685/0x11c0 [ 1218.579935][T21178] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1218.579960][T21178] ? __pfx_hci_event_packet+0x10/0x10 [ 1218.579985][T21178] ? kcov_remote_start+0x3c9/0x6d0 [ 1218.580006][T21178] ? lockdep_hardirqs_on+0x7c/0x110 [ 1218.580039][T21178] hci_rx_work+0x2c5/0x16b0 [ 1218.580067][T21178] ? rcu_is_watching+0x12/0xc0 [ 1218.580091][T21178] process_one_work+0x9cf/0x1b70 [ 1218.580122][T21178] ? __pfx_process_one_work+0x10/0x10 [ 1218.580149][T21178] ? assign_work+0x1a0/0x250 [ 1218.580171][T21178] worker_thread+0x6c8/0xf10 [ 1218.580199][T21178] ? __kthread_parkme+0x19e/0x250 [ 1218.580227][T21178] ? __pfx_worker_thread+0x10/0x10 [ 1218.580246][T21178] kthread+0x3c5/0x780 [ 1218.580265][T21178] ? __pfx_kthread+0x10/0x10 [ 1218.580285][T21178] ? rcu_is_watching+0x12/0xc0 [ 1218.580306][T21178] ? __pfx_kthread+0x10/0x10 [ 1218.580324][T21178] ret_from_fork+0x5d4/0x6f0 [ 1218.580339][T21178] ? __pfx_kthread+0x10/0x10 [ 1218.580355][T21178] ret_from_fork_asm+0x1a/0x30 [ 1218.580387][T21178] [ 1218.581755][T21178] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1219.033257][ T10] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1219.056488][T21178] Bluetooth: hci1: failed to register connection device [ 1219.172108][ T5928] usb 4-1: Cannot set autoneg [ 1219.177104][ T5928] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 1219.220926][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 1219.268956][ T10] usb 1-1: device descriptor read/all, error -71 [ 1219.308102][T15204] Bluetooth: hci4: ACL packet for unknown connection handle 1346 [ 1219.451249][T23480] netlink: 60 bytes leftover after parsing attributes in process `syz.8.4267'. [ 1219.460324][T23480] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4267'. [ 1219.713236][ T5928] usb 4-1: USB disconnect, device number 85 [ 1219.943723][T23483] tipc: Started in network mode [ 1219.948608][T23483] tipc: Node identity 5, cluster identity 4711 [ 1219.980827][T23483] tipc: Node number set to 5 [ 1220.002559][T23483] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=23483 comm=syz.2.4269 [ 1220.122316][T15204] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1220.141415][T15204] CPU: 0 UID: 0 PID: 15204 Comm: kworker/u9:1 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 1220.141451][T15204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1220.141466][T15204] Workqueue: hci4 hci_rx_work [ 1220.141498][T15204] Call Trace: [ 1220.141505][T15204] [ 1220.141511][T15204] dump_stack_lvl+0x16c/0x1f0 [ 1220.141539][T15204] sysfs_warn_dup+0x7f/0xa0 [ 1220.141558][T15204] sysfs_create_dir_ns+0x24b/0x2b0 [ 1220.141575][T15204] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1220.141591][T15204] ? find_held_lock+0x2b/0x80 [ 1220.141612][T15204] ? do_raw_spin_unlock+0x172/0x230 [ 1220.141628][T15204] kobject_add_internal+0x2c4/0x9b0 [ 1220.141647][T15204] kobject_add+0x16e/0x240 [ 1220.141663][T15204] ? __pfx_kobject_add+0x10/0x10 [ 1220.141684][T15204] ? kobject_put+0xab/0x5a0 [ 1220.141707][T15204] device_add+0x288/0x1a70 [ 1220.141729][T15204] ? __pfx_device_add+0x10/0x10 [ 1220.141749][T15204] ? __kmalloc_node_track_caller_noprof+0x2a1/0x510 [ 1220.141773][T15204] hci_conn_add_sysfs+0x17e/0x230 [ 1220.141795][T15204] le_conn_complete_evt+0x1075/0x1d70 [ 1220.141819][T15204] ? find_held_lock+0x2b/0x80 [ 1220.141835][T15204] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1220.141862][T15204] hci_le_conn_complete_evt+0x23c/0x370 [ 1220.141886][T15204] hci_le_meta_evt+0x357/0x5e0 [ 1220.141906][T15204] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1220.141928][T15204] hci_event_packet+0x685/0x11c0 [ 1220.141947][T15204] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1220.141969][T15204] ? __pfx_hci_event_packet+0x10/0x10 [ 1220.141992][T15204] ? kcov_remote_start+0x3d9/0x6d0 [ 1220.142013][T15204] hci_rx_work+0x2c5/0x16b0 [ 1220.142038][T15204] process_one_work+0x9cf/0x1b70 [ 1220.142063][T15204] ? __pfx_process_one_work+0x10/0x10 [ 1220.142084][T15204] ? assign_work+0x1a0/0x250 [ 1220.142100][T15204] worker_thread+0x6c8/0xf10 [ 1220.142122][T15204] ? __kthread_parkme+0x19e/0x250 [ 1220.142144][T15204] ? __pfx_worker_thread+0x10/0x10 [ 1220.142159][T15204] kthread+0x3c5/0x780 [ 1220.142173][T15204] ? __pfx_kthread+0x10/0x10 [ 1220.142188][T15204] ? rcu_is_watching+0x12/0xc0 [ 1220.142205][T15204] ? __pfx_kthread+0x10/0x10 [ 1220.142220][T15204] ret_from_fork+0x5d4/0x6f0 [ 1220.142233][T15204] ? __pfx_kthread+0x10/0x10 [ 1220.142247][T15204] ret_from_fork_asm+0x1a/0x30 [ 1220.142283][T15204] [ 1220.201048][T15204] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1220.227145][T23485] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4269'. [ 1220.228309][T15204] Bluetooth: hci4: failed to register connection device [ 1223.973636][T23524] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=48 sclass=netlink_xfrm_socket pid=23524 comm=syz.2.4281 [ 1224.052727][T23514] can: request_module (can-proto-0) failed. [ 1224.438749][T23521] can: request_module (can-proto-0) failed. [ 1225.551303][T23543] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1225.574588][T23543] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 1225.584405][T23543] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1225.606344][T23543] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 1225.619442][T23513] pim6reg: entered allmulticast mode [ 1225.626357][T23543] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1225.644931][T23543] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1225.656290][T23543] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1225.664723][T23543] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1225.671955][T23543] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1225.680682][T23543] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1225.683300][T23513] pim6reg: left allmulticast mode [ 1225.687414][T23543] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1225.687458][T23543] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1225.687523][T23543] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 1225.715524][T23543] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 1225.844911][T23554] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=23554 comm=syz.0.4290 [ 1225.978990][T23555] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4290'. [ 1226.008888][T21178] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 1226.020486][T21178] CPU: 1 UID: 0 PID: 21178 Comm: kworker/u9:3 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 1226.020515][T21178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1226.020524][T21178] Workqueue: hci5 hci_rx_work [ 1226.020545][T21178] Call Trace: [ 1226.020550][T21178] [ 1226.020555][T21178] dump_stack_lvl+0x16c/0x1f0 [ 1226.020576][T21178] sysfs_warn_dup+0x7f/0xa0 [ 1226.020590][T21178] sysfs_create_dir_ns+0x24b/0x2b0 [ 1226.020603][T21178] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1226.020616][T21178] ? find_held_lock+0x2b/0x80 [ 1226.020635][T21178] ? do_raw_spin_unlock+0x172/0x230 [ 1226.020648][T21178] kobject_add_internal+0x2c4/0x9b0 [ 1226.020663][T21178] kobject_add+0x16e/0x240 [ 1226.020675][T21178] ? __pfx_kobject_add+0x10/0x10 [ 1226.020689][T21178] ? kobject_put+0xab/0x5a0 [ 1226.020713][T21178] device_add+0x288/0x1a70 [ 1226.020737][T21178] ? __pfx_dev_set_name+0x10/0x10 [ 1226.020771][T21178] ? __pfx_device_add+0x10/0x10 [ 1226.020797][T21178] ? mgmt_send_event_skb+0x2fb/0x460 [ 1226.020830][T21178] hci_conn_add_sysfs+0x17e/0x230 [ 1226.020852][T21178] le_conn_complete_evt+0x1075/0x1d70 [ 1226.020870][T21178] ? find_held_lock+0x2b/0x80 [ 1226.020882][T21178] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1226.020896][T21178] ? hci_event_packet+0x459/0x11c0 [ 1226.020914][T21178] ? __mutex_unlock_slowpath+0x163/0x800 [ 1226.020927][T21178] hci_le_conn_complete_evt+0x23c/0x370 [ 1226.020945][T21178] hci_le_meta_evt+0x357/0x5e0 [ 1226.020961][T21178] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1226.020978][T21178] hci_event_packet+0x685/0x11c0 [ 1226.020992][T21178] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1226.021009][T21178] ? __pfx_hci_event_packet+0x10/0x10 [ 1226.021026][T21178] ? kcov_remote_start+0x3d9/0x6d0 [ 1226.021043][T21178] hci_rx_work+0x2c5/0x16b0 [ 1226.021062][T21178] process_one_work+0x9cf/0x1b70 [ 1226.021080][T21178] ? __pfx_process_one_work+0x10/0x10 [ 1226.021096][T21178] ? assign_work+0x1a0/0x250 [ 1226.021108][T21178] worker_thread+0x6c8/0xf10 [ 1226.021124][T21178] ? __kthread_parkme+0x19e/0x250 [ 1226.021146][T21178] ? __pfx_worker_thread+0x10/0x10 [ 1226.021158][T21178] kthread+0x3c5/0x780 [ 1226.021169][T21178] ? __pfx_kthread+0x10/0x10 [ 1226.021186][T21178] ? rcu_is_watching+0x12/0xc0 [ 1226.021201][T21178] ? __pfx_kthread+0x10/0x10 [ 1226.021211][T21178] ret_from_fork+0x5d4/0x6f0 [ 1226.021223][T21178] ? __pfx_kthread+0x10/0x10 [ 1226.021234][T21178] ret_from_fork_asm+0x1a/0x30 [ 1226.021256][T21178] [ 1226.260865][T21178] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1226.277454][T21178] Bluetooth: hci5: failed to register connection device [ 1226.490882][T23551] tipc: Started in network mode [ 1226.527654][T23551] tipc: Node identity 5, cluster identity 4711 [ 1226.559588][T23551] tipc: Node number set to 5 [ 1226.929572][T23565] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=48 sclass=netlink_xfrm_socket pid=23565 comm=syz.3.4294 [ 1226.993493][T23567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1227.143586][T23570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4296'. [ 1227.503501][T23577] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4297'. [ 1228.898604][T23607] FAULT_INJECTION: forcing a failure. [ 1228.898604][T23607] name failslab, interval 1, probability 0, space 0, times 0 [ 1228.935304][T23607] CPU: 0 UID: 0 PID: 23607 Comm: syz.8.4306 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 1228.935323][T23607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1228.935331][T23607] Call Trace: [ 1228.935335][T23607] [ 1228.935340][T23607] dump_stack_lvl+0x16c/0x1f0 [ 1228.935362][T23607] should_fail_ex+0x512/0x640 [ 1228.935379][T23607] ? fs_reclaim_acquire+0xae/0x150 [ 1228.935396][T23607] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1228.935410][T23607] should_failslab+0xc2/0x120 [ 1228.935424][T23607] __kmalloc_noprof+0xd2/0x510 [ 1228.935439][T23607] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1228.935454][T23607] ? tomoyo_profile+0x47/0x60 [ 1228.935469][T23607] tomoyo_path_number_perm+0x245/0x580 [ 1228.935487][T23607] ? tomoyo_path_number_perm+0x237/0x580 [ 1228.935505][T23607] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1228.935524][T23607] ? find_held_lock+0x2b/0x80 [ 1228.935550][T23607] ? find_held_lock+0x2b/0x80 [ 1228.935563][T23607] ? hook_file_ioctl_common+0x145/0x410 [ 1228.935580][T23607] ? __fget_files+0x20e/0x3c0 [ 1228.935594][T23607] security_file_ioctl+0x9b/0x240 [ 1228.935608][T23607] __x64_sys_ioctl+0xb7/0x210 [ 1228.935626][T23607] do_syscall_64+0xcd/0x4c0 [ 1228.935638][T23607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1228.935650][T23607] RIP: 0033:0x7f674b58eb69 [ 1228.935659][T23607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1228.935671][T23607] RSP: 002b:00007f674c4ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1228.935681][T23607] RAX: ffffffffffffffda RBX: 00007f674b7b5fa0 RCX: 00007f674b58eb69 [ 1228.935689][T23607] RDX: 00002000000000c0 RSI: 00000000405c5503 RDI: 0000000000000003 [ 1228.935696][T23607] RBP: 00007f674c4ce090 R08: 0000000000000000 R09: 0000000000000000 [ 1228.935702][T23607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1228.935709][T23607] R13: 0000000000000000 R14: 00007f674b7b5fa0 R15: 00007fffb5e71618 [ 1228.935722][T23607] [ 1228.935728][T23607] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1230.771581][T23641] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4312'. [ 1232.025336][T23665] No control pipe specified [ 1337.160673][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1337.167641][ C1] rcu: 0-...!: (0 ticks this GP) idle=34dc/1/0x4000000000000000 softirq=138052/138052 fqs=1 [ 1337.178886][ C1] rcu: (detected by 1, t=10502 jiffies, g=104809, q=67 ncpus=2) [ 1337.186606][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1337.186634][ C0] NMI backtrace for cpu 0 [ 1337.186647][ C0] CPU: 0 UID: 0 PID: 23669 Comm: syz.0.4319 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 1337.186665][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1337.186677][ C0] RIP: 0010:lock_release+0x45/0x2f0 [ 1337.186702][ C0] Code: e9 b8 38 12 48 89 44 24 10 31 c0 0f 1f 44 00 00 65 8b 05 02 b9 38 12 83 f8 07 0f 87 38 02 00 00 89 c0 48 0f a3 05 4b 0d 10 0f <0f> 82 b1 01 00 00 8b 3d 33 3f 10 0f 85 ff 0f 84 25 01 00 00 65 8b [ 1337.186714][ C0] RSP: 0018:ffffc90000007de0 EFLAGS: 00000097 [ 1337.186726][ C0] RAX: 0000000000000000 RBX: ffff8880b8427c98 RCX: ffffffff81a82881 [ 1337.186735][ C0] RDX: 1ffff1100594da6d RSI: ffffffff81a82f09 RDI: ffff8880b8427c98 [ 1337.186744][ C0] RBP: 0000000000000046 R08: 0000000000000005 R09: 0000000000000000 [ 1337.186752][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff81a82f09 [ 1337.186760][ C0] R13: 1865368624000000 R14: ffff88802ca6d340 R15: ffffffff89a09ea0 [ 1337.186769][ C0] FS: 00007f57ca4636c0(0000) GS:ffff888124719000(0000) knlGS:0000000000000000 [ 1337.186783][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1337.186792][ C0] CR2: 0000001b2f417ff8 CR3: 00000000955d8000 CR4: 00000000003526f0 [ 1337.186800][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000040020 [ 1337.186808][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1337.186816][ C0] Call Trace: [ 1337.186822][ C0] [ 1337.186830][ C0] ? __pfx_advance_sched+0x10/0x10 [ 1337.186847][ C0] _raw_spin_unlock_irqrestore+0x1a/0x80 [ 1337.186867][ C0] __hrtimer_run_queues+0x529/0xad0 [ 1337.186884][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1337.186897][ C0] ? read_tsc+0x9/0x20 [ 1337.186917][ C0] hrtimer_interrupt+0x397/0x8e0 [ 1337.186935][ C0] __sysvec_apic_timer_interrupt+0x10b/0x3f0 [ 1337.186951][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 1337.186969][ C0] [ 1337.186973][ C0] [ 1337.186979][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1337.186993][ C0] RIP: 0010:lock_acquire+0x62/0x350 [ 1337.187012][ C0] Code: b2 38 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 92 06 10 0f 0f 82 74 02 00 00 8b 35 7a 38 10 0f 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 e9 b1 38 12 0f 85 c7 02 00 00 48 83 c4 [ 1337.187024][ C0] RSP: 0018:ffffc9000471f6c8 EFLAGS: 00000206 [ 1337.187035][ C0] RAX: 0000000000000046 RBX: ffffffff8e5c1060 RCX: 00000000ef9d33e4 [ 1337.187044][ C0] RDX: 0000000000000000 RSI: ffffffff8ddf01fe RDI: ffffffff8c15fc80 [ 1337.187053][ C0] RBP: 0000000000000002 R08: 0ac0d5affe09d4ff R09: 0000000000000000 [ 1337.187061][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 1337.187069][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1337.187084][ C0] ? is_module_text_address+0x144/0x230 [ 1337.187098][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1337.187115][ C0] is_bpf_text_address+0x36/0x1a0 [ 1337.187130][ C0] ? is_bpf_text_address+0x25/0x1a0 [ 1337.187143][ C0] kernel_text_address+0x8d/0x100 [ 1337.187158][ C0] ? is_bpf_text_address+0x8a/0x1a0 [ 1337.187171][ C0] __kernel_text_address+0xd/0x40 [ 1337.187184][ C0] unwind_get_return_address+0x59/0xa0 [ 1337.187199][ C0] arch_stack_walk+0xa6/0x100 [ 1337.187218][ C0] stack_trace_save+0x8e/0xc0 [ 1337.187234][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1337.187251][ C0] ? __lock_acquire+0xb8a/0x1c90 [ 1337.187269][ C0] kasan_save_stack+0x33/0x60 [ 1337.187284][ C0] ? kasan_save_stack+0x33/0x60 [ 1337.187296][ C0] ? kasan_save_track+0x14/0x30 [ 1337.187308][ C0] ? kasan_save_free_info+0x3b/0x60 [ 1337.187325][ C0] ? __kasan_slab_free+0x51/0x70 [ 1337.187338][ C0] ? kfree+0x2b4/0x4d0 [ 1337.187355][ C0] ? mpi_free+0x9a/0x160 [ 1337.187368][ C0] ? dh_clear_ctx+0x70/0xa0 [ 1337.187381][ C0] ? crypto_destroy_tfm+0x135/0x2b0 [ 1337.187398][ C0] ? __keyctl_dh_compute+0xb28/0x10e0 [ 1337.187413][ C0] ? keyctl_dh_compute+0xd2/0x140 [ 1337.187427][ C0] ? __do_sys_keyctl+0x4df/0x590 [ 1337.187445][ C0] ? do_syscall_64+0xcd/0x4c0 [ 1337.187457][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1337.187482][ C0] kasan_save_track+0x14/0x30 [ 1337.187494][ C0] kasan_save_free_info+0x3b/0x60 [ 1337.187512][ C0] __kasan_slab_free+0x51/0x70 [ 1337.187525][ C0] kfree+0x2b4/0x4d0 [ 1337.187542][ C0] ? rcu_is_watching+0x12/0xc0 [ 1337.187557][ C0] ? __phys_addr+0xe8/0x180 [ 1337.187572][ C0] ? mpi_free+0x9a/0x160 [ 1337.187586][ C0] mpi_free+0x9a/0x160 [ 1337.187600][ C0] ? __pfx_crypto_kpp_exit_tfm+0x10/0x10 [ 1337.187612][ C0] dh_clear_ctx+0x70/0xa0 [ 1337.187624][ C0] crypto_destroy_tfm+0x135/0x2b0 [ 1337.187642][ C0] __keyctl_dh_compute+0xb28/0x10e0 [ 1337.187660][ C0] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 1337.187684][ C0] ? __lock_acquire+0xb8a/0x1c90 [ 1337.187712][ C0] keyctl_dh_compute+0xd2/0x140 [ 1337.187726][ C0] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 1337.187741][ C0] ? __x64_sys_futex+0x1e0/0x4c0 [ 1337.187762][ C0] ? xfd_validate_state+0x61/0x180 [ 1337.187782][ C0] __do_sys_keyctl+0x4df/0x590 [ 1337.187802][ C0] do_syscall_64+0xcd/0x4c0 [ 1337.187814][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1337.187827][ C0] RIP: 0033:0x7f57c958eb69 [ 1337.187838][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1337.187849][ C0] RSP: 002b:00007f57ca463038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1337.187861][ C0] RAX: ffffffffffffffda RBX: 00007f57c97b5fa0 RCX: 00007f57c958eb69 [ 1337.187870][ C0] RDX: 0000200000000480 RSI: 0000200000000400 RDI: 0000000000000017 [ 1337.187879][ C0] RBP: 00007f57c9611df1 R08: 0000200000000580 R09: 0000000000000000 [ 1337.187887][ C0] R10: 00000000000000c7 R11: 0000000000000246 R12: 0000000000000000 [ 1337.187896][ C0] R13: 0000000000000000 R14: 00007f57c97b5fa0 R15: 00007fff97b6ddf8 [ 1337.187909][ C0] [ 1337.188628][ C1] rcu: rcu_preempt kthread starved for 10495 jiffies! g104809 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1337.778369][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1337.788325][ C1] rcu: RCU grace-period kthread stack dump: [ 1337.794195][ C1] task:rcu_preempt state:R running task stack:27784 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 1337.807672][ C1] Call Trace: [ 1337.810947][ C1] [ 1337.813892][ C1] __schedule+0x1190/0x5df0 [ 1337.818423][ C1] ? __lock_acquire+0x622/0x1c90 [ 1337.823375][ C1] ? __pfx___schedule+0x10/0x10 [ 1337.828240][ C1] ? find_held_lock+0x2b/0x80 [ 1337.832927][ C1] ? schedule+0x2d7/0x3a0 [ 1337.837287][ C1] schedule+0xe7/0x3a0 [ 1337.841361][ C1] schedule_timeout+0x123/0x290 [ 1337.846207][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1337.851572][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1337.856871][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1337.862671][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 1337.868167][ C1] rcu_gp_fqs_loop+0x1ea/0xb00 [ 1337.872957][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1337.878257][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1337.883457][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 1337.888419][ C1] ? rcu_gp_cleanup+0x7c1/0xd90 [ 1337.893278][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1337.899084][ C1] rcu_gp_kthread+0x270/0x380 [ 1337.903758][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1337.908952][ C1] ? rcu_is_watching+0x12/0xc0 [ 1337.913706][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1337.918903][ C1] ? __kthread_parkme+0x19e/0x250 [ 1337.923925][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1337.929119][ C1] kthread+0x3c5/0x780 [ 1337.933182][ C1] ? __pfx_kthread+0x10/0x10 [ 1337.937764][ C1] ? rcu_is_watching+0x12/0xc0 [ 1337.942517][ C1] ? __pfx_kthread+0x10/0x10 [ 1337.947099][ C1] ret_from_fork+0x5d4/0x6f0 [ 1337.951677][ C1] ? __pfx_kthread+0x10/0x10 [ 1337.956257][ C1] ret_from_fork_asm+0x1a/0x30 [ 1337.961024][ C1] [ 1337.964029][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1337.970338][ C1] CPU: 1 UID: 0 PID: 23634 Comm: syz.7.4310 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 1337.982039][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1337.992080][ C1] RIP: 0010:smp_call_function_many_cond+0xe02/0x1600 [ 1337.998746][ C1] Code: 10 4c 89 74 24 10 49 89 d5 48 89 d5 48 89 54 24 18 49 c1 ed 03 83 e5 07 4d 01 e5 83 c5 03 e8 b5 11 0c 00 f3 90 41 0f b6 45 00 <40> 38 c5 7c 08 84 c0 0f 85 e0 05 00 00 8b 43 08 31 ff 83 e0 01 41 [ 1338.018338][ C1] RSP: 0018:ffffc9000467f708 EFLAGS: 00000293 [ 1338.024389][ C1] RAX: 0000000000000000 RBX: ffff8880b8442260 RCX: ffffffff81af71b1 [ 1338.032352][ C1] RDX: ffff88807b140000 RSI: ffffffff81af718b RDI: 0000000000000005 [ 1338.040312][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 1338.048267][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 1338.056222][ C1] R13: ffffed101708844d R14: 0000000000000001 R15: 0000000000000000 [ 1338.064176][ C1] FS: 0000000000000000(0000) GS:ffff888124819000(0000) knlGS:0000000000000000 [ 1338.073093][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1338.079667][ C1] CR2: 00007f6911c20d58 CR3: 000000007b4e5000 CR4: 00000000003526f0 [ 1338.087632][ C1] DR0: 0000000000000007 DR1: 7fffffffffffffff DR2: 0000000000000fb3 [ 1338.095594][ C1] DR3: 0000000000000101 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1338.103554][ C1] Call Trace: [ 1338.106821][ C1] [ 1338.109741][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 1338.114943][ C1] ? free_pgd_range+0x2c6/0x12e0 [ 1338.119869][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1338.126200][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 1338.131395][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 1338.136499][ C1] flush_tlb_mm_range+0x4a0/0x1790 [ 1338.141614][ C1] ? __pfx_free_pgtables+0x10/0x10 [ 1338.146713][ C1] ? mas_next_slot+0x12d3/0x21b0 [ 1338.151637][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 1338.157180][ C1] tlb_finish_mmu+0x3c9/0x7c0 [ 1338.161854][ C1] exit_mmap+0x403/0xb90 [ 1338.166093][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1338.170879][ C1] __mmput+0x12a/0x410 [ 1338.174940][ C1] mmput+0x62/0x70 [ 1338.178649][ C1] do_exit+0x7c7/0x2bf0 [ 1338.182796][ C1] ? __pfx___might_resched+0x10/0x10 [ 1338.188081][ C1] ? __pfx_do_exit+0x10/0x10 [ 1338.192666][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 1338.197678][ C1] ? find_held_lock+0x2b/0x80 [ 1338.202347][ C1] do_group_exit+0xd3/0x2a0 [ 1338.206844][ C1] get_signal+0x2673/0x26d0 [ 1338.211342][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 1338.216274][ C1] ? lock_acquire+0x179/0x350 [ 1338.220947][ C1] ? __pfx_get_signal+0x10/0x10 [ 1338.225788][ C1] ? do_futex+0x122/0x350 [ 1338.230117][ C1] arch_do_signal_or_restart+0x8f/0x7d0 [ 1338.235653][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1338.241805][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1338.247341][ C1] exit_to_user_mode_loop+0x84/0x110 [ 1338.252615][ C1] do_syscall_64+0x3f6/0x4c0 [ 1338.257195][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1338.263074][ C1] RIP: 0033:0x7f94e5f8eb69 [ 1338.267475][ C1] Code: Unable to access opcode bytes at 0x7f94e5f8eb3f. [ 1338.274477][ C1] RSP: 002b:00007f94e6eb4038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1338.282894][ C1] RAX: 0000000000010106 RBX: 00007f94e61b6080 RCX: 00007f94e5f8eb69 [ 1338.290867][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000006 [ 1338.298824][ C1] RBP: 00007f94e6011df1 R08: 0000000000000000 R09: 0000000000000000 [ 1338.306782][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1338.314739][ C1] R13: 0000000000000000 R14: 00007f94e61b6080 R15: 00007ffec30cb288 [ 1338.322710][ C1]